[
  {
    "path": "go.mod",
    "content": "module github.com/lcvvvv/gonmap\n\ngo 1.16\n\nrequire github.com/miekg/dns v1.1.50\n"
  },
  {
    "path": "gonmap.go",
    "content": "package gonmap\n\nimport (\n\t\"log\"\n\t\"os\"\n\t\"regexp\"\n\t\"strings\"\n\t\"time\"\n)\n\nvar nmap *Nmap\n\nvar ProbesCount = 0     //探针数\nvar MatchCount = 0      //指纹数\nvar UsedProbesCount = 0 //已使用探针数\nvar UsedMatchCount = 0  //已使用指纹数\n\nvar logger = Logger(log.New(os.Stderr, \"[gonmap] \", log.Ldate|log.Ltime|log.Lshortfile))\n\ntype Logger interface {\n\tPrintf(format string, v ...interface{})\n\tPrintln(v ...interface{})\n}\n\n//r[\"PROBE\"] 总探针数、r[\"MATCH\"] 总指纹数 、r[\"USED_PROBE\"] 已使用探针数、r[\"USED_MATCH\"] 已使用指纹数\nfunc init() {\n\tinitWithFilter(9)\n}\n\nfunc initWithFilter(filter int) {\n\t//初始化NMAP探针库\n\trepairNMAPString()\n\tnmap = &Nmap{\n\t\texclude:      emptyPortList,\n\t\tprobeNameMap: make(map[string]*probe),\n\t\tprobeSort:    []string{},\n\t\tportProbeMap: make(map[int]ProbeList),\n\n\t\tfilter:  filter,\n\t\ttimeout: time.Second,\n\n\t\tprobeUsed:          emptyProbeList,\n\t\tbypassAllProbePort: []int{161, 137, 139, 135, 389, 443, 548, 1433, 6379, 1883, 5432, 1521, 3389, 3388, 3389, 33890, 33900},\n\t\tsslSecondProbeMap:  []string{\"TCP_TerminalServerCookie\", \"TCP_TerminalServer\"},\n\t\tallProbeMap:        []string{\"TCP_GetRequest\", \"TCP_NULL\"},\n\t\tsslProbeMap:        []string{\"TCP_TLSSessionReq\", \"TCP_SSLSessionReq\", \"TCP_SSLv23SessionReq\"},\n\t}\n\tfor i := 0; i <= 65535; i++ {\n\t\tnmap.portProbeMap[i] = []string{}\n\t}\n\tnmap.loads(nmapServiceProbes + nmapCustomizeProbes)\n\t//修复fallback\n\tnmap.fixFallback()\n\t//新增自定义指纹信息\n\tcustomNMAPMatch()\n\t//优化检测逻辑，及端口对应的默认探针\n\toptimizeNMAPProbes()\n\t//排序\n\tnmap.sslSecondProbeMap = nmap.sortOfRarity(nmap.sslSecondProbeMap)\n\tnmap.allProbeMap = nmap.sortOfRarity(nmap.allProbeMap)\n\tnmap.sslProbeMap = nmap.sortOfRarity(nmap.sslProbeMap)\n\tfor index, value := range nmap.portProbeMap {\n\t\tnmap.portProbeMap[index] = nmap.sortOfRarity(value)\n\t}\n\t//输出统计数据状态\n\tstatistical()\n}\n\nfunc statistical() {\n\tProbesCount = len(nmap.probeSort)\n\tfor _, p := range nmap.probeNameMap {\n\t\tMatchCount += len(p.matchGroup)\n\t}\n\tUsedProbesCount = len(nmap.portProbeMap[0])\n\tfor _, p := range nmap.portProbeMap[0] {\n\t\tUsedMatchCount += len(nmap.probeNameMap[p].matchGroup)\n\t}\n}\n\nfunc repairNMAPString() {\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, \"${backquote}\", \"`\")\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `q|GET / HTTP/1.0\\r\\n\\r\\n|`,\n\t\t`q|GET / HTTP/1.0\\r\\nHost: {Host}\\r\\nUser-Agent: Mozilla/5.0 (Windows; U; MSIE 9.0; Windows NT 9.0; en-US)\\r\\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\\r\\nAccept: */*\\r\\n\\r\\n|`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `\\1`, `$1`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?=\\\\)`, `(?:\\\\)`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?=[\\w._-]{5,15}\\r?\\n$)`, `(?:[\\w._-]{5,15}\\r?\\n$)`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?:[^\\r\\n]*r\\n(?!\\r\\n))*?`, `(?:[^\\r\\n]+\\r\\n)*?`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?`, `(?:[^\\r\\n]+\\r\\n)*?`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?:[^\\r\\n]+\\r\\n(?!\\r\\n))*?`, `(?:[^\\r\\n]+\\r\\n)*?`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?!2526)`, ``)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?!400)`, ``)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?!\\0\\0)`, ``)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?!/head>)`, ``)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?!HTTP|RTSP|SIP)`, ``)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?!.*[sS][sS][hH]).*`, `.*`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?!\\xff)`, `.`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?!x)`, `[^x]`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?<=.)`, `(?:.)`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `(?<=\\?)`, `(?:\\?)`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `\\x20\\x02\\x00.`, `\\x20\\x02..`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `match rtmp`, `# match rtmp`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `nmap`, `pamn`)\n\tnmapServiceProbes = strings.ReplaceAll(nmapServiceProbes, `Nmap`, `pamn`)\n}\n\nfunc customNMAPMatch() {\n\t//新增自定义指纹信息\n\tnmap.AddMatch(\"TCP_GetRequest\", `echo m|^GET / HTTP/1.0\\r\\n\\r\\n$|s`)\n\tnmap.AddMatch(\"TCP_GetRequest\", `mongodb m|.*It looks like you are trying to access MongoDB.*|s p/MongoDB/`)\n\tnmap.AddMatch(\"TCP_GetRequest\", `http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]+\\r\\n)*?Server: ([^\\r\\n]+)| p/$1/`)\n\tnmap.AddMatch(\"TCP_GetRequest\", `http m|^HTTP/1\\.[01] \\d\\d\\d|`)\n\tnmap.AddMatch(\"TCP_NULL\", `mysql m|.\\x00\\x00..j\\x04Host '.*' is not allowed to connect to this MariaDB server| p/MariaDB/`)\n\tnmap.AddMatch(\"TCP_NULL\", `mysql m|.\\x00\\x00..j\\x04Host '.*' is not allowed to connect to this MySQL server| p/MySQL/`)\n\tnmap.AddMatch(\"TCP_NULL\", `mysql m|.\\x00\\x00\\x00\\x0a(\\d+\\.\\d+\\.\\d+)\\x00.*caching_sha2_password\\x00| p/MariaDB/ v/$1/`)\n\tnmap.AddMatch(\"TCP_NULL\", `mysql m|.\\x00\\x00\\x00\\x0a(\\d+\\.\\d+\\.\\d+)\\x00.*caching_sha2_password\\x00| p/MariaDB/ v/$1/`)\n\tnmap.AddMatch(\"TCP_NULL\", `mysql m|.\\x00\\x00\\x00\\x0a([\\d.-]+)-MariaDB\\x00.*mysql_native_password\\x00| p/MariaDB/ v/$1/`)\n\tnmap.AddMatch(\"TCP_NULL\", `redis m|-DENIED Redis is running in.*| p/Redis/ i/Protected mode/`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^.*Welcome to visit (.*) series router!.*|s p/$1 Router/`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^Username: ??|`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^.*Telnet service is disabled or Your telnet session has expired due to inactivity.*|s i/Disabled/`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^.*Telnet connection from (.*) refused.*|s i/Refused/`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^.*Command line is locked now, please retry later.*\\x0d\\x0a\\x0d\\x0a|s i/Locked/`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^.*Warning: Telnet is not a secure protocol, and it is recommended to use Stelnet.*|s`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^telnetd:|s`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^.*Quopin CLI for (.*)\\x0d\\x0a\\x0d\\x0a|s p/$1/`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^\\x0d\\x0aHello, this is FRRouting \\(version ([\\d.]+)\\).*|s p/FRRouting/ v/$1/`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^.*User Access Verification.*Username:|s`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^Connection failed.  Windows CE Telnet Service cannot accept anymore concurrent users.|s o/Windows/`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^\\x0d\\x0a\\x0d\\x0aWelcome to the host.\\x0d\\x0a.*|s o/Windows/`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^.*Welcome Visiting Huawei Home Gateway\\x0d\\x0aCopyright by Huawei Technologies Co., Ltd.*Login:|s p/Huawei/`)\n\tnmap.AddMatch(\"TCP_NULL\", `telnet m|^..\\x01..\\x03..\\x18..\\x1f|s p/Huawei/`)\n\tnmap.AddMatch(\"TCP_NULL\", `smtp m|^220 ([a-z0-1.-]+).*| h/$1/`)\n\tnmap.AddMatch(\"TCP_NULL\", `ftp m|^220 H3C Small-FTP Server Version ([\\d.]+).* | p/H3C Small-FTP/ v/$1/`)\n\tnmap.AddMatch(\"TCP_NULL\", `ftp m|^421[- ]Service not available..*|`)\n\tnmap.AddMatch(\"TCP_NULL\", `ftp m|^220[- ].*filezilla.*|i p/FileZilla/`)\n\tnmap.AddMatch(\"TCP_TerminalServerCookie\", `ms-wbt-server m|^\\x03\\0\\0\\x13\\x0e\\xd0\\0\\0\\x124\\0\\x02.*\\0\\x02\\0\\0\\0| p/Microsoft Terminal Services/ o/Windows/ cpe:/o:microsoft:windows/a`)\n\tnmap.AddMatch(\"TCP_redis-server\", `redis m|^.*redis_version:([.\\d]+)\\n|s p/Redis key-value store/ v/$1/ cpe:/a:redislabs:redis:$1/`)\n\tnmap.AddMatch(\"TCP_redis-server\", `redis m|^-NOAUTH Authentication required.|s p/Redis key-value store/`)\n}\n\nfunc optimizeNMAPProbes() {\n\tnmap.probeNameMap[\"TCP_GenericLines\"].sslports = nmap.probeNameMap[\"TCP_GenericLines\"].sslports.append(993, 994, 456, 995)\n\t//优化检测逻辑，及端口对应的默认探针\n\tnmap.portProbeMap[993] = append([]string{\"TCP_GenericLines\"}, nmap.portProbeMap[993]...)\n\tnmap.portProbeMap[994] = append([]string{\"TCP_GenericLines\"}, nmap.portProbeMap[994]...)\n\tnmap.portProbeMap[995] = append([]string{\"TCP_GenericLines\"}, nmap.portProbeMap[995]...)\n\tnmap.portProbeMap[465] = append([]string{\"TCP_GenericLines\"}, nmap.portProbeMap[465]...)\n\tnmap.portProbeMap[3390] = append(nmap.portProbeMap[3390], \"TCP_TerminalServer\")\n\tnmap.portProbeMap[3390] = append(nmap.portProbeMap[3390], \"TCP_TerminalServerCookie\")\n\tnmap.portProbeMap[33890] = append(nmap.portProbeMap[33890], \"TCP_TerminalServer\")\n\tnmap.portProbeMap[33890] = append(nmap.portProbeMap[33890], \"TCP_TerminalServerCookie\")\n\tnmap.portProbeMap[33900] = append(nmap.portProbeMap[33900], \"TCP_TerminalServer\")\n\tnmap.portProbeMap[33900] = append(nmap.portProbeMap[33900], \"TCP_TerminalServerCookie\")\n\tnmap.portProbeMap[7890] = append(nmap.portProbeMap[7890], \"TCP_Socks5\")\n\tnmap.portProbeMap[7891] = append(nmap.portProbeMap[7891], \"TCP_Socks5\")\n\tnmap.portProbeMap[4000] = append(nmap.portProbeMap[4000], \"TCP_Socks5\")\n\tnmap.portProbeMap[2022] = append(nmap.portProbeMap[2022], \"TCP_Socks5\")\n\tnmap.portProbeMap[6000] = append(nmap.portProbeMap[6000], \"TCP_Socks5\")\n\tnmap.portProbeMap[7000] = append(nmap.portProbeMap[7000], \"TCP_Socks5\")\n\t//将TCP_GetRequest的fallback参数设置为NULL探针，避免漏资产\n\tnmap.probeNameMap[\"TCP_GenericLines\"].fallback = \"TCP_NULL\"\n\tnmap.probeNameMap[\"TCP_GetRequest\"].fallback = \"TCP_NULL\"\n\tnmap.probeNameMap[\"TCP_TerminalServerCookie\"].fallback = \"TCP_GetRequest\"\n\tnmap.probeNameMap[\"TCP_TerminalServer\"].fallback = \"TCP_GetRequest\"\n}\n\n//配置类\nfunc SetFilter(filter int) {\n\tinitWithFilter(filter)\n}\n\nfunc SetLogger(v Logger) {\n\tlogger = v\n}\n\n//功能类\nfunc New() *Nmap {\n\tn := *nmap\n\treturn &n\n}\n\nfunc GuessProtocol(port int) string {\n\tprotocol := nmapServices[port]\n\tif protocol == \"unknown\" {\n\t\tprotocol = \"http\"\n\t}\n\treturn protocol\n}\n\nvar regexpFirstNum = regexp.MustCompile(`^\\d`)\n\nfunc FixProtocol(oldProtocol string) string {\n\t//进行最后输出修饰\n\tif oldProtocol == \"ssl/http\" {\n\t\treturn \"https\"\n\t}\n\tif oldProtocol == \"http-proxy\" {\n\t\treturn \"http\"\n\t}\n\tif oldProtocol == \"ms-wbt-server\" {\n\t\treturn \"rdp\"\n\t}\n\tif oldProtocol == \"microsoft-ds\" {\n\t\treturn \"smb\"\n\t}\n\tif oldProtocol == \"netbios-ssn\" {\n\t\treturn \"netbios\"\n\t}\n\tif oldProtocol == \"oracle-tns\" {\n\t\treturn \"oracle\"\n\t}\n\tif oldProtocol == \"msrpc\" {\n\t\treturn \"rpc\"\n\t}\n\tif oldProtocol == \"ms-sql-s\" {\n\t\treturn \"mssql\"\n\t}\n\tif oldProtocol == \"domain\" {\n\t\treturn \"dns\"\n\t}\n\tif oldProtocol == \"svnserve\" {\n\t\treturn \"svn\"\n\t}\n\tif oldProtocol == \"ibm-db2\" {\n\t\treturn \"db2\"\n\t}\n\tif oldProtocol == \"socks-proxy\" {\n\t\treturn \"socks5\"\n\t}\n\tif len(oldProtocol) > 4 {\n\t\tif oldProtocol[:4] == \"ssl/\" {\n\t\t\treturn oldProtocol[4:] + \"-ssl\"\n\t\t}\n\t}\n\tif regexpFirstNum.MatchString(oldProtocol) {\n\t\toldProtocol = \"S\" + oldProtocol\n\t}\n\toldProtocol = strings.ReplaceAll(oldProtocol, \"_\", \"-\")\n\treturn oldProtocol\n}\n"
  },
  {
    "path": "gonmap_test.go",
    "content": "package gonmap\n\nimport (\n\t\"fmt\"\n\t\"testing\"\n\t\"time\"\n)\n\nfunc TestScan(t *testing.T) {\n\tvar scanner = New()\n\thost := \"192.168.100.144\"\n\tport := 5001\n\tstatus, response := scanner.ScanTimeout(host, port, time.Second*30)\n\tfmt.Println(status, response.FingerPrint.Service, host, \":\", port)\n\tport = 22\n\tstatus, response = scanner.ScanTimeout(host, port, time.Second*30)\n\n\tfmt.Println(status, response.FingerPrint.Service, host, \":\", port)\n\tport = 5000\n\tstatus, response = scanner.ScanTimeout(host, port, time.Second*30)\n\tfmt.Println(status, response.FingerPrint.Service, host, \":\", port)\n\tport = 445\n\tstatus, response = scanner.ScanTimeout(host, port, time.Second*30)\n\tfmt.Println(status, response.FingerPrint.Service, host, \":\", port)\n}\n"
  },
  {
    "path": "nmap-customize-probes.go",
    "content": "package gonmap\n\nvar nmapCustomizeProbes = `\nProbe TCP SMB_NEGOTIATE q|\\x00\\x00\\x00\\xc0\\xfeSMB@\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x1f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00$\\x00\\b\\x00\\x01\\x00\\x00\\x00\\u007f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00x\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x02\\x02\\x10\\x02\"\\x02$\\x02\\x00\\x03\\x02\\x03\\x10\\x03\\x11\\x03\\x00\\x00\\x00\\x00\\x01\\x00&\\x00\\x00\\x00\\x00\\x00\\x01\\x00 \\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x03\\x00\\x0e\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00|\nrarity 1\nports 445\n\nmatch microsoft-ds m|^\\0\\0...SMB.*|s\n\nProbe TCP JSON_RPC q|{\"id\":1,\"jsonrpc\":\"2.0\",\"method\":\"login\",\"params\":{}}\\r\\n|\nrarity 4\nports 443,80,8443,8080\n\nmatch jsonrpc m|^{\"jsonrpc\":\"([\\d.]+)\".*\"height\":(\\d+),\"seed_hash\".*|s v/$1/ p/ETH/ i/height:$2/\nmatch jsonrpc m|^{\"jsonrpc\":\"([\\d.]+)\".*|s v/$1/\n\n`\n"
  },
  {
    "path": "nmap-service-probes.go",
    "content": "package gonmap\n\nvar nmapServiceProbes = `\n# Nmap service detection probe list -*- mode: fundamental; -*-\n# $Id$\n#\n# This is a database of custom probes and expected responses that the\n# Nmap Security Scanner ( https://nmap.org ) uses to\n# identify what services (eg http, smtp, dns, etc.) are listening on\n# open ports.  Contributions to this database are welcome.\n# Instructions for obtaining and submitting service detection fingerprints can\n# be found in the Nmap Network Scanning book and online at\n# https://nmap.org/book/vscan-community.html\n#\n# This collection of probe data is (C) 1998-2020 by Insecure.Com\n# LLC.  It is distributed under the Nmap Public Source license as\n# provided in the LICENSE file of the source distribution or at\n# https://nmap.org/data/LICENSE .  Note that this license\n# requires you to license your own work under a compatible open source\n# license.  If you wish to embed Nmap technology into proprietary\n# software, we sell alternative licenses (contact sales@insecure.com).\n# Dozens of software vendors already license Nmap technology such as\n# host discovery, port scanning, OS detection, and version detection.\n# For more details, see https://nmap.org/book/man-legal.html\n#\n# For details on how Nmap version detection works, why it was added,\n# the grammar of this file, and how to detect and contribute new\n# services, see https://nmap.org/book/vscan.html.\n\n# The Exclude directive takes a comma separated list of ports.\n# The format is exactly the same as the -p switch.\n# Exclude T:9100-9107\n\n# This is the NULL probe that just compares any banners given to us\n##############################NEXT PROBE##############################\nProbe TCP NULL q||\n# Wait for at least 6 seconds for data.  It used to be 5, but some\n# smtp services have lately been instituting an artificial pause (see\n# FEATURE('greet_pause') in Sendmail, for example)\ntotalwaitms 6000\n# If the service closes the connection before 3 seconds, it's probably\n# tcpwrapped. Adjust up or down depending on your false-positive rate.\ntcpwrappedms 3000\n\nmatch 1c-server m|^S\\xf5\\xc6\\x1a{| p/1C:Enterprise business management server/\n\nmatch 3cx-tunnel m|^\\x04\\0\\xfb\\xffLAPK| p/3CX Tunnel Protocol/\n\nmatch 4d-server m|^\\0\\0\\0H\\0\\0\\0\\x02.[^\\0]*\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$|s p/4th Dimension database server/ cpe:/a:4d_sas:4d/\n\nmatch aastra-pbx m|^BUSY$| p|Aastra/Mitel 400-series PBX service port|\nmatch acap m|^\\* ACAP \\(IMPLEMENTATION \\\"CommuniGate Pro ACAP (\\d[-.\\w]+)\\\"\\) | p/CommuniGate Pro ACAP server/ v/$1/ i/for mail client preference sharing/ cpe:/a:stalker:communigate_pro:$1/\nmatch acarsd m|^g\\0\\0\\0\\x1b\\0\\0\\0\\0\\0\\0\\0acarsd\\t([\\w._-]+)\\tAPI-([\\w._-]+)\\)\\0\\0\\0\\x06\\x05\\0\\0\\0\\0\\0\\0<\\?xml | p/acarsd/ v/$1/ i/API $2/ cpe:/a:acarsd:acarsd:$1/\nmatch acmp m|^ACMP Server Version ([\\w._-]+)\\r\\n| p/Aagon ACMP Inventory/ v/$1/\n\nmatch apachemq m|^\\0\\0..\\x01ActiveMQ\\0\\0\\0.\\x01\\0\\0.*\\x0cProviderName\\t\\0\\x08ActiveMQ.*\\x0fPlatformDetails\\t..JVM: (\\d[^,]*), [^,]*, Oracle Corporation, OS: Linux, (\\d\\.[\\d.]+)[^,]*, ([\\w_-]+).*\\x0fProviderVersion\\t..(\\d[\\w._-]*)|s p/ActiveMQ OpenWire transport/ v/$4/ i/Java $1; arch: $3/ o/Linux $2/ cpe:/a:apache:activemq:$4/ cpe:/o:linux:linux_kernel:$2/a\nsoftmatch apachemq m|^\\0\\0..\\x01ActiveMQ\\0| p/ActiveMQ OpenWire transport/\n\n\n# Microsoft ActiveSync Version 3.7 Build 3083 (It's used for syncing\n# my ipaq it disappears when you remove the ipaq.)\nmatch activesync m|^.\\0\\x01\\0[^\\0]\\0[^\\0]\\0[^\\0]\\0[^\\0]\\0[^\\0]\\0.*\\0\\0\\0$|s p/Microsoft ActiveSync/ o/Windows/ cpe:/a:microsoft:activesync/ cpe:/o:microsoft:windows/a\nmatch activesync m|^\\(\\0\\0\\0\\x02\\0\\0\\0\\x03\\0\\0\\0\\+\\0\\0\\x003\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0${backquote}\\x01\\0\\0\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$|s p/Citrix ActiveSync/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch adabas-d m|^Adabas D Remote Control Server Version ([\\d.]+) Date [\\d-]+ \\(key is [0-9a-f]+\\)\\r\\nOK> | p/Adabas D database remote control/ v/$1/\n\nmatch adobe-crossdomain m|^<cross-domain-policy><allow-access-from domain='([^']*)' to-ports='([^']*)' /></cross-domain-policy>\\0$| p/Adobe cross-domain policy/ i/domain: $1; ports: $2/\n# Missing trailing \\0? Was like that in the submission.\nmatch adobe-crossdomain m|^<cross-domain-policy>[ \\n]*<allow-access-from domain=\\\"([^\\\"]*)\\\" to-ports=\\\"([^\\\"]*)\\\" */>[ \\n]*</cross-domain-policy>$|s p/Adobe cross-domain policy/ i/domain: $1; ports: $2/\nmatch adobe-crossdomain m|^<\\?xml version=\\\"1\\.0\\\"\\?>\\r\\n<cross-domain-policy>\\r\\n    <site-control permitted-cross-domain-policies=\\\"master-only\\\"/>\\r\\n    <allow-access-from domain=\\\"\\*\\\" to-ports=\\\"59160\\\"/>\\r\\n</cross-domain-policy>\\0| p/Konica Minolta printer cross-domain-policy/\n# playbrassmonkey.com\nmatch adobe-crossdomain m|^<\\?xml version=\\\"1\\.0\\\"\\?><cross-domain-policy><allow-access-from domain=\\\"\\*\\\" to-ports=\\\"1008-49151\\\" /></cross-domain-policy>\\0$| p/Brass Monkey cross-domain-policy/\nmatch adobe-crossdomain m|^<\\?xml version=\"1\\.0\"\\?>\\r\\n<!DOCTYPE cross-domain-policy SYSTEM \"http://www\\.adobe\\.com/xml/dtds/cross-domain-policy\\.dtd\">\\r\\n<cross-domain-policy>\\r\\n <site-control permitted-cross-domain-policies=\"master-only\"/>\\r\\n <allow-access-from domain=\"www\\.facebook\\.com\" to-ports=\"443\" />\\r\\n</cross-domain-policy>\\r\\n| p/Facebook cross-domain policy/\nsoftmatch adobe-crossdomain m|^<\\?xml version=\\\"1\\.0\\\"\\?>.*<cross-domain-policy>|s\n\nmatch afsmain m|^\\+Welcome to Ability FTP Server \\(Admin\\)\\. \\[20500\\]\\r\\n| p/Code-Crafters Ability FTP Server afsmain admin/ o/Windows/ cpe:/a:code-crafters:ability_ftp_server/ cpe:/o:microsoft:windows/a\n\nmatch airserv-ng m|^\\x05\\0\\0\\x01.\\0\\0\\0\\0....\\xff\\xff\\xff.\\0\\0\\0\\0\\0\\0\\0.\\0\\0\\0\\0\\0\\x0fB@\\0\\0\\0.\\x80\\0\\0\\0\\xff\\xff\\xff\\xff\\xff\\xff|s p/airserv-ng/ cpe:/a:aircrack-ng:airserv-ng/\n\nmatch altiris-agent m|^<\\0r\\0e\\0s\\0p\\0o\\0n\\0s\\0e\\0>\\0C\\0o\\0n\\0n\\0e\\0c\\0t\\0e\\0d\\0 \\0t\\0o\\0 [\\0\\d.]*<\\0/\\0r\\0e\\0s\\0p\\0o\\0n\\0s\\0e\\0>\\0$| p/Altiris remote monitoring agent/\n\n# AMANDA index server 2.4.2p2 on Linux 2.4\nmatch amanda m|^220 ([-.\\w]+) AMANDA index server \\((\\d[-.\\w ]+)\\) ready\\.\\r\\n| p/Amanda backup system index server/ v/$2/ o/Unix/ h/$1/ cpe:/a:amanda:amanda:$2/\nmatch amanda m|^501 Could not read config file [^!\\r\\n]+!\\r\\n220 ([-.\\w]+) AMANDA index server \\(([-\\w_.]+)\\) ready\\.\\r\\n| p/Amanda backup system index server/ v/$2/ i/broken: config file not found/ h/$1/ cpe:/a:amanda:amanda:$2/\nmatch amanda m|^ld\\.so\\.1: amandad: fatal: (libsunmath\\.so\\.1): open failed: No such file or directory\\n$| p/Amanda backup system index server/ i/broken: $1 not found/ cpe:/a:amanda:amanda/\nmatch amanda m|^\\n\\*\\* \\(process:\\d+\\): CRITICAL \\*\\*: GLib version too old \\(micro mismatch\\): Amanda was compiled with glib-[\\d.]+, but linking with ([\\d.]+)\\n| p/Amanda backup system index server/ i/broken: GLib $1 too old/ cpe:/a:amanda:amanda/\n\nmatch AndroMouse m|^AMServer$|s p/AndroMouse Android remote mouse server/\n\nmatch antivir m|^220 Symantec AntiVirus Scan Engine ready\\.\\r\\n| p/Symantec AntiVirus Scan Engine/ cpe:/a:symantec:antivirus/ cpe:/a:symantec:antivirus_scan_engine/\nmatch antivir m|^200 NOD32SS ([\\d.]+) \\((\\d+)\\)\\r\\n| p/NOD32 AntiVirus/ v/$1 ($2)/ cpe:/a:eset:nod32_antivirus:$1/\n\nmatch anyremote m|^Set\\(icons,M,6,forward,7,prev,8,stop,9,next,\\*,question,0,pause,#,no\\);Set\\(font,small\\);Set\\(menu,replace,Playlist,Toggle Shuffle,Toggle Repeat\\);Set\\(icons,MPD,1,vol_down,2,mute,3,vol_up,4,rewind,5,play,6,forward,7,prev,8,stop,9,next,\\*,question,0,pause,#,no\\);Set\\(font,small\\);Set\\(menu,replace,Playlist,Toggle Shuffle,Toggle Repeat\\);$| p/anyRemote remote control daemon/\n\nmatch aperio-aaf m|^<aafMessage><aafInitRequest></aafInitRequest></aafMessage>| p/Aperio Algorithm Framework/\n\nmatch aplus m|^\\x01\\xff\\0\\xff\\x01\\x1d\\0\\xfd\\0\\n\\x03\\x05A\\+ API \\(([\\d.]+)\\) - CCS \\(([\\d.]+)\\)\\0| p/Cleo A+/ i/API $1; CSS $2/\nmatch app m|^\\0\\x01\\0\\x08\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x02$| p/Cisco Application Peering Protocol/ d/load balancer/\nmatch appguard-db m|^200 Welkom bij de Appguard UserDatabase Server v([\\d.]+)\\r\\nWhatsUP\\? .{10}\\r\\n| p/App Appguard UserDatabase/ v/$1/ cpe:/a:app_bv:appguard_userdatabase:$1/\n\n# http://www.qosient.com/argus/\nmatch argus m|^\\x80\\x01\\0\\x80\\0\\x80\\0\\0\\xe5az\\xcb\\0\\0\\0\\0J...............\\x02\\0\\x01\\0\\0<\\x01,.......\\0...\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff\\xff\\xff\\x01\\x04\\0.\\0\\x80\\x08|s p/Argus network analyzer/ v/3.0/\n\nmatch arkeia m|^\\0${backquote}\\0\\x04\\0\\0\\0\\x1810\\x000\\x000\\x00852224\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Arkeia Network Backup/\n# arkstats (part of arkeia-light 5.1.12 Backup server) on Linux 2.4.20\nmatch arkstats m|^\\0${backquote}\\0\\x03\\0\\0\\0\\x1810\\x000\\x000\\x00852224\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Arkeia arkstats/\nmatch articy-server m|^# ACL Comm Layer V1\\.0\\r\\nSalt: \\S+@([\\w.-]+)\\r\\nProcessors: \\(ArticyWorkflowServer\\)\\r\\nAuthenticators:| p/articy:draft server/ h/$1/ cpe:/a:nevigo:articy%3adraft/\nmatch artsd m|^MCOP\\0\\0\\0.\\0\\0\\0\\x01\\0\\0\\0\\x10aRts/MCOP-([\\d.]+)\\0\\0\\0\\0|s p/artsd/ i/MCOP $1/\n\n# Asterisk call manager - port 5038\nmatch asterisk m|^Asterisk Call Manager/([\\d.]+)\\r\\n| p/Asterisk Call Manager/ v/$1/ cpe:/a:digium:asterisk:$1/\nmatch asterisk-proxy m|^Response: Follows\\r\\nPrivilege: Command\\r\\n--END COMMAND--\\r\\n| p/Asterisk Call Manager Proxy/ cpe:/a:digium:asterisk/\n\nmatch asus-nfc m|^\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0$| p/ASUS DTNFCServer/\nmatch asus-transfer m|^\\0\\0\\0\\0\\0\\0\\0\\0${backquote}\\x06\\0\\0\\0\\0\\0\\0\\x01\\0P\\x06\\0{86}\\xfe{510}\\0\\0\\0\\0\\0\\0\\xfe{278}| p/ASUS Wi-Fi GO! file transfer/ cpe:/a:asus:wi-fi_go/\n\nmatch audit m|^Visionsoft Audit on Demand Service\\r\\nVersion: ([\\d.]+)\\r\\n\\r\\n| p/Visionsoft Audit on Demand Service/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch autosys m|^([\\w._-]+)\\nListener for [\\w._-]+ AutoSysAdapter\\nEOS\\nExit Code = 1001\\nIP <[\\d.]+> is not authorized for this request\\. Please contact your Web Administrator\\.\\nEOS\\n| p/CA AutoSys RCS Listener/ v/$1/ i/not authorized/\nmatch avg m|^220-AVG7 Anti-Virus daemon mode scanner\\r\\n220-Program version ([\\d.]+), engine (\\d+)\\r\\n220-Virus Database: Version ([\\d/.]+)  [-\\d]+\\r\\n| p/AVG daemon mode/ v/$1 engine $2/ i/Virus DB $3/ cpe:/a:avg:anti-virus:$1/\nmatch avg m=^220-AVG daemon mode scanner \\((?:AVG|SMTP)\\)\\r\\n220-Program version ([\\w._-]+)\\r\\n220-Virus Database: Version ([\\w._/ -]+)\\r\\n220 Ready\\r\\n= p/AVG daemon mode/ v/$1/ i/Virus DB $2/ cpe:/a:avg:anti-virus:$1/\n\nmatch afbackup m|^afbackup ([\\d.]+)\\n\\nAF's backup server ready\\.\\n| p/afbackup/ v/$1/\nmatch afbackup m|^.*, Warning on encryption key file ${backquote}/etc/afbackup/cryptkey': File not readable\\.\\n.*, Warning: Ignoring file ${backquote}/etc/afbackup/cryptkey', using compiled-in key\\.\\nafbackup 3\\.4\\n\\nAF's backup server ready\\.\\n\\x9d\\x84\\x0bZ$| p/afbackup/ i/using compiled-in key/\n\nmatch backdoor m|^220 jeem\\.mail\\.pv ESMTP\\r\\n| p/Jeem backdoor/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^\\r\\nUser Access Verification\\r\\n\\r\\nYour PassWord:| p/Jeem backdoor/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^ \\r\\n$| p/OptixPro backdoor/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^echo o [\\d.]+ \\d+ >s\\r\\necho common>> s\\r\\necho common>> s\\r\\necho bin>> s\\r\\necho get m220\\.exe| p/JTRAM backdoor/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^220 Bot Server \\(Win32\\)\\r\\n$| p/Gaobot backdoor/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^PWD$| p/Subseven backdoor/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^\\r\\n\\[RPL\\]002\\r\\n$| p/Subseven backdoor/ i/**BACKDOOR**/\nmatch backdoor m|^=+\\n= +RBackdoor ([\\d.]+) | p/RBackdoor/ v/$1/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^220 Windrone Server \\(Win32\\)\\r\\n$| p/NerdBot backdoor/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^Zadej heslo:$| p/Czech \"zadej heslo\" backdoor/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^220 Reptile welcomes you\\.\\.\\r\\n| p/Darkmoon backdoor \"reptile\" ftpd/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^Sifre_EDIT$| p/ProRat trojan/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^MZ\\x90\\0\\x03\\0\\0\\0\\x04\\0\\0\\0\\xff\\xff\\0\\0\\xb8\\0\\0\\0\\0\\0\\0\\0@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0fn\\0\\0\\xd0\\0\\0\\0\\x0e\\x1f\\xba\\x0e\\0\\xb4\\t\\xcd!\\xb8\\x01L\\xcd!This program cannot be run in DOS mode\\.| p/Korgo worm/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^\\xfa\\xcb\\xd9\\xd9\\xdd\\xc5\\xd8\\xce\\xd6| p/Theef trojan/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^220 SSL Connection Established - Loading Protocol\\.\\.\\.\\.\\r\\n| p/dhcpse.exe/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^A-311 Death welcome\\x001| p/Haxdoor trojan/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^220 CAFEiNi [-\\w_.]+ FTP server\\r\\n$| p/CAFEiNi trojan/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m=^220 (?:Stny|fuck)Ftpd 0wns j0\\r?\\n= p/Kibuv.b worm/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^220 [Sf.][tu.][nc.][yk.][F.][t.][p.][d.] [0.][w.][n.][s.] [j.][0.]\\r?\\n|i p/Generic Kibuv worm/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^exec .* failed : No such file or directory\\n$| p/netcat -e/ i/misconfigured/\nmatch backdoor m=220-Welcome!\\r\\n220-\\x1b\\[30m/\\x1b\\[31m#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#\\xa4#                                                         \\r\\n220-\\x1b\\[30m\\|          Current Time:  \\x1b\\[35m[^\\r\\n]*\\r\\n220-\\x1b\\[30m\\|          Current Date:  \\x1b\\[35m[^\\r\\n]*\\r\\n220-\\x1b\\[30m\\\\\\r\\n= p/Windows trojan/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\n# https://www.mysonicwall.com/sonicalert/searchresults.aspx?ev=article&id=733\nmatch backdoor m|^!\\* LOLNOGTFO\\nDUP\\n| p/Linux.Flooder.SS C&C server/ i/**MALWARE**/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch backdoor m|^x0$| p/Blackshades connection port/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^REQF\\x0c1\\x0c1$| p/Blackshades transfer port/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^DT Key Logger -- Logging System Wide Key Presses\\r\\n| p/Deep Throat keylogger/ i/**MALWARE**/\nmatch backdoor m|^:: w4ck1ng-shell \\(Private Build v([\\w._-]+)\\) bind shell backdoor :: \\n\\n| p/w4ck1ng-shell/ v/$1/ i/**BACKDOOR**/\n\nmatch bandwidth-test m|^\\x01\\0\\0\\0$| p/MikroTik bandwidth-test server/\n\nmatch barracuda-dcagent m|^Invalid Client IP\\0\\0$| p/Barracuda Domain Controller Agent/\nmatch barracuda-bcp m|^BCP-2\\.0-Barracuda\\n| p/Barracuda Web Security Gateway clustering protocol/ cpe:/a:barracuda:web_security_gateway/\n\nmatch bas m|^4dc\\r\\n$| p/Blackberry Administration Service - Native Code Container/\nmatch bas m|^4fd\\r\\n$| p/Blackberry Administration Service - Native Code Generator/\nmatch bas m|^507\\r\\n$| p/Blackberry Administration Service/\n\nmatch basestation m=^(?:MSG|SEL|ID|AIR|STA|CLK)(?:,[^,\\r\\n]*){9,21}\\r\\n= p/ADS-B flight data/\n\n# Port 2500: http://wiki.yobi.be/wiki/Belgian_eID\nmatch beidpcscd m|^\\0\\0\\0\\x1e\\xffV\\x92l\\xfbUL\\x87\\xabw\\x1f\\xb2\\n\\xd8\\xef/\\0\\0\\0\\x05Alive\\0\\0\\0\\x011| p/beidpcscd Belgian eID daemon/\n\nmatch bf2rcon m|^### Battlefield 2 ModManager Rcon v([\\d.]+)\\.\\n### Digest seed: \\w+\\n\\n| p/Battlefield 2 ModManager Remote Console/ v/$1/\n\nmatch bgp m|^\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\0\\x15\\x03\\x06\\x05| i/connection rejected/\nmatch bgp m|^\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\0\\x1d\\x01\\x04........\\0\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\0\\x15\\x03\\x06\\x05| i/open; connection rejected/\nmatch bgp m|^\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff..\\x01\\x04| i/open/\n\n# https://en.bitcoin.it/wiki/Protocol_specification#Message_structure\n# https://en.bitcoin.it/wiki/Protocol_specification#version\n# https://en.bitcoin.it/wiki/Changelog\n\n# Bitcoin \"version\" message prior to 20 February 2012.\n#  4 bytes magic number:    \"\\xf9\\xbe\\xb4\\xd9\"\n# 12 bytes command:         \"version\\0\\0\\0\\0\\0\"\n#  4 bytes length\n#  4 bytes version\n#  8 bytes services bitfield: \"\\x01\\0\\0\\0\\0\\0\\0\\0\"\n#  8 bytes timestamp\n#  8 bytes client services count: \"\\x01\\0\\0\\0\\0\\0\\0\\0\"\n# 16 bytes IPv4-compatible client IP: \"\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff....\"\n#  2 bytes client port\n#  8 bytes server services count: \"\\x01\\0\\0\\0\\0\\0\\0\\0\"\n# 16 bytes IPv4-compatible server IP: \"\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff....\"\n#  2 bytes server port\n#  8 bytes random unique id\n#  1 byte  subversion string length\n# variable subversion string\n#  4 bytes last block\n\n# Version 0xc8 -> 200 -> 0.2.0\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x51\\0\\0\\0\\xc8\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0$|s p/Bitcoin digital currency server/ v/0.2.0/ cpe:/a:bitcoin:bitcoind:0.2.0/\n# Version 0x12c -> 300 -> 0.3.0\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x2c\\x01\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.0/ cpe:/a:bitcoin:bitcoind:0.3.0/\n# Version 0x136 -> 310 -> 0.3.10\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x57\\0\\0\\0\\x36\\x01\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.10/ cpe:/a:bitcoin:bitcoind:0.3.10/\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x57\\0\\0\\0\\x36\\x01\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\x02(\\..)....$|s p/Bitcoin digital currency server/ v/0.3.10$1/ cpe:/a:bitcoin:bitcoind:0.3.10$1/\n# Version 0x7bd4 -> 31700 -> 0.3.17\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\xd4\\x7b\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.17/ cpe:/a:bitcoin:bitcoind:0.3.17/\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\xd4\\x7b\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\x02(\\..)....$|s p/Bitcoin digital currency server/ v/0.3.17$1/ cpe:/a:bitcoin:bitcoind:0.3.17$1/\n# Version 0x7c38 -> 31800 -> 0.3.18\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x38\\x7c\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.18/ cpe:/a:bitcoin:bitcoind:0.3.18/\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x38\\x7c\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\x02(\\..)....$|s p/Bitcoin digital currency server/ v/0.3.18$1/ cpe:/a:bitcoin:bitcoind:0.3.18$1/\n# Version 0x7c9c -> 31900 -> 0.3.19\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x9c\\x7c\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.19/ cpe:/a:bitcoin:bitcoind:0.3.19/\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x9c\\x7c\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\x02(\\..)....$|s p/Bitcoin digital currency server/ v/0.3.19$1/ cpe:/a:bitcoin:bitcoind:0.3.19$1/\n# Version 0x7d00 -> 32000 -> 0.3.20\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x00\\x7d\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.20/ cpe:/a:bitcoin:bitcoind:0.3.20/\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x00\\x7d\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\x02(\\..)....$|s p/Bitcoin digital currency server/ v/0.3.20$1/ cpe:/a:bitcoin:bitcoind:0.3.20$1/\n# Version 0x7d01 -> 32001 -> 0.3.20.1\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x01\\x7d\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.20.1/ cpe:/a:bitcoin:bitcoind:0.3.20.1/\n# Version 0x7d02 -> 32002 -> 0.3.20.2\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x02\\x7d\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.20.2/ cpe:/a:bitcoin:bitcoind:0.3.20.2/\n# Version 0x7d64 -> 32100 -> 0.3.21\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x64\\x7d\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.21/ cpe:/a:bitcoin:bitcoind:0.3.21/\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x64\\x7d\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\x02(\\..)....$|s p/Bitcoin digital currency server/ v/0.3.21$1/ cpe:/a:bitcoin:bitcoind:0.3.21$1/\n# Version 0x7dc8 -> 32200 -> 0.3.22\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\xc8\\x7d\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.22/ cpe:/a:bitcoin:bitcoind:0.3.22/\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\xc8\\x7d\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\x02(\\..)....$|s p/Bitcoin digital currency server/ v/0.3.22$1/ cpe:/a:bitcoin:bitcoind:0.3.22$1/\n# Version 0x7e2c -> 32300 -> 0.3.23\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x2c\\x7e\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.23/ cpe:/a:bitcoin:bitcoind:0.3.23/\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x2c\\x7e\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\x02(\\..)....$|s p/Bitcoin digital currency server/ v/0.3.23$1/ cpe:/a:bitcoin:bitcoind:0.3.23$1/\n# Version 0x7e90 -> 32400 -> 0.3.24\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x90\\x7e\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ v/0.3.24/ cpe:/a:bitcoin:bitcoind:0.3.24/\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0\\x90\\x7e\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\x02(\\..)....$|s p/Bitcoin digital currency server/ v/0.3.24$1/ cpe:/a:bitcoin:bitcoind:0.3.24$1/\n\n# https://bitcointalk.org/index.php?topic=55852.0\n# http://bitcoin.org/en/alert/2012-02-18-protocol-change\n# \"In June 2010 the Bitcoin reference software version 0.2.10 introduced a\n# change to the protocol: the 'version' messages exchanged by nodes at\n# connection time would have a new format that included checksum values to\n# detect corruption by broken networks.\"\n\n# Bitcoin \"version\" message with protocol version 70001\n# https://en.bitcoin.it/wiki/BIP_0037#Extensions_to_existing_messages\n# https://en.bitcoin.it/wiki/BIP_0060 \"The protocol version was upgraded to\n# 70001, and the (now accepted) BIP 0037 became implemented.\"\n#  4 bytes magic number:    \"\\xf9\\xbe\\xb4\\xd9\"\n# 12 bytes command:         \"version\\0\\0\\0\\0\\0\"\n#  4 bytes length\n#  4 bytes checksum\n#  4 bytes version          \"\\x71\\x11\\x01\\0\"\n#  8 bytes services bitfield: \"\\x01\\0\\0\\0\\0\\0\\0\\0\"\n#  8 bytes timestamp\n# 16 bytes IPv4-compatible client IP: \"\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff....\"\n#  2 bytes client port\n# 16 bytes IPv4-compatible server IP: \"\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff....\"\n#  2 bytes server port\n#  8 bytes nonce\n#  1 byte  user agent string length\n# variable user agent string https://en.bitcoin.it/wiki/BIP_0014\n#  4 bytes last block\n#  1 byte  relay             https://en.bitcoin.it/wiki/BIP_0037#Extensions_to_existing_messages\n\n# Version numbers now correspond only to protocol changes, not software releases.\n# Version 0x011171 -> 70001 0.7.1\nmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0.\\0\\0\\0....\\x71\\x11\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0........\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff.............../Bitpeer:([\\w._-]+)/\\0\\0\\0\\0\\x01$|s p/Bitpeer/ v/$1/\n\nsoftmatch bitcoin m|^\\xf9\\xbe\\xb4\\xd9version\\0\\0\\0\\0\\0\\x55\\0\\0\\0..\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0........\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff......\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff..............\\0....$|s p/Bitcoin digital currency server/ cpe:/a:bitcoin:bitcoind/\n\nmatch bitcoin-jsonrpc m|^HTTP/1\\.0 401 Authorization Required\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: bitcoin-json-rpc/([\\w._-]+)\\r\\n|s p/Bitcoin JSON-RPC/ v/$1/ cpe:/a:bitcoin:bitcoind:$1/\nmatch bitcoin-jsonrpc m|^HTTP/1\\.0 401 Authorization Required\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: bitcoin-json-rpc\\r\\n|s p/Bitcoin JSON-RPC/ cpe:/a:bitcoin:bitcoind/\nmatch bitcoin-jsonrpc m|^HTTP/1\\.1 403 Forbidden\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: bitcoin-json-rpc/([\\w._-]+)\\r\\n|s p/Bitcoin JSON-RPC/ v/$1/ cpe:/a:bitcoin:bitcoind:$1/\nmatch bitcoin-jsonrpc m|^HTTP/1\\.1 403 Forbidden\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: dash-json-rpc/v(\\d[\\w._-]+)\\r\\n|s p/Dash cryptocurrency JSON-RPC/ v/$1/\n\nmatch bitcoin m|^\\xbf\\x0ck\\xbdgetsporks\\0\\0\\0\\0\\0\\0\\0\\]\\xf6\\xe0\\xe2| p/Dash cryptocurrency server/ i/Bitcoin fork/\n\n# Bittorrent Client 3.2.1b on Linux 2.4.X\nmatch bittorrent m|^\\x13BitTorrent protocol\\0\\0\\0\\0\\0\\0\\0\\0| p/Bittorrent P2P client/\n# BMC Software Patrol Agent 3.45 and HP Patrol Agent\nmatch softwarepatrol m|^\\0\\0\\0\\x17i\\x02\\x03..\\0\\x05\\x02\\0\\x04\\x02\\x04\\x03..\\0\\x03\\x04\\0\\0\\0|s p|BMC/HP Software Patrol Agent| cpe:/a:bmc:patrol_agent/\nmatch scmbug m|^SCMBUG-SERVER RELEASE_([-\\w_.]+) \\d+\\n| p/Scmbug bugtracker/ v/$1/\n\nmatch bro m|^\\0\\0\\0\\x08\\x01\\0{10}\\x11\\0\\0\\0\\x07\\0\\0\\x0b\\xb8\\0\\0\\0\\x1a\\0\\0..\\0\\0\\0\\0\\x08\\x02...\\0{7}mi\\x01\\0\\0\\0\\x01\\x90\\x01\\0\\0\\0\\0\\x10peer_description\\x02\\0\\0\\0\\0\\x01\\0{14}\\x01\\x01\\0\\0\\0\\x02\\x8a\\x01\\0\\x08\\x04\\0\\x01\\0\\0\\0\\0\\x01\\x01\\0\\0\\0\\x03\\x8c\\x01\\0\\x01\\0\\0\\0\\0\\x02\\0\\0\\0\\x01\\0\\x02\\x01\\x01\\0\\0\\0\\x04\\x88\\x06\\0\\x01\\0\\0\\0\\0\\x02\\0\\0\\0\\x03bro|s p/Bro IDS control service/ cpe:/a:bro:bro/\n\n# Tolis BRU (Backup and Restore Utility)\nmatch bru m|^0x[0-9a-fA-F]{32}L| p/Tolis BRU/ i/Backup and Restore Utility/\n\n# Bruker AXS X-ray machines (how cool is that!?!?) (Brandon)\nmatch bruker-axs m|^\\[ANGLESTATUS.*\\[XYZSTATUS.*\\[ZOOMSTATUS.*\\[INSTRUMENTSTATUS.*XRAYSON=1|s p/Bruker AXS X-ray controller status/ i/X-rays: On/ d/specialized/\nmatch bruker-axs m|^\\[ANGLESTATUS.*\\[XYZSTATUS.*\\[ZOOMSTATUS.*\\[INSTRUMENTSTATUS.*XRAYSON=0|s p/Bruker AXS X-ray controller status/ i/X-rays: Off/ d/specialized/\n\nmatch buildservice m|^200 HELLO - BuildForge Agent v([\\w._-]+)\\n| p/BuildForge Agent/ v/$1/\nmatch buildservice m|^\\$\\0\\0\\0\\$\\0\\0\\x000RAR\\0 \\0\\0.\\xe2\\x02\\0\\xc4G\\x0f\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|s p/Xoreax IncrediBuild/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch burk-autopilot m|^\\x19\\0\\0\\0\\0\\0\\x0f\\xbeB!\\x012\\x02\\xd1\\x02\\x032\\x02p\\0\\x062\\x02\\x80\\0$| p/Burk AutoPilot Plus remote management/ d/remote management/\n\nmatch bzfs m|^BZFS\\d\\d\\d\\d\\0$| p/BZFlag game server/\nmatch bzfs m|^BZFS\\d\\d\\d\\d\\r\\n\\r\\n$| p/BZFlag game server/\n\n# CA Message Queueing Server (Tom Sellers)\nmatch ca-mq m|^ACK\\x01| p/CA Message Queuing Server/\n\nmatch ca-unicenter m|^\\x8d\\0\\0\\0\\x8d\\0\\0\\0\\x100\\x81\\x89\\x02\\x81\\x81\\0.*\\x02\\x03\\x01\\0\\x01\\0$| p/CA Unicenter remote control/ cpe:/a:ca:unicenter_remote_control/\nmatch caicci m|^\\x02\\x07\\x04\\0\\xe0\\0{11}\\x02\\0{7}\\x04\\x03\\x02\\x010\\0{7}\\x01\\0\\0\\0\\x01\\0\\0\\0\\xe0\\0{8}\\x80\\0\\0\\0\\x80\\0\\0\\0ems-p-sp\\0{8}\\x01\\0{10}\\x12\\x01\\0\\0EMS-P-SPO-01\\0{53}EMS-P-SPO-01\\0{55}$| p/CAI-CCI/\nmatch ccirmtd m|^\\x02\\x07\\x04\\0\\xe0\\0{11}\\x02\\0{7}\\x04\\x03\\x02\\x010\\0{7}\\x01\\0\\0\\0\\x01\\0\\0\\0\\xe0\\0{8}\\x80\\0\\0\\0\\x80\\0\\0\\0hfnapp04\\0{8}\\x01\\0{10}\\x02\\0\\0\\0HFNAPP04\\0{57}HFNAPP04\\0{59}$| p/CA Unicenter CCI Remote Daemon/\n\nmatch calibre-json m|^\\d+\\[\\d+, {.*?\\\"calibre_version\\\": \\[(\\d+), (\\d+), (\\d+)\\], .*?\\\"currentLibraryName\\\": \\\"([^\"]+)\\\",| p/Calibre Sync JSON/ v/$1.$2.$3/ i/library name: $4/ cpe:/a:kovid_goyal:calibre:$1.$2.$3/\nmatch calibre-json m|^\\d+\\[\\d+, {.*?\\\"currentLibraryName\\\": \\\"([^\"]+)\\\",.*?\\\"calibre_version\\\": \\[(\\d+), (\\d+), (\\d+)\\],| p/Calibre Sync JSON/ v/$2.$3.$4/ i/library name: $1/ cpe:/a:kovid_goyal:calibre:$2.$3.$4/\n\n# https://github.com/ninjasphere/driver-go-chromecast\n# The \"@\\0\" at the end is newer, but no info on why.\nmatch castv2 m|^\\0\\0\\0X\\x08\\0\\x12\\x0bTr@n\\$p0rt-0\\x1a\\x0bTr@n\\$p0rt-0\\\"'urn:x-cast:com\\.google\\.cast\\.tp\\.heartbeat\\(\\x002\\x0f{\\\"type\\\":\\\"PING\\\"}$| p/Ninja Sphere Chromecast driver/\nmatch castv2 m|^\\0\\0\\0Z\\x08\\0\\x12\\x0bTr@n\\$p0rt-0\\x1a\\x0bTr@n\\$p0rt-0\"'urn:x-cast:com\\.google\\.cast\\.tp\\.heartbeat\\(\\x002\\x0f\\{\"type\":\"PING\"\\}@\\0| p/Ninja Sphere Chromecast driver/\n\nmatch cccam m|^Welcome to the CCcam information client\\.\\n| p/CCcam DVR card sharing system information/\n\n\n# http://comments.gmane.org/gmane.comp.security.openvas.users/3189\n# Also submitted by an Nmap user, but with different data following.\nmatch nnsrv m|^\\x94\\0\\0\\0\\xf4\\xff\\xff\\xff\\x01\\0\\0\\0\\xff\\xff\\xff\\xff\\0\\0\\0\\0\\xa5\\0\\0\\0\\0\\0\\0\\0| p/iStar Driver Service/ i/access control system/ d/security-misc/\n\nmatch cddbp m|^201 ([-\\w_.]+) CDDBP server v([-\\w.]+) ready at .*\\r\\n| p/freedb cddbp server/ v/$2/ h/$1/\n\n# http://ceph.com/docs/next/dev/network-protocol/\n# 2 back-to-back struct entity_addr_t, consisting of a u32 type (0), u32 nonce (random), and a sockaddr_storage.\n# This works for IPv4, have yet to get an IPv6 fingerprint\nmatch ceph m|^ceph (v[\\w._-]+)\\0\\0\\0\\0....\\0\\x02......\\0{120}\\0\\0\\0\\0....\\0\\x02......\\0{120}|s p/Ceph distributed filesystem/ v/protocol $1/ i/ipv4/\n\nmatch chargen m|^!\"#\\$%\\&'\\(\\)\\*\\+,-\\./0123456789:;<=>\\?\\@ABCDEFGHIJKLMNOPQRSTUVWXYZ\\[\\\\\\]\\^_${backquote}abcdefgh\\r\\n\"#\\$%\\&'\\(\\)\\*\\+,-\\./0123456789:;<=>\\?\\@ABCDEF| p/Linux chargen/ o/Linux/ cpe:/o:linux:linux_kernel/a\n# Redhat 7.2, xinetd 2.3.7 chargen\nmatch chargen m|^\\*\\+,-\\./0123456789:;<=>\\?@ABCDEFGHIJKLMNOPQRSTUVWXYZ\\[\\\\\\]\\^_${backquote}abcdefghijklmnopq\\r\\n\\+,-\\./| p/xinetd chargen/ o/Unix/\n# Sun Solaris 9; Windows\nmatch chargen m|^\\ !\"#\\$%&'\\(\\)\\*\\+,-\\./0123456789:;<=>\\?@ABCDEFGHIJKLMNOPQRSTUVWXYZ\\[\\\\\\]\\^_|\n# Mandrake Linux 9.2, xinetd 2.3.11 chargen\nmatch chargen m|NOPQRSTUVWXYZ\\[\\\\\\]\\^_${backquote}abcdefghijklm| p/xinetd chargen/ o/Unix/\nmatch chargen m|^\\*\\*\\* Port V([\\d.]+) !\\\"#\\$%&'\\(\\)\\*\\+,-\\./0123456789:| p/Lantronix chargen/ v/$1/\nmatch chargen m|^The quick brown fox jumps over the lazy dog\\. 1234567890\\r\\n| p/Tektronix Phaser chargen/ d/printer/\n\nmatch chat m|^WebStart Chat Service Established\\.\\.\\.\\r\\n\\(C\\) 2000-\\d+ R Gabriel all Rights Reserved\\r\\n| p/WebStart Chat Service/\nmatch chat m|^\\*\\x01..\\0\\x04\\0\\0\\0\\x01$|s p/AIM or ICQ server/\nmatch chat-ctrl m|^InfoChat Server v([\\d.]+) Remote Control ready\\n\\r| p/InfoChat Remote Control/ v/$1/\n\nmatch check_mk m|^<<<check_mk>>>\\nVersion: ([\\w._-]+)\\n| p/check_mk extension for Nagios/ v/$1/\n\nmatch chess m=^\\n\\r             _       __     __                             __      \\n\\r            \\| \\|     / /__  / /________  ____ ___  ___     / /_____ \\n\\r            \\| \\| /\\| / / _ \\\\/ / ___/ __ \\\\/ __ ${backquote}__ \\\\/ _ \\\\   / __/ __ \\\\\\n\\r= p/Lasker Internet Chess server/\n\nmatch chilliworx m|^ChilliSVC ([\\d.]+)\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/ChilliWorx management console/ v/$1/ d/remote management/\n\nmatch cirrato-client m|^Cirrato Client ([\\w._-]+)\\0$| p/Cirrato print server client/ v/$1/\n\n# Citadel/UX. Maybe to change the service name and to move somewhere else? embyte\nmatch citadel m|^200.*Citadel(?:/UX)?| p/Citadel (UX) messaging server/ cpe:/a:citadel:ux/\n# Citrix, Metaframe XP on Windows\nmatch citrix-ica m|^\\x7f\\x7fICA\\0\\x7f\\x7fICA\\0| p/Citrix Metaframe XP ICA/ o/Windows/ cpe:/o:microsoft:windows/a\n# Citrix MetaFrame XP 1.0 implimented with ClassLink 2000 on NT4\nmatch citrix-ima m|^.\\0\\0\\0\\x81\\0\\0\\0\\x01|s p/Citrix Metaframe XP IMA/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# http://www.citynet.ru/citynet-sv.3\n# Really no idea what this is or which fields are mutable\nmatch citynet m|^CityNetDUTChannel\\[AT3V1\\]\\x04\\0\\xa5\\x0f\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0........|s p/CityNet SV.3/\n\n# Length-prefixed Protocol Buffers. This is \"UPDATE_TRACK_POSITION\" message sent when music is playing. Version is based on protocol version byte.\nmatch clementine m|^\\0\\0\\0.\\x08\\x0b\\x10\\.\\xa2\\x01.\\x08.|s p/Clementine music player remote control/ v/1.2/ cpe:/a:clementine-player:clementine:1.2/\nmatch clementine m|^\\0\\0\\0.\\x08\\x0c\\x10\\.\\xa2\\x01.\\x08.|s p/Clementine music player remote control/ v/1.2.1/ cpe:/a:clementine-player:clementine:1.2.1/\nmatch clementine m|^\\0\\0\\0.\\x08\\x0d\\x10\\.\\xa2\\x01.\\x08.|s p/Clementine music player remote control/ v/1.2.2 - 1.2.3/ cpe:/a:clementine-player:clementine:1.2/\nsoftmatch clementine m|^\\0\\0\\0.\\x08.\\x10\\.\\xa2\\x01.\\x08.|s p/Clementine music player remote control/ cpe:/a:clementine-player:clementine/\n\nmatch clsbd m|^\\0\\0\\0\\x10ClsBoolVersion 1$| p/Cadence IC design daemon/\nmatch cmrcservice m|^\\\"\\0\\0\\x80 \\0S\\0T\\0A\\0R\\0T\\0_\\0H\\0A\\0N\\0D\\0S\\0H\\0A\\0K\\0E\\0\\0\\0| p/Microsoft Configuration Manager Remote Control service/ i/CmRcService.exe/ o/Windows/ cpe:/a:microsoft:systems_management_server/ cpe:/o:microsoft:windows/a\nmatch cmrcservice m|^,\\0\\0\\x80\\*\\0E\\0R\\0R\\0O\\0R\\0_\\0N\\0O\\0_\\0A\\0C\\0T\\0I\\0V\\0E\\0_\\0U\\0S\\0E\\0R\\0\\0\\0| p/Microsoft Configuration Manager Remote Control service/ i/Error: no active user/ o/Windows/ cpe:/a:microsoft:systems_management_server/ cpe:/o:microsoft:windows/a\nmatch cmrcservice m|^0\\0\\0\\x80\\.\\0E\\0R\\0R\\0O\\0R\\0_\\0E\\0X\\0I\\0S\\0T\\0I\\0N\\0G\\0_\\0S\\0E\\0S\\0S\\0I\\0O\\0N\\0\\0\\0| p/Microsoft Configuration Manager Remote Control service/ i/Error: existing session/ o/Windows/ cpe:/a:microsoft:systems_management_server/ cpe:/o:microsoft:windows/a\nmatch codeforge m|^CFMSERV\\(1\\)\\n| p/CodeForge IDE/\nmatch concertosendlog m|^Concerto Software\\r\\n\\r\\nEnsemblePro SendLog Server - Version (\\d[-.\\w]+)\\r\\n\\r\\nEnter Telnet Password\\r\\n#> | p/Concerto Software EnsemblePro CRM software SendLog Server/ v/$1/\nmatch concertotimesync m|^Concerto Software\\r\\n\\r\\nContactPro TimeSync Server - Version (\\d[-.\\w]+)\\r\\n\\r\\nEnter Telnet Password\\r\\n#> | p/Concerto Software EnsemblePro CRM software TimeSync Server/ v/$1/\nmatch conference m|^Conference, V([\\d.]+)\\r\\n$| p/Forum Communcations conferenced/ v/$1/\nmatch complex-link m|^\\x06\\x07\\xd0\\0\\x01\\0\\0\\0\\x01\\0\\x02\\x07\\xd0\\0\\x01\\0\\0\\x01\\x0f\\x01\\xf4\\0\\0\\0\\0HP +LTO ULTRIUM| p/HP LTO Ultrium data port/ d/storage-misc/\n\n# Commvault Backup Server (CommVault Galaxy(R) Data Protection)\nmatch commvault m=^\\0\\0\\0\\t\\0\\0\\0\\|\\0\\0\\0= p/CommVault Galaxy data backup/\n\nmatch compuware-lm m|^Hello, I don't understand your request\\.  Good bye\\.\\.\\.\\. $| p/Compuware Distributed License Management/\n\n# PacketCable COPS Client-Open\n# http://tools.ietf.org/html/rfc2748#section-2.1\nmatch cops m|^\\x10\\x06[\\x80-\\xff].......\\x0b\\x01([\\w._-]+)\\0|s p/Common Open Policy Service (COPS)/ v/1/ h/$1/\n\nmatch control-m m|^a 00000094S         000000             L E CTM5761S0103Control-M server already connected to another gateway\\. | p|BMC Control-M/EM server| cpe:/a:bmc:software_control-m_server/\n\n# This port uses a binary protocol: [esc]X@ query OS version, [esc]XA query hardware\nmatch crestron-control m|^Crestron Terminal Protocol Console opened\\r\\n| p/Crestron Terminal Console/ i/Crestron automation system/ cpe:/h:crestron/\nmatch crestron-control m|^\\r\\nCrestron Terminal Protocol Console Opened\\r\\n\\r\\n| p/Crestron Terminal Console/ i/Crestron automation system/ cpe:/h:crestron/\n\n# Crestron Terminal Protocol - text based protocol\nmatch crestron-ctp m|^\\r\\nCEN-IDOC Control Console\\r\\n\\r\\nCEN-IDOC>| p/Crestron CEN-IDOC music player connection text ui/ d/media device/ cpe:/h:crestron:cen-iodc/\nmatch crestron-ctp m|^\\r\\nRMC Control Console\\r\\n\\r\\nQM-RMC>\\r\\nQM-RMC>| p/Crestron QM-RMC text ui/ d/media device/ cpe:/h:crestron:qm-rmc/\nmatch crestron-ctp m|^TSW-[\\w._-]+ Console\\r\\n\\r\\n(TSW-[\\w._-]+)>| p/Crestron $1 touch screen text ui/ d/media device/ cpe:/h:crestron:$1/\nmatch crestron-ctp m|^Password\\? \\r\\n| p/Crestron MPS-200 presentation system text ui/ i/Authentication required/ d/media device/ cpe:/h:crestron:mps-200/\nmatch crestron-ctp m|^\\r\\n([-\\w]+) Control Console\\r\\nConnected to Host: ([-\\w_.]+)\\r\\n| p/Crestron $1 automation system text ui/ d/specialized/ h/$2/ cpe:/h:crestron:$1/\nmatch crestron-ctp m|^\\r?\\n?[-\\w]+ Control Console\\r\\n\\r\\n?([-\\w_.]+)>| p/Crestron $1 automation system text ui/ d/specialized/ cpe:/h:crestron:$1/\nmatch crestron-ctp m|^[-\\w]+ Console\\r\\n\\r\\n([-\\w]+)>\\r\\r\\n| p/Crestron $1 automation system text ui/ d/specialized/ cpe:/h:crestron:$1/\nmatch crestron-ctp m|^[-\\w]+ Console\\r\\nWarning: Another console session is open \\r\\n\\r\\n([-\\w]+)>| p/Crestron $1 automation system text ui/ d/specialized/ cpe:/h:crestron:$1/\nmatch crestron-ctp m|\\*\\*\\*\\*\\r\\n\\r\\nHELP : Provides help menus\\.\\r\\nHELP \\[ALL | p/Crestron automation system text ui/ i/Authentication required/ d/specialized/ cpe:/h:crestron/\n# Should be matched above, unable to verify - TS\nmatch crestron-ctp m|^\\r\\nPRO2 Control Console\\r\\n| p/Crestron PRO2 automation system text ui/ d/specialized/ cpe:/h:crestron:pro2/\nmatch crestron-ctp m|^\\r\\nMC2E Control Console\\r\\n| p/Crestron MC2E automation system text ui/ d/specialized/ cpe:/h:crestron:mc2e/\n\n# XSig allows communcation with a Crestron control system.\nmatch crestron-xsig m|^\\x0f\\0\\x01\\x02$| p/Crestron XSig communication/ d/specialized/ cpe:/h:crestron/\n\nmatch crossfire m|^\\0#version 1023 1027 Crossfire Server\\n| p/Crossfire game server/ v/1.9.0 or earlier/\nmatch crossfire m|^\\0#version 1023 102[89] Crossfire Server\\n| p/Crossfire game server/ v/1.9.1/\n# Softmatch so we can get a version\nsoftmatch crossfire m|^\\0#version \\d+ \\d+ Crossfire Server\\n| p/Crossfire game server/ cpe:/a:crossfire:crossfire/\n\nmatch cyrus-sync m|\\* OK ([-.\\w]+) Cyrus sync server v([-.\\w]+)| p/Cyrus sync server/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\n\nmatch cvspserver m|^no repository configured in /| p/CVS pserver/ i/broken/\nmatch cvspserver m|^/usr/sbin/cvs-pserver: line \\d+: .*cvs: No such file or directory\\n| p/CVS pserver/ i/broken/\nmatch cvspserver m|^Unknown command: ${backquote}pserver'\\n\\nCVS commands are:\\n| p/CVS pserver/ i/broken/\n\nmatch cvsup m|^OK \\d+ \\d+ ([-.\\w]+) CVSup server ready\\n| p/CVSup/ v/$1/\n\nmatch damewaremr m|^0\\x11\\0\\0...........@.........\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0.\\0\\0\\0$|s p/DameWare Mini Remote Control/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch darkcomet m|^[0-9A-F]{12}$| p/DarkComet RAT/ i/**BACKDOOR**/\n\n# Linux\nmatch daytime m=^[0-3]\\d [A-Z][A-Z][A-Z] (?:19|20)\\d\\d \\d\\d:\\d\\d:\\d\\d \\S+\\r\\n=\n# OpenBSD 3.2\nmatch daytime m=^[A-Z][a-z]{2} [A-Z][a-z]{2} +\\d{1,2} +\\d\\d:\\d\\d:\\d\\d (?:19|20)\\d\\d\\r\\n= o/Unix/\n# Solaris 8,9\nmatch daytime m=^[A-Z][a-z]{2} [A-Z][a-z]{2} +\\d{1,2} +\\d\\d:\\d\\d:\\d\\d (?:19|20)\\d\\d\\n\\r= p/Sun Solaris daytime/ o/Solaris/ cpe:/o:sun:sunos/a\n# Windows daytime\nmatch daytime m=^\\d+:\\d\\d:\\d\\d [AP]M \\d+/\\d+/(?:19|20)\\d\\d\\n$= p/Microsoft Windows USA daytime/ o/Windows/ cpe:/o:microsoft:windows/a\n# Windows daytime - UK english I think (no AM/PM)\nmatch daytime m=^\\d\\d:\\d\\d:\\d\\d \\d\\d?.\\d\\d?.(?:19|20)\\d\\d\\n$= p/Microsoft Windows International daytime/ o/Windows/ cpe:/o:microsoft:windows/a\n# daytime on Windows 2000 Server\nmatch daytime m=^.... \\d{1,2}:\\d{1,2}:\\d{1,2} (?:19|20)\\d\\d-\\d{1,2}-\\d{1,2}\\n$= p/Microsoft Windows daytime/ o/Windows/ cpe:/o:microsoft:windows/a\n# Windows NT daytime\nmatch daytime m=^[A-Z][a-z]+day, [A-Z][a-z]+ \\d{1,2}, (?:19|20)\\d\\d \\d{1,2}:\\d\\d:\\d\\d\\n\\0$= p/Microsoft Windows daytime/ o/Windows/ cpe:/o:microsoft:windows/a\n# Windows 2000 Adv Server sp-4 daytime\nmatch daytime m=^[A-Z][a-z][a-z] [A-Z][a-z][a-z] \\d{1,2} \\d{1,2}:\\d{1,2}:\\d{1,2} (?:19|20)\\d\\d\\n= p/Microsoft Windows daytime/ o/Windows/ cpe:/o:microsoft:windows/a\n# Windows 2003 Server daytme\nmatch daytime m=^\\d{1,2}\\.\\d{1,2}\\.\\d{1,2} \\d\\d/\\d\\d/(?:19|20)\\d\\d\\n= p/Microsoft Windows daytime/ o/Windows/ cpe:/o:microsoft:windows/a\n# Windows 2000 Prof. Central European format\nmatch daytime m|^\\d{1,2}:\\d\\d:\\d\\d \\d{1,2}[/.]\\d{1,2}[/.]\\d{4}\\n$| p/Microsoft Windows daytime/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch daytime m|^\\d{1,2}:\\d\\d:\\d\\d [ap]m \\d{4}/\\d\\d/\\d\\d\\n$| p/Microsoft Windows daytime/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch daytime m|^\\d{1,2}:\\d\\d:\\d\\d [ap]m \\d{1,2}/\\d{1,2}/\\d{4}\\n$| p/Microsoft Windows 2003 daytime/ o/Windows/ cpe:/o:microsoft:windows_server_2003/a\n# South Africa localization.\nmatch daytime m|^\\d\\d:\\d\\d:\\d\\d [AP]M \\d\\d\\d\\d/\\d\\d/\\d\\d\\n$| p/Microsoft Windows 7 daytime/\n\n# Windows International daytime\nmatch daytime m|^\\d\\d:\\d\\d:\\d\\d \\d\\d.\\d\\d.20\\d\\d\\n$| p/Microsoft Windows International daytime/ o/Windows/ cpe:/o:microsoft:windows/a\n# New Zealand format daytime - Windows 2000\nmatch daytime m|^[01]\\d:\\d\\d:\\d\\d [AP]M [0-3]\\d/[01]\\d/0\\d\\n$| p/Microsoft Windows daytime/ i/New Zealand style/ o/Windows/ cpe:/o:microsoft:windows/a\n# HP-UX B.11.00 A inetd daytime\nmatch daytime m|^[A-Z][a-z]{2} [A-Z][a-z]{2} +\\d{1,2} \\d\\d:\\d\\d:\\d\\d [A-Z]+ 20\\d\\d\\r\\n$| p/HP-UX daytime/ o/HP-UX/ cpe:/o:hp:hp-ux/a\n# Tardis 2000 v1.4 on NT\nmatch daytime m|^[A-Z][a-z]{2} [A-Z][a-z]{2} +\\d{1,2} \\d\\d:\\d\\d:\\d\\d 20\\d\\d $| p/Tardis 2000 daytime/\nmatch daytime m|^\\d+ \\d\\d-\\d\\d-\\d\\d \\d\\d:\\d\\d:\\d\\d 50 0 4 \\d+\\.0 UTC\\(NIST\\) \\*\\r\\n| p/Greyware Domain Time II daytime/\n\n# TrueTime nts100 running WxWorks\nmatch daytime m|^[A-Z][a-z]{2}, [A-Z][a-z]{2} \\d{1,2}, 20\\d\\d, \\d\\d:\\d\\d:\\d\\d-UTC$| p/TrueTime nts100/\n\n# Cisco router daytime\nmatch daytime m|^[A-Z][a-z]+day, [A-Z][a-z]+ \\d{1,2}, \\d{4} \\d\\d:\\d\\d:\\d\\d-\\w\\w\\w\\w?(?:-?DST)?\\r\\n| p/Cisco router daytime/ o/IOS/ cpe:/o:cisco:ios/a\n\nmatch daytime m|^\\w+, +\\d+ +\\w+ +\\d+ +\\d+:\\d+:\\d+ [+-]\\d+\\r\\n([\\w:._ /\\\\-]+\\\\ats\\.exe)\\r\\n| p/Atomic Time Synchonizer daytime/ i/$1/ o/Windows/ cpe:/o:microsoft:windows/\nmatch daytime m|^\\d\\d\\d\\d/\\d\\d/\\d\\d \\d\\d:\\d\\d:\\d\\d\\r\\n$| p/American Dynamics EDVR security camera daytime/ d/webcam/\n\n# TODO: replace this when we figure out what it is.\nsoftmatch daytime m|^[0-2]\\d:[0-5]\\d:[0-5]\\d [12]\\d\\d\\d/\\d\\d?/\\d\\d?\\n$|\n\nmatch devonthink m|^\\xe6\\x01\\0\\0\\0\\0\\0\\0bplist00\\xd4\\x01\\x02\\x03\\x04\\x05\\x06\\x1e\\x1fX\\$versionX\\$objectsY\\$archiverT\\$top\\x12\\0\\x01\\x86\\xa0\\xa5\\x07\\x08\\x0f\\x13\\x1aU\\$null\\xd3\\t\\n\\x0b\\x0c\\r\\x0eStag\\[dataContentV\\$class\\x10\\x01\\x80\\x02\\x80\\x04\\xd2\\x10\\x0b\\x11\\x12WNS\\.dataO\\x10\\x98bplist00\\xd2\\x01\\x02\\x03\\x04_\\x10\\x16ComputerIdentificationZPINCodeKey_\\x10:([\\w._-]+)\\x08| p/DEVONthink dcoument management/ i/PIN code key: $1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\n\nmatch diablo2 m|^[\\xae\\xaf]\\x01$| p/Diablo 2 game server/\n\nmatch dict m|^530 access denied\\r\\n$| p/dictd/ i/access denied/\nmatch dict m|^220 ([-.\\w]+) dictd ([-.\\w/]+) on ([-.+ \\w]+) <auth\\.mime>| p/dictd/ v/$2/ o/$3/ h/$1/\nmatch dict m|^220 hello <> msg\\r\\n$| p/Serpento dictd/\n\n# DS2, Application Version 04.5 (025) M2IP - 03.1 (09.2)Bootloader Version 04.5 (022) M2IP - 03.1 (09.2)\nmatch digital-sprite-status m|^acam_bitmask\\[0\\]=1,2,4,8,16,32,64,128,256,512,1024,2048,4096,8192,16384,32768,1,2,4,8,16,32,64,128,256,512,1024,2048,4096,8192,16384,32768\\r\\nact_actions\\[0\\]=1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1\\r\\nact_buzzer=0\\r\\n| p/Dedicated Micros Digital Sprite 2 camera/ d/webcam/\n\n# Digifort port 8600.\nmatch digifort m|^\\xd1Q\\xf0'\\0\\0\\0;\\x01\\x05LOGIN\\0\\0\\0\\x30\\x01\\x01\\0\\0\\0\\x05NONCE\\x08 \\0\\0\\0[0-9A-F]{32}$| p/Digifort Enterprise 6.5/ o/Windows/ cpe:/a:digifort:digifort:6.5.0_final/ cpe:/o:microsoft:windows/a\n# Digifort port 8610.\nmatch digifort-analytics m|^\\xd1Q\\xf0'\\0\\0\\0A\\x01\\x15CMD_ANALYTICS_VERSION\\0\\0\\0&\\x01\\x01\\0\\0\\0\\x07Version\\x08\\x14\\0\\0\\0DIGIFORT ([\\w._ -]+)\\xd1Q\\xf0'\\0\\0\\0I\\x01\\x13CMD_ANALYTICS_NONCE\\0\\0\\0\\x30\\x01\\x01\\0\\0\\0\\x05NOnce\\x08 \\0\\0\\0\\x30CD6DD9A883431A881BC14DE48F0F892\\xd1Q\\xf0'\\0\\0\\0\\x18\\x01\\x12CMD_ANALYTICS_PING\\0\\0\\0\\0\\xd1Q\\xf0'\\0\\0\\0\\x18\\x01\\x12CMD_ANALYTICS_PING\\0\\0\\0\\0$| p/Digifort Enterprise analytics/ v/$1/ o/Windows/ cpe:/a:digifort:digifort:$1/ cpe:/o:microsoft:windows/a\n# Digifort port 8611.\nmatch digifort-lpr m|^\\xd1Q\\xf0'\\0\\0\\0;\\x01\\x0fCMD_LPR_VERSION\\0\\0\\0&\\x01\\x01\\0\\0\\0\\x07Version\\x08\\x14\\0\\0\\0DIGIFORT ([\\w._ -]+)\\xd1Q\\xf0'\\0\\0\\0C\\x01\\rCMD_LPR_NONCE\\0\\0\\0\\x30\\x01\\x01\\0\\0\\0\\x05NOnce\\x08 \\0\\0\\0\\x332DA9B47DA082C982384782CEDFEE055\\xd1Q\\xf0'\\0\\0\\0\\x12\\x01\\x0cCMD_LPR_PING\\0\\0\\0\\0\\xd1Q\\xf0'\\0\\0\\0\\x12\\x01\\x0cCMD_LPR_PING\\0\\0\\0\\0$| p/Digifort Enterprise LPR/ v/$1/ o/Windows/ cpe:/a:digifort:digifort:$1/ cpe:/o:microsoft:windows/a\n\nmatch directconnect m=^\\$MyNick ([-.\\w]+)|\\$Lock= p/Direct Connect P2P/ i/User: $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch directconnect m|^\\r\\nDConnect Daemon v([\\d.]+)\\r\\nlogin: | p/Direct Connect P2P/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch directconnect m=<Hub-Security> Your IP is temporarily banned for (\\d+) minutes\\.\\|= p/Shadows DirectConnect hub/ i/Banned for $1 minutes/\nmatch directconnect m=<Hub-Security> You are being banned for (\\d+) minutes \\(by SDCH Anti Hammering\\)\\.\\|= p/Shadows DirectConnect hub/ i/Banned for $1 minutes/\nmatch directconnect m=<Hub-Security> You are being redirected to ([\\d.]+)\\|\\$ForceMove [\\d.]+\\|= p/PtokaX directconnect hub/ i/Redirected to $1/\nmatch directconnect m=^server-version\\$([\\w._-]+)\\|init-completion\\$200\\|port\\$\\d+\\|= p/Shakespeer Direct Connect GUI/ v/$1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch directconnect-admin m=^\\r\\nOpen DC Hub, version ([\\d.]+), administrators port\\.\\r\\nAll commands begin with '\\$' and end with '\\|'\\.\\r\\nPlease supply administrators passord\\.\\r\\n= p/OpenDCHub directconenct hub admin port/ v/$1/ o/Unix/\n\nmatch directupdate m|^OK Welcome <[\\d.]+> on DirectUpdate server ([\\d.]+)\\r\\n| p/DirectUpdate dynamic IP updater/ v/$1/\nmatch directupdate m|^OK Welcome <[\\d.]+> on DirectUpdate engine VER=\\[([\\d.]+) \\(Build (\\d+)\\)\\]-0x\\w+\\r\\n| p/DirectUpdate dynamic IP updater/ v/$1 build $2/\n\nmatch diskmonitor m|^000001a2[0-9a-f]{410}\\r\\n| p/Active@ Hard Disk Monitor/\nmatch diskmonitor m|^0000019a[0-9a-f]{402}\\r\\n| p/Active@ Hard Disk Monitor/\n\nmatch lmtp m|^220 DSPAM DLMTP ([\\w._-]+) Authentication Required\\r\\n| p/DSPAM lmtpd/ v/$1/ cpe:/a:dspam:dspam:$1/\n\nmatch docker-swarm m|^\\0\\0\\0\\x04\\0\\0\\0\\0\\0\\0\\0\\x04\\x08\\0\\0\\0\\0\\0\\0\\x0e\\xff\\xf1| p/Docker Swarm/ cpe:/a:redhat:docker/\n\nmatch doka5 m|^\\xff\\0\\0\\x14\\x9d\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x11l\\0\\0\\0\\x17\\0\\0| p/Surecomp DOKA 5/ cpe:/a:surecomp:doka_5/\n\nmatch drawpile m|^..\\0DRAWPILE 3 ([A-Z,]+)|s p/DrawPile/ v/0.7.0/ i/protocol 3; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.7.0/\nmatch drawpile m|^..\\0DRAWPILE 4 ([A-Z,]+)|s p/DrawPile/ v/0.7.1 - 0.7.2/ i/protocol 4; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.7/\nmatch drawpile m|^..\\0DRAWPILE 5 ([A-Z,]+)|s p/DrawPile/ v/0.8.0/ i/protocol 5; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.8.0/\nmatch drawpile m|^..\\0DRAWPILE 6 ([A-Z,]+)|s p/DrawPile/ v/0.8.1/ i/protocol 6; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.8.1/\nmatch drawpile m|^..\\0DRAWPILE 7 ([A-Z,]+)|s p/DrawPile/ v/0.8.2 - 0.8.3/ i/protocol 7; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.8/\nmatch drawpile m|^..\\0DRAWPILE 8 ([A-Z,]+)|s p/DrawPile/ v/0.8.4 - 0.8.5/ i/protocol 8; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.8/\nmatch drawpile m|^..\\0DRAWPILE 9 ([A-Z,]+)|s p/DrawPile/ v/0.8.6/ i/protocol 9; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.8.6/\nmatch drawpile m|^..\\0DRAWPILE 10 ([A-Z,]+)|s p/DrawPile/ v/0.9.0 - 0.9.1/ i/protocol 10; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.9/\nmatch drawpile m|^..\\0DRAWPILE 11 ([A-Z,]+)|s p/DrawPile/ v/0.9.2 - 0.9.5/ i/protocol 11; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.9/\nmatch drawpile m|^..\\0DRAWPILE 12 ([A-Z,]+)|s p/DrawPile/ v/0.9.6/ i/protocol 12; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.9.6/\nmatch drawpile m|^..\\0DRAWPILE 13 ([A-Z,]+)|s p/DrawPile/ v/0.9.7 - 0.9.8/ i/protocol 13; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.9/\nmatch drawpile m|^..\\0DRAWPILE 14 ([A-Z,]+)|s p/DrawPile/ v/0.9.9/ i/protocol 14; flags: $1/ cpe:/a:calle_laakkonen:drawpile:0.9.9/\nmatch drawpile m|^..\\0DRAWPILE 15 ([A-Z,]+)|s p/DrawPile/ v/0.9.10 - 1.0.6/ i/protocol 15; flags: $1/ cpe:/a:calle_laakkonen:drawpile/\n\nmatch drawpile m|^..\\0\\0\\{\"flags\":\\[([^]]+)\\],\"message\":\"Drawpile server (\\d[\\w._-]+)\",\"type\":\"login\",\"version\":(\\d+)\\}|s p/DrawPile/ v/$2/ i/JSON protocol $3; flags: $1/ cpe:/a:calle_laakkonen:drawpile:$2/\n\nmatch durian m|^<c5>Durian Web Application Server III<c4> ([^<]+)<c0> for Win32\\r| p/Durian Web Application Server III/ v/$1/ o/Windows/ cpe:/a:mozilla:durian_web_application_server:$1/ cpe:/o:microsoft:windows/a\n\nmatch dvr-video m|^head\\0\\0\\0\\0[\\xf9-\\xfa].\\0\\0\\x04\\0\\0\\0\\x03\\0{45}[\\0\\x03]\\0| p/LTS or QSEE DVR video server/ d/media device/\n\n# 1024 random bytes of challenge\nmatch d-mp m|^\\x01\\0\\0\\0\\x08\\x04\\0\\0\\x04\\x04\\0\\0\\0\\x04\\0\\0.{100}| p/Dark MultiPlayer Kerbel Space Program mod/ cpe:/a:christopher_andrews:darkmultiplayer/\n\nmatch dnsix m|^DNSIX$|\n\n# Port 5900. http://www.ducea.com/2008/11/24/drac-ip-port-numbers/.\nmatch drac-console m|^\\0\\0\\0\\x0c\\0\\0\\0\\?\\0\\0\\0\\x02$| p/Dell Remote Access Controller 4 console/ cpe:/h:dell:remote_access_card:4/\n\nmatch dragon m|^UNAUTHORIZED\\n\\r\\n\\r$| p/Dragon realtime shell/\n\n# https://github.com/droboports/droboports.github.io/wiki/NASD-XML-format\nmatch drobo-nasd m|^DRINASD[9a]?\\0\\x01\\x01\\0\\0\\0\\0..<\\?xml version=\"1\\.0\" encoding=\"utf-8\"\\?>\\n\\n<ESATMUpdate>\\n    <mESAUpdateSignature>ESAINFO</mESAUpdateSignature>\\n    <mESAUpdateVersion>\\d+</mESAUpdateVersion>\\n    <mESAUpdateSize>\\d+</mESAUpdateSize>\\n    <mESAID>\\w+</mESAID>\\n    <mSerial>(\\w+)</mSerial>\\n    <mName>([^<]+)</mName>\\n    <mVersion>([][\\w._ ]+)</mVersion>\\n|s p/Drobo NASD/ v/$3/ i/name: $2; sn: $1/\nmatch drobo-dsvc m|^DRIDDSVC\\x07\\x01.\\0\\0\\0..<ESATMUpdate>\\r\\n\\t<mESAUpdateSignature>ESAINFO</mESAUpdateSignature>\\r\\n\\t<mESAUpdateVersion>\\d+</mESAUpdateVersion>\\r\\n\\t<mESAUpdateSize>\\d+</mESAUpdateSize>\\r\\n\\t<mESAID>0db\\d+</mESAID>\\r\\n\\t<mSerial>(tDB\\d+)</mSerial>\\r\\n\\t<mName>([^<]+)</mName>\\r\\n\\t<mVersion>([][\\w._ ]+)</mVersion>\\r\\n|s p/Drobo-FS DDSVC/ v/$3/ i/name: $2; sn: $1/\n\nmatch drweb m|^0 PROTOCOL 2 [23] AGENT,CONSOLE,INSTALL| p/DrWeb/\n\nmatch dynast-solver m|^DYNAST server v(.*) \\(Win32\\) - Copyright\\(c\\) DYN| p/DYNAST solver/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch echolink m|^[0-9a-f]{8}$| p/EchoLink radio-over-VoIP/\n\nmatch enemyterritory m|^Welcome [\\d.]+\\. You have 15 seconds to identify\\.\\r\\n| p/Enemy Territory Admin Mod/\n\nmatch efi-webtools m|^\\?p\\xf7/Zq\\xa2\\xf5\\x03.......\\xf4\\xea.......B$| p/EFI Fiery WebTools communication/\nmatch efi-workstation m|^\\(m\\xe9l@k\\xb7\\xf5\\x03$| p/EFI Fiery Command WorkStation/\nmatch efi-workstation m|^\\(m\\xe9l@k\\xb3\\xf7\\x1e\\xa5$| p/EFI Fiery Command WorkStation/\nmatch efi-workstation m|^\\(m\\xe9l@k\\xb1\\xf1\\x15\\xa5$| p/EFI Fiery Command WorkStation/\nmatch efi-workstation m|^\\(m\\xe9l@k\\xb3\\xf7\\x1f\\xa5$| p/EFI Fiery Command WorkStation/\n\nmatch eftserv m|^\\?\\x008 \\xc3p EFTSRV1                                 ([\\d.]+) | p/Ingenico EFTSRVd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ericom m|^Ericom GCS v([\\d.]+)\\0| p/Ericom PowerTermWebConnect/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch eggdrop m=^(?:\\xff\\xfb\\x05\\n)?\\r\\n\\r\\n([-${backquote}|.\\w]+)  \\(Eggdrop v(\\d[-.\\w]+) +\\([cC]\\) *1997= p/Eggdrop irc bot console/ v/$2/ i/botname: $1/ cpe:/a:eggheads:eggdrop:$2/\nmatch eggdrop m=^(?:\\xff\\xfb\\x05\\n)?\\r\\n\\r\\n([-${backquote}|.\\w]+)  \\(Eggdrop v(\\d[-.\\w]+)\\+(\\S+) +\\([cC]\\) *1997= p/Eggdrop irc bot console/ v/$2/ i/botname: $1; patch: $3/ cpe:/a:eggheads:eggdrop:$2/\n# These 2 fallbacks are because many people customize their eggdrop\n# banners.  These rules should always be well below the detailed rule\n# above.\nmatch eggdrop m|\\(Eggdrop v([\\d.]+) \\(C\\) 1997 Robey Pointer.*Eggheads|s p/Eggdrop IRC bot console/ v/$1/ cpe:/a:eggheads:eggdrop:$1/\nmatch eggdrop m|\\(Eggdrop v([\\d.]+)\\+(\\S+) \\(C\\) 1997 Robey Pointer.*Eggheads|s p/Eggdrop IRC bot console/ v/$1/ i/patch: $2/ cpe:/a:eggheads:eggdrop:$1/\n\nmatch eggdrop m|Copyright \\(C\\) 1997 Robey Pointer\\r\\n.*Eggheads| p/Eggdrop IRC bot console/ cpe:/a:eggheads:eggdrop/\n\nmatch egosecure-xmlrpc m|^<\\?xml version=\"1\\.0\"\\?><Xml><Header></Header><Body><XmlRpcServer><Greeting>EgoSecure XmlRpc Server</Greeting><HostName>([^<]+)</HostName><Version>([^<]+)</Version><ProductVersion>([^<]+)</ProductVersion>| p/EgoSecure Agent xmlrpc/ v/$3/ i/protocol version $2/ h/$1/\n\nmatch electra m|^login: \\r\\nREADY\\r\\n\\x01\\0\\0\\x1bA\\x1bA| p/Cardinal Electra server/ cpe:/a:cardinal_kft:electra/\n\nmatch emc-datadomain m|^G11\\x01..\\0\\0\\x02\\x01\\0\\0\\x10\\0\\0\\0.{16}|s p/EMC DataDomain/\n\nmatch enistic-manager m|^WZ=AAAAAAAAAAByAAE=73\\r0E0000000000cgAD83\\r$| p/Enistic Energy Manager/\n\nmatch envisalink m|^5053CD\\r\\n| p/EyezOn EnvisaLink/ d/security-misc/\n\nmatch epoptes-client m|^\\ndie\\(\\) {\\n    echo \\\"epoptes-client ERROR: \\$@\\\" >&2\\n    exit 1\\n}\\n\\ninfo\\(\\) {\\n    local server_ip def_iface\\n\\n    if \\[ -z \\\"\\$cached_info\\\" \\]; then\\n        VERSION=\\${VERSION:-([\\d.]+)}| p/Epoptes LTSPd/ i/compat version $1/ cpe:/a:epoptes:epoptes/\nmatch epp m|^\\x00\\x00..<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\" standalone=\\\"no\\\" \\?>\\n<epp xmlns=\\\"http://www\\.yoursrs\\.com/xml/epp/epp-1\\.0\\\" xmlns:xsi=\\\"http://www\\.w3\\.org/2001/XMLSchema-instance\\\" xsi:schemaLocation=\\\"http://www\\.yoursrs\\.com/xml/epp/epp-1\\.0 epp-1\\.0\\.xsd\\\">\\n\\n  <greeting>\\n    <svID>([^<]+)</svID>\\n    <svDate>.*</svDate>\\n    <svcMenu>\\n      <version>([\\w._-]+)</version>\\n|s p/Extensible Provisioning Protocol/ v/$2/ h/$1/\nsoftmatch epp m|^\\0...<\\?xml version=\"1\\.0\" encoding=\"[uU][tT][fF]-8\" standalone=\"no\"\\?>\\s*<epp xmlns=\"urn:ietf:params:xml:ns:epp-1\\.0\".*<svID>([^<]+)</svID>|s p/Extensible Provisioning Protocol/ i/name: $1/\n# RFC 5730\nsoftmatch epp m|^\\0...<\\?xml version=\"1\\.0\" encoding=\"[uU][tT][fF]-8\" standalone=\"no\"\\?>\\s*<epp xmlns=\"urn:ietf:params:xml:ns:epp-1\\.0\"|s\n\nmatch eve-online m|^7\\0\\0\\0~\\0\\0\\0\\0\\x14\\x06\\x04\\xe8\\x99\\x02\\0\\x05\\xeb\\0\\x04\\xdf\\x92\\0\\0\\n\\xd7\\xa3p=\\n\\xd7\\x18@\\x04\\x95\\xf1\\x01\\0\\x13\\x13EVE-EVE-RELEASE@ccp$| p/EVE Online game server/\nmatch eve-online m|^:\\0\\0\\0~\\0\\0\\0\\0\\x14\\x07\\x04\\xe8\\x99\\x02\\0\\x05\\x3b\\x01\\x05\\x03k\\n333333\\x1d@\\x04\\re\\x05\\0\\x13\\x17EVE-EVE-TRANQUILITY@ccp\\x01$| p/EVE Online game server/ i/Tranquility server/\n\nmatch exacqvision m|^8\\0\\0\\0\\x07\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0....\\0\\0\\0\\0....\\0\\0\\0\\0....\\0\\0\\0\\0$| p/exacqVision video surveillance/ v/2.1.13/\n\nmatch exec m|^\\x01Where are you\\?\\n$| p/netkit-rsh rexecd/ o/Linux/ cpe:/a:netkit:netkit/ cpe:/o:linux:linux_kernel/a\n\n# https://wiki.freenetproject.org/FCPv2\n# NULL probe hack\nmatch fcpv2 m|^ProtocolError\\nFatal=true\\nCodeDescription=ClientHello must be first message\\nCode=1\\nGlobal=false\\nEndMessage\\n$| p/Freenet Client Protocol listener/\nmatch fcpv2 m|^ProtocolError\\nCodeDescription=ClientHello must be first message\\nFatal=true\\nCode=1\\nGlobal=false\\nEndMessage\\n$| p/Freenet Client Protocol listener/\n\nsoftmatch fhem m|^OK 9 \\d+ \\d+ \\d+ \\d+ \\d+\\r\\n|\n\n# \\x04 is the length, \\x07\\x08 is the command, following two bytes are an\n# offset into an XOR code book. http://titanfiesta.googlecode.com/svn/trunk/TitanFiesta/Common/XorTable.h.\nmatch fiesta-online m|^\\x04\\x07\\x08..$| p/Fiesta Online game server/\n\nmatch filemaker-xdbc m|^2\\0TY\\xb8\\xd5\\xbbH:x\\x03\\^v\\xd5\\xdf\\x15Rgc\\xd7\\x1a\\x067\\(/\\xbf\\xc73\\t\\?3\\x85\\x9d\\x92ne\\x0bh\\xbe\\x8a\\]\\xdf!\\x14xA\\xbc\\xb6\\xe9_| p/FileMaker xDBC/\nmatch filemaker-xdbc m|^2\\0\\0\\0\\xc3\\x0b.\\0\\0\\0([\\d.]+) on Mac OS X ([\\d.]+) \\(([\\w_]+)\\)\\0\\0\\0\\0\\0|s p/FileMaker xDBC/ v/$1/ i/$3/ o/Mac OS X $2/ cpe:/o:apple:mac_os_x:$2/\n\n# protocol version can be mapped to Dashboard version, but not sure of backwards compatibility\nmatch filenet-pch m|^protocol\\x08([\\d.]+)\\napp_name\\x08TMS\\napp_version\\x08([\\d.]+)\\nhostname\\x08(\\S+)\\nos\\.arch\\x08\\S+\\npagesize\\x08\\d+\\nprocessors\\x08\\d+\\nos\\.name\\x08(\\S+)\\nos\\.version\\x08(\\S+)\\ntime\\x08\\d+\\n\\n| p/IBM FileNet System Manager Dashboard/ i/protocol: $1; app: Datacap Taskmaster Capture $2/ o/$4 $5/ h/$3/ cpe:/a:ibm:datacap:$2/ cpe:/a:ibm:filenet_system_manager_dashboard/\n# Softmatch for other apps\nsoftmatch filenet-pch m|^protocol\\x08([\\d.]+)\\napp_name\\x08(\\S+)\\napp_version\\x08([\\d.]+)\\nhostname\\x08(\\S+)\\nos\\.arch\\x08\\S+\\npagesize\\x08\\d+\\nprocessors\\x08\\d+\\nos\\.name\\x08(\\S+)\\nos\\.version\\x08(\\S+)\\ntime\\x08\\d+\\n\\n| p/IBM FileNet System Manager Dashboard/ i/protocol: $1; app: $2 $3/ o/$5 $6/ h/$4/ cpe:/a:ibm:filenet_system_manager_dashboard/\n\n# TODO: extract server build number from 6th byte and figure out what 5th byte represents.\nmatch filezilla m|^FZS\\0\\x04..\\t\\0\\0\\x04\\0\\x0d\\x01\\0\\0\\x14\\0\\0\\0\\0\\x08.{18}| p/FileZilla Server admin service/ v/0.9.X/ i/protocol version 1.13/ cpe:/a:filezilla-project:filezilla_server:0.9/\nmatch filezilla m|^FZS\\0\\x04..\\t\\0\\0\\x04\\0\\x0b\\x01\\0\\0\\x14\\0\\0\\0\\0\\x08.{18}| p/FileZilla Server admin service/ v/0.9.X/ i/protocol version 1.11/ cpe:/a:filezilla-project:filezilla_server:0.9/\nsoftmatch filezilla m|^FZS\\0\\x04...\\0\\0\\x04\\0..\\0\\0.| p/FileZilla Server admin service/ cpe:/a:filezilla-project:filezilla_server/\n\nmatch finger m|\\r\\n {4}Line {5,8}User {6,8}Host\\(s\\) {13,18}Idle +Location\\r\\n| p/Cisco fingerd/ d/router/ o/IOS/ cpe:/o:cisco:ios/a\nmatch finger m|^OpenLDAP Finger Service\\.\\.\\.\\r\\n| p/OpenLDAP fingerd/ cpe:/a:openldap:openldap/\nmatch finger m|^No cfingerd\\.conf file present\\.  Check your setup\\.\\n$| p/cfingerd/ i/Broken/\nmatch finger m|^Windows NT Version ([\\d.]+) build (\\d+), \\d+ processors? \\(.*\\)\\r\\nFingerDW V([\\d.]+) - Hummingbird Ltd\\.\\n| p/Hummingbird fingerd/ v/$3/ i/WinNT $1 build $2/ o/Windows NT/ cpe:/o:microsoft:windows_nt:$1/\nmatch finger m|^\\r\\nIntegrated port\\r\\nPrinter Type: Lexmark T642\\r\\nPrint Job Status:| p/Lexmark T642 printer fingerd/ d/printer/ cpe:/h:lexmark:t642/a\n\nmatch firewall m|^Your connection to this server has been blocked in this server's firewall\\.\\r\\nYou need to contact the server owner for further information\\.\\r\\nYour blocked IP address is .*\\r\\nThis server's hostname is ([\\w._-]+)\\r\\n$| p/ConfigServer Security & Firewall/ i/blocked/ h/$1/\n\n# Not sure what this protocol is\nmatch fortinet-sso m|^\\0\\0\\0.\\x80\\x06\\0\\0\\0\\n\\x01\\x03\\0\\x03V.\\0\\0\\0\\n\\x10\\x03\\0\\0\\0\\x02\\0\\0\\0\\x13\\x11\\x05FSSO ([\\d.]+)\\0\\0\\0\\x16\\x12\\x01.{16}\\0\\0\\0\\x17\\x13\\x01FSAE_SERVER_10001|s p/Fortinet SSO Collector Agent/ v/$1/\nmatch fortinet-sso m|^\\0\\0\\0.\\x80\\x06\\0\\0\\0\\n\\x01\\x03\\0\\0\\0\\0\\0\\0\\0\\n\\x10\\x03\\0\\0\\0\\0\\0\\0\\0\\x15\\x11\\x05FSAE server ([\\d.]+)\\0\\0\\0[\\x06\\x16]\\x12\\x05\\0*\\0\\0\\0\\x17\\x13\\x05FSAE_SERVER_10001|s p/Fortinet FSAE Server/ v/$1/\n\n# http://flightsim.apollo3.com/\nmatch fsd m|^\\$ERSERVER::004::Syntax error\\r\\n| p/FSD Flight Simulator/\n\nmatch freevcs m|^Welcome to FreeVCS MSSQL NT Service\\r\\n| p/FreeVCS/ i/MSSQL/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch freevcs m|^Welcome to FreeVCS DBISAM NT Service\\r\\n| p/FreeVCS/ i/DBISAM/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch freevcs m|^Welcome to FreeVCS Test NT Service\\r\\n| p/FreeVCS/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# http://www.frozen-bubble.org/servers/servers.php\nmatch frozen-bubble m|^FB/([\\d.]+) PUSH: SERVER_READY ([\\w._-]+) (\\w+)\\n| p/Frozen Bubble game server/ v/$1/ i/language: $3/ h/$2/\n\nmatch file-replication m|^>>\\n\\0\\x0eFRP Node Ready>>\\n\\0\\x0e| p/File Replication Pro/\n\nmatch freedoko m|^FreeDoko server\\n\\d+\\.\\d+: name: ([^\\n]+)\\n| p/FreeDoko game server/ i/name: $1/\n\nmatch ftp m|^220 ([-/.+\\w]+) FTP server \\(SecureTransport (\\d[-.\\w]+)\\) ready\\.\\r\\n| p/Tumbleweed SecureTransport ftpd/ v/$2/ h/$1/ cpe:/a:tumbleweed:securetransport:$2/\nmatch ftp m|^220 ([-/.+\\w]+) FTP server \\(SecureTransport (\\d[-.\\w]+)\\) ready\\.    \\r\\n| p/Axway SecureTransport ftpd/ v/$2/ h/$1/ cpe:/a:axway:securetransport:$2/\nmatch ftp m|^220 3Com 3CDaemon FTP Server Version (\\d[-.\\w]+)\\r\\n| p/3Com 3CDaemon ftpd/ v/$1/\nmatch ftp m|^220 3Com FTP Server Version ([-\\w_.]+)\\r\\n| p/3Com ftpd/ v/$1/\n# GuildFTP 0.999.9 on Windows\nmatch ftp m|^220-GuildFTPd FTP Server \\(c\\) \\d\\d\\d\\d(?:-\\d\\d\\d\\d)?\\r\\n220-Version (\\d[-.\\w]+)\\r\\n| p/Guild ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-.*\\r\\n220 Please enter your name:\\r\\n| p/GuildFTPd/ o/Windows/ cpe:/o:microsoft:windows/a\n# Medusa Async V1.21 [experimental] on Linux 2.4\nmatch ftp m|^220 ([-/.+\\w]+) FTP server \\(Medusa Async V(\\d[^\\)]+)\\) ready\\.\\r\\n| p/Medusa Async ftpd/ v/$2/ h/$1/\nmatch ftp m|^220 ([-/.+\\w]+)\\((\\d[-.\\w]+)\\) FTP server \\(EPSON ([^\\)]+)\\) ready\\.\\r\\n| p/Epson printer ftpd/ v/$2/ i/Epson $3/ d/printer/ h/$1/\nmatch ftp m|^220 ([-/.+\\w]+) IBM TCP/IP for OS/2 - FTP Server [Vv]er \\d+:\\d+:\\d+ on [A-Z]| p|IBM OS/2 ftpd| o|OS/2| h/$1/ cpe:/a:ibm:os2_ftp_server/ cpe:/o:ibm:os2/\nmatch ftp m|^220 ([-/.+\\w]+) IBM TCP/IP f\\xfcr OS/2 - FTP-Server [Vv]er \\d+:\\d+:\\d+ .* bereit\\.\\r\\n| p|IBM OS/2 ftpd| i/German/ o|OS/2| h/$1/ cpe:/a:ibm:os2_ftp_server::::de/ cpe:/o:ibm:os2/\nmatch ftp m|^220 Internet Rex (\\d[-.\\w ]+) \\(([-/.+\\w]+)\\) FTP server awaiting your command\\.\\r\\n| p/Internet Rex ftpd/ v/$1/ i/$2/\nmatch ftp m|^530 Connection refused, unknown IP address\\.\\r\\n$| p/Microsoft IIS ftpd/ i/IP address rejected/ o/Windows/ cpe:/a:microsoft:internet_information_services/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 IIS ([\\w._-]+) FTP\\r\\n| p/Microsoft IIS ftpd/ v/$1/ o/Windows/ cpe:/a:microsoft:internet_information_services:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 PizzaSwitch FTP server ready\\r\\n| p/Xylan PizzaSwitch ftpd/\nmatch ftp m|^220 ([-.+\\w]+) IronPort FTP server \\(V([-.\\w]+)\\) ready\\.\\r\\n| p/IronPort mail appliance ftpd/ v/$2/ h/$1/\nmatch ftp m|^220 ([-.+\\w]+) IronPort FTP server \\(V([-.\\w]+)\\) ready\\r\\n| p/IronPort firewall ftpd/ v/$2/ h/$1/\nmatch ftp m|^220 ([-.+\\w]+) Cisco IronPort FTP server \\(V([-.\\w]+)\\) ready\\r\\n| p/Cisco IronPort mail appliance ftpd/ v/$2/ h/$1/\nmatch ftp m|^220 WFTPD (\\d[-.\\w]+) service \\(by Texas Imperial Software\\) ready for new user\\r\\n| p/Texas Imperial Software WFTPD/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220.*\\r\\n220 WFTPD (\\d[-.\\w]+) service \\(by Texas Imperial Software\\) ready for new user\\r\\n|s p/Texas Imperial Software WFTPD/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ([-.+\\w]+) FTP server \\(Version (MICRO-[-.\\w:#+ ]+)\\) ready\\.\\r\\n| p/Bay Networks MicroAnnex terminal server ftpd/ v/$2/ d/terminal server/ h/$1/\nmatch ftp m|^220 ([-.+\\w]+) FTP server \\(Digital UNIX Version (\\d[-.\\w]+)\\) ready\\.\\r\\n| p/Digital UNIX ftpd/ v/$2/ o/Digital UNIX/ h/$1/ cpe:/o:dec:digital_unix/a\nmatch ftp m|^220 ([-.+\\w]+) FTP server \\(Version [\\d.]+\\+Heimdal (\\d[-+.\\w ]+)\\) ready\\.\\r\\n| p/Heimdal Kerberized ftpd/ v/$2/ o/Unix/ h/$1/\nmatch ftp m|^500 OOPS: (could not bind listening IPv4 socket)\\r\\n$| p/vsftpd/ i/broken: $1/ o/Unix/ cpe:/a:vsftpd:vsftpd/\nmatch ftp m|^500 OOPS: vsftpd: (.*)\\r\\n| p/vsftpd/ i/broken: $1/ o/Unix/ cpe:/a:vsftpd:vsftpd/\nmatch ftp m|^220-QTCP at ([-.\\w]+)\\r\\n220| p|IBM OS/400 FTPd| o|OS/400| h/$1/ cpe:/o:ibm:os_400/a\nmatch ftp m|^220[- ]FileZilla Server version (\\d[-.\\w ]+)\\r\\n| p/FileZilla ftpd/ v/$1/ o/Windows/ cpe:/a:filezilla-project:filezilla_server:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ([-\\w_.]+) running FileZilla Server version (\\d[-.\\w ]+)\\r\\n| p/FileZilla ftpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:filezilla-project:filezilla_server:$2/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 FTP Server - FileZilla\\r\\n| p/FileZilla ftpd/ o/Windows/ cpe:/a:filezilla-project:filezilla_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-Welcome to ([A-Z]+) FTP Service\\.\\r\\n220 All unauthorized access is logged\\.\\r\\n| p/FileZilla ftpd/ o/Windows/ h/$1/ cpe:/a:filezilla-project:filezilla_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220.*\\r\\n220[- ]FileZilla Server version (\\d[-.\\w ]+)\\r\\n|s p/FileZilla ftpd/ v/$1/ o/Windows/ cpe:/a:filezilla-project:filezilla_server:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-.*\\r\\n220-\\r\\n220 using FileZilla FileZilla Server version ([^\\r\\n]+)\\r\\n|s p/FileZilla ftpd/ v/$1/ o/Windows/ cpe:/a:filezilla-project:filezilla_server:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-FileZilla Server\\r\\n| p/FileZilla ftpd/ o/Windows/ cpe:/a:filezilla-project:filezilla_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 FileZilla Server (\\d[\\w.]+)\\r\\n| p/FileZilla ftpd/ v/$1/ o/Windows/ cpe:/a:filezilla-project:filezilla_server:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^431 Could not initialize SSL connection\\r\\n| p/FileZilla ftpd/ i/Mandatory SSL/ o/Windows/ cpe:/a:filezilla-project:filezilla_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^550 No connections allowed from your IP\\r\\n| p/FileZilla ftpd/ i/IP blocked/ o/Windows/ cpe:/a:filezilla-project:filezilla_server/ cpe:/o:microsoft:windows/a\n# Netgear RP114 switch with integrated ftp server or ZyXel P2302R VoIP\nmatch ftp m|^220  FTP version 1\\.0 ready at | p/Netgear broadband router or ZyXel VoIP adapter ftpd/ v/1.0/\nmatch ftp m|^220 ([\\w._-]+) FTP version 1\\.0 ready at | p/Netgear broadband router or ZyXel VoIP adapter ftpd/ v/1.0/ h/$1/\nmatch ftp m|^220 \\(none\\) FTP server \\(GNU inetutils ([\\w._-]+)\\) ready\\.\\r\\n| p/GNU Inetutils FTPd/ v/$1/ cpe:/a:gnu:inetutils:$1/\nmatch ftp m|^220 ([-.\\w]+) FTP server \\(GNU inetutils (\\d[-.\\w ]+)\\) ready\\.\\r\\n| p/GNU Inetutils FTPd/ v/$2/ h/$1/ cpe:/a:gnu:inetutils:$2/\nmatch ftp m|^220 FTP server \\(GNU inetutils ([\\w._-]+)\\) ready\\.\\r\\n| p/GNU Inetutils FTPd/ v/$1/ cpe:/a:gnu:inetutils:$1/\nmatch ftp m|^220 .* \\(glftpd (\\d[-.0-9a-zA-Z]+)_(\\w+)(?:\\+TLS)?\\) ready\\.\\r\\n| p/glFTPd/ v/$1/ i/$2/ o/Unix/\nmatch ftp m|^220 .* \\(glFTPd (\\d[-.0-9a-zA-Z]+)_(\\w+) Linux\\+TLS\\) ready\\.?\\r\\n| p/glFTPd/ v/$1/ i/$2/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 .* \\(glFTPd (\\d[-.0-9a-zA-Z]+) Linux\\+TLS\\) ready\\.\\r\\n| p/glFTPd/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 .* \\(glFTPd (\\d[-.0-9a-zA-Z]+) FreeBSD\\+TLS\\) ready\\.\\r\\n| p/glFTPd/ v/$1/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\nmatch ftp m|^220 ([-.\\w]+) FTP server \\(FirstClass v(\\d[-.\\w]+)\\) ready\\.\\r\\n| p/FirstClass FTP server/ v/$2/ h/$1/ cpe:/a:opentext:firstclass:$2/\nmatch ftp m|^220 ([-.\\w]+) FTP server \\(Compaq Tru64 UNIX Version (\\d[-.\\w]+)\\) ready\\.\\r\\n| p/Compaq Tru64 ftp server/ v/$2/ o/Tru64 UNIX/ h/$1/ cpe:/o:compaq:tru64/a\n\nmatch ftp m|^220 Axis ([\\w._ -]+) Network Camera(?: version)? (\\d\\S+) \\((.*)\\) ready\\.\\r\\n|i p/Axis $1 Network Camera ftpd/ v/$2/ i/$3/ d/webcam/ cpe:/h:axis:$1_network_camera/\nmatch ftp m|^220 Axis ([\\w._ -]+) Network Camera ([\\w._-]+ \\(\\w+ \\d+ \\d+\\)) ready\\.\\r\\n| p/Axis $1 Network Camera ftpd/ v/$2/ d/webcam/ cpe:/h:axis:$1_network_camera/\nmatch ftp m|^220 AXIS ([\\w._ -]+) Network Camera ([\\w._-]+ \\(\\w+ \\d+ \\d+\\)) ready\\.\\r\\n| p/Axis $1 Network Camera ftpd/ v/$2/ d/webcam/ cpe:/h:axis:$1_network_camera/\nmatch ftp m|^220 Axis ([\\w._ -]+) Network Camera ([\\w._-]+) \\w+ \\d+ \\d+ ready\\.\\r\\n| p/Axis $1 Network Camera ftpd/ v/$2/ d/webcam/ cpe:/h:axis:$1_network_camera/\nmatch ftp m|^220 AXIS ([\\w._ -]+) Video Encoder ([\\w._-]+ \\(\\w+ \\d+ \\d+\\)) ready\\.\\r\\n| p/Axis $1 Video Encoder ftpd/ v/$2/ d/media device/ cpe:/h:axis:$1_video_encoder/\nmatch ftp m|^220 AXIS ([-.\\w]+) FTP Network Print Server V(\\d[-.\\w]+) [A-Z][a-z]| p/Axis network print server ftpd/ v/$2/ i/Model $1/ d/print server/\nmatch ftp m|^220 AXIS ([\\d\\w]+)V(\\d\\S+) (.*?) ready\\.\\n| p/AXIS $1 Webcam ftpd/ v/$2/ i/$3/ d/webcam/ cpe:/h:axis:$1/a\nmatch ftp m|^220 AXIS ([+\\d]+) Video Server ?(\\d\\S+) (.*?) ready\\.| p/AXIS $1 Video Server ftpd/ v/$2/ i/$3/\nmatch ftp m|^220 AXIS (\\w+) Video Server (\\d\\S+) \\(.*\\) ready\\.\\r\\n| p/AXIS $1 Video Server ftpd/ v/$2/\nmatch ftp m|^220 AXIS 205 version ([\\d.]+) \\(.*\\) ready\\.\\r\\n| p/AXIS 205 Network Video ftpd/ v/$1/ d/webcam/\nmatch ftp m|^220 AXIS 250S MPEG-2 Video Server ([\\d.]+) \\([^)]+\\) ready\\.\\r\\n| p/AXIS 250S Network Video ftpd/ v/$1/ d/webcam/\nmatch ftp m|^220 AXIS (\\w+) Video Server ([\\d.]+) \\([^)]+\\) ready\\.\\r\\n| p/AXIS $1 Video Server ftpd/ v/$2/ d/media device/\nmatch ftp m|^220 AXIS (\\w+) Video Server Blade ([\\w._-]+) \\([^)]+\\) ready\\.\\r\\n| p/AXIS $1 Video Server Blade ftpd/ v/$2/ d/media device/\nmatch ftp m|^220 AXIS StorPoint CD E100 CD-ROM Server V([\\d.]+) .*  ready\\.\\r\\n| p/AXIS StorPoint E100 CD-ROM Server ftpd/ v/$1/ d/storage-misc/ cpe:/h:axis:storpoint_cd_e100/\nmatch ftp m|^220 AXIS (.+) FTP Network Print Server V([-\\w_.]+) | p/AXIS $1 print server ftpd/ v/$2/ d/print server/ cpe:/h:axis:$1/a\nmatch ftp m|^220 AXIS ([\\d/+]+) FTP Print Server V([-\\w_.]+) | p/AXIS $1 print server ftpd/ v/$2/ d/print server/ cpe:/h:axis:$1/a\nmatch ftp m|^220 AXIS (\\w+) Network Fixed Dome Camera (.*) ready\\.\\r\\n| p/AXIS $1 camera ftpd/ v/$2/ d/webcam/\n\nmatch ftp m|^220-Cerberus FTP Server Personal Edition\\r\\n220-UNREGISTERED\\r\\n| p/Cerberus FTP Server/ i/Personal Edition; Unregistered/ o/Windows/ cpe:/a:cerberusftp:ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-Cerberus FTP Server - Personal Edition\\r\\n220-This is the UNLICENSED personal edition and may be used for home, personal use only\\r\\n220-Welcome to Cerberus FTP Server\\r\\n220 Created by Cerberus, LLC\\r\\n| p/Cerberus FTP Server/ i/Personal Edition; Unregistered/ o/Windows/ cpe:/a:cerberusftp:ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-Cerberus FTP Server - Personal Edition\\r\\n220-This is the UNLICENSED personal edition and may be used for home, personal use only\\r\\n220 Connected to Aurora FTP server\\.\\.\\.\\r\\n| p/Cerberus FTP Server/ i/Personal Edition; Unregistered/ o/Windows/ cpe:/a:cerberusftp:ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-Cerberus FTP Server - Personal Edition\\r\\n220-UNREGISTERED\\r\\n220-Welcome to Cerberus FTP Server\\r\\n220 Created by Grant Averett\\r\\n| p/Cerberus FTP Server/ i/Personal Edition; Unregistered/ o/Windows/ cpe:/a:cerberusftp:ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-Welcome to Cerberus FTP Server\\r\\n220 Created by Grant Averett\\r\\n| p/Cerberus ftpd/ o/Windows/ cpe:/a:cerberusftp:ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^421-Not currently accepting logins at this address\\. Try back \\r\\n421 later\\.\\r\\n| p/Cerberus ftpd/ i/banned/ o/Windows/ cpe:/a:cerberusftp:ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welkom@([\\w._-]+)\\r\\n521 Not logged in - Secure authentication required\\r\\n| p/Cerberus ftpd/ o/Windows/ h/$1/ cpe:/a:cerberusftp:ftp_server/ cpe:/o:microsoft:windows/a\n\nmatch ftp m|^220 FTP print service:V-(\\d[-.\\w]+)/Use the network password for the ID if updating\\.\\r\\n| p|Brother/HP printer ftpd| v/$1/ d/printer/\nmatch ftp m|^220- APC FTP server ready\\.\\r\\n220 \\r\\n$| p/APC ftp server/ d/power-device/\n# HP-UX 10.x or AIX\nmatch ftp m|^220 ([-\\w]+) FTP server \\(Version (\\d[\\w._-]+) [A-Z][a-z]{2} [A-Z][a-z]{2} .*\\) ready\\.\\r\\n| p/HP-UX or AIX ftpd/ v/$2/ o/Unix/ h/$1/\nmatch ftp m|^220 Serveur FTP ([\\w.-]+) \\(Version ([\\d.]+) [\\w: ]+\\) pr\\xeat\\.\\r\\n| p/HP-UX or AIX ftpd/ v/$2/ i/French/ h/$1/\nmatch ftp m|^220[- ]Roxen FTP server running on Roxen (\\d[-.\\w]+)/Pike (\\d[-.\\w]+)\\r\\n| p/Roxen ftp server/ v/$1/ i/Pike $2/\n# Debian packaged oftpd 0.3.6-51 on Linux 2.6.0-test4 Debian\nmatch ftp m|^220 Service ready for new user\\.\\r\\n| p/oftpd/ o/Unix/\n# Mac OS X Client 10.2.6 built-in ftpd\nmatch ftp m|^220[ -].*FTP server \\(lukemftpd (\\d[-. \\w]+)\\) ready\\.\\r\\n|s p/LukemFTPD/ v/$1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch ftp m|^220.*Microsoft FTP Service \\(Version (\\d[^)]+)| p/Microsoft ftpd/ v/$1/ o/Windows/ cpe:/a:microsoft:ftp_service:$1/ cpe:/o:microsoft:windows/a\n# This lame version doesn't give a version number\n# Windows 2003\nmatch ftp m|^220[ -]Microsoft FTP Service\\r\\n| p/Microsoft ftpd/ o/Windows/ cpe:/a:microsoft:ftp_service/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220[ -]Serv-U FTP[ -]Server v([\\w._-]+) | p/Serv-U ftpd/ v/$1/ o/Windows/ cpe:/a:serv-u:serv-u:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-Serv-U FTP Server for Winsock\\r\\n| p/Serv-U ftpd/ o/Windows/ cpe:/a:serv-u:serv-u/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Serv-U FTP-Server v([-\\w_.]+ build \\d+) for WinSock ready\\.\\.\\.\\r\\n| p/Serv-U ftpd/ v/$1/ o/Windows/ cpe:/a:serv-u:serv-u:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-FTP Server v([\\d.]+) for WinSock ready\\.| p/Serv-U ftpd/ v/$1/ o/Windows/ cpe:/a:serv-u:serv-u:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-SECURE FTP SERVER VERSION ([\\d.]+) \\(([-\\w_.]+)\\)\\r\\n| p/Serv-U ftpd/ v/$1/ i/Name $2/ o/Windows/ cpe:/a:serv-u:serv-u:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^431 Unable to negotiate secure command connection\\.\\r\\n| p/Serv-U ftpd/ i/SSL Required/ o/Windows/ cpe:/a:serv-u:serv-u/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-Sambar FTP Server Version (\\d\\S+)\\x0d\\x0a| p/Sambar ftpd/ v/$1/ cpe:/a:sambar:sambar_server:$1/\n# Sambar server V5.3 on Windows NT\nmatch ftp m|^220-FTP Server ready\\r\\n220-Use USER user@host for native FTP proxy\\r\\n220 Your FTP Session will expire after 300 seconds of inactivity\\.\\r\\n| p/Sambar ftpd/ cpe:/a:sambar:sambar_server/\nmatch ftp m|^220 JD FTP Server Ready| p/HP JetDirect ftpd/ d/print server/\nmatch ftp m|^220.*Check Point FireWall-1 Secure FTP server running on|s p/Check Point Firewall-1 ftpd/ d/firewall/ cpe:/a:checkpoint:firewall-1/\nmatch ftp m|^220[- ].*FTP server \\(Version (wu-[-.\\w]+)|s p/WU-FTPD/ v/$1/ o/Unix/ cpe:/a:redhat:wu_ftpd:$1/\nmatch ftp m|^220-\\r\\n220 ([-.\\w]+) FTP server \\(Version ([-.+\\w()]+)\\) ready\\.\\r\\n$| p/WU-FTPD/ v/$2/ o/Unix/ h/$1/ cpe:/a:redhat:wu_ftpd:$2/\nmatch ftp m|^220 ([-.\\w]+) FTP server \\(Revision ([\\d.]+) Version wuftpd-([-.+\\w()]+) [^)]*\\) ready\\.\\r\\n$| p/WU-FTPD/ v/$3/ i/revision $2/ o/Unix/ h/$1/ cpe:/a:redhat:wu_ftpd:$3/\nmatch ftp m|^220 ([-.\\w]+) FTP server \\(Version ([-.+\\w()]+)\\) ready\\.\\r\\n$| p/WU-FTPD or MIT Kerberos ftpd/ v/$2/ o/Unix/ h/$1/\n\n# ProFTPd 1.2.5\nmatch ftp m|^220  Server \\(ProFTPD\\) \\[([-.\\w]+)\\]\\r\\n| p/ProFTPD/ o/Unix/ h/$1/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220 ProFTPD (\\d\\S+) Server| p/ProFTPD/ v/$1/ o/Unix/ cpe:/a:proftpd:proftpd:$1/a\nmatch ftp m|^220 FTP Server \\[([-\\w_.]+)\\]\\r\\n| p/ProFTPD/ o/Unix/ h/$1/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220 ([-\\w_.]+) FTP server ready\\r\\n| p/ProFTPD/ o/Unix/ h/$1/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220.*ProFTP[dD].*Server ready| p/ProFTPD/ o/Unix/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220 ProFTP Server Ready\\r\\n| p/ProFTPD/ o/Unix/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220 ProFTP Ready\\r\\n| p/ProFTPD/ o/Unix/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220 Welcome @ my\\.ftp\\.org\\r\\n$| p/ProFTPD/ o/Unix/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220-.*\\r\\n220 ProFTPD ([\\d.]+) Server|s p/ProFTPD/ v/$1/ o/Unix/ cpe:/a:proftpd:proftpd:$1/a\nmatch ftp m|^220 .* FTP Server \\(ProFTPD ([\\d.]+) on Red Hat linux ([\\d.]+)\\) ready\\.\\r\\n| p/ProFTPD/ v/$1/ i/RedHat $2/ o/Linux/ cpe:/a:proftpd:proftpd:$1/a cpe:/o:redhat:linux/\nmatch ftp m|^220 ProFTP-Server auf ([-\\w_.]+)\\r\\n| p/ProFTPD/ i/German/ o/Unix/ h/$1/ cpe:/a:proftpd:proftpd::::de/\nmatch ftp m|^220.*\\r\\n220 ProFTPD ([\\w._-]+) Server \\(ProFTPD\\)|s p/ProFTPD/ v/$1/ o/Unix/ cpe:/a:proftpd:proftpd:$1/a\n# Hope these aren't too general -Doug\nmatch ftp m|^220 ([-\\w_.]+) FTP server ready!\\r\\n| p/ProFTPD/ o/Unix/ h/$1/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220 FTP Server ready\\.\\r\\n$| p/ProFTPD or KnFTPD/ o/Unix/\n\nmatch ftp m|^220.*NcFTPd Server | p/NcFTPd/ o/Unix/\nmatch ftp m|^220 ([-\\w_.]+) FTP server \\(SunOS 5\\.([789])\\) ready| p/Sun Solaris $2 ftpd/ o/Solaris/ h/$1/ cpe:/o:sun:sunos:5.$2/\nmatch ftp m|^220 ([-\\w_.]+) FTP server \\(SunOS (\\S+)\\) ready| p/Sun SunOS ftpd/ v/$2/ o/Solaris/ h/$1/ cpe:/o:sun:sunos:$2/\nmatch ftp m|^220-([-.\\w]+) IBM FTP.*(V\\d+R\\d+)| p|IBM OS/390 ftpd| v/$2/ o|OS/390| h/$1/ cpe:/o:ibm:os_390/a\nmatch ftp m|^220-IBM FTP, .*\\.\\r\\n220 Connection will close if idle for more than 120 minutes\\.\\r\\n| p|IBM OS/390 ftpd| o|OS/390| cpe:/o:ibm:os_390/a\nmatch ftp m|^220 VxWorks \\((\\d[^)]+)\\) FTP server ready| p/VxWorks ftpd/ v/$1/ o/VxWorks/ cpe:/o:windriver:vxworks/a\nmatch ftp m|^220 VxWorks \\(VxWorks(\\d[^)]+)\\) FTP server ready| p/VxWorks ftpd/ v/$1/ o/VxWorks/ cpe:/o:windriver:vxworks/a\nmatch ftp m|^220 VxWorks FTP server \\(VxWorks ?([\\d.]+) - Secure NetLinx version \\(([\\d.]+)\\)\\) ready\\.\\r\\n| p|AMX NetLinx A/V control system ftpd| v/$2/ i/VxWorks $1/ d/media device/ o/VxWorks/ cpe:/o:harman:amx_firmware:$1/ cpe:/o:windriver:vxworks:$1/\nmatch ftp m|^220 VxWorks \\(VxWorks ([\\w._-]+)\\) FTP server ready\\r\\n| p|AMX NetLinx A/V control system ftpd| i/VxWorks $1/ d/media device/ o/VxWorks/ cpe:/o:harman:amx_firmware:$1/ cpe:/o:windriver:vxworks:$1/\nmatch ftp m|^220 VxWorks FTP server \\(VxWorks ?([\\w._-]+)\\) ready\\.\\r\\n| p/VxWorks ftpd/ v/$1/ o/VxWorks/ cpe:/o:windriver:vxworks/a\nmatch ftp m|^220 ABB Robotics FTP server \\(VxWorks ([\\d.]+) rev ([\\d.]+)\\) ready\\.\\r\\n| p/ABB Robotics ftpd/ i/VxWorks $1 rev $2  **A ROBOT**/ d/specialized/ o/VxWorks/ cpe:/o:windriver:vxworks:$1/\n\n# Pure-ftpd\nmatch ftp m|^220.*Welcome to .*Pure-?FTPd (\\d\\S+\\s*)| p/Pure-FTPd/ v/$1/ cpe:/a:pureftpd:pure-ftpd:$1/\nmatch ftp m|^220.*Welcome to .*Pure-?FTPd[^(]+\\r\\n| p/Pure-FTPd/ cpe:/a:pureftpd:pure-ftpd/\nmatch ftp m|^220.*Bienvenue sur .*Pure-?FTPd.*\\r\\n| p/Pure-FTPd/ i/French/ cpe:/a:pureftpd:pure-ftpd::::fr/\nmatch ftp m|^220.*Bienvenue sur .*Pure-?FTPd (\\d[-.\\w]+)| p/Pure-FTPd/ v/$1/ i/French/ cpe:/a:pureftpd:pure-ftpd:$1:::fr/\nmatch ftp m|^220.*Velkommen til .*Pure-?FTPd.*\\r\\n| p/Pure-FTPd/ i/Danish/ cpe:/a:pureftpd:pure-ftpd::::da/\nmatch ftp m|^220.*Bem-vindo.*Pure-?FTPd.*\\r\\n| p/Pure-FTPd/ i/Portuguese/ cpe:/a:pureftpd:pure-ftpd::::pt/\n# pure-ftpd 1.0.12 on Linux 2.4\nmatch ftp m|^220[- ]FTP server ready\\.\\r\\n.*214 Pure-FTPd - http://pureftpd\\.org/?\\r\\n|s p/Pure-FTPd/ cpe:/a:pureftpd:pure-ftpd/\n# OpenBSD 3.4 beta running Pure-FTPd 1.0.16 with SSL/TLS\nmatch ftp m|^220---------- Welcome to Pure-FTPd \\[privsep\\] \\[TLS\\] ----------\\r\\n220-You are user number| p/Pure-FTPd/ i|with SSL/TLS| cpe:/a:pureftpd:pure-ftpd/\nmatch ftp m|^220---------- .* Pure-FTPd ----------\\r\\n220-| p/Pure-FTPd/ cpe:/a:pureftpd:pure-ftpd/\nmatch ftp m|^220.*214 Pure-FTPd - http://pureftpd\\.org/?\\r\\n|s p/Pure-FTPd/ cpe:/a:pureftpd:pure-ftpd/\n\nmatch ftp m|^220 vsFTPd (.*) ready\\.\\.\\.\\r\\n| p/vsftpd/ v/$1/ cpe:/a:vsftpd:vsftpd:$1/\nmatch ftp m|^220 vsFTPd (.*) ready\\.\\.\\. \\[charset=\\w+\\]\\r\\n| p/vsftpd/ v/$1/ cpe:/a:vsftpd:vsftpd:$1/\nmatch ftp m|^220 ready, dude \\(vsFTPd (\\d[0-9.]+): beat me, break me\\)\\r\\n| p/vsftpd/ v/$1/ o/Unix/ cpe:/a:vsftpd:vsftpd:$1/\nmatch ftp m|^220 \\(vsFTPd ([-.\\w]+)\\)\\r\\n$| p/vsftpd/ v/$1/ o/Unix/ cpe:/a:vsftpd:vsftpd:$1/\nmatch ftp m|^220 Welcome to blah FTP service\\.\\r\\n$| p/vsftpd/ o/Unix/ cpe:/a:vsftpd:vsftpd/\n\nmatch ftp m|^220 TYPSoft FTP Server (\\d\\S+) ready\\.\\.\\.\\r\\n| p/TYPSoft ftpd/ v/$1/ o/Windows/ cpe:/a:typsoft:typsoft_ftp_server:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-MegaBit Gear (\\S+).*FTP server ready| p/MegaBit Gear ftpd/ v/$1/\nmatch ftp m|^220.*WS_FTP Server (\\d\\S+)| p/WS FTPd/ v/$1/ o/Windows/ cpe:/a:ipswitch:ws_ftp:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Features: a p \\.\\r\\n$| p/publicfile ftpd/ o/Unix/\nmatch ftp m|^220 ([-.\\w]+) FTP server \\(Version (\\S+) VFTPD, based on Version (\\S+)\\) ready\\.\\r\\n$| p/Virtual FTPD/ v/$2/ i/based on $3/ o/Unix/ h/$1/\nmatch ftp m|220 ([-.\\w]+) FTP server \\(Version (\\S+)/OpenBSD, linux port (\\S+)\\) ready\\.\\r\\n| p/OpenBSD ftpd/ v/$2/ i/Linux port $3/ o/Linux/ h/$1/ cpe:/a:openbsd:ftpd:$2/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 ([-.\\w]+) FTP server \\(Version (\\S+)/OpenBSD/Linux-ftpd-([-.\\w]+)\\) ready.\\r\\n$| p/OpenBSD ftpd/ v/$2/ i/Linux port $3/ o/Linux/ h/$1/ cpe:/a:openbsd:ftpd:$2/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 Interscan Version ([-\\w.]+)|i p/InterScan VirusWall ftpd/ v/$1/\nmatch ftp m|^220 InterScan FTP VirusWall NT (\\d[-.\\w]+) \\(([-.\\w]+) Mode\\), Virus scan (\\w+)\\r\\n$| p/InterScan VirusWall NT/ v/$1/ i/Virus scan $3; $2 mode/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ([-.\\w]+) FTP server \\(Version ([-.\\w]+)/OpenBSD\\) ready\\.\\r\\n$| p/OpenBSD ftpd/ v/$2/ o/OpenBSD/ h/$1/ cpe:/a:openbsd:ftpd:$2/ cpe:/o:openbsd:openbsd/\nmatch ftp m|^220 ([-.\\w]+) FTP server \\(Version (6.0\\w+)\\) ready.\\r\\n| p/FreeBSD ftpd/ v/$2/ o/FreeBSD/ h/$1/ cpe:/o:freebsd:freebsd/a\nmatch ftp m|^220  FTP server \\(Version ([\\w.]+)\\) ready\\.\\r\\n| p/FreeBSD ftpd/ v/$1/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\n# Trolltech Troll-FTPD 1.28 (Only runs on Linux)\nmatch ftp m|^220-Setting memory limit to 1024\\+1024kbytes\\r\\n220-Local time is now \\d+:\\d+ and the load is [\\d.]+\\.\\r\\n220 You will be disconnected after \\d+ seconds of inactivity.\\r\\n$| p/Trolltech Troll-FTPd/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch ftp m|^220  FTP server \\(Hummingbird Ltd\\. \\(HCLFTPD\\) Version (7.1.0.0)\\) ready\\.\\r\\n$| p/Hummingbird FTP server/ v/$1/ cpe:/a:hummingbird:connectivity:$1/\nmatch ftp m|^220  FTP server \\(Hummingbird Communications Ltd\\. \\(HCLFTPD\\) Version ([\\d.]+)\\) ready\\.\\r\\n| p/Hummingbird FTP server/ v/$1/ cpe:/a:hummingbird:connectivity:$1/\n\nmatch ftp m|^220- .*\\n220 ([-.\\w]+) FTP server \\(Version (.*)\\) ready\\.\\r\\n|s p/BSD ftpd/ v/$2/ h/$1/\n# Xitami FTPd\nmatch ftp m|^220- \\r\\n.*www\\.imatix\\.com --\\r\\n|s p/Xitami ftpd/\nmatch ftp m|^220- Welcome to this Xitami FTP server, running version ([\\d\\w.]+) of Xitami\\. \\n You are user number (\\d+) of a permitted (\\d+) users\\.| p/Xitami ftpd/ v/$1/ i|$2/$3 users|\n\n# Netware 6 - NWFTPD.NLM FTP Server Version 5.01w\nmatch ftp m|^220 Service Ready for new User\\r\\n$| p/NetWare NWFTPD/\nmatch ftp m|^220-LRN\\r\\n220 Service Ready for new User\\r\\n| p/NetWare NWFTPD/\nmatch ftp m|^220 ([-\\w]+) FTP server \\(NetWare (v[\\d.]+)\\) ready\\.\\r\\n$| p/Novell NetWare ftpd/ v/$2/ o/NetWare/ h/$1/ cpe:/o:novell:netware/a\nmatch ftp m|220  FTP Server for NW 3.1x, 4.xx  \\((v1.10)\\), \\(c\\) 199[0-9] HellSoft\\.\\r\\n$| p/HellSoft FTP server for NetWare 3.1x, 4.x/ v/$1/ o/NetWare/ cpe:/o:novell:netware/a\nmatch ftp m|^220 ([-.\\w]+) MultiNet FTP Server Process V(\\S+) at .+\\r\\n$| p/DEC OpenVMS MultiNet FTPd/ v/$2/ h/$1/\nmatch ftp m|^220-\\r\\n220 ([-.\\w]+) FTP server \\(NetBSD-ftpd ([-.\\w]+)\\) ready.\\r\\n$| p/NetBSD lukemftpd/ v/$2/ h/$1/\nmatch ftp m|^220 ([-.\\w]+) Network Management Card AOS v([-.\\w]+) FTP server ready.\\r\\n$| p/APC AOS ftpd/ v/$2/ i/on APC $1 network management card/ d/power-device/ o/AOS/ cpe:/o:apc:aos/a\nmatch ftp m|^220 FTP Server \\(Version 1.0\\) ready.\\r\\n$| p/GlobespanVirata ftpd/ v/1.0/ d/broadband router/\n# HP-UX B.11.00\nmatch ftp m|^220 ([-.+\\w ]+) FTP server \\(Version (\\d[-.\\w]+) [A-Z][a-z]{2} [A-Z].*20\\d\\d\\) ready\\.\\r\\n| p/HP-UX ftpd/ v/$2/ o/HP-UX/ h/$1/ cpe:/o:hp:hp-ux/a\nmatch ftp m|^220 ([-.+\\w ]+) FTP server \\(Version (\\d[-.\\w]+)\\(([^\\)]+)\\) [A-Z][a-z]{2} [A-Z].*\\d{4}\\) ready\\.\\r\\n| p/HP-UX ftpd/ v/$2/ i/patchlevel $3/ o/HP-UX/ h/$1/ cpe:/o:hp:hp-ux/a\n# 220 mirrors.midco.net FTP server ready.\n# WarFTP Daemon 1.70 on Win2K\nmatch ftp m=^220-.*\\r\\n(?:220-|)    WarFTPd (\\d[-.\\w]+) \\([\\w ]+\\) Ready\\r\\n=s p/WarFTPd/ v/$1/ cpe:/a:jgaa:warftpd:$1/\nmatch ftp m|^220 ([-.+\\w]+) FTP SERVICE ready\\r\\n500 Please enter a command\\. Dunno how to interperet empty lines\\.\\.\\.\\r\\n500 Please enter a command\\. Dunno how to interperet empty lines\\.\\.\\.\\r\\n$| p/WarFTPd/ o/Windows/ h/$1/ cpe:/a:jgaa:warftpd/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to Windows FTP Server| p/Windows Ftp Server/ i|Not from Microsoft - http://srv.nease.net/|\n# UnixWare 7.11\nmatch ftp m|^220 ([-\\w_.]+) FTP server \\(BSDI Version ([\\w.]+)\\) ready\\.\\r\\n| p|BSDI/Unixware ftpd| v/$2/ h/$1/\nmatch ftp m|^220  FTP server \\(Hummingbird Ltd\\. \\(HCLFTPD\\) Version ([\\d.]+)\\) ready\\.\\r\\n| p/Hummingbird ftpd/ v/$1/ cpe:/a:hummingbird:connectivity:$1/\nmatch ftp m|^220 OpenFTPD server ready\\. .*\\.\\r\\n| p/OpenFTPD/\nmatch ftp m|^220 ([\\w._-]+) FTP server \\(NetBSD-ftpd 20\\w+\\) ready\\.\\r\\n| p/NetBSD lukemftpd/ o/NetBSD/ h/$1/ cpe:/o:netbsd:netbsd/\nmatch ftp m|^220-\\r\\n    Your connection logged!\\r\\n220 ([\\w_.-]+) FTP server \\(NetBSD-ftpd 200\\d+\\) ready\\.\\r\\n| p/NetBSD lukemftpd/ i/Connection logged/ h/$1/\nmatch ftp m|^220 CommuniGate Pro FTP Server ([\\d.]+) ready\\r\\n| p/CommuniGate Pro ftpd/ v/$1/ cpe:/a:stalker:communigate_pro:$1/\nmatch ftp m|^220 CommuniGate Pro FTP Server ready\\r\\n| p/CommuniGate Pro ftpd/ cpe:/a:stalker:communigate_pro/\nmatch ftp m|^220 ([\\w._-]+) CommuniGate Pro FTP Server (\\d[\\w._-]+) ready\\r\\n| p/CommuniGate Pro ftpd/ v/$2/ h/$1/ cpe:/a:stalker:communigate_pro:$2/\nmatch ftp m|^421 Sorry you are not welcomed on this server\\.\\r\\n$| p/BulletProof ftpd/ i/Banned/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-BulletProof FTP Server ready \\.\\.\\.\\r\\n| p/BulletProof ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^(?:220.*\\r\\n)?220 [Ee]valine FTP server \\(Version:  Mac OS X|s p/Evaline ftpd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch ftp m|^220 WinGate Engine FTP Gateway ready\\r\\n| p/WinGate ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to Quick 'n Easy FTP Server\\r\\n| p/Quick 'n Easy ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to Quick 'n Easy FTP Server DEMO\\r\\n| p/Quick 'n Easy ftpd/ i/DEMO/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^421 Too many connections for this IP address, please try again later\\.\\r\\n| p/Quick 'n Easy ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Tornado-vxWorks \\(VxWorks([\\d.]+)\\) FTP server ready\\r\\n| p/Tornado vxWorks ftpd/ v/$1/ o/VxWorks/ cpe:/o:windriver:vxworks/a\nmatch ftp m|^220 [-\\w_.]+ FTP server \\(UNIX\\(r\\) System V Release 4\\.0\\) ready\\.\\r\\n| p/UNIX System V Release 4.0 ftpd/ o/Unix/\nmatch ftp m|^(?:220-.*\\r\\n)?220 ([-\\w_.]+) FTP Server \\(Oracle XML DB/Oracle9i Enterprise Edition Release ([\\d.]+) - Production\\) ready\\.\\r\\n|s p/Oracle Enterprise XML DB ftpd/ v/$2/ h/$1/ cpe:/a:oracle:database_server:$2::enterprise/\nmatch ftp m|^(?:200-.*\\r\\n)?220 ([-\\w_.]+) FTP Server \\(Oracle XML DB/Oracle9i Enterprise Edition Release ([\\d.]+) - 64bit Production\\) ready\\.\\r\\n| p/Oracle XML DB ftpd/ v/$2/ i/64 bits/ h/$1/ cpe:/a:oracle:database_server:$2::enterprise/\nmatch ftp m|^(?:220-.*\\r\\n)?220 ([-\\w_.]+) FTP Server \\(Oracle XML DB/Oracle9i Release ([\\d.]+) - Production\\) ready\\.\\r\\n|s p/Oracle XML DB ftpd/ v/$2/ h/$1/ cpe:/a:oracle:database_server:$2/\nmatch ftp m|^(?:220-.*\\r\\n)?220 ([-\\w_.]+) FTP Server \\(Oracle XML DB/Oracle Database 10g Enterprise Edition Release ([\\d.]+) - Production\\) ready\\.\\r\\n|s p/Oracle 10g Enterprise XML DB ftpd/ v/$2/ h/$1/ cpe:/a:oracle:database_server:$2::enterprise/\nmatch ftp m|^(?:220-.*\\r\\n)?220 ([-\\w_.]+) FTP Server \\(Oracle XML DB/Personal Oracle9i Release ([\\d.]+) - Production\\) ready\\.\\r\\n|s p/Personal Oracle XML DB ftpd/ v/$2/ h/$1/ cpe:/a:oracle:database_server:$2::personal/\nmatch ftp m|^(?:220-.*\\r\\n)?220 ([\\w._-]+) FTP Server \\(Oracle XML DB/Oracle Database\\) ready\\.\\r\\n|s p/Oracle XML DB ftpd/ h/$1/ cpe:/a:oracle:database_server/\nmatch ftp m|^(?:200-.*\\r\\n)?220 ([\\w._-]+) FTP Server \\(Oracle XML DB/\\) ready\\.\\r\\n|s p/Oracle XML DB ftpd/ h/$1/ cpe:/a:oracle:database_server/\nmatch ftp m|^220 ([-\\w_.]+) PacketShaper FTP server ready\\.\\r\\n| p/PacketShaper ftpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 WfFTP server\\(([\\w.]+)\\) ready\\.\\r\\n| p/Nortel WfFTP/ v/$1/ d/router/\nmatch ftp m|^220- (.*) WAR-FTPD ([-\\w.]+) Ready\\r\\n220 Please enter your user name\\.\\r\\n| p/WAR-FTPD/ v/$2/ i/Name $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Canon ([\\w._-]+) FTP Print Server V([\\w._-]+) .* ready\\.\\r\\n| p/Canon $1 FTP Print Server/ v/$2/ d/print server/ cpe:/h:canon:$1/\nmatch ftp m|^500 OOPS: .*\\r\\n$| p/vsftpd/ i/Misconfigured/ o/Unix/ cpe:/a:vsftpd:vsftpd/\nmatch ftp m|^500 OOPS: vsftpd: both local and anonymous access disabled!\\r\\n| p/vsftpd/ i/Access denied/ o/Unix/ cpe:/a:vsftpd:vsftpd/\nmatch ftp m|^220 FTP Version ([\\d.]+) on MPS100\\r\\n| p/Lantronix MPS100 ftpd/ v/$1/ d/print server/ cpe:/h:lantronix:mps100/a\nmatch ftp m|^220.*bftpd ([\\d.]+) at ([-\\w_.]+) ready\\.?\\r\\n|s p/Bftpd/ v/$1/ h/$2/ cpe:/a:jesse_smith:bftpd:$1/\nmatch ftp m|^220 RICOH Pro (\\d+[a-zA-Z]{0,3}) FTP server \\(([\\d+.]+)\\) ready\\.\\r\\n| p/Ricoh Pro $1 ftpd/ v/$2/ d/printer/ cpe:/h:ricoh:pro_$1/a\nmatch ftp m|^220 LANIER ([\\w\\d /-]+) FTP server \\(([\\d+.]+)\\) ready\\.\\r\\n| p/Lanier $1 ftpd/ v/$2/ d/printer/ cpe:/h:lanier:$1/a\nmatch ftp m|^220 Welcome to Code-Crafters Ability FTP Server\\.\\r\\n| p/Code-Crafters Ability ftpd/ o/Windows/ cpe:/a:code-crafters:ability_ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to Code-Crafters - Ability Server ([\\d.]+)\\.| p/Code-Crafters Ability ftpd/ v/$1/ o/Windows/ cpe:/a:code-crafters:ability_ftp_server:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ([-\\w_.]+)           FTP server \\(ARM_BE - V([\\w.]+)\\) ready\\.\\r\\n| p/NetComm NS4000 Network Camera/ i/ARM_BE $2/ d/webcam/ h/$1/\nmatch ftp m|^220 MikroTik FTP server \\(MikroTik v?([\\w._-]+)\\) ready\\r\\n| p/MikroTik router ftpd/ v/$1/ d/router/\nmatch ftp m|^220 lankacom FTP server \\(MikroTik v?([\\w._-]+)\\) ready\\r\\n| p/Lankacom router ftpd/ v/$1/ i/MikroTik/ d/router/\nmatch ftp m|^220 (.+) FTP server \\(MikroTik ([\\w._-]+)\\) ready\\r\\n| p/MikroTik router ftpd/ v/$2/ d/router/ h/$1/\nmatch ftp m|^220 NetPresenz v([\\d.]+) \\(Unregistered\\) awaits your command\\.\\r\\n| p/NetPresenz/ v/$1/ i/Unregistered/ o/Mac OS/ cpe:/o:apple:mac_os/a\nmatch ftp m|^220 LP-8900-[0-9A-F]+ FTP server \\(OEM FTPD version ([\\d.]+)\\) ready\\.\\r\\n| p/OEM FTPD $1/ i/EPSON Network Print Server/ d/print server/\nmatch ftp m|^220 StylusPhoto750-[0-9A-F]+ FTP server \\(OEM FTPD version ([\\d.]+)\\) ready\\.\\r\\n| p/OEM FTPD $1/ i/Epson StylusPhoto750/ d/print server/\nmatch ftp m|^220 AL-(\\w+)-[0-9A-F]+ FTP server \\(OEM FTPD version ([\\d.]+)\\) ready\\.\\r\\n| p/OEM FTPD $2/ i/Epson AcuLaser $1 printer/ d/printer/ cpe:/h:epson:aculaser_$1/a\nmatch ftp m|^220 FTP Version ([\\d.]+) on MSS100\\r\\n| p/Lantronix MSS100 serial interface ftpd/ v/$1/ d/specialized/\nmatch ftp m|^220 Matrix FTP server \\(Server \\w+#\\d\\) ready\\.\\r\\n| p/Matrix ftpd/\nmatch ftp m|^220 Titan FTP Server ([\\d.]+) Ready\\.\\r\\n| p/Titan ftpd/ v/$1/ o/Windows/ cpe:/a:southrivertech:titan_ftp_server:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^421-\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+=\\+\\r\\n421-The evaluation period for this Titan FTP Server has expired\\.\\r\\n| p/Titan ftpd/ i/Evaluation period expired/ o/Windows/ cpe:/a:southrivertech:titan_ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ioFTPD \\[www: http://www\\.ioftpd\\.com\\] - \\[version: ([-\\w_. ]+)\\] server ready\\.\\r\\n| p/ioFTPD/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 CesarFTP ([\\w.]+) Server Welcome !\\r\\n| p/ACLogic CesarFTPd/ v/$1/ o/Windows/ cpe:/a:aclogic:cesarftpd:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 CesarFTP ([\\w.]+) \\xb7\\xfe\\xce\\xf1\\xc6\\xf7\\xbb\\xb6\\xd3\\xad !\\r\\n| p/ACLogic CesarFTPd/ v/$1/ i/Chinese/ o/Windows/ cpe:/a:aclogic:cesarftpd:$1:::zh/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-This site is running the BisonWare BisonFTP server product V([\\d.]+)\\r\\n| p/BisonWare BisonFTPd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m=^220-Welcome to XBOX FileZilla(?: \\(XBMC\\)|)\\r\\n220-version: XBFileZilla version ([\\d.]+), \\(based on FileZilla Server ([\\d.]+)\\)\\r\\n220 http://sourceforge\\.net/projects/xbfilezilla\\r\\n= p/XBFileZilla/ v/$1/ i/Based on FileZilla $2/ cpe:/a:xbmc:xbfilezilla:$1/\nmatch ftp m=^220-Welcome to XBOX FileZilla(?: \\(XBMC\\)|)\\r\\n220-version: XBMC:FileZilla version ([\\d.]+), \\(based on FileZilla Server ([\\d.]+)\\)\\r\\n220 http://sourceforge\\.net/projects/xbfilezilla\\r\\n= p/XBFileZilla/ v/$1/ i/Based on FileZilla $2/ cpe:/a:xbmc:xbfilezilla:$1/\nmatch ftp m|^220 Session will be terminated after 600 seconds of inactivity\\.\\r\\n| p/Cisco 3000 series VPN ftpd/ d/security-misc/ o/IOS/ cpe:/o:cisco:ios/a\nmatch ftp m|^220-SlimFTPd ([\\d.]+), by WhitSoft Development \\(www\\.whitsoftdev\\.com\\)\\r\\n| p/SlimFTPd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 BlackMoon FTP Server Version ([\\d.]+ Release \\d+) - Build \\d+\\. Free Edition\\. Service Ready\\r\\n| p/BlackMoon ftpd/ v/$1/ i/Free edition/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 BlackMoon FTP Server Version ([\\d.]+ Release \\d+) - Build \\d+\\. Chaos Edition\\. Service Ready\\r\\n| p/BlackMoon ftpd/ v/$1/ i/Chaos edition/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-BlackMoon FTP Server Version ([\\d.]+ Release \\d+) - Build \\d+\\r\\n| p/BlackMoon ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 BlackMoon FTP Server - Free Edition - Version ([\\d.]+)\\. Service Ready\\r\\n| p/BlackMoon ftpd/ v/$1/ i/Free edition/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 netapp ftp server\\r\\n| p/netapp ftpd/\nmatch ftp m|^220 Oracle Internet File System FTP Server ready\\r\\n| p/Oracle Internet File System ftpd/\nmatch ftp m|^220 NRG 2205/2238/2212 FTP server \\(([\\d.]+)\\) ready\\.\\r\\n| p|NRG 2205/2238/2212 copier ftpd| v/$1/ d/printer/\nmatch ftp m|^220 mandelbrot FTP server \\(Version ([\\d.]+) \\(NeXT ([\\d.]+)\\) .*\\) ready\\.\\r\\n| p/mandelbrot ftpd/ v/$1/ i/NeXT $2/ o/NeXTStep/ cpe:/o:next:nextstep/\n# Microsoft Windows .NET Enterprise Server (build 3604-3790)\nmatch ftp m|^220 Net Administration Divisions FTP Server Ready\\.\\.\\.\\r\\n| p/Net Administration Divisions ftpd/\nmatch ftp m|^220-\\r\\n220-\\r\\n220 Please enter your user name\\.\\r\\n| p/MoreFTPd/\nmatch ftp m|^220 ([-\\w_.]+) FTP server \\(OSF/1 Version ([\\d.]+)\\) ready\\.\\r\\n| p|OSF/1 ftpd| i|OSF/1 $2| o/Unix/ h/$1/\nmatch ftp m|^220 Qtopia ([\\d.]+) FTP Server\\n| p/Qtopia ftpd/ v/$1/ d/PDA/\nmatch ftp m|^220[ -]Gene6 FTP Server v([\\d.]+) +\\(Build (\\d+)\\).* ready\\.\\.\\.\\r\\n| p/Gene6 ftpd/ v/$1 build $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 G6 FTP Server v([\\d.]+) \\(beta (\\d+)\\) ready \\.\\.\\.\\r\\n| p/Gene6 ftpd/ v/$1 beta $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ([-\\w_.]+) by G6 FTP Server ready \\.\\.\\.\\r\\n| p/Gene6 ftpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 .* by G6 FTP Server ready \\.\\.\\.\\r\\n| p/Gene6 ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220.*Hello!  I'm Gene6 FTP Server v([-\\w_.]+) \\(Build (\\d+)\\)\\.\\r\\n|s p/Gene6 ftpd/ v/$1 build $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ([\\w._-]+) FTP server ready\\.\\.\\.\\r\\n| p/Gene6 ftpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 sftpd/([\\d.]+) Server \\[[-\\w_.]+\\]\\r\\n| p/sftpd/ v/$1/\nmatch ftp m|^220-TYPSoft FTP Server ([\\d.]+) ready\\.\\.\\.\\r\\n| p/TYPSoft ftpd/ v/$1/ o/Windows/ cpe:/a:typsoft:typsoft_ftp_server:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to Pablo's FTP Server\\r\\n| p/Pablo's ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 PowerLogic FTP Server ready\\.\\r\\n| p/PowerLogic embedded device ftpd/ d/specialized/\nmatch ftp m|^220 INTERMEC 540\\+/542\\+ FTP Printer Server V([\\d.]+) .* ready\\.\\r\\n| p|Intermec 540+/542+ printer ftpd| v/$1/ d/printer/\nmatch ftp m|^220 EthernetBoard OkiLAN 8100e Ver ([\\d.]+) FTP server\\.\\r\\n| p/OkiLAN 8100e print server/ v/$1/ d/print server/\nmatch ftp m|^220 OKI-([\\w+]+) Version ([\\d.]+) ready\\.\\r\\n| p/OkiData $1 printer ftpd/ v/$2/ d/printer/\n# SpeedStream 5660 ADSL modem/router\nmatch ftp m|^220 VxWorks \\(ENI-ftpd ([\\d.]+)\\) FTP server ready\\r\\n| p/SpeedStream 5660 ADSL router/ i|Runs ENI-ftpd/$1 on VxWorks| d/router/ o/VxWorks/ cpe:/o:windriver:vxworks/a\n\nmatch ftp m|^220--------------------------------------------------------------------------------\\r\\n220-This is the \\\"Banner\\\" message for the Mac OS X Server's FTP server process\\.\\r\\n.*220 ([-\\w_.]+) FTP server \\(Version:  Mac OS X Server ([\\d.]+) - \\+GSSAPI\\) ready\\.\\r\\n|s p/Mac OS X Server ftpd/ i/MacOS X $2/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch ftp m|^220--------------------------------------------------------------------------------\\r\\n220-This is the \\\"Banner\\\" message for the Mac OS X Server's FTP server process\\.\\r\\n| p/Mac OS X Server ftpd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\n\nmatch ftp m|^220 Welcome to U\\.S\\.Robotics SureConnect ADSL Ethernet/USB Router update FTP server v([\\d.]+)\\.\\r\\n| p/USRobotics SureConnect ADSL router ftpd/ v/$1/ d/router/\nmatch ftp m|^220-Welcome to Xerver Free FTP Server ([\\d.]+)\\.\\r\\n220-\\r\\n220-You can login below now\\.\\r\\n220 Features: \\.\\r\\n| p/Xerver Free ftpd/ v/$1/\nmatch ftp m|^220 ([-\\w_.]+) FTP server \\(tnftpd ([\\w._+-]+)\\) ready\\.\\r\\n| p/tnftpd/ v/$2/ h/$1/\nmatch ftp m|^220 ([-\\w_.]+) FTP server \\(LundFTPD ([\\d.]+) .*\\) ready\\.\\r\\n| p/LundFTPd/ v/$2/ h/$1/\nmatch ftp m|^220 HD316\\r FTP server\\(Version([\\d.]+)\\) ready\\.\\r\\n| p/Panasonic WJ-HD316 Digital Disk Recorder/ v/$1/ d/media device/ cpe:/h:panasonic:wj-hd316/\nmatch ftp m|^220 ([\\w._-]+)\\r FTP server\\(Version([\\w._-]+)\\) ready\\.\\r\\n| p/Panasonic WJ-HD316 Digital Disk Recorder/ v/$2/ d/media device/ h/$1/ cpe:/h:panasonic:wj-hd316/\nmatch ftp m=^220 (\\w+) IBM Infoprint (Color |)(\\d+) FTP Server ([\\w.]+) ready\\.\\r\\n= p/IBM Infoprint $2$3 ftpd/ v/$4/ d/printer/ h/$1/\nmatch ftp m|^220 ([\\w._-]+) IBM Infoprint (\\w+) FTP Server ([\\w.]+) ready\\.\\r\\n| p/IBM Infoprint $2 ftpd/ v/$3/ d/printer/ h/$1/ cpe:/h:ibm:infoprint_$2/a\nmatch ftp m|^220 ShareIt FTP Server ([\\d.]+) \\(WINCE\\) Ready\\.\\r\\n| p/ShareIt ftpd/ v/$1/ d/PDA/\nmatch ftp m|^220 ShareIt FTP Pro ([\\d.]+) \\(WINCE\\) Ready\\.\\r\\n| p/ShareIt Pro ftpd/ v/$1/ d/PDA/\nmatch ftp m|^220 ISOS FTP Server for Upgrade Purpose \\(([\\d.]+)\\) ready\\r\\n| p/Billion 741GE ADSL router/ v/$1/ d/router/ cpe:/h:billion:741ge/a\nmatch ftp m|^220 PV11 FTP Server ready\\r\\n| p/Unknown wireless acces point ftpd/ i/Runs Phar Lap RTOS/ d/router/\nmatch ftp m|^220 Alize Session Manager FTP Server\\r\\n| p/Alcatel OmniPCX ftpd/ d/PBX/ cpe:/a:alcatel-lucent:omnipcx/\nmatch ftp m|^220-FTP Server ready\\r\\n220-Welcome to the Sambar FTP Server\\r\\r\\n| p/Sambar ftpd/ cpe:/a:sambar:sambar_server/\nmatch ftp m|^220 SINA FTPD \\(Version ([-\\d.]+)\\).*\\r\\n| p/Sina ftpd/ v/$1/\nmatch ftp m|^220 DataHive FTP Server ([\\d.]+) Ready\\.\\r\\n| p/DataHive ftpd/ v/$1/\nmatch ftp m|^220--- AlterVista FTP, based on Pure-FTPd --\\r\\n| p/AlterVista ftpd/ i/Based on Pure-ftpd/\nmatch ftp m|^220 Welcome to the ADI Convergence Galaxy update FTP server v([\\d.]+)\\.\\r\\n| p/ADI Convergence Galaxy update ftpd/ v/$1/\nmatch ftp m|^421 You are not permitted to make this connection\\.\\r\\n| p/Symantec Raptor Firewall ftpd/ d/firewall/ cpe:/a:symantec:raptor_firewall/\nmatch ftp m|^220 copier2FTP server ready\\.\\r\\n| p/Konica Minolta Di3510 Copier ftpd/ d/printer/ cpe:/h:konicaminolta:di3510/a\nmatch ftp m|^220 DrayTek FTP version ([\\d.]+)\\r\\n| p/DrayTek Vigor router ftpd/ v/$1/ d/router/\nmatch ftp m|^220 ([-\\w_.]+) FTP server ready \\(mod_ftpd/([\\d.]+)\\)\\r\\n| p/Apache mod_ftpd/ v/$2/ h/$1/ cpe:/a:apache:http_server/\nmatch ftp m|^220 The Avalaunch FTP system -- enter user name\\r\\n| p/Avalaunch ftpd/ i/XBox/ d/game console/\nmatch ftp m|^220 Server 47 FTP service\\. Welcome\\.\\r\\n| p/Bftpd/ o/Unix/ cpe:/a:jesse_smith:bftpd/\nmatch ftp m%^220-loading\\.\\.\\r\\n220-\\|           W e L c O m E @ SFXP\\|=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\\|\\r\\n% p/SwiftFXP/\nmatch ftp m|^220 Z-FTP\\r\\n| p/Z-FTPd/\n\nmatch ftp m|^220 ([-/.+\\w_]+) Dell ([-/.+\\w ]+) FTP Server ([\\w._-]+) ready\\.\\r\\n| p/Dell $2 printer ftpd/ v/$3/ d/printer/ h/$1/ cpe:/h:dell:$2/\nmatch ftp m|^220 ([-/.+\\w_]+) Dell Wireless Printer Adapter ([\\w._-]+) FTP Server ready\\.\\r\\n| p/Dell $2 Wireless Printer Adapter ftpd/ d/print server/ h/$1/ cpe:/h:dell:$2/\nmatch ftp m|^220 ([-/.+\\w_]+) Dell Laser Printer ([-/.+\\w ]+) FTP Server ([\\w._-]+) ready\\.\\r\\n| p/Dell $2 printer ftpd/ v/$3/ d/printer/ h/$1/ cpe:/h:dell:$2/\nmatch ftp m|^220 Dell Laser Printer ([\\w._-]+)\\r\\n| p/Dell $1 laser printer ftpd/ d/printer/ cpe:/h:dell:$1/\nmatch ftp m|^220 Dell Color Laser ([\\w._-]+)\\r\\n| p/Dell $1 color laser printer ftpd/ d/printer/ cpe:/h:dell:$1/\nmatch ftp m|^220 Dell ([\\w._-]+) Color Laser\\r\\n| p/Dell $1 color laser printer ftpd/ d/printer/ cpe:/h:dell:$1/\nmatch ftp m|^220 Dell MFP Laser ([\\w._-]+)\\r\\n| p/Dell $1 laser printer ftpd/ d/printer/ cpe:/h:dell:$1/\n\nmatch ftp m|^220 Plan 9 FTP server ready\\r\\n| p/Plan 9 ftpd/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\nmatch ftp m=^220-\\+----------------------\\[ UNREGISTERED VERSION \\]-----------------------\\+\\r\\n220-\\|   This site is running unregistered copy of RaidenFTPD ftp server   \\+\\r\\n= p/RaidenFTPd/ i/Unregistered/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|220 ([-\\w_.]+) FTP server \\(Version:  Mac OS X Server ([\\d.]+) - \\+GSSAPI\\) ready\\.\\r\\n|s p/MacOS X Server ftpd/ i/MacOS X Server $2/ o/Mac OS X Server/ h/$1/ cpe:/o:apple:mac_os_x_server:$2/\nmatch ftp m|^220 Fastream NETFile FTP Server(?: Ready)?\\r\\n| p/Fastream NETFile FTPd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 FTP 9500 server \\(Version ([\\d.]+)\\) ready\\.\\r\\n| p|Nokia Smartphone 9300/9500 ftpd| v/$1/ d/phone/ o/Symbian/ cpe:/o:symbian:symbian/\nmatch ftp m|^220 [\\d.]+ CVX FTP server \\(([\\d.]+)\\) ready\\.\\r\\n| p/CVX ftpd/ v/$1/\nmatch ftp m|^220-\\.:\\.\\r\\n220-\\.:+\\r\\n220-\\.::::::::::\\. e1137 FTP Server loading \\.::::::::::::::\\. WinSock ready \\.| p/e1137 ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Connect\\(active \\d+, max active \\d+\\) session \\d+ to RemoteScan Server ([\\d.]+) on .*\\r\\n| p/RemoteScan ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220.ArGoSoft FTP Server for Windows NT/2000/XP, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220.ArGoSoft FTP Server, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ArGoSoft FTP Server \\.NET v\\.([\\d.]+) at [^\\r\\n]*\\r\\n| p/ArGoSoft ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to the dvd2xbox ftp server\\.\\r\\n| p/dvd2xbox built-in ftpd/ d/game console/\nmatch ftp m|^220 Welcome To WinEggDrop Tiny FTP Server\\r\\n| p/WinEggDrop ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-\\n220-Welcome to the HOME Edition of GlobalSCAPE CuteFTP Server, which limits\\n| p/GlobalSCAPE CuteFTPd/ i/HOME Edition/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Gestetner DSm622 FTP server \\(([\\d.]+)\\) ready\\.\\r\\n| p/Gestetner DSm622 copier ftpd/ v/$1/ d/printer/\nmatch ftp m|^220 NRG (\\w+) FTP server \\(([\\d.]+)\\) ready\\.\\r\\n| p/NRG $1 printer ftpd/ v/$2/ d/printer/ cpe:/h:nrg:$1/a\nmatch ftp m|^220-<W\\x80lC0ME T0 THE \\xb0GP - FXP PubSTRO\\xb0 by JACK>\\r\\n| p/Backdoor Pubstro ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 wzd server ready\\.\\r\\n| p/wzdftpd/\nmatch ftp m|^500 Sorry, no server available to handle request on ([-\\w_.:]+)\\r\\n| p/ProFTPD/ i/No server available/ h/$1/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^500 Sorry, no server available to handle request on ([-\\w_.:]+)\\.\\r\\n| p/ProFTPD/ i/No server available/ h/$1/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220 Intel NetportExpress\\(tm\\) 10/100 Single-port FTP server ready\\.\\r\\n| p/Intel NetportExpress print server ftpd/ d/print server/\nmatch ftp m|^220 NET\\+ARM FTP Server ([\\d.]+) ready\\.\\r\\n| p/NET+ARM ftpd/ v/$1/\nmatch ftp m|^220- FTPshell Server Service \\(Version ([-\\w_.]+)\\)\\r\\n220  \\r\\n| p/FTPshell ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Connected to ([-\\w_.]+) ready\\.\\.\\.\\r\\n| p/TYPSoft ftpd/ o/Windows/ h/$1/ cpe:/a:typsoft:typsoft_ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ([-\\w_.]+) FTP Server \\(LiteServe\\) Ready!\\r\\n| p/Perception LiteServe ftpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 BetaFTPD ([-\\w_.]+) ready\\.\\r\\n| p/BetaFTPd/ v/$1/\nmatch ftp m|^220 NET Disk FTP Server ready\\.\\r\\n| p|NET Disk/NetStore ftpd|\nmatch ftp m|^421 Service not available, closing control connection\\.\\r\\n| p|NET Disk/NetStore ftpd| i/Disabled/\nmatch ftp m|^220 NETWORK HDD FTP Server ready\\.\\r\\n| p/Argosy Research HD363N Network HDD ftpd/ d/storage-misc/\nmatch ftp m|^220 Blue Coat FTP Service\\r\\n| p/Blue Coat ftp proxy/ d/security-misc/\n# Can't find any info on this ftpd. Backdoor? -Doug\nmatch ftp m|^220 Homer Ftp Server\\r\\n| p/Homer ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Personal FTP Server ready\\r\\n| p/Personal FTPd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Personal FTP Professional Server ready\\r\\n| p/Personal FTPd Professional/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-InterVations FileCOPA FTP Server Version ([\\d.]+) .*\\r\\n220 Trial Version\\. (\\d+) days remaining\\r\\n| p/InterVations FileCOPA ftpd/ v/$1/ i/Trial: $2 days left/ o/Windows/ cpe:/a:intervations:filecopa:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 cab Mach4/(\\d+) FTP Server ready\\.\\r\\n| p/CAB MACH 4 label printer ftpd/ i/$1 dpi/ d/printer/\nmatch ftp m|^220 cab A4\\+/(\\d+) FTP Server ready\\.\\r\\n| p/CAB A4+ label printer ftpd/ i/$1 dpi/ d/printer/\nmatch ftp m|^220 (KM[\\w+]+) FTP server \\(KM FTPD version ([\\d.]+)\\) ready\\.\\r\\n| p/Konica Minolta $1 ftpd/ v/$2/ d/printer/ cpe:/h:konicaminolta:$1/a\nmatch ftp m|^220 Golden FTP Server ready v([\\w._-]+)\\r\\n| p/Golden ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Golden FTP Server Pro ready v([\\w._-]+)\\r\\n| p/Golden ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Golden FTP Server PRO ready v([\\w._-]+)\\r\\n| p/Golden PRO ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ITC Version  ([\\d.]+) of [-\\d]+  X Kyocera UIO UMC 10base OK \\r\\n| p/X Kyocera UIO UMC 10base print server ftpd/ v/$1/ d/print server/ cpe:/h:kyocera:uio_umc_10base/a\nmatch ftp m|^220 ActiveFax Version ([\\d.]+) \\(Build (\\d+)\\) - .*\\r\\n| p/ActiveFax ftpd/ v/$1 build $2/\nmatch ftp m|^220-Welcome to .*\\r\\n220 CrushFTP Server Ready[!.]\\r\\n| p/CrushFTP/ cpe:/a:crushftp:crushftp/\nmatch ftp m|^220-Welcome to CrushFTP([\\w._-]+)!\\r\\n220 CrushFTP Server Ready\\.\\r\\n| p/CrushFTP/ v/$1/ cpe:/a:crushftp:crushftp:$1/\nmatch ftp m|^220 DPO-7300 FTP Server ([\\d.]+) ready\\.\\n| p/NetSilicon DPO-7300 ftpd/ v/$1/\nmatch ftp m|^220 Welcome to WinFtp Server\\.\\r\\n| p/WinFtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220  IBM TCP/IP for OS/2 - FTP Server ver ([\\d:.]+) on .* ready\\.\\r\\n| p|IBM OS/2 ftpd| v/$1/ o|OS/2| cpe:/a:ibm:os2_ftp_server:$1/ cpe:/o:ibm:os2/\nmatch ftp m|^220 AudioVAULT FTP server\\r\\n| p/AudioVault ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 FTP/VPP Server ([\\d.]+) / Current Date: [-\\d]+ [\\d:]+\\r\\n| p/Verteiltes Printen und Plotten ftpd/ v/$1/\nmatch ftp m|^220 Xerox WorkCentre (\\w+) Ver ([\\d.]+) FTP server\\.\\r\\n| p/Xerox WorkCentre $1 ftpd/ v/$2/ d/printer/ cpe:/h:xerox:workcentre_$1/a\nmatch ftp m|^220 Xerox Phaser (\\w+)\\r\\n| p/Xerox Phaser $1 printer ftpd/ d/printer/ cpe:/h:xerox:phaser_$1/a\nmatch ftp m|^220 .* Server \\(vftpd ([\\d.]+)\\) ready\\.\\r\\n| p/vftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to Network Camera FTP Server\\r\\n| p/Vivotek 3102 Camera ftpd/ d/webcam/\nmatch ftp m|^220-TwoFTPd server ready\\.\\r\\n220 Authenticate first\\.\\r\\n| p/TwoFTPd/ o/Unix/\nmatch ftp m|^220  WEB TLC FTP SERVER READY TYPE HELP FOR HELP \\r\\n| p/Overland Storage Neo2000 ftpd/ d/storage-misc/\nmatch ftp m|^220 ([-/.+\\w_]+) Lexmark ([-/.+\\w ]+) FTP Server ([-.\\w]+) ready\\.\\r\\n| p/Lexmark $2 printer ftpd/ v/$3/ d/printer/ h/$1/ cpe:/h:lexmark:$2/a\nmatch ftp m|^220 ([-/.+\\w_]+) MarkNet ([-/.+\\w ]+) FTP Server ([-.\\w]+) ready\\.\\r\\n| p/Lexmark $2 printer ftpd/ v/$3/ d/printer/ h/$1/ cpe:/h:lexmark:$2/a\nmatch ftp m|^500 ([\\w._-]+) FTP server shut down -- please try again later\\.\\r\\n| p/Mac OS X Server ftpd/ i/disabled/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch ftp m|^220  \\(Ver\\. ([^)]+)\\) [A-Z][a-z]{2} \\d+ 20\\d+ ready\\.\\r\\n| p|Canon VB-C10/VB-C10R webcam ftpd| v/$1/ d/webcam/\nmatch ftp m|^220 Cisco \\(([\\d.]+)\\) FTP server ready\\r\\n| p/Cisco ftpd/ v/$1/ o/IOS/ cpe:/o:cisco:ios/a\nmatch ftp m|^220 \\\"Global Site Selector FTP\\\"\\r\\n| p/Cisco Site Selector ftpd/ d/security-misc/ cpe:/h:cisco:global_site_selector:-/\nmatch ftp m|^220 ISOS FTP Server \\(([\\d.]+)\\) ready\\r\\n| p/Xavi 7768 WAP ftpd/ v/$1/ d/WAP/ cpe:/h:xavi:7768/\nmatch ftp m|^220- smallftpd ([\\d.]+)\\r\\n220- check http://smallftpd\\.free\\.fr| p/smallftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ([-\\w_.]+) GridFTP Server ([\\w._-]+) \\((gcc\\w+), [-\\d]+\\) (?:\\[unknown\\] )?ready\\.\\r\\n| p/Globus GridFTPd/ v/$2/ i/$3/ h/$1/\nmatch ftp m|^220 ([\\w._-]+) GridFTP Server ([\\w._-]+) \\((gcc\\w+), [-\\d]+\\) \\[Globus Toolkit ([\\w._-]+)\\] ready\\.\\r\\n| p/Globus GridFTPd/ v/$2/ i/Globus Toolkit $4; $3/ h/$1/\nmatch ftp m|^220 ([-\\w_.]+) (?:[A-Z]+ )?GridFTP Server ([\\d.]+) (GSSAPI type Globus/GSI wu-\\S+) \\(gcc\\w+, [-\\d]+\\) ready\\.\\r\\n| p/Globus GridFTPd/ v/$2/ i/$3/ h/$1/\nmatch ftp m|^220 ([-\\w_.]+) FTP server \\(GridFTP Server ([\\d.]+) \\[(GSI patch v[\\d\\.]+)\\] (wu-\\S+) .+\\) ready\\.\\r\\n| p/Globus GridFTPd/ v/$2/ i/$4 $3/ h/$1/\nmatch ftp m|^220 Welcome to the OpenDreambox FTP service\\.\\r\\n| p/Dreambox ftpd/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 Willkomen auf Ihrer Dreambox\\.\\r\\n| p/Dreambox ftpd/ i/German/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 Welcome to the PLi dreambox FTP server\\r\\n| p/Dreambox ftpd/ i/PLi image/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 Welcome to the Pli Jade Server >> OpenDreambox FTP service <<\\.\\r\\n| p/Dreambox ftpd/ i/PLi Jade image/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 ([-\\w_.]+) FTP server \\(KONICA FTPD version ([\\d.]+)\\) ready\\.\\r\\n| p/Konica Minolta printer ftpd/ v/$2/ d/printer/ h/$1/\nmatch ftp m|^220 KONICA MINOLTA FTP server ready\\.\\r\\n| p/Konica Minolta bizhub printer ftpd/ d/printer/\nmatch ftp m|^Error loading /etc/ssl/certs/ftpd\\.pem:| p/Linux NetKit ftpd/ i/misconfigured/ o/Linux/ cpe:/a:netkit:netkit/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^500 OOPS: cannot locate user entry:([-\\w_]+)\\r\\n500 OOPS: child died\\r\\n| p/vsftpd/ i/misconfigured; ftp user $1/ cpe:/a:vsftpd:vsftpd/\nmatch ftp m|^220 Welcome to Freebox FTP Server\\.\\r\\n| p/Freebox ftpd/ d/media device/\nmatch ftp m|^220  FTP server \\(Medusa Async V([\\d.]+) \\[experimental\\]\\) ready\\.\\r\\n| p/Zope Medusa ftpd/ v/$1/\nmatch ftp m|^220-  Novonyx FTP Server for NetWare, v([\\d.]+) \\(| p/Novonyx ftpd/ v/$1/ o/NetWare/ cpe:/o:novell:netware/a\nmatch ftp m|^220 ([-\\w_.]+) \\(Aironet (BR\\w+) V([\\d.]+)\\) ready\\r\\n| p/Aironet $2 wireless bridge ftpd/ v/$3/ d/WAP/ h/$1/ cpe:/h:cisco:aironet_$2/\nmatch ftp m|^220-Welcome To Rumpus!\\r\\n220 Service ready for new user\\r\\n| p/Rumpus ftpd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch ftp m|^220 Hello, I'm freeFTPd ([\\d.]+)\\r\\n| p/FreeFTPd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 PrNET FTP server \\(PrNET FTP ([\\d.]+)\\) ready\\.\\r\\n| p/Panasonic WV-NP1000 webcam ftpd/ v/$1/ d/webcam/ cpe:/h:panasonic:wv-np1000/a\nmatch ftp m|^220-Looking up your hostname\\.\\.\\.\\r\\n220-Welcome to SimpleFTPd v([\\w.]+) by MagicalTux| p/SimpleFTPd/ v/$1/\nmatch ftp m|^220 IB-21E Ver ([\\d.]+) FTP server\\.\\r\\n| p/Kyocera IB-21E print server ftpd/ v/$1/ d/print server/ cpe:/h:kyocera:ib-21e/a\nmatch ftp m|^220 IB-23 Ver ([\\d.]+) FTP server\\.\\r\\n| p/Kyocera FS-1000D-series print server ftpd/ v/$1/ d/print server/\nmatch ftp m|^220 SurgeFTP ([-\\w_.]+) \\(Version ([\\w.]+)\\)\\r\\n| p/SurgeFTPd/ v/$2/ h/$1/ cpe:/a:netwin:surgeftp:$2/\nmatch ftp m|^220 Disk Station FTP server at ([-\\w_.]+) ready\\.\\r\\n| p/Synology NAS ftpd/ d/storage-misc/ h/$1/\nmatch ftp m|^220  FTP Merak ([\\d.-]+)\\r\\n| p/Merak ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^refused in\\.ftpd from [-\\w_.]+ logged\\n| p/tcpwrapped ftpd/ i/refused/\nmatch ftp m|^220 Ipswitch Notification Server| p/Ipswitch notification ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-?\\s+SSH-[\\d.]+-([a-zA-Z]+)| p/FTP masquerading as $1/ i/**BACKDOOR**/\nmatch ftp m|^220 Xlight FTP Server ([\\d.]+) ready\\.\\.\\.\\r\\n| p/Xlight ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Xlight Server ([\\d.]+) ready\\.\\.\\. \\r\\n| p/Xlight ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 NetTerm FTP server ready \\r\\n| p/NetTerm ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 SHARP ([\\w-]+) FTP server ready\\.\\r\\n| p/Sharp $1 printer ftpd/ d/printer/ cpe:/h:sharp:$1/a\nmatch ftp m|^220 SHARP ([\\w-]+) Ver ([\\w._-]+) FTP server\\.\\r\\n| p/SHARP $1 printer ftpd/ v/$2/ d/printer/\nmatch ftp m|^220 (FS-\\w+) FTP server\\.?\\r\\n| p/Kyocera $1 printer ftpd/ d/printer/ cpe:/h:kyocera:$1/\nmatch ftp m|^220 Scala FTP \\(\\\"Scala InfoChannel Player \\d+\\\" ([\\w/.]+)\\)\\r\\n| p/Scala InfoChannel Player ftpd/ v/$1/ d/media device/\nmatch ftp m|^220 FTP Services for ClearPath MCP:  Server version ([\\d.]+)\\r\\n| p/Unisys ClearPath MCP ftpd/ v/$1/\nmatch ftp m|^220 Nut/OS FTP ([\\d.]+) beta ready at| p|Nut/OS Demo ftpd| v/$1/ o|Nut/OS| cpe:/o:ethernut:nut_os/a\nmatch ftp m|^ftpd - accept the connection from [\\d.]+\\n220-eDVR FTP Server v([\\d.]+) \\(c\\)Copyright WebGate Inc\\. \\w+-\\w+\\r\\n220-Welcome to (DS\\w+)\\r\\n220 You will be disconnected after 180 seconds of inactivity\\.\\r\\n| p/WebGate $2 eDVR camera ftpd/ v/$1/ d/webcam/\nmatch ftp m|^220 FTP-Backupspace\\r\\n$| p/STRATO backup ftpd/\nmatch ftp m|^220-.* \\(([-\\w_.]+)\\)\\r\\n Synchronet FTP Server ([-\\w_.]+)-Win32 Ready\\r\\n| p/Synchronet ftpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:rob_swindell:synchronet:$2/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to (DCS-\\w+) FTP Server\\r\\n$| p/D-Link $1 webcam ftpd/ d/webcam/ cpe:/h:dlink:$1/a\nmatch ftp m|^220 X5 FTP server \\(version ([\\d.]+)\\) ready\\.\\r\\n| p/Zoom ADSL modem/ i/X5 $1/ d/broadband router/\nmatch ftp m|^220 zFTPServer v([-\\w_.]+), build ([-\\d]+)| p/zFTPServer/ v/$1 build $2/ o/Windows/ cpe:/a:vaestgoeta-data:zftpserver:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to zFTPServer\\r\\n| p/zFTPServer/ o/Windows/ cpe:/a:vaestgoeta-data:zftpserver/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 FRITZ!BoxWLAN(\\d+)(?:\\(UI\\))? FTP server ready\\.\\r\\n| p/FRITZ!Box WLAN $1 WAP ftpd/ d/WAP/\nmatch ftp m|^220 FRITZ!BoxFonWLAN(\\w+)(?:\\(\\w+\\))? FTP server ready\\.\\r\\n| p/FRITZ!Box Fon WLAN $1 WAP ftpd/ d/WAP/\nmatch ftp m|^220 FRITZ!Box Fon WLAN (\\d+) FTP server ready\\.\\r\\n| p/FRITZ!Box Fon WLAN $1 WAP ftpd/ d/WAP/\nmatch ftp m|^220 FRITZ!Box(\\w+)Cable\\(um\\) FTP server ready\\.\\r\\n| p/FRITZ!Box $1 cable modem ftpd/ d/broadband router/\nmatch ftp m|^220 CompuMaster SRL, WT-6500 Ftp Server \\(Version ([\\d.]+)\\)\\.\\r\\n| p/CompuMaster WT-6500 ThinClient ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^211 Hello \\[[-\\w_.]+\\], Secure/IP Authentication Server ([-\\w_.]+) at your service\\.\\r\\n| p|OpenVMS Secure/IP ftpd| v/$1/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch ftp m|^220  HP166XC V([-\\w_.]+) FUSION FTP server \\(Version ([-\\w_.]+)\\) ready\\.\\r\\n| p/HP166XC $1 Logic Analyzer ftpd/ i/FUSION ftpd $2/ d/specialized/\nmatch ftp m|^220 FTP Server, type 'quote help' for help\\r\\n$| p/Polycom VSX 8000 ftpd/ d/webcam/ cpe:/h:polycom:vsx_8000/a\nmatch ftp m|^550 no more people, max connections is reached\\r\\n| p/Avalaunch XBOX ftpd/ i/Max connections reached/ d/game console/\nmatch ftp m|^220 Fastream IQ FTP Server\\r\\n| p/Fastream IQ ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 RICOH Aficio ([\\w ._+-]+?) FTP server \\(([-\\w_.]+)\\) ready\\.\\r\\n| p/Ricoh Aficio $1 printer ftpd/ v/$2/ d/printer/ cpe:/h:ricoh:aficio_$1/a\nmatch ftp m|^220 RICOH Aficio ([\\w ._+-]+?) \\(([-\\w_.]+)\\) FTP server ready\\r\\n| p/Ricoh Aficio $1 printer ftpd/ v/$2/ d/printer/ cpe:/h:ricoh:aficio_$1/a\nmatch ftp m|^220 HIOKI ftp service v([\\d.]+)\\r\\n| p/Hioki HiCorder 8855 ftpd/ v/$1/ d/specialized/\nmatch ftp m|^220 Treck FTP server ready\\.\\r\\n| p/Treck Embedded ftpd/\nmatch ftp m|^220 Microtest SuperCD-cdserver FTP server \\(Version V([\\w._-]+)\\) ready\\.\\r\\n| p/Axonix SuperCD ftpd/ v/$1/ d/media device/\nmatch ftp m|^220 FTP service \\(Ftpd ([\\d.]+)\\) ready on ([\\w._-]+) at| p/Minix ftpd/ v/$1/ o/Minix/ h/$2/ cpe:/a:minix:ftpd:$1/ cpe:/o:minix:minix/a\nmatch ftp m|^220 Cube Station FTP server at ([\\w._-]+) ready\\.\\r\\n| p/Synology CubeStation ftpd/ h/$1/\nmatch ftp m|^220 Xerox Phaser (\\w+)\\r\\n421 Service not available, closing control connection\\r\\n| p/Xerox Phaser $1 ftpd/ d/printer/ cpe:/h:xerox:phaser_$1/a\nmatch ftp m|^220 CrossFTP Server ready for new user\\.\\r\\n| p/CrossFTP java ftpd/\nmatch ftp m|^220 ATAboy2X-\\d+ FTP V([\\w._-]+) ready\\n| p/ATAboy2X ftpd/ v/$1/ d/storage-misc/\nmatch ftp m|^220 Belkin Network USB Hub Ver ([\\w._-]+) FTP server\\.\\r\\n| p/Belkin USB hub ftpd/ v/$1/\nmatch ftp m|^220-TCP/IP for VSE FTP Daemon Version ([\\w._-]+) | p/VSE ftpd/ v/$1/ o|z/VSE| cpe:/o:ibm:z%2fvse/\nmatch ftp m|^220 FTP server: Lexmark Optra LaserPrinter ready\\r\\n| p/Lexmark Optra LaserPrinter ftpd/ d/printer/\nmatch ftp m|^220 NSE \\(AG (\\d+)   v([\\w._-]+)\\) FTP server ready\\r\\n| p/Nomadix AG $1 ftpd/ v/$2/ d/WAP/ cpe:/h:nomadix:ag_$1/a\nmatch ftp m|^220 Welcome to Easy File Sharing FTP Server!\\r\\n| p/Easy File Sharing ftpd/ o/Windows/ cpe:/a:efssoft:easy_file_sharing_ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220- \\*+\\r\\n220- \\r\\n220-      Welcome to Dream FTP Server\\r\\n220-      Copyright 2002 - 2004\\r\\n220-      BolinTech Inc\\.\\r\\n| p/BolinTech Dream FTP Server/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to the Netburner FTP server\\.\\r\\n| p/Netburner embedded device ftpd/ d/specialized/\nmatch ftp m|^220 NetBotz FTP Server ([\\w._-]+) ready\\.\\r\\n| p/NetBotz network monitor ftpd/ v/$1/ d/security-misc/\nmatch ftp m|^220 TOSHIBA e-STUDIO5500c FTP server \\(([\\w._-]+)\\) ready\\.\\r\\n| p/Toshiba e-STUDIO5500c printer ftpd/ v/$1/ d/printer/ cpe:/h:toshiba:e-studio5500c/a\nmatch ftp m|^220  \\(WJ-HD220 FTP Server version ([\\w._-]+) Ready\\)\\r\\n| p/Panasonic WJ-HD220 ftpd/ v/$1/ d/media device/\nmatch ftp m|^(?:220-.*\\r\\n)*220 ([\\w._-]+) FTP server \\(EMC-SNAS: ([\\w._-]+)\\) ready\\.\\r\\n| p/EMC Scalable Network Accelerator ftpd/ v/$2/ h/$1/\nmatch ftp m|^220-CentOS release ([\\w._-]+) .*\\r\\n220 ProFTPD ([\\w._-]+) Server \\(ProFTPD Default Installation\\)|s p/ProFTPD/ v/$2/ i/CentOS $1/ o/Linux/ cpe:/a:proftpd:proftpd:$2/a cpe:/o:centos:centos/\nmatch ftp m|^220 TCAdmin FTP Server\\r\\n| p/Balance Servers TCAdmin game hosting ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^.* klogd: klogd started: BusyBox v([\\w._-]+) \\(.*\\)\\r\\nDoing BRCTL \\.\\.\\.\\r\\nsetfilter br0 0 \\r\\n/var/tmp/act_firewall: No such file or directory\\r\\n| p/Actiontec router ftpd/ i/firewall broken; BusyBox $1/ d/broadband router/ cpe:/a:busybox:busybox:$1/\n# these should be fine. embyte\nmatch ftp m|^220 .*BlackJumboDog Version ([^ ]+)| p/Blackjumbodog FTPd/ v/$1/\nmatch ftp m|^220[- ] ?[Cc]rob FTP [Ss]erver [Vv]?([-.\\d\\w]+)| p/Crob FTPd/ v/$1/\nmatch ftp m|^220.* GlobalSCAPE Secure FTP Server \\(v\\. ([^\\)]+)\\)| p/GlobalSCAPE Secure FTPd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 GlobalSCAPE Secure FTP Server\\r\\n| p/GlobalSCAPE Secure FTPd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Mollensoft FTP Server ([^ ]+) Ready\\.| p/Mollensoft FTPd/ v/$1/\nmatch ftp m|^220 Welcome to Ocean FTP Server.| p/Ocean FTPd/\nmatch ftp m|^220 4dftp .* FTP Service \\(Version ([^)]+)\\)| p/WebStar 4dftp/ v/$1/\nmatch ftp m|^220 IBM NPS 540\\+/542\\+ FTP Printer Server V([\\w._-]+) | p|IBM NPS 540+/542+ print server ftpd| v/$1/ d/print server/\nmatch ftp m|^220 ([\\w._-]+) FTP server \\(mmftpd \\(([\\w._/-]+)\\)\\) ready\\r\\n| p/mmftpd/ v/$2/ h/$1/\nmatch ftp m|^220 C500 FTP Server ([\\w._-]+) ready\\.\\n| p/Lexmark C500 printer ftpd/ v/$1/ d/printer/ cpe:/h:lexmark:c500/a\nmatch ftp m|^220-TiMOS-\\w+-([\\w._-]+) cpm/hops ALCATEL ESS 7450 Copyright \\(c\\) 2000-2007 Alcatel-Lucent\\.\\r\\n| p/Alcatel-Lucent ESS 7450 router ftpd/ v/$1/ d/router/ o/TiMOS/ cpe:/h:alcatel-lucent:ess_7450/a cpe:/o:alcatel-lucent:timos/\nmatch ftp m|^220 SAVIN 8055 FTP server \\(([\\w._-]+)\\) ready\\.\\r\\n| p/Savin 8055 printer ftpd/ v/$1/ d/printer/ cpe:/h:savin:8055/a\nmatch ftp m|^220  TANDBERG    Satellite Modulator SM6600\\r\\n| p/Tandberg SM6600 Satellite Modulator ftpd/ d/media device/\nmatch ftp m|^220 SUN StorEdge 3511 RAID FTP server ready\\.\\r\\n| p/Sun StorEdge 3511 ftpd/ d/storage-misc/\nmatch ftp m|^220 IFT ([\\w._-]+) RAID FTP server ready\\.\\r\\n| p/Infortrend EonStor $1 ftpd/ d/storage-misc/\nmatch ftp m|^421 Closing non-secure connections in Secure Mode\\. \\r\\n| p/Polycom VSX 7000A VoIP phone ftpd/ d/VoIP phone/ cpe:/h:polycom:vsx_7000a/a\nmatch ftp m|^220-Sami FTP Server ([\\w._-]+)\\r\\n| p/KarjaSoft Sami ftpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 DrFTPD ([\\w._-]+) http://drftpd\\.org\\r\\n| p/DrFTPD/ v/$1/\nmatch ftp m|^220 DrFTPD\\+ ([\\w._-]+) \\(\\+STABLE\\+\\) \\$Revision: (\\d+) \\$ http://drftpd\\.org\\r\\n| p/DrFTPD/ v/$1 revision $2/\nmatch ftp m|^220 Conti FTP Server ready\\r\\n| p/Conti ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to Mobile File Service\\r\\n\\r\\n| p|HTC P4000 PDA/Phone ftpd| d/PDA/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to Topfield PVR FTP server\\r\\n| p/Topfield HDPVR satellite decoder ftpd/ d/media device/\nmatch ftp m|^220 ([\\w._-]+) FTP server \\(WS2000 FTPD Server\\) ready\\.\\r\\n| p|Motorola/Symbol WS2000 WAP ftpd| d/WAP/ h/$1/\nmatch ftp m|^220  ADH FTP SERVER READY TYPE HELP FOR HELP \\r\\n| p/AD Network Video Dedicated Micros DVR ftpd/ d/webcam/\nmatch ftp m|^220 TDS400 FTP Service \\(Version ([\\w._-]+)\\)\\.\\r\\n| p/TDS400 printer ftpd/ v/$1/ d/printer/\nmatch ftp m|^220 ---freeFTPd 1\\.0---warFTPd 1\\.65---\\r\\n| p/Nepenthes HoneyTrap fake vulnerable ftpd/\nmatch ftp m|^220- \\w+\\r\\n220 FTP Server powered by: Quick 'n Easy FTP Server\\r\\n| p/Quick 'n Easy FTP Server/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-National Instruments FTP\\r\\n220 Service Ready \\r\\n| p/National Instruments LabVIEW ftpd/ d/specialized/ cpe:/a:ni:labview/\n# The ASCII spells \"FREETZ\".\nmatch ftp m=^220-   __  _   __  __ ___ __\\r\\n220-  \\|__ \\|_\\) \\|__ \\|__  \\|   /\\r\\n220-  \\|   \\|\\\\  \\|__ \\|__  \\|  /_\\r\\n220-\\r\\n220-   The fun has just begun\\.\\.\\.\\r\\n220 \\r\\n= p/vsftpd/ i/Freetz firmware for AVM Fritz!Box/ d/WAP/ cpe:/a:vsftpd:vsftpd/\nmatch ftp m|Permission denied\\.\\(Please check access control list\\)\\r\\nPermission denied\\.\\(Please check access control list\\)\\r\\n\\n\\rSystem administrator is connecting from [\\d.]+\\n\\rReject the connection request !!!\\n\\r\\n\\rSystem administrator is connecting from [\\d.]+\\n\\rReject the connection request !!!\\n\\r| p/DrayTek Vigor 2820 ADSL router ftpd/ i/access denied/ d/broadband router/ cpe:/h:draytek:vigor_2820/a\nmatch ftp m|^550 Permission denied\\.\\(Too many user login!!!\\)\\r\\nPermission denied\\.\\(Please check access control list\\)\\r\\n| p/DrayTek Vigor 2820n ADSL router ftpd/ i/access denied/ d/broadband router/ cpe:/h:draytek:vigor_2820n/a\nmatch ftp m|^220-FTPSERVE IBM VM Level (\\d)(\\d+) at ([\\w._-]+), [^\\r\\n]*\\r\\n220 Connection will close if idle for more than 5 minutes\\.\\r\\n| p/IBM FTPSERVE/ o|z/VM $1.$2| h/$3/ cpe:/o:ibm:z%2fvm:$1.$2/\nmatch ftp m|^220 MeritFTP ([\\d.]+) at ([\\d.]+) ready\\.\\r\\n| p/Merit Megatouch game device ftpd/ v/$1/ d/specialized/ h/$2/\nmatch ftp m|^220 NET\\+OS ([\\d.]+) FTP server ready\\.\\r\\n503 Bad sequence of commands\\r\\n| p/NET+OS ftpd/ i/NET+OS $1/ o/NET+OS/ cpe:/o:digi:net%2bos:$1/\nmatch ftp m|^220 Welcome to the NSLU2 vsftp daemon\\.\\r\\n| p/vsftpd/ i/NSLU2 NAS device/ d/storage-misc/ cpe:/a:vsftpd:vsftpd/\nmatch ftp m|^220-  Menuet FTP Server v([\\d.]+)\\r\\n220 Username and Password required\\r\\n| p/Menuet FTP Server/ v/$1/ o/MenuetOS/ cpe:/o:menuetos:menuetos/\nmatch ftp m|^220 Xyratex (\\w+) RAID FTP server ready\\.\\r\\n| p/Xyratex $1 RAID NAS device ftpd/ d/storage-misc/\nmatch ftp m|^220 MLT-57066 Version ([\\w.]+) ready\\.\\r\\n| p/Minolta PagePro 20 printer ftpd/ v/$1/ cpe:/h:minolta:pagepro_20/a\nmatch ftp m|^220 tandem FTP SERVER \\w+ \\(Version ([\\w.]+) TANDEM \\w+\\) ready\\.\\r\\n| p/Tandem FTP server/ v/$1/ i/Tandem Himalaya K2000/ o/GuardianOS/ cpe:/o:tandem:guardian/\nmatch ftp m|^220 ZBR-(\\d+) Version ([\\d.]+) ready\\.\\r\\n| p/Zebra print server ftpd/ v/$2/ i/firmware $1/\nmatch ftp m|^220 ([\\w._-]+) pSOSystem FTP server \\(@\\(#\\)\\(#\\)pVER IA/MIPS, Version ([\\w._ -]+), Built on ([\\d/]+)\\) ready\\.\\r\\n| p/pSOSystem ftpd/ v/$2/ i/MIPS; build date $3/ o/pSOS/ h/$1/ cpe:/o:scg:psos/\nmatch ftp m|^220 ([\\w._-]+) pSOSystem FTP server \\(@\\(#\\)\\(#\\)pVER IA/PPC, Version ([\\w._ -]+), Built on ([\\d/]+)\\) ready\\.\\r\\n| p/pSOSystem ftpd/ v/$2/ i/PowerPC; build date $3/ o/pSOS/ h/$1/ cpe:/o:scg:psos/\nmatch ftp m|^220 ([\\w._-]+) pSOSystem FTP server \\(Network Utilities for /68k-MRI/([\\w._-]+) - Network Utility\\) ready\\.\\r\\n| p/pSOSystem ftpd/ v/$2/ i/m68k/ o/pSOS/ h/$1/ cpe:/o:scg:psos/\nmatch ftp m|^220 Star IFBD-HE05/06 FTP Server\\.\\r\\n| p/Star Micronics TSP828L printer ftpd/ d/printer/ cpe:/h:starmicronics:tsp828l/a\nmatch ftp m|^220 Welcome to Baby FTP Server\\r\\n| p/Baby FTP Server/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ([\\w_.-]+) FTP server \\(witelcom ([\\d.]+)\\) ready\\r\\n| p/Witelcom router ftpd/ v/$2/ d/router/ h/$1/\nmatch ftp m|^220 SwiFTP ready\\r\\n| p/SwiFTP/ i/Android phone/ d/phone/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 SwiFTP ([\\w._-]+) ready\\r\\n| p/SwiFTP/ v/$1/ i/Android phone/ d/phone/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 EFI FTP Print server ready\\.\\r\\n| p/EFI Fiery ftpd/ d/print server/\nmatch ftp m|^220 infotec  IS (\\d+) FTP server \\(([\\w.]+)\\) ready\\.\\r\\n| p/Infotec IS $1 ftpd/ v/$2/\nmatch ftp m|^220- Print Server ([\\d.]+ \\([^)]*\\))\\r\\n220  FTP server \\(Version ([^)]*)\\) ready\\.\\r\\n| p/Roland plotter print server ftpd/ v/$2/ i/print server version $1/\nmatch ftp m|^220 FTP Server \\(ZyWALL (USG \\w+)\\) \\[[\\w._-]+\\]\\r\\n| p/ZyWALL $1 firewall ftpd/ d/firewall/\nmatch ftp m|^220 Connected to IndiFTPD\\r\\n| p/IndiFTPD/\nmatch ftp m|^220 EasyCoder FTP Server v\\.([\\d.]+) ready\\.\\r\\n| p/Intermec PM4i printer ftpd/ v/$1/ d/printer/ cpe:/h:intermec:pm4i/a\nmatch ftp m|^220 ALFTP Server ready\\.  \\^-\\^\\)/~\\r\\n| p/ALFTP/\nmatch ftp m|^220 ftp server corona \\(([\\w._-]+)\\)\\r\\n| p/THEOS Corona ftpd/ v/$1/ o/THEOS/ cpe:/o:theos:theos/\nmatch ftp m|^220 vxTarget FTP server \\(VxWorks ([\\d.]+)\\) ready\\.\\r\\n| p/vxTarget ftpd/ i/VxWorks $1/ o/VxWorks/ cpe:/o:windriver:vxworks:$1/\nmatch ftp m|^220-Welcome to the S60 Dumb FTP Server \\(dftpd\\)\\r\\n| p/Dumb FTP Server (dftpd)/ d/phone/ o/Symbian/ cpe:/o:symbian:symbian/\nmatch ftp m|^220-Local time is now [\\d:]+\\r\\n220 You will be disconnected after 300 seconds of inactivity\\.\\r\\n| p/DViCO TVIX 6500A set top box ftpd/ d/media device/\nmatch ftp m|^220 ET(\\w+) ([\\w-]+) Series FTP Server ready\\.\\r\\n| p/Lexmark $2 series printer ftpd/ i/MAC: $1/ d/printer/\nmatch ftp m|^220 aFTPServer ready \\(cwd is /\\)\\r\\n$| p/FTPServer/ d/phone/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 BCB1COOL Server \\(Proftpd FTP Server\\) \\[([\\w._-]+)\\]\\r\\n| p/ProFTPD/ h/$1/ cpe:/a:proftpd:proftpd/\nmatch ftp m|^220 FTP version ([\\w.]+)\\r\\n| p/DrayTek Vigor ADSL router ftpd/ v/$1/ d/broadband router/\nmatch ftp m|^220 FTP version ([\\w.]+)\\r\\n331 Enter PASS command\\r\\n$| p/DrayTek Vigor ADSL router ftpd/ v/$1/ d/broadband router/\nmatch ftp m|^220 Core FTP Server Version ([\\w._-]+, build \\d+), installed (\\d+ days ago) Registered\\r\\n| p/Core FTP Server/ v/$1/ i/installed $2/ cpe:/a:coreftp:core_ftp:$1/\nmatch ftp m|^220 Core FTP Server Version ([\\w._-]+, build \\d+) Registered\\r\\n| p/Core FTP Server/ v/$1/ cpe:/a:coreftp:core_ftp:$1/\nmatch ftp m|^220-.*\\r\\n220 ([\\w._-]+) FTP Server \\(Apache/([\\w._-]+) \\(Linux/SUSE\\)\\) ready\\.\\r\\n| p/Apache mod_ftpd/ v/$2/ o/Linux/ h/$1/ cpe:/a:apache:http_server/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 pyftpdlib ([\\w._-]+) ready\\.\\r\\n| p/pyftpdlib/ v/$1/ cpe:/a:giampaolo_rodola:pyftpdlib/\nmatch ftp m|^220 pyftpdlib based ftpd ready\\.\\r\\n| p/pyftpdlib/ v/1.0.0 or later/ cpe:/a:giampaolo_rodola:pyftpdlib/\nmatch ftp m|^220 pyftpdlib (\\d[\\w._-]*) based ftpd ready\\.\\r\\n| p/pyftpdlib/ v/$1/ cpe:/a:giampaolo_rodola:pyftpdlib:$1/\nmatch ftp m|^220 Simple FTP daemon coming up!\\r\\n| p/A+V Link NVS-4000 surveillance system ftpd/ d/webcam/\nmatch ftp m|^220 DiskStation FTP server ready\\.\\r\\n| p/Synology DiskStation NAS ftpd/ d/storage-misc/\nmatch ftp m|^220 DiskStation-([\\w._-]+) FTP server ready\\.\\r\\n| p/Synology Disk Station DS-$1 NAS ftpd/ d/storage-misc/\n# \"1.0\" number doesn't seem to reflect the true version number.\nmatch ftp m=^220- Ftp Site Powerd by BigFoolCat Ftp Server 1\\.0 \\(meishu1981@(?:163\\.com|gmail\\.com)\\)\\r\\n220- Welcome to my ftp server\\r\\n220 \\r\\n= p/EasyFTP Server ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 <\\w+>  Tenor Multipath Switch FTP server \\(Version VxWorks([\\w._-]+)\\) ready\\.\\r\\n| p/Tenor Multipath Switch ftpd/ d/switch/ o/VxWorks $1/ cpe:/o:windriver:vxworks:$1/\nmatch ftp m|^220 Welcome to Tenor Multipath Switch\\.\\r\\n| p/Tenor Multipath Switch ftpd/ d/switch/\nmatch ftp m|^220 Imagistics ZB3500080 Ver ([\\w._-]+) FTP server\\.\\r\\n| p/Sharp AR-C260M or AR-M351N printer ftpd/ v/$1/ d/printer/\nmatch ftp m|^220 ([\\w._-]+) FTP SERVER T9552G07 \\(Version ([\\w._-]+) TANDEM ([\\w._-]+)\\) ready\\.\\r\\n| p/HP Tandem NonStop ftpd/ v/$2 $3/ h/$1/\nmatch ftp m|^220 iFTP server v([\\w._-]+)\\n| p/inLighten iBox digital signage ftpd/ v/$1/ d/media device/\nmatch ftp m|^120 The user queue is full, please try again later\\.\\r\\n| p/Huawei Quidway AR28-09 WAP ftpd/ i/user queue is full/ d/WAP/ cpe:/h:huawei:quidway_ar28-09/a\nmatch ftp m|^220 Mabry \\(FtpServX COM Object\\) server ready\\.\\r\\n| p/Mabry FTPServX/\nmatch ftp m|^220 ([\\w._-]+) FTP server \\(InterCon version ([\\w._-]+)\\) ready\\.\\r\\n| p/Kyocera Mita TASKalfa 300ci printer ftpd/ v/$2/ h/$1/ cpe:/h:kyocera:mita_taskalfa_300ci/a\nmatch ftp m|^220 [\\w._-]+Citizen_CLP([\\w._-]+) FTP server \\(InterCon version ([\\w._-]+)\\) ready\\.\\n| p/Citizen CLP-$1 label printer ftpd/ v/$2/ d/printer/\nmatch ftp m|^220 FileApp - FTP Server\\r\\n| p/DigiDNA FileApp ftpd/ o/iOS/ cpe:/o:apple:iphone_os/a\nmatch ftp m=^220 (?:SHARP|Sharp) ([\\w._-]+) Ver ([\\w._+-]+) FTP server\\.\\r\\n= p/Sharp $1 printer ftpd/ v/$2/ cpe:/h:sharp:$1/a\nmatch ftp m|^220 Nucleus FTP Server \\(Version ([\\w._-]+)\\) ready\\.\\r\\n| p/Nucleus ftpd/ v/$1/\nmatch ftp m|^220 -= HyNetOS FTP Server =-\\r\\n500 Command \\(null\\) not understood\\r\\n| p/HyNetOS ftpd/ cpe:/o:hyperstone:hynetos/\nmatch ftp m|^230 User logged in\\.\\r\\n214-The following commands are recognized\\.\\r\\n214-USER\\r\\n214-PASS\\r\\n214-XPWD\\r\\n214-PWD\\r\\n214-TYPE\\r\\n214-PORT\\r\\n214-EPRT\\r\\n214-PASV\\r\\n214-EPSV\\r\\n214-ALLO\\r\\n214-STOR\\r\\n214-APPE\\r\\n214-RETR\\r\\n214-LIST\\r\\n214-NLST\\r\\n214-SYST\\r\\n214-MDTM\\r\\n214-XCWD\\r\\n214-CWD\\r\\n214-XCUP\\r\\n214-CDUP\\r\\n214-DELE\\r\\n214-XMKD\\r\\n214-MKD\\r\\n214-XRMD\\r\\n214-RMD\\r\\n214-NOOP\\r\\n214-RNFR\\r\\n214-RNTO\\r\\n214-REST\\r\\n214-SIZE\\r\\n214-QUIT\\r\\n214-HELP\\r\\n214-STAT\\r\\n214-SITE\\r\\n214-FEAT\\r\\n214-ADMIN_LOGIN\\r\\n214-MGET\\r\\n214-MPUT\\r\\n214-OPTS\\r\\n214 End of help\\r\\n$| p/Netgear 3500L WAP ftpd/ d/WAP/ cpe:/h:netgear:3500l/a\nmatch ftp m|^220-\\*{53}\\r\\n220-Welcome to FTP\\r\\n220-Please use your email address and password to login\\.\\r\\n220-If you are registered for more than one site then your login name must be: yourcompany\\.com/you@youremail\\.com\\.\\r\\n220-\\*{53}\\r\\n220-\\r\\n220 FTP Server Ready\\r\\n| p/Adobe Business Catalyst CMS ftpd/\nmatch ftp m|^220 Welcome to the ftp service\\r\\n| p/Dionaea honeypot ftpd/\nmatch ftp m|^220 silex ([\\w._-]+) Ver ([\\w._-]+) FTP server\\.\\r\\n| p/Silex $1 USB server ftpd/ v/$2/\nmatch ftp m|^220-Tracker RIA, 12090011\\r\\n220-Local time ([\\d:]+)\\r\\n220 You will be disconnected after 180 seconds of inactivity\\.\\r\\n| p/Bomara Tracker 2740 multipurpose server ftpd/ i/local time: $1/\nmatch ftp m|^220 Comau ([\\w._-]+) FTP server \\(Version ([\\w._-]+); Sys_id:([\\w._-]+)\\) [\\d-]+ ready\\.\\r\\n| p/Comau $1 robot control unit ftpd/ v/$2/ i/system id: $3/ d/specialized/\nmatch ftp m|^220 CW([\\w._-]+) FTP Service \\(Version ([\\w._-]+)\\)\\.\\r\\n| p/Océ ColorWave $1 printer ftpd/ v/$2/ d/printer/\nmatch ftp m|^220 CONNECT:Enterprise Gateway ([\\w._-]+)\\. FTP Server ready\\.\\.\\.\\r\\n| p/Sterling Connect:Enterprise ftpd/ v/$1/ cpe:/a:ibm:sterling_connect:$1/\nmatch ftp m|^220-Playstation 3 FTP    \\r\\n220 Copyleft \\(c\\) \\d+ multiMAN \\(login as anonymous\\)    \\r\\n| p/multiMAN ftpd/ i/PlayStation 3/ d/game console/\nmatch ftp m|^220 ([\\w._-]+) (BV[\\w._-]+) FTP server \\(V([\\w._-]+)\\) ready\\.\\r\\n| p/OKI $2 VoIP adapter ftpd/ v/$3/ d/VoIP adapter/ h/$1/\nmatch ftp m|^220 ([\\w._-]+) \\(Libra FTP daemon ([\\w._ -]+)\\)\\r\\n| p/Libra ftpd/ v/$2/ h/$1/\nmatch ftp m|^220 (KM-[\\w._-]+) FTP server\\r\\n| p/Kyocera Mita $1 printer ftpd/ d/printer/ cpe:/h:kyocera:mita_$1/a\nmatch ftp m|^220 Welcome to Solar FTP Server \\(http://solarftp\\.com\\)\\r\\n| p/Solar FTP Server/ o/Windows/ cpe:/o:microsoft:windows/\nmatch ftp m|^220 Indy FTP-Server bereit\\.\\r\\n| p/Indy FTP server/ i/German/ cpe:/a:indy:ftp_server::::de/\nmatch ftp m|^220-Welcome to the Ascotel FTP server\\r\\n220 \\r\\n| p/Aastra A150 VoIP phone ftpd/ d/VoIP phone/ cpe:/h:aastra:a150/a\nmatch ftp m|^220 \\(none\\) FTP server \\(Version ([\\w._-]+/OpenBSD/Linux-ftpd-[\\w._-]+)\\) ready\\.\\r\\n| p/Topfield TF7100HDPVRt DVR ftpd/ v/$1/ d/media device/\nmatch ftp m|^220 EthernetBoard OkiLAN ([\\w._-]+) Ver ([\\w._-]+) FTP server\\.\\r\\n| p/OkiDATA OkiLAN $1 print server ftpd/ v/$2/ d/print server/\nmatch ftp m|^220 Comtrend FTP firmware update utility\\r\\n| p/Comtrend FTP firmware update utility/\nmatch ftp m|^220 Wing FTP Server ([\\w._-]+) ready\\.\\.\\.\\r\\n| p/Wing FTP Server/ v/$1/ cpe:/a:wingftp:wing_ftp_server:$1/\nmatch ftp m|^220 Wing FTP Server ready\\.\\.\\. \\(UNREGISTERED WING FTP SERVER\\)\\r\\n| p/Wing FTP Server/ i/unregistered/ cpe:/a:wingftp:wing_ftp_server/\nmatch ftp m|^220 Wing FTP Server ready\\.\\.\\.\\r\\n| p/Wing FTP Server/ cpe:/a:wingftp:wing_ftp_server/\nmatch ftp m|^220-\\xa1\\xee Sonic FTP Server \\(Version ([\\w._-]+)\\)\\.\\r\\n220-\\xa1\\xee | p/Sonic FTP Server/ v/$1/\nmatch ftp m|^220 Aos FTP Server ready\\.\\r\\n| p/A2 ftpd/ o/A2/ cpe:/o:eth:a2/\nmatch ftp m|^220 Serveur FTP ::ffff:[\\d.]+ pr\\xc3\\xaat\\r\\n| p/ProFTPD/ i/French/ cpe:/a:proftpd:proftpd::::fr/\nmatch ftp m|^220 FreeFloat Ftp Server \\(Version ([\\w._-]+)\\)\\.\\r\\n| p/FreeFloat ftpd/ v/$1/ o/Windows/ cpe:/a:freefloat:freefloat_ftp_server:$1/ cpe:/o:microsoft:windows/\nmatch ftp m|^220 FreeFlow Accxes FTP server ready\\r\\n| p/Xerox FreeFlow Accxess ftpd/ d/print server/ cpe:/a:xerox:freeflow_print_server/\nmatch ftp m|^220 [\\d.]+ FTP Server \\(Apache/([\\w._-]+) \\(Ubuntu\\) (.*)\\) ready\\.\\r\\n| p/Apache FTP Protocol Module/ v/$1/ i/Ubuntu; $2/ o/Linux/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/\nmatch ftp m|^220 Welcome to This FTP Server\\. Service ready for new user\\.\\r\\n214-The following commands are recognised:\\r\\nUSER\\r\\nPASS\\r\\nCWD\\r\\nQUIT\\r\\nTYPE\\r\\nPORT\\r\\nRETR\\r\\nSTOR\\r\\nSTOU\\r\\nAPPE\\r\\nRNFR\\r\\nRNTO\\r\\nABOR\\r\\nDELE\\r\\nCDUP\\r\\nRMD\\r\\nMKD\\r\\nPWD\\r\\nLIST\\r\\nNLST\\r\\nHELP\\r\\nNOOP\\r\\nXCUP\\r\\nXCWD\\r\\nXPWD\\r\\nXRMD\\r\\nXMKD\\r\\n214 List End\\.\\r\\n| p/Toshiba CTX PBX ftpd/ d/PBX/\nmatch ftp m|^220 Wind River FTP server ([\\w._-]+) ready\\.\\r\\n| p/Wind River FTP server/ v/$1/ o/VxWorks/ cpe:/a:windriver:ftp_server:$1/ cpe:/o:windriver:vxworks/\nmatch ftp m|^220 FTP Server \\(ZyWALL (USG \\w+)\\) \\[[a-f:\\d.]+\\]\\r\\n| p/ZyXEL ZyWALL $1 firewall ftpd/ cpe:/h:zyxel:zywall_$1/\nmatch ftp m|^220 Authentication_Required\\r\\n| p/glFTPd/ o/Unix/\nmatch ftp m|^220 Ftp firmware update utility\\r\\n| p|D-Link/Comtrend DSL modem ftp firmware update|\nmatch ftp m|^550 Permission denied ,please check access control list\\r\\nPermission denied\\.\\(Please check access control list\\)\\r\\n| p/DrayTek ADSL router ftpd/\nmatch ftp m|^220 RIEDEL Artist FTP Server\\r\\n| p/Riedel Artist intercom system ftpd/ cpe:/h:riedel:artist/\nmatch ftp m|^220 (ZXDSL [\\w._-]+) FTP version ([\\w._-]+) ready at .*\\r\\n| p/ZyXEL $1 ADSL modem ftpd/ v/$2/ d/broadband router/ cpe:/h:zyxel:$1/\nmatch ftp m|^ - error: no valid servers configured\\n - Fatal: error processing configuration file '/etc/proftpd/proftpd\\.conf'\\n$| p/ProFTPD/ cpe:/a:proftpd:proftpd/\nmatch ftp m|^220 SoftDataCable ([\\w._-]+) ready\\r\\n| p/Software Data Cable ftpd/ v/$1/\nmatch ftp m|^220 Operation successful\\r\\n$| p/BusyBox ftpd/ i/D-Link DCS-932L IP-Cam camera/ d/webcam/ cpe:/a:busybox:busybox/ cpe:/h:dlink:dcs-932l/\nmatch ftp m|^220-\\*\\*\\* Running an unlicensed copy of TurboFTP Server \\*\\*\\*\\r\\n220 TurboFTP Server ([\\w._-]+) ready\\.\\r\\n| p/TurboSoft TurboFTP/ v/$1/ o/Windows/ cpe:/a:turbosoft:turboftp:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^200 Welcome to BarracudaBackupFTPd\\.\\r\\n| p/Barracuda Backup 490 appliance ftpd/ d/storage-misc/\nmatch ftp m|^220 awaiting Input\\r\\n| p/Encrypted FTP/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to the Cisco (TelePresence MCU [\\w._-]+), version ([\\w._()-]+)\\r\\n| p/Cisco $1 videoconferencing bridge/ v/$2/ d/VoIP adapter/ cpe:/h:cisco:$1/\nmatch ftp m|^220 Multicraft ([\\w._-]+) FTP server\\r\\n| p/Multicraft ftpd/ v/$1/\nmatch ftp m|^220 [\\d.]+ BECO FTP server \\(Version ([\\w._-]+)\\) ready\\.\\r?\\n| p/Kaba B-web 93 00 timeclock ftpd/ v/$1/\nmatch ftp m|^220-TiMOS-B-([\\w._-]+) both/hops ALCATEL SR ([\\w._-]+) Copyright \\(c\\) \\d+-\\d+ Alcatel-Lucent\\.\\r\\n220-All rights reserved\\. All use subject to applicable license agreements\\.\\r\\n220-Built on (.*) by builder in /rel[\\w._-]+/[\\w._-]+/[\\w._-]+/panos/main\\r\\n220-\\r\\n220-This is a Maxcom, system restricted to authorized individuals\\. This system is subject to monitoring\\. Unauthorized users, access, and/or modification will be prosecuted\\.\\r\\n220 FTP server ready\\r\\n| p/Alcatel $2 Service Router ftpd/ i/build date: $3/ d/router/ o/TiMOS $1/ cpe:/h:alcatel:$2_service_router/ cpe:/o:alcatel:timos:$1/\nmatch ftp m|^220 ASTRA-Super FTP server ready\\.\\r\\n$| p/Ishida Astra counter-top scale ftpd/\nmatch ftp m|^220 ucftpd FTP server ready\\.\\r\\n| p/MontaVista ucftpd/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 Welcome to Stupid-FTPd server\\.\\r\\n| p/Stupid-FTPd/ cpe:/a:cinek:stupid-ftpd/\nmatch ftp m|^220 FTP v([\\d.]+) at ([\\w.-]+) ready\\.\\r\\n| p/OpenRG ftpd/ v/$1/ d/broadband router/ h/$2/\nmatch ftp m|^220 FRITZ!Box(\\w+)\\(kdg\\) FTP server ready\\.\\r\\n| p/AVM FRITZ!Box ftpd/ i/model: $1; Kabel Deutschland/ d/broadband router/\nmatch ftp m|^220-Welcome to cc-ftpd\\.\\r\\n220-You are user number (\\d+ of \\d+) allowed\\.\\r\\n220-Local time is now ([\\d:]+)\\. Server port: \\d+\\.\\r\\n220-This is a private system - No anonymous login\\r\\n220-IPv6 connections are also welcome on this server\\.\\r\\n220 You will be disconnected after 15 minutes of inactivity\\.\\r\\n| p/Centova Cast ftpd/ i/user $1; local time $2/\nmatch ftp m|^220 ([\\w.-]+) FTP server \\(QNXNTO-ftpd (\\d{8})\\) ready\\.\\r\\n| p/QNX ftpd/ v/$2/ o/QNX/ h/$1/ cpe:/o:qnx:qnx/a\nmatch ftp m|^220-Cerberus FTP Server - Home Edition\\r\\n220-This is the UNLICENSED Home Edition and may be used for home, personal use only\\r\\n220-Welcome to Cerberus FTP Server\\r\\n220 Created by Cerberus, LLC\\r\\n| p/Cerberus FTP Server/ i/Home Edition/ o/Windows/ cpe:/a:cerberusftp:ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-220-Welcome to Cerberus FTP Server\\r\\n220 220 Created by Cerberus, LLC\\r\\n| p/Cerberus FTP Server/ o/Windows/ cpe:/a:cerberusftp:ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-Welcome to Cerberus FTP Server\\r\\n220 Created by Cerberus, LLC\\r\\n| p/Cerberus FTP Server/ o/Windows/ cpe:/a:cerberusftp:ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-Welcome to my Server\\r\\n220-\\r\\n220 ICS FTP Server ready\\.\\r\\n| p/Overbyte Internet Component Suite ftpd/\nmatch ftp m|^220 ADAM2 FTP Server ready\\r\\n| p/Texas Instruments ADAM2 bootloader ftpd/\nmatch ftp m|^220-Idea FTP Server v([\\d.]+) \\(([\\w.-]+)\\) \\[[\\d.]+\\]\\r\\n220 Ready\\r\\n| p/home.pl Idea ftpd/ v/$1/ h/$2/\nmatch ftp m|^220 ([\\w.-]+)  Lexmark ([\\w]+) FTP Server ([\\w.-]+) ready\\.\\r\\n| p/Lexmark printer ftpd/ v/$3/ i/model $2/ h/$1/ cpe:/h:lexmark:$2/\nmatch ftp m|^220 FTP Utility FTP server \\(Version ([\\d.]+)\\) ready\\.\\r\\n| p/Konica Minolta FTP Utility ftpd/ v/$1/\nmatch ftp m|^220 PocketPro (\\w+) FTP server ready\\.\\r\\n| p/TROY PocketPro $1 print server ftpd/\nmatch ftp m|^220 FTP Version ([\\d.]+) on (IQ\\w+)\\r\\n| p/IQinVision IQeye ftpd/ v/$1/ i/model $2/\nmatch ftp m|^220 FRITZ!Box(\\d+\\w*(?:\\(UI\\))?) FTP server ready\\.\\r\\n| p/AVM FRITZ!Box ftpd/ i/model $1/ d/broadband router/\nmatch ftp m|^220 220 RMNetwork FTP\\r\\n$| p/Ramnit worm ftpd/ i/malware/\nmatch ftp m|^220 Monarch (\\d+) Print Adapter FTP server ready\\.\\r\\n| p/Avery-Dennison Monarch $1 print server ftpd/\nmatch ftp m|^220-TCP/IP for VSE Internal FTPDAEMN ([\\d.]+ ?[A-Z]) (\\d{8}) \\d\\d\\.\\d\\d\\r\\n    Copyright \\(c\\) 1995,2006 Connectivity Systems Incorporated\\r\\n220 Ready for new user\\r\\n| p|IBM z/VSE ftpd| v/$1/ i/build date $2/ o|z/VSE| cpe:/o:ibm:z%2fvse/\nmatch ftp m|^220- \\r\\n {14}_/_/_/_/  \\*\\*\\* eXo Platform JCR FTP Server {8}_/_/_/_/\\r\\n| p/eXo Platform JCR ftpd/\nmatch ftp m|^220  RT-IP FTP Server ready\\. Type HELP for help\\r\\n| p/Computer Solutions RT-IP ftpd/\nmatch ftp m|^220 Welcome to ([\\w.-]+)'s Everything ETP Server version ([\\d.]+)\\r\\n| p|Everything ETP/FTP server| v/$2/ h/$1/\nmatch ftp m|^220 Welcome to HD Media Box !\\r\\n| p|O2Media/Ellion HMR-600 ftpd| d/media device/\n# SurgeFTP 2.3a3\nmatch ftp m|^550 There is no place for you to log in\\. Create domain for IP [\\d.]+\\.\\r\\n| p/NetWin SurgeFTP ftpd/ cpe:/a:netwin:surgeftp/\nmatch ftp m|^220 SAVIN (\\w+) FTP server \\(([\\d.]+)\\) ready\\.\\r\\n| p/Savin printer ftpd/ v/$2/ i/model $1/ d/printer/ cpe:/h:savin:$1/\nmatch ftp m|^220 ([\\w.-]+) FTP server \\(StarOS\\) ready\\.\\r\\n| p/Cisco StarOS ftpd/ o/StarOS/ h/$1/ cpe:/o:cisco:staros/\nmatch ftp m|^220-  FTP Server \\(RTOS-UH\\) ready\\. \\(c\\)IEP  Version: ([\\d.]+)\\r\\n220 Connection is automatically closed if idle for 10 Minutes\\r\\n| p/RTOS-UH ftpd/ v/$1/ o/RTOS-UH/ cpe:/o:universitathanover:rtos-uh/\nmatch ftp m|^220 iosFtp server ready\\.\\r\\n| p/ios-ftp-server ftpd/ o/iOS/ cpe:/o:apple:iphone_os/\nmatch ftp m|^220 SP (C?\\d+\\w*) \\([a-f0-9]+\\) FTP server ready\\r\\n| p/Ricoh Aficio SP $1 ftpd/ d/printer/ cpe:/h:ricoh:aficio_sp_$1/a\nmatch ftp m|^220 Sharp - NetScan Tool\\r\\n| p/Sharp Scan to Desktop ftpd/\nmatch ftp m|^220 Welcome to ALPHA -FTPd server\\.\\r\\n| p/Alpha ftpd/\nmatch ftp m|^220 IPCamera FtpServer\\(www\\.maygion\\.com\\),do NOT change firmware unless you know what you are doing!\\r\\n| p/Maygion IPCamera ftpd/ d/webcam/\nmatch ftp m|^220 AXIS ([\\w._-]+) Video Encoder ([\\w._-]+) \\(\\d\\d\\d\\d\\) ready\\.\\r\\n| p/AXIS $1 video encoder ftpd/ v/$2/ d/media device/\nmatch ftp m|^220 Star (IFBD-HE[\\d/]+) FTP Server\\.\\r\\n| p/Star $1 ftpd/ d/print server/\nmatch ftp m|^220 Welcome to the HomeWorks Processor\\r\\n| p/Lutron HomeWorks ftpd/\n# http://sourceforge.net/projects/open-ftpd/\nmatch ftp m|^220- \\*{29}\\r\\n {5}\\*\\* {8}Welcome on {7}\\*\\*\\r\\n {5}\\* {5}Gabriel's FTP Server  \\*\\r\\n {5}\\*\\* {6}([\\w./_-]+) Release    \\*\\*\\r\\n220  \\*{29}\\r\\n| p/Open-FTPD/ v/$1/ cpe:/a:gabmuf:open-ftpd:$1/\nmatch ftp m|^220-Debian GNU/Linux (\\d+)\\r\\n220 ProFTPD ([\\w._-]+) Server | p/ProFTPD/ v/$2/ i/Debian $1/ o/Linux/ cpe:/a:proftpd:proftpd:$2/a cpe:/o:debian:debian_linux:$1/ cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 Praim Srl, ([\\w._-]+) Ftp Server \\(Version ([\\w._-]+) \\[[\\w :]+\\]\\)\\.\\r\\n| p/Praim thin terminal ftpd/ v/$2/ i/model: $1/ d/terminal/ cpe:/h:praim:$1/\nmatch ftp m|^220 Harris BCD FTP Ready\\r\\n$| p/Harris FlexStar radio broadcast exciter ftpd/ d/specialized/\n# http://www.foxgate.ua/downloads/FoxGate%20S6224-S2%20user%20manual.pdf\nmatch ftp m|^220 welcome your using  ftp server\\.\\.\\.\\r\\n| p/FoxGate switch ftpd/ d/switch/\nmatch ftp m|^220 DSC ftpd 1\\.0 FTP Server ready\\.\\r\\n| p/Ricoh DC SR-10 ftpd/ o/Windows/ cpe:/a:ricoh:dc_software/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 FANUC FTP server ready\\.\\r\\n| p/FANUC CNC controller ftpd/ d/specialized/\nmatch ftp m|^220 VicFTPS ready\\r\\n| p/VicFTPS ftpd/ o/Windows/ cpe:/a:vicftps:vicftps/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-Wellcome to Home Ftp Server!\\r\\n220 FTP server ready\\.\\r\\n| p/Home FTP Server/ o/Windows/ cpe:/a:ari_pikivirta:home_ftp_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 TASKalfa (\\w+) FTP server\\r\\n| p/Kyocera TASKalfa copier ftpd/ i/model: $1/ cpe:/h:kyocera:taskalfa_$1/\nmatch ftp m|^220 o2 MediaCenter FTP Server v([\\w._-]+) ready\\r\\n| p/Astoria Networks o2 MediaCenter ftpd/ v/$1/ d/broadband router/ cpe:/h:astoria_networks:o2_mediacenter/\nmatch ftp m|^220 MinWin FTP server ready\\.\\r\\n| p/Microsoft MinWin ftpd/ o/Windows 10 IoT/ cpe:/o:microsoft:windows_10:::iot/\nmatch ftp m|^220 Welcomd to iCatch FTP Server\\r\\n| p/iCatch DVR ftpd/ d/media device/\nmatch ftp m|^220 PCMan's FTP Server ([\\w._-]+) Ready\\.\\r\\n| p/PCMan's FTP Server/ v/$1/ o/Windows/ cpe:/a:pcman%27s_ftp_server_project:pcman%27s_ftp_server:$1/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 FTP Server \\((NXC\\d+)\\) \\[[a-f:\\d.]+\\]\\r\\n| p/ZyXEL WLAN controller ftpd/ i/model: $1/ cpe:/h:zyxel:$1/\nmatch ftp m|^220 IFT DS ([\\w-]+) RAID FTP server ready\\.\\r\\n| p/Infortrend EonStor DS iSCSI host ftpd/ i/model: $1/ d/storage-misc/ cpe:/h:infortrend:esds_$1/\nmatch ftp m|^220 Synology FTP server ready\\.\\r\\n| p/Synology DiskStation ftpd/ d/storage-misc/\nmatch ftp m|^220-owftpd 1-wire ftp server -- Paul H Alfille\\r\\n220-Version: (\\d[\\w._-]*) see http://www\\.owfs\\.org\\r\\n220 Service ready for new user\\.\\r\\n| p/OWFS owftpd/ v/$1/ cpe:/a:owfs:owftpd:$1/\nmatch ftp m|^220 Firewall Authentication required before proceeding with service\\r\\n| p/FortiGate Application filtering/\nmatch ftp m|^421 Your IP is banned, no further requests will be processed from this IP \\([\\d.]+\\)\\.\\r\\n| p/CrushFTP/ i/IP banned/ cpe:/a:crushftp:crushftp/\nmatch ftp m|^220 RICOH ([A-Z 0-9]+) FTP server \\(([\\d.]+)\\) ready\\.\\r\\n| p/Ricoh printer ftpd/ v/$2/ i/model: $1/ cpe:/h:ricoh:$1/\nmatch ftp m|^220 Femitter FTP Server ready\\.\\r\\n| p/Acritum Femitter Server ftpd/ o/Windows/ cpe:/a:acritum:femitter_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^421-Could not open file /var/run/bftpdutmp\\r\\n421 Server disabled for security reasons\\.\\r\\n| p/Bftpd/ i/disabled/ cpe:/a:jesse_smith:bftpd/\nmatch ftp m|^220 Gameservers FTPD v([\\d.]+)\\r\\n| p/Choopa GameServers.com ftpd/ v/$1/\nmatch ftp m|^220 DSL Router FTP Server v([\\d.]+) ready\\r\\n| p/Arcadyan DSL router ftpd/ v/$1/\nmatch ftp m|^220 NRG MP (\\d+) FTP server \\(([\\d.]+)\\) ready\\.\\r\\n| p/NRG printer ftpd/ v/$2/ i/model MP $1/ d/printer/ cpe:/h:nrg:mp_$1/\nmatch ftp m|^220 StingRay FTP Server (\\d[\\w._-]+) ready to accept your commands\\.\\r\\n| p/Hermstedt StingRay ftpd/ v/$1/\nmatch ftp m|^220 Inspired Signage : ISPlayerFTPService-Default ready on Port : \\d+\\r\\n| p/AMX Inspired Signage PlayerFTPService/ cpe:/a:amx:playerftpservice/\nmatch ftp m|^220 Speedport W (\\w+) FTP Server v([\\d.]+) ready\\r\\n| p/Speedport WAP ftpd/ v/$2/ i/model: W$1/ d/WAP/ cpe:/h:speedport:w$1/\nmatch ftp m|^421 Too many users logged in, closing control 421 Service not available, remote server has closed connection\\r\\n$| p/HP LaserJet 400 printer ftpd/ i/too many users/ d/printer/ cpe:/h:hp:laserjet_400/a\nmatch ftp m|^220 Welcome to the Eltek Power System FTP server\\.\\r\\n| p/Eltek Power System ftpd/ d/power-misc/\nmatch ftp m|^220 FUJI XEROX DocuPrint ([A-Z][A-Z\\d]+(?: ?[a-zA-Z]{1,2})?)\\r\\n| p/Fuji Xerox DocuPrint $1 ftpd/ d/printer/ cpe:/h:fuji:xerox_docuprint_$1/a\nmatch ftp m|^421 Service not available \\(server too busy\\)\\r\\n| p/Fuji Xerox DocuPrint ftpd/ d/printer/\nmatch ftp m|^220 ECOSYS (P\\d\\w+) FTP server\\r\\n| p/Ecosys $1 ftpd/ d/print server/ cpe:/h:ecosys:$1/\nmatch ftp m|^220 FTPVita Server ready\\.\\n| p/FTPVita ftpd/ d/game console/ cpe:/h:sony:playstation_vita/\nmatch ftp m|^220 FTP Server \\((UAG\\d+)\\) \\[[a-f:\\d.]+\\]\\r\\n| p/ZyXEL $1 Unified Access Gateway ftpd/ d/security-misc/ cpe:/h:zyxel:$1/\nmatch ftp m|^220 Software Data Cable (\\d[\\w._-]*) ready\\r\\n| p/Software Data Cable ftpd/ v/$1/ o/Android/ cpe:/a:damiapp:software_data_cable:$1/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch ftp m|^200 Groupcall Xporter - ([\\d.]+)\\r\\n| p/Groupcall Xporter ftpd/ v/$1/ cpe:/a:groupcall:xporter:$1/\nmatch ftp m|^220 In-Sight \\(R\\) ([\\w._-]+) Release ([\\d.]+) \\(\\d+\\) ready \\(([\\w._-]+)\\)\\.\\r\\n| p/Cognex In-Sight ftpd/ v/$2/ i/component: $1/ d/webcam/ h/$3/ cpe:/a:cognex:in-sight:$2/\nmatch ftp m|^220 FTP ready at [JFMASOND][aepueco][nbrylgptvc] \\d\\d? \\d\\d:\\d\\d:\\d\\d\\r\\n| p/Loxone Miniserver ftpd/ d/specialized/ cpe:/h:loxone:miniserver/\nmatch ftp m|^220 iQ-R FTP server ready\\.\\r\\n| p/Mitsubishi iQ-R PLC ftpd/ d/specialized/\nmatch ftp m|^220 [\\d.]{7,15} (CJ\\w+)-EIP\\d+ FTP server \\(FTP Version ([\\d.]+)\\) ready\\.\\r\\n| p/Omron $1 PLC ftpd/ v/$2/ d/specialized/ cpe:/h:omron:$1/\nmatch ftp m|^220 CMFP\\(v(\\w+-V\\w+)- 1a\\) FTP server ready\\.\\r\\n| p/Teco Image Systems or Konica Minolta MFP ftpd/ v/$1/ d/printer/\nmatch ftp m=^220 ([\\w._-]+) FTP server \\(U(?:LTRIX|ltrix) Version ([\\d.]+) ([^)]+)\\) ready\\.\\r\\n= p/Ultrix ftpd/ i/build: $3/ o/Ultrix $2/ h/$1/ cpe:/o:dec:ultrix:$2/\nmatch ftp m|^220-={61}\\r\\n220-Welcome\\.\\r\\n220-\\r\\n220-This is a running (RSX-[\\w-]+) system\\.\\r\\n220-={61}\\r\\n220 Welcome\\r\\n| p/BQTFTP ftpd/ o/$1/ cpe:/a:bqt:bqtftp/ cpe:/o:dec:$1/\nmatch ftp m|^220 Keil FTP service\\r\\n| p/Keil Network Component ftpd/ d/specialized/ cpe:/a:keil:network_component/\nmatch ftp m|^220 QnUDVCPU FTP server ready\\.\\r\\n| p/Mitsubishi Q-series PLC ftpd/ d/specialized/\nmatch ftp m|^220 (FS-\\d+MFP\\+?) FTP server\\r\\n| p/Kyocera $1 printer ftpd/ d/printer/ cpe:/h:kyocera:$1/a\nmatch ftp m|^220 FTP Server \\(([NWAP]{3}\\d+[\\w-]*)\\) \\[[a-f:\\d.]+\\]\\r\\n| p/ZyXEL $1 WAP ftpd/ d/WAP/ cpe:/h:zyxel:$1/a\n\n#(insert ftp)\n\n# These look too generic, but didn't match anything else yet\nmatch ftp m|^220 FTP Server 2\\.1 ready\\r\\n| p/Android ftpd/ v/2.1/\nmatch ftp m|^220 FTP Server ready\\.\\.\\.\\r\\n| p/Gene6 ftpd/\n\n# not already sure about the next. maybe too generic? it exists already above a signature for openftpd. embyte\nmatch ftp m|^220 OpenFTPD server([^ ]+)?| p/OpenFTPD/ v/$1/\n\nmatch ftp-proxy m|^220 Ftp service of Jana-Server ready\\r\\n| p/JanaServer ftp proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 FTP Gateway at Jana Server ready\\r\\n| p/JanaServer ftp proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 ([-.\\w]+) FTP proxy \\(Version (\\d[-.\\w]+)\\) ready\\.\\r\\n| p/Gauntlet FTP proxy/ v/$2/ h/$1/\n# Frox FTP Proxy (frox-0.6.5) on Linux 2.2.X - http://frox.sourceforge.net/\nmatch ftp-proxy m|^220 Frox transparent ftp proxy\\. Login with username\\[@host\\[:port\\]\\]\\r\\n| p/Frox ftp proxy/ cpe:/a:james_hollingshead:frox/\nmatch ftp-proxy m|^220 Frox transparent ftp proxy\\. Login with username\\r\\n| p/Frox ftp proxy/ cpe:/a:james_hollingshead:frox/\nmatch ftp-proxy m|^501 Proxy unable to contact ftp server\\r\\n| p/Frox ftp proxy/ cpe:/a:james_hollingshead:frox/\nmatch ftp-proxy m|^220 ([-.+\\w]+) FTP AnalogX Proxy (\\d[-.\\w]+) \\(Release\\) ready\\r\\n| p/AnalogX FTP proxy/ v/$2/ h/$1/ cpe:/a:analogx:proxy:$2/\nmatch ftp-proxy m|^220 Secure Gateway FTP server| p/Symantec Enterprise Firewall FTP proxy/ d/firewall/ cpe:/a:symantec:enterprise_firewall/\nmatch ftp-proxy m|^220-Sidewinder ftp proxy\\.  You must login to the proxy first| p/Sidewinder FTP proxy/\nmatch ftp-proxy m|^220-\\r\\x0a220-Sidewinder ftp proxy|s p/Sidewinder FTP proxy/\nmatch ftp-proxy m|^220 webshield2 FTP proxy ready\\.\\r\\n| p/Webshield2 FTP proxy/ o/Windows/ cpe:/a:bluecoat:winproxy/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 WinProxy FTP Gateway ready, enter username@host\\[:port\\]\\r\\n| p/WinProxy FTP proxy/ o/Windows/ cpe:/a:bluecoat:winproxy/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 WinProxy \\(Version ([^)]+)\\) ready\\.\\r\\n| p/WinProxy FTP proxy/ v/$1/ o/Windows/ cpe:/a:bluecoat:winproxy/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 Proxy602 Gateway ready, enter user@host\\[:port\\]\\r\\n| p/Proxy602 ftp proxy/ d/firewall/\nmatch ftp-proxy m|^220 Java FTP Proxy Server \\(usage: USERID=user@site\\) ready\\.\\r\\n| p/Java FTP Proxy/\nmatch ftp-proxy m|^220 ([-\\w_.]+) FTP proxy \\(Version V([\\d.]+)\\) ready\\.\\r\\n| p/Generic FTP proxy/ v/$2/ h/$1/\nmatch ftp-proxy m|^220 CoolProxy FTP server & firewall\\r\\n| p/CoolProxy ftp proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 Finjan SurfinGate Proxy - Server Ready\\.\\r\\n| p/Finjan SurfinGate ftp proxy/\nmatch ftp-proxy m|^220 ([-\\w_.]+) \\(NetCache\\) .*\\r\\n| p/NetApp NetCache ftp proxy/ h/$1/ cpe:/a:netapp:netcache/\nmatch ftp-proxy m|^220 Welcome to ([-\\w_.]+) Ftp Proxy Service\\.\\r\\n| p/Proxy Suite ftp proxy/ h/$1/\nmatch ftp-proxy m|^220 Hi! Welcome \\w+ UserGate| p/UserGate ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 Webwasher FTP Proxy ([\\d.]+) build (\\d+)\\r\\n| p/Webwasher ftp proxy/ v/$1 build $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220- ([-\\w_.]+) PROXY-FTP server \\(DeleGate/([\\d.]+)\\) ready\\.\\r\\n| p/DeleGate ftp proxy/ v/$2/ h/$1/\nmatch ftp-proxy m|^500 WinGate Engine Access Denied\\r\\n| p/WinGate ftp proxy/ i/access denied/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 IWSS FTP proxy ready\\r\\n| p/Trend Micro InterScan Web Security Suite ftp proxy/ cpe:/a:trendmicro:interscan_web_security_suite/\nmatch ftp-proxy m|^220 ezProxy FTP Proxy Server Ready \\r\\n| p/ezProxy ftp proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 FTP proxy \\(v([\\d.]+)\\) ready\\r\\n530 Login incorrect\\. Expected USER command\\r\\n| p/jftpgw ftp proxy/ v/$1/\nmatch ftp-proxy m|^220-Welcome to SpoonProxy V([\\w._-]+) by Pi-Soft Consulting, LLC\\r\\n| p/Pi-Soft SpoonProxy ftp proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220-CCProxy FTP Service\\(Unregistered\\)\\r\\n| p/CCProxy ftp proxy/ i/unregistered/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220-CCProxy FTP Service\\r\\n220-you need to input userid@site as login name\\.\\r\\n220 Example: user anonymous@ftp\\.netscape\\.com\\r\\n| p/CCProxy ftp proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 kingate\\(([\\w._-]+)-win32\\) ftp proxy ready\\r\\n| p/kingate ftp proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp-proxy m|^220 FileCatalyst Server Enterprise v([^\\r\\n]*)\\r\\n$| p/FileCatalyst ftp proxy/ v/$1/\nmatch ftp-proxy m|^220 ([\\w._-]+), KEN! DSL FTP-Gateway\\r\\n| p/AVM KEN! ftp proxy/ h/$1/\nmatch ftp-proxy m|^220 ([\\w._-]+), KEN! FTP-Gateway\\r\\n| p/AVM KEN! ftp proxy/ h/$1/\nmatch ftp-proxy m|^220 server ready - login please\\r\\n| p/Squid ftp proxy/ cpe:/a:squid-cache:squid/\nmatch ftp-proxy m|^421 Proxy is closed \\(unknown user location\\)\\r\\n$| p/Zscaler ftp proxy/\nmatch ftp-proxy m|^220 Cleo VLProxy/([\\w._-]+) FTP server ready\\.\\r\\n$| p/Cleo VLProxy ftp proxy/ v/$1/\nmatch ftp-proxy m|^220 McAfee Web Gateway ([\\d.]+ (?:- )?build:? \\d+)\\r\\n| p/McAfee Web Gateway ftp proxy/ v/$1/ cpe:/a:mcafee:web_gateway:$1/\nmatch ftp-proxy m|^220-Firewall ftp proxy\\.  You must login to the proxy first\\.\\r\\n220 Use   proxy-user:auth-method@destination\\.\\r\\n| p/Secure Computing Sidewinder firewall ftp proxy/ d/firewall/ cpe:/h:securecomputing:sidewinder/\nmatch ftp-proxy m|^220 Zscaler/([\\d.]+): USER expected \\(Unix syntax\\)\\r\\n| p/Zscaler ftp proxy/ v/$1/\n\n# DAZ Studio 4.5, port 27997\nmatch valentinadb m|^dddd\\0\\0\\0\\0\\0\\0\\0\\x0b| p/Valentina DB/\n\nmatch varnish-cli m|^200 \\d+ +\\n-----------------------------\\nVarnish HTTP accelerator CLI.\\n-----------------------------\\nType 'help' for command list\\.\\nType 'quit' to close CLI session\\.\\n| p/Varnish Cache CLI/ v/2.1.0 - 2.1.3/ i/open/ cpe:/a:varnish-cache:varnish:2.1/\n# vident field is uname -s,uname -r,uname -m\nmatch varnish-cli m|^200 \\d+ +\\n-----------------------------\\nVarnish HTTP accelerator CLI.\\n-----------------------------\\n([^,]+),([^,]+),[^\\n]*\\n\\nType 'help' for command list\\.\\nType 'quit' to close CLI session\\.\\n| p/Varnish Cache CLI/ v/2.1.4/ o/$1 $2/ cpe:/a:varnish-cache:varnish:2.1.4/\nmatch varnish-cli m|^200 \\d+ +\\n-----------------------------\\nVarnish Cache CLI 1.0\\n-----------------------------\\n([^,]+),([^,]+),[^\\n]*\\n\\nType 'help' for command list\\.\\nType 'quit' to close CLI session\\.\\n\\n| p/Varnish Cache CLI/ v/2.1.5 - 3.0.3/ o/$1 $2/ cpe:/a:varnish-cache:varnish/\nmatch varnish-cli m|^200 \\d+ +\\n-----------------------------\\nVarnish Cache CLI 1.0\\n-----------------------------\\n([^,]+),([^,]+),[^\\n]*\\nvarnish-([\\w._-]+) revision [0-9a-f]+\\n\\nType 'help' for command list\\.\\nType 'quit' to close CLI session\\.\\n\\n| p/Varnish Cache CLI/ v/$3/ o/$1 $2/ cpe:/a:varnish-cache:varnish:$3/\nmatch varnish-cli m|^107 59      \\n[a-z]{32}\\n\\nAuthentication required\\.\\n\\n| p/Varnish Cache CLI/ i/authentication required/ cpe:/a:varnish-cache:varnish/\n\n# TODO kerio?\n#match ftp m|^421 Service not available \\(The FTP server is not responding\\.\\)\\n$| v/unknown FTP server//service not responding/\nmatch vdr m|^220 (\\S+) SVDRP VideoDiskRecorder (\\d[^\\;]+);| p/VDR/ v/$2/ d/media device/ h/$1/\nmatch vdr m|^Access denied!\\n$| p/VDR/ d/media device/\n\nsoftmatch ftp m|^220 Welcome to ([-.\\w]+) FTP.*\\r\\n$|i h/$1/\nsoftmatch ftp m|^220 ([-.\\w]+) [-.\\w ]+ftp.*\\r\\n$|i h/$1/\nsoftmatch ftp m|^220-([-.\\w]+) [-.\\w ]+ftp.*\\r\\n220|i h/$1/\nsoftmatch ftp m|^220 [-.\\w ]+ftp.*\\r\\n$|i\nsoftmatch ftp m|^220-[-.\\w ]+ftp.*\\r\\n220|i\nsoftmatch ftp m|^220[- ].*ftp server.*\\r\\n|i\nsoftmatch ftp m|^220-\\r?\\n220 - ftp|i\n\nmatch freeswitch-event m|^Content-Type: auth/request\\n\\n| p/FreeSWITCH mod_event_socket/ cpe:/a:freeswitch:freeswitch/\n\nmatch fsae m|^\\0\\0\\0\\\\\\x80\\x06\\0\\0\\0\\n\\x01\\x03\\0...\\0\\0\\0\\n\\x10\\x03\\0\\0\\0.\\0\\0\\0\\x15\\x11\\x05FSAE server ([\\w._-]+)\\0\\0\\0\\x16\\x12\\x01................\\0\\0\\0\\x17\\x13\\x01FSAE_SERVER_\\d+$|s p/Fortinet Server Authentication Extension/ v/$1/\n\nmatch fw1-rlogin m|^\\0Check Point FireWall-1 authenticated RLogin server running on ([-.\\w]+)\\r\\n\\r| p/Check Point FireWall-1 authenticated RLogin server/ i/$1/ cpe:/a:checkpoint:firewall-1/\n\nmatch fyre m|^220 Fyre rendering server ready\\n| p/Fyre rendering cluster node/\n\nmatch g15daemon m|^G15 daemon HELLO$| p/g15daemon/ i/Logitech G15 keyboard control/\n\nmatch galaxy m|^\\0\\0\\0\\t\\0\\0\\0\\x80\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x042\\0\\0\\0\\x01\\0\\0\\t_\\0\\0\\0h| p/Galaxy Client Event Manager/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch gamebots m|^HELLO_BOT\\r\\n| p/GameBots for Unreal Tournament 2004/\nmatch gamebots-control m|^HELLO_CONTROL_SERVER\\r\\n| p/GameBots for Unreal Tournament 2004 control server/\n\nmatch g-data-sec m|^\\x94\\x00\\x00\\x00\\x06\\x02\\x00\\x00\\x00\\xa4\\x00\\x00RSA1\\x00\\x04\\x00\\x00\\x01\\x00\\x01\\x00.{128}|s p/G Data Security client/\n# http://www.galaxysys.com/data/docs/SG%20Software%20User%20Guide%20%2810.4%29.pdf\nmatch gcs-clientgw m|^\\x04\\0\\0\\0....$| p/Galaxy Control Systems Client GW/ d/security-misc/\n\nmatch geovision-mobile m|^D3\\x22\\x11\\0\\0\\0\\0\\xc6\\x11\\0\\0\\xae\\x15\\0\\0$| p/Geovision mobile device support/\n\nmatch gnats m|^200 ([-.\\w]+) GNATS server (\\d[-.\\w]+) ready\\.\\r\\n| p/GNATS bugtracking system/ v/$2/ h/$1/ cpe:/a:gnu:gnats:$2/\n\nmatch ganglia m|^<\\?xml version=\\\"1\\.0\\\".*<!DOCTYPE GANGLIA_XML.*<GANGLIA_XML VERSION=\\\"([^\\\"]+)\\\" SOURCE=\\\"([^\\\"]+)\\\">.*<CLUSTER NAME=\\\"([^\\\"]+)\\\" LOCALTIME=\\\"\\d+\\\" OWNER=\\\"([^\\\"]+)\\\"|s p/Ganglia XML Grid monitor/ v/$1/ i/Cluster name: $3; Owner: $4; Source: $2/\nmatch ganglia m|^<\\?xml version=\\\"1\\.0\\\".*<!DOCTYPE GANGLIA_XML \\[\\n   <!ELEMENT GANGLIA_XML \\(GRID\\x7cCLUSTER\\x7cHOST\\)\\*>\\n      <!ATTLIST GANGLIA_XML VERSION CDATA #REQUIRED>\\n|s p/Ganglia XML Grid monitor/\n\n# Port 5400. Looks like UTF-16-LE-encoded pseudo-XML with embedded base64:\n# m|^\\xde\\xad\\xad\\xdeZ\\x03\\0\\0\\x7e\\x9bxeVersion\\x7c1024\\x7c<RSAKeyValue><Modulus>uGSY...</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>\\x7c$|\nmatch genetec-5400 m|^\\xde\\xad\\xad\\xdeZ\\x03\\0\\0\\x7e\\x9bxeV\\0e\\0r\\0s\\0i\\0o\\0n\\0\\x7c\\x001\\x000\\x002\\x004\\0\\x7c\\0<\\0R\\0S\\0A\\0K\\0e\\0y\\0V\\0a\\0l\\0u\\0e\\0>\\0<\\0M\\0o\\0d\\0u\\0l\\0u\\0s\\0>\\0(?:[\\w/+=]\\0)+<\\0/\\0M\\0o\\0d\\0u\\0l\\0u\\0s\\0>\\0<\\0E\\0x\\0p\\0o\\0n\\0e\\0n\\0t\\0>\\0(?:[\\w/+=]\\0)+<\\0/\\0E\\0x\\0p\\0o\\0n\\0e\\0n\\0t\\0>\\0<\\0/\\0R\\0S\\0A\\0K\\0e\\0y\\0V\\0a\\0l\\0u\\0e\\0>\\0\\x7c\\0$| p/Genetec Security Center/\nmatch genetec-5500 m|^\\xde\\xad\\xad\\xde\\0\\x01\\0\\0\\xd6\\xa0L\\xc2\\x0b\\0\\r\\xcf\\x88\\\"\\xf2\\xb7\\xc9D\\x81\\x08\\xe3\\\"\\x16\\x9a\\x86\\xb9\\r\\xcf\\x88\\\"\\xf2\\xb7\\xc9D\\x81\\x08\\xe3\\\"\\x16\\x9a\\x86\\xb9\\x04\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\r\\xcf\\x88\\\"\\xf2\\xb7\\xc9D\\x81\\x08\\xe3\\\"\\x16\\x9a\\x86\\xb9\\0\\x04\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Genetec Security Center/\n\nmatch git-daemon m|^Unknown option: --inetd\\nusage: git \\[--version\\] \\[--exec-path\\[=GIT_EXEC_PATH\\]\\] \\[--html-path\\] \\[-p\\x7c--paginate\\x7c--no-pager\\] \\[--bare\\] \\[--git-dir=GIT_DIR\\] \\[--work-tree=GIT_WORK_TREE\\] \\[--help\\] COMMAND \\[ARGS\\]\\n| p/git-daemon/ i/misconfigured/ cpe:/a:git:git/\n\nsoftmatch teamtalk m%^(?:teamtalk|welcome) userid=\\d+ servername=% p/BearWare TeamTalk/ cpe:/a:bearware:teamtalk/\n\nmatch telematics m|^<auth-request rca-id=\\\"1\\\" version=\\\"([\\d.]+)\\\" car-line=\\\"([^\"]+)\\\" telematics=\\\"([^\"]+)\\\" phase=\\\"NEGOTIATE_PARAMS\\\"/>\\0<auth-ack result=\\\"FALSE\\\" reason=\\\"APP_NOT_SUPPORTED\\\"/>\\0| p/Mercedes telematics/ v/$1/ i/model: $2; telematics: $3/\nmatch telnet m|^\\xff\\xfe\\x01Domain 2 \\(STUDENT03\\)\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n======================\\r\\n  Main menu\\r\\n======================\\r\\n\\?\\) Help\\r\\nx\\) Exit\\r\\n$| p/Genetec Security Center/\nmatch telnet m|^\\xff\\xfe\\x01Genetec Synergis Access Manager \\(STUDENT03\\)\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n======================\\r\\n Main menu            \\r\\n======================\\r\\n1\\) Status\\r\\n\\?\\) Help\\r\\nx\\) Exit\\r\\n| p/Genetec Synergis Access Manager/\nmatch telnet m|^\\xff\\xfe\\x01Genetec Directory \\(STUDENT03\\)\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n======================\\r\\n  Main menu\\r\\n======================\\r\\n1\\) Status\\r\\n\\?\\) Help\\r\\nx\\) Exit\\r\\n| p/Genetec Directory/\nmatch telnet m|^\\xff\\xfe\\x01Genetec Integration Service \\(STUDENT03\\)\\r\\n\\r\\n\\r\\n\\r\\n========================================================================\\r\\n  Integration Service Main Menu\\r\\n========================================================================\\r\\n\\r\\n  1\\) CONFIG\\r\\n     Displays the configuration settings for the service\\r\\n\\r\\n  2\\) STATUS\\r\\n     Displays the status of the external systems being run by this\\r\\n     service\\.\\r\\n\\r\\n  \\?\\) Help\\r\\n\\r\\n  x\\) Exit\\r\\n========================================================================\\r\\n| p/Genetec Integration Service/\n\nmatch goldsync m|^%%QU%%QU%%QU$| p/GoldMine GoldSync synchronization/\n\n# http://gmc.yoyogames.com/index.php?showtopic=657080\nmatch gms m|^GM:Studio-Connect\\0$| p/GMS gaming protocol/\n\n# Probably not general enough...\nmatch gnatbox m|^GBPK\\xfb\\xf7n\\x93W\\xaf\\x86\\x93x@\\xa9\\x0e\\xca\\*\\x9bS\\0| p/Global Technology Associates Gnat Box firewall administration/ d/firewall/\n\nmatch gnupg m|^OK GNU Privacy Guard's OpenPGP server ([\\w._-]+) ready\\n| p/GnuPG server mode/ v/$1/ cpe:/a:gnupg:gnupg:$1/\n\nsoftmatch gkrellm m|^<error>\\nClient limit exceeded\\.\\n| p/GKrellM System Monitor/\nsoftmatch gkrellm m|^<error>\\nConnection not allowed from .*\\n| p/GKrellM System Monitor/\n\nmatch gopher m|^3Connection to [\\d.]+ is denied -- no authorization\\.\\r\\n$|\nmatch g6-remote m|^200 1400\\r\\n$| p/G6 ftpd remote admin/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch giop m|^GIOP\\x01...\\0\\0\\0\\0|s p/CORBA naming service/\n\nmatch guildwars2-heartbeat m|^\\x17\\0\\0\\0\\0\\t\\0\\0\\0Heartbeat \\0\\0\\0\\x046\\0\\0\\0\\0\\n\\0\\0\\0Compressed \\0\\0\\0\\x04\\x1a| p/Guild Wars 2 game heartbeat/\n\n# CompTek AquaGateKeeper (Telephony package) http://aqua.comptek.ru\nmatch H.323-gatekeeper m|^\\x03\\0\\0.*@|s p/CompTek AquaGateKeeper/\n# OpenH323 Gatekeeper 2.0.3\nmatch H.323-gatekeeper m|^\\xff\\xfd\\x03\\xff\\xfb\\x05.*Version:\\r\\nGatekeeper\\(GNU\\) Version\\(([\\d.]+)\\) Ext\\(.*\\) Build\\(.*\\) Sys\\(Linux .*\\)\\r\\n| p/OpenH323 Gatekeeper/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\n# Causes false matches with telnet.\n# match H.323-gatekeeper m|^\\xff\\xfd.$| p|GNU Gatekeeper|\nmatch H.323-gatekeeper m|^\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfe\\x01\\r\\nAccess forbidden!\\r\\n$| p/GNU Gatekeeper/ cpe:/a:gnugk:gnu_gatekeeper/\nmatch H.323-gatekeeper m|^\\x03\\0\\0\\.\\x08\\x02\\0\\0Z~\\0\\\"\\x05%\\xc0\\x06\\0\\x08\\x91J\\0\\x02X\\x08\\x11\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x02\\x80\\x01\\0$| p/GNU Gatekeeper/ cpe:/a:gnugk:gnu_gatekeeper/\n\nmatch hama-radio m|^\\(Thread\\d+\\): \\[ *\\d+\\.\\d+\\] [A-Z]+ *\\(\\d+\\): .*\\r\\n| p/HAMA Wifi-Radio status/ d/media device/\nmatch hama-radio2 m|^w\\d{5}.{255}h@|s p/HAMA radio service/ d/media device/\n\n# Returns ASCII data in the following format:\n# |HardDrive1DevName|HardDrive1HardwareID|HardDrive1Temp|TempUnit|\n# |HardDrive2DevName|HardDrive2HardwareID|HardDrive2Temp|TempUnit|\nmatch hddtemp m=^\\|/dev/[hs]\\w\\w\\|= p/hddtemp hard drive info server/\nmatch hddtemp m=^\\|$= p/hddtemp hard drive info server/\n\nmatch helpdesklog m|^Helpdesk Advanced ([\\d.]+) License Logging Service| p/Helpdesk Advanced license server/ v/$1/\n\nmatch honeywell-ripsd m|^\\0\\x10\\x03\\x0c$| p/Honeywell ripsd power management server/\n\nmatch hptsvr m|^\\(\\0\\0\\0hpt_stor\\x01..\\xbf\\0\\0\\0\\0\\0\\0\\0\\0....\\.\\.\\.E\\0\\0\\0\\0\\0\\0\\0\\0$|s p/HighPoint RAID management service/ v/3.13/\nmatch hptsvr m|^\\(\\0\\0\\0\\0\\0\\0\\0..${backquote}\\0\\x01\\xff\\xff\\xff\\xcc\\xfa\\x85\\0C\\x1d\\xe6whfnk\\.\\.\\.E\\0\\0\\0\\0\\0\\0\\0\\0$| p/HighPoint RAID management service/\n# version unknown\nsoftmatch hptsvr m|^\\(\\0\\0\\0hpt_stor\\x01..\\0\\0\\0\\0\\0\\0\\0\\0\\0....\\.\\.\\.E\\0\\0\\0\\0\\0\\0\\0\\0$|s p/HighPoint RAID management service/\n\nmatch hpiod m|^msg=MessageError\\nresult-code=5\\n$| p/HP Linux Imaging and Printing System/ o/Linux/ cpe:/a:hp:linux_imaging_and_printing_project/ cpe:/o:linux:linux_kernel/a\n\n# And now for some SORRY web servers that just blurt out an http \"response\" upon connection!!!\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-type: text/html\\r\\nExpires: .*\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\n\\r\\n<HTML><TITLE>JAP</TITLE>\\n| p/Java Anonymous Proxy/\nmatch http m|^HTTP/1.0 500\\r\\nContent-type: text/plain\\r\\n\\r\\nNo Scan Capable Devices Found\\r\\n| p/HP Embedded Web Server remote scan service/ i/no scanner found/ d/printer/\n# SMC Barricade 7004ABR\nmatch http m|^HTTP/1\\.0 301 Moved\\r\\nLocation: http://\\d+\\.\\d+\\.\\d+\\.\\d+:88\\r\\n| p/SMC Barricade broadband router/ i/simply redirects to real web admin port 88/ d/broadband router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: SonicWALL\\r\\n| p/SonicWALL firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\nExpires: .*\\r\\n\\r\\n<H1>500 Internal Server Error</H1>\\r\\n\\r\\n\\r\\n| p/Cisco Catalyst http config/ d/switch/ o/IOS/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.1 200 OK\\nMax-Age: 0\\nExpires: 0\\nCache-Control: no-cache\\nCache-Control: private\\nPragma: no-cache\\nContent-type: multipart/x-mixed-replace;boundary=BoundaryString\\n\\n--BoundaryString\\n| p/Motion Webcam gateway httpd/\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\nServer: Motion/([\\d.]+)\\r\\n| p/Motion Camera httpd/ v/$1/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Motion-httpd/([\\d.]+)\\r\\n| p/Motion-httpd/ v/$1/ d/webcam/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\nServer: Motion/([\\d.]+)\\n.*\\nContent-type: image/jpeg\\n|s p/Motion webcam httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nContent-Type: text/plain\\r\\nServer: WPA/([-\\w_.]+)\\r\\n\\r\\n| p/Glucose WeatherPop Advanced httpd/ v/$1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.0 503 R\\r\\nContent-Type: text/html\\r\\n\\r\\nBusy$| p/D-Link router http config/ d/router/\nmatch http m|^<HEAD><TITLE>501 Not Implemented</TITLE></HEAD>\\n<BODY><H1>501 Not Implemented</H1>\\nThe server has not implemented your request type\\.<BR>\\n</BODY>\\r\\n$| p/Hummingbird Document Manager httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<body>\\n<ul><li>\\n<i>[^<]+</i>\\n<ul><li>\\n<i>Nice</i>\\n<ul><li>\\nNumber: \\d+</li></ul>\\n<i>ProgramArguments</i>\\n<ol>\\n<li>String: [^<]+</li>\\n| p/Apple launchd_debug httpd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<body>\\n<ul><li>\\n<i>com\\.apple\\.KernelEventAgent</i>\\n| p/Apple launchd_debugd httpd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Speed Touch WebServer/([\\d.]+)\\r\\n| p|Alcatel/Thomson SpeedTouch ADSL http config| v/$1/ d/broadband router/\nmatch http m|^HTTP/1\\.1 408 Request Time-Out\\r\\nConnection: Close\\r\\n\\r\\n$| p/Konica Minolta bizhub printer http config/ d/printer/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<h1>Bad Request \\(Invalid Verb\\)</h1>|s p/Microsoft IIS httpd/ o/Windows/ cpe:/a:microsoft:internet_information_services/ cpe:/o:microsoft:windows/a\nmatch http m|^<HTML><BODY><CENTER>Authentication failed</CENTER></BODY></HTML>\\r\\n$| p/InterSect Alliance SNARE http config/ cpe:/a:intersectalliance:system_intrusion_analysis_and_reporting_environment/\nmatch http m|^HTTP/1\\.1 408 Request Timeout\\nContent-Length:0\\nContent-Type:text/html;charset=UTF-8\\n\\n$| p/Finchsync PocketPC Synchonizer httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\nServer: NetSupport Gateway/([\\d.]+) \\(Windows NT\\)\\nContent-Type: application/x-www-form-urlencoded\\nContent-Length:    14\\nConnection: Keep-Alive\\n\\nCMD=HEARTBEAT\\n$| p/NetSupport Gateway httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nExpires: Thu, 26 Oct 1995 00:00:00 GMT\\r\\nTransfer-Encoding: chunked\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n| p/Allegro RomPager/ v/$1/ i/Dell DRAC config/ d/remote management/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: micro_httpd\\r\\n| p/micro_httpd/ cpe:/a:acme:micro_httpd/a cpe:/o:acme:micro_httpd/\n# http://code.google.com/p/free-android-apps/wiki/Project_LocalHTTPD\nmatch http m|^HTTP/1\\.0 500 Internal Server Error \\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\n\\r\\nSERVER INTERNAL ERROR: Invalid ip\\.$| p/Local HTTPD/ i/based on NanoHTTPD/ d/phone/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: httpd-impacct/([^\\r\\n]+)\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H2>400 Bad Request</H2>\\nYour request has bad syntax or is inherently impossible to satisfy\\.\\n<HR>\\n</HTML>\\n$| p/thttpd/ v/$1/ i/Asotel Vector 1908 switch http config/ d/switch/ cpe:/a:acme:thttpd:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: DVBViewer \\(Windows\\)\\r\\nContent-Type: video/mpeg2\\r\\n\\r\\n\\r\\n| p/DVBViewer digital TV viewer httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nserver: kolibri-([\\w._-]+)\\r\\ncontent-type: text/plain\\r\\ncontent-length: 11\\r\\n\\r\\nBad Request$| p/Kolibri httpd/ v/$1/ cpe:/a:senkas:kolibri:$1/\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nServer: remote-potato-v([\\w._-]+)\\r\\n| p/Remote Potato media player/ v/$1/\n# The date reveals the time zone instead of using GMT.\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nDate: ([^\\r]+)\\r\\nServer: Embedthis-Appweb/([\\w._-]+)\\r\\n| p/Embedthis-Appweb/ v/$2/ i/date: $1/ cpe:/a:mbedthis:appweb:$2/\nmatch http m|^HTTP/1\\.0 503 Service Unavailable\\r\\nDate: .* GMT\\r\\nServer: Embedthis-Appweb/([\\w._-]+)\\r\\n| p/Embedthis-Appweb/ v/$1/ i/Sharp Open System Architecture/ d/printer/ cpe:/a:mbedthis:appweb:$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: Microsoft-Cassini/([\\w._-]+)\\r\\n| p/Microsoft Cassini httpd/ v/$1/ o/Windows/ cpe:/a:microsoft:cassini:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 408 Request Timeout\\r\\nServer: WebSphere Application Server/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: 117\\r\\n| p/IBM WebSphere Application Server/ v/$1/ cpe:/a:ibm:websphere_application_server:$1/\nmatch http m|^HTTP/1\\.0 200 Ok Welcome to VOC\\r\\nServer: Voodoo chat daemon ver ([\\w._ -]+)\\r\\nContent-type: text/html\\r\\nExpires: Mon, 08 Apr 1976 19:30:00 GMT\\+3\\r\\nConnection: close\\r\\nKeep-Alive: max=0\\r\\nCache-Control: no-store, no-cache, must-revalidate\\r\\nCache-Control: post-check=0, pre-check=0\\r\\nPragma: no-cache\\r\\n\\r\\n$| p/Voodoo http chat daemon/ v/$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: Cassini/([\\w._-]+)\\r\\n.*<style type=\\\"text/css\\\">\\r\\n        \\t          body {margin:0; padding:0; color:Black; background-color:#BABED1;}\\r\\n|s p/Cassini httpd/ v/$1/ i/Sonic Foundry Mediasite Service Manager/ o/Windows/ cpe:/a:microsoft:cassini:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nServer: Cassini/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-AspNet-Version: ([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: /SDALogin\\.aspx\\r\\n.*<title>\\r\\n\\tSDA-MSC-6 - Login to Symon LCD-(\\w+) \\r\\n</title>|s p/Cassini httpd/ v/$1/ i/Symon SDA-$3 media player http config; ASP.NET $2/ o/Windows/ cpe:/a:microsoft:asp.net:$2/ cpe:/a:microsoft:cassini:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Menuet\\r\\nConnection: close\\r\\nContent-Length: 0\\d+\\r\\nContent-Type: image/bmp\\r\\n\\r\\n| p/MenuetOS webcam server/ o/MenuetOS/ cpe:/o:menuetos:menuetos/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html;charset=utf-8\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head>\\n<title>mongod ([\\w._-]+)</title>| p/MongoDB http console/ h/$1/ cpe:/a:mongodb:mongodb/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\nContent-Type: text/xml; charset=\\\"utf-8\\\"\\r\\n\\r\\nHTTP/1\\.0 400 Bad Request\\r\\nServer: CPE-SERVER/([\\w._-]+) Supports only GET\\r\\n\\r\\n$| p/ZTE H220N router http config/ v/$1/ d/router/ cpe:/h:zte:h220n/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/plain\\r\\nContent-Length: 51\\r\\nConnection: close\\r\\n\\r\\nError 400: Bad Request\\nCan not parse request: \\[\\r\\n\\r\\]$| p/Pcounter httpd/\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nDate: \\w+ \\w+ \\d\\d \\d\\d:\\d\\d:\\d\\d \\w+ \\d\\d\\d\\d\\r\\nServer: JOSM RemoteControl\\r\\nContent-type: text/html\\r\\nAccess-Control-Allow-Origin: \\*\\r\\n| p/JOSM OpenStreetMap editor remote control httpd/\nmatch http m|^\\(null\\) 400 Bad Request\\r\\nServer: httpd_gargoyle/([\\w._ -]+)\\r\\n| p/httpd_gargoyle/ v/$1/ i/Gargoyle WAP firmware/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^\\(null\\) 400 Bad Request\\r\\nServer: svea_httpd/([\\w._-]+)\\r\\n| p/svea_httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 408 Request Timeout\\r\\nServer: micro_httpd\\r\\nDate: .* GMT\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE></TITLE><meta http-equiv=\\\"Pragma\\\" content=\\\"no-cache\\\"></HEAD>\\n<BODY BGCOLOR=\\\"#FFFFFF\\\">\\nRequest timed out\\.\\n\\n</BODY></HTML>\\n$| p/micro_httpd/ i/Buffalo WLI-TX4-G54HP WAP http config/ d/WAP/ cpe:/a:acme:micro_httpd/a cpe:/h:buffalo:wli-tx4-g54hp/a\nmatch http m|^HTTP/1\\.1 503 Service unavailable\\r\\n.*<a href=\\\"http://minishare\\.sourceforge\\.net/\\\">MiniShare ([\\w._-]+)</a>|s p/MiniShare http interface/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: LG HDCP Server\\r\\n.*<envelope><HDCPError>500</HDCPError><HDCPErrorDetail>Internal Server Error</HDCPErrorDetail></envelope>$|s p/LG LW5700 TV HDCP server/ o/Linux/ cpe:/h:lg:lw5700/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Technicolor WebServer/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: 58\\r\\n\\r\\nHTTP/1\\.0 400 Bad Request: Invalid or incomplete request\\.\\r\\n\\r\\n\\r\\n$| p/Technicolor TG787 VoIP gateway http admin/ v/$1/ d/VoIP adapter/\n# Switched from HTTP 1.0 to 1.1 in 516a5825 (3.6.0), but it doesn't respond to NULL anymore?\nmatch http m|^HTTP/1\\.0 400 Bad Request \\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\n\\r\\nBAD REQUEST: Syntax error\\. Usage: GET /example/file\\.html$| p/Bukkit JSONAPI httpd for Minecraft game server/ v/3.6.0 or older/\n\nmatch http m|^\\r\\n<HTML>\\n<HEAD><TITLE>Error Observed</TITLE></HEAD>\\n<BODY BGCOLOR=white>\\n<H1>Error Observed</H1>\\n<P>Error: 400 Bad Request</BODY></HTML>| p/D-Link DGS-1500 series switch httpd/ d/switch/\nmatch http m|^HTTP/1\\.1 408 Request Timeout\\r\\nContent-Type: text/html\\r\\nConection: close\\r\\n\\r\\n<html>\\n<head>\\n<title>408 Request Timeout</title>\\n</head>\\n<body>\\n<h1>408 Request Timeout</h1>\\n</body>\\n</html>\\n| p/Motorola NVG589 DSL modem http admin/ d/broadband router/ cpe:/h:motorola:nvg589/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: sky_router\\r\\n| p/BSkyB router/ d/broadband router/\nmatch http m|^HTTP/1\\.1 403 OK\\r\\nDate: [^\\r\\n]+ ([A-Z]+) \\d\\d\\d\\d\\r\\nServer: ODN Webserver\\[([\\dA-F:]{17})\\]\\r\\n| p/Cisco ODN set-top box httpd/ i/MAC: $2; time zone: $1; interface forbidden/ d/media device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: DirectAdmin Daemon v([\\d.]+) Registered to ([^\\r\\n]+)\\r\\n| p/DirectAdmin httpd/ v/$1/ i/Registered to $2/ cpe:/a:directadmin:directadmin:$1/\nmatch http m|^HTTP/1\\.1 200 OK[ .]\\nContent-Type:application/octet-stream\\.?\\n\\n| p/udpxy UDP-to-HTTP multicast traffic relay/ cpe:/a:pavel_cherenkov:udpxy/\nmatch http m|^HTTP/1\\.1 200 BANNED\\r\\nContent-Length: \\d+\\r\\n\\r\\nYour IP is banned, no further requests will be processed from this IP \\([\\d.]+\\)\\.\\r\\n| p/CrushFTP web interface/ i/IP banned/ cpe:/a:crushftp:crushftp/\nmatch http m|^HTTP/1\\.1 408 Request Time-out\\r\\nServer: vpl-jail-system ([\\d.]+)\\r\\n| p/Virtual Programming Lab for Moodle/ v/$1/ cpe:/a:ulpgc:vpl:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: TP-LINK SmartPlug\\r\\nConnection: close\\r\\nContent-Length: 5\\r\\nContent-Type: text/html\\r\\n\\r\\n\\.\\.\\.\\r\\n| p/TP-LINK Smart Plug fake_httpd/ d/power-misc/\n\n# This is here for NULL probe cheat since several probes unpredictably trigger it -Doug\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: OfficeScan Client\\r\\nContent-Type: text/plain\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 4\\r\\n\\r\\nFail| p/Trend Micro OfficeScan Antivirus http config/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch http-proxy m=^HTTP/1\\.[01] \\d\\d\\d .*\\r\\n(?:Server|Proxy-agent): iPlanet-Web-Proxy-Server/([\\d.]+)\\r\\n=s p/iPlanet web proxy/ v/$1/ cpe:/a:sun:iplanet_web_server:$1/\nmatch http-proxy m|^<h1>\\xd5\\xca\\xba\\xc5\\xc8\\xcf\\xd6\\xa4\\xca\\xa7\\xb0\\xdc \\.\\.\\.</h1>\\r\\n<h2>IP \\xb5\\xd8\\xd6\\xb7: [][\\w:.]+<br>\\r\\nMAC \\xb5\\xd8\\xd6\\xb7: <br>\\r\\n\\xb7\\xfe\\xce\\xf1\\xb6\\xcb\\xca\\xb1\\xbc\\xe4: \\d+-\\d+-\\d+ \\d+:\\d+:\\d+<br>\\r\\n\\xd1\\xe9\\xd6\\xa4\\xbd\\xe1\\xb9\\xfb: Invalid user\\.</h2>$| p/CC Proxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Type: text/html\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=us-ascii\\r\\n\\r\\n<html><body>Invalid request<P><HR><i>This message was created by Kerio Control Proxy</i></body></html> {665}| p/Kerio Control http proxy/ cpe:/a:kerio:control/\nmatch http-proxy m|^HTTP/HTTP/0\\.0 408 Timeout\\r\\nServer: tinyproxy/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/tinyproxy http proxy/ v/$1/ cpe:/a:banu:tinyproxy:$1/\nmatch http-proxy m|^HTTP/1\\.0 408 Timeout\\r\\nServer: tinyproxy/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/tinyproxy http proxy/ v/$1/ cpe:/a:banu:tinyproxy:$1/\nmatch http-proxy m|^<HEAD><TITLE>Invalid HTTP Request</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"white\\\" FGCOLOR=\\\"black\\\"><H1>Invalid HTTP Request</H1><HR>\\n<FONT FACE=\\\"Helvetica,Arial\\\"><B>\\nDescription: Bad request syntax</B></FONT>\\n<HR>\\n<!-- default \\\"Invalid HTTP Request\\\" response \\(400\\) -->\\n</BODY>\\n {400}\\0| p/unknown transparent proxy/\n\nmatch hp-gsg m|^220 JetDirect GGW server \\(version (\\d[\\d.]+)\\) ready\\r\\n| p/HP JetDirect Generic Scan Gateway/ v/$1/ d/printer/\nmatch hp-gsg m|^220 HP GGW server \\(version ([\\w._-]+)\\) ready\\r\\n\\0| p/HP Generic Scan Gateway/ v/$1/ d/printer/\n\n# http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj01014\nmatch hp-gsg m|^00$| p/IEEE 1284.4 scan peripheral gateway/ d/printer/\nmatch hp-gsg m|^01$| p/IEEE 1284.4 scan peripheral gateway/ i/in use/ d/printer/\nmatch hp-gsg m|^02$| p/IEEE 1284.4 scan peripheral gateway/ i/connection error/ d/printer/\n\nmatch hylafax m|^220 ([-.\\w]+) server \\(HylaFAX \\(tm\\) Version (\\d[-.\\w]+)\\) ready\\.\\r\\n$| p/HylaFAX/ v/$2/ o/Unix/ h/$1/\n# Hylafax 4.1.6 on Linux 2.4\nmatch hylafax m|^130 Warning, client address \\\"[\\d.]+\\\" is not listed for host name \\\"([-.\\w]+)\\\"\\.\\r\\n| p/HylaFAX/ i/IP unauthorized/ h/$1/\nmatch hylafax m|^130 Warning, no inverse address mapping for client host name \\\"[-\\w_.]+\\\"\\.\\r\\n220 ([-\\w_.]+) server \\(HylaFAX \\(tm\\) Version ([\\d.]+)\\) ready\\.\\r\\n| p/HylaFAX/ v/$2/ i/Reverse DNS unauthorized/ h/$1/\n\n# http://www-912.ibm.com/s_dir/slkbase.NSF/0/387a6235643483f186256fee005d4c2c\nmatch ibm-hmc m|^\\xab\\xab\\xab\\xab\\xa0\\x81\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x13\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/IBM Hardware Management Console Cluster Ready Hardware Server/ o/AIX/ cpe:/a:ibm:hardware_management_console/ cpe:/o:ibm:aix/\n\nmatch ichat m|^\\r\\n                                Welcome To\\r\\n                             ichat ROOMS (\\d[-.\\w]+)\\r\\n==| p/iChat Rooms/ v/$1/ cpe:/a:koz.com:ichat_rooms_server:$1/\n\nmatch ice m|^IceP\\x01\\0\\x01\\0\\x03\\0\\x0e\\0\\0\\0| p/Internet Communications Engine/\n\nmatch ident m|^flock\\(\\) on closed filehandle .*midentd| p/midentd/ i/broken/\nmatch ident m|^nullidentd -- version (\\d[-.\\w]+)\\nCopyright | p/Nullidentd/ v/$1/ i/broken/\nmatch ident m|^\\d+, \\d+ : USERID : FreeBSD : \\[x\\]-\\d+\\r\\n| p/FreeBSD authd/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\n\nmatch igel-remote m|^<connectionstate><response>value=<OK></response><protocolversion>value=<(\\d+)></protocolversion></connectionstate>| p/IGEL Remote Management Suite/ i/protocol version $1/ cpe:/a:igel:remote_management_suite/\n\nmatch ilo m|^\\\"\\0\\x04\\0$| p/HP ProLiant ML350 Integrated Lights-Out/ cpe:/h:hp:integrated_lights-out/\nmatch ilo-console m|^PQ?$| p/HP Integrated Lights-Out remote console/ cpe:/h:hp:integrated_lights-out/\n\n# Need to figure out what this is and how to structure the match\nmatch ipmi-usb m|^IUSB    \\0\\0\\0\\x007\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xf1\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0.............\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$|s p/IPMI USB redirection/ d/remote management/\n\nmatch imap m|^\\* OK ([-/.+\\w]+) Solstice \\(tm\\) Internet Mail Server \\(tm\\) (\\d[-.\\w]+) IMAP4 service - at | p/Sun Solstice Internet Mail Server imapd/ v/$2/ o/Unix/ h/$1/\nmatch imap m|^\\* OK GroupWise IMAP4rev1 Server Ready\\r\\n| p/Novell GroupWise imapd/ o/Unix/ cpe:/a:novell:groupwise/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 .*\\] GroupWise Server Ready\\r\\n| p/Novell GroupWise imapd/ o/Unix/ cpe:/a:novell:groupwise/\nmatch imap m|^\\* OK dbmail imap \\(protocol version 4r1\\) server (\\d[-.\\w]+) ready to run\\r\\n| p/DBMail imapd/ v/$1/ i/imapd version may differ from overal dbmail version number/ cpe:/a:paul_j_stevens:dbmail:$1/\nmatch imap m|^\\* OK ([-.+\\w]+) NetMail IMAP4 Agent server ready | p/Novell NetMail imapd/ o/Unix/ h/$1/ cpe:/a:novell:netmail/\nmatch imap m|^\\* OK IMAP4 Server \\(IMail ([-.\\w]+)\\)| p/IMail imapd/ v/$1/ cpe:/a:ipswitch:imail:$1/\nmatch imap m|^\\* OK Merak (\\d[-.\\w]+) IMAP4rev1 |i p/Merak Mail Server imapd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK ([-.+\\w]+) IMAP4rev1 Mercury/32 v(\\d[-.\\w]+) server ready\\.\\r\\n| p|Mercury/32 imapd| v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK ([-.\\w]+) IMAP4 service \\(Netscape Messaging Server (\\d[-.\\w ]+) \\(built ([\\w ]+)\\)\\)\\r\\n| p/Netscape Messaging Server Imapd/ v/$2/ i/built $3/ h/$1/ cpe:/a:netscape:messaging_server:$2/\nmatch imap m|^\\* OK \\[CAPABILITY .*\\] ([-.\\w]+) IMAP4rev1 (20[\\w.]+) at | p/UW imapd/ v/$2/ h/$1/ cpe:/a:uw:imap_toolkit:$2/\nmatch imap m|^\\* OK eXtremail V(\\d[-.\\w]+) release (\\d+) IMAP4 server started\\r\\n| p/eXtremail IMAP server/ v/$1.$2/\nmatch imap m|^\\* OK eXtremail V(\\d[-.\\w]+) release (\\d+) rev(\\d+) IMAP4 server started\\r\\n| p/eXtremail IMAP server/ v/$1.$2.$3/\nmatch imap m|^\\* OK ([-.\\w]+) NetMail IMAP4 Agent server ready <.*>\\r\\n| p/Novell NetMail imapd/ o/Unix/ h/$1/ cpe:/a:novell:netmail/\n# Alt-N MDaemon 6.5.1 imap server on Windows XP\nmatch imap m|^\\* OK ([-.\\w]+) IMAP4rev1 MDaemon (\\d[-.\\w]+) ready\\r\\n| p/Alt-N MDaemon imapd/ v/$2/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK ([-.\\w]+) IMAP4rev1 MDaemon (\\d[-.\\w]+) listo\\r\\n| p/Alt-N MDaemon imapd/ v/$2/ i/Spanish/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2:::es/ cpe:/o:microsoft:windows/a\n# Dovecot IMAP Server - http://dovecot.procontrol.fi/\nmatch imap m|^\\* OK [Dd]ovecot ready\\.\\r\\n| p/Dovecot imapd/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK [Dd]ovecot MUA ready\\r\\n| p/Dovecot MUA imapd/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL\\+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS [^\\]]+\\]| p/Dovecot imapd/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL\\+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS| p/Dovecot imapd/ i/SASL enabled/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 LITERAL\\+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=CRAM-MD5| p/Dovecot imapd/ v/2.0.11/ cpe:/a:dovecot:dovecot:2.0.11/\nmatch imap m|^\\* OK \\[[^\\[]+\\] Dovecot ready\\.\\r\\n| p/Dovecot imapd/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK \\[[^\\[]+\\] Dovecot \\(Ubuntu\\) ready\\.\\r\\n| p/Dovecot imapd/ i/Ubuntu/ o/Linux/ cpe:/a:dovecot:dovecot/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/\nmatch imap m|^\\* OK Welcome to [^.]+\\. Dovecot ready\\.\\r\\n| p/Dovecot imapd/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK Dovecot at ([-\\w_.]+) is ready\\.\\r\\n| p/Dovecot imapd/ h/$1/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK Waiting for authentication process to respond\\.\\.\\r\\n| p/Dovecot imapd/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK.*?Courier-IMAP ready\\. Copyright 1998-(\\d+) Double Precision, Inc\\.  See COPYING for distribution information\\.\\r\\n| p/Courier Imapd/ i/released $1/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 .*?Courier-IMAP ready\\. Copyright 1998-\\d+ Double Precision, Inc\\.  See COPYING for distribution information\\.\\r\\n| p/Courier IMAP4rev1 imapd/\nmatch imap m|^\\* OK CommuniGate Pro IMAP Server ([-.\\w]+) at ([-.\\w]+) ready\\r\\n$| p/CommuniGate Pro imapd/ v/$2/ h/$1/ cpe:/a:stalker:communigate_pro:$2/\nmatch imap m|^\\* OK ([\\w._-]+) CommuniGate Pro IMAP Server (\\d[\\w._-]+) ready\\r\\n| p/CommuniGate Pro imapd/ v/$2/ h/$1/ cpe:/a:stalker:communigate_pro:$2/\n# W-Imapd-SSL v2001adebian-6\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4REV1 X-NETSCAPE LOGIN-REFERRALS STARTTLS AUTH=LOGIN\\](\\S+) IMAP4rev1 ([-.\\w]+) at| p/UW imapd/ v/$2/ h/$1/ cpe:/a:uw:imap_toolkit:$2/\nmatch imap m|^\\* OK Domino IMAP4 Server Release (\\d[-.\\w ]+) +ready +(.*)\\r\\n| p/Lotus Domino imapd/ v/$1/ i/date: $2/ cpe:/a:ibm:lotus_domino:$1/\nmatch imap m|^\\* OK Domino IMAP4 Server Build V([\\w_]+ Beta \\w+) ready .*\\r\\n| p/Lotus Domino imapd/ v/$1/ cpe:/a:ibm:lotus_domino:$1/\nmatch imap m|^\\* BYE Domino IMAP4 Server Unable to authenticate session\\.| p/Lotus Domino imapd/ i/Unable to connect/ cpe:/a:ibm:lotus_domino/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 CHILDREN NAMESPACE\\] Freemail ready - hit me with your rhythm stick\\.\\r\\n| p/Freemail imapd/\nmatch imap m|^\\* OK AVM KEN!4 IMAP Server ready\\r\\n| p/AVM KEN! imapd/\n\n# MS Exchange\nmatch imap m|^\\* OK Microsoft Exchange IMAP4rev1 server version ([-.\\w]+) | p/Microsoft Exchange imapd/ v/$1/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Microsoft Exchange 2000 IMAP4rev1 server version (\\d[-.\\w]+) \\([-.\\w]+\\) ready\\.\\r\\n| p/Microsoft Exchange 2000 imapd/ v/$1/ o/Windows/ cpe:/a:microsoft:exchange_server:2000/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* BYE Connection refused\\r\\n| p/Microsoft Exchange imapd/ i/refused/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Microsoft Exchange Server ([\\d]+) IMAP4rev1 server version (\\d[-.\\w]+) \\(([-.\\w]+)\\) ready\\.\\r\\n| p/Microsoft Exchange Server $1 imapd/ v/$2/ o/Windows/ h/$3/ cpe:/a:microsoft:exchange_server:$1/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Der Microsoft Exchange Server \\(IMAP4rev1, Version (\\d[-.\\w]+) \\([-.\\w]+\\)\\) steht zur Verf\\xfcgung\\.\\r\\n| p/Microsoft Exchange 2000 imapd/ v/$1/ i/German/ o/Windows/ cpe:/a:microsoft:exchange_server:2000:::de/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Der Microsoft Exchange Server 2003 IMAP4rev1-Server, Version ([\\d.]+) \\(([-\\w_.]+)\\), steht zur Verf\\xfcgung\\.\\r\\n| p/Microsoft Exchange 2003 imapd/ v/$1/ i/German/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2000:::de/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Microsoft Exchange IMAP4rev1 kiszolg\\xe1l\\xf3 verzi\\xf3 (\\d[-.\\w]+) \\(([-.\\w]+)\\) k\\xe9sz\\r\\n| p/Microsoft Exchange Server imapd/ v/$1/ i/Hungarian/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server::::hu/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Server Microsoft Exchange IMAP4rev1 verze ([\\d.]+) \\(([-\\w_.]+)\\) je p\\xf8ipraven\\.\\r\\n| p/Microsoft Exchange Server imapd/ v/$1/ i/Czech/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server::::cs/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK La version ([\\d.]+) \\(([-\\w_.]+)\\) du serveur IMAP4rev1 Microsoft Exchange est pr\\xeate\\r\\n| p/Microsoft Exchange Server imapd/ v/$1/ i/French/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server::::fr/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Microsoft Exchange Server 2003 IMAP4rev1 \\xb7\\xfe\\xce\\xf1\\xc6\\xf7\\xb0\\xe6\\xb1\\xbe ([\\d.]+) \\(([-\\w_.]+)\\)| p/Microsoft Exchange 2003 imapd/ v/$1/ i/Korean/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2003:::ko/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Microsoft Exchange Server 2003 IMAP4rev1 \\xbc\\xad\\xb9\\xf6 \\xb9\\xf6\\xc0\\xfc ([\\d.]+) \\(([-\\w_.]+)\\)| p/Microsoft Exchange 2003 imapd/ v/$1/ i/Korean/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2003:::ko/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Servidor IMAP4rev1de Microsoft Exchange Server 2003 versi\\xf3n ([\\w._-]+) \\(([\\w._-]+)\\) listo\\.\\r\\n| p/Microsoft Exchange Server 2003 imapd/ v/$1/ i/Spanish/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2003:::es/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Microsoft Exchange Server 2007 IMAP4 service ready\\r\\n| p/Microsoft Exchange 2007 imapd/ o/Windows/ cpe:/a:microsoft:exchange_server:2007/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK The Microsoft Exchange IMAP4 service is ready\\.\\r\\n| p/Microsoft Exchange 2007-2010 imapd/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\n# Exchange Online is hosted by Microsoft. Does this match any other software? blob is base64-encoded domain and other info.\nmatch imap m|^\\* OK The Microsoft Exchange IMAP4 service is ready\\. \\[\\w+=*\\]\\r\\n| p/Microsoft Exchange Online imapd/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\n\nmatch imap m|^\\* OK IMAP4rev1 Server DeskNow \\(DeskNow ([\\w._-]+)\\) ready\\r\\n| p/DeskNow imapd/ v/$1/\n\nmatch imap m|^\\* OK \\[CAPABILITY (?:IMAP4 )?IMAP4REV1 .*IMAP4rev1 (200\\d\\.[-.\\w]+) at| p/UW imapd/ v/$1/ cpe:/a:uw:imap_toolkit:$1/\nmatch imap m|^\\* OK (?:\\[CAPABILITY IMAP4[^\\]]*?\\] )?([-.\\w]+) Cyrus IMAP4? v([-.\\w\\+]+) server ready\\r\\n| p/Cyrus imapd/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch imap m|^\\* OK ([-.\\w]+) Cyrus IMAP4 v([-.\\w\\+]+)-Red Hat [-.\\w\\+]+ server ready\\r\\n| p/Cyrus imapd/ v/$2/ i/RedHat/ o/Linux/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/ cpe:/o:redhat:linux/\nmatch imap m|^\\* OK (?:\\[CAPABILITY IMAP4[^\\]]*?\\] )?([-\\w_.]+) Cyrus IMAP4? v([-\\w_.]+)-Debian| p/Cyrus imapd/ v/$2/ i|Debian/Ubuntu| o/Linux/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch imap m|^\\* OK ([-.\\w]+) Cyrus IMAP4 v([\\w_.]+)-OS X ([\\d.]+) server ready\\r\\n| p/Cyrus imapd/ v/$2/ i/Mac OS X $3/ o/Mac OS X/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/ cpe:/o:apple:mac_os_x/a\nmatch imap m|^\\* OK \\[[^\\]]+\\] ([-\\w_.]+) Cyrus IMAP4 v([-\\w_.]+)-OS X Server ([\\d.]+):| p/Cyrus imapd/ v/$2/ i/Mac OS X $3/ o/Mac OS X/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/ cpe:/o:apple:mac_os_x/a\nmatch imap m|^\\* OK (?:\\[CAPABILITY IMAP4[^\\]]*?\\] )?([-.\\w]+) Cyrus IMAP4? Murder v([-.\\w]+) server ready\\r\\n| p/Cyrus Murder imapd/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4[^\\]]*?\\] server ready\\r\\n| p/Cyrus imapd/ cpe:/a:cmu:cyrus_imap_server/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 [^]]*\\] ([-.\\w]+) Cyrus IMAP (\\d[\\w.-]+) server ready\\r\\n| p/Cyrus imapd/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 [^]]*\\] ([-.\\w]+) Cyrus IMAP [^ -]*-Debian-(\\d[\\w.]+)[\\w+-]* server ready\\r\\n| p/Cyrus imapd/ v/$2/ o/Linux/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/\n\nmatch imap m|^\\* OK Welcome to Binc IMAP v(\\d[-.\\w]+)| p/Binc imapd/ v/$1/\nmatch imap m|^\\* OK ([-.\\w]+) IMAP4rev1 AppleMailServer (\\d[-.\\w]+) ready\\r\\n| p/AppleMailServer imapd/ v/$2/ h/$1/\nmatch imap m=^\\* OK IMAP4rev1 Server Classic Hamster (?:Vr.|Version) [\\d.]+ \\(Build ([\\d.]+)\\) greets you!\\r\\n= p/Classic Hamster imapd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK ([-\\w_.]+) Oracle Email Server esimap\\t([\\d.]+) \\t  is ready\\r\\n| p/Oracle imapd/ v/$2/ h/$1/\nmatch imap m|^\\* OK Kerio MailServer ([\\d.]+) IMAP4rev1 server ready\\r\\n| p/Kerio imapd/ v/$1/\nmatch imap m|^\\* OK Kerio MailServer ([\\d.]+) patch (\\d+) IMAP4rev1 server ready\\r\\n| p/Kerio imapd/ v/$1 patch $2/\nmatch imap m|^\\* OK Netscape IMAP4rev1 Service ([\\d.]+) on ([-\\w_.]+) at .*\\r\\n| p/Netscape imapd/ v/$1/ h/$2/\nmatch imap m|^\\* OK IMAP4 server ready \\(Worldmail ([\\d.]+)\\)\\r\\n| p/Worldmail imapd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK HT Mail Server v([\\d.]+) IMAP4rev1 .*\\r\\n| p/IceWarp imapd/ v/$1/ cpe:/a:icewarp:mail_server:$1/\nmatch imap m|^\\* OK Softalk IMAP Server ready\\r\\n| p/Softalk imapd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Welcome to Binc IMAP| p/Binc imapd/\nmatch imap m|^\\* OK ([-\\w_.]+) Mirapoint IMAP4 ([-\\w.]+) server ready\\r\\n| p/Mirapoint imapd/ v/$2/ h/$1/\nmatch imap m|^\\* OK FirstClass IMAP4rev1 server v([\\d.]+) at ([-\\w_.]+) ready\\r\\n| p/FirstClass imapd/ v/$1/ h/$2/ cpe:/a:opentext:firstclass:$1/\nmatch imap m|^\\* OK IMAP4rev1 DvISE Mail Access Server MA-([\\w.]+) \\(\\w+\\)\\r\\n| p/DvISE imapd/ v/$1/\nmatch imap m|^\\* OK IMAP4rev1 GNU mailutils ([\\w.]+)\\r\\n| p/GNU mailutils imapd/ v/$1/ cpe:/a:gnu:mailutils:$1/\nmatch imap m|^\\* OK IMAP ([-\\w_.]+) \\(Version ([-\\w.]+)\\)\\r\\n| p/SurgeMail imapd/ v/$2/ h/$1/ cpe:/a:netwin:surgemail:$2/\nmatch imap m|^\\* OK Samsung Contact IMAP server ([\\d.]+) ready on ([-\\w_.]+)\\r\\n| p/Samsung contact imapd/ v/$1/ h/$2/\nmatch imap m|^\\* OK \\[([-\\w_.]+)\\] IMAP4rev1 Mercury/32 v([\\w.]+) server ready\\.\\r\\n| p|Mercury/32 imapd| v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4 IMAP4rev1(?: [\\w=+-]+)*\\] ([\\w._-]+) IMAP4 service \\(Sun Java\\(tm\\) System Messaging Server ([\\w._-]+ \\(built \\w+\\s+\\d+\\s+\\d+\\))\\)\\r\\n| p/Sun Java System Messaging Server imapd/ v/$2/ h/$1/ cpe:/a:sun:java_system_messaging_server:$2/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4 IMAP4rev1[\\w+= -]*\\] ([\\w._-]+) IMAP4 service \\(Sun Java\\(tm\\) System Messaging Server ([\\w._-]+) (\\d+)bit \\(built .*\\)\\)\\r\\n| p/Sun Java System Messaging Server imapd/ v/$2/ i/$3 bits/ h/$1/ cpe:/a:sun:java_system_messaging_server:$2/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4[^\\]]*\\] Messaging Multiplexor \\(Sun Java\\(tm\\) System Messaging Server (\\d[-\\w_.]+) \\(built .*\\)\\)\\r\\n| p/Sun Java System Messaging Multiplexor imapd/ v/$1/ cpe:/a:sun:java_system_messaging_server:$1/\nmatch imap m|^\\* OK ([-\\w_.]+) IMAP4 service \\(iPlanet Messaging Server ([\\w. ]+) \\(built .*\\)\\)\\r\\n| p/Sun iPlanet Messaging Server imapd/ v/$2/ h/$1/ cpe:/a:sun:iplanet_messaging_server:$2/\nmatch imap m|^\\* OK Anonymous Mail Server v([\\d.]+) IMAP4rev1 .*\\r\\n| p/Anonymous Mail Server imapd/ v/$1/\nmatch imap m|^\\* OK ([-\\w_.]+) ModusMail IMAP4 Server ([\\d.]+) ready\\r\\n| p/ModusMail imapd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK IMAP4rev1 Service at Jana-Server ready\\r\\n| p/JanaServer imapd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK \\]-:\\^:-\\[ IMAP4rev1 .*\\r\\n| p/Merak Mail Server imapd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK ([-\\w_.]+) IMAP4 Service ([\\d.()]+) at .*\\r\\n| p/SCO imapd/ v/$2/ o/SCO UNIX/ h/$1/ cpe:/o:sco:sco_unix/a\nmatch imap m|^\\* OK CommuniGate Pro IMAP Server ready\\r\\n| p/CommuniGate Pro imapd/ cpe:/a:stalker:communigate_pro/\nmatch imap m|^\\* OK IMAPrev1 Service Ready - hMailServer ([\\w.-]+)\\r\\n| p/hMailServer imapd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK IMAP4rev1 SmartMax IMAPMax (\\d+) Ready\\r\\n| p/IMAPMax/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\+OK X1 ([-\\w_.]+)\\r\\n| p/IMail imapd/ h/$1/ cpe:/a:ipswitch:imail/\nmatch imap m|^\\* OK IMAP4rev1 SmarterMail\\r\\n| p/SmarterMail imapd/ o/Windows/ cpe:/a:smartertools:smartermail/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK Scalix IMAP server ([\\d.]+) ready on ([-\\w_.]+)\\r\\n| p/Scalix imapd/ v/$1/ h/$2/\nmatch imap m|^\\* OK Scalix IMAP server ([\\d.]+) on ([-\\w_.]+)\\r\\n| p/Scalix imapd/ v/$1/ h/$2/\nmatch imap m|^\\* OK .* GoMail V([-\\w_.]+) IMAP4rev1| p/GoMail mass mailing plugin imapd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK IMAP4 ready! [-\\w_.]+ Winmail Mail Server MagicWinmail Extend IMAP 101\\r\\n| p/Winmail imapd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK ([-\\w_.]+) IMAP4rev1 Mailtraq \\(([\\d.]+)\\) ready\\r\\n| p/Mailtraq imapd/ v/$2/ o/Windows/ h/$1/ cpe:/a:mailtraq:mailtraq:$2/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK ([-\\w_.]+) CallPilot IMAP4rev1 v([\\d.]+) server ready\\.?\\r\\n| p/Nortel CallPilot imapd/ v/$2/ d/telecom-misc/ h/$1/\nmatch imap m|^\\* OK ([-\\w_.]+) Zimbra IMAP4rev1 service ready\\r\\n| p/Zimbra imapd/ h/$1/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch imap m|^\\* OK ([-\\w_.]+) Zimbra IMAP4rev1 server ready\\r\\n| p/Zimbra imapd/ h/$1/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch imap m|^\\* OK ([-\\w_.]+) DKIMAP4 IMAP Server\\r\\n| p/DBOX DKIMAP4 imapd/ h/$1/\nmatch imap m|^\\* OK IMAP Module of ArGoSoft Mail Server Pro for WinNT/2000/XP, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft Pro imapd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK ArGoSoft Mail Server IMAP Module v\\.([\\w._-]+) at | p/ArGoSoft imapd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK ([-\\w_.]+) running Eudora Internet Mail Server X ([\\d.]+)\\r\\n| p/Eudora Internet Mail Server X imapd/ v/$2/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch imap m|^\\* OK ([-\\w_.]+) running EIMS X ([\\w.]+)\\r\\n| p/Eudora Internet Mail Server X imapd/ v/$2/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch imap m|^\\* OK MERCUR IMAP4-Server \\(v([\\w.]+) \\w+\\) for Windows ready| p/Mercur imapd/ v/$1/ o/Windows/ cpe:/a:atrium:mercur:$1/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK WebSTAR Mail ready\\r\\n| p/WebSTAR imapd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1[\\w+= -]*\\] Atmail IMAP4 Server ready\\. See COPYING for distribution information\\.\\r\\n| p/Atmail imapd/\nmatch imap m|^\\* OK Dovecot DA ready\\.\\r\\n| p/Dovecot DirectAdmin imapd/ cpe:/a:directadmin:directadmin/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 LITERAL\\+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN\\] Dovecot DA ready\\.\\r\\n| p/Dovecot DirectAdmin imapd/ cpe:/a:directadmin:directadmin/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK AXIGEN ([\\w._-]+) \\(Linux/i686\\) IMAP4rev1 service is ready\\r\\n| p/Axigen imapd/ v/$1/ o/Linux/ cpe:/a:gecad:axigen_mail_server:$1/ cpe:/o:linux:linux_kernel/a\nmatch imap m|^\\* OK Axigen-([\\w._-]+) \\(Linux/x64\\) IMAP4rev1 service is ready\\r\\n| p/Axigen imapd/ v/$1/ o/Linux/ cpe:/a:gecad:axigen_mail_server:$1/ cpe:/o:linux:linux_kernel/a\nmatch imap m|^\\* OK AXIGEN IMAP4rev1 service is ready\\r\\n| p/Axigen imapd/ cpe:/a:gecad:axigen_mail_server/\nmatch imap m|^\\* OK AXIGEN IMAP4rev1 at ([\\w._-]+) service is ready\\r\\n| p/Axigen imapd/ h/$1/ cpe:/a:ecad:axigen_mail_server/\nmatch imap m|^\\* BYE Hi This is the IMAP SSL Redirect\\r\\n| p/Lotus Domino secure imapd/ i/SSL redirect/ cpe:/a:ibm:lotus_domino/\nmatch imap m|^\\* OK Hi This is the IMAP SSL Server .*\\r\\n| p/Lotus Domino secure imapd/ cpe:/a:ibm:lotus_domino/\nmatch imap m|^\\* OK TeamXchange IMAP4rev1 server \\(([\\w._-]+)\\) ready\\.\\r\\n| p/TeamXchange imapd/ h/$1/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4REV1[^\\]]*?\\] ([-.\\w]+) IMAP4rev1 Citadel ([-.\\w]+) ready\\r\\n| p/Citadel imapd/ v/$2/ h/$1/ cpe:/a:citadel:ux:$2/\nmatch imap m|^\\* BYE Domino IMAP4 Server Configured for SSL Connections only\\. Please reconnect using SSL Port (\\d+), .*\\r\\n| p/Lotus Domino imapd/ i/SSL-only; imaps on port $1/ cpe:/a:ibm:lotus_domino/\nmatch imap m|^\\* OK Kerio Connect ([\\w._ -]+) IMAP4rev1 server ready\\r\\n| p/Kerio Connect imapd/ v/$1/ cpe:/a:kerio:connect:$1/\nmatch imap m|^\\* OK ([\\w._-]+) IMAP4rev1 Server PMDF V([\\w._-]+) at | p/PMDF imapd/ v/$2/ o/OpenVMS/ h/$1/ cpe:/o:hp:openvms/a\nmatch ssl/imap m|^\\* BYE Fatal error: tls_init\\(\\) failed\\r\\n| p/Cyrus imapd/ cpe:/a:cmu:cyrus_imap_server/\nmatch imap m|^\\* OK VisNetic\\.MailServer\\.v([\\w._-]+) IMAP4rev1 .*\\r\\n| p/VisNetic MailServer imapd/ v/$1/\nmatch imap m|^\\* OK ([-\\w_.]+)\\s+IdeaImapServer ([^\\s]+) ready\\r\\n| p/IdeaImapServer imapd/ v/$2/ h/$1/\nmatch imap m|^\\* OK IMAP4rev1 David\\.fx Mail Access Server MA-([\\w._]+ \\(\\w+\\))\\r\\n| p/Tobit David.fx imapd/ v/$1/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4REV1 AUTH=LOGIN[\\w._ -]+\\] IMAP4rev1 DavMail ([\\w._-]+) server ready\\r\\n| p/DavMail imapd/ v/$1/\nmatch imap m|^\\* OK Welcome to Arvixe IMAP server\\.\\r\\n| p/Arvixe imapd/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL\\+ NAMESPACE UIDPLUS CHILDREN LANGUAGE XSENDER X-NETSCAPE XSERVERINFO AUTH=PLAIN STARTTLS\\] Messaging Multiplexor \\(Oracle Communications Messaging Exchange Server ([\\w._-]+) \\(built (\\w+ +\\d+ \\d+)\\)\\)\\r\\n| p/Oracle Communications Messaging Exchange imapd/ v/$1/ i/built $2/ cpe:/a:oracle:communications_unified:$1/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL\\+ NAMESPACE UIDPLUS CHILDREN LANGUAGE XSENDER X-NETSCAPE XSERVERINFO AUTH=PLAIN\\] Messaging Multiplexor \\(Oracle Communications Messaging Exchange Server ([\\w._-]+) \\(built (\\w+ +\\d+ \\d+)\\)\\)\\r\\n| p/Oracle Communications Message Exchange imapd/ v/$1/ i/built $2/ cpe:/a:oracle:communications_unified:$1/\n# Slackware 3.5 running kernel 2.0.34 IMAP2bis Service 7.8(100)\nmatch imap m|^\\* OK ([\\w._-]+) IMAP2bis Service ([\\w._()-]+) at .* ([-+]\\d+)| p/Slackware 3.5 imapd/ v/$2/ i/time zone $3/ o/Linux/ h/$1/ cpe:/o:linux:linux_kernel/ cpe:/o:slackware:slackware_linux:3.5/\nmatch imap m|^\\* OK IceWarp ([\\w._-]+) RHEL(\\d+) x64 IMAP4rev1 .* ([-+]\\d+)\\r\\n| p/IceWarp imapd/ v/$1/ i/time zone $3/ o/Linux/ cpe:/a:icewarp:mail_server:$1/ cpe:/o:linux:linux_kernel/a cpe:/o:redhat:enterprise_linux:$2/\nmatch imap m|^\\* OK IceWarp ([\\w._-]+) (?:x64 )?IMAP4rev1 .* ([-+]\\d+)\\r\\n| p/IceWarp imapd/ v/$1/ i/time zone $2/ cpe:/a:icewarp:mail_server:$1/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4 IMAP4REV1\\] perdition ready on ([\\w._-]+) [a-f\\d]+\\r\\n| p/Perdition imapd/ h/$1/ cpe:/a:horms:perdition/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4 [^]]*\\] perdition ready on ([\\w._-]+) [a-f\\d]+\\r\\n| p/Perdition imapd/ h/$1/ cpe:/a:horms:perdition/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4REV1[^]]*\\] \\[[\\d.]+\\] Panda IMAP ([\\w._-]+) at .*\\r\\n| p/Panda imapd/ v/$1/\nmatch imap m|^\\* BYE imap4 connections must use ssl\\n$| p/Plan 9 imapd/ i/must use ssl/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 LITERAL\\+ STARTTLS AUTH=PLAIN\\] Zarafa IMAP gateway ready\\r\\n| p/Zarafa imapd/ cpe:/a:zarafa:zarafa/\nmatch imap m|^\\* OK Welcome to the SLnet IMAP Service\\r\\n| p/SeattleLab SLMail imapd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 AUTH=LOGIN AUTH=CRAM-MD5 STARTTLS ID\\] dbmail ([\\w._-]+) ready\\.\\r\\n| p/DBMail imapd/ v/$1/ cpe:/a:paul_j_stevens:dbmail:$1/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4REV1 [^]]+\\] \\[([\\w.-]+)\\] IMAP4rev1 (20\\w+\\.\\d+) at [ \\w,:]+ ([+-]\\d+) \\(\\w+\\)\\r\\n| p/University of Washington IMAP imapd/ v/$2/ i/time zone: $3/ h/$1/ cpe:/a:uw:uw_imap:$2/\nmatch imap m|^\\* OK Synametrics IMAP4rev1 server ready \\d\\d/\\d\\d/\\d\\d \\d\\d:\\d\\d [AP]M\\r\\n| p/Synametrics Xeams imapd/ cpe:/a:synametrics:xeams/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 [^]]+\\] MagicMail ready\\.\\r\\n| p/Linuxmagic MagicMail imapd/ o/Linux/ cpe:/a:linuxmagic:magicmail/ cpe:/o:linux:linux_kernel/a\nmatch imap m|^\\* BYE Connection is closed\\. 14\\r\\n| p/Microsoft Exchange imapd/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK IMAP \\(C\\) ([\\w.-]+) \\(Version (\\d[\\w.-]*)\\)\\r\\n| p/SurgeMail imapd/ v/$2/ h/$1/ cpe:/a:netwin:surgemail:$2/\nmatch imap m|^\\* OK ([\\w.-]+) IMAP4 Server \\(Zoho Mail IMAP4rev1 Server version ([\\d.]+)\\)\\r\\n| p/Zoho Mail imapd/ v/$2/ h/$1/ cpe:/a:zohocorp:mail:$2/\n\n# Fairly General\nmatch imap m|^\\* OK IMAP4rev1 server ready at \\d\\d/\\d\\d/\\d\\d \\d\\d:\\d\\d:\\d\\d \\r\\n| p/MailEnable Professional imapd/ o/Windows/ cpe:/a:mailenable:mailenable:::professional/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK IMAP4 Ready ([-\\w_.]+) \\w+\\r\\n| p/Perdition imapd/ h/$1/ cpe:/a:horms:perdition/\nmatch imap m|^\\* OK ([-\\w_.]+) IMAP server ready\\r\\n| p/hMailServer imapd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n\nmatch imap-proxy m|^\\* OK IMAP4 proxy ready\\r\\n| p/imap proxy/\nmatch imap-proxy m|^\\* BYE PGP Universal no imap4 service here\\r\\n| p/PGP Universal imap proxy/ i/disabled/ cpe:/a:pgp:universal_server/\nmatch imap-proxy m|^\\* OK PGP Universal IMAP4rev1 service ready \\(proxied server greeted us with: ([^)]+)\\)\\r\\n| p/PGP Universal imap proxy/ i/Banner: $1/ cpe:/a:pgp:universal_server/\nmatch imap-proxy m|^\\* OK imapfront ready\\.\\r\\n| p/Mailfront imapfront imap proxy/\nmatch imap-proxy m|^\\* OK imapfront ready\\. \\+ stunnel\\r\\n| p/Mailfront imapfront imap proxy/ i/with stunnel/\nmatch imap-proxy m|^\\* OK avast! IMAP Proxy\\r\\n| p/Avast! anti-virus imap proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap-proxy m|^\\* OK \\[CAPABILITY IMAP4rev1\\] SpamPal for Windows\\r\\n| p/SpamPal imap proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap-proxy m|^\\* OK Zarafa IMAP gateway ready\\r\\n| p/Zarafa imap proxy/ o/Unix/ cpe:/a:zarafa:zarafa/\nmatch imap-proxy m|^\\* OK \\[CAPABILITY IMAP4rev1 LITERAL\\+ AUTH=PLAIN\\] Zarafa IMAP gateway ready\\r\\n| p/Zarafa imap proxy/ o/Unix/ cpe:/a:zarafa:zarafa/\nmatch imap-proxy m|\\* OK \\[CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION\\] Courier-IMAP ready\\. Copyright 1998-2008 Double Precision, Inc\\. See COPYING for distribution information\\.\\r\\n| p/imapproxy/\nmatch imap-proxy m|^\\* BYE concurrent connection limit in avast! exceeded\\(pass:\\d+, processes:([\\w._-]+)\\[\\d+\\]\\)\\r\\n| p/Avast! anti-virus IMAP proxy/ i/connection limit exceeded by $1/ o/Windows/ cpe:/o:microsoft:windows/\nmatch imap-proxy m|^ BYE concurrent connection limit in AVG exceeded\\(pass:\\d+, processes:([\\w._-]+)\\[\\d+\\]\\)\\r\\n| p/AVG anti-virus IMAP proxy/ i/connection limit exceeded by $1/ o/Windows/ cpe:/o:microsoft:windows/\nmatch imap-proxy m|^\\* BYE Cannot connect to IMAP server ([\\w._-]+) \\([^)]*\\), connect error \\d+\\r\\n| p/Avast! anti-virus IMAP proxy/ i/cannot connect to $1/ o/Windows/ cpe:/o:microsoft:windows/\n\nsoftmatch imap m|^\\* OK ([-.\\w]+) [-.\\w,:+ ]*imap[-.\\w,:+ ]*\\r\\n$|i h/$1/\nsoftmatch imap m|^\\* OK [\\x20-\\x7e]*imap[\\x20-\\x7e]*\\r\\n$|i\nsoftmatch imap m|^\\* OK \\[CAPABILITY IMAP4[Rr][Ee][Vv]1|\n\n# Cyrus IMSPD\nmatch imsp m|^\\* OK Cyrus IMSP version (\\d[-.\\w]+) ready\\r\\n$| p/Cyrus IMSPd/ v/$1/ cpe:/a:cmu:cyrus_imsp_server:$1/\n\nmatch inetd m|^Can't exec \\\"/usr/sbin/pure-ftpd\\\": No such file or directory| p/Pure-FTPd under inetd/ i/Broken/ o/Unix/ cpe:/a:pureftpd:pure-ftpd/\nmatch inetd m|^Can't exec \\\"([\\w._/-]+)\\\": (.*) at ([\\w._/-]+) line \\d+\\.\\n| p/inetd/ i/failed to exec $1: $2 at $3/\n\nmatch infopark m|^\\d+{infopark tcl-Interface-Server} {CM ([\\w._-]+)| p/Infopark Fiona TCL interface/ v/$1/\n\n# Also matches sphinx-search in some cases. Need more samples of either or a better probe.\n#match insight-manager m|^\\0\\0\\0\\x01$| p/Consul InSight Manager/\n\nmatch instrument-manager m|^\\r\\n\\x18\\t$| p/Data Innovations Instrument Manager/\n\nmatch intelatrac m|^\\x02\\0\\0\\0G\\0\\0\\0\\0G\\0\\0\\0@\\xe2\\x01\\0\\0.{16}\\x05\\0\\0\\0\\x01\\0\\0\\0\\x18\\0\\0\\0Connected to sync server.{9}\\0{9}| p/Invensys Wonderware IntelaTrac/ cpe:/a:invensys:wonderware_intelatrac/\n\n# Is this jetbrains-lock?\nmatch pycharm m|^\\0\\.[\\w._/-]+/Library/Preferences/PyCharm([\\w._-]+)\\0\\)[\\w._/-]+/Library/Caches/PyCharm[\\w._-]+$| p/PyCharm/ v/$1/ o/Mac OS X/ cpe:/a:jetbrains:pycharm:$1/ cpe:/o:apple:mac_os_x/a\nmatch jetbrains-lock m|^\\0./home/([^/]+)/\\.IntelliJIdea([\\d.]+)/config\\0./.*/system\\0\\x03---| p/IntelliJ IDEA socket lock/ v/$2/ i/user: $1/ cpe:/a:jetbrains:intellij_idea:$2/\nmatch jetbrains-lock m|^\\0./home/([^/]+)/\\.PyCharm([\\d.]+)/config\\0./.*/system\\0\\x03---| p/PyCharm socket lock/ v/$2/ i/user: $1/ cpe:/a:jetbrains:pycharm:$2/\nmatch jetbrains-lock m|^\\0./home/([^/]+)/\\.CLion([\\d.]+)/config\\0./.*/system\\0\\x03---| p/CLion socket lock/ v/$2/ i/user: $1/ cpe:/a:jetbrains:clion:$2/\nmatch jetbrains-lock m|^\\0./home/([^/]+)/\\.WebIde(\\d+)0/config../([\\x20-\\x7e]+)|s p/PhpStorm IDE socket lock/ v/$2.0/ i/user: $1; install path: $3/ cpe:/a:jetbrains:phpstorm:$2.0/\nsoftmatch jetbrains-lock m|^\\0./.*/config\\0./.*/system\\0\\x03---| p/JetBrains socket lock/\n\nmatch intermapper m|^<KU_goodbye>Access not allowed for [\\d.]+\\. Check the InterMapper server&apos;s access restrictions\\.</KU_goodbye>$| p/InterMapper network monitor/\nmatch intermapper m|^<KU_goodbye>Protocol Error: XML data is not well-formed\\.</KU_goodbye>$| p/InterMapper network monitor/\n\nmatch intertel-ctl m|^\\x1f\\x19\\x0e\\x01\\0\\x01\\x01\\x01\\x02\\x02\\x03\\x02\\x01\\x04\\x11\\x05| p/InterTel IPRC VoIP management card control channel/ d/PBX/\n\nmatch intranetchat m|^\\d+\\0FORWARD\\0\\x0b\\xc2c\\x0c\\xc1a\\x9f@| p/Intranet Chat Server/\n\nmatch ipcam m|^\\0\\0\\0\\x10\\0\\0\\0\\x1e\\0\\0\\0\\x1e\\0\\0\\0\\0| p/Hikvision IPCam control port/\nmatch ipcam m|^8\\0\\0\\0l\\0{19}....\\0\\0\\0\\0\\xc4\\x87#@\\0\\0\\0\\0\\xf5\\x8f\\x05Tmrmt_hello\\0{26}\\x0e\\0\\0\\0\\xe8\\x87#@\\0\\0\\0\\x00(\\w+)\\n\\0| p/LeFun or MAISI IP camera/ i/ID: $1/ d/webcam/\n\nmatch ipmi-advertiserd m|^\\x0e\\0\\0\\0\\0\\0\\0$| p/SuperMicro IPMI advertiserd/ d/remote management/ cpe:/o:supermicro:intelligent_platform_management_firmware/\n\nmatch ipremote m|^IPremote - w([\\d.]+)\\r\\n\\0\\0\\0\\0| p/IPsoft IPremote/ v/$1/ cpe:/a:ipsoft:ipremote:$1/\nmatch ipremote m|^IPremote - ([\\d.]+)\\n\\0\\0\\0\\0\\0\\0\\0| p/IPsoft IPremote/ v/$1/ cpe:/a:ipsoft:ipremote:$1/\n\n# double-length-prefixed Protocol Buffers. \"Propose\" message.\nmatch ipfs m|^\\0\\0\\0\\x04\\0\\0(..)\\0\\0\\1\\n\\x10................\\x12.*\\x1a.(?:P-\\d+,?)+\".[\\w.,_-]+\\*.[\\w.,_-]+$|s p/InterPlanetary File System peer/\n# Sometimes only a single length prefix?\nmatch ipfs m|^\\0\\0..\\n\\x10................\\x12.*\\x1a.(?:P-\\d+,?)+\".[\\w.,_-]+\\*.[\\w.,_-]+$|s p/InterPlanetary File System peer/\n\nmatch ipsi m|^\\0\\x0f\\0/([\\w._-]+)\\0| p/Avaya $1 IPSI version/ d/PBX/\n\n# Port 9200: http://support.lexmark.com/index?page=content&id=FA642\nmatch ir-alerts m|^.\\0\\0\\0\\0Lexmark (\\w+)\\0| p/Lexmark $1 print server identification/ d/printer/ cpe:/h:lexmark:$1/a\nmatch ir-alerts m|^.\\0\\0\\0\\0Dell ([^\\0]+)\\0$| p/Dell $1 print server identification/ d/printer/ cpe:/h:dell:$1/\n\n# ircd-hybrid 7 on Linux\nmatch irc m=^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\nNOTICE AUTH :\\*\\*\\* (?:No|Got) Ident response\\r\\nNOTICE AUTH :\\*\\*\\* (?:Couldn't look up|Found) your hostname\\r\\n$= p/Hybrid-based ircd/ cpe:/a:ircd-hybrid:ircd-hybrid/\nmatch irc m=^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\nNOTICE AUTH :\\*\\*\\* (?:Couldn't look up|Found) your hostname\\r\\nNOTICE AUTH :\\*\\*\\* (?:No|Got) Ident response\\r\\n$= p/Hybrid-based ircd/ cpe:/a:ircd-hybrid:ircd-hybrid/\nmatch irc m=^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\nNOTICE AUTH :\\*\\*\\* (?:Couldn't look up|Found) your hostname\\r\\n$= p/Hybrid-based ircd/ cpe:/a:ircd-hybrid:ircd-hybrid/\n\n# ircu\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\r\\nNOTICE AUTH :\\*\\*\\* Found your hostname, cached\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\n| p/ircu ircd/ cpe:/a:undernet:ircu/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\nNOTICE AUTH :\\*\\*\\* No ident response\\r\\n| p/ircu ircd/ cpe:/a:undernet:ircu/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\nNOTICE AUTH :\\*\\*\\* Couldn't look up your hostname\\r\\n| p/ircu ircd/ cpe:/a:undernet:ircu/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\nNOTICE AUTH :\\*\\*\\* Got ident response\\r\\nNOTICE AUTH :\\*\\*\\* Couldn't look up your hostname\\r\\n| p/ircu ircd/ cpe:/a:undernet:ircu/\nmatch irc m|^ERROR..Your host is trying to \\(re\\)connect too fast -- throttled\\r\\n| p/ircu ircd/ cpe:/a:undernet:ircu/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\nNOTICE AUTH :\\*\\*\\* Found your hostname\\r\\n| p/ircu ircd/ cpe:/a:undernet:ircu/\n\n# Hybrid6/PTlink6.15.0 ircd on Linux\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Found your hostname\\r\\n$| p/Hybrid ircd/ cpe:/a:ircd-hybrid:ircd-hybrid/\n# ircd 2.8/hybrid-6.3.1 on Linux\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\nNOTICE AUTH :\\*\\*\\* No Ident response\\r\\nNOTICE AUTH :\\*\\*\\* Found your hostname\\r\\n$| p/Hybrid ircd/ cpe:/a:ircd-hybrid:ircd-hybrid/\n# ircd-hybrid-7.0 - apparently upset because Nmap reconnected too fast\nmatch irc m|^ERROR :Trying to reconnect too fast\\.\\r\\n| p/Hybrid ircd/ cpe:/a:ircd-hybrid:ircd-hybrid/\n# Hybrid-IRCD 7.0 on Linux 2.4\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\nNOTICE AUTH :\\*\\*\\* Found your hostname\\r\\nNOTICE AUTH :\\*\\*\\* Got Ident response\\r\\n| p/Hybrid ircd/ cpe:/a:ircd-hybrid:ircd-hybrid/\nmatch irc m|^ERROR :Your host is trying to \\(re\\)connect too fast -- throttled\\.\\r\\n| p/Hybrid ircd/ cpe:/a:ircd-hybrid:ircd-hybrid/\nmatch irc m|^:([-\\w_.]+) NOTICE \\* :\\*\\*\\* Looking up your hostname\\r\\n| p/Hybrid ircd/ h/$1/ cpe:/a:ircd-hybrid:ircd-hybrid/\n\nmatch irc m|^ERROR :Closing Link: \\[[\\d.]+\\] \\(Throttled: Reconnecting too fast\\) -Email ([-\\w_.]+@[-\\w_.]+) for more information\\.| p/UnrealIRCd/ i/Admin email $1/ cpe:/a:unrealircd:unrealircd/\n# Sometimes multiple emails are specified, bad emails, etc\nmatch irc m|^ERROR :Closing Link: \\[[\\d.]+\\] \\(Throttled: Reconnecting too fast\\) -Email (.*) for more information\\.| p/UnrealIRCd/ i/Admin email $1/ cpe:/a:unrealircd:unrealircd/\nmatch irc m|^ERROR :Closing Link: \\[[\\d.]+\\] \\(Too many unknown connections from your IP\\)\\r\\n| p/UnrealIRCd/ cpe:/a:unrealircd:unrealircd/\nmatch irc m|^ERROR :Reconnecting too fast, throttled\\.\\r\\n$| p/ratbox, charybdis, or ircd-seven ircd/\n\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Processing connection to ([-\\w_.]+)\\r\\n| p/ratbox ircd/ h/$1/ cpe:/a:ratbox:ircd-ratbox/\nmatch irc m|^:([\\w._-]+) 020 \\* :Please wait while we process your connection\\.\\r\\n| p/IRCnet ircd/ h/$1/\n\n# No, Thomas Graf, this isn't leet :)\nmatch irc m|^PING :42\\r\\n$| p/iacd ircd/\n\n# Many different ircds...\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Checking Ident\\r\\n|\nmatch irc m|^:([-\\w_.]+) NOTICE \\* :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\n| h/$1/\nmatch irc m|^:([-\\w_.]+) NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\n| h/$1/\n\n# dircproxy 1.0.3 on Linux 2.4.x\nmatch irc-proxy m|^:dircproxy NOTICE AUTH :Looking up your hostname\\.\\.\\.\\r\\n:dircproxy NOTICE AUTH :Got your hostname\\.\\r\\n| p/dircproxy/\n# dirkproxy (modificated dircproxy)\nmatch irc-proxy m|^:dirkproxy NOTICE AUTH :Looking up your hostname\\.\\.\\.\\r\\n:dirkproxy NOTICE AUTH :Got your hostname\\.\\r\\n| p/dirkproxy/\n# Unreal IRCD Server version 3.2 beta 17\nmatch irc m|^:([-.\\w]+) NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\n| p/UnrealIRCd/ h/$1/ cpe:/a:unrealircd:unrealircd/\n\n# dancer-ircd 1.0.31+maint8-1\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Checking ident\\r\\nNOTICE AUTH :\\*\\*\\* No identd \\(auth\\) response\\r\\nNOTICE AUTH :\\*\\*\\* Found your hostname\\r\\n$| p/Dancer ircd/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Couldn't look up your hostname\\r\\n| p/Dancer ircd/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Found your hostname, welcome back\\r\\nNOTICE AUTH :\\*\\*\\* Checking ident\\r\\nNOTICE AUTH :\\*\\*\\* No identd \\(auth\\) response\\r\\n| p/Dancer ircd/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Checking ident\\r\\nNOTICE AUTH :\\*\\*\\* Got ident response\\r\\nNOTICE AUTH :\\*\\*\\* Found your hostname\\r\\n| p/Dancer ircd/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Found your hostname, welcome back\\r\\nNOTICE AUTH :\\*\\*\\* Checking ident\\r\\nNOTICE AUTH :\\*\\*\\* Got ident response\\r\\n| p/Dancer ircd/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Checking ident\\r\\nNOTICE AUTH :\\*\\*\\* No identd \\(auth\\) response\\r\\n| p/Dancer ircd/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\nNOTICE AUTH :\\*\\*\\* Checking ident\\r\\nNOTICE AUTH :\\*\\*\\*| p/Dancer ircd/\n\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Checking Ident\\r\\nNOTICE AUTH :\\*\\*\\* Got ident response\\r\\n| p/ircu Undernet IRCd/ cpe:/a:undernet:ircu/\n# Bitlbee ircd 0.80\nmatch irc m=(^:[-.:\\w]+) NOTICE (?:AUTH|\\*) :BitlBee-IRCd initialized, please go on\\r\\n= p/BitlBee IRCd/ h/$1/\nmatch irc m|^Warning: Unable to read configuration file ${backquote}.*/bitlbee\\.conf'\\.\\n:([-:\\w_.]+)\\. NOTICE AUTH :BitlBee-IRCd initialized, please go on\\r\\n| p/BitlBee IRCd/ h/$1/\n\nmatch irc m|^:([-\\w_.]+) NOTICE Auth :Looking up your hostname\\.\\.\\.\\r\\n| p/InspIRCd/ h/$1/ cpe:/a:inspire_ircd:inspircd/\nmatch irc m|^:([-\\w_.]+) NOTICE Auth :\\*\\*\\* Looking up your hostname\\.\\.\\.\\r\\n| p/InspIRCd/ h/$1/ cpe:/a:inspire_ircd:inspircd/\nmatch irc m|^:([-\\w_.]+) NOTICE \\w+ :\\*\\*\\* .*\\r\\nERROR :Closing link: \\([\\w._-]+@[\\w._-]+\\) \\[Z-Lined: Your IP range has been attempting to connect too many times in too short a duration\\. Wait a while, and you will be able to connect\\.\\]\\r\\n$| p/InspIRCd/ h/$1/ cpe:/a:inspire_ircd:inspircd/\nmatch inspircd-spanning-tree m|^CAPAB START\\r\\nCAPAB MODULES [\\w_-]+\\.so,| p/InspIRCd spanning tree/ cpe:/a:inspire_ircd:inspircd/\nmatch inspircd-spanning-tree m|^CAPAB START 1202\\r\\n$| p/InspIRCd spanning tree/ cpe:/a:inspire_ircd:inspircd/\n\n# PTlink6.15.2 on Linux 2.4\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Hostname lookup disabled, using your numeric IP\\r\\nNOTICE AUTH :\\*\\*\\* Checking Ident\\r\\n| p/PTlink ircd/\nmatch irc m|(^:[-.+\\w]+) NOTICE AUTH :\\*\\*\\* Looking up your hostname\\.\\.\\.\\n:[-.+\\w]+ NOTICE AUTH :\\*\\*\\* Checking Ident\\n:[-.+\\w]+ NOTICE AUTH :\\*\\*\\* Found your hostname\\n| p/Bahamut Dalnet ircd/ i/derived from DreamForge and Hybrid/ h/$1/\nmatch irc m|^:([\\w._-]+) NOTICE ZUSR :You have been throttled for 2 minutes for too many connections in a short period of time\\. Further connections in this period will reset your throttle and you will have to wait longer\\.\\r\\n| p/Bahamut ircd/ h/$1/\n\nmatch irc m|^ERROR Your host is trying to \\(re\\)connect too fast -- throttled\\r\\n| p/IRC2000 Pro ircd/\nmatch irc m|^IRCXPRO ([\\w._-]+)\\r\\nAUTHREQUEST :Authentication Required\\r\\n| p/IRCXPRO admin ircd/ v/$1/\n\nmatch irc m|^:([\\w._-]+) 451 \\* HELP :No te has registrado\\r\\n| p/ConferenceRoom ircd/ i/Spanish/ h/$1/\nmatch irc m|^:([\\w._-]+) NOTICE AUTH :Minbif-IRCd initialized, please go on\\r\\n| p/Minbif ircd/ h/$1/\nmatch irc m|^:([\\w._-]+) NOTICE \\* :BitlBee-IRCd initialized, please go on\\r\\n| p/BitlBee ircd/ h/$1/ cpe:/a:bitlbee:bitlbee/\n\nmatch irc-proxy m|^:.*!psyBNC@lam3rz\\.de NOTICE \\* :psyBNC([-.\\w]+)\\r\\n| p/psyBNC/ v/$1/\nmatch irc-proxy m|^:.*!pb@lam3rz\\.de NOTICE \\* :pb([-.\\w]+)\\r\\n| p/psyBNC/ v/$1/\nmatch irc-proxy m|^:.*!psyBNC@lam3rz\\.de NOTICE \\* :| p/psyBNC/\nmatch irc-proxy m|^:.*!psyBNC@[-\\w_.]+ NOTICE \\* :psyBNC on ([-\\w_.]+)\\r\\n| p/psyBNC/ h/$1/\nmatch irc-proxy m|^:.*!psyBNC@([-\\w_.]+) NOTICE \\* :psyBNC([-\\w_.]+)\\r\\n| p/psyBNC/ v/$2/ h/$1/\nmatch irc-proxy m|^:.*!BNC@([\\w._-]+) NOTICE \\* :psyBNC([\\w._-]+)\\r\\n| p/psyBNC/ v/$2/ h/$1/\n\nmatch irc-proxy m|^:sbnc!sbnc@sbnc\\.soohrt\\.org NOTICE \\* :Wellcum\\r\\n| p/sbnc/\nmatch irc-proxy m|^NOTICE AUTH :\\*\\*\\* .*\\r\\nNOTICE AUTH :\\*\\*\\* \\[BNC ([\\d.]+) | p/BNC irc-proxy/ v/$1/\nmatch irc-proxy m|^:[-\\w_.!@]+ NOTICE \\S+ :\\*\\*\\* shroudBNC *([\\d.]+) .Revision: (\\d+)| p/ShroudBNC irc-proxy/ v/$1 revision $2/ cpe:/a:gunnar_beutner:shroudbnc:$1/\nmatch irc-proxy m|^:shroudbnc\\.info NOTICE AUTH :\\*\\*\\* shroudBNC ([\\d.]+) | p/ShroudBNC irc-proxy/ v/$1/ cpe:/a:gunnar_beutner:shroudbnc:$1/\n\nmatch irods m|^\\0\\0\\0\\x8b<MsgHeader_PI>\\n<type>RODS_VERSION</type>\\n<msgLen>\\d+</msgLen>\\n<errorLen>0</errorLen>\\n<bsLen>0</bsLen>\\n<intInfo>0</intInfo>\\n</MsgHeader_PI>\\n<Version_PI>\\n<status>-\\d+</status>\\n<relVersion>rods([\\w._-]+)</relVersion>\\n<apiVersion>d</apiVersion>\\n<reconnPort>0</reconnPort>\\n<reconnAddr></reconnAddr>\\n<cookie>0</cookie>\\n</Version_PI>\\n| p/IRODS data management/ v/$1/\n\n# http://blog.hekkers.net/2011/06/13/controlling-the-av-receiver/\n# https://github.com/miracle2k/onkyo-eiscp/blob/master/eiscp-commands.yaml\nmatch iscp m|^ISCP\\0\\0\\0\\x10\\0\\0\\0.\\x01\\0\\0\\0!1[A-Z]|s p|Onkyo A/V receiver ISCP| d/media device/\n\nmatch iscsi m|^\\x1b\\[2JStarWind iSCSI Target v([\\w._-]+) \\(Build (0x\\w+), Win32, Alcohol Edition\\)\\r\\n| p/StarWind iSCSI/ v/$1 build $2/ i/Alcohol Edition/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch iscsi m|^\\x1b\\[2JStarWind Alcohol Edition iSCSI Target v([\\w._-]+) \\(Build (\\d+), Win32, Alcohol Edition\\)\\r\\n| p/StarWind iSCSI/ v/$1 build $2/ i/Alcohol Edition/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch iscsi m|^\\x1b\\[2JStarWind Alcohol Edition iSCSI Target v([\\w._-]+) \\(Build (\\d+), Win32\\)\\r\\n| p/StarWind iSCSI/ v/$1 build $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch iscsi m|^\\x1b\\[2JStarWind iSCSI SAN Software v([\\w._-]+) \\(Build (\\d+), Win32\\)\\r\\nCopyright \\(c\\) StarWind Software \\d+-\\d+\\. All rights reserved\\.\\r\\n\\r\\n\\r\\n$| p/StarWind iSCSI/ v/$1 build $2/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch issc m|^\\rYou do not have permission to connect to the builder port\\.\\r\\nTalk to an admin at port \\d+ for entry\\.\\r\\n| p/ISS System Scanner Console/\n\n# ISS RealSecure Server Sensor for Windows 6.5 on Windows NT 4.0 Server SP6a\n# ISS RealSecure ServerSensor 7.0 on Windows 2000 Server\n# ISS RealSecure Server Sensor 6.0 on Windows NT 4.0 Server SP6a\n# ISS RealSecure Server Sensor 7.0 issdaemon on Microsoft Windows NT Workstation with SP6a\nmatch iss-realsecure m|^\\0\\0\\0.\\x08\\x01\\x03\\x01\\0.\\x02\\0\\0..\\0\\0.\\0\\0\\0..\\0\\0\\x80\\x04..\\0.\\0\\xa0|s p/ISS RealSecure IDS Server Sensor/ o/Windows/ cpe:/a:iss:realsecure_server_sensor/ cpe:/o:microsoft:windows/a\nmatch iss-realsecure m|^\\0\\0\\0.\\x08\\x01\\x04\\x01\\0..\\0\\0..\\0\\0.\\0\\0\\0..\\0\\0\\x80\\x04..\\0.\\0\\xa0\\0\\0|s p/ISS RealSecure IDS ServerSensor/ v/6.0 - 7.0/ o/Windows/ cpe:/a:iss:realsecure_server_sensor/ cpe:/o:microsoft:windows/a\n# I've only seen 1 example of the following. Probably not general enough\nmatch iss-realsecure m|^\\0\\0\\x01.\\x08\\x01\\x03\\x01\\x01'\\x04\\0\\0\\0\\x18\\0\\0\\xa4\\0\\0\\0f\\x02\\0\\0\\x80\\x04\\x06\\0\\0\\x80\\0\\xa05Microsoft Enhanced RSA and AES Cryptographic Provider|s p/ISS Realsecure Workgroup Manager/ o/Windows/ cpe:/a:iss:realsecure_workgroup_manager/ cpe:/o:microsoft:windows/a\n\nmatch isymphony-cli m|^iSymphony/SERVER # $| p/iSymphony call manager CLI/\n\n# Version numbers are just what was reported; probably covers other versions, too.\nmatch isymphony-client m|^cT0IKVM3tW4RobagV7TQGwwsZlKt\\+NHhc\\+oixQKbw4hobhLQZwf6CjzKBJWsmj51o8Sh8LofyVe/sobakIKka79H\\+xNHKhvCmBxvgqcKdSuXpx\\+i5cirzCuVgJLPYhkQldArMFyuVI9hooqHojLueI\\+hQ6XADSAqcRtg/26MJGkSj5GNqXrzircSuKHvsd8J\\n| p/iSymphony client-server/ v/2.8/\nmatch isymphony-client m|^cT0IKVM3tW4RobagV7TQGwwsZlKt\\+NHhc\\+oixQKbw4hobhLQZwf6CjzKBJWsmj51o8Sh8LofyVe/##linnl##sobakIKka79H\\+xNHKhvCmBxvgqcKdSuXpx\\+i5cirzCuVgJLPYhkQldArMFyuVI9hooqHojLueI\\+h##linnl##Q6XADSAqcRtg/26MJGkSj5GNqXrzircSuKHvsd8J\\n| p/iSymphony client-server/ v/2.2/\n\n\nmatch ixia-unknown m|^Enter port cpu supported card port number and hit Enter\\. For example \\\"3 4\\\"\\r\\n| p/Ixia 400T traffic QA/\nmatch ixia-unknown m|^.*\\0\\x18Ixia Hardware I/O Server\\x13Ixia Communications\\x18Ixia Hardware I/O Server\\x0b([\\d.]+)|s p/Ixia 400T traffic QA/ v/$1/\nmatch ixia-unknown m|^\\r\\nWelcome to the Ixia Socket/Serial TCL Server\\r\\nPress Ctrl-C to reset Tcl Session\\r\\nIxia>| p/Ixia TCL server/\n\nmatch java-cim m|^JavaCIMAdapter: connection closed - remote access not allowed\\.\\r\\n| p/Wincor Nixdorf JavaCIMAdapter/ i/remote access not allowed/\n\nmatch java-message-service m|^101 imqbroker ([^\\n]+)\\n| p/Java Message Service/ v/$1/\n\nmatch code42-messaging m=^\\x80c\\0\\0\\x00622996\\|com\\.code42\\.messaging\\.security\\.DHPublicKeyMessageY\\xd4\\0\\0\\0.0\\x81.0\\x81.\\x06\\t\\*\\x86H\\x86\\xf7\\r\\x01\\x03\\x010\\x81.\\x02A\\0=s p/CrashPlan online backup/\n# CrashPlan 3.2.1, 4.5.2, etc.\nmatch code42-messaging m=^\\x80c\\0\\0\\x00A-18782\\|com\\.code42\\.messaging\\.security\\.SecurityProviderReadyMessage\\xb6\\xa2\\0\\0\\0\\\"\\x01\\0................................$=s p/CrashPlan online backup/\n\n# https://docs.oracle.com/javase/6/docs/platform/serialization/spec/protocol.html\nmatch java-object m|^\\xac\\xed\\0\\x05sr\\0\\x19java\\.rmi\\.MarshalledObject\\x7c\\xbd\\x1e\\x97\\xedc\\xfc>\\x02\\0\\x03I\\0\\x04hash\\[\\0\\x08locBytest\\0\\x02\\[B\\[\\0\\x08objBytesq\\0~\\0\\x01xp\\x15\\xc8\\\"\\x95ur\\0\\x02\\[B\\xac\\xf3\\x17\\xf8\\x06\\x08T\\xe0\\x02\\0\\0xp\\0\\0\\0'\\xac\\xed\\0\\x05t..http://([\\w._-]+):\\d+/|s p/JBoss JNP service 6/ h/$1/\nmatch java-object m|^\\xac\\xed\\0\\x05sr\\0\\x19java\\.rmi\\.MarshalledObject\\x7c\\xbd\\x1e\\x97\\xedc\\xfc>\\x02\\0\\x03I\\0\\x04hash\\[\\0\\x08locBytest\\0\\x02\\[B\\[\\0\\x08objBytesq\\0~\\0\\x01xp\\x04\\xaaZ\\x7fur\\0\\x02\\[B\\xac\\xf3\\x17\\xf8\\x06\\x08T\\xe0\\x02\\0\\0xp\\0\\0\\0\\$\\xac\\xed\\0\\x05t..http://([\\w._-]+):\\d+/|s p/HP Network Node Manager 9/ h/$1/\nmatch java-object m|^\\xac\\xed\\0\\x05sr\\0\\x19java\\.rmi\\.MarshalledObject\\x7c\\xbd\\x1e\\x97\\xedc\\xfc>\\x02\\0\\x03I\\0\\x04hash\\[\\0\\x08locBytest\\0\\x02\\[B\\[\\0\\x08objBytesq\\0~\\0\\x01xp\\x18\\x8b\\x85\\xf1ur\\0\\x02\\[B\\xac\\xf3\\x17\\xf8\\x06\\x08T\\xe0\\x02\\0\\0xp\\0\\0\\x004\\xac\\xed\\0\\x05t..http://([\\w._-]+):\\d+/|s p/JBoss AS 4/ h/$1/\nmatch java-object m|^\\xac\\xed\\0\\x05sr\\0\\x19java\\.rmi\\.MarshalledObject\\x7c\\xbd\\x1e\\x97\\xedc\\xfc>\\x02\\0\\x03I\\0\\x04hash\\[\\0\\x08locBytest\\0\\x02\\[B\\[\\0\\x08objBytesq\\0~\\0\\x01xp\\x93\\xe0\\xaf\\)ur\\0\\x02\\[B\\xac\\xf3\\x17\\xf8\\x06\\x08T\\xe0\\x02\\0\\0xp\\0\\0\\0\\x31\\xac\\xed\\0\\x05t\\0 (http://[\\w._-]+:\\d+/)q\\0~\\0\\0q\\0~\\0\\0uq\\0~\\0\\x03\\0\\0\\0\\xc9\\xac\\xed\\0\\x05sr\\0 org\\.jnp\\.server\\.NamingServer_Stub\\0\\0\\0\\0\\0\\0\\0\\x02\\x02\\0\\0xr\\0\\x1ajava\\.rmi\\.server\\.RemoteStub\\xe9\\xfe\\xdc\\xc9\\x8b\\xe1e\\x1a\\x02\\0\\0xr\\0\\x1cjava\\.rmi\\.server\\.RemoteObject\\xd3a\\xb4\\x91\\x0ca3\\x1e\\x03\\0\\0xpw\\x3d\\0\\x0bUnicastRef2\\0\\0.([\\w._-]+)\\0\\0\\xc0\\x81\\x1a\\xe1\\x88;\\xd6\\x8b\\x10\\x13\\t\\xc3\\x15G\\0\\0\\x014\\xb1\\xbfx2\\x80\\x01\\0x|s p/BlackBerry Admin Service JNDI; URL: $1/ h/$2/\nmatch java-object m|^\\xac\\xed\\0\\x05sr\\0\\x19java\\.rmi\\.MarshalledObject\\x7c\\xbd\\x1e\\x97\\xedc\\xfc>\\x02\\0\\x03I\\0\\x04hash\\[\\0\\x08locBytest\\0\\x02\\[B\\[\\0\\x08objBytesq\\0~\\0\\x01xp\\x16\\xa1\\xfe\\x03ur\\0\\x02\\[B\\xac\\xf3\\x17\\xf8\\x06\\x08T\\xe0\\x02\\0\\0xp\\0\\0\\0J\\xac\\xed\\0\\x05t\\0 (http://[\\w._-]+:\\d+/)q\\0~\\0\\0q\\0~\\0\\0q\\0~\\0\\0q\\0~\\0\\0q\\0~\\0\\0q\\0~\\0\\0q\\0~\\0\\0uq\\0~\\0\\x03\\0\\0\\x03\\x14\\xac\\xed\\0\\x05s}\\0\\0\\0\\x02\\0\\x19org\\.jnp\\.interfaces\\.Naming\\0,org\\.jboss\\.ha\\.framework\\.interfaces\\.HARMIProxyxr\\0\\x17java\\.lang\\.reflect\\.Proxy\\xe1'\\xda \\xcc\\x10C\\xcb\\x02\\0\\x01L\\0\\x01ht\\0%Ljava/lang/reflect/InvocationHandler;xpsr\\0-org\\.jboss\\.ha\\.framework\\.interfaces\\.HARMIClient\\xee\\xf5\\xebj\\xfb\\xb5\\xd9\\x91\\x03\\0\\x03L\\0\\x11familyClusterInfot\\0\\x35Lorg/jboss/ha/framework/interfaces/FamilyClusterInfo;L\\0\\x03keyt\\0\\x12Ljava/lang/String;L\\0\\x11loadBalancePolicyt\\0\\x35Lorg/jboss/ha/framework/interfaces/LoadBalancePolicy;xpw%\\0#RIM_BES_BAS_HA_338625_VCBES1/HAJNDIsr\\0\\x13java\\.util\\.ArrayListx\\x81\\xd2\\x1d\\x99\\xc7a\\x9d\\x03\\0\\x01I\\0\\x04sizexp\\0\\0\\0\\x01w\\x04\\0\\0\\0\\x01sr\\0\\x32org\\.jboss\\.ha\\.framework\\.server\\.HARMIServerImpl_Stub\\0\\0\\0\\0\\0\\0\\0\\x02\\x02\\0\\0xr\\0\\x1ajava\\.rmi\\.server\\.RemoteStub\\xe9\\xfe\\xdc\\xc9\\x8b\\xe1e\\x1a\\x02\\0\\0xr\\0\\x1cjava\\.rmi\\.server\\.RemoteObject\\xd3a\\xb4\\x91\\x0ca3\\x1e\\x03\\0\\0xpw\\x3d\\0\\x0bUnicastRef2\\0\\0.([\\w._-]+)\\0\\0\\xc0\\x81k\\x9b\\n;\\x12\\xdb\\$\\x89\\t\\xc3\\x15G\\0| p/BlackBerry Enterprise Service JNDI; URL: $1/ h/$2/ cpe:/a:blackberry:blackberry_enterprise_service/\nmatch java-object m|^\\xac\\xed\\0\\x05sr\\0\\x35javax\\.management\\.remote\\.message\\.HandshakeBeginMessage\\x04\\x13\\xdf,\\x84\\x8b\\xce6\\x02\\0\\x02L\\0\\x08profilest\\0\\x12Ljava/lang/String;L\\0\\x07versionq\\0~\\0\\x01xppt\\0\\x031\\.0$| p/JMXMP Connectors/\nmatch java-object m|^\\xac\\xed\\0\\x05sr\\0\\x19java\\.rmi\\.MarshalledObject\\x7c\\xbd\\x1e\\x97\\xedc\\xfc>\\x02\\0\\x03I\\0\\x04hash\\[\\0\\x08locBytest\\0\\x02\\[B\\[\\0\\x08objBytesq\\0~\\0\\x01xpsN\\x96Rur\\0\\x02\\[B\\xac\\xf3\\x17\\xf8\\x06\\x08T\\xe0\\x02\\0\\0xp\\0\\0\\0\\)\\xac\\xed\\0\\x05t..http://([\\w._-]+):\\d+q\\0~\\0\\0q\\0~\\0\\0uq\\0~\\0\\x03\\0\\0\\0\\xc2\\xac\\xed\\0\\x05sr\\0 org\\.jnp\\.server\\.NamingServer_Stub\\0\\0\\0\\0\\0\\0\\0\\x02\\x02\\0\\0xr\\0\\x1ajava\\.rmi\\.server\\.RemoteStub\\xe9\\xfe\\xdc\\xc9\\x8b\\xe1e\\x1a\\x02\\0\\0xr\\0\\x1cjava\\.rmi\\.server\\.RemoteObject\\xd3a\\xb4\\x91\\x0ca3\\x1e\\x03\\0\\0xpw6\\0\\x0bUnicastRef2\\0..[\\d.]+\\0\\0FRS\\xf5\\x7f\\[<\\xda\\xbd\\x92\\xcfN\\x8c\\xcf\\0\\0\\x01Ay\\x1e\\xc1\\xba\\x80\\x01\\0x| p/NE3S Naming Service/ h/$1/\nmatch java-object m|^\\xac\\xed\\0\\x05sr\\0\\x19java\\.rmi\\.MarshalledObject\\x7c\\xbd\\x1e\\x97\\xedc\\xfc>\\x02\\0\\x03I\\0\\x04hash\\[\\0\\x08locBytest\\0\\x02\\[B\\[\\0\\x08objBytesq\\0~\\0\\x01xp\\x01\\xc3\\xed\\x9epur\\0\\x02\\[B\\xac\\xf3\\x17\\xf8\\x06\\x08T\\xe0\\x02\\0\\0xp\\0\\0\\0\\xc5\\xac\\xed\\0\\x05sr\\0 org\\.jnp\\.server\\.NamingServer_Stub\\0\\0\\0\\0\\0\\0\\0\\x02\\x02\\0\\0xr\\0\\x1ajava\\.rmi\\.server\\.RemoteStub\\xe9\\xfe\\xdc\\xc9\\x8b\\xe1e\\x1a\\x02\\0\\0xr\\0\\x1cjava\\.rmi\\.server\\.RemoteObject\\xd3a\\xb4\\x91\\x0ca3\\x1e\\x03\\0\\0xpw9\\0\\x0bUnicastRef2\\0\\0\\x0e| p/HornetQ JMS/\n# May be more general: \"WebGoat (OWASP): in the WebGoat WEB-INF\\web.xml: Axis SOAPMonitorService.\nmatch java-object m|^\\xac\\xed\\0\\x05sr\\0\\x1elia\\.Monitor\\.monitor\\.monMessage\\x8e\\xf8\\xad\\xb0\\x14\\xe6${backquote}!\\x02\\0\\x03L\\0\\x05identt\\0\\x12Ljava/lang/Object;L\\0\\x06resultq\\0~\\0\\x01L\\0\\x03tagt\\0\\x12Ljava/lang/String| p/MonALISA monitoring service/\n\n# ACED is a magic number and 5 is a version number.\n# http://docs.oracle.com/javase/6/docs/platform/serialization/spec/protocol.html\nsoftmatch java-object m|^\\xac\\xed\\x00\\x05| p/Java Object Serialization/\n\n# http://shrubbery.mynetgear.net/c/display/W/JBoss+Ports\nmatch jboss-remoting m|^\\0\\0\\0\\x3e\\0\\0\\x01\\0\\x03\\x04\\0\\0\\0\\x03\\x03\\x04\\0\\0\\0\\x02\\x01\\x06GSSAPI\\x01\\nDIGEST-MD5\\x01\\x08CRAM-MD5\\x02\\x0e([\\w._-]+)$| p/JBoss Remoting/ v/6/ h/$1/\nmatch jboss-remoting m|^\\0\\0\\0.\\0\\0.([\\w.-]+)$| p/JBoss Remoting/ i/JBoss management interface/ h/$1/\n\nmatch jdbc m|^HSQLDB JDBC Network Listener\\.\\nUse JDBC driver with Network Compatibility Version([\\d.]+) and a JDBC URL like jdbc:hsqldb:hsql://hostname\\.\\.\\.\\n| p/HSQLDB JDBC/ i/Network Compatibility Version $1/ cpe:/a:hsql:hsqldb/\n\n# http://docs.oracle.com/javase/1.5.0/docs/guide/jpda/jdwp-spec.html\nmatch jdwp m|^JDWP-Handshake$| p/Java Debug Wire Protocol/\n\n# Null probe hack\nmatch jenkins-listener m|^Unrecognized protocol: .*\\r\\n$| p/Jenkins TcpSlaveAgentListener/ cpe:/a:cloudbees:jenkins/\n\n# Samsung ML-2850 port 2000\nmatch jetdirect m|^ $| p/JetDirect/ d/printer/\n\nmatch jmond m|^cpu: *[\\d.]+ mem: *[\\d.]+ swp: *[\\d.]+\\0| p/jmond unix resource monitor/ o/Unix/\n\nmatch jtag m|^\\0%\\rJTAG Server\\r\\n\\0\\0\\0\\x08\\0\\0\\0\\xf0| p/Altera Quartus JTAG service/\n\nmatch junoscript m|^<\\?xml version=\\\"1\\.0\\\"[^<]+<junoscript.*release=\\\"([^\\\"]+)\\\" hostname=\\\"([^\\\"]+)\\\"| p/Junoscript XML Interface/ v/$1/ d/router/ o/JUNOS/ h/$2/ cpe:/o:juniper:junos/a\n\nmatch keepnote m|^keepnote\\n| p/KeepNote/\n\nmatch kguard m|^inv2W\\x04\\x0f\\0\\0\\0\\x01\\0\\t\\0\\0\\x00| p/Kguard Security DVR/ d/webcam/\n\nmatch klogin m|^\\x01klogind: (All authentication systems disabled; connection refused)\\.\\.\\r\\n| p/MIT Kerberos klogin/ i/broken - $1/ cpe:/a:mit:kerberos/\n\nmatch kismet m|^\\*KISMET: 0\\.0\\.0 \\d+ \\x01Kismet\\x01 \\d+ \\d+ (\\S+) \\n\\*PROTOCOLS:| p/Kismet server/ v/$1/\nmatch kismet m|^\\*KISMET: ([\\d.]+) \\d+ \\x01Kismet\\x01 \\d+ \\n\\*PROTOCOLS:| p/Kismet server/ v/$1/\nmatch kismet-drone m|^\\xde\\xca\\xfb\\xad\\x01\\0\\0\\0\\x04\\0\\t\\0[\\x07\\x10]| p/Kismet drone/\n\nmatch ksystemguard m|^ksysguardd ([\\d.]+)\\n\\(c\\)| p/ksystemguardd/ v/$1/\n\nmatch landesk m|^TDMM\\x1c\\0\\0\\0\\x14\\0\\0\\0| p/LANDesk Management Suite/ i/Targeted Multicast Service/ cpe:/a:landesk:landesk_management_suite/\n\nmatch ldap m|^unable to set certificate file\\n6292:error:02001002:system library:fopen:No such file or directory:bss_file\\.c:| p/OpenLDAP over SSL/ i/broken/ cpe:/a:openldap:openldap/\n\nmatch ldminfod m|^language:\\nlanguage:[a-z][a-z]_[A-Z][A-Z]\\.[\\w-]+\\n| p/ldminfod login session daemon/\n\nmatch libp2p-multistream m|^./multistream/([\\d.]+)\\n|s p/libp2p multistream protocol/ v/$1/\nmatch lineage-ii m|^\\x03\\0\\x7e$| p/Lineage II game server/\n\nmatch lisa m|^\\d+ \\*+\\n.*\\x000 succeeded\\n\\0$|s p/LAN Information Server/ i/Sanitized/\nmatch lisa m|^\\d+ ([-\\w_.]+)\\n.*\\x000 succeeded\\n\\0$|s p/LAN Information Server/ h/$1/\nmatch lisa m|^\\d+ .*\\n\\x000 succeeded\\n\\0$|s p/LAN Information Server/\nmatch lisa m|^0 succeeded\\n\\0$| p/LAN Information Server/\n\nmatch litecoin-jsonrpc m|^HTTP/1\\.0 401 Authorization Required\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: litecoin-json-rpc/v([\\w._-]+)\\r\\n|s p/Litecoin JSON-RPC/ v/$1/\nmatch litecoin-jsonrpc m|^HTTP/1\\.1 403 Forbidden\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: litecoin-json-rpc/v([\\w._-]+)\\r\\n|s p/Litecoin JSON-RPC/ v/$1/\n\nmatch lmtp m|^220 ([-.\\w]+) LMTP Cyrus v(\\d[-.\\w]+) ready\\r\\n| p/Cyrus Imap Daemon lmtpd/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch lmtp m|^220 ([\\w._-]+) Cyrus LMTP Murder v([\\w._-]+) server ready\\r\\n| p/Cyrus lmtpd Murder/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch lmtp m|^220 ([\\w._-]+) Cyrus LMTP v([\\w._+-]+) server ready\\r\\n| p/Cyrus Imap Daemon lmtpd/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch lmtp m|^220 ([-\\w_.]+) LMTP Cyrus v([\\d.]+)-Red Hat [\\d.-]+ ready\\r\\n| p/Cyrus Imap Daemon lmtpd/ v/$2/ i/on Red Hat/ o/Linux/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/ cpe:/o:linux:linux_kernel/a\nmatch lmtp m|^220 ([-\\w_.]+) DBMail LMTP service ready to rock\\r\\n| p/DBMail lmtpd/ h/$1/ cpe:/a:paul_j_stevens:dbmail/\nmatch lmtp m|^220 DSPAM LMTP ([-\\w_.]+) Ready\\r\\n| p/DSPAM lmtpd/ v/$1/\nmatch lmtp m|^220 ([\\w._-]+) Zimbra LMTP ready\\r\\n| p/Zimbra lmtpd/ h/$1/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch lmtp m|^220 ([\\w._-]+) Zimbra LMTP (?:server )?ready\\r\\n| p/Zimbra lmtpd/ h/$1/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch lmtp m|^220 ([\\w.-]+) Dovecot \\(Ubuntu\\) ready\\.\\r\\n| p/Dovecot lmtpd/ i/Ubuntu/ o/Linux/ h/$1/ cpe:/a:dovecot:dovecot/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/a\n\nmatch logevent m|^\\x01\\*Nsure Audit Novell NetWare \\[\\w+:\\w+\\]\\r\\n| p/Nsure Audit logeventd/ o/NetWare/ cpe:/a:novell:nsure_audit/ cpe:/o:novell:netware/a\n\nmatch lns m|^LNS READY<>$| p/Legalis Intranet legal information server/\n\nmatch lsx m|^<LSX>\\n\\t<Event sender=\\\"EALS\\\">\\n\\t\\t<Challenge version=\\\"([\\d,]+)\\\" key=\\\"[\\da-f]{32}\\\" />\\n\\t</Event>\\n</LSX>\\n\\0| p/EA Origin/ v/$SUBST(1,\",\",\".\")/ cpe:/a:ea:origin:$SUBST(1,\",\",\".\")/\n# LSMS VPN Firewall GUI admin port\n# LSMS Redundancy port\nmatch lucent-fwadm m|^0001;2$| p/Lucent Security Management Server/ cpe:/a:lucent:security_management_server/\nmatch mailq m|^version zmailer ([\\d.]+)\\n220 MAILQ-V2-CHALLENGE: | p/ZMailer/ v/$1/ o/Unix/\nmatch maya m|^\\([\\w._-]+:\\d+\\) : updateShowMenu MayaWindow| p/Autodesk Maya command port/ cpe:/a:autodesk:maya/\nmatch mcms-command m|^\\nRemote Command: Connect\\n\\n MCMS VERSION ([\\w._-]+) *[\\d:]+ [\\d/]+ Operating System : XPEK\\n\\+| p/Polycom MCMS command port/ v/$1/ o/Windows XP/ cpe:/o:microsoft:windows_xp/a\nmatch mediad m|^\\x80\\0\\0\\$\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/IRIX mediad/ o/IRIX/ cpe:/o:sgi:irix/a\nmatch meetingmaker m|^\\xc1,$| p/Meeting Maker calendaring/\nmatch melange m|^\\+\\+\\+Online\\r\\n>> Melange Chat Server \\(Version (\\d[-.\\w]+)\\), Apr-25-1999\\r\\n\\nWelcome | p/Melange Chat Server/ v/$1/\nmatch metasploit m|^\\n.*=\\[ msf v([^\\r\\n]+)\\r?\\n.*\\d+ exploits.*\\d+ payloads.*\\d+ encoders.*\\d+ nops.*msf > $|s p/Metasploit Framework msfd/ v/$1/\nmatch midas m|^MIDASd v([\\w.]+) connection accepted\\n\\xff| p/midasd/ v/$1/\nmatch millennium m|^\\x01\\0\\0\\0\\x1a\\0\\0\\0Millennium Process Server\\0$| p/Millennium Process Server/\nmatch minecraft m|^\\xff\\0\\x17Took too long to log in$| p/Minecraft game server/\nmatch minecraft-socketapi m|^{\\\"result\\\":\\\"error\\\",\\\"error\\\":\\\"Incorrect\\. Socket requests are in the format PAGE\\?ARGUMENTS\\. For example, \\\\/api\\\\/subscribe\\?source=\\.\\.\\.\\.\\\",\\\"source\\\":\\\"\\\"}\\r\\n{\\\"result\\\":\\\"error\\\",\\\"error\\\":\\\"Incorrect\\. Socket requests are in the format PAGE\\?ARGUMENTS\\. For example, \\\\/api\\\\/subscribe\\?source=\\.\\.\\.\\.\\\",\\\"source\\\":\\\"\\\"}\\r\\n$| p/Bukkit JSONAPI Socket API for Minecraft game server/\nmatch minecraft-votifier m|^VOTIFIER (\\d[\\w._-]+)(?: \\w{26})?\\r?\\n$| p/Votifier plugin for Minecraft game/ v/$1/\nmatch misys-loaniq m|^Loan IQ %1 Request Server - Ready for Request\\0| p/Misys Loan IQ/\n\n# Hayes codes, could be something else but all searches point to Lantronix devices on port 3001\nmatch modem m|^(?:ATZ\\r)?(?:\\+\\+\\+ATZ\\r)| p/Lantronix raw serial port/\n\nmatch monop m|^<monopd><server host=\"\" version=\"([\\d.]+)\"/></monopd>\\n| p/GtkAtlantic monopd/ v/$1/ cpe:/a:gtkatlantic:monopd:$1/\nmatch monop m|^<monopd><server host=\"([\\w._-]+)\" version=\"([\\d.]+)\"/></monopd>\\n| p/GtkAtlantic monopd/ v/$2/ i/id: $1/ cpe:/a:gtkatlantic:monopd:$2/\nmatch moo m|^Type 'connect <player name>' to log in\\.\\r\\n| p/LambdaMOO/\n\n# http://www.monetdb.org/Documentation/monetdbd\nmatch monetdb m|^.\\0[^:]+:merovingian:(\\d+):[^:]+:BIG:| p/MonetDB/ i/protocol $1; big-endian/ cpe:/a:monetdb:monetdb/\nmatch monetdb m|^.\\0[^:]+:merovingian:(\\d+):[^:]+:LIT:| p/MonetDB/ i/protocol $1; little-endian/ cpe:/a:monetdb:monetdb/\nmatch monetdb-ctl m|^merovingian:2:\\w+:\\n| p/MonetDB control/ cpe:/a:monetdb:monetdb/\n\nmatch mpd m|^OK MPD ([\\d.]+)\\n$| p/Music Player Daemon/ v/$1/\nmatch mpich2 m|^([\\d.]+) \\d+\\0{240,250}$| p/MPICH2/ v/$1/\n# lopster 1.2.0.1 on Linux 1.1\nmatch mserv m|^200 Mserv (\\d[-.\\w]+) \\(c\\) James Ponder [-\\d]+ - Type: USER <username>\\r\\n\\.\\r\\n| p/Mserv music server/ v/$1/\n\nmatch mudnames m|^MudNames ([\\d.]+) - \\(C\\) 1997-2001 Ragnar Hojland Espinosa <ragnar@ragnar-hojland\\.com>\\n\\r| p/MudNames/ v/$1/\nmatch munin m|^# munin node at ([-\\w_.]+)\\n$| p/Munin/ h/$1/ cpe:/a:munin-monitoring:munin/\n\nmatch multiplicity m|^MULTIPLICITYP$| p/Stardock Multiplicity KVM daemon/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch mu-connect m|^\\x7f\\xba\\xbe\\xbf$| p/Webzen MU Online role-playing game connect/\nmatch mu-connect m|^\\xc1\\x04\\x00\\x01$| p/Webzen MU Online role-playing game connect/\nmatch mu-game m|^\\x7f\\xb2O\\xbe\\xbf\\xad.\\x8f\\x8e\\x8e\\x8f\\x88$|s p/Webzen MU Online role-playing game server/\n\n# The \"^(?:\\* [^\\r\\n]+\\r\\n)*?\" construct on these matches is much faster\n# than just using the matches without an anchor.  -- Brandon\nmatch mupdate m|^(?:\\* [^\\r\\n]+\\r\\n)*?\\* OK MUPDATE \\\"([-.\\w]+)\\\" \\\"Cyrus Murder\\\" \\\"v([-.\\w]+)\\\" \\\"\\(master\\)\\\"\\r\\n| p/Cyrus Murder Master/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch mupdate m|^(?:\\* [^\\r\\n]+\\r\\n)*?\\* OK MUPDATE \\\"([-.\\w]+)\\\" \\\"Cyrus Murder\\\" \\\"v([-.\\w]+)\\\" \\\"mupdate://([-.\\w]+)\\\"\\r\\n| p/Cyrus Murder Slave/ v/$2/ i/Master: $3/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\n\nmatch mwti-rpc m=^Welcome MWTI RPC Communication Server Version ([\\w._-]+) \\[(?:Administrator|SYSTEM)\\]\\r\\n= p/MWTI RPC Communication Server/ v/$1/\n\nsoftmatch napster m|^1$|\n\n# Ncat --chat mode, since 4.85BETA4\nmatch ncat-chat m|^<announce> [\\d.:a-f]+ is connected as <\\w+>\\.\\n<announce> already connected: (.*?)\\.\\n| p/Ncat chat/ i/users: $1/\n\nmatch netop m|^\\xd6\\x81\\x81\\0\\0\\xf9\\0\\xf9\\xee\\xe3\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/NetOp Remote Control/\n\nmatch netrek m|^<>=======================================================================<>\\n  Pl: Rank       Name             Login      Host name                Type\\n| p/Netrek game server player information interface/\n\n# TRENDnet NetUSB - 4-byte-length-prefixed null-terminated strings\n# USB-over-network: https://www.trendnet.com/kb/kbp_viewquestion.asp?ToDo=view&questId=1350&catId=516\nmatch netusb m|^\\0\\0\\0. connect success [\\da-f]+ \\n\\0\\0\\0\\0. NetUSB ([\\w._-]+), 2\\d\\d\\d, [\\dA-F]+ \\n\\0\\0\\0\\0\\x0c AUTH ISOC\\n\\0\\0\\0\\0| p/TRENDnet NetUSB/ v/$1/\n\n# Nping echo mode -- added in Nmap 5.36TEST1\nmatch nping-echo m|^\\x01\\x01\\0\\x18.{8}\\0\\0\\0\\0.{32}\\0{16}.{32}$|s p/Nping echo/\n\nmatch nrpep m|^nrpep - ([\\d.]+)\\n$| p|NetSaint Remote Plugin Executor/Perl| v/$1/\n\n# Wireshark dissection:\n# Bytes 0-3: fragment bit and fragment length.\n# Bytes 4-7: sequence number.\n# Bytes 8-11: timestamp.\n# Bytes 12-15: type (0x0000 = Request).\n# Bytes 16-19: message (0x0502 = NOTIFY_CONNECTED).\n# Bytes 20-23: reply sequence number.\n# Bytes 24-27: error (0x0000 = NO_ERR).\n# Bytes 28-31: connected (0x0000 = CONNECTED).\n# Bytes 32-35: version.\n# Bytes 36-39: reason length.\nmatch ndmp m|^\\x80...\\0\\0\\0\\0....\\0\\0\\0\\0\\0\\0\\x05\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0.Connected to BlueArc NDMP session \\d+\\n\\0\\0\\0|s p/BlueArc ndmp/ i/NDMPv4/\nmatch ndmp m|^\\x80\\0\\0\\x24\\0\\0\\0\\x01....\\0\\0\\0\\0\\0\\0\\x05\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x03\\0\\0\\0\\x00$|s p|Symantec/Veritas Backup Exec ndmp| i/NDMPv3/ cpe:/a:symantec:veritas_backup_exec/\nmatch ndmp m|^\\x80\\0\\0\\x24\\0\\0\\0\\x01....\\0\\0\\0\\0\\0\\0\\x05\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0\\x00$|s p/NetApp Data ONTAP ndmp/ i/NDMPv4/ cpe:/a:netapp:data_ontap/\n# version 8.2.1RC2\nmatch ndmp m|^\\x80\\0\\0\\x3c\\0\\0\\0\\x01....\\0\\0\\0\\0\\0\\0\\x05\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0\\x15Connection successful\\0\\0\\0$|s p/NetApp Data ONTAP ndmp/ i/NDMPv4/ cpe:/a:netapp:data_ontap/\nmatch ndmp m|^\\x80\\0\\0\\x38\\0\\0\\0\\x01....\\0\\0\\0\\0\\0\\0\\x05\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\0\\0\\x04\\0\\0\\0\\x12Connection refused\\0\\0$|s p/NetApp Data ONTAP ndmp/ i/NDMPv4; Connection refused/ cpe:/a:netapp:data_ontap/\n\nmatch nmea-0183 m|^(?:\\$GP[A-Z]{3},[\\w.,]+\\*[A-F\\d]{2}\\r\\n)*\\$GPGGA,(\\d\\d)(\\d\\d)(\\d\\d),([-\\d.]+,[NS]),([-\\d.]+,[EW]),\\d,| p/NMEA 0183 GPS data/ i/coordinates: $4, $5 as of $1:$2:$3 UTC/\nmatch nmea-0183 m|^\\$GP[A-Z]{3},[\\w.,]+\\*[A-F\\d]{2}\\r\\n| p/NMEA 0183 GPS data/\n\nmatch nngs m|^>>messages/login\\r\\n----- Welcome to the No Name Go Server \\(NNGS\\) -----\\r\\n\\r\\n| p/No Name Go Server/\nmatch nngs m|^----- Welcome to the No Name Go Server \\(NNGS\\) -----\\r\\n\\r\\nTo connect as a guest, please log in with an unusual name\\r\\nthat is probably not being used by another player\\.\\r\\n\\r\\n\\r\\nLogin: | p/No Name Go Server/\n\n# source is a hostname, but not necessarily the hostname of the target.\nmatch nutcracker m|^\\{\"service\":\"nutcracker\", \"source\":\"([^\"]+)\", \"version\":\"([\\d.]+)\",| p/twemproxy stats/ v/$2/ i/source: $1/ cpe:/a:twitter:twemproxy:$2/\n\n# This smells like VNC (RFB 3.3), but very customized\n# http://support.nuuo.com/mediawiki/index.php/Remote_desktop\nmatch nuuo-vnc m|^NUUO 003\\.140| p/NUUO remote desktop/\n\nmatch omniback m|^HP Data Protector ([\\w._-]+): INET, internal build ([\\w._-]+), built on (.*)\\n$| p/HP Data Protector/ v/$1/ i/internal build $2; built on $3/ cpe:/a:hp:data_protector:$1/\n\nmatch outpost-ctl m|^\\[\\xb0${backquote}\\x81\\x91\\xd3\\x9eI\\xa2\\*\\x0f\\x99\\xff\\x8a_\\x12................\\x01\\0$|s p/Agnitum Outpost Firewall control/ cpe:/a:agnitum:outpost_security_suite/\n\nmatch para-ups m|^DeltaUPS:NET01,00,0008 1\\t\\d+\\t\\tDeltaUPS:SOD00,00,0000 DeltaUPS:STS00,00,0231 0\\tMinuteman\\tE 3200\\t([\\w._-]+)\\t([\\w._-]+)\\t\\d+\\t\\d+\\t| p/Para Systems Sentry Plus UPS server daemon/ v/$1/ d/power-misc/ h/$2/\n\nmatch pcmiler m|^ALK PCMILER SERVER READY\\n| p/PC*MILER truck routing and mileage/\n\nmatch pc-monitor m|^{\\\"CpuInfo\\\":{\\\"uiLoad\\\":\\[[\\d,]+\\],\\\"uiTjMax\\\":\\[[\\d,]+\\],\\\"uiCoreCnt\\\":\\d+,\\\"uiCPUCnt\\\":\\d,\\\"fTemp\\\":\\[[\\d.,]+\\],\\\"fVID\\\":[\\d.]+,\\\"fCPUSpeed\\\":[\\d.]+,\\\"fFSBSpeed\\\":[\\d.]+,\\\"fMultipier\\\":\\d,\\\"CPUName\\\":\\\"([^\"]+)\\\",| p/PC-Monitor JSON service/ i/CPU: \"$1\"/\n\nmatch pcmeasure m|^port0;valid=0;value=0\\.00;counter0=0;counter1=0;\\r\\n| p/MessPC PCMeasure/ cpe:/a:messpc:pcmeasure/\n\nmatch pso-login m|^\\x64\\x00\\x00\\x00\\x00\\x00\\x3f\\x01\\x03\\x04\\x19\\x55Tethealla Login\\x00................................................................\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00|s p/Phantasy Star Online game login/\nmatch pso-gate m|^\\xc8\\x00\\x03\\x00\\x00\\x00\\x00\\x00Phantasy Star Online Blue Burst Game Server\\. Copyright 1999-2004 SONICTEAM\\.\\x00Tethealla Gate v([\\w._-]+)................................................................................................$|s p/Phantasy Star Online game server/ v/$1/\n\nmatch precomd m|^nduid: \\x00([0-9a-f]{40})$| p/WebOS precomd/ i/nduid $1/ d/phone/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch printer-json m|^\\{\"Result\":false,\"Reason\":\"Busying\"\\}\\n| p/Dell MFP JSON service/ d/printer/\n\nmatch donkey m|^.*\\0\\0\\0\\x06\\0Donkey\\x01\\x0c\\0\\./donkey\\.ini\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|s p/MLDonkey multi-network P2P GUI port/\nmatch donkey m|^\\xff\\xfd\\x1f[\\r\\n* ]+Welcome to MLdonkey          \\r\\n| p/MLDonkey multi-network P2P GUI port/\nmatch donkey m|^\\xff\\xfd\\x1f\\n\\n\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\n\\n                         Welcome to MLdonkey chrooted| p/MLDonkey multi-network P2P GUI port/ i/chrooted/\nmatch donkey m|^\\xff\\xfd\\x1f ?Welcome to MLdonkey ?\\n\\x1b\\[34mWelcome on mldonkey command-line\\x1b\\[2;37;0m\\n\\nUse \\x1b\\[31m\\?\\x1b\\[2;37;0m for help\\n\\n\\x1b\\[7mMLdonkey command-line:\\x1b\\[2;37;0m\\n> | p/MLDonkey multi-network P2P server control port/\nmatch donkey m|^\\xff\\xfd\\x1fWelcome to MLDonkey ([\\d.]+)\\n\\x1b\\[3.mWelcome on mldonkey command-line\\x1b\\[2;37;0m\\n\\nUse \\x1b\\[31m\\?\\x1b\\[2;37;0m for help\\n\\n\\x1b\\[7mMLdonkey command-line:\\x1b\\[2;37;0m\\n> | p/MLDonkey multi-network P2P server control port/ v/$1/\nmatch donkey m|^\\xff\\xfd\\x1f\\n\\x1b\\[34mWelcome on mldonkey command-line\\x1b\\[2;37;0m\\n\\nUse \\x1b\\[31m\\?\\x1b\\[2;37;0m for help\\n\\n\\x1b\\[7mMLdonkey command-line:\\x1b\\[2;37;0m\\n> | p/MLDonkey multi-network P2P server control port/\nmatch donkey m|^\\xff\\xfd\\x1fWelcome to MLdonkey, visit http://mldonkey\\.dyndns\\.info for new Versions\\n\\x1b\\[34mWelcome on mldonkey command-line\\x1b\\[2;37;0m\\n\\nUse \\x1b\\[31m\\?\\x1b\\[2;37;0m for help\\n\\n\\x1b\\[7mMLdonkey command-line:\\x1b\\[2;37;0m\\n> | p/MLDonkey multi-network P2P server control port/\nmatch donkey m|^\\xff\\xfd\\x1f([^']+)'s mlDonkey\\n\\x1b\\[34mWelcome on mldonkey command-line\\x1b\\[2;37;0m\\n\\nUse \\x1b\\[31m\\?\\x1b\\[2;37;0m for help\\n\\n\\x1b\\[7mMLdonkey command-line:\\x1b\\[2;37;0m\\n>| p/MLDonkey multi-network P2P server control port/ i/name $1/\nmatch donkey m|^ADDDOWNLOAD\\(\\d+\\)\\nhash\\(\\d+\\)\\nstate\\([\\w ]+\\)\\ntransmit\\(\\d+\\)\\nsize\\(\\d+\\)\\nfile\\(\\w+\\)\\nshared\\(\\d+\\)\\nthroughput\\(\\d+\\)\\nelapsed\\(\\d+\\)\\n;| p/MLDonkey multi-network P2P server information port/\nmatch donkey m|^[\\x00-\\x10]\\0\\0\\0\\0\\0[^\\0]\\0\\0\\0| p/MLDonkey multi-network P2P server/\n\nmatch donkey m|^Telnet connection from [\\d.]+ rejected \\(see allowed_ips setting\\)\\n| p/MLDonkey multi-network P2P server control port/ i/IP disallowed/\nmatch donkey m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .*\\r\\nServer: eserver ([\\d.]+)\\r\\nAccept-Ranges: bytes\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>404 File not found - eserver is not a HTTP server</title>| p/Lugdunum eserver/ v/$1/\n\nmatch lanforge m|^\\0<@\\0\\0\\x0c\\0\\0\\n\\nWelcome to LANforge\\.  Enter 'help' for more information\\.\\n\\0\\x01W@\\0\\0\\x0c\\0\\0Licenses: Shelves: \\d+  Cards: \\d+  Ports: \\d+  Active Ports: \\d+\\n  WanLinks: \\d+  Wl-2m: \\d+  Wl-45m: \\d+  Wl-155m: \\d+  Wl-1g: \\d+\\n  WanPaths: \\d+  Armageddon: \\d+  VOIP: \\d+\\n\\nThese licenses will never expire\\.\\nCurrent use: Ports: \\d+  WL-2m: \\d+  WL-45m: \\d+  WL-155m: \\d+  WL-1G: \\d+\\n  Armageddon: \\d+  VOIP: \\d+\\nLANforge Support and Software Upgrades expire in: ([^.]*)\\.\\n\\0| p/LANforge management/ i/support expires in $1/\n\nmatch login m|^A connection was attempted on an illegal port\\.\\r\\n| p/Ataman ATRLS rlogind/ o/Windows/ cpe:/o:microsoft:windows/a\n# Fallback match\nmatch login m|^\\x01rlogind: Permission denied\\.\\r\\n| p/OpenBSD or Solaris rlogind/\n\n# L2J loginserver. http://l2jserver.com/. Packets are obfuscated and encrypted\n# but preceded by a 16-bit length.\nmatch loginserver m|^\\x0b\\0\\0......\\0\\0$|s p/L2J loginserver/\nmatch loginserver m|^\\x9b\\0\\0\\xfd\\x8a\\\"\\0Zx\\0.{129}\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$|s p/L2J loginserver/\nmatch loginserver m|^\\xba\\0.{184}$|s p/L2J loginserver/\n\nmatch logpad m|^00000011SendSignon\\n| p/PHT LogPad/ cpe:/a:pht:logpad/\n\nmatch maas-rpc m|^\\0\\x04_ask\\0\\x011\\0\\x08_command\\0\\x08Identify\\0\\0| p/maas-regiond RPC/ cpe:/a:canonical:maas/\n\nmatch maplestory m|^\\x0e\\0\\x53\\0\\x01\\x001Frz.R0x.\\x08$|s p/Maplestory game server/\n\n# I think this can be distinguished with further probes\nsoftmatch mtap m|^WATSON!WATSON!| p/GroupLogic MassTransit or Adobe Virtual Network/\n\n# Not sure how to read this version. Seen: 318DC8D9.31.32.32, 318DC8D9.32.32.3B, 318DC8D9.31.32.31\nmatch mentorbs m|^OCCLIENTDATA##MBSDELIM##{\\\"DATATYPE\\\":\\\"424538\\\",\\\"CHECKSUM\\\":\\\"[\\dA-F]+\\\",\\\"DATA\\\":{\\\"MAJOR\\\":\\\"318DC8D9\\\",\\\"MINOR\\\":\\\"[\\dA-F]+\\\",\\\"RELEASE\\\":\\\"[\\dA-F]+\\\",\\\"BUILD\\\":\\\"[\\dA-F]+\\\"}}##MBSENDDELIM##\\r\\n| p/Mentor BS On-Call/ cpe:/a:mentorbs:on-call/\n\nmatch meterpreter m|^\\0.\\x0b\\0MZ\\xe8\\0\\0\\0\\0\\x5b\\x52\\x45\\x55\\x89\\xe5\\x81\\xc3..\\0\\0\\xff\\xd3\\x89\\xc3Wh\\x04\\0\\0\\0P\\xff\\xd0h....h\\x05\\0\\0\\0P\\xff\\xd3\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0.\\0\\0\\0\\x0e\\x1f\\xba\\x0e\\0\\xb4\\t\\xcd!\\xb8\\x01L\\xcd!This program cannot be run in DOS mode\\.\\r\\r\\n\\$\\0\\0\\0\\0\\0\\0\\0|s p/Metasploit meterpreter/ i/**BACKDOOR**/\nmatch meterpreter m|^\\x16\\x03\\0\\0\\x59\\x01\\0\\0\\x55\\x03\\0................................\\0\\0\\x28\\0\\x39\\0\\x38\\0\\x35\\0\\x16\\0\\x13\\0\\x0a\\0\\x33\\0\\x32\\0\\x2f\\0\\x07\\0\\x05\\0\\x04\\0\\x15\\0\\x12\\0\\x09\\0\\x14\\0\\x11\\0\\x08\\0\\x06\\0\\x03\\x01\\0\\0\\x04\\0\\x23\\0\\0$|s p/Metasploit meterpreter metsvc/ i/**BACKDOOR**/\nmatch meterpreter m|^\\0\\0\\0\\xd3\\xca\\xfe\\xba\\xbe\\0\\x03\\0-\\0\\n\\x07\\0\\x07\\x07\\0\\x08\\x01\\0\\x05start\\x01\\0E\\(Ljava/io/DataInputStream;Ljava/io/OutputStream;\\[Ljava/lang/String;\\)V\\x01\\0\\nExceptions\\x07\\0\\t\\x01\\0\\x17javapayload/stage/Stage\\x01\\0\\x10java/lang/Object\\x01\\0\\x13java/lang/Exception| p/Metasploit browser_autopwn/\n\nmatch millennium-ils m|^\\\"Thread-15\\\"  prio=5 \\(RUNNABLE\\)\\r\\n------------------------------\\r\\njava\\.lang\\.ProcessImpl\\.waitFor\\(Native Method\\)\\r\\ncom\\.iii\\.miltoolbarpanel\\$ToolbarProcess\\$1\\.run\\(miltoolbarpanel\\.java:1168\\)\\r\\n\\r\\n| p/III Millennium Integrated Library System/\n\n# Monopoly game server\nmatch monopd m|^<monopd><server version=\\\"([\\d.]+)\\\"/>.*</monopd>\\n| p/monopd/ v/$1/ o/Unix/\n\nmatch mud m|^\\n\\r\\xff\\xfbUDo you want ANSI color\\? \\(Y/n\\) $| p/ROM-based MUD/ i|http://rrp.rom.org/|\nmatch mud m|^Welcome to Dungeon\\.\\t\\t\\tThis version created ([\\w-]+)\\.\\nYou are in an open field west of a big white house| p/Zork Dungeon MUD/ i/$1/\n\nmatch musicvr m|^W\\xff..\\0\\0A.[\\x01-\\x20][\\w.]{1,32}[\\x01-\\x20][\\w.]{1,32}|s p/MusicVR/\n\nmatch myproxy m|^VERSION=MYPROXYv([\\w._-]+)\\nRESPONSE=1\\nERROR=authentication failed\\n\\0$| p/MyProxy credential management/ v/$1/\n\n# MySQL Handshake packet ( .\\0\\0\\0\\x0a ) reference - http://dev.mysql.com/doc/internals/en/connection-phase-packets.html#packet-Protocol::Handshake\n#       Error packet     ( .\\0\\0\\0\\xff ) reference - http://dev.mysql.com/doc/internals/en/packet-ERR_Packet.html#cs-packet-err-header\nmatch mysql m|^.\\0\\0\\0\\xff..Host .* is not allowed to connect to this MySQL server$|s p/MySQL/ i/unauthorized/ cpe:/a:mysql:mysql/\nmatch mysql m|^.\\0\\0\\0\\xff..Host .* is not allowed to connect to this MariaDB server$|s p/MariaDB/ i/unauthorized/ cpe:/a:mariadb:mariadb/\nmatch mysql m|^.\\0\\0\\0\\xff..Too many connections|s p/MySQL/ i/Too many connections/ cpe:/a:mysql:mysql/\nmatch mysql m|^.\\0\\0\\0\\xff..Host .* is blocked because of many connection errors|s p/MySQL/ i/blocked - too many connection errors/ cpe:/a:mysql:mysql/\nmatch mysql m|^.\\0\\0\\0\\xff..Le h\\xf4te '[-.\\w]+' n'est pas authoris\\xe9 \\xe0 se connecter \\xe0 ce serveur MySQL$| p/MySQL/ i/unauthorized; French/ cpe:/a:mysql:mysql::::fr/\nmatch mysql m|^.\\0\\0\\0\\xff..Host hat keine Berechtigung, eine Verbindung zu diesem MySQL Server herzustellen\\.|s p/MySQL/ i/unauthorized; German/ cpe:/a:mysql:mysql::::de/\nmatch mysql m|^.\\0\\0\\0\\xff..Host '[-\\w_.]+' hat keine Berechtigung, sich mit diesem MySQL-Server zu verbinden|s p/MySQL/ i/unauthorized; German/ cpe:/a:mysql:mysql::::de/\nmatch mysql m|^.\\0\\0\\0\\xff..Al sistema '[-.\\w]+' non e${backquote} consentita la connessione a questo server MySQL$|s p/MySQL/ i/unauthorized; Italian/ cpe:/a:mysql:mysql::::it/\n\nmatch mysql m|^.\\0\\0\\0...Servidor '[-.\\w]+' est\\xe1 bloqueado por muchos errores de conexi\\xf3n\\.  Desbloquear con 'mysqladmin flush-hosts'|s p/MySQL/ i/blocked - too many connection errors; Spanish/ cpe:/a:mysql:mysql::::es/\nmatch mysql m|^.\\0\\0\\0...'Host' '[-.\\w]+' n\\xe3o tem permiss\\xe3o para se conectar com este servidor MySQL| p/MySQL/ i/unauthorized; Spanish/ cpe:/a:mysql:mysql::::es/\nmatch mysql m|^.\\0\\0\\0\\x0a([\\w._-]+)\\0............\\0\\x5f\\xd3\\x2d\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0............\\0$|s p/Drizzle/ v/$1/\nmatch mysql m|^.\\0\\0\\0\\x0a([\\w._-]+)\\0............\\0\\x5f\\xd1\\x2d\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0............\\0$|s p/Drizzle/ v/$1/\n\n#MariaDB\nmatch mysql m|^.\\0\\0\\0\\x0a(5\\.[-_~.+:\\w]+MariaDB-[-_~.+:\\w]+~bionic)\\0|s p/MySQL/ v/$1/ cpe:/a:mariadb:mariadb:$1/ o/Linux/ cpe:/o:canonical:ubuntu_linux:18.04/\nmatch mysql m|^.\\0\\0\\0\\x0a(5\\.[-_~.+:\\w]+MariaDB-[-_~.+:\\w]+)\\0|s p/MySQL/ v/$1/ cpe:/a:mariadb:mariadb:$1/\n\n\nmatch mysql m|^.\\0\\0\\0.(3\\.[-_~.+\\w]+)\\0.*\\x08\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$|s p/MySQL/ v/$1/ cpe:/a:mysql:mysql:$1/\nmatch mysql m|^.\\0\\0\\0\\x0a(3\\.[-_~.+\\w]+)\\0...\\0|s p/MySQL/ v/$1/ cpe:/a:mysql:mysql:$1/\nmatch mysql m|^.\\0\\0\\0\\x0a(4\\.[-_~.+\\w]+)\\0|s p/MySQL/ v/$1/ cpe:/a:mysql:mysql:$1/\nmatch mysql m|^.\\0\\0\\0\\x0a(5\\.[-_~.+\\w]+)\\0|s p/MySQL/ v/$1/ cpe:/a:mysql:mysql:$1/\nmatch mysql m|^.\\0\\0\\0\\x0a(6\\.[-_~.+\\w]+)\\0...\\0|s p/MySQL/ v/$1/ cpe:/a:mysql:mysql:$1/\nmatch mysql m|^.\\0\\0\\0\\x0a(8\\.[-_~.+\\w]+)\\0...\\0|s p/MySQL/ v/$1/ cpe:/a:mysql:mysql:$1/\nmatch mysql m|^.\\0\\0\\0\\xffj\\x04'[\\d.]+' .* MySQL|s p/MySQL/ cpe:/a:mysql:mysql/\n\n# This will get awkward if Sphinx goes to version 3.\nmatch mysql m|^.\\0\\0\\0.([012]\\.[\\w.-]+)(?: \\([0-9a-f]+\\))?\\0|s p/Sphinx Search SphinxQL/ v/$1/ cpe:/a:sphinx:sphinx_search:$1/\n\nmatch mysql m|^.\\0\\0\\0\\x0a(0[\\w._-]+)\\0| p/MySQL instance manager/ v/$1/ cpe:/a:mysql:mysql:$1/\n\nmatch minisql m|^.\\0\\0\\x000:23:([\\d.]+)\\n$|s p/Mini SQL/ v/$1/\n\n# xrdp disconnects this way if you look at it funny.\nmatch ms-wbt-server m|^\\x03\\0\\0\\t\\x02\\xf0\\x80!\\x80| p/xrdp/ cpe:/a:jay_sorg:xrdp/\n\n# TIME\n# This is a random 128-byte IV followed by a four-byte timestamp.\n# 0x52000000 = Mon Aug  5 12:41:52 2013\n# 0x7FFFFFFF = Mon Jan 18 21:14:07 2038\n# Calculating: perl -MPOSIX -le 'print ctime(0x7FFFFFFF)'\nmatch nagios-nsca m|^.{128}[\\x52-\\x7F]...$|s p/Nagios NSCA/\n\nmatch nbd m|^NBDMAGIC\\0\\0B\\x02\\x81\\x86\\x12S| p/Network Block Device/ i/old handshake/ cpe:/a:wouter_verhelst:nbd/\n# see nbd/proto.txt\nmatch nbd m|^NBDMAGICIHAVEOPT\\0\\0| p/Network Block Device/ v/2.9.17/ i/new handshake/ cpe:/a:wouter_verhelst:nbd:2.9.17/\nmatch nbd m|^NBDMAGICIHAVEOPT\\0\\x01| p/Network Block Device/ i/new handshake/ cpe:/a:wouter_verhelst:nbd/\n\nmatch ncacn_http m|^ncacn_http/([\\d.]+)$| p/Microsoft Windows RPC over HTTP/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\n# NCD Thinstar 300 running NCD Software 2.31 build 6\nmatch ncd-diag m|^WinCE/WBT Diagnostic port\\n\\rSerial Number: (\\w+)  MAC Address: 0000(\\w+)\\s+.*CPU info: ([ -.+\\w/ ]+)\\r\\n.*(Windows CE Kernel[-.+:\\w ]+)\\r|s p/NCD Thinster Terminal Diagnostic port/ i/Serial# $1; MAC: $2; CPU: $3; $4/\n\nmatch ncid m|^200 NCID Server:  ARC_ncidd ([\\w._-]+)\\r\\n| p/ARC_ncidd/ v/$1/ i/Network Caller ID/\n\nmatch netbackup-bpdbm m|^\\0\\0\\0.DONE \\d+$| p/Veritas Netbackup database manager/ cpe:/a:symantec:veritas_netbackup/\nmatch netdevil m|^pass_pleaz$| p/Net-Devil backdoor/ i/**TROJAN**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch netsaint m|^Sorry, you \\(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\) are not among the allowed hosts\\.\\.\\.\\n$| p/Netsaint status daemon/\nmatch netsaint m|^ERROR Client is not among hosts allowed to connect\\.| p/Nagios Statd Server/\n\n# http://www.monkeyz.eu/projects/netsoul_spec.txt\nmatch netsoul m|^salut \\d+ [0-9a-f]{32} [\\d.]+ \\d+ \\d+\\n| p/Netsoul instant messaging/\n\n# I love this service:\nmatch netstat m|^Active Internet connections \\(.*\\)\\nProto Recv-Q Send-Q Local Address           Foreign Address         State      \\n| o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch netstat m|^Active Internet connections\\nProto Recv-Q Send-Q  Local Address          Foreign Address        \\(state\\)\\n| o/QNX/ cpe:/o:qnx:qnx/a\nmatch netstat m|^netstat: invalid option -- f\\nusage: netstat \\[-veenNcCF\\]| p/Linux netstat/ i/broken/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch netstat m|^Process Software MultiNet V([\\d.]+) Rev A-X, AlphaServer ([\\d/ ]+), OpenVMS AXP V([\\d.]+)\\r\\n\\r\\nProduct                      License    Authorization        Expiration Date\\r\\n| p/OpenVMS netstatd/ i/PSM $1; AlphaServer $2; OpenVMS AXP $3/ o/OpenVMS/ cpe:/o:hp:openvms/a\n\nmatch netsupport-dna m|^\\x01\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\n\\x0c00\\d{10}$| p/NetSupport DNA asset management/\n\nmatch netsync m|^\\x06\\x02...([\\w._@-]+)..|s p/Netsync/ v/6/ i/Monotone VCS; key name $1/\nmatch netsync m|^\\x00\\x64\\x01\\x00$| p/Netsync/ i/Monotone VCS/\n\nmatch netbios-ssn m|^smbd: error while loading shared libraries: libattr\\.so\\.1: cannot open shared object file: No such file or directory\\n| p/Samba smbd/ i/Broken/ cpe:/a:samba:samba/\nmatch netbus m|^NetBus ([\\d.]+).*\\r$| p/NetBus trojan/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch nntp m|^nnrpd: invalid option -- S\\nUsage error\\.\\n| p/INN NNTPd/ i/broken/ cpe:/a:isc:inn/\nmatch nntp m|^502 You have no permission to talk\\.  Goodbye.\\r\\n$| p/INN NNTPd/ i/unauthorized/ cpe:/a:isc:inn/\nmatch nntp m|^200 ([-.\\w]+) NNTP Service Ready - ([-.\\w]+@[-.\\w]+) \\(DIABLO (\\d[-.\\w ]+)\\)\\r\\n| p/Diablo NNTP service/ v/$3/ i/Admin: $2/ h/$1/\n\nmatch nntp m|^200 NNTP Service ([\\w._-]+) Version: [\\w._-]+ Posting Allowed \\r\\n| p/Microsoft NNTP Service/ v/$1/ o/Windows 2000/ cpe:/o:microsoft:windows_2000/\nmatch nntp m|^200 NNTP-service ([\\w._-]+) Version: [\\w._-]+ Posting Allowed \\r\\n| p/Microsoft NNTP Service/ v/$1/ o/Windows 2000/ cpe:/o:microsoft:windows_2000/\nmatch nntp m|^200 Service NNTP ([\\w._-]+) Version: [\\w._-]+ Posting Allowed \\r\\n| p/Microsoft NNTP Service/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/\nmatch nntp m|^200 Servicio NNTP ([\\w._-]+) Version: [\\w._-]+ Posting Allowed \\r\\n| p/Microsoft NNTP Service/ v/$1/ i/Spanish/ o/Windows/ cpe:/o:microsoft:windows::::es/\nmatch nntp m|^200 Servi\\xe7o NNTP ([\\w._-]+) Version: [\\w._-]+ Posting Allowed \\r\\n| p/Microsoft NNTP Service/ v/$1/ i/Portuguese/ o/Windows/ cpe:/o:microsoft:windows::::pt/\nmatch nntp m|^200 NNTP Service Microsoft\\xae Internet Services (\\d[-.\\w]+) Version: \\d+\\.\\d+\\.\\d+\\.\\d+ Posting Allowed \\r\\n| p/Microsoft NNTP Service/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/\nmatch nntp m|^502 Connection refused\\r\\n| p/Microsoft NNTP Service/ i/refused/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch nntp m|^200 ([-.\\w]+) DNEWS Version *(\\d[-.\\w]+).*posting OK \\r\\n| p/Netwinsite DNEWS/ v/$2/ i/posting OK/ h/$1/\nmatch nntp m|^200 Leafnode NNTP Daemon, version (\\d[-.\\w]+) running at| p/Leafnode NNTPd/ v/$1/\nmatch nntp m|^200 Lotus Domino NNTP Server for ([-./\\w]+) \\(Release (\\d[-.\\w]+), .*\\) - Not OK to post\\r\\n$| p/Lotus Domino nntpd/ v/$2/ i/posting denied/ o/$1/ cpe:/a:ibm:lotus_domino:$2/\nmatch nntp m|^200 Lotus Domino NNTP Server for ([-./\\w]+) \\(Release (\\d[-.\\w]+), .*\\) - OK to post\\r\\n$| p/Lotus Domino nntpd/ v/$2/ i/posting ok/ o/$1/ cpe:/a:ibm:lotus_domino:$2/\n\n# Windows NT 4.0 SP5-SP6\nmatch nntp m|^20[01] Microsoft Exchange Internet News Service Version (\\d\\.\\d\\.[\\d.]+) \\((.*)\\)\\r\\n| p/Microsoft Exchange Internet News Service/ v/$1/ i/$2/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch nntp m=^20. ([\\w._-]+) InterNetNews NNRP server INN ([\\w._-]+) ready \\((?:posting ok|no posting)\\)\\.?\\r\\n= p/InterNetNews (INN)/ v/$2/ h/$1/ cpe:/a:isc:inn:$2/\nmatch nntp m|^200 ArGoSoft News Server for WinNT/2000/XP v ([\\d.]+) ready\\r\\n| p/ArGoSoft nntpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch nntp m|^400 No space left on device writing SMstore file -- throttling\\r\\n| p/InterNetNews (INN)/ i/HDD full/ cpe:/a:isc:inn/\nmatch nntp m=^200 NNTP-Server Classic Hamster (?:Vr\\.|Version) \\d[-.\\w ]+ \\(Build (\\d[-.\\w ]+)\\) \\(post ok\\) says: Hi!\\r\\n= p/Classic Hamster NNTPd/ v/$1/ i/posting ok/ o/Windows/ cpe:/o:microsoft:windows/a\n# Netware News Server\nmatch nntp m|^200 ([\\w.-_]+) NetWare-News-Server/([\\d.]+) 'LDNUM' NNRP ready \\(posting ok\\)\\.\\r\\n| p/NetWare nntpd/ v/$2/ h/$1/\nmatch nntp m|^200 Leafnode NNTP daemon, version ([\\w.]+) at ([-\\w_.]+) \\r\\n| p/Leafnode nntpd/ v/$1/ h/$2/\nmatch nntp m|^\\nLeafnode must have a fully-qualified and globally unique domain name,\\nnot just \\\"([-\\w_.]+)\\\"\\.\\n| p/Leafnode nntpd/ i/misconfigured/ h/$1/\nmatch nntp m|^20\\d ([\\w.-_]+) NNTPCache server V([\\d.]+) \\[see www\\.nntpcache\\.org\\]| p/NNTPCache/ v/$2/ h/$1/\nmatch nntp m|^502 access denied <[-\\w_.]+@[-\\w_.]+>, you do not have connect permissions in the nntpcache\\.access file\\.\\r\\n| p/NNTPCache/ i/Access denied/\nmatch nntp m|^200 ([-\\w_.]+) InterNetNews NNRP server INN ([\\d.]+) .* \\(Debian\\) ready \\(posting ok\\)\\.\\r\\n| p/INN nntpd/ v/$2/ i/on Debian; posting ok/ o/Linux/ h/$1/ cpe:/a:isc:inn:$2/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch nntp m|^200 ([-\\w_.]+) InterNetNews (?:NNRP )?server INN ([\\d.]+) .* ready \\(posting ok\\)\\.\\r\\n| p/INN nntpd/ v/$2/ i/posting ok/ h/$1/ cpe:/a:isc:inn:$2/\nmatch nntp m|^201 ([-\\w_.]+) InterNetNews (?:NNRP )?server INN ([\\d.]+) .* ready \\(no posting\\)\\.\\r\\n| p/INN nntpd/ v/$2/ i/no posting/ h/$1/ cpe:/a:isc:inn:$2/\nmatch nntp m|^200 ([-\\w_.]+) InterNetNews (?:NNRP )?server INN ([\\d.]+) .* ready\\r\\n| p/INN nntpd/ v/$2/ h/$1/ cpe:/a:isc:inn:$2/\n#atch nntp m|^200 ([-\\w_.]+) InterNetNews server INN 2\\.4\\.2 \\(20040820 prerelease\\) ready\\r\\n\nmatch nntp m|^200 ([-\\w_.]+) NNRP Service Ready - [-\\w_.]+@[-\\w_.]+ \\(posting ok\\)\\.\\r\\n| p/INN nntpd/ i/posting ok/ h/$1/ cpe:/a:isc:inn/\nmatch nntp m|^200 ([-\\w_.]+) InterNetNews server INN ([\\d.]+) ready\\r\\n| p/INN nntpd/ v/$2/ h/$1/ cpe:/a:isc:inn:$2/\nmatch nntp m|^200 nntp//rss v([\\d.]+) news server ready\\r\\n| p|nntp//rss nntpd| v/$1/\nmatch nntp m|^200 Hi, you can post \\(sn version ([\\w.]+)\\)\\r\\n| p/sn nntpd/ v/$1/ i/posting ok/\nmatch nntp m|^200 ([-\\w_.]+) NNTP Service Ready, posting permitted\\r\\n| p/JAMES nntpd/ i/posting ok/ h/$1/\nmatch nntp m|^200 Jana news server ready - posting allowed\\r\\n| p/Jana nntpd/ i/posting ok/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch nntp m|^200 NNTP server NOFFLE ([\\w.]+)\\r\\n| p/NOFFLE nntpd/ v/$1/\nmatch nntp m|^200 Servizio NNTP [\\d.]+ Version: ([\\d.]+) Posting Allowed \\r\\n| p/Servizio nntpd/ v/$1/ i/posting ok/\nmatch nntp m|^502 Could not get your access name\\.  Goodbye\\.\\r\\n| p/inn2 nntpd/ i/unauthorized/\nmatch nntp m|^201 NNTP server ready \\(no posting\\)\\r\\n502 No permission\\r\\n| p/Symantec Enterprise Firewall nntpd/ i/unauthorized/ d/firewall/ cpe:/a:symantec:enterprise_firewall/\nmatch nntp m|^502 ([-\\w_.]+): Transfer permission denied to [\\d.]+ - [-\\w_.@]+ \\(DIABLO ([-\\w_.]+)\\)\\r\\n| p/Diablo nntpd/ v/$2/ o/Unix/ h/$1/\nmatch nntp m|^200 ([-\\w_.]+) - colobus ([\\d.]+) ready - \\(posting ok\\)\\.\\r\\n| p/Colobus nntpd/ v/$2/ i/posting ok/ h/$1/\nmatch nntp m|^200 Welcome to .* \\(Typhoon v([\\d.]+)\\)\\r\\n| p/Typhoon nntpd/ v/$1/\nmatch nntp m|^200 +Kerio MailServer ([\\w._-]+) +NNTP server ready\\r\\n| p/Kerio MailServer nntpd/ v/$1/\nmatch nntp m|^200 Kerio Connect ([\\w._-]+) NNTP server ready\\r\\n| p/Kerio Connect nntpd/ v/$1/ cpe:/a:kerio:connect:$1/\nmatch nntp m|^200 NewsCache ([-\\w_.]+), accepting NNRP commands\\r\\n| p/Newscache nntp cache/ v/$1/\nmatch nntp m|^200 ([\\w._-]+) Cyrus NNTP v([\\w._-]+) server ready, posting allowed\\r\\n| p/Cyrus nntpd/ v/$2/ i/posting ok/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch nntp m|^200 ([-\\w_.]+) ready for action \\(Mailtraq ([\\d.]+)/NNTP\\)\\r\\n| p/Mailtraq nntpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:mailtraq:mailtraq:$2/ cpe:/o:microsoft:windows/a\nmatch nntp m|^200 Service available, posting allowed\\r\\n| p/Freenet Message System nntpd/\nmatch nntp m|^200 ([-\\w._]+) InterNetNews NNRP server INN (.*) ready \\(posting ok\\)\\r\\n| p/InterNetNews NNRP server/ v/$2/ h/$1/ cpe:/a:isc:inn:$2/\nmatch nntp m|^200 WendzelNNTPd-OSE \\(Open Source Edition\\) ([\\w._-]+) '\\w+'  - \\([^)]+\\) ready \\(posting ok\\)\\.\\r\\n| p/WendzelNNTPd/ v/$1/\nmatch nntp m|^200 ([-\\w.]+) Lyris ListManager NNTP Service ready \\(posting ok\\)\\.\\r\\n| p/Lyris ListManager nntpd/ h/$1/\n\nmatch nntp-proxy m|^200 CCProxy NNTP Service\\r\\n| p/CCProxy NNTP proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch nntp-proxy m|^200 avast! NNTP proxy ready\\.\\r\\n$| p/Avast! anti-virus NNTP proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch nntp-proxy m|^5?02 concurrent connection limit in avast! exceeded\\(pass:\\d+, processes:([\\w._-]+)\\[\\d+\\]\\)\\r\\n| p/Avast! anti-virus NNTP proxy/ i/connection limit exceeded by $1/ o/Windows/ cpe:/o:microsoft:windows/\nmatch nntp-proxy m|^400 Cannot connect to NNTP server ([\\w.-]+) \\([^)]*\\), connect error \\d+\\r\\n| p/Avast! anti-virus NNTP proxy/ i/cannot connect to $1/ o/Windows/ cpe:/o:microsoft:windows/a\n\nsoftmatch nntp m|^200 [-\\[\\]\\(\\)!,/+:<>@.\\w ]*nntp[-\\[\\]\\(\\)!,/+:<>@.\\w ]*\\r\\n$|i\nsoftmatch nntp m=^200 .*posting(?: ok| allowed| permitted)?[ ).]*\\r\\n=i\n\nmatch novastor-backup m|^\\x02\\0\\0\\0\\0\\0\\0#\\x01\\x80\\x01.([\\w._-]+)\\x02\\x13(\\d\\d/\\d\\d/\\d\\d\\d\\d \\d\\d:\\d\\d:\\d\\d)\\0\\0|s p/NovaNET-WEB backup/ v/$1/ i/$2/\n\n# Windows 2000 Server Windows Media Unicast Service (NsUnicast) - Nsum.exe\nmatch nsunicast m|^4\\0\\0\\0V4\\x12\\0\\0\\0\\0\\0\\0\\0\\0\\x004\\0\\0\\0\\x04\\0\\xf0\\0.\\x07.\\0.\\0.\\0.\\0.\\0.\\0..\\0\\0\\0\\0.\\0\\0\\0.\\0\\0\\0\\x02\\0|s p/Microsoft Windows Media Unicast Service/ i/nsum.exe/ o/Windows/ cpe:/a:microsoft:windows_media_services/ cpe:/o:microsoft:windows/a\nmatch nsunicast m|^[4f]\\0\\0\\0V4\\x12\\0\\0\\0\\0\\0\\0\\0\\0\\x00[4f]\\0\\0\\0.\\0\\xf0\\0\\xd3\\x07\\t\\0.\\0.\\0.\\0.\\0.\\0..\\0\\0\\0\\0.\\0\\0\\0..\\0\\0.\\0|s p/Microsoft Windows Media Unicast Service/ i/nsum.exe/ o/Windows/ cpe:/a:microsoft:windows_media_services/ cpe:/o:microsoft:windows/a\n\nmatch netsupport m|^.\\0\\x02\\0([^\\0]+)\\0+.\\0\\x01\\0|s p/NetSupport PC remote control/ i/Name $1/\n\n# daemonu.exe\nmatch nvidia-update m|^HTTP 400 Bad request\\n\\nError Nr: 12\\n$| p/Nvidia Update Service Daemon/ v/1.8.15.0/\n\nmatch oftp m|^\\x10\\0\\0\\x17IODETTE FTP READY \\r$| p/ODETTE File Transfer Protocol/\n\nmatch oo-defrag m|^\\x99\\0\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\xb9\\x08\\0\\0\\x02\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0N\\x06\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\n\\x0b\\0\\0\\0\\xe8\\xff\\x01\\0\\x95\\x8a\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x12\\0\\0\\0 o\\0\\0\\x13\\0\\0\\0p\\0\\0\\0\\xf5\\x01\\0\\0\\x8c\\x02\\0\\0\\x1c\\x01\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0gM1\\x06\\0\\0\\0\\0\\x01\\0\\0\\0gM1\\x06\\0\\0\\0\\0\\x98\\xadm\\t\\0\\0\\0\\0\\x02\\0\\0\\0\\xff\\xfa\\x9e\\x0f\\0\\0\\0\\0\\0\\xff\\r\\x06\\0\\0\\0\\0\\x99\\0\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\xb9\\x08\\0\\0\\x02\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0N\\x06\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\x04\\x0b\\0\\0\\0\\xe8\\xff\\x01\\0\\x95\\x8a\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x12\\0\\0\\0!o\\0\\0\\x13\\0\\0\\0p\\0\\0\\0\\xf5\\x01\\0\\0\\x8c\\x02\\0\\0\\x1c\\x01\\0\\0\\0\\0\\0\\0\\x03\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0gM1\\x06\\0\\0\\0\\0\\x01\\0\\0\\0gM1\\x06\\0\\0\\0\\0\\x98\\xadm\\t\\0\\0\\0\\0\\x02\\0\\0\\0\\xff\\xfa\\x9e\\x0f\\0\\0\\0\\0\\0\\xff\\r\\x06\\0\\0\\0\\0\\x99\\0\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\xb9\\x08\\0\\0\\x02\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0o\\x0e\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\n\\x0b\\0\\0\\0\\xe8\\xff\\x01\\0\\x95\\x8a\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x12\\0\\0\\0 o\\0\\0\\x13\\0\\0\\0p\\0\\0\\0\\xf5\\x01\\0\\0\\x8c\\x02\\0\\0\\x1c\\x01\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0gM1\\x06\\0\\0\\0\\0\\x01\\0\\0\\0gM1\\x06\\0\\0\\0\\0\\x98\\xadm\\t\\0\\0\\0\\0\\x02\\0\\0\\0\\xff\\xfa\\x9e\\x0f\\0\\0\\0\\0\\0\\xff\\r\\x06\\0\\0\\0\\x006\\x01\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\x07\\x08\\0\\0\\x02\\0\\0\\0\\x07\\x052Q\\0\\0L\\^\\x03\\0\\0\\0\\0\\0\\xa2\\x88\\0\\0\\0\\0\\0\\0\\xd9\\xe6\\x03\\0\\0\\0\\0\\0\\xb9\\x02\\0\\0\\0\\0\\0\\0\\x0e\\x0b\\0\\0\\0\\0\\0\\0\\)\\xb8\\x02\\0\\0\\0\\0\\0\\xed\\x07\\x95\\?\\0\\0C\\xad/\\+i\\0t\\r\\0\\0\\0\\0\\0\\0{{\\x16\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\xd0\\0\\0\\0((?:[^\\0]\\0)+)\\0\\x006\\x01\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\x07\\x08\\0\\0\\x02\\0\\0\\0\\x07\\x052Q\\0\\0L\\^\\x03\\0\\0\\0\\0\\0\\xa2\\x88\\0\\0\\0\\0\\0\\0\\xd9\\xe6\\x03\\0\\0\\0\\0\\0\\xb9\\x02\\0\\0\\0\\0\\0\\0\\x0e\\x0b\\0\\0\\0\\0\\0\\0\\)\\xb8\\x02\\0\\0\\0\\0\\0\\xed\\x07\\x95\\?\\0\\0C\\xad/\\+i\\0t\\r\\0\\0\\0\\0\\0\\0{{\\x16\\x05\\0$|s p/O&O Defrag Professional/ v/15/ i/path: $P(1)/\n\n# https://wiki.wireshark.org/OpenFlow\n# 4-byte TXID is random in OpenDaylight, sequential in POX, and decrementing from 0xFFFFFFFF in floodlight.\n# An extension may or may not be sent, account for both cases.\nmatch openflow m|^\\x06\\0\\0(?:\\x10....\\0\\x01\\0)?\\x08....$|s p/OpenFlow/ v/1.5.x/\nmatch openflow m|^\\x05\\0\\0(?:\\x10....\\0\\x01\\0)?\\x08....$|s p/OpenFlow/ v/1.4.x/\nmatch openflow m|^\\x04\\0\\0(?:\\x10....\\0\\x01\\0)?\\x08....$|s p/OpenFlow/ v/1.3.x/\nmatch openflow m|^\\x03\\0\\0(?:\\x10....\\0\\x01\\0)?\\x08....$|s p/OpenFlow/ v/1.2/\nmatch openflow m|^\\x02\\0\\0(?:\\x10....\\0\\x01\\0)?\\x08....$|s p/OpenFlow/ v/1.1/\nmatch openflow m|^\\x01\\0\\0(?:\\x10....\\0\\x01\\0)?\\x08....$|s p/OpenFlow/ v/1.0/\n\nmatch openfpc m|^OFPC READY\\n$| p/OpenFPC packet capture/\n\n# http://any.openlookup.net:5851/\nmatch openlookup m|^\\d+:d7:smethod,6:shello,8:soptions,\\d+:d10:shttp_port,\\d+:i\\d+,5:sname,\\d+:s([\\w._-]+),10:ssync_port,\\d+:i\\d+,10:stimestamp,\\d+:f\\d+(?:\\.\\d+),8:sversion,\\d+:s([\\w._-]+),$| p/OpenLookup/ v/$2/ h/$1/\nmatch openlookup m|^\\d+:d7:smethod,6:shello,8:soptions,\\d+:d10:shttp_port,\\d+:i\\d+,10:ssync_port,\\d+:i\\d+,10:stimestamp,\\d+:f\\d+(?:\\.\\d+),8:sversion,\\d+:s([\\w._-]+),\\d+:syour_address,\\d+:a\\d+:s[\\w._-]+,\\d+:i\\d+,,,,$| p/OpenLookup/ v/$1/\n\nmatch openttd m|^\\x04\\0\\x03\\x11$| p/OpenTTD gameserver/ cpe:/a:openttd:openttd/\n\nsoftmatch openwebnet m|^\\*#\\*1##|\n\nmatch ovhcheckout m|^200 OK [\\d.]+ ([\\w._-]+) oco-([\\w._-]+) \\n$| p/OVH OvhCheckOut/ v/$2/ h/$1/\n\nmatch palace m|^ryit\\0\\0\\0\\0....$|s p/The Palace chat/ cpe:/a:time_warner_interactive:the_palace/\n\n# Version: 7.0.6-4\nmatch paloalto-agent m|^PTA\\0\\0\\0\\x03\\0 \\0\\0\\0\\0\\0\\0\\$\\0\\0\\0\\x0f\\0\\0N \\0\\0\\x9c\\?\\0\\0\\0\\xc8\\0\\0\\x07\\xd0\\0\\0\\0d\\0\\0N \\0\\0\\0\\0\\r\\0\\0\\0PTA\\0\\0\\0\\x03\\0!\\0\\0\\0\\0\\0\\0\\x08\\0\\0\\0\\x08\\0\\0\\0\\0| p/Palo Alto Networks Terminal Services agent/ cpe:/a:paloaltonetworks:terminal_services_agent/\n\n# Parallels Server and Desktop, so can't do a CPE?\nmatch parallels-server m|^PRLT\\x06\\0.\\0([\\w._-]+) \\((\\w\\w\\w, \\d\\d \\w\\w\\w \\d\\d\\d\\d \\d\\d:\\d\\d:\\d\\d)\\)\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0*$| p/Parallels dispatcher service/ v/$1/ i/build date: $2/\n\n# *B1E1 is magic. Protocol implementation at\n# http://www.papouch.com/shop/scripts/soft/tmedotnet/readme.asp\nmatch papouch-tme m|^\\*B1E1([\\+-]\\d\\d\\d\\.\\d)\\r$| p/Papouch TME Ethernet thermometer/ i/temperature: $1 C/\n\nmatch partimage m|^([\\d.]+) SSL(?: LOG)?\\0            +\\0$| p/Partimage+SSL/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch patrol m|^\\0\\0\\0\\r..Who are you\\?\\n\\0|s p/BMC Patrol Agent/ o/Unix/ cpe:/a:bmc:patrol_agent/\nmatch pcanywheredata m|^\\0X\\x08\\0\\}\\x08\\r\\n\\0\\.\\x08.*\\.\\.\\.\\r\\n|s p/Symantec pcAnywhere/ o/Windows/ cpe:/a:symantec:pcanywhere/ cpe:/o:microsoft:windows/a\nmatch perfd m|^Welcome to the perfd server\\. Hit <RETURN> to continue\\.\\n| p/HP System Performance Metric Service/\nmatch pbmasterd m|^pbmasterd(\\d[-.\\w]+)@[-.+\\w]+: | p/Symark Power Broker pbmasterd/ v/$1/ i/privilege separation software/\nmatch pblocald m|^pblocald(\\d[-.\\w]+)@[-.+\\w]+: | p/Symark Power Broker pblocald/ v/$1/ i/privilege separation software/\nmatch p4d m|^..\\0\\0\\0xfiles\\0\\x01\\0\\0\\x005\\0server\\0\\x01\\0\\0\\x003\\0server2\\0\\x02\\0\\0\\x00..\\0|s p/Perforce configuration daemon/\nmatch pgas m|^PGAS..\\0\\0$|s p/QPR PGApplication Server/ cpe:/a:qpr:qpr_suite/\n# Pharos Notify 7.1\nmatch pharos m|^PSCOM[\\xb4\\xb6\\$]\\0\\0.*AUTHENTICATE|s p/Pharos Notify/ i/printing client/\nsoftmatch pi-hole-stats m|^unknown command: .*---EOM---\\n\\n$|s p/pi-hole Telnet API/ cpe:/a:pi-hole:pi-hole/\n# http://www.masnun.com/2014/02/23/using-phpstorm-from-command-line.html\nmatch pjlink m|^PJLINK 0\\r$| p/PJLink projector control/ d/media device/\nmatch pjlink m|^PJLINK 1 [0-9a-f]{8}\\r$| p/PJLink projector control/ d/media device/\n\nmatch poweroff m|^201 Welcome to Poweroff ([\\d.]+) created by Jorgen Bosman\\r\\n| p/Poweroffd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch prelude-manager m|^\\x01\\x04\\0\\0\\0\\0\\0\\rD| p/Prelude IDS manager/\nmatch polycom-mgc m|^NotAuthorized\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Polycom VSX 8000 MGC Manager/ d/webcam/\n\nmatch pyro m|^PYRO\\0\\x04\\0\\x12\\0\\0\\0\\x10\\0\\0\\0\\0\\0\\0| p/Python Remote Object Nameserver/ i/protocol version 4/\nmatch pyro m|^PYRO\\0\\x05\\0\\x12\\0\\0\\0\\x10\\0\\0\\0\\0\\0\\0| p/Python Remote Object Nameserver/ i/protocol version 5/\n\n# Unfortunately, no authkey comes up tcpwrapped :( Need a good probe or NSE script.\nmatch python-mp m|^\\0\\0\\0\\x1f#CHALLENGE#.{20}| p/Python multiprocessing.connection.Listener/ i/authkey set/ cpe:/a:python:python/\n\nmatch pksd m|^usage: [/\\w]*/etc/pksd\\.conf conf_file\\n$| p/PGP Public Key Server/ i/broken/ cpe:/a:mit:pgp_public_key_server/\n\nmatch pioneers m|^version report\\n| p/Pioneers game server/\nmatch pioneers-meta m|^welcome to the pioneers-meta-server version ([\\d.]+)\\n| p/Pioneers game meta server/ v/$1/\n\n# UW POP2 server on Linux 2.4.18\nmatch pop2 m|^\\+ POP2 \\[[\\d.]+\\] v([\\w._-]+) server ready\\r\\n$| p/UW POP2 server/ v/$1/ cpe:/a:uw:imap_toolkit:$1/\nmatch pop2 m|^\\+ POP2 ([\\w._-]+)(?: \\[[\\d.]+\\])? v([\\w._-]+) server ready\\r\\n$| p/UW POP2 server/ v/$2/ h/$1/ cpe:/a:uw:imap_toolkit:$2/\nmatch pop2 m|^\\+ POP2 ([\\w._-]+) ([\\w._-]+) server ready\\r\\n$| p/UW POP2 server/ v/$2/ h/$1/ cpe:/a:uw:imap_toolkit:$2/\n\n# Novell Groupwise 6.0.1\nmatch pop3 m|^\\+OK GroupWise POP3 server ready\\r\\n$| p/Novell GroupWise pop3d/ o/Unix/ cpe:/a:novell:groupwise/\nmatch pop3 m|^\\+OK Ready when you are <200\\d+\\.| p/Hotmail Popper hotmail to pop3 gateway/\nmatch pop3 m|^\\+OK Internet Rex POP3 server ready <| p/Internet Rex Pop3 server/\nmatch pop3 m|^\\+OK DBMAIL pop3 server ready to rock <| p/DBMail pop3d/ cpe:/a:paul_j_stevens:dbmail/\nmatch pop3 m|^\\+OK POP3 POPFile \\(v(\\d[-.\\w]+)\\) server ready\\r\\n| p/POPFile pop3d/ v/$1/\n# Dots in Revision to prevent MY CVS from screwing it up\nmatch pop3 m|^\\+OK ([-.+\\w]+) NetMail POP3 Agent \\$Re..sion: ([\\d.]+) \\$\\r\\n| p/Novell NetMail pop3d/ v/$2/ o/Unix/ h/$1/ cpe:/a:novell:netmail:$2/\nmatch pop3 m|^\\+OK ([-.+\\w]+) Merak (\\d[-.\\w]+) POP3 | p/Merak Mail server pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK \\]-:\\^:-\\[ \\]-:\\^:-\\[ POP3| p/Merak Mail Server pop3d/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) [-\\w_.]+ Mail Server ([\\d.]+) POP3 .*\\d:\\d\\d:\\d\\d \\+| p/Merak Mail Server pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n# Mercury/32 3.32 pop3 Server module on Windows XP\nmatch pop3 m|^\\+OK <\\d{6,10}\\.\\d{4,6}@([-.+\\w]+)>, POP3 server ready\\.\\r\\n| p|Mercury/32 pop3d| o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n# gnu/mailutils pop3d 0.3.2 on Linux\nmatch pop3 m|^\\+OK POP3 Ready <\\d{3,6}\\.1[012]\\d{8}@([-.\\w]+)>\\r\\n| p/GNU mailutils pop3d/ h/$1/ cpe:/a:gnu:mailutils/\n# Solid POP3 Server 0.15 on Linux 2.4\nmatch pop3 m|^\\+OK Solid POP3 server ready\\r\\n| p/Solid pop3d/\nmatch pop3 m|^\\+OK Solid POP3 server ready <[\\d.]+@([\\w._-]+)>\\r\\n| p/Solid pop3d/ h/$1/\n# Cyrus POP3 v2.0.16\nmatch pop3 m|^\\+OK ([-.\\w]+) Cyrus POP3 v(\\d[-.\\w\\+]+) server ready ?\\r\\n| p/Cyrus POP3/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch pop3 m|^\\+OK  ?([-.\\w]+) Cyrus POP3 Murder v(\\d[-.\\w\\+]+) server ready ?\\r\\n| p/Cyrus POP3 Murder/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\n#  pop3d (GNU Mailutils 0.3) on Linux 2.4\nmatch pop3 m|^\\+OK POP3 Ready <\\d{3,6}\\.1[012]\\d{8}@(\\w+)>\\r\\n| p/GNU Mailutils pop3d/ h/$1/ cpe:/a:gnu:mailutils/\n# Solid POP3 Server 0.15_1 on FreeBSD\nmatch pop3 m|^\\+OK ([\\w\\d_-]+\\.[\\w\\d_.-]+) POP3 <\\d{3,6}\\.1[012]\\d{8}@[-.\\w]+>\\r\\n| p/Solid pop3d/ h/$1/\n#  pop3d (GNU Mailutils 0.3) on Linux 2.4\nmatch pop3 m|^\\+OK POP3 Ready <\\d{3,6}\\.1[012]\\d{8}@\\w+>\\r\\n| p/GNU Mailutils pop3d/ cpe:/a:gnu:mailutils/\n# dovecot 0.99.10 on Linux 2.4\nmatch pop3 m|^\\+OK [Dd]ovecot ready\\.\\r\\n| p/Dovecot pop3d/ cpe:/a:dovecot:dovecot/\nmatch pop3 m|^\\+OK dovecot MUA ready\\r\\n| p/Dovecot MUA pop3d/ cpe:/a:dovecot:dovecot/\nmatch pop3 m|^\\+OK [Dd]ovecot ready\\. ?<.*@([-\\w_.]+)>\\r\\n| p/Dovecot pop3d/ h/$1/ cpe:/a:dovecot:dovecot/\nmatch pop3 m|^\\+OK [Dd]ovecot on ([\\w._-]+) ready\\.\\r\\n| p/Dovecot pop3d/ h/$1/ cpe:/a:dovecot:dovecot/\nmatch pop3 m|^\\+OK Dovecot ready -| p/Dovecot pop3d/ cpe:/a:dovecot:dovecot/\nmatch pop3 m|^\\+OK (.*) Dovecot ready\\.\\r\\n$| p/Dovecot pop3d/ i/$1/ cpe:/a:dovecot:dovecot/\nmatch pop3 m|\\+OK E-mail server ready\\.\\r\\n| p/Dovecot pop3d/ cpe:/a:dovecot:dovecot/\nmatch pop3 m|^\\+OK Dovecot at ([-\\w_.]+) ready\\.\\r\\n| p/Dovecot pop3d/ h/$1/ cpe:/a:dovecot:dovecot/\n# teapop 0.3.5 on Linux 2.4\nmatch pop3 m|^\\+OK Teapop \\[v?(\\d[-.\\w ]+)\\] - Teaspoon stirs around again .*\\r\\n| p/Teapop pop3d/ v/$1/\n# Qpopper v4.0.5 on Linux 2.4.19\nmatch pop3 m|^\\+OK ready  \\r\\n$| p/Qpopper pop3d/\n# Jana Server 1.45 on Win98\nmatch pop3 m|^\\+OK POP3 server ready <Jana-Server>\\r\\n| p/Jana POP3 server/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK AppleMailServer (\\d[-.\\w]+) POP3 server at ([-.\\w]+) ready <\\d| p/AppleMailServer pop3d/ v/$2/ h/$1/\nmatch pop3 m|\\+OK <10\\d+\\.\\d+@([-.\\w]+)> \\[XMail (\\d[-.\\w]+) \\(([-./\\w]+)\\) POP3 Server\\] service ready; | p/XMail pop3 server/ v/$2/ o/$3/ h/$1/ cpe:/a:davide_libenzi:xmail:$2/\n# Mail-Enable pop3 server 1.704\nmatch pop3 m|^\\+OK Welcome to MailEnable POP3 Server| p/MailEnable POP3 Server/ o/Windows/ cpe:/a:mailenable:mailenable/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-.\\w]+) running Eudora Internet Mail Server (\\d[-.\\w]+) <.*>\\r\\n| p/Eudora Internet Mail Server pop3d/ v/$2/ h/$1/\n# Qpopper 4.0.3 on Linux\n# QPopper 4.0.4 FreeBSD\nmatch pop3 m|^\\+OK ready  <\\d{1,5}\\.10\\d{8}@([-.\\w]+)>\\r\\n| p/Qualcomm Qpopper pop3d/ h/$1/\nmatch pop3 m|^\\+OK POP3 Welcome to GNU POP3 Server Version (\\d[-.\\w]+) <.*>\\r\\n| p/GNU POP3 Server/ v/$1/\nmatch pop3 m|^\\+OK eXtremail V(\\d[-.\\w]+) release (\\d+) POP3 server ready <[\\d.]+@([-\\w_.]+)>\\r\\n| p/eXtremail pop3d/ v/$1 rel$2/ h/$3/\nmatch pop3 m|^\\+OK eXtremail V(\\d[-.\\w]+) release (\\d+) rev(\\d+) POP3 server ready <[\\d.]+@([-\\w_.]+)>\\r\\n| p/eXtremail pop3d/ v/$1 rel$2 rev$3/ h/$4/\nmatch pop3 m|^\\+OK POP3 Welcome to vm-pop3d (\\d[-.\\w]+)| p/vm-pop3d/ v/$1/ i/derived from gnu-pop3d/\n# tpop3d v1.4.2 on Linux - http://www.ex-parrot.com/~chris/tpop3d/\nmatch pop3 m|^\\+OK <[\\da-f]{32}@([-.\\w]+)>\\r\\n| p/tpop3d/ h/$1/\nmatch pop3 m|^\\+OK UCB based pop server \\(version (\\d[-.\\w]+) at sionisten\\) starting\\.\\r\\n| p/Heimdal kerberized pop3/ v/$1/ i/UCB-pop3 derived/\n# VPOP3 (Virtual POP3 server) 2.0.0d on Windows 2000\nmatch pop3 m|^\\+OK VPOP3 Server Ready <.*>\\r\\n| p/PSCS VPop3/\nmatch pop3 m|^\\+OK Lotus Notes POP3 server version ([-.\\w]+) ready .* on ([^/]+)/([^\\.]+)\\.\\r\\n| p/Lotus Domino POP3 server/ v/$1/ i/CN=$2;Org=$3/ cpe:/a:ibm:lotus_domino:$1/\nmatch pop3 m|^\\+OK Lotus Notes POP3 server version ([-.\\w]+) ready on | p/Lotus Domino POP3 server/ v/$1/ cpe:/a:ibm:lotus_domino:$1/\nmatch pop3 m|^\\+OK Lotus Notes POP3 server version Release ([-.\\w]+) ready on | p/Lotus Domino POP3 server/ v/$1/ cpe:/a:ibm:lotus_domino:$1/\n# hotfixes\nmatch pop3 m|^\\+OK Lotus Notes POP3 server version Release ([-.\\w]+) ([A-Z]+\\d+) ready on | p/Lotus Domino POP3 server/ v/$1/ i/$2/ cpe:/a:ibm:lotus_domino:$1/\nmatch pop3 m|^\\+OK POP3 hotwayd v(\\d[-.\\w]+) -> The POP3-HTTPMail Gateway\\.| p/hotwayd pop3d/ v/$1/\nmatch pop3 m|^\\+OK ([-.\\w]+) POP3 service \\(Netscape Messaging Server (\\d[^(]+) \\(built ([\\w ]+)\\)\\)\\r\\n| p/Netscape Messenging Server pop3/ v/$2/ i/built on $3/ h/$1/ cpe:/a:netscape:messaging_server:$2/\nmatch pop3 m|^\\+OK ([-.\\w]+) Cyrus POP3 v(\\d[-.\\w]+) server ready <| p/Cyrus pop3d/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch pop3 m|^\\+OK ([-.\\w]+) Cyrus POP3 v(\\d[-.\\w]+)-Red Hat [-\\d.]+ server ready <| p/Cyrus pop3d/ v/$2/ i/Red Hat/ o/Linux/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/ cpe:/o:linux:linux_kernel/a\nmatch pop3 m|^\\+OK ([-.\\w]+) Cyrus POP3 v(\\d[-.\\w]+)-OS X ([\\d.]+) server ready <| p/Cyrus pop3d/ v/$2/ i/Mac OS X $3/ o/Mac OS X/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/ cpe:/o:apple:mac_os_x/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) Cyrus POP3 v(\\S+?)[-_]?Debian\\S+ server ready| p/Cyrus pop3d/ v/$2/ i/Debian/ o/Linux/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch pop3 m|^\\+OK <[\\d.]+@([\\w._-]+)> [\\w._-]+ Cyrus POP3 v([\\w._-]+) server ready\\r\\n| p/Cyrus pop3d/ v/$2/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/\nmatch pop3 m|^\\+OK X1 NT-POP3 Server ([-\\w.]+) \\(IMail ([^)]+)\\)\\r\\n| p/IMail pop3d/ v/$2/ h/$1/ cpe:/a:ipswitch:imail:$2/\nmatch pop3 m|^\\+OK POP3 \\[cppop (\\d[^]]+)\\] at \\[| p/cppop pop3d/ v/$1/\nmatch pop3 m|^\\+OK POP3 ([-\\w_.]+) \\[cppop (\\d[^]]+)\\] at \\[| p/cppop pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK Gpop ready for requests from [\\d\\.]+ ([\\w\\d]+)| p/Google Gmail pop3d/ i/$1/\n\n# MS Exchange\nmatch pop3 m|^\\+OK Microsoft Exchange Server 2003 POP3 server version ([\\d.]+) \\(([-\\w_.]+)\\) ready\\.\\r\\n| p/Microsoft Exchange 2003 pop3d/ v/$1/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2003/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Microsoft Exchange 2000 POP3 server version (\\S+).* ready\\.\\r\\n| p/Microsoft Exchange 2000 pop3d/ v/$1/ o/Windows/ cpe:/a:microsoft:exchange_server:2000/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Microsoft Exchange POP3 server version (\\S+) ready\\r\\n| p/Microsoft Exchange pop3d/ v/$1/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Microsoft Exchange POP3 server version ([\\d.]+) ready  <[\\d.]+@([-\\w_.]+)>\\r\\n| p/Microsoft Exchange pop3d/ v/$1/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Der Microsoft Exchange POP3-Server \\(Version ([\\d\\.]+)\\) ist betriebsbereit\\.\\r\\n| p/Microsoft Exchange pop3d/ v/$1/ i/German/ o/Windows/ cpe:/a:microsoft:exchange_server::::de/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Der Microsoft Exchange Server 2003 POP3-Server, Version ([\\d.]+) \\(([-\\w_.]+)\\), steht zur Verf\\xfcgung\\.\\r\\n| p/Microsoft Exchange 2003 pop3d/ v/$1/ i/German/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2003:::de/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Microsoft Exchange Server 2003 POP3 \\xb7\\xfe\\xce\\xf1\\xc6\\xf7\\xb0\\xe6\\xb1\\xbe ([\\d.]+) \\(([-\\w_.]+)\\)| p/Microsoft Exchange 2003 pop3d/ v/$1/ i/Chinese/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2003:::zh/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Microsoft Exchange Server 2003 POP3 \\xbc\\xad\\xb9\\xf6 \\xb9\\xf6\\xc0\\xfc ([\\d.]+) \\(([-\\w_.]+)\\)| p/Microsoft Exchange 2003 pop3d/ v/$1/ i/Korean/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2003:::ko/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Microsoft Exchange POP3-server versie ([\\d.]+) is gereed\\.\\r\\n| p/Microsoft Exchange pop3d/ v/$1/ i/Dutch/ cpe:/a:microsoft:exchange_server::::nl/\nmatch pop3 m|^\\+OK \\xd1\\xe5\\xf0\\xe2\\xe5\\xf0 Microsoft Exchange POP3 \\xe2\\xe5\\xf0\\xf1\\xe8\\xe8 ([\\d.]+)  \\xe3\\xee\\xf2\\xee\\xe2\\r\\n| p/Microsoft Exchange pop3d/ v/$1/ i/Russian/ cpe:/a:microsoft:exchange_server::::ru/\nmatch pop3 m|^\\+OK Microsoft Exchange POP3 kiszolg\\xe1l\\xf3 verzi\\xf3 ([\\d.]+) k\\xe9sz\\r\\n| p/Microsoft Exchange pop3d/ v/$1/ i/Hungarian/ cpe:/a:microsoft:exchange_server::::hu/\nmatch pop3 m|^\\+OK Le serveur POP3 Microsoft Exchange Server 2003 version ([\\d.]+) \\(([-\\w_.]+)\\) est pr\\xeat\\.\\r\\n| p/Microsoft Exchange 2003 pop3d/ v/$1/ i/French/ h/$2/ cpe:/a:microsoft:exchange_server:2003:::fr/\nmatch pop3 m|^\\+OK Le serveur POP3 Microsoft Exchange version ([\\d.]+) est pr\\xeat\\r\\n| p/Microsoft Exchange pop3d/ v/$1/ i/French/ cpe:/a:microsoft:exchange_server::::fr/\nmatch pop3 m|^\\+OK Microsoft Exchange POP3 server verze ([\\d.]+) je p\\xf8ipraven\\.\\r\\n| p/Microsoft Exchange pop3d/ v/$1/ i/Czech/ o/Windows/ cpe:/a:microsoft:exchange_server::::cs/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Microsoft Exchange Server 2003 POP3 \\xa6\\xf8\\xaaA\\xbe\\xb9\\xaa\\xa9\\xa5\\xbb ([\\d.]+) \\(([-\\w_.]+)\\) \\xa5i\\xa5H\\xa8\\xcf\\xa5\\xce\\xa1C\\r\\n| p/Microsoft Exchange 2003 pop3d/ v/$1/ i/Chinese (Traditional)/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2003:::zh_tw/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Servidor POP3 de Microsoft Exchange Server 2003 versi\\xf3n ([\\d.]+) \\(([\\w._-]+)\\) listo\\.\\r\\n| p/Microsoft Exchange 2003 pop3d/ v/$1/ i/Spanish/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2003:::es/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Server POP3 di Microsoft Exchange Server 2003 versione ([\\w._-]+) \\(([\\w._-]+)\\) pronto\\.\\r\\n| p/Microsoft Exchange 2003 pop3d/ v/$1/ i/Italian/ o/Windows/ h/$2/ cpe:/a:microsoft:exchange_server:2003:::it/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Microsoft Exchange Server 2007 POP3 service ready\\r\\n| p/Microsoft Exchange 2007 pop3d/ o/Windows/ cpe:/a:microsoft:exchange_server:2007/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Microsoft Exchange Server 2007 POP3 HIROC service ready\\r\\n| p/Microsoft Exchange 2007 pop3d/ o/Windows/ cpe:/a:microsoft:exchange_server:2007/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK The Microsoft Exchange POP3 service is ready\\.\\r\\n| p/Microsoft Exchange 2007-2010 pop3d/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\n\nmatch pop3 m|^\\+OK QPOP \\(version ([^)]+)\\) at .*starting\\.| p/Qpop pop3d/ v/$1/\nmatch pop3 m|^\\+OK QPOP Modified by Compaq \\(version ([^)]+)\\) at .*starting\\.| p/QPop pop3d/ v/$1/\nmatch pop3 m|^\\+OK Qpopper .*\\(version ([^)]+)\\) at .*starting\\.| p/Qpopper pop3d/ v/$1/\nmatch pop3 m|^\\+OK ([-.\\w]+) POP3 server \\(Netscape Mail Server v(\\d[-.\\w])\\) ready| p/Netscape Mail Server pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK Cubic Circle's v(\\d[-.\\w]+) .* POP3 ready| p/Cubic Circle Cucipop pop3d/ v/$1/\nmatch pop3 m|^\\+OK ArGoSoft Mail Server Freeware, Version \\S+ \\(([^)]+)\\)\\r\\n$| p/ArGoSoft freeware pop3d/ v/$1/\nmatch pop3 m|^\\+OK ArGoSoft Mail Server, Version [-.\\w]+ \\(([-.\\w]+)\\)\\r\\n$| p/ArGoSoft Mail Server pop3d/ v/$1/\nmatch pop3 m|^\\+OK ArGoSoft Mail Server POP3 Module v\\.([\\w._-]+) at | p/ArGoSoft Mail Server pop3d/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ArGoSoft Mail Server Pro for WinNT/2000/XP, Version [-.\\w]+ \\(([-.\\w]+)\\)\\r\\n$| p/ArGoSoft Mail Server Pro pop3d/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w.]+) ArGoSoft Mail Server Pro for WinNT/2000/XP, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft Pro/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ArGoSoft Mail Server Plus for WinNT/2000, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft Plus/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-.\\w]+) Execmail POP3 \\((\\d[^)]+)\\)| p/Execmail pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK MailSite POP3 Server (\\S+) Ready <| p/MailSite pop3d/ v/$1/\nmatch pop3 m|^\\+OK ([-.\\w]+) POP3? MDaemon (\\S+) ready <MDAEMON| p/MDaemon pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-.\\w]+) POP3? MDaemon ready using UNREGISTERED SOFTWARE ([\\d.]+) <MDAEMON| p/MDaemon pop3d/ v/$2/ i/unregistered/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP MDaemon ([\\d.]+) listo <MDAEMON-[\\w.]+@[-\\w_.]+>\\r\\n| p/MDaemon pop3d/ v/$2/ i/Spanish/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2:::es/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP MDaemon ([\\d.]+) \\xd7\\xbc\\xb1\\xb8\\xba\\xc3 <MDAEMON-[\\w.]+@[-\\w_.]+>\\r\\n| p/MDaemon pop3d/ v/$2/ i/Chinese/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2:::zh/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP MDaemon ([\\d.]+) ready\\r\\n| p/MDaemon pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2/ cpe:/o:microsoft:windows/a\n\n# qmail-pop3d 1.03-1\nmatch pop3 m|^\\+OK <\\d{1,5}\\.10\\d{8}@[-.\\w]+>\\r\\n$| p/qmail-pop3d/ o/Unix/ cpe:/a:djb:qmail/\n# Courier Pop3 courier-pop3d-0.42.0-1.7.3\nmatch pop3 m|^\\+OK Hello there\\.\\r\\n$| p/Courier pop3d/\nmatch pop3 m|^\\+OK Hello there\\. <[\\d.]+@([-\\w_.]+)>\\r\\n$| p/Courier pop3d/ h/$1/\nmatch pop3 m|^\\+OK ([-.\\w]+) VisNetic.MailServer.v([-.\\w]+) POP3 | p/VisNetic MailServer pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK ([-.\\w]+) POP3 server \\(Post\\.Office v([-.\\w]+) release ([-.\\w]+) with ZPOP version ([-.\\w]+)| p/Post.Office pop3d/ v/$2 release $3/ i|w/ZPOP $4| h/$1/\nmatch pop3 m|^\\+OK CommuniGate Pro POP3 Server ([-.\\w]+) ready| p/CommuniGate Pro/ v/$1/ cpe:/a:stalker:communigate_pro:$1/\nmatch pop3 m|^\\+OK CommuniGate Pro POP3 Server ready <[\\d.]+@([-\\w_.]+)>\\r\\n| p/CommuniGate Pro/ h/$1/ cpe:/a:stalker:communigate_pro/\nmatch pop3 m|^\\+OK\\r\\n$| p/Openwall popa3d/\nmatch pop3 m|^\\+OK ([-.\\w]+) MultiNet POP3 Server Process V(\\S+) at| p/DEC OpenVMS MultiNet pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK <.*>, MercuryP/NLM v(\\d[-.\\w]+) ready.\\r\\n$| p/Mercury POP3 server/ v/$1/ o/NetWare/ cpe:/o:novell:netware/a\nmatch pop3 m|^\\+OK Microsoft Windows POP3 Service Version 1.0 <| p/Microsoft Windows 2003 POP3 Service/ v/1.0/ o/Windows 2000/ cpe:/o:microsoft:windows_2000/\nmatch pop3 m|^\\+OK POP3 ([-.\\w]+) v?(200\\d\\w?\\.[-.\\w]+) server ready\\r\\n| p/UW Imap pop3d/ v/$2/ h/$1/ cpe:/a:uw:imap_toolkit:$2/\nmatch pop3 m|^\\+OK POP3 v?([\\d.]+) server ready <[\\w.]+@([-\\w_.]+)>\\r\\n| p/UW Imap pop3d/ v/$1/ h/$2/ cpe:/a:uw:imap_toolkit:$1/\nmatch pop3 m|^\\+OK POP3 \\[([-\\w_.]+)\\] v([\\d.]+) server ready\\r\\n| p/UW Imap pop3d/ v/$2/ h/$1/ cpe:/a:uw:imap_toolkit:$2/\nmatch pop3 m|^\\+OK POP3 server ready <\\w{11}>\\r\\n$| p/WebSTAR pop3 server/\nmatch pop3 m|^\\+OK Kerio MailServer (\\d[-.\\w]+) POP3 server ready <([-.\\w@:]+)>\\r\\n$| p/Kerio MailServer POP3 Server/ v/$1/ i/$2/\nmatch pop3 m|^\\+OK Kerio MailServer (\\d[-.\\w]+) POP3 server ready <| p/Kerio MailServer POP3 Server/ v/$1/\nmatch pop3 m|^\\+OK Kerio MailServer (\\d[-.\\w]+) patch ([\\d.]+) POP3 server ready <[\\d.]+@\\(null\\)>\\r\\n| p/Kerio MailServer POP3 Server/ v/$1 patch $2/\nmatch pop3 m|^\\+OK Kerio MailServer (\\d[-.\\w]+) patch ([\\d.]+) POP3 server ready <[\\d.]+@([-\\w_.]+)>\\r\\n| p/Kerio MailServer POP3 Server/ v/$1 patch $2/ h/$3/\nmatch pop3 m=^\\+OK POP3-Server Classic Hamster (?:Vr\\.|Version) [\\d.]+ \\(Build ([\\d.]+)\\) greets you! <.*>\\r\\n= p/Classic Hamster pop3d/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Stalker POP3 Server ([\\w.]+) at ([-\\w_.]+) ready <.*>\\r\\n| p/Stalker pop3d/ v/$1/ o/Mac OS/ h/$2/ cpe:/o:apple:mac_os/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP3 service \\(iPlanet Messaging Server ([-\\w_.\\s]+) \\(built .*\\)\\)\\r\\n| p/iPlanet pop3d/ v/$2/ h/$1/ cpe:/a:sun:iplanet_messaging_server:$2/\nmatch pop3 m|^\\+OK Messaging Multiplexor \\(iPlanet Messaging Server ([-\\w_.\\s]+) \\(built .*\\)\\)\\r\\n| p/iPlanet messaging multiplexor/ v/$1/ cpe:/a:sun:iplanet_messaging_server:$1/\nmatch pop3 m|^\\+OK WinGate Engine POP3 Gateway ready\\r\\n| p/WinGate pop3d/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) Oracle Email Server espop3\\t([\\d.]+) \\t  is ready\\r\\n| p/Oracle pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK InterMail POP3 server ready\\.\\r\\n| p/InterMail pop3d/\nmatch pop3 m|^\\+OK WinRoute Pro ([\\d.]+) POP3 server ready <[-\\w_.]+@unspecified.host>\\r\\n| p/WinRoute Pro pop3/ v/$1/\nmatch pop3 m|^\\+OK WinRoute Pro ([\\d.]+) POP3 server ready <[-\\w_.]+@([-\\w_.]+)>\\r\\n| p/WinRoute Pro pop3/ v/$1/ h/$2/\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP3 server \\(Netscape Messaging Server - Version ([\\d.]+)\\) ready .*\\r\\n| p/Netscape Messaginging Server pop3d/ v/$2/ h/$1/ cpe:/a:netscape:messaging_server:$2/\nmatch pop3 m|^\\+OK [-\\w_.]+ PopMax version ([\\d. ]+) POP3 Mail Server Ready, Willing, and Waiting\\r\\n| p/MailMax PopMax pop3d/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3 Welcome to GNU POP3 ([-\\d.]+) <[\\d.]+@([-\\w_.]+)>\\r\\n| p/GNU POP3/ v/$1/ h/$2/\nmatch pop3 m|^\\+OK popserver ([\\d.]+) pop3 server ready\\r\\n| p/LiberoPops pop3d/ v/$1/\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP3 server \\(JAMES POP3 Server ([\\w.]+)\\) ready \\r\\n| p/JAMES pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK ([-\\w_.]+) NetMail POP3 Agent \\$R...sion:   ([\\d.]+)  \\$\\r\\n| p/NetMail pop3d/ v/$2/ h/$1/ cpe:/a:novell:netmail:$2/\nmatch pop3 m|^\\+OK POP3 server ready \\(Worldmail ([\\d.]+)\\) <[\\w.]+@([-\\w_.]+)>\\r\\n| p/Eudora Worldmail pop3d/ v/$1/ o/Windows/ h/$2/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP3 WorkgroupMail ([\\d.]+) .*\\r\\n| p/WorkgroupMail pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3 server ready \\(LSMTP v([\\w.]+)\\) <[\\w.]+@([-\\w_.]+)>\\r\\n| p/LSMTP pop3d/ v/$1/ h/$2/\nmatch pop3 m|^\\+OK ([-\\w_.]+) Mirapoint POP3 ([\\d.]+) server ready\\r\\n| p/Mirapoint RazorGate pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK K9 - ([\\d.]+) - http://keir\\.net ready <[\\w.]+>\\r\\n| p/K9 pop3d from keir.net/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3 server ready QuickMail Pro Server for MacOS ([\\d.]+) <[\\w.]+@([-\\w_.]+)>\\r\\n| p/QuickMail Pro pop3d/ v/$1/ o/Mac OS/ h/$2/ cpe:/o:apple:mac_os/a\nmatch pop3 m|^\\+OK ready\\r\\n| p/602LAN Suite pop3/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK DvISE Mail Access Server Server ready \\(Tobit Software, Germany\\)\\r\\n| p/Tobit DvISE pop3d/\nmatch pop3 m|^\\+OK David\\.fx Mail Access Server ready \\(Tobit\\.Software, Germany\\)\\r\\n| p/Tobit David.fx pop3d/\nmatch pop3 m|^\\+OK POP3 ([-\\w_.]+) \\(Version ([-\\w.]+)\\) http://surgemail\\.com\\r\\n| p/SurgeMail pop3d/ v/$2/ h/$1/ cpe:/a:netwin:surgemail:$2/\nmatch pop3 m|^\\+OK ([-\\w_.]+) running Eudora Internet Mail Server X ([\\d.]+) <| p/Eudora Internet Mail Server X pop3d/ v/$2/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch pop3 m|^\\+OK <[\\d.]+@([-\\w_.]+)> \\[XMail ([\\d.]+) POP3 Server\\] service ready; | p/XMail pop3d/ v/$2/ h/$1/ cpe:/a:davide_libenzi:xmail:$2/\nmatch pop3 m|^\\+OK <[\\d.]+@([-\\w_.]+)> \\[XMail ([\\d.]+) \\(Linux/Ix86\\) POP3 Server\\] service ready; | p/XMail pop3d/ v/$2/ o/Linux/ h/$1/ cpe:/a:davide_libenzi:xmail:$2/ cpe:/o:linux:linux_kernel/a\nmatch pop3 m|^\\+OK Samsung Contact POP3 interface ready on: ([-\\w_.]+)\\r\\n| p/Samsung Contact pop3d/ h/$1/\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP3 service \\(Sun Java\\(tm\\) System Messaging Server ([-\\d.]+) \\(built .*\\)| p/Sun Java System Messaging Server pop3d/ v/$2/ h/$1/ cpe:/a:sun:java_system_messaging_server:$2/\nmatch pop3 m|^\\+OK Messaging Multiplexor \\(Sun Java\\(tm\\) System Messaging Server (\\d[-\\w_.]+) \\(built .*\\)\\)\\r\\n| p/Sun Java System Messaging Multiplexor pop3d/ v/$1/ cpe:/a:sun:java_system_messaging_server:$1/\nmatch pop3 m|^\\+OK POP3 Greetings from minipop ([\\d.]+) <[\\d.]+@([-\\w_.]+)>\\r\\n| p/minipop pop3d/ v/$1/ h/$2/\nmatch pop3 m|^\\+OK Hermes ([\\w. ]+) POP3 Ready\\. <[\\d.]+@([-\\w_.]+)>\\r\\n| p/Hermes pop3d/ v/$1/ o/Windows/ h/$2/ cpe:/o:microsoft:windows/a\nmatch pop3 m=^\\+OK (?:modusMail|ModusMail) POP3 Server ([\\w._-]+) Ready <[\\d.]+@([-\\w_.]+)>\\r\\n= p/ModusMail pop3d/ v/$1/ o/Windows/ h/$2/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP3 server \\(DeskNow POP3 Server ([\\d.]+)\\) ready \\r\\n| p/DeskNow pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK POP3 SINA \\(([-\\d.]+)\\) Server Ready\\r\\n| p/SINA pop3d/ v/$1/\nmatch pop3 m|^\\+OK ([-\\w_.]+) SpearMail POP3 server ready\\r\\n| p/Spearmail pop3d/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK SCO POP3 server \\(version ([-\\w.]+)\\) at ([-\\w_.]+) starting\\.\\r\\n| p/SCO pop3d/ v/$1/ o/SCO UNIX/ h/$2/ cpe:/o:sco:sco_unix/a\nmatch pop3 m|^\\+OK QPOP modified by SCO \\(version ([-\\w.]+)\\) at ([-\\w_.]+) starting\\.  \\r\\n| p/SCO-modified QPOP pop3d/ v/$1/ o/SCO UNIX/ h/$2/ cpe:/o:sco:sco_unix/a\nmatch pop3 m|^\\+OK POP3 on WebEasyMail \\[([\\d.]+)\\] ready\\.  http://www\\.51webmail\\.com\\r\\n| p/WebEasyMail pop3d/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK \\(POP3\\) hMailServer ([-\\w.]+)\\r\\n| p/hMailServer pop3d/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Hi\\r\\n| p/Zoe Java pop3d/\nmatch pop3 m|^\\+OK Pop server at ([-\\w_.]+) starting\\.\\r\\n| p/BorderWare firewall pop3d/ d/firewall/ h/$1/\nmatch pop3 m|^\\+OK ([\\w._-]+) Winmail Mail Server POP3 ready\\r\\n| p/Winmail pop3d/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Welcome to ([-\\w_.]+), with Ability Mail Server ([\\w._-]+) by Code-Crafters\\.\\r\\n| p/Code-Crafters Ability Mail Server pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/a:code-crafters:ability_mail_server:$2/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Welcome to ([\\w._-]+), with Code-Crafters Ability Mail Server ([\\w._-]+) <[\\d.]+@[\\w._-]+>\\r\\n| p/Code-Crafters Ability Mail Server pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/a:code-crafters:ability_mail_server:$2/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK DAWKCo POP3 Server v([-\\w_.]+) ready <| p/DAWKCo pop3d/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Welcome to ([-\\w_.]+), powered by Ocean Mail Server ([\\d.]+) <[\\d.]+@[-\\w_.]+>\\r\\n| p/Ocean Mail Server pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK <[\\w.]+@([-\\w_.]+)> ready for action \\(Mailtraq ([\\d.]+)/POP3\\)\\r\\n| p/Mailtraq pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/a:mailtraq:mailtraq:$2/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) Solstice \\(tm\\) Internet Mail Server \\(tm\\) POP3 ([\\d.]+)| p/Sun Solstice Internet Mail Server pop3d/ v/$2/ o/Unix/ h/$1/\nmatch pop3 m|^\\+OK Welcome to RaidenMAILD POP3 service v([\\d.]+),| p/RaidenMAILD pop3d/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3 FTGate4 server ready| p/Floosietek FTGate4 pop3d/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3 FTGate6 server ready <[\\d.]+@([\\w._-]+)>\\r\\n| p/Floosietek FTGate6 pop3d/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK DBOX POP3 Server ([\\d.]+) ready\\r\\n| p/DBOX TCL pop3d/ v/$1/\nmatch pop3 m|^\\+OK POP3 on WinWebMail \\[([\\d.]+)\\] ready\\.  http://www\\.winwebmail\\.com\\r\\n| p/WinWebMail pop3d/ v/$1/ o/Windows/ cpe:/h:winwebmail:winwebmail_server:$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP3 Server Version ([\\d.]+) Copyright \\d{4} International Messaging Associates\\r\\n| p/IMA pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK MERCUR POP3-Server \\(v([\\w._-]+) [\\w=]+\\) for Windows(?: NT)? ready <[\\d.]+@([-\\w_.]+)>\\r\\n| p/Mercur pop3d/ v/$1/ o/Windows/ h/$2/ cpe:/a:atrium:mercur:$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK 4D Mail ([-\\w_.]+) ready <| p/WebSTAR 4D pop3d/ v/$1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP3 ([-\\w_.()]+) w/IMAP client at| p/SCO pop3d/ v/$2/ o/SCO UNIX/ h/$1/ cpe:/o:sco:sco_unix/a\nmatch pop3 m|^\\+OK Server Ready\\r\\n| p/Cisco VPN 3000 Concentrator pop3d/ d/security-misc/ cpe:/o:cisco:vpn_3000_concentrator_series_software/\nmatch pop3 m|^\\+OK Citadel POP3 server <\\d+@([-\\w_.]+)>\\r\\n| p/Citadel pop3d/ h/$1/ cpe:/a:citadel:ux/\nmatch pop3 m|^\\+OK <-?[\\d.]+@([-\\w_.]+)>, POP3 server ready\\.\\r\\n| p/Mercury Mail Transport System pop3d/ h/$1/ cpe:/a:pmail:mercury_mail_transport_system/\nmatch pop3 m|^\\+OK POP3 server ready <[-0-9a-f]+@([-\\w_.]+)>\\r\\n| p/SmarterMail pop3d/ o/Windows/ h/$1/ cpe:/a:smartertools:smartermail/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK mdpop3 ([\\w.]+ \\([\\w ]+\\)) ready\\r\\n| p/mdpop3/ v/$1/\nmatch pop3 m|^\\+OK ([-\\w_.]+)\\s+IdeaPop3Server ([^\\s]+) ready\\.\\r\\n| p/IdeaPop3Server pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK Welcome to Arvixe POP3 server\\.\\r\\n| p/Arvixe pop3d/\n\n# These are fairly general\nmatch pop3 m|^\\+OK POP3 Server ready\\r\\n$| p/zpop3d/\nmatch pop3 m|^\\+OK POP3 server ready\\r\\n$| p/qpopper pop3d/\nmatch pop3 m|^\\+OK POP3 server ([-\\w_.]+) ready <[\\d.]+@[-\\w_.]+>\\r\\n| p/BVRP Software SLMAIL pop3d/ h/$1/\nmatch pop3 m|^\\+OK ([-\\w_.]+) POP3 Server \\(Version ([\\w.]+)\\) ready at <.*>\\r\\n| p/BSD-based in.pop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK popd-([\\d.]+) ready \\r\\n| p/FreeBSD popd/ v/$1/\nmatch pop3 m|^\\+OK POP3 server at ([-\\w_.]+) ready <[\\d.]+@| p/FirstClass pop3d/ h/$1/ cpe:/a:opentext:firstclass/\nmatch pop3 m|^\\+OK POP3 Server OK <[\\d.]+@([-\\w_.]+)>\\r\\n| p/CommuniGate Pro pop3d/ h/$1/ cpe:/a:stalker:communigate_pro/\nmatch pop3 m|^\\+OK ([\\w._-]+) CommuniGate Pro POP3 Server (\\d[\\w._-]+) ready <[\\d.]+@\\1>\\r\\n| p/CommuniGate Pro pop3d/ v/$2/ h/$1/ cpe:/a:stalker:communigate_pro:$2/\nmatch pop3 m|^-ERR Permission denied - closing connection\\.\\r\\n$| p/Classic Hamster pop3d/ i/Permission denied/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) <[\\d.]+@[-\\w_.]+>\\r\\n| p/IA MailServer pop3d/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK <[\\d.]+@([-\\w_.]+)>\\r\\n| p/qmail pop3d/ h/$1/ cpe:/a:djb:qmail/\nmatch pop3 m|^\\+OK POP3 server ready <[\\d.]+@([-\\w_.]+)>\\r\\n| p/MailMax pop3d/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ready  <[\\d.]+@([-\\w_.]+)>\\r\\n| p/qpopper/ h/$1/\nmatch pop3 m|^\\+OK Scalix POP3 interface ready on: ([-\\w_.]+)\\r\\n| p/Scalix pop3d/ h/$1/\nmatch pop3 m|^\\+OK ([-\\w_.]+) .* GoMail V([\\d.]+) POP3| p/GoMail mass mailing plugin pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3 Welcome to ([-\\w_.]+) using the Internet Anywhere Mail Server Version: ([\\d.]+)\\. Build: (\\d+) by True North Software, Inc\\.| p/True North Internet Anywhere pop3d/ v/$2 build $3/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Authorized Users Only! \\(([-\\w_.]+)\\)\\r\\n| p/Microsoft Exchange pop3d/ o/Windows/ h/$1/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Welcome to mpopd V([\\d.]+)\\.\\.\\.\\. :\\)\\r\\n| p/mpopd perl pop3d/ v/$1/\nmatch pop3 m|^\\+OK POP3 thats cool man\\r\\n| p/Mozilla Thunderbird webmail plugin pop3d/ cpe:/a:mozilla:thunderbird/\nmatch pop3 m|^\\+OK [-\\w_.]+ Welcome to the mail server\\.\\r\\n| p/Ipswitch IMail pop3d/ o/Windows/ cpe:/a:ipswitch:imail/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK CMailServer ([\\d.]+) POP3 Service Ready\\r\\n| p/CMailServer pop3d/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) running EIMS X ([\\w.]+) <| p/Eudora Internet Mail Server X pop3d/ v/$2/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch pop3 m|^\\+OK ([-\\w_.]+) DynFX POP3 Server ([-\\w_.]+) <| p/DynFX pop3d/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3 on WinWebMail \\[([-\\w_.]+)\\] ready\\.  http://www\\.winwebmail\\.net\\r\\n| p/WinWebMail pop3d/ v/$1/ o/Windows/ cpe:/h:winwebmail:winwebmail_server:$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3 server \\(Neon Mail Server System Advance ([-\\w_.]+), [^)]*\\) ready ([-\\w_.]+)\\. <| p/Neon Mail Server pop3d/ v/$1/ h/$2/\nmatch pop3 m|^\\+OK WorldMail POP3 Server ([-\\w_.]+) Ready <[\\d.]+@([-\\w_.]+)>\\r\\n| p/Eudora Worldmail pop3d/ v/$1/ o/Windows/ h/$2/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK Welcome to the Atmail POP3 server - Login with user@domain\\.\\r\\n| p/Atmail pop3d/\nmatch pop3 m|^\\+OK Atmail IMAP/POP3 server ready\\r\\n| p/Atmail pop3d/\nmatch pop3 m|^\\+OK Dovecot DA ready\\. <[\\w._=-]+@([\\w._-]+)>\\r\\n| p/Dovecot DirectAdmin pop3d/ h/$1/ cpe:/a:directadmin:directadmin/ cpe:/a:dovecot:dovecot/\nmatch pop3 m|^\\+OK Dovecot DA ready\\.\\r\\n| p/Dovecot DirectAdmin pop3d/ cpe:/a:directadmin:directadmin/ cpe:/a:dovecot:dovecot/\nmatch pop3 m|^Unable to open trace file \\\"/var/spool/popper/| p/popper pop3d/ i/Misconfigured/\nmatch pop3 m|^\\+OK SocketMail v ([-\\w_.]+) SocketMail POP3 Server Ready\\r\\n| p/SocketMail pop3d/ v/$1/\nmatch pop3 m|^\\+OK ([\\w._-]+) (?:POP3 Service )?Zimbra POP3 server ready\\r\\n| p/Zimbra pop3d/ h/$1/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch pop3 m|^\\+OK TMSOFT POP3 Server v([\\w._-]+) ready <\\w+>\\r\\n| p/TMSOFT pop3d/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3D\\(\\*\\) Server PMDFV([\\w._-]+) at .* <\\w+@([\\w._-]+)>\\r\\n| p/PMDF pop3d/ v/$1/ o/OpenVMS/ h/$2/ cpe:/o:hp:openvms/a\nmatch pop3 m|^\\+OK POP3D\\(\\*\\) Server PMDFV([\\w._-]+) at .* \\(APOP disabled\\)\\r\\n| p/PMDF pop3d/ v/$1/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch pop3 m|^\\+OK Dovecot POP3 at ([\\w._-]+) ready\\.\\r\\n| p/Dovecot pop3d/ h/$1/ cpe:/a:dovecot:dovecot/\n# Debian lenny 5.0 Dovecot 1.0.rc15\nmatch pop3 m|^\\+OK Pop3 ready\\.\\r\\n| p/Dovecot pop3d/ cpe:/a:dovecot:dovecot/\n# embyte\nmatch pop3 m|^\\+OK E-POST POP3 Server \\(([^\\)]+)| p/E-Post POP3 Server/ v/$1/\nmatch pop3 m|^\\+OK ([\\w._-]+) Cyrus POP3 v([\\w._-]+)-OS X Server ([\\w._-]+):\\t9L1 server ready <[\\d.]+@[\\w._-]+>\\r\\n$| p/Cyrus pop3d/ v/$2/ i/OS X Server $3/ o/Mac OS X/ h/$1/ cpe:/a:cmu:cyrus_imap_server:$2/ cpe:/o:apple:mac_os_x/a\nmatch pop3 m|^\\+OK Kerio Connect ([\\w._ -]+) POP3 server ready <[\\d.]+@([\\w._-]+)>\\r\\n$| p/Kerio Connect pop3d/ v/$1/ h/$2/ cpe:/a:kerio:connect:$1/\nmatch pop3 m|^\\+OK Welcome NewsGator Online Services POP3 Server version ([\\w._-]+)\\r\\n$| p/NewsGator Enterprise Server pop3d/ v/$1/\nmatch pop3 m|^-ERR \\[SYS/PERM\\] Fatal error: tls_init\\(\\) failed\\r\\n| p/Cyrus pop3d/ cpe:/a:cmu:cyrus_imap_server/\nmatch pop3 m|^\\+OK Quick 'n Easy Mail Server ready\\r\\n| p/Quick 'n Easy pop3d/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([\\w._-]+) IceWarp ([\\w._-]+) POP3 \\w+, \\d+ \\w+ \\d+ \\d+:\\d+:\\d+ [+-]\\d+ <[\\w._-]+@[\\w._-]+>\\r\\n| p/IceWarp pop3d/ v/$2/ h/$1/ cpe:/a:icewarp:mail_server:$2/\nmatch pop3 m|^\\+OK ([\\w._-]+) IceWarp ([\\w._-]+) x64 POP3 \\w+, \\d+ \\w+ \\d+ \\d+:\\d+:\\d+ [+-]\\d+ <[\\w._-]+@[\\w._-]+>\\r\\n| p/IceWarp pop3d/ v/$2/ i/x64/ h/$1/ cpe:/a:icewarp:mail_server:$2/\nmatch pop3 m|^\\+OK DavMail ([\\w._-]+) POP ready at | p/DavMail pop3d/ v/$1/\nmatch pop3 m|^\\+OK Welcome AltiPop3 POP3 Server\\r\\n| p/AltiGen AltiServ pop3d/ d/PBX/ cpe:/a:altigen:altiserv/\nmatch pop3 m|^\\+OK Welcome to coremail Mail Pop3 Server \\(gzidcs\\[[0-9a-f]{32}s\\]\\)\\r\\n$| p/coremail pop3d/\nmatch pop3 m|^\\+OK POP3 Server ([\\w._-]+) \\(InSciTek OIS\\) ready <[\\w._-]+@[\\w._-]+>\\r\\n| p/Allworx VoIP server pop3d/ d/VoIP adapter/ h/$1/\nmatch pop3 m|^\\+OK Citadel POP3 server ready\\.\\r\\n$| p/Citadel pop3d/ cpe:/a:citadel:ux/\nmatch pop3 m|^\\+OK POP3 Mail server\\r\\n| p/MailEnable pop3d/ o/Windows/ cpe:/a:mailenable:mailenable/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK 200\\r\\n| p/Brother MFC-7360N pop3d/ d/printer/\nmatch pop3 m|^\\+OK Welcome to the SLnet POP3 Service\\r\\n| p/SeattleLab SLMail pop3d/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([\\w.-]+) POP3 server \\(DeskNow\\) ready \\r\\n| p/DeskNow pop3d/ h/$1/\nmatch pop3 m|^\\+OK ([\\w.-]+) Service ready <\\d+\\.\\d+@[\\w.-]+>\\r\\n| p/Gattaca pop3d/ h/$1/\nmatch pop3 m|^-ERR access from your network is denied\\r\\n$| p/CommuniGate Pro pop3d/ i/access denied/ cpe:/a:stalker:communigate_pro/\nmatch pop3 m|^\\+OK Synametrics POP3 server ready \\d\\d/\\d\\d/\\d\\d \\d\\d:\\d\\d [AP]M\\r\\n| p/Synametrics Xeams pop3d/ cpe:/a:synametrics:xeams/\nmatch pop3 m|^\\+OK The Microsoft Exchange POP3 service is ready\\. \\[\\w+=*\\]\\r\\n| p/Microsoft Exchange Online pop3d/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^-ERR access from your network is temporarily disabled\\r\\n| p/CommuniGate Pro pop3d/ i/access disabled/ cpe:/a:stalker:communigate_pro/\nmatch pop3 m|^\\+OK AXIGEN POP3 server on ([\\w._-]+) ready <[\\d.-]+@\\1>\\r\\n| p/Axigen pop3d/ h/$1/ cpe:/a:gecad:axigen_mail_server/\nmatch pop3 m|^\\+OK mySHN server v([\\d.]+) ready\\r\\n| p/mySHN pop3d/ v/$1/\n\nmatch pop3-proxy m|^\\+OK POP3 AnalogX Proxy (\\d[-.\\w]+) \\(Release\\) ready\\.\\n$| p/AnalogX POP3 proxy/ v/$1/ cpe:/a:analogx:proxy:$1/\nmatch pop3-proxy m|^\\+OK CCProxy (\\S+) POP3 Service Ready\\r\\n| p/CCProxy pop3d/ v/$1/\nmatch pop3-proxy m|^Proxy\\+ POP3 server\\. Insecure access - terminating\\.\\r\\n| p/Proxy+ pop3d/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK TrendMicro IMSS POP3 Proxy at ([\\w._-]+)\\r\\n| p/Trend Micro IMSS virus scanning POP3 proxy/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK TrendMicro IMSS (\\d[-.\\w ]+) POP3 Proxy at ([-.\\w]+)\\r\\n| p/Trend Micro IMSS virus scanning POP3 proxy/ v/$1/ o/Windows/ h/$2/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK Proxy-POP server \\(DeleGate/([\\d.]+) by ysato AT delegate DOT org\\) at ([-\\w_.]+) starting\\.\\r\\n| p/DeleGate pop3 proxy/ v/$1/ h/$2/\nmatch pop3-proxy m|^\\+OK Jana-Server POP3 ready <[\\w.]+@([-\\w_.]+)>\\r\\n| p/JanaServer pop3 proxy/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK POP3 Y(?:ahoo)?POPs! proxy ready\\r\\n| p/YahooPOPs! pop3 proxy/\nmatch pop3-proxy m|^\\+OK POP3 \\(Spampal\\) server ready \\(USER command must include mailserver name\\)\\r\\n| p/Spampal pop3 proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK Mirapoint POP3PROXY ([-\\w.]+) server ready\\r\\n| p/Mirapoint pop3 proxy/ v/$1/\nmatch pop3-proxy m|^\\+OK AVG POP3 Proxy Server Beta - ([\\d/.]+) \\[[\\d.]+\\]\\r\\n| p/AVG pop3 proxy/ v/$1 Beta/ o/Windows/ cpe:/a:avg:anti-virus:$1_beta/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK AVG POP3 Proxy Server ([\\d/.]+) \\[[\\w/.]+\\]\\r\\n| p/AVG pop3 proxy/ v/$1/ o/Windows/ cpe:/a:avg:anti-virus:$1/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK AVG POP3 Proxy Server <[\\w.]+@[-\\w_.]+> ([\\d/.]+) \\[[\\d/.]+\\]\\r\\n| p/AVG pop3 proxy/ v/$1/ o/Windows/ cpe:/a:avg:anti-virus:$1/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^-ERR AVG POP3 Proxy Server: Cannot connect to the mail server!\\r\\n| p/AVG pop3 proxy/ i/broken/ o/Windows/ cpe:/a:avg:anti-virus/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK FreePOPs/([\\d.]+) pop3 server ready\\r\\n| p/FreePOPs pop3 proxy/ v/$1/\nmatch pop3-proxy m|^\\+OK POP3 Spam Inspector Spam Filter Gateway Version ([\\d.]+) Ready\\.\\r\\n| p/Spam Inspector pop3 proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK MailMarshal\\(([\\d.]+)\\) POP3 server ready <[\\d.]+@([-\\w_.]+)>\\r\\n| p/MailMarshal pop3d/ v/$1/ h/$2/\nmatch pop3-proxy m|^\\+OK HTML2POP3 server ready \\(([\\d.]+)\\)\\r\\n| p/HTML2POP3 pop3 proxy/ v/$1/\nmatch pop3-proxy m|^\\+OK ([-\\w_.]+) POP3 proxy ready\\r\\n| p/pop3gwd pop3 proxy/ h/$1/\nmatch pop3-proxy m|^\\+OK AVG POP3 Proxy Server <[\\d.]+@([-\\w_.]+)> ([\\d.]+)/[\\d.]+ \\[[\\d/.]+\\]\\r\\n| p/AVG pop3 proxy/ v/$2/ o/Windows/ h/$1/ cpe:/a:avg:anti-virus:$2/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK InterScan VirusWall POP3 Proxy\\r\\n| p/InterScan VirusWall pop3 proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK WinProxy POP3 Proxy Ready\\r\\n| p/WinProxy pop3 proxy/ o/Windows/ cpe:/a:bluecoat:winproxy/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^-ERR 403 The requested host is forbidden by WinProxy\\.  See your network administrator\\.\\n| p/WinProxy pop3 proxy/ i/IP forbidden/ o/Windows/ cpe:/a:bluecoat:winproxy/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK MrPostman webmail proxy ready\\r\\n| p/MrPostman webmail pop3 proxy/\nmatch pop3-proxy m|^\\+OK (.*) \\(PGP Universal service is proxying this connection\\)\\r\\n| p/PGP Universal pop3 proxy/ i/Proxied greeting: $1/ cpe:/a:pgp:universal_server/\nmatch pop3-proxy m|^-ERR PGP Universal no pop3 service here\\r\\n| p/Symantec PGP Universal Server pop3 proxy/ cpe:/a:symantec:pgp_universal_server/\nmatch pop3-proxy m|^\\+OK F-Secure/fsigk_pop/\\d+/[-\\w_.]+ starting\\.\\r\\n| p/F-Secure Internet Gateway pop3 proxy/\nmatch pop3-proxy m|^\\+OK hello from popgate\\(([\\d.]+)\\)\\r\\n| p/POPgate pop3 proxy/ v/$1/\nmatch pop3-proxy m|^\\+OK \\[ISafe POP3 Proxy\\] \\r\\n| p/ISafe pop3 proxy/\nmatch pop3-proxy m|^\\+OK <[\\d.]+@([-\\w_.]+)> \\[ISafe POP3 Proxy\\] \\r\\n| p/ISafe pop3 proxy/ h/$1/\nmatch pop3-proxy m|^\\+OK UserGate: forward ready\\r\\n-ERR UserGate: Mistake of the protocol\\r\\n| p/UserGate pop3 proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^\\+OK kingate pop3 proxy\\r\\n| p/kingate pop3-proxy/\nmatch pop3-proxy m|^\\+OK POP3 Proxy Server Ready\\r\\n| p/IronMail pop3-proxy/ cpe:/a:ciphertrust:ironmail/\nmatch pop3-proxy m|^\\+OK avast! POP3 proxy ready\\.\\r\\n| p/Avast! anti-virus pop3 proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3-proxy m|^-ERR Cannot connect to POP server ([\\w._-]+) \\([^)]*\\), connect error \\d+\\r\\n| p/Avast! anti-virus pop3 proxy/ i/cannot connect to $1/ o/Windows/ cpe:/o:microsoft:windows/\nmatch pop3-proxy m|^\\+OK O3SIS UMA Proxy POP3 Server ([\\w._-]+)\\r\\n| p/O3SIS UMA pop3 proxy/ v/$1/\nmatch pop3-proxy m|^\\+OK Zarafa POP3 gateway ready\\r\\n| p/Zarafa pop3 proxy/ o/Unix/ cpe:/a:zarafa:zarafa/\nmatch pop3-proxy m|^-ERR Not Enrolled\\r\\rPlease open your internet browser and accept the terms and conditions of use for this service\\.\\r\\n| p/Reivernet captive portal pop3 proxy/\n\n# http://echelon.pl/pubs/poppassd.html\n# you give it username, present password and new password, and\n# it changes the password of the user.\n# poppassd 1.8.1\nmatch pop3pw m|^200 poppassd v?([-._\\w]+) | p/poppassd/ v/$1/\nmatch pop3pw m|^200 ([-._\\w]+) poppassd v?([-._\\w]+) | p/poppassd/ v/$2/ h/$1/\nmatch pop3pw m|^200 poppassd hello, who are you\\?\\r\\n| p/poppassd/\nmatch pop3pw m|^200 hello there, who are you\\?\\r\\n| p/poppassd/\nmatch pop3pw m|^200 hello there, please tell me who you are\\r\\n| p/poppassd/\nmatch pop3pw m|^200 poppassd v([\\w.]+) for Digital Unix with C2 security Hello, who are you\\?\\r\\n| p/poppassd/ v/$1/ i/Digital Unix with C2 security/ o/Digital UNIX/ cpe:/o:dec:digital_unix/a\nmatch pop3pw m|^200 courierpassd v(\\d[-.\\w]+) hello, who are you\\?\\r\\n| p/Courierpassd pop3 password change daemon/ v/$1/\nmatch pop3pw m|^200 ([-.+\\w]+) MercuryW PopPass server ready\\.\\r\\n| p|Mercury/32 poppass service| o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3pw m|^200 X1 NT-PWD Server ([-.+\\w]+) \\(IMail (\\d[-.\\w]+)\\)\\r\\n| p/Ipswitch IMail pop3 password change daemon/ v/$2/ o/Windows/ h/$1/ cpe:/a:ipswitch:imail:$2/ cpe:/o:microsoft:windows/a\nmatch pop3pw m|^200 CommuniGate Pro PWD Server (\\d[-.\\w]+) ready <| p/CommuniGate Pro pop3 password change daemon/ v/$1/ cpe:/a:stalker:communigate_pro:$1/\nmatch pop3pw m|^\\+OK ApplePasswordServer (\\d[-.\\w]+) password server at | p/ApplePasswordServer pop3 password change daemon/ v/$1/\nmatch pop3pw m|^200 Stalker Internet Password Server ready\\. V\\.([\\w.]+)\\r\\n| p/Stalker Mail Server password change daemon/ v/$1/ o/Mac OS/ cpe:/o:apple:mac_os/a\nmatch pop3pw m|^550 Login failed - already \\d+/\\d+ users connected sorry \\(use G_CON_PERIP_EXCEPT to bypass\\) \\(IP=[\\d.]+\\)\\r\\n| p/Qualcomm poppassd/ i/Maximum users connected/\nmatch pop3pw m|^200 hello and welcome to SchoolsNET SINA poppassd \\[([-\\d.]+)\\]\\r\\n| p/SINA pop3pw/ v/$1/\nmatch pop3pw m|^200 Post\\.Office v([\\d.]+) password server ready\\r\\n| p/Post.Office pop3pw/ v/$1/\nmatch pop3pw m|^200 MERCUR Password service for Windows NT ready\\r\\n| p/Mercur pop3pw/ o/Windows/ cpe:/a:atrium:mercur/ cpe:/o:microsoft:windows/a\nmatch pop3pw m|^200 hello\\r\\n| p/SLMail pop3pw/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3pw m|^200 Ok, \\\"modusMail Mail Management Server ready\\\" <[\\d.]+@\\(null\\)>\\r\\n| p/ModusMail poppassd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3pw m|^500 access from your network is denied\\r\\n$| p/CommuniGate Pro pop3pw/ i/access denied/ cpe:/a:stalker:communigate_pro/\n\n# RFC 1939 suggests <process-ID.clock@hostname> for the timestamp\nsoftmatch pop3 m|^\\+OK [^<]+ <[\\d.]+@([\\w.-]+)>\\r\\n$| h/$1/\n# otherwise, just softmatch anything\nsoftmatch pop3 m|^\\+OK [-\\[\\]\\(\\)!,/+:<>@.\\w ]+\\r\\n$|\n\nmatch portlistener m|^Hello !\\r\\n| p/Port Listener/ cpe:/a:rjl_software:port_listener/\n\n# /usr/sbin/potval\n# https://github.com/elvanderb/TCP-32764/issues/98\nmatch pot m|^0NTP00-00-00MAC00-00-00-00-00-00| p|Netgear POT-(Get/Set) Demo| d/broadband router/\n\nmatch pptp m|^\\0\\x10\\0\\x01\\x1a\\+<M\\0\\x05\\0\\0\\0\\0\\0\\x01$| p/Point to Point Tunneling Protocol/\n\nmatch pmud m|^pmud (\\d[-.\\w]+) \\d+\\n| p/pmud/ v/$1/ i|http://sf.net/projects/apmud|\nmatch printer m|^lpd \\[@([-.\\w]+)\\]: Print-services are not available to your host \\([-.\\w]+\\)\\.\\n| p/BSD lpd/ i/Unauthorized host/ h/$1/\n# BSD lpr/lpd line printer spooling system (lpr v1:2000.05.07) on Linux 2.6.0-test5\nmatch printer m|^([-.\\w]+): lpd: Your host does not have line printer access\\n| p|BSD/Linux lpd| i/hostname denied/ h/$1/\nmatch printer m|^lpd \\[@([-\\w_.]+)\\]: connected from invalid port \\(\\d+\\)\\n| p|BSD/Linux lpd| i/source port denied/ h/$1/\n# Linux 2.4.18 lpr 2000.05.07-4.2\nmatch printer m|^lpd: Host name for your address \\(\\d+\\.\\d+\\.\\d+\\.\\d+\\) unknown\\n$| p/Linux lpd/ i/client IP must resolve/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch printer m|^lpd: (.*)\\n| p/lpd/ i/error: $1/\nmatch printer m|^([\\w._/-]+/lpd): (.*)\\n| p/lpd/ i/path: $1; error: $2/\n# Mac OS X?\nmatch printer m|^([-\\w_.]+): lpd: hostname for your address \\([\\d.]+\\) unknown\\n| p/lpd/ h/$1/\nmatch printer m|^([-\\w_.]+): lpd: address for your hostname \\([\\d.]+\\) not matched\\n| p/lpd/ h/$1/\n# Redhat Linux 7.3 LPRng-3.8.9\nmatch printer m|^\\x01no connect permissions\\n$| p/LPRng/ i/Not authorized/\nmatch printer m|^([-\\w_.]+): lpsched: Malformed from address\\n| p/lpsched/ h/$1/\nmatch printer m|^([-\\w_.]+): lpsched: Your host does not have line printer access\\n| p/lpsched/ i/host denied/ h/$1/\nmatch printer m|^([-\\w_.]+): lpsched: Host name for your address \\([\\d.]+\\) unknown\\n| p/lpsched/ i/Unauthorized/ h/$1/\nmatch printer m|^([-\\w_.]+): /usr/lib/lpd: Malformed from address\\n| p/lpd/ h/$1/\nmatch printer m|^Printer Status ---> (.*)                    \\nno entries\\n| p/QMC DeskLaser printer/ i/Status $1/ d/printer/\nmatch printer m|^\\d+-202 your host does not have line printer access\\.| p/AIX lpd/ i/Unauthorized/ o/AIX/ cpe:/o:ibm:aix/a\nmatch printer m|^\\d+-201 ill-formed FROM address\\.$| p/AIX lpd/ o/AIX/ cpe:/o:ibm:aix/a\nmatch printer m|^MAX_INCOMING has been exceeded\\r\\n| p/Digi IP-to-serial print server lpd/ i/too many connections/ d/print server/\nmatch printer-admin m|^LXK: $| p/Lexmark printer admin/ d/printer/\n\nmatch prisontale m|^ \\0\\0\\0\\*\\x03\\x01\\x80\\x10\\0.\\xc9....................|s p/PrisonTale game server/\n\n# \\x06\\x04 could possibly be a version number, but only one sample submitted\nmatch pfservice m|^\\0\\0\\0\\x0c\\x01\\0\\x01\\x06\\x04\\0\\0\\0$| p/PuriFile DLP/ v/6.4.0/\n\n# Null probe hack: responds to anything with this.\nmatch pvx m|^Invalid shortcut parameter$| p/ProvideX client interface/ cpe:/a:pvx:providex/\n\nmatch pwdgen m|^\\w+ \\([\\w-]+\\)\\r\\n$| p/pwdgen/\n\nmatch qaweb m|^QAS2$| p/QuickAddress Pro for the Web/\n\nmatch qconn m|^QCONN\\r\\n\\xff\\xfd\\\"$| p/qconn remote IDE support/ o/QNX/ cpe:/o:qnx:qnx/a\n\n# kvm -net nic -net socket,listen=:8100\nmatch qemu-vlan m|^\\0\\0\\x01V\\xff\\xff\\xff\\xff\\xff\\xffRT\\0\\x124V\\x08\\0E.\\x01H...\\0.\\x11..\\0\\0\\0\\0\\xff\\xff\\xff\\xff\\0D\\0C\\x014.{1,2}\\x01\\x01\\x06\\0......\\0{18}RT\\0\\x124V\\0{202}c\\x82Sc5\\x01|s p/QEMU VLAN listener/ cpe:/a:qemu:qemu/\n\nmatch qsp-proxy m|^\\x01\\x01\\0\\x08\\x1c\\xee\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Symantec ManHunt/\nmatch qnap-rtrr m|^\\xab\\xca\\xa5\\]\\0\\0\\0\\x18\\xc0\\0\\0\\x01\\xff\\xff\\xff\\xff\\0\\0\\0\\0\\0\\0\\0\\0| p/QNAP Realtime Remote Replication/ d/storage-misc/\n\n# Windows QOTD service only has 12 quotes.  Found on Windows XP in\n# %systemroot%\\system32\\drivers\\etc\\quotes\nmatch qotd m=^\"?(?:My spelling is Wobbly\\.|Man can climb to the highest summits,|In Heaven an angel is nobody in particular\\.|Assassination is the extreme form of censorship\\.|When a stupid man is doing|We have no more right to consume happiness without|We want a few mad people now.|The secret of being miserable is to have leisure to|Here's the rule for bargains:|Oh the nerves, the nerves; the mysteries of this machine called man|A wonderful fact to reflect upon,|It was as true as taxes is\\.)= p/Windows qotd/ i/English/ o/Windows/ cpe:/a:microsoft:qotd::::en/ cpe:/o:microsoft:windows/a\nmatch qotd m=^\"(?:Mi ortograf\\xeda tiembla\\. Es bueno revisarla,|un hombre puede escalar a las m\\xe1s altas cumbre|Algo maravilloso a poner de manifiesto:|Cuando un necio hace algo de lo que se aveg\\xfcenza,|En el cielo, un \\xe1ngel no es nadie en concreto|Traigamos unos cuantos locos ahora\\.|Era tan verdad como los impuestos\\. Y no|Hay libros cortos que, para entenderlos como se merecen,|La prosperidad hace amistades, y la adversidad las|El uso principal de un PC es confirmar la ley de|Quedarse en lo conocido por miedo a lo desconocido,|Cuando las leyes son injustas, no obligan en el fuero|Magia equivale a cualquier avance en la ciencia\\.|Vale mejor consumir vanidades de la vida,)= p/Windows qotd/ i/Spanish/ o/Windows/ cpe:/a:microsoft:qotd::::es/ cpe:/o:microsoft:windows/a\n# Some Italian qotds start with a space instead of a \"\nmatch qotd m=^.(?:Voce dal sen fuggita|Semel in anno licet insanire|Cosa bella e mortal passa e non dura|Quando uno stupido compie qualcosa di cui si vergogna,|Se tu pagare come dici tu,|Fatti non foste a viver come bruti,|Sperare senza far niente e${backquote} come)= p/Windows qotd/ i/Italian/ o/Windows/ cpe:/a:microsoft:qotd::::it/ cpe:/o:microsoft:windows/a\nmatch qotd m=^\"(?:Prazos longos sao f\\xa0ceis de subscrever\\.|Deus, para a felicidade do homem, inventou a f\\x82 e o amor\\.|Ao vencido, \\xa2dio ou compaixao, ao vencedor, as batatas\\.|Quem nao sabe que ao p\\x82 de cada bandeira p\\xa3blica,|Nao te irrites se te pagarem mal um benef\\xa1cio; antes cair|A vida, como a antiga Tebas, tem cem portas\\.)= p/Windows qotd/ i/Portuguese/ o/Windows/ cpe:/a:microsoft:qotd::::pt/ cpe:/o:microsoft:windows/a\n# The German version doesn't start with \"\nmatch qotd m=^(?:Wer wirklich Autorit\\xe4t hat, wird sich nicht scheuen,|Moral ist immer die Zuflucht der Leute,|Beharrlichkeit wird zuweilen mit Eigensinn|Wer den Tag mit Lachen beginnt, hat ihn|Wenn uns keine Ausweg mehr bleibt,|Gesichter sind die Leseb\\xfccher des Lebens|Grosse Ereignisse werfen mitunter ihre Schatten|Dichtung ist verpflichtet, sich nach den|Ohne Freihet geht das Leben|Liebe ist wie ein Verkehrsunfall\\. Man wird angefahren)= p/Windows qotd/ i/German/ o/Windows/ cpe:/a:microsoft:qotd::::de/ cpe:/o:microsoft:windows/a\nmatch qotd m=^\"(?:Clovek ma tri cesty, jak moudre jednat\\. Nejprve premyslenim|Co je vubec hodno toho, aby to bylo vykonano,|Fantazie je dulezitejsi nez vedeni\\.|Potize narustaji, cim vice se clovek blizi|Kdo nezna pristav, do ktereho se chce plavit,|Lidske mysleni ztraci smysl,|Nikdo nevi, co muze vykonat,|Nic neprekvapi lidi vice nez zdravy rozum|Zadny cil neni tak vysoky,)= p/Windows qotd/ i/Czech/ o/Windows/ cpe:/a:microsoft:qotd::::cs/ cpe:/o:microsoft:windows/a\nmatch qotd m=^\"(?:L'art de persuader consiste autant|Le peu que je sais, c'est \\x85 mon ignorance|Certaines \\x83mes vont \\x85 l'absolu comme l'eau|Le m\\x82rite a sa pudeur comme la chastet|Rien de plus futile, de plus faux, de plus|\\xb7 vaincre sans p\\x82ril, on triomphe|Le comble de l'orgueil, c'est de se)= p/Windows qotd/ i/French/ o/Windows/ cpe:/a:microsoft:qotd::::fr/ cpe:/o:microsoft:windows/a\n\nmatch quagga m|^\\r\\nHello, this is [Qq]uagga \\(version (\\d[-.\\w]+)\\)\\.\\r\\nCopyright 1996-200| p/Quagga routing software/ v/$1/ i/Derivative of GNU Zebra/ cpe:/a:quagga:quagga:$1/\n\nmatch quest_launcher m|^L\\0E\\0general_fail\\0T\\0Error in file launchserver\\.c\\(1\\.67\\)969 \\(errno=2\\): inetd: check greeting\\0$| p/QAM Launcher Manager/\n\nmatch qtopia-transfer m|^220 Qtopia transfer service ready!\\n| p/Qtopia transfer daemon/ d/PDA/\n\n# Not sure what this name is. Have seen XenVMMXenVMM, @\\x03, and NOTFOUND\nmatch r1soft-cdp m|^\\0\\0\\x01.R.\\x02\\n.\\x08\\xa3\\x80\\x04\\x10.\\x18\\0 [\\0\\x01]\\*.(.*?)\\x10\\0\\x1a\\x90\\x02-----BEGIN PUBLIC KEY-----\\nMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQ|s p/R1Soft Continuous Data Protection Agent/ i/name: $P(1)/ cpe:/a:r1soft:cdp/\n\nmatch radmind m|^200-?RAP 1 ([-\\w_.]+) ([-\\w_.]+) radmind access protocol\\r\\n| p/radmind/ v/$2/ h/$1/\nmatch rationalsoft m|^\\0\\0\\0\\x10ip_infilter=true$| p/Rational Soft Hidden Administrator Server/ i/ha_server.exe/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch razor2 m|^sn=\\w&srl=\\d+&ep4=[-\\w]+&a=\\w&a=\\w+\\r\\n$| p/Vipul's Razor2 anti-spam service/\n\n# NULL probe fallback\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0Server encountered an internal error\\. To get more info turn on customErrors in the server's config file\\.\\x05\\0\\0\\0\\0| p/MS .NET Remoting services/ cpe:/a:microsoft:.net_framework/\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0Le serveur a rencontr\\xc3\\xa9 une erreur interne\\. Pour obtenir plus d'informations, activez customErrors dans le fichier de configuration du serveur\\.\\x05\\0\\0\\0\\0| p/MS .NET Remoting services/ i/French/ cpe:/a:microsoft:.net_framework::::fr/\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0Erro interno no servidor\\. Para obter mais informa\\xc3\\xa7\\xc3\\xb5es, ative customErrors no arquivo de configura\\xc3\\xa7\\xc3\\xa3o do servidor\\.\\x05\\0\\0\\0\\0| p/MS .NET Remoting services/ i/Portuguese/ cpe:/a:microsoft:.net_framework::::pt/\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0\\xe6\\x9c\\x8d\\xe5\\x8a\\xa1\\xe5\\x99\\xa8\\xe9\\x81\\x87\\xe5\\x88\\xb0\\xe5\\x86\\x85\\xe9\\x83\\xa8\\xe9\\x94\\x99\\xe8\\xaf\\xaf\\xe3\\x80\\x82\\xe6\\x9c\\x89\\xe5\\x85\\xb3\\xe8\\xaf\\xa6\\xe7\\xbb\\x86\\xe4\\xbf\\xa1\\xe6\\x81\\xaf\\xef\\xbc\\x8c\\xe8\\xaf\\xb7\\xe5\\x9c\\xa8\\xe6\\x9c\\x8d\\xe5\\x8a\\xa1\\xe5\\x99\\xa8\\xe9\\x85\\x8d\\xe7\\xbd\\xae\\xe6\\x96\\x87\\xe4\\xbb\\xb6\\xe4\\xb8\\xad\\xe6\\x89\\x93\\xe5\\xbc\\x80 customErrors\\xe3\\x80\\x82\\x05\\0\\0\\0\\0| p/MS .NET Remoting services/ i/Simplified Chinese/ cpe:/a:microsoft:.net_framework::::zh/\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0System\\.Runtime\\.Remoting\\.RemotingException: Tcp channel protocol violation: expecting preamble\\.\\r\\n|s p/MS .NET Remoting services/ cpe:/a:microsoft:.net_framework/\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0System\\.Runtime\\.Remoting\\.RemotingException: Violation de protocole de canal tcp\\xc2\\xa0: pr\\xc3\\xa9ambule attendu\\.\\r\\n|s p/MS .NET Remoting services/ i/French/ cpe:/a:microsoft:.net_framework::::fr/\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0System\\.Runtime\\.Remoting\\.RemotingException: Infracci\\xc3\\xb3n del protocolo del canal Tcp|s p/MS .NET Remoting services/ i/Spanish/ cpe:/a:microsoft:.net_framework::::es/\n# Probably best to just match it no matter what the language\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0.|s p/MS .NET Remoting services/ cpe:/a:microsoft:.net_framework/\n\nmatch rcon m|^RocketRcon v([\\d.]+)\\r\\n| p/Unity RocketMod RCON/ v/$1/ cpe:/a:rocketmod:rocketmod:$1/\n\n# https://oss.oracle.com/projects/rds/dist/documentation/rds-3.1-spec.html\n# RDS over TCP in Linux.\nmatch rds m|^\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x20\\0\\0\\0\\0\\0\\x01\\0{875}$| p/Reliable Datagram Sockets/\n\nmatch renderer m|^250 backburner ([\\d.]+) Ready\\.\\r\\nbackburner>| p/Discreet Backburner network renderer/ v/$1/\n\n# Port 8600\nmatch remote-rac m|^\\x10\\0\\0\\0\\t\\xe7\\xa0o\\xde&\\xdc\\xfec\\xbf\\xb91\\xef\\xc3\\?\\xc9\\x10\\0\\0\\0\\xa1\\xcasZ6\\[\\xdf\\x0cc\\xbf\\xb91\\xef\\xc3\\?\\xc9\\x08\\0\\x19\\xdbh\\x06\\xa1\\xfc\\x91\\xce$| p/Remote Administrator Control/ d/remote management/ o/Windows/ cpe:/o:microsoft:windows/\n# Port 8610\nmatch remote-rac m|^\\x02\\x00\\x00\\x00\\xfe\\x00\\x00\\x00\\x00\\x01\\x00\\x00.{256}$|s p/Remote Administrator Control/ d/remote management/ o/Windows/ cpe:/o:microsoft:windows/\n\nmatch rethinkdb-intracluster m|^RethinkDB ([\\w._~-]+ubuntu[\\w._~-]+) cluster\\n\\xab\\xa6\\x04\\^\\x11!M\\xd6\\x99\\xb6\\xb5\\xbe\\x1cxR\\xdd\\x02\\0\\0\\0\\0\\0\\0\\0\\x7f\\0\\0\\x01\\x7f\\0\\x01\\x01Wq\\0\\0$| p/RethinkDB intracluster listener/ v/$1/ o/Linux/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/\n\nmatch rgpsp m|^last pid: \\d+  <linux><special> rgpsp poller ! ! !\\n| p/Remote GPS Poller/ o/Linux/ cpe:/o:linux:linux_kernel/a\n# Remote Console via RCONJ - RCONJ is a java utility that allows one\n# to remote console into a Novell server. It uses 2034 (unsecure) or\n# 2036 (secure) by default but can be changed.\n# The unknown token looks like it might be signifigant but I can't\n# find any protocol descriptions. -Doug\nmatch rconj m|^\\0.\\0\\x01\\0\\0\\0\\0.*\\x0b\\0\\0\\0\\0([-\\w_]+)\\x00437|s p/Novell rconj/ i/Unknown token: $1/ o/Unix/\nmatch realplayfavs m|^_realplayfavs_::([\\w\\s]+)::connected\\0$| p/RealPlayer Shared Favorites/ i/name: $1/ cpe:/a:real:realplayer/\nmatch realplayfavs m|^_realplayfavs_::| p/RealPlayer Shared Favorites/ cpe:/a:real:realplayer/\nmatch resvc m|^\\{\\w+\\} NODEINFO \\(\\d+\\) \\{\\d+\\}Version: (\\d[-.\\w ]+) Microsoft Routing Server ready\\r\\n  | p/Microsoft Exchange routing server/ v/$1/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch remoteanything m|^(\\d+\\.\\d+\\.\\d+) G\\0\\0\\0\\xb6\\0.\\t| p/TWD RemoteAnything/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nsoftmatch reverse-ssl m|^\\x16\\x03[\\x00-\\x03]..\\x01...\\x03[\\x00-\\x03].{32}| p|SSL/TLS ClientHello|\nmatch rexec m|^/bin/ip/rexexec: auth_proxy: auth_proxy rpc: negotiation failed, no common protocols or keys\\n| p/Plan 9 rexexec/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\n\nmatch rfbuoy m|^<rfBuoy/>| p/Datawell rfBuoy wavebuoy communication software/ d/specialized/\n\n# Part of a standard called HL7?\nmatch rhapsody m|^\\0\\0\\0:R\\0\\0\\0\\0\\x01\\0\\0\\x0016791614489711164477\\x7cRhapsody Engine ([\\w._-]+)\\x7c4$| p/McKesson Rhapsody Engine/ v/$1/\n\nmatch rifa-dvr m|^RIFA\\0\\0\\0\\0| p/Rifatron DVR/ d/webcam/\n\nmatch riegl-license m|^RIEGL LicenseServer ([\\d.]+)\\r$| p/RIEGL License Server/ v/$1/ cpe:/a:riegl:license_server:$1/\n\nmatch righteous-backup m|^\\xe1\\xe7\\xef\\xf0\\0\\0\\x00.\\(Righteous Backup Linux Agent\\) ([^\\xe1]+)\\xe1\\xe7\\xe6\\x07\\0\\x01\\0 $| p/R1Soft Righteous Backup Linux Agent/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch righteous-backup m|^\\xe1\\xe7\\xe6\\x07\\0\\x01\\0 $| p/R1Soft Righteous Backup/\n\nmatch rmate m|^220 ([\\w._-]+) RMATE TextMate \\(([^)]+)\\)\\n| p/MacroMates TextMate/ i/kernel: $2/ o/OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch rmmd m|^100 Rmmd version ([\\w._ -]+?)\\. *\\r\\n101 [\\da-f]{32}\\r\\n| p/Rmmd trojan/ v/$1/\n\nmatch roku m|^roku: ready\\r\\n| p/Roku SoundBridge/ d/media device/\n# port 8080, accepts commands like \"press up\" \"press mute\"\nmatch roku-remote m|^([0-9A-Z]{5}[A-Z]\\d{6})\\r\\n>| p/Roku remote API/ i/SN $1/ d/media device/\n\nmatch rowmote m|^KEY UNAUTHORIZED\\r\\nKEY UNAUTHORIZED\\r\\n| p/Rowmote remote media controller/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\n\n# 10.5.0.0.5307 (Rev 26631061ee60)\nmatch rsa-appliance m|^\\xa9\\0\\x01\\0L\\0\\0\\0b\\0\\0\\0\\x01\\0\\x03@\\0\\x01\\0\\0\\0\\xc6\\x01\\0\\x007\\0\\0\\0\\x03\\0\\0\\0\\x06\\0\\0\\0handle\\x03\\0\\0\\x00454\\x08\\0\\0\\0pversion\\x02\\0\\0\\x0098\\x07\\0\\0\\0trusted\\x01\\0\\0\\x000| p/RSA Security Analytics Appliance service/ cpe:/a:emc:rsa_security_analytics/\n\n# RedHat 7.3 - rsync server version 2.5.4  protocol version 26\n# Redhat Linux 7.1\n# rsync 2.5.5-0.1 with custom banner on Debian Woody\nmatch rsync m|^@RSYNCD: (\\d+)| i/protocol version $1/\n# Synology Network Backup Service (rsync backup)\nmatch rsync m|^@ERROR: protocol startup error\\n|\n\nmatch rtrdb m|^\\0\\0\\0d\\x01\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0\\x03\\0\\0\\x000u\\0\\0\\0\\0\\x06\\x08\\0\\0\\0\\0\\x08\\0\\0\\0\\x06\\0\\x02\\0\\x01\\x12\\x9d\\r\\x06\\0\\x04\\0\\x01\\0\\0\\0\\x06\\0\\x05\\0\\x01\\xb1\\x9c\\r\\x06\\0\\x06\\0\\x01\\0\\0\\0\\x06\\0\\x08\\0\\x01\\x12\\x9d\\r\\x06\\0\\t\\0\\x01\\0\\0\\0\\x06\\0\\n\\0\\x01\\xb1\\x9c\\r\\x01\\0d\\0\\x02\\0\\0\\0$| p/Polyhydra Real-time Relational Database/ v/8.6/\n\nmatch rpacd m|^\\0\\x01\\0\\n\\0\\0\\0=The host is not in the allowed host list\\. Connection refused\\.$| p/WinPcap Remote Capture Packet daemon/ o/Windows/ cpe:/a:winpcap:winpcap/ cpe:/o:microsoft:windows/a\nmatch rpd m|^\\+host=cashew version=([\\d.]+) uptime=[\\d+:]+ audio-bits=\\d+ audio-byte-order=\\w+-endian| p/Remote Play Daemon/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch runes-of-magic m|^\\x10\\0\\0\\0\\x03| p/Runes of Magic game server/\n\n# Simple Asynchronous File Transfer (SAFT)\nmatch saft m|^220 ([-\\w.]+) SAFT server \\(sendfiled ([\\w.]+) on ([\\w]+)\\) ready\\.\\r\\n| p/sendfiled/ v/$2/ o/$3/ h/$1/\n\nmatch samsung-sap m|^.{21}\\x01([\\w-]+);(\\w+);([^;]+);SWatch;SAP_[A-F0-9]{32}\\x01|s p/Samsung smartwatch app/ i/$2 $3; model: $1/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\n\nmatch sap-logviewer m|^READY#Logviewer#([\\d.]+)\\r\\n| p/SAP NetWeaver Logviewer/ v/$1/ cpe:/a:sap:netweaver_logviewer:$1/\n\nmatch saprouter m|^\\0\\0\\0.NI_RTERR\\0.\\0\\0\\xff\\xff\\xff\\xfb\\0\\0\\0.\\*ERR\\*\\x001\\0connection timed out\\0-5\\0NI \\(network interface\\)\\x00\\d+\\x00\\d+\\0nirout\\.cpp\\x00\\d+\\0RTPENDLIST::timeoutPend: no route received within 5s \\(CONNECTED\\)\\0([^\\0]+)\\0\\0\\0\\0\\d+\\0SAProuter ([\\d.]+) \\(SP(\\d+)\\) on '([\\w._-]+)'\\0\\0\\0\\0\\0\\*ERR\\*\\0\\0\\0\\0\\0|s p/SAProuter/ v/$2 SP$3/ i/local time: $1/ h/$4/ cpe:/a:sap:network_interface_router:$2:sp$3/\nmatch saprouter m|^\\0\\0\\0.NI_RTERR\\0.\\0\\0\\xff\\xff\\xff\\xfb\\0\\0\\0.\\*ERR\\*\\x001\\0connection timed out\\0-5\\0NI \\(network interface\\)\\x00\\d+\\x00\\d+\\0nirout\\.cpp\\x00\\d+\\0RTPENDLIST::timeoutPend: no route received within 5s \\(CONNECTED\\)\\0([^\\0]+)\\0\\0\\0\\0\\d+\\0SAProuter ([\\d.]+) on '([\\w._-]+)'\\0\\0\\0\\0\\0\\*ERR\\*\\0\\0\\0\\0\\0|s p/SAProuter/ v/$2/ i/local time: $1/ h/$3/ cpe:/a:sap:network_interface_router:$2/\nmatch saprouter m|^\\0\\0\\0.NI_RTERR\\0.\\0\\0\\xff\\xff\\xff\\xfb\\0\\0\\0.\\*ERR\\*\\x001\\0connection timed out\\0-5\\0NI \\(network interface\\)\\x00\\d+\\x00\\d+\\0nirout\\.cpp\\x00\\d+\\0RTPENDLIST::timeoutPend: CONNECTED timeout\\0([^\\0]+)\\0\\0\\0\\0\\d+\\0SAProuter ([\\d.]+) \\(SP(\\d+)\\) on '([\\w._-]+)'\\0\\0\\0\\0\\0\\*ERR\\*\\0\\0\\0\\0\\0|s p/SAProuter/ v/$2 SP$3/ i/local time: $1/ h/$4/ cpe:/a:sap:network_interface_router:$2:sp$3/\nmatch saprouter m|^\\0\\0\\0.NI_RTERR\\0.\\0\\0\\xff\\xff\\xff\\xfb\\0\\0\\0.\\*ERR\\*\\x001\\0connection timed out\\0-5\\0NI \\(network interface\\)\\x00\\d+\\x00\\d+\\0nirout\\.cpp\\x00\\d+\\0RTPENDLIST::timeoutPend: CONNECTED timeout\\0([^\\0]+)\\0\\0\\0\\0\\d+\\0SAProuter ([\\d.]+) on '([\\w._-]+)'\\0\\0\\0\\0\\0\\*ERR\\*\\0\\0\\0\\0\\0|s p/SAProuter/ v/$2/ i/local time: $1/ h/$3/ cpe:/a:sap:network_interface_router:$2/\nmatch saprouter m|^\\0\\0\\0.NI_RTERR\\0.\\0\\0\\xff\\xff\\xff\\xa4\\0\\0\\0.\\*ERR\\*\\x001\\0route could not be established\\0-92\\0NI \\(network interface\\)\\0\\d+\\0\\0\\0\\0\\0([^\\0]+)\\0\\0\\0\\0\\0SAProuter\\0\\0\\0\\0\\0\\*ERR\\*\\0\\0\\0\\0\\0|s p/SAProuter/ i/local time: $1/ cpe:/a:sap:network_interface_router/\n\nmatch scalix-ual m|^\\x02\\x1c50\\x1c\\x03\\0\\0\\0\\0$| p/Scalix UAL/\nmatch scanager m|^\\*\\*\\* ITSO_DB_FAIL \\*\\*\\* invalid request\\r\\n| p/Indiana University Scanager DB/\n\nmatch serial m|^\\nAccess to serial port port01 via unauthorised telnet is not allowed\\n\\n| p/Opengear serial port unauthenticated access/ i/disabled/ d/remote management/\nmatch servicetags m|^I/O error : Permission denied\\n$| p/Sun service tags/ cpe:/a:sun:service_tags/\n\n# This sdmsvc was matching HP printers.  May be bogus, so removed.\n# match sdmsvc m|^[\\xaa\\xff]$| p/LANDesk Software Distribution/ i/sdmsvc.exe/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch siemens-xtrace m|^OK\\x1d\\0\\x0e\\x18.\\x08\\x02\\x10\\xd5q..([\\w.]+)\\0\\0\\0\\0\\0\\0|s p/Siemens X-Trace/ i/production version: $1/\n\n# http://www.ietf.org/internet-drafts/draft-martin-managesieve-04.txt\nmatch sieve m|^NO Fatal error: Error initializing actions\\r\\n$| p/Cyrus timsieved/ i|included w/cyrus imap| cpe:/a:cmu:cyrus_imap_server/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"Cyrus timsieved v([\\w._-]+-Red Hat[- ][\\w._+-]+)\\\"\\r\\n| p/Cyrus timsieved/ v/$1/ i/Red Hat/ o/Linux/ cpe:/a:cmu:cyrus_imap_server:$1/ cpe:/o:redhat:linux/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"Cyrus timsieved v([\\w._-]+-Debian[- ][\\w._+-]+)\\\"\\r\\n| p/Cyrus timsieved/ v/$1/ i/Debian/ o/Linux/ cpe:/a:cmu:cyrus_imap_server:$1/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"Cyrus timsieved \\(Murder\\) v([-.\\w]+)\\\"\\r\\n| p/Cyrus timsieved Murder/ v/$1/ cpe:/a:cmu:cyrus_imap_server:$1/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"Cyrus timsieved v([\\w_.]+)-OS X ([^\"]+)\\\"\\r\\n| p/Cyrus timsieved/ v/$1/ o/Mac OS X $2/ cpe:/a:cmu:cyrus_imap_server:$1/ cpe:/o:apple:mac_os_x:$2/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"Cyrus timsieved v(\\d[-.\\w]+)\\\"\\r\\n| p/Cyrus timsieved/ v/$1/ i|included w/cyrus imap| cpe:/a:cmu:cyrus_imap_server:$1/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"dovecot\\\"\\r\\n| p/Dovecot timsieved/ cpe:/a:dovecot:dovecot/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"DBMail timsieved ([\\w._-]+)\\\"\\r\\n| p/DBMail timsieved/ v/$1/ cpe:/a:paul_j_stevens:dbmail:$1/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"CITADEL Sieve ([\\d.]+)\\\"\\r\\n| p/Citadel timsieved/ v/$1/ cpe:/a:citadel:ux:$1/\nmatch sieve m|^/usr/share/pysieved/plugins/dovecot\\.py:27: DeprecationWarning: The popen2 module is deprecated\\.  Use the subprocess module\\.\\n  import popen2\\n\\\"IMPLEMENTATION\\\" \\\"pysieved ([\\w._+-]+)\\\"\\r\\n| p/pysieved/ v/$1/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"pysieved ([\\w._-]+)\\\"\\r\\n| p/pysieved/ v/$1/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"Dovecot Pigeonhole\\\"\\r\\n\\\"SIEVE\\\" \\\"[\\w._;-]+(?:\\s+[\\w._;-]+)*\\\"\\r\\n\\\"NOTIFY\\\" \\\"mailto\\\"\\r\\n\\\"SASL\\\" \\\"[\\w._;-]*(?:\\s+[\\w._;-]+)*\\\"\\r\\n\\\"STARTTLS\\\"\\r\\n\\\"VERSION\\\" \\\"([\\w._-]+)\\\"\\r\\nOK \\\"[^\"]*\\\"\\r\\n$| p/Dovecot Pigeonhole sieve/ v/$1/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"Dovecot \\(Ubuntu\\) Pigeonhole\\\"\\r\\n\\\"SIEVE\\\" \\\"[\\w._;-]+(?:\\s+[\\w._;-]+)*\\\"\\r\\n\\\"NOTIFY\\\" \\\"mailto\\\"\\r\\n\\\"SASL\\\" \\\"[\\w._;-]*(?:\\s+[\\w._;-]+)*\\\"\\r\\n\\\"STARTTLS\\\"\\r\\n\\\"VERSION\\\" \\\"([\\w._-]+)\\\"\\r\\nOK \\\"[^\"]*\\\"\\r\\n$| p/Dovecot Pigeonhole sieve/ v/$1/ i/Ubuntu/ o/Linux/ cpe:/o:canonical:ubuntu_linux/\nmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"(\\d+\\.\\d+)\\\"\\r\\n\\\"SASL\\\" \\\"PLAIN\\\"\\r\\n\\\"SIEVE\\\" \\\"fileinto reject envelope vacation imapflags notify subaddress relational comparator-i;ascii-numeric\\\"\\r\\nOK\\r\\n| p/pysieved/ v/$1/\n\nsoftmatch sieve m|^\\\"IMPLEMENTATION\\\" \\\"([^\"])\\\"\\r\\n\\\"SIEVE\\\" \\\"| p/sieved/ i/$1/\n\nmatch silkroad-online m|^%\\0\\0P\\0\\0\\x0e.{9}\\0\\0\\0.\\0\\0\\0.{20}|s p/Silkroad Online game server/ cpe:/a:joymax:silkroad_online/\n\nmatch sftp m|^\\+Shiva SFTP Service\\0$| p/Shiva LanRover SFTP service/\n\nmatch sgms m|^SGMS Scheduler SGMS (\\d+) ([\\d.]+) .*\\n>| p/Sonicwall Viewpoint SGMSd/ v/$2/ i/SGMS protocol $1/ d/firewall/\nmatch sguil m|^SGUIL-([\\w._-]+) OPENSSL ENABLED\\r\\n$| p/Sguil/ v/$1/ cpe:/a:sguil:sguil:$1/\n\nmatch shaiya m|^\\xc7\\x00\\x01\\xa1\\x00\\x40\\x80.{192}$|s p/Shaiya game server/\n\nmatch sharefolder m|^t\\x03\\0\\0$| p/Public ShareFolder mailbox synchronization/\n\n# HP-UX B.11.00 A 9000/785\nmatch shell m|^\\x01remshd: getservbyname\\n$| p/HP-UX Remshd/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch shell m|^\\x01remshd: Kerberos Authentication not enabled\\.\\n| p/HP-UX Remshd/ i/Kerberos disabled/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch shell m|^\\x01remshd: Error! Kerberos authentication failed| p/HP-UX Remshd/ i/Kerberos broken/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch shell m|^\\* You are not welcome to use rshd from .*\\n| p/FreeBSD rshd/ i/Access denied/ o/Unix/\nmatch shell m|^\\x01getnameinfo: Temporary failure in name resolution\\n| p/Netkit rshd/ cpe:/a:netkit:netkit_rsh/\nmatch shell m|^\\x01Unauthorized request rejected\\.\\n| p|OS/2 rshd| o|OS/2| cpe:/o:ibm:os2/a\n\n# Backdoor shell!\nmatch bindshell m|^(?:ba)?sh-\\d\\.\\d+\\w?# $| p/ROOT SHELL/ i/**BACKDOOR**/ o/Unix/\nmatch bindshell m|^(?:ba)?sh-\\d\\.\\d+\\w?\\$ $| p/bind shell/ i/**BACKDOOR**/ o/Unix/\nmatch bindshell m|^root@metasploitable:/# | p/Metasploitable root shell/\nmatch bindshell m|^(?:ba)?sh: no job control in this shell\\n(?:ba)?sh-\\d\\.\\d+\\w?\\$ $| p/bind shell/ i/**BACKDOOR**/ o/Unix/\n\n# \"version\" may be locale-dependent: reported as Portuguese with versão\nmatch bindshell m|^Microsoft Windows ([^[]+) \\[[^]]+ ([\\d.]+)\\]\\r\\n\\(C\\) Copyright 1985-\\d\\d\\d\\d Microsoft Corp\\.\\r\\n\\r\\n(.*)>| p/CMD.EXE/ i/**BACKDOOR**; Windows $2; path: $3/ o/Windows $1/ cpe:/o:microsoft:windows_$SUBST(1,\" \",\"_\")/\nmatch bindshell m=^Microsoft Windows (2000|XP|NT 4\\.0) \\[Version ([\\d.]+)\\]\\r\\n\\(C\\) Copyright 1985-20\\d\\d Microsoft Corp\\.\\r\\n\\r\\n= p/Microsoft Windows cmd.exe/ v/$2/ i/**BACKDOOR**/ o/Windows $1/ cpe:/o:microsoft:windows/a\nmatch bindshell m|^Microsoft Windows \\[Version ([\\d.]+)\\]\\r\\n\\(C\\) Copyright 1985-20\\d\\d Microsoft Corp\\.\\r\\n\\r\\n| p/Microsoft Windows cmd.exe/ v/$1/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch bindshell m|^Microsoft Windows \\[Version ([\\d.]+)\\]\\r\\nCopyright \\(c\\) 20\\d\\d Microsoft Corporation\\.  All rights reserved\\.\\r\\n\\r\\n| p/Microsoft Windows $1 cmd.exe/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\n\n\nmatch satstrat m|^VERSION ([\\d.]+)\\r\\nJOIN 0\\r\\nNICK 0 !SaCkS\\r\\nJOIN 1\\r\\n| p/SatStrat/ v/$1/\nmatch securepath m|^GENERAL: \\d+ \\d+<EoM>\\n$| p/HP StorageWorks SecurePath/ o/Windows/ cpe:/a:hp:storageworks_secure_path/ cpe:/o:microsoft:windows/a\nmatch securepath m|^Unauthorized client; connection refused<EoM>\\n| p/HP StorageWorks SecurePath/ i/unauthorized/ o/Windows/ cpe:/a:hp:storageworks_secure_path/ cpe:/o:microsoft:windows/a\nmatch service-monitor m|^\\0\\0\\0\\x18\\0\\0..\\0\\0..\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\0\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0.([^\\0]+)\\0|s p/CA Spectrum/ i/User $1/\nmatch service-monitor m|^550 Bad syntax\\. Go away\\.\\n$| p/CA Spectrum/\n\nmatch slnp m|^220 SLNP (\\w+)@[vV]ersion:\\s?V?([^@]+)@pid:\\d+\\n$| p/Sisis $1/ v/$2/ o/Unix/\nmatch slnp m|^220 SLNP (\\w+)@[vV]ersion:\\s?V?([^@]+)@user:([^@]+)@pid:\\d+\\n$| p/Sisis $1/ v/$2/ i/User: $3/ o/Unix/\n\nmatch slx m|^\\0\\0\\0,\\x9b\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0.{32}|s p/SalesLogix DB/\n\n# port 1248, any probe\nmatch sma-solar m|^\\x01\\0\\x04\\0Z\\x06\\0\\0| p/SMA Sunny WebBox/ d/power-misc/\n\nmatch stageremote m|^\\x0b\\0\\0\\0\\x08\\0{15}\\x04\\0{107}| p/Dell Stage Remote/\n\nmatch starutil m|^star-v3 utility server\\n\\0| p/StarUTIL router config/ v/3/ d/router/\n\n# good SMTP banner regexps can be found here:\n# http://www.tty1.net/smtp-survey/measurement_en.html\n\n# Goes at the top because some general match lines (Exim)\n# will match the replayed greeting of the proxied server!\nmatch smtp-proxy m|^220 ([-\\w_.]+) PGP Universal service ready \\(proxied server greeted us with: (.*)\\)\\r\\n| p/PGP Universal smtp proxy/ i/Proxied greeting: $2/ h/$1/ cpe:/a:pgp:universal_server/\n\nmatch smtp m|^220 ([-/.+\\w]+) MailGate ready for ESMTP on | p/MailGate smtpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-/.+\\w]+) SMTP ready to roll\\r\\n| p/Hotmail Popper hotmail to smtp gateway/ h/$1/\nmatch smtp m|^220 ([-/.+\\w]+) AvMailGate-(\\d[-.\\w]+)\\r\\n| p/AvMailGate smtp anti-virus mail gateway/ v/$2/ h/$1/\nmatch smtp m|^220 ([-/.+\\w]+) Internet Rex ESMTP daemon at your service\\.\\r\\n| p/Internet Rex smtpd/ h/$1/\nmatch smtp m|^220 ([-.+\\w]+) ESMTP NetIQ MailMarshal \\(v(\\d[-.\\w]+)\\) Ready\\r\\n| p/MailMarshal/ v/$2/ h/$1/\nmatch smtp m|^220 ([-.+\\w]+) ESMTP NetIQ MailMarshal \\d[-.\\w]+ Service Pack (\\w+) \\(v(\\d[-.\\w]+)\\) Ready\\r\\n| p/MailMarshal/ v/$3 Service Pack $2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP MailMarshal \\(v([\\d.]+)\\) Ready\\r\\n| p/MailMarshal/ v/$2/ h/$1/\n# I think the revision number is different than the official product version number\n# Dots in Revision to prevent MY CVS from screwing it up\nmatch smtp m|^220 ([-.+\\w]+) Novonyx SMTP ready \\$Re..sion: *([\\d.]+) *\\$\\r\\n| p/Novonyx Novell NetMail smtpd/ v/$2/ h/$1/ cpe:/a:novell:netmail:$2/\nmatch smtp m|^554-([-.+\\w]+)\\.us\\r\\n554 Access denied\\r\\n$| p/IronPort appliance mail rejector/ h/$1/\nmatch smtp m|^220 eSafe@([-.+\\w]+) Service ready\\r\\n| p/eSafe mail gateway/ h/$1/\nmatch smtp m|^220[ -](\\S+) ESMTP Merak (\\d[^;]+);|i p/Merak Mail Server smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220[ -]\\]-:\\^:-\\[ ESMTP \\]-:\\^:-\\[; .*\\r\\n| p/Merak Mail Server smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220.*?MERCUR SMTP[\\s-]Server \\(v([^)]+)\\) for ([-.\\w ]+) ready at | p/LAN-ACES MERCUR smtp server/ v/$1/ o/$2/\nmatch smtp m|^220 ([-.+\\w]+) MasqMail (\\d[-.\\w]+) ESMTP\\r\\n| p/MasqMail smtpd/ v/$2/ h/$1/\n# Barracuda Networks \"Spam Firewall\" embedded spam appliances\nmatch smtp m|^220 ([-.\\w\\d]+) ESMTP \\([a-fA-F0-9]{32}\\)\\r\\n| p/Barracuda Networks Spam Firewall smtpd/ h/$1/ cpe:/h:barracudanetworks:spam_%26_virus_firewall_600:-/\nmatch smtp m|^554 Service unavailable; Client host \\[[\\w._-]+\\] blocked using Barracuda Reputation;| p/Barracuda Networks Spam Firewall smtpd/ i/client blocked by Barracuda Reputation/ cpe:/h:barracudanetworks:spam_%26_virus_firewall_600:-/\n# Cisco NetWorks ESMTP server IOS (tm) 5300 Software (C5300-IS-M) on Cisco 5300 Access Server\nmatch smtp m|^220 ([-.+\\w]+) Cisco NetWorks ESMTP server\\r\\n| p/Cisco IOS NetWorks smtp server/ d/terminal server/ o/IOS/ h/$1/ cpe:/o:cisco:ios/a\nmatch smtp m|^220 ([-.+\\w]+) Mercury/32 v(\\d[-.\\w]+) ESMTP server ready\\.\\r\\n| p|Mercury/32 smtpd| v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n# Canon ImageRunner SMTP server (network scanner/copier/printer)\nmatch smtp m|^220 Canon[-.\\w]+ ESMTP Ready\\r\\n| p/Canon printer smtp server/ d/printer/\nmatch smtp m|^220 .*?eSafe E?SMTP Service (\\d\\S+) ready| p/eSafe mail gateway/ v/$1/\nmatch smtp m|^220 .*?eSafe E?SMTP Service ready| p/eSafe mail gateway/\nmatch smtp m|^520 Connection not authorised from this address\\.\\r\\n| p/Mercury smtpd/ i/Connection not authorised/\n# Exim 3.36 on Linux 2.4 blocking the given IP\nmatch smtp m|^554 SMTP service not available\\r\\n$| p/Exim smtpd/ i/Serviced refused (IP block)/ cpe:/a:exim:exim/\n# Jana Server 1.45 on Win98\nmatch smtp m|^220 Jana-Server Simple Mail Transfer Service ready\\r\\n| p/JanaServer mail server/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 <1\\d+\\.\\d+@([-.\\w]+)> \\[XMail (\\d[-.\\w]+) ESMTP Server\\] service ready; | p/XMail SMTP server/ v/$2/ h/$1/ cpe:/a:davide_libenzi:xmail:$2/\nmatch smtp m|^220 <1\\d+\\.\\d+@([-.\\w]+)> \\[XMail (\\d[-.\\w]+) \\(([-./\\w]+)\\) ESMTP Server\\] service ready; | p/XMail SMTP server/ v/$2/ i/on $3/ h/$1/ cpe:/a:davide_libenzi:xmail:$2/\nmatch smtp m|^220 ([-\\w_.]+) <1\\d+\\.\\d+@[-\\w_.]+> \\[XMail (\\d[-.\\w]+) ESMTP Server\\] service ready| p/XMail SMTP server/ v/$2/ h/$1/ cpe:/a:davide_libenzi:xmail:$2/\nmatch smtp m|^421 \\[XMail ([\\d.]+) \\(Linux/Ix86\\) ESMTP Server\\] - Server does not like Your IP\\r\\n| p/XMail SMTP server/ v/$1/ i|Linux/x86| o/Linux/ cpe:/a:davide_libenzi:xmail:$1/ cpe:/o:linux:linux_kernel/a\nmatch smtp m|^220 ([-.\\w]+) FirstClass ESMTP Mail Server v(\\d[-.\\w]+) ready\\r\\n| p/FirstClass SMTP server/ v/$2/ h/$1/ cpe:/a:opentext:firstclass:$2/\nmatch smtp m|^220 ([-.\\w]+) AppleMailServer (\\d[-.\\w]+) SMTP Server Ready\\r\\n| p/AppleMailServer/ v/$2/ h/$1/\nmatch smtp m|^220 ([-.\\w]+) ESMTP CommuniGate Pro (\\d[-.\\w]+)\\r\\n| p/CommuniGate Pro SMTP/ v/$2/ h/$1/ cpe:/a:stalker:communigate_pro:$2/\nmatch smtp m|^220[- ]([-.\\w]+) MailSite ESMTP Receiver Version (\\d[-.\\w]+) Ready\\r\\n| p/Rockliffe MailSite/ v/$2/ h/$1/\nmatch smtp m|^220 ([-.\\w]+) eXtremail V(\\d[-.\\w]+) release (\\d+) ESMTP server ready \\.\\.\\.\\r\\n| p/eXtremail smtpd/ v/$2.$3/ h/$1/\nmatch smtp m|^220 ([-.\\w]+) eXtremail V(\\d[-.\\w]+) release (\\d+) rev(\\d+) ESMTP server ready \\.\\.\\.\\r\\n| p/eXtremail smtpd/ v/$2.$3.$4/ h/$1/\nmatch smtp m|^220 Welcome to ([-.\\w]+) - VisNetic MailScan ESMTP Server BUILD (\\d[-.\\w]+)\\r\\n| p/VisNetic MailScan ESMTP server/ v/$2/ h/$1/\n# HP Service Desk 4.5 SMTP Server\nmatch smtp m|^220 ([-.\\w]+) service desk (\\d[-.\\w]+) SMTP Service Ready for input\\.\\r\\n| p/HP Service Desk SMTP server/ v/$2/ h/$1/\n# VPOP3 SMTP server 2.0.0d\nmatch smtp m|^220 ([-.\\w]+) VPOP3 SMTP Server Ready\\r\\n| p/PSCS VPOP3 mail server/ h/$1/\n# CommuniGate Pro 4.1.3 on Mac OS X 10.2.6\nmatch smtp m|^220 ([-.\\w]+) ESMTP CommuniGate Pro (\\d[-.\\w]+) is glad to see you!\\r\\n| p/CommuniGate Pro mail server/ v/$2/ h/$1/ cpe:/a:stalker:communigate_pro:$2/\nmatch smtp m|^220 .* SMTP Server ([\\w._-]+) is glad to see you!\\r\\n| p/CommuniGate Pro mail server/ v/$1/ cpe:/a:stalker:communigate_pro:$1/\nmatch smtp m|^220 ([\\w._-]+) ESMTP is glad to see you!\\r\\n| p/CommuniGate Pro mail server/ h/$1/ cpe:/a:stalker:communigate_pro/\nmatch smtp m|^220[ -]([-.\\w]+) ESMTP MDaemon (\\d[-.\\w]+); | p/Alt-N MDaemon mail server/ v/$2/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-.+\\w]+) \\(IMail ([^)]+)\\) NT-ESMTP Server| p/IMail NT-ESMTP/ v/$2/ o/Windows/ h/$1/ cpe:/a:ipswitch:imail:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 X1 NT-ESMTP Server ([-.+\\w]+) \\(IMail ([^)]+)\\)\\r\\n| p/IMail NT-ESMTP/ v/$2/ o/Windows/ h/$1/ cpe:/a:ipswitch:imail:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^421  Insufficient System Storage\\.\\(IMail ([\\d.]+)\\)\\r\\n| p/IMail smtpd/ v/$1/ i/Storage full/ o/Windows/ cpe:/a:ipswitch:imail:$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220-([-.+\\w]+) Microsoft SMTP MAIL ready at.*Version: ([-\\w.]+)\\r\\n| p/Microsoft SMTP/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 \\[?([-.+\\w]+)\\]? Microsoft ESMTP MAIL Service, Version: ([-\\w.]+) ready| p/Microsoft ESMTP/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) Microsoft ESMTP MAIL Service ready at| p/Microsoft Exchange smtpd/ o/Windows/ h/$1/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([\\w._-]+) Microsoft ESMTP MAIL Service Version: ([\\w._-]+)\\r\\n| p/Microsoft Exchange 2010 smtpd/ v/$2/ h/$1/ cpe:/a:microsoft:exchange_server:2010/\nmatch smtp m|^220 Microsoft ESMTP MAIL Service, Version: ([\\w._-]+)\\r\\n| p/Microsoft Exchange smtpd/ v/$1/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-.+\\w]+) ESMTP Server \\(Microsoft Exchange Internet Mail Service ([-\\w.]+)\\) ready| p/Microsoft Exchange smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) Microsoft Exchange Internet Mail Service ([-\\w_.]+) ready\\r\\n| p/Microsoft Exchange smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 \\+OK Microsoft Exchange SMTP server version ([\\d.]+)| p/Microsoft Exchange smtpd/ v/$1/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch smtp m|^421 [\\d.]+ Service not available, closing transmission channel\\r\\n| p/Microsoft Exchange smtpd/ i/disabled/ o/Windows/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220[\\s-](\\S+) E?SMTP Sendmail (\\d[^; ]+)| p/Sendmail/ v/$2/ o/Unix/ h/$1/ cpe:/a:sendmail:sendmail:$2/\nmatch smtp m|^220[\\s-](\\S+) E?SMTP Sendmail ready | p/Sendmail/ o/Unix/ h/$1/ cpe:/a:sendmail:sendmail/\nmatch smtp m|^220[\\s-](\\S+) E?SMTP Sendmail AIX([\\d.]+)/(\\d[^; ]+)| p/Sendmail/ v/$3/ i/AIX $2/ o/AIX/ h/$1/ cpe:/a:sendmail:sendmail:$3/ cpe:/o:ibm:aix/a\nmatch smtp m|^220[\\s-](\\S+) E?SMTP Sendmail AIX([\\d.]+)/UCB (\\d[^; ]+);| p/Sendmail/ v/$3/ i/AIX $2/ o/AIX/ h/$1/ cpe:/a:sendmail:sendmail:$3/ cpe:/o:ibm:aix/a\nmatch smtp m|^220[\\s-](\\S+) E?SMTP Sendmail @\\(#\\)Sendmail version (\\d[^; ]+) - Revision ([\\d.]+) | p/Sendmail/ v/$2 rev $3/ o/HP-UX/ h/$1/ cpe:/a:sendmail:sendmail:$2r$3/ cpe:/o:hp:hp-ux/a\nmatch smtp m|^220[\\s-](\\S+) E?SMTP Sendmail @\\(#\\)Sendmail version (\\d[^; ]+) - Revision ([\\d.]+):: HP-UX([\\d.]+)| p/Sendmail/ v/$2 rev $3/ o/HP-UX $4/ h/$1/ cpe:/a:sendmail:sendmail:$2r$3/\nmatch smtp m|^220[\\s-](\\S+) Sendmail (SMI-\\S+) ready at .*\\r\\n$| p/Sendmail/ v/$2/ o/Unix/ h/$1/ cpe:/a:sendmail:sendmail:$2/\nmatch smtp m|^220[\\s-]([-\\w_.]+) Sendmail (\\S+) ready at .*\\r\\n| p/Sendmail/ v/$2/ o/Unix/ h/$1/ cpe:/a:sendmail:sendmail:$2/\nmatch smtp m|^220[\\s-]([-\\w_.]+) ESMTP Sendmail SGI-(\\d[^; ]+)| p/Sendmail/ v/$2/ o/IRIX/ h/$1/ cpe:/a:sendmail:sendmail:$2/ cpe:/o:sgi:irix/a\nmatch smtp m|^220  E?SMTP ([\\w._-]+) Sendmail ([\\w._-]+)/[\\w._-]+ ready at | p/Sendmail/ v/$2/ o/IRIX/ h/$1/ cpe:/a:sendmail:sendmail:$2/ cpe:/o:sgi:irix/a\nmatch smtp m|^421 4\\.3\\.2 Connection rate limit exceeded\\.\\r\\n$| p/Sendmail/ cpe:/a:sendmail:sendmail/\nmatch smtp m|^220[- ]([^\\r\\n]+) ESMTP Exim (V?\\d\\S+)| p/Exim smtpd/ v/$2/ h/$1/ cpe:/a:exim:exim:$2/\nmatch smtp m|^220[- ].*\\r\\n220[- ]([^\\r\\n]+) ESMTP Exim |s p/Exim smtpd/ h/$1/ cpe:/a:exim:exim/\nmatch smtp m|^220 CheckPoint FireWall-1 secure ESMTP server\\r\\n$| p/Check Point FireWall-1 smtpd/ d/firewall/ cpe:/a:checkpoint:firewall-1/\nmatch smtp m|^220 CheckPoint FireWall-1 secure SMTP server\\r\\n$| p/Check Point FireWall-1 smtpd/ d/firewall/ cpe:/a:checkpoint:firewall-1/\nmatch smtp m|^220 ([-.+\\w]+) running IBM AS/400 SMTP V([\\w]+)| p|IBM AS/400 smtpd| v/$2/ h/$1/\nmatch smtp m|^220 ([-.+\\w]+) ESMTP MailEnable Service, Version: (\\d[\\w.]+)- ready at | p/MailEnable smptd/ v/$2/ o/Windows/ h/$1/ cpe:/a:mailenable:mailenable:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-.+\\w]+) ESMTP Mail Enable SMTP Service, Version: (\\d[\\w.]+)-- ready at| p/MailEnable smptd/ v/$2/ o/Windows/ h/$1/ cpe:/a:mailenable:mailenable:$2/ cpe:/o:microsoft:windows/a\n# Enterprise version number seems to be preceded by \"0--\"; Professional with \"0-\"\nmatch smtp m|^220 ([-.+\\w]+) ESMTP MailEnable Service, Version: \\d+--([\\d.]+) ready at| p/MailEnable Enterprise smptd/ v/$2/ o/Windows/ h/$1/ cpe:/a:mailenable:mailenable:$2:-:enterprise/ cpe:/o:microsoft:windows/a\n# Catch-alls. Hyphens aren't making sense -Doug\nmatch smtp m|^220 ([-.+\\w]+) ESMTP MailEnable Service, Version: ([\\w._-]+) ready at| p/MailEnable smptd/ v/$2/ o/Windows/ h/$1/ cpe:/a:mailenable:mailenable:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^530 ([-.+\\w]+) ESMTP MailEnable Service, Version: ([\\w._-]+) denied access at| p/MailEnable smptd/ v/$2/ i/Denied access/ o/Windows/ h/$1/ cpe:/a:mailenable:mailenable:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-.+\\w]+) ESMTP CPMTA-([-.+\\w]+) - NO UCE\\r\\n| p/CPMTA/ v/$2/ i/qmail-derived/ h/$1/\nmatch smtp m|^220 ([-.+\\w]+) SMTP/smap Ready\\.\\r\\n| p/Smap/ i/from firewall toolkit/ h/$1/\nmatch smtp m|^220 ([-.+\\w]+) ESMTP service \\(Netscape Messaging Server ([-.+ \\w]+) \\(built| p/Netscape Messaging Server/ v/$2/ h/$1/ cpe:/a:netscape:messaging_server:$2/\nmatch smtp m|^220-InterScan Version (\\S+) .*Ready\\r\\n220 ([-.+\\w]+) NTMail \\(v([-.+\\w]+)/.* ready| p/Trend Micro InterScan/ v/$1/ i/on NTMail $3/ o/Windows/ h/$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220-InterScan Version (\\S+) .*Ready\\r\\n220 ([-.+\\w]+) ESMTP Postfix\\r\\n| p/Trend Micro InterScan/ v/$1/ i/on Postfix/ o/Unix/ h/$2/ cpe:/a:postfix:postfix/\nmatch smtp m|^220-InterScan Version (\\S+) .*Ready\\r\\n220 ([-.+\\w]+) Microsoft ESMTP MAIL Service, Version: ([\\d.]+) ready at| p/Trend Micro InterScan/ v/$1/ i/on Microsoft ESMTP $3/ o/Windows/ h/$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220-InterScan Version (\\S+) .*Ready\\r\\n| p/Trend Micro InterScan/ v/$1/\nmatch smtp m|^220 ([-.\\w]+) InterScan VirusWall NT ESMTP (\\d[-.\\w]+) \\(build (\\d+)\\) ready at | p/Trend Micro InterScan VirusWall SMTP/ v/$2 build $3/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-.+\\w]+) GroupWise Internet Agent (\\S+) .*Novell, Inc\\..*\\r\\n| p/Novell GroupWise/ v/$2/ h/$1/ cpe:/a:novell:groupwise:$2/\nmatch smtp m|^220 \\S+ \\S+ ESMTP receiver fssmtpd(\\d+) ready| p/fssmtpd/ v/$1/\nmatch smtp m|Failed to open configuration file.*exim| p/Exim smtpd/ i/broken/ cpe:/a:exim:exim/\nmatch smtp m|^220 SMTP Server RoiMailServer ready\\.\\r\\n| p/Exim smtpd/ cpe:/a:exim:exim/\nmatch smtp m|^220 Trend Micro ESMTP ([-.+\\w]+) ready\\.\\r\\n$| p/Trend Micro ESMTP/ v/$1/\nmatch smtp m|^220 Matrix SMTP Mail Server v([\\w.]+) on <MATRIX_([\\w]+)> Simple Mail Transfer Service Ready\\r\\n| p/Matrix SMTP Mail Server/ v/$1/ i/on Matrix $2/\nmatch smtp m|^220(\\S+) WebShield SMTP V(\\d\\S.*?) Network Associates, Inc\\. Ready at| p/Network Associates WebShield/ v/$2/ h/$1/ cpe:/a:mcafee:webshield_smtp:$2/\nmatch smtp m|^220(\\S+) WebShielde(\\w+)/SMTP Ready.| p/WebShielde$2 smtpd/ h/$1/\nmatch smtp m|^220 ([-.+\\w]+) ESMTP MailMasher ready to boogie\\r\\n| p/MailMasher smtpd/ h/$1/\n# 220 example.com ESMTP Postfix (2.0.13) (Mandrake Linux)\nmatch smtp m|^220 ([-.\\w]+) ESMTP Postfix \\(([-.\\w]+)\\) \\(([-.\\w ]+)\\)| p/Postfix smtpd/ v/$2/ i/$3/ h/$1/ cpe:/a:postfix:postfix:$2/a\n# 220 Example LLC example.com ESMTP Postfix (2.6.1)\nmatch smtp m|^220 (.*) ([\\w._-]+) ESMTP Postfix \\(([\\w._-]+)\\)\\r\\n| p/Postfix smtpd/ v/$3/ i/$1/ h/$2/ cpe:/a:postfix:postfix:$3/a\n# postfix 1.1.11-0.woody2\nmatch smtp m|^220([\\s-]\\S+) ESMTP Postfix| p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^(?:220-.*\\r\\n)?220 ([\\w._-]+) ESMTP Postfix| p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 [\\*\\d\\ ]{2,300}\\r\\n| p/Cisco PIX sanitized smtpd/ d/firewall/ cpe:/o:cisco:pix_firewall_software/\nmatch smtp m|^220 ArGoSoft Mail Server Pro for WinNT/2000/XP, Version ([-.\\w]+) \\(([-.\\w]+)\\)\\r\\n| p/ArGoSoft Mail Server Pro/ v/$1/ i/$2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w.]+) ArGoSoft Mail Server Pro for WinNT/2000/XP, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft Mail Server Pro/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w.]+) ArGoSoft Mail Server, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft Mail Server/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ArGoSoft Mail Server Freeware, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft Mail Server Freeware/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ArGoSoft Mail Server Plus for WinNT/2000, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft Mail Server Plus/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-.\\w]+) ESMTP server \\([Pp]ost.[Oo]ffice v([-.\\w]+) release ([-.\\w]+) ID# | p/Post.Office/ v/$2 release $3/ h/$1/\nmatch smtp m|^220 ([-.\\w]+) ESMTP VisNetic.MailServer.v([-.\\w]+); | p/VisNetic MailServer/ v/$2/ h/$1/\n# CommuniGate Pro 4.0.5\nmatch smtp m|^220 ([-.\\w]+) ESMTP Service. Welcome.\\r\\n$| p/CommuniGate Pro smtpd/ h/$1/ cpe:/a:stalker:communigate_pro/\nmatch smtp m|^220 ([-.\\w]+) ESMTP CommuniGate Pro\\r\\n| p/CommuniGate Pro smtpd/ h/$1/ cpe:/a:stalker:communigate_pro/\nmatch smtp m|^220 ([-.\\w]+) Process Software ESMTP service V([-.\\w]+) ready| p/Process Software smtpd/ v/$2/ o/OpenVMS/ h/$1/ cpe:/o:hp:openvms/a\nmatch smtp m|^220 ([-.\\w]+) Mercury (\\d[-.\\w]+) ESMTP server ready\\.\\r\\n$| p/Mercury Mail smtpd/ v/$2/ h/$1/\nmatch smtp m|^220   ESMTP Service \\(Lotus Domino Release ([\\w._-]+)\\) ready at | p/Lotus Domino smtpd/ v/$1/ cpe:/a:ibm:lotus_domino:$1/\nmatch smtp m|^220 ([-.\\w]+) ESMTP Service \\(Lotus Domino Release (\\d[-.\\w ]+)\\) ready| p/Lotus Domino smtpd/ v/$2/ h/$1/ cpe:/a:ibm:lotus_domino:$2/\nmatch smtp m|^220 ([-.\\w]+) ESMTP Service \\(Lotus Domino (\\d[-.\\w ]+)\\) ready at| p/Lotus Domino smtpd/ v/$2/ h/$1/ cpe:/a:ibm:lotus_domino:$2/\nmatch smtp m|^220  ESMTP Service \\(Lotus Domino Release (\\d[-.\\w ]+)\\) ready at | p/Lotus Domino smtpd/ v/$1/ cpe:/a:ibm:lotus_domino:$1/\nmatch smtp m|^220 ([-.\\w]+) ESMTP Service \\(Lotus Domino Build V([\\w_]+) Beta (\\w+)\\) ready at | p/Lotus Domino smtpd/ v/$2 Beta $3/ h/$1/ cpe:/a:ibm:lotus_domino:$2:beta$3/\nmatch smtp m|^220  ESMTP Service \\(Lotus Domino Build V([\\w_]+) Beta (\\w+)\\) ready at | p/Lotus Domino smtpd/ v/$1 Beta $2/ cpe:/a:ibm:lotus_domino:$1:beta$2/\nmatch smtp m|^220 ([-.\\w]+) ESMTP Service \\(Lotus Domino Versione ([\\w._ -]+)\\) ready| p/Lotus Domino smtpd/ v/$2/ i/Italian/ h/$1/ cpe:/a:ibm:lotus_domino:$2:::it/\nmatch smtp m|^220 ([-.\\w]+) Lotus SMTP MTA Service Ready\\r\\n$| p/Lotus Notes SMTP/ h/$1/ cpe:/a:ibm:lotus_domino/\nmatch smtp m|^220 ([-.\\w]+) WebSTAR Mail Simple Mail Transfer Service Ready\\r\\n| p/WebSTAR SMTP server/ h/$1/\nmatch smtp m|^220 ([-.\\w]+) SMTP NAVGW (\\d[-.\\w]+);| p/Norton Antivirus Gateway NAVGW/ v/$2/ h/$1/\nmatch smtp m|^220 ([-.\\w]+) Kerio MailServer (\\d[-.\\w]+) ESMTP ready\\r\\n| p/Kerio MailServer/ v/$2/ h/$1/\nmatch smtp m|^220 ([-.\\w]+) Kerio MailServer (\\d[-.\\w]+ patch \\d+) ESMTP ready\\r\\n| p/Kerio MailServer/ v/$2/ h/$1/\nmatch smtp m|^220 YSmtp(\\S+) ESMTP service ready| p/Yahoo! smtpd/ h/$1/\nmatch smtp m|^220 (\\S+) GMX Mailservices ESMTP| p/GMX smtpd/ h/$1/\nmatch smtp m|^220 (\\S+) ESMTP MailMax (\\d[-.\\w\\d]+)| p/MailMax smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 (\\S+) ESMTP WEB.DE V([^\\s\\;]+)| p/Web.de smtpd/ v/$2/ h/$1/\nmatch smtp m|^relaylock: Error: PRODUCT_ROOT_D not defined\\nrelaylock: Error: PRODUCT_ROOT_D not defined\\n1\\n$| p/Plesk relaylock smtp wrapper/ i/broken/\nmatch smtp m|^220 Compuserve Office Mail Service \\(lnxc-(\\d+)\\) ESMTP| p/Compuserve smtpd/ v/$1/\nmatch smtp m|^220 Welcome to Nemesis ESMTP server on \\S+| p/Nemesis smtpd/\nmatch smtp m|^220 Welcome to the INDY SMTP Server\\r\\n$| p/INDY smtpd/\nmatch smtp m|^220 Postini E?SMTP (\\d+) [\\w\\d_+/:-]+ ready| p/Postini smtpd/ v/$1/\nmatch smtp m|^220 ([\\w\\d-]+)\\.hotmail\\.com Sending unsolicited commercial| p/Hotmail smtpd/ h/$1/\nmatch smtp m|^220[-\\s](\\S+) \\(IntraStore TurboSendmail\\) E?SMTP Service ready| p/TurboSendmail smtpd/ h/$1/\nmatch smtp m|^220[-\\s](\\S+) E?SMTP Mirapoint (\\d[^\\;]+);| p/Mirapoint smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([\\w._-]+) ESMTP Mirapoint Messaging Server MOS ([^;\\r\\n]+)[;\\r\\n]| p/Mirapoint Messaging Server MOS smtpd/ v/$2/ h/$1/\nmatch smtp m|^220[-\\s](\\S+) Trend Micro InterScan Messaging Security Suite, Version: (\\d\\S+) ready| p/Trend Micro InterScan smtpd/ v/$2/ h/$1/ cpe:/a:trendmicro:interscan_messaging_security_suite:$2/\nmatch smtp m|^220[-\\s](\\S+).*?Server ESMTP \\(iPlanet Messaging Server (\\d[^\\(\\)]+)| p/Sun iPlanet smtpd/ v/$2/ h/$1/ cpe:/a:sun:iplanet_messaging_server:$2/\nmatch smtp m|^220[-\\s](\\S+) running Eudora Internet Mail Server (\\d\\S+)| p/Eudora smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220[-\\s](\\S+) running Eudora Internet Mail Server X (\\d\\S+)\\r\\n| p/Eudora smtpd/ v/$2/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch smtp m|^220 (\\S+) - Maillennium E?SMTP| p/Maillennium smtpd/ h/$1/\nmatch smtp m|^220 (\\S+).*?SMTP \\(Sun Internet Mail Server sims.(\\d[^\\)]+)\\)| p/Sun sims smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 (\\S+) ESMTP qpsmtpd (\\d\\S+) ready;| p/qpsmtpd/ v/$2/ h/$1/ cpe:/a:ask_bjorn_hansen:qpsmtpd:$2/\nmatch smtp m|^220 (\\S+) ESMTP XWall v(\\d\\S+)| p/XWall smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 (\\S+) ESMTP Service \\(Worldmail (\\d[^\\)]+)\\) ready| p/Worldmail smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 (\\S+) eMail Sentinel (\\d+) ESMTP Service ready| p/eMail Sentinel smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 (\\S+) ESMTP mxl_mta-(\\d[^\\;]+);| p/mxl smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 (\\S+) -- Server ESMTP \\(SUN JES MTA 6\\.x\\)| p/SUN JES smtpd/ v/6.x/ h/$1/\nmatch smtp m|^220 (\\S+) Service ready by DvISE PostMan \\((\\d+)\\) ESMTP Server| p/DvISE PostMan smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) Service ready by DvISE PostMan \\((\\d+)\\) ESMTP Server \\(Tobit Software, Germany\\)\\r\\n| p/Tobit DvISE PostMan smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ?(\\S+) ESMTP server \\(InterMail v(\\S+)| p/InterMail smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) -- Server ESMTP \\(Sun Java\\(tm\\) System Messaging Server ([\\w._-]+) \\(built .*; (\\d+)bit\\)| p/Sun Java System Messaging Server smtpd/ v/$2/ i/$3 bits/ h/$1/ cpe:/a:sun:java_system_messaging_server:$2/\nmatch smtp m|^220 ([-\\w_.]+) -- Server ESMTP \\(Sun Java\\(tm\\) System Messaging Server ([\\w._-]+) (\\d+)bit \\(built .*\\)\\)\\r\\n| p/Sun Java System Messaging Server smtpd/ v/$3/ i/$2 bits/ h/$1/ cpe:/a:sun:java_system_messaging_server:$3/\nmatch smtp m|^220 ([-\\w_.]+) -- Server ESMTP \\(Sun Java System Messaging Server ([\\d.]+) \\(built .*\\)\\)\\r\\n| p/Sun Java System Messaging Server smtpd/ v/$2/ h/$1/ cpe:/a:sun:java_system_messaging_server:$2/\nmatch smtp m|^220 (\\S+) -- Server ESMTP \\(Sun Java System Messaging Server (\\d[^\\(\\)]+)| p/Sun Java System Messaging Server smtpd/ v/$2/ h/$1/ cpe:/a:sun:java_system_messaging_server:$2/\nmatch smtp m|^220 jMailer SMTP Server\\r\\n$| p/jMailer smtpd/\nmatch smtp m|^220[- ][^ ]+ Smail-([^ ]+) .*ESMTP|s p/Smail-ESMTP/ v/$1/\nmatch smtp m|^220[- ][^ ]+ Smail-([^ ]+) | p/Smail/ v/$1/\nmatch smtp m|^220 \\[([-\\w_.]+)\\] ESMTP amavisd-new service ready\\r\\n| p/amavisd-new smtpd/ h/$1/ cpe:/a:ijs:amavisd_new/\nmatch smtp m=^220 SMTP-Server Classic Hamster (?:Vr\\.|Version) [\\d.]+ \\(Build ([\\d.]+)\\)\\r\\n= p/Classic Hamster smtpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220-Stalker Internet Mail Server V.([\\w.]+) is ready\\.\\r\\n| p/Stalker smtpd/ v/$1/ o/Mac OS/ cpe:/o:apple:mac_os/a\nmatch smtp m|^220-([-\\w_.]+) Stalker Internet Mail Server V\\.([\\w.]+) is ready\\.\\r\\n| p/Stalker smtpd/ v/$2/ o/Mac OS/ h/$1/ cpe:/o:apple:mac_os/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP MailMax ([\\d.]+) [A-Z][a-z][a-z].*\\r\\n| p/MailMax smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) Mailmax version ([\\d. ]+) ESMTP Mail Server Ready \\r\\n| p/MailMax smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) running IBM MVS SMTP CS V2R10 on .*\\r\\n| p/IBM MVS smtpd/ o/MVS/ h/$1/ cpe:/o:ibm:mvs/\nmatch smtp m|^220 [-\\w_]+ ESMTP ([-\\w_.]+) \\(Debian/GNU\\)\\r\\n| p/Postfix smtpd/ i/Debian/ o/Linux/ h/$1/ cpe:/a:postfix:postfix/a cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch smtp m|^220 ESMTP \\(Debian/GNU Mewwwwwww\\)\\r\\n| p/Postfix smtpd/ i/Debian/ o/Linux/ cpe:/a:postfix:postfix/a cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch smtp m|^220 ([\\w._-]+) [\\w._-]+ ESMTP Postfix \\(Debian/GNU\\)| p/Postfix smtpd/ i/Debian/ o/Linux/ h/$1/ cpe:/a:postfix:postfix/a cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP postfix NO UCE\\r\\n| p/Postfix smtpd/ i/whoson patch/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 ([-\\w_.]+) SMTPD Server - Postfix\\r\\n| p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP PostFix ([\\d.]+)\\r\\n| p/Postfix smtpd/ v/$2/ h/$1/ cpe:/a:postfix:postfix:$2/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP Oracle Email Server SMTP Inbound Server\\t([\\d.]+) \\t  Ready\\r\\n| p/Oracle smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) Mail essentials  server \\(([\\d.]+)\\) ready for ESMTP transfer\\r\\n| p/Mail essentials for Exchange smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP - WinRoute Pro ([\\d.]+)\\r\\n| p/WinRoute Pro smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP Lyris ListManager service ready\\r\\n| p/Lyris ListManager smtpd/ h/$1/\nmatch smtp m|^220  ESMTP Lyris service ready\\r\\n| p/Lyris smtpd/\nmatch smtp m|^220  ESMTP Lyris ListManager service ready\\r\\n| p/Lyris ListManager smtpd/\nmatch smtp m|^220-([-\\w_.]+) ESMTP\\r\\n220 [-\\w_.]+ AsyncOS\\r\\n| p/IronPort C-60 smtpd/ d/specialized/ o/AsyncOS/ h/$1/ cpe:/o:cisco:asyncos/a\nmatch smtp m|^220 ([-\\w_.]+) SMTP Ready 12\\.\\r\\n| p/Tunix firewall smtpd/ d/firewall/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP server \\(Netscape Messaging Server - Version ([\\d.]+)\\) ready .*\\r\\n| p/Netscape Messaging Server/ v/$2/ h/$1/ cpe:/a:netscape:messaging_server:$2/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP SMTPBeamer v([\\d.]+)\\r\\n| p/SMTPBeamer smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ZMailer Server ([\\w.]+) #\\d+ ESMTP ready at .*\\r\\n| p/ZMailer smtpd/ v/$2/ o/Unix/ h/$1/\nmatch smtp m|^220 - zeus SMTPS Sendmail ([-\\w_.]+)/[-\\w_.]+; .*\\n| p/Zeus SMTPS smtpd/ v/$1/\nmatch smtp m|^220 Coremail SMTP\\(Anti Spam\\) System \\(\\w+\\[(\\d+)\\]\\)\\r\\n| p/Coremail smtpd/ v/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP WorkgroupMail ([\\d.]+) .*\\r\\n| p/WorkgroupMail smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([\\w._-]+) \\(PowerMTA\\(TM\\) v([\\w._-]+)\\) ESMTP service ready\\r\\n| p/PowerMTA smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([\\w._-]+) \\(PowerMTA\\(TM\\) v([\\w._-]+)\\) dummy ESMTP ready\\r\\n| p/PowerMTA smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP BorderWare MXtreme Mail Firewall\\r\\n| p/BorderWare MXtreme smtpd/ d/firewall/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) SMTP Server \\(JAMES SMTP Server ([\\w.]+)\\) ready| p/JAMES smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) SMTP Server \\(JAMES SMTP Server\\) ready | p/JAMES 3 M3 smtpd/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP MDaemon ([\\d.]+) ready\\r\\n| p/MDaemon smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+)\\s+ESMTP MDaemon ([\\d.]+); .*\\r\\n| p/MDaemon smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP MDaemon ([\\d.]+)(?: UNREGISTERED)?; .*\\r\\n| p/MDaemon smtpd/ v/$2/ i/Unregistered/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([\\w._-]+) ESMTP MSA MDaemon ([\\w._-]+)(?: UNREGISTERED)?; .*\\r\\n| p/MDaemon smtpd/ v/$2/ i/Unregistered/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220[ -]([-\\w_.]+) ESMTP MSA MDaemon ([\\d.]+);| p/MDaemon smtpd/ v/$2/ i/MSA support/ o/Windows/ h/$1/ cpe:/a:altn:mdaemon:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^421 Sorry, SMTP server too busy right now \\(193\\); try again later\\r\\n| p/MDaemon smtpd/ i/Server too busy error/ o/Windows/ cpe:/a:altn:mdaemon/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP HT Mail Server v([\\d.]+); .*\\r\\n| p/IceWarp smtpd/ v/$2/ h/$1/ cpe:/a:icewarp:mail_server:$2/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP IceWarp ([\\d.]+)[; ]| p/IceWarp smtpd/ v/$2/ h/$1/ cpe:/a:icewarp:mail_server:$2/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP Gruponet IE2020 ([\\d./]+);\\r\\n| p/Gruponet mail appliance smtpd/ v/$2/ d/specialized/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) mailfront ESMTP\\r\\n| p/mailfront smtpd/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) SMTP Server SLmail ([\\d.]+) Ready ESMTP spoken here\\r\\n| p/SLmail smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) VaMailArmor-([\\d.]+)\\r\\n| p/VaMailArmor smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP MailFrontier \\(([\\d.]+)\\)\\r\\n| p/MailFrontier smtpd/ v/$2/ d/firewall/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) WindowsNT SMTP Server v([\\w/.]+) ESMTP ready at .*\\r\\n| p/Windows NT SMTP Server smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows_nt/a\nmatch smtp m|^220 ([-\\w_.]+) \\(LSMTP for Windows NT v([\\w.]+)\\) ESMTP server ready\\r\\n| p/LSMTP smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) SMTP Mandamail ([\\d.]+)/[\\d.]+\\r\\n| p/Mandamail smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 Welcome to the QK SMTP Server\\r\\n| p/QK smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 PostCast SMTP server \\(http://www\\.postcastserver\\.com/\\) ready at .*\\r\\n| p/PostCast smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) running IBM MVS SMTP CS (\\w+) on .*\\r\\n| p/IBM MVS smtpd/ v/$2/ o/MVS/ h/$1/ cpe:/o:ibm:mvs/\nmatch smtp m|^Permission denied - do not try again\\.\\r\\n| p/Hamster smtpd/ i/Access denied/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^500 Permission denied - closing connection\\.\\r\\n| p/Hamster smtpd/ i/Access denied/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 \\(SMTP\\) hMailServer ([\\d.]+) - Up since .*\\r\\n| p/hMailServer smtpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP hMailServer ([\\w.-]+)\\r\\n| p/hMailServer/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) Ready for action \\(Mailtraq ([\\d.]+)/E?SMTP\\)\\r\\n| p/Mailtraq smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:mailtraq:mailtraq:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) SMTP Service Ready \\(QuickMail Pro Server for MacOS ([\\d.]+)\\)\\r\\n| p/QuickMail Pro smtpd/ v/$2/ o/Mac OS/ h/$1/ cpe:/o:apple:mac_os/a\nmatch smtp m|^220 ([-\\w_.]+) HP Sendmail \\(([\\d/.]+) .*\\) ready at .*\\r\\n| p/HP Sendmail/ v/$2/ o/HP-UX/ h/$1/ cpe:/a:hp:sendmail:$2/ cpe:/o:hp:hp-ux/a\nmatch smtp m|^220-([-\\w_.]+) Bluecat Networks Inc\\. Meridius Security Gateway\\r\\n220 | p/Bluecat Meridius smtpd/ d/firewall/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) SurgeSMTP \\(Version ([\\w.-]+)\\) http://surgemail\\.com\\r\\n| p/SurgeMail smtpd/ v/$2/ h/$1/ cpe:/a:netwin:surgemail:$2/\nmatch smtp m|^220 ([-\\w_.]+) Hermes ([\\d.]+) ML SMTP Ready\\.\\r\\n| p/Hermes smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 LiteMail SMTP Server Ready\\.\\r\\n| p/LiteMail smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) SMTP Server \\(DeskNow SMTP Server ([\\d.]+)\\) ready .*\\r\\n| p/DeskNow smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) SMTP Server \\(DeskNow\\) ready| p/DeskNow smtpd/ h/$1/\nmatch smtp m|^220 network-box ESMTP\\r\\n| p/Network Box smtpd/ d/firewall/\nmatch smtp m|^220-\\S+ Sendmail ([\\d.]+)/A/UX ([\\d.]+) ready at .*\\r\\n220 ESMTP spoken here\\r\\n| p/Sendmail/ v/$1/ i|on A/UX $2| o|A/UX| cpe:/a:sendmail:sendmail:$1/ cpe:/o:apple:a_ux:$2/\nmatch smtp m|^220 ([-\\w_.]+) sina_smtpd \\(([\\d.-]+)\\) id=\\d+\\r\\n| p/SINA smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) SpearMail SMTP Daemon ready\\.\\r\\n| p/SpearMail smtpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ESMTP on WebEasyMail \\[([\\d.]+)\\] ready\\.  http://www\\.51webmail\\.com\\r\\n| p/WebEasyMail smtpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) AntiVir MailGate\\r\\n| p/AntiVir MailGate smtpd/ h/$1/\nmatch smtp m|^220 server ESMTP KEN! v([\\d.]+); .*\\r\\n| p/AVM KEN! smtpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) NTMail \\(v([\\d.]+)/[\\w.]+\\) ready for ESMTP transfer   \\r\\n| p/NTMail smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220-([-\\w_.]+) Sendmail IBM OS/2 SENDMAIL VERSION ([\\w./]+) ready at .*\\r\\n220 ESMTP spoken here\\r\\n| p/Sendmail smtpd/ v/$2/ o|OS/2| h/$1/ cpe:/a:sendmail:sendmail:$2/ cpe:/o:ibm:os2/\nmatch smtp m|^220 imss-2 ESMTP ready at .*\\r\\n| p/Trend Micro IMSS smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) Service ready\\.\\r\\n214- Valid commands are:\\r\\n214- HELO  MAIL  RCPT  DATA  RSET  QUIT  NOOP\\r\\n214- HELP  VRFY\\r\\n214- Commands not valid are:\\r\\n214- SEND  SOML  SAML  TURN\\r\\n.*214- [-\\w_.]+ is running the OS/400 operating system\\.\\r\\n|s p|OS/400 smtpd| o|OS/400| h/$1/ cpe:/o:ibm:os_400/a\nmatch smtp m|^220 shttp\\.srv Simple Mail Transfer Service Ready\\r\\n| p/Small Home Server smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^501 Domain must resolve\\r\\n$| p/odmrd/\nmatch smtp m|^220 ([-\\w_.]+) ModusMail ESMTP Receiver Version ([\\d.]+) Ready\\r\\n| p/ModusMail smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 mailmatrix SMTP Server \\(Mail Matrix Server\\) ready| p/Mail Matrix smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220-([-\\w_.]+) ESMTP .* GoMail V([\\d.]+);| p/GoMail mass mailing plugin smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 [-\\w_.]+ Winmail Mail Server ESMTP ready\\r\\n| p/Winmail smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP \\(Code-Crafters Ability Mail Server ([\\d.]+)\\)\\r\\n| p/Code-Crafters Ability Mail Server smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:code-crafters:ability_mail_server:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) SMTP Welcome to the Internet Anywhere Mail Server Version: ([\\d.]+)\\. Build: (\\d+) by True North Software, Inc\\.\\r\\n| p/True North Internet Anywhere smtpd/ v/$2/ i/Build $3/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n# Notice the ; immediatley after the host\nmatch smtp m|^220 ([-\\w_.]+); .* \\+\\d+\\r\\n| p/Webwasher CSM Suite smtpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^451 Temporary local problem - please try later\\r\\n| p/qmail smtpd/ o/Unix/ cpe:/a:djb:qmail/\nmatch smtp m|^421 unable to read controls \\(#4\\.3\\.0\\)\\r\\n| p/qmail smtpd/ i/qmail-smtpd-auth 0.31/ o/Unix/ cpe:/a:djb:qmail/\nmatch smtp m|^220 ([-\\w_.]+) Miralix SMSGwSMTP Ready\\r\\n| p/Miralix SMTP2SMS Gateway/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^554 Please check your SMTP server is set to [-\\w_.]+\\.co\\.uk\\. Further help is available at| i/Wanadoo blocks smtp - NOT A REAL smtpd!/\nmatch smtp m|^554 Please check that your outgoing mail server settings are correct\\. Contact your service provider's technical support for assistance\\.\\n| i/Wanadoo blocks smtp - NOT A REAL smtpd!/\nmatch smtp m|^220 ([-\\w_.]+) V([\\w._-]+), OpenVMS V([\\w._-]+) Alpha ready at .* \\r\\n| p/OpenVMS smtpd/ v/$2/ i/OpenVMS $3; Alpha/ o/OpenVMS/ h/$1/ cpe:/o:hp:openvms/a\nmatch smtp m|^220 rblsmtpd\\.local\\r\\n| p/rblsmtpd wrapped smtpd/ i/Connecting from banned IP/\nmatch smtp m|^rblsmtpd: [\\d.]+ pid \\d+:.*220 rblsmtpd\\.local\\r\\n|s p/rblsmtpd wrapped smtpd/ i/Connecting from banned IP/\nmatch smtp m|^220 Welcome to the Advanced SMTP Server\\r\\n| p/SoftStack Advanced smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220  SurgeSMTP \\(Version ([-\\w_.]+)\\) http://surgemail\\.com\\r\\n| p/SurgeMail smtpd/ v/$1/ cpe:/a:netwin:surgemail:$1/\nmatch smtp m|^220 HMailServer ESMTP\\r\\n| p/HMailServer smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 SMTP-Server The Croatian Classic Hamster Ver\\. [\\d.]+ \\(Podverzija ([\\d.]+)\\)\\r\\n| p/Classic Hamster smtpd/ v/$1/ i/Croatian/\nmatch smtp m|^220 I, CALLPILOT\\[[\\d.]+\\], speak ESMTP\\.  Talk to me\\.\\r\\n| p/Nortel CallPilot imapd/ d/telecom-misc/\nmatch smtp m|^220 ([-\\w_.]+) Welcome to RaidenMAILD E?SMTP service v([\\d.]+),| p/RaidenMAILD smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ESMTP [^ ]+ CMailServer ([\\d.]+) SMTP Service Ready\\r\\n| p/Youngzsoft CMailServer smtpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ESMTP on WinWebMail \\[([\\d.]+)\\] ready\\.  http://www\\.winwebmail| p/WinWebMail smtpd/ v/$1/ o/Windows/ cpe:/h:winwebmail:winwebmail_server:$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220-W E L C O M E   T O   Q U A R K M A I L   S M T P   S E R V I C E !\\r\\n220 ([-\\w_.]+) ESMTP server \\(quarkmail server - version ([\\d.]+)\\) ready| p/Quarkmail smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP Sendmail Switch-([\\d.]+)/Switch-([\\d.]+);| p/Sendmail Switch smtpd/ v/$2/ i/Switch $3/ h/$1/\n# This is a fall-back line for other probes when postfix banner is stripped\nmatch smtp m|^220 .*\\r\\n221 2\\.7\\.0 Error: I can break rules, too\\. Goodbye\\.\\r\\n| p/Postfix smtpd/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 ([-\\w_.]+) running EIMS X ([\\w.]+)\\r\\n| p/Eudora EIMS X smtpd/ v/$2/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch smtp m|^220  DP-3510\\r\\n| p/Panasonic DP-3500 smtpd/\nmatch smtp m|^220 ([-\\w_.]+) Axigen ESMTP ready\\r\\n| p/Axigen smtpd/ h/$1/ cpe:/a:gecad:axigen_mail_server/\nmatch smtp m|^421 Unexpected log failure, please try later\\r\\n| p/Postfix smtpd/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 ([-\\w_.]+) DynFX ESMTP Server ([-\\w_.]+) \\(| p/DynFX smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ;; ESMTP connection timed out; no servers could be reached Sendmail ([-\\w_.]+)/| p/Sendmail/ v/$1/ i/broken/ cpe:/a:sendmail:sendmail:$1/\nmatch smtp m|^554 ([-\\w_.]+) ESMTP not accepting messages\\r\\n| p/Sendmail/ i/Not accepting mail/ h/$1/ cpe:/a:sendmail:sendmail/\nmatch smtp m|^220 ([-\\w_.]+) L-Soft HDMail SMTP Service Version: ([-\\w_.()]+) ready| p/L-Soft HDMail smtpd/ v/$2/ o/Linux/ h/$1/ cpe:/o:linux:linux_kernel/a\nmatch smtp m|^220 ([-\\w_.]+) Synchronet SMTP Server ([\\d.]+)-Win32 Ready\\r\\n| p/Synchronet smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:rob_swindell:synchronet:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ShareMailPro SMTP Server Ready \\r\\n| p/LavaSoftware ShareMailPro smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP Service\\(Mail2000 ESMTP Server V([-\\w_.]+)\\) ready| p/Mail2000 smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) 4D WebSTAR V Mail \\(([-\\w_.]+)\\) Ready for action\\r\\n| p/4D WebSTAR smtpd/ v/$2/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP server \\(Neon Mail Server System Advance ([-\\w_.]+),| p/Neon Mail Server smtpd/ v/$2/ h/$1/\nmatch smtp m|^553 Requested action not taken; No permission\\.\\r\\n$| p/Mitel 3300 PBX smtpd/ i/Access denied/ d/PBX/\nmatch smtp m|^421 [-\\w_.]+ - Your name, '\\[[-\\w_.]+\\]', is unknown to me\\.\\r\\n| p/SCO smtpd/ i/Unknown host/ o/SCO UNIX/ cpe:/o:sco:sco_unix/a\nmatch smtp m|^220 Service ready KM([\\w._-]+) smtpd\\r\\n| p/Konica Minolta bizhub $1 printer smtpd/ d/printer/ cpe:/h:konicaminolta:bizhub_$1/\nmatch smtp m|^220 ([\\w_.-]+) cqgreylist - minimal smptd\\r\\n| p/cqgreylist minimal smtpd/ h/$1/\nmatch smtp m|^220 ([\\w_.-]+) ESMTP AnNyungSMTP ([\\w._-]+);| p/AnNyung smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 DP-1820E\\r\\n| p/Panasonic DP-1820E printer smtpd/ d/printer/ cpe:/h:panasonic:dp-1820e/a\nmatch smtp m|^220 ([\\w_.-]+) -- Server ESMTP \\(PMDF V([\\d.]+)-| p/PMDF smtpd/ v/$2/ o/OpenVMS/ h/$1/ cpe:/o:hp:openvms/a\nmatch smtp m|^220 ([\\w_.-]+) ESMTP SecurityGateway ([0-9]+.[0-9]+.[0-9]+)| p/ALT-N SecurityGateway smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([\\w_.-]+) VHCS2 [\\w._-]+ (\\w+) Managed ESMTP ([\\w._-]+)\\r\\n| p/Postfix smtpd/ i/Virtual Hosting Control System $3 $2/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 ([\\w_.-]+) ESMTP ispCP (.*) OMEGA Managed\\r\\n| p/Postfix smtpd/ i/ispCP OMEGA $2/ h/$1/ cpe:/a:postfix:postfix/a\n# embyte\nmatch smtp m|^220.*Simple Mail Transfer Service Ready\\. Version ([\\d.]+)| p/Goodtech smtpd/ v/$1/\nmatch smtp m|^220.*SMTP Welcome to the IA eMailServer Corporate Edition Version: ([\\d.]+ Build: [\\d]+)| p/IA eMailServer Corporate/ v/$1/\nmatch smtp m|^220.*SMTP Welcome to the IA eMailServer Standard Edition Version: ([\\d.]+ Build: [\\d]+)| p/IA eMailServer Standard/ v/$1/\nmatch smtp m|^220 ([\\w_.-]+) bizsmtp ESMTP server ready\\r\\n| p/Bizanga bizsmtp smtpd/ h/$1/\nmatch smtp m|^220 ([\\w_.-]+) ESMTP NetBox\\(tm\\)\\r\\n| p/NetBox smtpd/ h/$1/\nmatch smtp m|^220 ([\\w_.-]+) StrongMail SMTP Service Version: (\\S+) ready| p/StrongMail smtpd/ v/$2/ h/$1/\nmatch smtp m|^421 Service not available, closing transmission channel\\r\\n$| p/Oki 3200N laser printer smtpd/ i/service disabled/ d/printer/\nmatch smtp m|^421 Service not available, closing transmission channel \\r\\n$| p/Konica Minolta bizhub smtpd/ i/service disabled/ d/printer/\nmatch smtp m|^220 ([\\w_.-]+) ESMTP OpenSMTPD\\r\\n| p/OpenSMTPD/ h/$1/\nmatch smtp m|^220 Merak MAILSRV\\r\\n| p/Merak Mail Server smptd/\nmatch smtp m|^220 ([\\w_.-]+) ESMTP Citadel server ready\\.\\r\\n| p/Citadel smtpd/ h/$1/ cpe:/a:citadel:ux/\nmatch smtp m|^220 ([\\w_.-]+) Epiphany CME SMTP Server Version ([\\d.]+) ready at [^\\r\\n]*\\r\\n| p/Epiphany Campaign Manager for Email (CME) smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([\\w_.-]+) \\(\\w+\\) Welcome to Nemesis ESMTP server\\r\\n| p/Nemesis smtpd/ h/$1/\nmatch smtp m|^220 BEJY V([\\w._-]+)  SMTP ([\\w._-]+)  \\(c\\) \\d+-\\d+ by BebboSoft, Stefan \\\"Bebbo\\\" Franke, all rights reserved ready\\r\\n$| p/BEJY smtpd/ v/$2/ i/BEJY $1/\nmatch smtp m|^220 Welcome NGOS SMTP Server version ([\\w._-]+)\\r\\n$| p/NewsGator Enterprise Server smtpd/ v/$1/\nmatch smtp m|^220 ([\\w._-]+) Kerio Connect ([\\w._ -]+) ESMTP ready\\r\\n| p/Kerio Connect smtpd/ v/$2/ h/$1/ cpe:/a:kerio:connect:$2/\nmatch smtp m|^220 Service ready (KMBT[0-9A-F]+) smtpd\\r\\n| p/Konica Minolta printer smtpd/ h/$1/\nmatch smtp m|^220 Service ready M052 smtpd\\r\\n| p/Konica Minolta C360 printer smtpd/ cpe:/h:konicaminolta:c360/a\nmatch smtp m|^220 ([\\w._-]+) running IBM VM SMTP Level (\\d+) on | p/IBM VM smtpd/ v/Level $2/ h/$1/\nmatch smtp m|^220 DavMail SMTP ready at | p/DavMail smtpd/\nmatch smtp m|^220 DavMail ([\\w._-]+) SMTP ready at | p/DavMail smtpd/ v/$1/\nmatch smtp m|^421 4\\.3\\.2 Service not available\\r\\n| p/Microsoft Exchange 2010 smtpd/ i/not available/ cpe:/a:microsoft:exchange_server:2010/\nmatch smtp m|^220 ([\\w._-]+) InSciTek OIS Ready here ESMTP\\r\\n| p/Allworx 6x VoIP phone smtpd/ d/VoIP phone/ h/$1/ cpe:/h:allworx:6x/a\nmatch smtp m|^220 ([-\\w_.]+)\\s+ESMTP IdeaSmtpServer ([^\\s]+) ready\\.\\r\\n| p/IdeaSmtpServer smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([\\w._-]+) M\\+ Extreme Email Engine ESMTP ready ([\\w._-]+)\\r\\n| p/Messaging Architects M+ Extreme Email Engine smtpd/ v/$2/ h/$1/\nmatch smtp m|^220 ([\\w._-]+) Service ready by David\\.fx \\(([\\w._-]+)\\) ESMTP Server \\(Tobit\\.Software, Germany\\)\\r\\n| p/Tobit David.fx smtpd/ v/$2/ h/$1/\n# False positives, too broad. No examples.\n#match smtp m|^220 ([\\w._-]+) ESMTP [\\w._-]+\\r\\n| p/Symantec Enterprise Security manager smtpd/ h/$1/ cpe:/a:symantec:enterprise_security_manager/\nmatch smtp m|^554 5\\.7\\.1 <unknown\\[[\\w.]+\\]>: Client host rejected: Access denied\\r\\n| p/Symantec Messaging Gateway smtpd/ cpe:/a:symantec:messaging_gateway/\nmatch smtp m|^220 ([\\w._-]+) ESMTP Symantec Messaging Gateway\\r\\n| p/Symantec Messaging Gateway smtpd/ h/$1/ cpe:/a:symantec:messaging_gateway/\nmatch smtp m|^220 ([\\w._-]+)\\.\\* ESMTP MailEnable Service, Version: ([\\w._-]+)-- ready at \\d\\d/\\d\\d/\\d\\d \\d\\d:\\d\\d:\\d\\d\\r\\n| p/MailEnable smtpd/ v/$2/ h/$1/ cpe:/a:mailenable:mailenable:$2/\nmatch smtp m|^220 localhost Dumbster SMTP service ready\\r\\n| p/Dumbster fake smtpd/\nmatch smtp m|^220 ([\\w._-]+) -- Server ESMTP \\(Oracle Communications Messaging Exchange Server ([\\w._-]+) 64bit (\\(built \\w+ +\\d+ \\d+\\))\\)\\r\\n| p/Oracle Communications Message Exchange smtpd/ v/$2/ i/$3/ h/$1/ cpe:/a:oracle:communications_unified:$2/\nmatch smtp m|^220 ([\\w._-]+) -- Server ESMTP \\(Oracle Communications Messaging Server ([\\w._-]+) 64bit (\\(built \\w+ +\\d+ \\d+\\))\\)\\r\\n| p/Oracle Communications Messaging smtpd/ v/$2/ i/$3/ h/$1/ cpe:/a:oracle:communications_unified:$2/\nmatch smtp m|^220 \\[[\\d.]+\\] FTGate Server Ready \\(#3\\.01\\)\\r\\n| p/Floosietek FTGate smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^554 ([\\w._-]+)\\r\\n$| p/Cisco IronPort C160 firewall smtpd/ o/AsyncOS/ h/$1/ cpe:/o:cisco:asyncos/a\nmatch smtp m|^220 HOST: ([\\w._-]+) Supportworks ESMTP Server ([\\w._-]+) ready\\r\\n| p/Hornbill Supportworks smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/a:hornbill:supportworks_itsm:$2/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([\\w._-]+) IP Office Voicemail Pro \\[Hardware mode 00\\] - Version ([\\w._-]+ \\([\\w._-]+\\)) SMTP MAIL Service ready .* ([+-]\\d\\d\\d\\d)\\r\\n| p/Avaya IP Office Voicemail Pro smtpd/ v/$2/ i/time zone: $3/ d/PBX/ h/$1/\nmatch smtp m|^220 ([\\w._-]+) ESMTP [-\\w]+\\.\\d+ - gsmtp\\r\\n| p/Google gsmtp/ h/$1/\nmatch smtp m|^220 ([\\w._-]+) mfiltro ESMTP server ready\\r\\n| p/Netasq Mfiltro spam detection smtpd/ h/$1/\nmatch smtp m|^220 ([\\w._-]+) smtp4dev ready\\r\\n| p/smtp4dev/ h/$1/\nmatch smtp m|^200 MacGyver SMTP Ready\\.\\r\\n| p/Perl Net::SMTP::Server/ v/1.0/ cpe:/a:perl:perl/\nmatch smtp m|^220 MacGyver SMTP Ready\\.\\r\\n| p/Perl Net::SMTP::Server/ v/1.1/ i/or later/ cpe:/a:perl:perl/\nmatch smtp m|^220 ([\\w._-]+) SMTP server ready \\(MgSMTP ([\\w._-]+)\\)\\r\\n| p/MgSMTP/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([\\w._-]+) SMTP IceWarp ([\\w._-]+);| p/IceWarp smtpd/ v/$2/ h/$1/ cpe:/a:icewarp:mail_server:$2/\nmatch smtp m|^554-([\\w._-]+) \\(\\w+\\) Nemesis ESMTP Service not available\\r\\n| p/Nemesis smtpd/ i/blacklisted/ h/$1/\nmatch smtp m|^421 4\\.3\\.2 Server license expired\\r\\n| p/Kerio Connect or MailServer smtpd/ i/license expired/ cpe:/a:kerio:connect/\nmatch smtp m|^220 totemomail SMTP Server ready [\\w, :]+ ([+-]\\d\\d\\d\\d) \\([A-Z]*\\)\\r\\n| p/totemomail Encryption Gateway smtpd/ i/time zone: $1/\nmatch smtp m|^220 ([\\w._-]+) ESMTP Service \\(IBM Domino Release ([ \\w._-]+)\\) ready at .* ([-+]\\d+)\\r\\n| p/IBM Domino smtpd/ v/$2/ i/time zone: $3/ h/$1/ cpe:/a:ibm:lotus_domino:$2/\nmatch smtp m|^220 ([\\w._-]+) ESMTP Smtpd; [\\w, :]+ ([-+]\\d\\d\\d\\d)\\r\\n| p/FortiMail smtpd/ i/time zone: $2/ h/$1/ cpe:/a:fortinet:fortimail/\nmatch smtp m|^554-([\\w._-]+)\\r\\n554 Your access to this mail system has been rejected due to the sending MTA's poor reputation\\. If you believe that this failure is in error, please contact the intended recipient via alternate means\\.\\r\\n| p/IronPort mail appliance smtpd/ i/access denied/ h/$1/\nmatch smtp m|^220 Welcome to SafeQ Mail Service\\.\\r\\n| p/YSoft SafeQ smtpd/ d/print server/ cpe:/a:ysoft:safeq/\nmatch smtp m|^220 ([\\w.-]+) ESMTP ready \\(Spanel SMTPD ([\\w._-]+)\\)\\r\\n| p/MWN Spanel smtpd/ v/$2/ h/$1/ cpe:/a:master_web_network:spanel:$2/\nmatch smtp m|^220 smtp-sink ESMTP\\r\\n$| p/Postfix smtp-sink/ cpe:/a:postfix:postfix/\nmatch smtp m|^220 ([\\w.-]+) FirstClass SMTP Submission Server v([\\d.]+) ready\\r\\n| p/FirstClass submission server/ v/$2/ h/$1/ cpe:/a:opentext:firstclass:$2/\nmatch smtp m|^421 \\[XMail (\\d[\\w._-]+) ESMTP Server\\] - Server too busy, retry later\\r\\n| p/XMail smtpd/ v/$1/ i/server busy/ cpe:/a:davide_libenzi:xmail:$1/\nmatch smtp m|^220 Xeams SMTP server;  - Xeams SMTP server; Version: ([\\d.]+) - build: (\\d+); \\d\\d?/\\d\\d?/\\d\\d \\d\\d?:\\d\\d [AP]M\\r\\n| p/Synametrics Xeams smtpd/ v/$1/ i/build $2/ cpe:/a:synametrics:xeams:$1/\nmatch smtp m|^220 ([\\w.-]+) - Xeams SMTP server; Version: ([\\d.]+) - build: (\\d+); \\d\\d/\\d\\d/\\d\\d \\d\\d:\\d\\d [AP]M\\r\\n| p/Synametrics Xeams smtpd/ v/$2/ i/build $3/ h/$1/ cpe:/a:synametrics:xeams:$2/\nmatch smtp m|^220 ([\\w.-]+) ESMTP service ready\\r\\n| p/cbdev cmail smtpd/ h/$1/ cpe:/a:cbdev:cmail/\n# 7.5\nmatch smtp m|^550 Service unavailable; Client host \\[[^]]+\\] blocked using Trend Micro RBL\\+\\.Please see http://www\\.mail-abuse\\.com/cgi-bin/lookup\\?ip_address=| p/Trend Micro InterScan Messaging Security Suite/ i/blacklisted/ cpe:/a:trend_micro:interscan_messaging_security_suite/\nmatch smtp m|^220 ([\\w.-]+) ESMTP Haraka (\\d[\\w._-]*) ready\\r\\n| p/Haraka smtpd/ v/$2/ h/$1/ cpe:/a:matt_sergeant:haraka:$2/\nmatch smtp m|^220 ([\\w.-]+) Burp Collaborator Server ready\\r\\n| p/Burp Collaborator smtpd/ h/$1/ cpe:/a:portswigger:burp_suite/\nmatch smtp m|^220 ([\\w.-]+) DemonMail \\(c\\) Striata Communication Solutions 2000-(\\d\\d\\d\\d)\\r\\n| p/Striata DemonMail smtpd/ i/copyright $2/ h/$1/ cpe:/a:striata:demonmail/\nmatch smtp m|^220 ([\\w.-]+) Hurricane Server ESMTP service ready\\.\\r\\n| p/SocketLabs Hurricane MTA smtpd/ h/$1/ cpe:/a:socketlabs:hurricane_mta/\n\n#(insert smtp)\n\nmatch smtp-proxy m|^220 ([-\\w_.]+) SMTP/DeleGate/([\\d.]+) ready at .*\\r\\n| p/DeleGate smtpd/ v/$2/ h/$1/\nmatch smtp-proxy m|^220 ([-/.+\\w]+) SMTP AnalogX Proxy (\\d[-.\\w]+) \\(Release\\) ready\\r\\n| p/AnalogX SMTP proxy/ v/$2/ h/$1/ cpe:/a:analogx:proxy:$2/\nmatch smtp-proxy m|^220 ([-\\w_.]+) ESMTP spamd IP-based SPAM blocker; .*\\r\\n| p/spamd smtpd/ h/$1/\nmatch smtp-proxy m|^220 YahooPOPs! Simple Mail Transfer Service Ready\\r\\n| p/YahooPOPs! smtpd/\nmatch smtp-proxy m|^220  ESMTP smtprelay service ready\\.\\r\\n| p/GeNUGate firewall smtp relay/ d/firewall/\nmatch smtp-proxy m|^220 ([-\\w_.]+) Tumbleweed MMS SMTP Relay Service ready\\r\\n| p/Tumbleweed smtp proxy/ d/firewall/ h/$1/\nmatch smtp-proxy m|^220 ([-\\w_.]+) SMTP hotsmtpd v([\\d.]+)\\. ESMTP-HTTPMail Gateway based on hotwayd\\.\\r\\n| p/hotsmtpd based on hotwayd/ v/$2/ h/$1/\nmatch smtp-proxy m|^220 ([-\\w_.]+) Welcome SpamFilter for ISP SMTP Server v([\\d.]+) - Unlicensed Evaluation Copy\\r\\n| p/SpamFilter for ISP smtpd/ v/$2/ i/Unregistered/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 Welcome to the 1st SMTP Server\\r\\n| p/1st SMTP relay/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^421 proxyplus\\.universe SMTP server\\. Insecure access - terminating\\.\\r\\n| p/Proxy+ smtp proxy/ i/Access denied/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 AVG ESMTP Proxy Server Beta - ([\\d./]+) \\[[\\d.]+\\]\\r\\n| p/AVG smtp proxy/ v/$1/ o/Windows/ cpe:/a:avg:anti-virus:$1/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 AVG ESMTP Proxy Server ([\\d./]+) \\[[\\d./]+\\]\\r\\n| p/AVG smtp proxy/ v/$1/ o/Windows/ cpe:/a:avg:anti-virus:$1/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^554 ([\\d.]+) ([-\\w_.]+) No mail service\\r\\n| p/Symantec SGS smtp proxy/ v/$1/ h/$2/\nmatch smtp-proxy m|^220 ([-\\w_.]+) ESMTP Scalix SMTP Relay ([\\d.]+); .*\\r\\n| p/Scalix smtp relay/ v/$2/ h/$1/\nmatch smtp-proxy m|^220 Traffic Inspector SMTP Gate \\(SPAM protected\\), ver\\. ([\\w._-]+), ready at.*\\r\\n| p/Smart-Soft spam filtering smtp-proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 mailwall SMTP Server \\(Ikarus MailWall by David Grabenweger\\) ready\\r\\n| p/Ikarus MailWall smtp-proxy/\nmatch smtp-proxy m|^220 ([-\\w_.]+) ESMTP - eXpurgate ([\\d.]+) \\(| p/eXpurgate smtp proxy/ v/$2/ h/$1/\nmatch smtp-proxy m|^220 CCProxy ([\\d.]+) SMTP Service Ready\\(Unregistered\\)\\r\\n| p/CCProxy smtp proxy/ v/$1/ i/Unregistered/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 CCProxy ([\\d.]+) SMTP Service Ready\\r\\n| p/CCProxy smtp proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 ([-\\w_.]+) F-Secure/fsigk_smtp/\\d+/[-\\w_.]+\\r\\n| p/F-Secure Internet Gateway SMTP proxy/ h/$1/\nmatch smtp-proxy m|^521 Host does not accept mail from you, closing transmission channel\\.\\.\\.\\r\\n| p/F-Secure Internet Gatekeeper smtp proxy/\nmatch smtp-proxy m|^NoSpamToday! SMTP Proxy Monitoring Service Ready\\.\\r\\n| p/Byteplant NoSpamToday! smtp proxy/\nmatch smtp-proxy m|^220 ([-\\w_.]+) ESMTP bitdefender| p/BitDefender anti-virus mail gateway/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 ([-\\w_.]+) ESMTP BitDefender Proxy version ([^\\r\\n]+)\\r\\n| p/BitDefender anti-virus mail gateway/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 ([-\\w_.]+) ESMTP BitDefender Proxy\\r\\n| p/BitDefender anti-virus mail gateway/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 Proxy\\+ SMTP server at ([-\\w_.]+)\\. Authentication required\\.\\r\\n| p/Proxy+ smtp proxy/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 [-\\w_.]+ avast! SMTP proxy ready\\.\\r\\n| p/Avast! anti-virus smtp proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 UserGate: SMTP service ready\\r\\n| p/UserGate smtp proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 ([\\w._-]+) WebShielde1000/SMTP Ready\\.\\r\\n| p/McAfee WebShield e1000 smtp proxy/ v/$1/ d/security-misc/\nmatch smtp-proxy m|^220 ([-\\w_.]+) (SCM\\d+)/SMTP Ready\\.\\r\\n| p/McAfee $2 smtp proxy/ d/security-misc/ h/$1/\nmatch smtp-proxy m|^220 ([\\w._-]+) Welcome to SpamFilterISP SMTP Server v([\\w._-]+) - Unlicensed Evaluation Copy\\r\\n| p/SpamFilterISP smtp proxy/ v/$2/ i/evaluation copy/ h/$1/\nmatch smtp-proxy m|^220 arkoon Sendmail ready\\. \\r\\n| p/Arkoon smtp proxy/\nmatch smtp-proxy m|^554 You are not allowed to connect\\.\\r\\n| p/Symantec Brightmail smtp proxy/\nmatch smtp-proxy m|^220 ([\\w._-]+) ESMTP Symantec Brightmail Gateway\\r\\n| p/Symantec Brightmail smtp proxy/ h/$1/\nmatch smtp-proxy m|^220 ([\\w._-]+) \\[ESMTP Server\\] service ready;Bonjour; [^\\r\\n]*\\r\\n| p/Trend Micro InterScan Messaging Security smtp proxy/ d/proxy server/ h/$1/ cpe:/a:trendmicro:interscan_messaging_security_suite/\nmatch smtp-proxy m|^220 ([\\w._-]+) ESMTP server ready \\(Alligate v([\\w._-]+)\\)(?: AUTH ONLY)?\\r\\n| p/Alligate smtp proxy/ v/$2/ h/$1/\nmatch smtp-proxy m|^220 Alligate Greylisting Server ready\\r\\n| p/Alligate smtp proxy greylisting server/\nmatch smtp-proxy m|^220 ([\\w._-]+)\\.ARK Sendmail ready\\. \\r\\n| p/Arkoon smtp replay/ i/Sendmail/ h/$1/\nmatch smtp-proxy m|^421 too many connections\\r\\n| p/Barracuda 300 spam filter/\nmatch smtp-proxy m|^220 ([-\\w_.]+) ESMTP Service ready\\r\\n| p/ESET NOD32 anti-virus smtp proxy/ h/$1/\nmatch smtp-proxy m|^220 ([\\w._-]+) MAILFOUNDRY ESMTP\\r\\n| p/MailFoundry antispam smtp proxy/ h/$1/\nmatch smtp-proxy m|^220 ([\\w._-]+) EWSA(\\w+)/SMTP Ready\\.\\r\\n| p/McAfee EWSA $2 smtp proxy/ h/$1/\nmatch smtp-proxy m|^421 Cannot establish SSL with SMTP server ([][\\w._:-]+), SSL_connect error 336031996\\r\\n| p/Zentynal SMTP filter/ i/SMTP server $1/\nmatch smtp-proxy m|^220 ([\\w._-]+) AVKSMTP Server\\r\\n| p/GData AntiVirenKit MailGateway smtp proxy/ h/$1/\nmatch smtp-proxy m|^220 (\\S+) F-Secure Anti-Virus for Internet Mail ready| p/F-Secure AV SMTP Proxy/ h/$1/\nmatch smtp-proxy m|^220 (\\S+) Welcome to SpamFilter for ISP SMTP Server v(\\d\\S+)| p/LogSat SMTP Proxy/ v/$2/ h/$1/\nmatch smtp-proxy m|^220-TrendMicro IMSS SMTP proxy\\r\\n| p/Trend Micro SMTP Proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220-([\\w._-]+) ESMTP Welcome to smtpf #\\d+ \\(\\w+\\)\\r\\n220 Copyright 2006, 2011 by SnertSoft\\. All rights reserved\\.\\r\\n| p/SnertSoft Barricade MX smtp proxy/ h/$1/\nmatch smtp-proxy m|^220 ([\\w._-]+) ESMTP EdgeWave mag3000\\r\\n| p/EdgeWave MAG3000 Email Filtering appliance smtp proxy/ d/proxy server/ h/$1/\nmatch smtp-proxy m|^220 Net at Work Mail Gateway ready\\r\\n| p/Net at Work Mail Gateway smtp proxy/\nmatch smtp-proxy m|^220 ([\\w._-]+) ([\\w._-]+)/SMTP Ready\\.\\r\\n| p/McAfee $2 smtp proxy/ h/$1/\nmatch smtp-proxy m|^220 ([\\w._-]+) Python SMTP proxy version ([\\w._-]+)\\r\\n| p/Python SMTP Proxy/ v/$2/ h/$1/\nmatch smtp-proxy m|^421 <ASSP\\.nospam> service temporarily unavailable, closing transmission\\r\\n| p/ASSP Anti-Spam Proxy smtp proxy/\nmatch smtp-proxy m|^554 No SMTPd here\\r\\n| p/SonicWALL Email Security smtp proxy/ i/blacklisted/\nmatch smtp-proxy m|^554 5\\.7\\.1 You are not allowed to connect\\.\\r\\n| p/Symantec Messaging Gateway/ i/blacklisted/ cpe:/a:symantec:messaging_gateway/\nmatch smtp-proxy m|^220 ([\\w._-]+) GWAVA Proxy Copyright \\(c\\) \\d\\d\\d\\d GWAVA, Inc\\. All rights reserved\\. Ready\\r\\n| p/GWAVA Proxy smtpd/ h/$1/\nmatch smtp-proxy m|^220 ([\\w._-]+) -- E-MailRelay V([\\w._-]+) -- Service ready\\r\\n| p/E-MailRelay smtp proxy/ v/$2/ h/$1/ cpe:/a:graeme_walker:emailrelay:$2/\nmatch smtp-proxy m|^554 5\\.7\\.1 Access denied\\r\\n$| p/Kerio Connect smtp proxy/ i/access denied/ cpe:/a:kerio:connect/\nmatch smtp-proxy m|^220 ([\\w.-]+) ESMTP Trustwave SEG \\(v([\\d.]+)\\) Ready\\r\\n| p/Trustwave Secure Email Gateway/ v/$2/ h/$1/ cpe:/a:trustwave:secure_email_gateway:$2/\nmatch smtp-proxy m|^220 smtp\\.postman\\.i2p ESMTP I2PNet Mailservice\\r\\n| p/I2P Tunnel SMTP proxy/ cpe:/a:i2p_project:i2p/\nmatch smtp-proxy m|^220 XMail ESMTP service ready; [SMTWF][uoehra][neduit], \\d\\d [JFMASOND][aepueco][nbrylgptvc] \\d\\d\\d\\d \\d\\d:\\d\\d:\\d\\d ([-+]\\d\\d\\d\\d)\\r\\n| p/XMail smtpd/ i/IBM Lotus Protector; time zone: $1/ cpe:/a:davide_librenzi:xmail/ cpe:/a:ibm:lotus_protector_for_mail_security/\nmatch smtp-proxy m|^421 concurrent connection limit in avast! exceeded\\(pass:0, processes:([\\w._-]+)\\[\\d+\\]\\)\\r\\n| p/Avast! anti-virus smtp proxy/ i/connection limit exceeded by $1/ o/Windows/ cpe:/o:microsoft:windows/\nmatch smtp-proxy m|^421 Cannot connect to SMTP server ([\\w._-]+) \\([^)]*\\), connect error \\d+\\r\\n| p/Avast! anti-virus smtp proxy/ i/cannot connect to $1/ o/Windows/ cpe:/o:microsoft:windows/\n\nmatch fw1-topology m|^[QY]\\0\\0\\0$| p/Check Point FireWall-1 Topology/ d/firewall/ cpe:/a:checkpoint:firewall-1/\nmatch fw1-pslogon m|^\\0\\0\\0\\x02\\0\\0\\0\\x02$| p/Check Point FireWall-1 Policy Server logon/ d/firewall/ cpe:/a:checkpoint:firewall-1/\n\n\nsoftmatch smtp m|^220[\\s-].*?E?SMTP[^\\r]*\\r\\n|\nsoftmatch smtp m|^572 Relay not authorized\\r\\n| i/Relay not authorized/\n# This is likely Cisco specific, but making it generic just in case - Tom S.\nsoftmatch smtp m|^550 (\\d\\.\\d\\.\\d) ([^\\r\\n]{1,248})| p/Unrecognized SMTP service/ i/$1 $2/\nsoftmatch smtp m|^554-([\\w.-]+)\\r\\n554 | p/SMTP Transaction Failed/ h/$1/\n\nmatch smtp-stats m|^Statistics from .*\\n M   msgsfr  bytes_from   msgsto    bytes_to  msgsrej msgsdis  Mailer\\n| p/Multi Router Traffic Grapher smtp statistics/\n\nmatch snapmirror m|^\\x80\\0\\0\\x24\\0\\0\\0\\x01\\x4c\\xb4\\x21\\xd2\\0\\0\\0\\0\\0\\0\\x05\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0\\0$| p/SnapMirror replication/ d/storage-misc/ o/Data ONTAP/ cpe:/a:netapp:data_ontap/ cpe:/o:netapp:data_ontap/a\n\nmatch snpp m|^220 ([-.\\w]+) SNPP server \\(HylaFAX \\(tm\\) Version ([-.\\w]+)\\) ready.\\r\\n| p/HylaFAX SNPP/ v/$2/ h/$1/\nmatch snpp m|^220 QuickPage v(\\d[-.\\w]+) SNPP server ready at | p/QuickPage SNPP/ v/$1/\nmatch snpp m|^220 ([-.\\w]+) SNPP Sendpage ([-\\w_.]+) | p/Sendpage SNPP/ v/$2/ h/$1/\n\nmatch sobby m|^obby_welcome:\\d+\\nnet6_encryption:\\d+\\n| p/Sobby collaborative editing/\n\nmatch socks-proxy m|^Unauthorized \\.\\.\\.\\r\\nIP Address: [\\d.]+\\r\\nMAC Address: \\r\\nServer Time: \\d\\d\\d\\d-\\d\\d-\\d\\d \\d{1,2}:\\d\\d:\\d\\d\\r\\nAuth Result: Invalid user\\.$| p/CCProxy socks proxy/ i/unauthorized/\nsoftmatch socks-proxy m|^\\x00\\x5b......$| p/Socks4A/\n\nmatch sonork m|^\\0\\x01\\x88\\0\\0\\0Sonork Server V([\\w._ ()-]+) ready\\n\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0SGI=\\0\\0\\0\\0\\x07\\x17\\0\\0\\xe5\\x04\\0\\0\\x0b\\0.\\0\\x06\\0\\0\\0\\x000\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\x02\\0\\x08.\\xc0\\xa8\\(\\?\\0\\0\\0\\0\\0\\0\\0\\0$|s p/Sonork instant messaging/ v/$1/\n\nmatch sophos m|^IOR:[a-zA-Z0-9]{32}| p/Sophos Message Router/ i/Interroperable Object Reference Service/ cpe:/a:sophos:enterprise_console/\n\nmatch sourceviewerserver m|^OK SourceViewerService v1\\.0\\r\\n| p/NetBeans Source Viewer Service/ cpe:/a:netbeans:netbeans_ide/\n\n# http://udk.openoffice.org/common/man/spec/urp.html\nmatch urp m|^\\0\\0\\0.\\0\\0\\0\\x01\\xf8\\x04\\x96\\0\\0'com\\.sun\\.star\\.bridge\\.XProtocolProperties\\x15UrpProtocolProperties\\0\\0\\x14..\\0\\0................\\0\\0....$|s p/UNO Remote Protocol (URP)/\nmatch urp m|^\\0\\0\\0.\\0\\0\\0\\x01\\xf8\\x04\\x96\\0\\0'com\\.sun\\.star\\.bridge\\.XProtocolProperties\\x15UrpProtocolProperties\\0\\0\\x19\\.UrpProtocolPropertiesTid\\0\\0....|s p/UNO Remote Protocol/ i/LibreOffice/\n\nmatch sourceoffice m|^200\\r\\nProtocol-Version:(\\d[\\d.]+)\\r\\nMessage-ID:\\d+\\r\\nDatabase .*\\r\\nContent-Length:\\d+\\r\\n\\r\\n(\\w:\\\\.*ini)\\r\\n\\r\\n| p/Sourcegear SourceOffSite/ i/Protocol $1; INI file: $2/\nmatch sourceoffice m|^250\\r\\nProtocol-Version:(\\d[\\d.]+)\\r\\nMessage-ID:\\d+\\r\\nDatabase .*\\r\\nContent-Length:\\d+\\r\\nKey Length:(\\d+)\\r\\n\\r\\n.*(\\w:\\\\.*ini)\\r\\n\\r\\n|s p/Sourcegear SourceOffSite/ i/Protocol $1; Key len: $2; INI file: $3/\n\nmatch sphinx-search m|^.\\0\\0\\0\\n(\\d\\.[\\w._-]+) \\((?:rel\\d+-)?r\\d+\\)\\0\\x01\\0\\0\\0\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\0\\x08\\x82.\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\t\\n\\x0b\\x0c\\r| p/Sphinx Search daemon/ v/$1/\n\nmatch spideroak m|^\\x60\\0\\0\\0\\0\\0\\0\\0\\0\\0.{90}$|s p/SpiderOak/\n\nmatch splashtop m|^SRS:Ready\\0| p/Splashtop Remote Server/\n\nmatch spmd m|^SPMD_ACK\\0\\0\\x01\\0\\x01$| p/Softimage XSI SPMD license server/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# F-Secure/WRQ\nmatch ssh m|^SSH-([\\d.]+)-([\\d.]+) F-Secure SSH Windows NT Server\\r?\\n| p/F-Secure WinNT sshd/ v/$2/ i/protocol $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-([\\d.]+) dss F-SECURE SSH\\r?\\n| p/F-Secure sshd/ v/$2/ i/dss-only; protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-([\\d.]+) F-SECURE SSH.*\\r?\\n| p/F-Secure sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-ReflectionForSecureIT_([-\\w_.]+) - Process Software MultiNet\\r\\n| p/WRQ Reflection for Secure IT sshd/ v/$2/ i/OpenVMS MultiNet; protocol $1/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch ssh m|^SSH-([\\d.]+)-ReflectionForSecureIT_([-\\w_.]+)\\r?\\n| p/WRQ Reflection for Secure IT sshd/ v/$2/ i/protocol $1/\n\n# SCS\nmatch ssh m|^SSH-(\\d[\\d.]+)-SSH Protocol Compatible Server SCS (\\d[-.\\w]+)\\r?\\n| p/SCS NetScreen sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-SSH Compatible Server\\r?\\n| p/SCS NetScreen sshd/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-([\\d.]+) SSH Secure Shell Tru64 UNIX\\r?\\n| p/SCS sshd/ v/$2/ i/protocol $1/ o/Tru64 UNIX/ cpe:/o:compaq:tru64/a\nmatch ssh m|^SSH-([\\d.]+)-(\\d+\\.\\d+\\.\\d+) SSH Secure Shell| p/SCS sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^sshd: SSH Secure Shell (\\d[-.\\w]+) on ([-.\\w]+)\\nSSH-(\\d[\\d.]+)-| p/SCS SSH Secure Shell/ v/$1/ i/on $2; protocol $3/\nmatch ssh m|^sshd: SSH Secure Shell (\\d[-.\\w]+) \\(([^\\r\\n\\)]+)\\) on ([-.\\w]+)\\nSSH-(\\d[\\d.]+)-| p/SCS sshd/ v/$1/ i/$2; on $3; protocol $4/\nmatch ssh m|^sshd2\\[\\d+\\]: .*\\r\\nSSH-([\\d.]+)-(\\d[-.\\w]+) SSH Secure Shell \\(([^\\r\\n\\)]+)\\)\\r?\\n| p/SCS sshd/ v/$2/ i/protocol $1; $3/\nmatch ssh m|^SSH-([\\d.]+)-(\\d+\\.\\d+\\.[-.\\w]+)| p/SCS sshd/ v/$2/ i/protocol $1/\n\n# OpenSSH\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) Debian-(\\S*maemo\\S*)\\r?\\n| p/OpenSSH/ v/$2 Debian $3/ i/Nokia Maemo tablet; protocol $1/ o/Linux/ cpe:/a:openbsd:openssh:$2/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+)[ -]{1,2}Debian[ -_](.*ubuntu.*)\\r\\n| p/OpenSSH/ v/$2 Debian $3/ i/Ubuntu Linux; protocol $1/ o/Linux/ cpe:/a:openbsd:openssh:$2/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+)[ -]{1,2}Ubuntu[ -_]([^\\r\\n]+)\\r?\\n| p/OpenSSH/ v/$2 Ubuntu $3/ i/Ubuntu Linux; protocol $1/ o/Linux/ cpe:/a:openbsd:openssh:$2/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+)[ -]{1,2}Debian[ -_]([^\\r\\n]+)\\r?\\n| p/OpenSSH/ v/$2 Debian $3/ i/protocol $1/ o/Linux/ cpe:/a:openbsd:openssh:$2/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_[\\w.]+-FC-([\\w.-]+)\\.fc(\\d+)\\r\\n| p/OpenSSH/ v/$2 Fedora/ i/Fedora Core $3; protocol $1/ o/Linux/ cpe:/a:openbsd:openssh:$2/ cpe:/o:fedoraproject:fedora_core:$3/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) FreeBSD-([\\d]+)\\r?\\n| p/OpenSSH/ v/$2/ i/FreeBSD $3; protocol $1/ o/FreeBSD/ cpe:/a:openbsd:openssh:$2/ cpe:/o:freebsd:freebsd/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) FreeBSD localisations (\\d+)\\r?\\n| p/OpenSSH/ v/$2/ i/FreeBSD $3; protocol $1/ o/FreeBSD/ cpe:/a:openbsd:openssh:$2/ cpe:/o:freebsd:freebsd/a\nmatch ssh m=^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) FreeBSD-openssh-portable-(?:base-|amd64-)?[\\w.,]+\\r?\\n= p/OpenSSH/ v/$2/ i/protocol $1/ o/FreeBSD/ cpe:/a:openbsd:openssh:$2/ cpe:/o:freebsd:freebsd/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) FreeBSD-openssh-portable-overwrite-base| p/OpenSSH/ v/$2/ i/protocol $1; overwrite base SSH/ o/FreeBSD/ cpe:/a:openbsd:openssh:$2/ cpe:/o:freebsd:freebsd/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) FreeBSD-openssh-gssapi-| p/OpenSSH/ v/$2/ i/gssapi; protocol $1/ o/FreeBSD/ cpe:/a:openbsd:openssh:$2/ cpe:/o:freebsd:freebsd/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) FreeBSD\\n| p/OpenSSH/ v/$2/ i/protocol $1/ o/FreeBSD/ cpe:/a:openbsd:openssh:$2/ cpe:/o:freebsd:freebsd/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) miniBSD-([\\d]+)\\r?\\n| p/OpenSSH/ v/$2/ i/MiniBSD $3; protocol $1/ o/MiniBSD/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) NetBSD_Secure_Shell-([\\w._+-]+)\\r?\\n| p/OpenSSH/ v/$2/ i/NetBSD $3; protocol $1/ o/NetBSD/ cpe:/a:openbsd:openssh:$2/ cpe:/o:netbsd:netbsd/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+)_Mikrotik_v([\\d.]+)\\r?\\n| p/OpenSSH/ v/$2 mikrotik $3/ i/protocol $1/ d/router/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) in RemotelyAnywhere ([\\d.]+)\\r?\\n| p/OpenSSH/ v/$2/ i/RemotelyAnywhere $3; protocol $1/ o/Windows/ cpe:/a:openbsd:openssh:$2/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+)\\+CAN-2004-0175\\r?\\n| p/OpenSSH/ v/$2+CAN-2004-0175/ i/protocol $1/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) NCSA_GSSAPI_20040818 KRB5\\r?\\n| p/OpenSSH/ v/$2 NCSA_GSSAPI_20040818 KRB5/ i/protocol $1/ cpe:/a:openbsd:openssh:$2/\n# http://www.psc.edu/index.php/hpn-ssh\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+)[-_]hpn(\\w+) *(?:\\\"\\\")?\\r?\\n| p/OpenSSH/ v/$2/ i/protocol $1; HPN-SSH patch $3/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+\\+sftpfilecontrol-v[\\d.]+-hpn\\w+)\\r?\\n| p/OpenSSH/ v/$2/ i/protocol $1/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+-hpn) NCSA_GSSAPI_\\d+ KRB5\\r?\\n| p/OpenSSH/ v/$2/ i/protocol $1; kerberos support/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_3\\.4\\+p1\\+gssapi\\+OpenSSH_3\\.7\\.1buf_fix\\+2006100301\\r?\\n| p/OpenSSH/ v/3.4p1 with CMU Andrew patches/ i/protocol $1/ cpe:/a:openbsd:openssh:3.4p1/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+\\.RL)\\r?\\n| p/OpenSSH/ v/$2 Allied Telesis/ i/protocol $1/ d/switch/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+-CERN\\d+)\\r?\\n| p/OpenSSH/ v/$2/ i/protocol $1/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+\\.cern-hpn)| p/OpenSSH/ v/$2/ i/protocol $1/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+-hpn)\\r?\\n| p/OpenSSH/ v/$2/ i/protocol $1/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+-pwexp\\d+)\\r?\\n| p/OpenSSH/ v/$2/ i/protocol $1/ o/AIX/ cpe:/a:openbsd:openssh:$2/ cpe:/o:ibm:aix/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+)-chrootssh\\n| p/OpenSSH/ v/$2/ i/protocol $1/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-Nortel\\r?\\n| p/Nortel SSH/ i/protocol $1/ d/switch/ cpe:/a:openbsd:openssh/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w.]+)[-_]hpn(\\w+) DragonFly-| p/OpenSSH/ v/$2/ i/protocol $1; HPN-SSH patch $3/ o/DragonFlyBSD/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w.]+) DragonFly-| p/OpenSSH/ v/$2/ i/protocol $1/ o/DragonFlyBSD/ cpe:/a:openbsd:openssh:$2/\n# Not sure about the next 2 being these specific devices:\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w_.-]+) FIPS\\n| p/OpenSSH/ v/$2/ i/protocol $1; Imperva SecureSphere firewall/ d/firewall/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w_.-]+) FIPS\\r\\n| p/OpenSSH/ v/$2/ i/protocol $1; Cisco NX-OS/ d/switch/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w_.-]+) NCSA_GSSAPI_GPT_([-\\w_.]+) GSI\\n| p/OpenSSH/ v/$2/ i/protocol $1; NCSA GSSAPI authentication patch $3/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) \\.\\n| p/OpenSSH/ v/$2/ i/protocol $1/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) PKIX\\r\\n| p/OpenSSH/ v/$2/ i/protocol $1; X.509 v3 certificate support/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+)-FIPS\\(capable\\)\\r\\n| p/OpenSSH/ v/$2/ i/protocol $1; FIPS capable/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+)-sshjail\\n| p/OpenSSH/ v/$2/ i/protocol $1; sshjail patch/ cpe:/a:openbsd:openssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) Raspbian-([^\\r\\n]+)\\r?\\n| p/OpenSSH/ v/$2 Raspbian $3/ i/protocol $1/ o/Linux/ cpe:/a:openbsd:openssh:$2/ cpe:/o:linux:linux_kernel/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) OVH-rescue\\r\\n| p/OpenSSH/ v/$2/ i/protocol $1; OVH hosting rescue/ cpe:/a:openbsd:openssh:$2/a\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) Trisquel_GNU/linux_([\\d.]+)(?:-\\d+)?\\r\\n| p/OpenSSH/ v/$2/ i/protocol $1; Trisquel $3/ o/Linux/ cpe:/a:openbsd:openssh:$2/a cpe:/o:linux:linux_kernel/a cpe:/o:trisquel_project:trisquel_gnu%2flinux:$3/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) \\+ILOM\\.2015-5600\\r\\n| p/OpenSSH/ v/$2/ i/protocol $1; ILOM patched CVE-2015-5600/ cpe:/a:openbsd:openssh:$2/a cpe:/h:oracle:integrated_lights-out/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+) SolidFire Element \\r\\n| p/OpenSSH/ v/$2/ i/protocol $1; NetApp SolidFire storage node/ cpe:/a:openbsd:openssh:$2/a cpe:/o:netapp:element_software/\n\n# Choose your destiny:\n# 1) Match all OpenSSHs:\n#match ssh m/^SSH-([\\d.]+)-OpenSSH[_-]([\\S ]+)/i p/OpenSSH/ v/$2/ i/protocol $1/ cpe:/a:openbsd:openssh:$2/\n# 2) Don't match unknown SSHs (and generate fingerprints)\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH[_-]([\\w.]+)\\s*\\r?\\n|i p/OpenSSH/ v/$2/ i/protocol $1/ cpe:/a:openbsd:openssh:$2/\n\n# These are strange ones. These routers pretend to be OpenSSH, but don't do it that well (see the \\r):\nmatch ssh m|^SSH-2\\.0-OpenSSH\\r?\\n| p/Linksys WRT45G modified dropbear sshd/ i/protocol 2.0/ d/router/\nmatch ssh m|^SSH-2\\.0-OpenSSH_3\\.6p1\\r?\\n| p|D-Link/Netgear DSL router modified dropbear sshd| i/protocol 2.0/ d/router/\n\nmatch ssh m|^\\0\\0\\0\\$\\0\\0\\0\\0\\x01\\0\\0\\0\\x1bNo host key is configured!\\n\\r!\\\"v| p/Foundry Networks switch sshd/ i/broken: No host key configured/\nmatch ssh m|^SSH-(\\d[\\d.]+)-SSF-(\\d[-.\\w]+)\\r?\\n| p/SSF French SSH/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-(\\d[\\d.]+)-lshd_(\\d[-.\\w]+) lsh - a free ssh\\r\\n\\0\\0| p/lshd secure shell/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-(\\d[\\d.]+)-lshd-(\\d[-.\\w]+) lsh - a GNU ssh\\r\\n\\0\\0| p/lshd secure shell/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-Sun_SSH_(\\S+)| p/SunSSH/ v/$2/ i/protocol $1/ cpe:/a:sun:sunssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-meow roototkt by rebel| p/meow SSH ROOTKIT/ i/protocol $1/\n# Akamai hosted systems tend to run this - found on www.microsoft.com\nmatch ssh m|^SSH-(\\d[\\d.]*)-(AKAMAI-I*)\\r?\\n$| p/Akamai SSH/ v/$2/ i/protocol $1/ cpe:/a:akamai:ssh:$2/\nmatch ssh m|^SSH-(\\d[\\d.]*)-AKAMAI-([\\d.]+)\\r?\\n$| p/Akamai SSH/ v/$2/ i/protocol $1/ cpe:/a:akamai:ssh:$2/\nmatch ssh m|^SSH-(\\d[\\d.]*)-(Server-V)\\r?\\n$| p/Akamai SSH/ v/$2/ i/protocol $1/ cpe:/a:akamai:ssh:$2/\nmatch ssh m|^SSH-(\\d[\\d.]*)-(Server-VI)\\r?\\n$| p/Akamai SSH/ v/$2/ i/protocol $1/ cpe:/a:akamai:ssh:$2/\nmatch ssh m|^SSH-(\\d[\\d.]*)-(Server-VII)\\r?\\n| p/Akamai SSH/ v/$2/ i/protocol $1/ cpe:/a:akamai:ssh:$2/\nmatch ssh m|^SSH-(\\d[\\d.]+)-Cisco-(\\d[\\d.]+)\\r?\\n$| p/Cisco SSH/ v/$2/ i/protocol $1/ o/IOS/ cpe:/a:cisco:ssh:$2/ cpe:/o:cisco:ios/a\nmatch ssh m|^SSH-(\\d[\\d.]+)-CiscoIOS_([\\d.]+)XA\\r?\\n| p/Cisco SSH/ v/$2/ i/protocol $1; IOS XA/ o/IOS/ cpe:/a:cisco:ssh:$2/ cpe:/o:cisco:ios/a\nmatch ssh m|^\\r\\nDestination server does not have Ssh activated\\.\\r\\nContact Cisco Systems, Inc to purchase a\\r\\nlicense key to activate Ssh\\.\\r\\n| p/Cisco CSS SSH/ i/Unlicensed/ cpe:/a:cisco:ssh/\nmatch ssh m|^SSH-(\\d[\\d.]+)-VShell_(\\d[_\\d.]+) VShell\\r?\\n$| p/VanDyke VShell sshd/ v/$SUBST(2,\"_\",\".\")/ i/protocol $1/ cpe:/a:vandyke:vshell:$SUBST(2,\"_\",\".\")/\nmatch ssh m|^SSH-2\\.0-0\\.0 \\r?\\n| p/VanDyke VShell sshd/ i/version info hidden; protocol 2.0/ cpe:/a:vandyke:vshell/\nmatch ssh m|^SSH-([\\d.]+)-([\\w.]+) VShell\\r?\\n| p/VanDyke VShell/ v/$2/ i/protocol $1/ cpe:/a:vandyke:vshell:$2/\nmatch ssh m|^SSH-([\\d.]+)-([\\w.]+) \\(beta\\) VShell\\r?\\n| p/VanDyke VShell/ v/$2 beta/ i/protocol $1/ cpe:/a:vandyke:vshell:$2:beta/\nmatch ssh m|^SSH-([\\d.]+)-(\\d[-.\\w]+) sshlib: WinSSHD (\\d[-.\\w]+)\\r?\\n| p/Bitvise WinSSHD/ v/$3/ i/sshlib $2; protocol $1/ o/Windows/ cpe:/a:bitvise:winsshd:$3/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-(\\d[-.\\w]+) sshlib: WinSSHD\\r?\\n| p/Bitvise WinSSHD/ i/sshlib $2; protocol $1; server version hidden/ o/Windows/ cpe:/a:bitvise:winsshd/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-([\\w._-]+) sshlib: sshlibSrSshServer ([\\w._-]+)\\r\\n| p/SrSshServer/ v/$3/ i/sshlib $2; protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-([\\w._-]+) sshlib: GlobalScape\\r?\\n| p/GlobalScape CuteFTP sshd/ i/sshlib $2; protocol $1/ o/Windows/ cpe:/a:globalscape:cuteftp/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-([\\w.-]+)_sshlib GlobalSCAPE\\r\\n| p/GlobalScape CuteFTP sshd/ i/sshlib $2; protocol $1/ o/Windows/ cpe:/a:globalscape:cuteftp/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-([\\w.-]+)_sshlib Globalscape\\r\\n| p/GlobalScape EFT sshd/ i/sshlib $2; protocol $1/ o/Windows/ cpe:/a:globalscape:eft_server/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-([\\w._-]+) sshlib: EdmzSshDaemon ([\\w._-]+)\\r\\n| p/EdmzSshDaemon/ v/$3/ i/sshlib $2; protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-([\\w._-]+) FlowSsh: WinSSHD ([\\w._-]+)\\r\\n| p/Bitvise WinSSHD/ v/$3/ i/FlowSsh $2; protocol $1/ o/Windows/ cpe:/a:bitvise:winsshd:$3/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-([\\w._-]+) FlowSsh: WinSSHD ([\\w._-]+): free only for personal non-commercial use\\r\\n| p/Bitvise WinSSHD/ v/$3/ i/FlowSsh $2; protocol $1; non-commercial use/ o/Windows/ cpe:/a:bitvise:winsshd:$3/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-([\\w._-]+) FlowSsh: WinSSHD: free only for personal non-commercial use\\r\\n| p/Bitvise WinSSHD/ i/FlowSsh $2; protocol $1; non-commercial use/ o/Windows/ cpe:/a:bitvise:winsshd/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-([\\w._-]+) FlowSsh: Bitvise SSH Server \\(WinSSHD\\) ([\\w._-]+): free only for personal non-commercial use\\r\\n| p/Bitvise WinSSHD/ v/$3/ i/FlowSsh $2; protocol $1; non-commercial use/ o/Windows/ cpe:/a:bitvise:winsshd:$3/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-([\\w._-]+) FlowSsh: Bitvise SSH Server \\(WinSSHD\\) ([\\w._-]+)\\r\\n| p/Bitvise WinSSHD/ v/$3/ i/FlowSsh $2; protocol $1/ o/Windows/ cpe:/a:bitvise:winsshd:$3/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-([\\w._-]+) FlowSsh: Bitvise SSH Server \\(WinSSHD\\) \\r\\n| p/Bitvise WinSSHD/ i/FlowSsh $2; protocol $1/ o/Windows/ cpe:/a:bitvise:winsshd/ cpe:/o:microsoft:windows/a\n# Cisco VPN 3000 Concentrator\n# Cisco VPN Concentrator 3005 - Cisco Systems, Inc./VPN 3000 Concentrator Version 4.0.1.B Jun 20 2003\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH\\r?\\n$| p/OpenSSH/ i/protocol $1/ d/terminal server/ cpe:/a:openbsd:openssh/a\nmatch ssh m|^SSH-1\\.5-X\\r?\\n| p/Cisco VPN Concentrator SSHd/ i/protocol 1.5/ d/terminal server/ cpe:/o:cisco:vpn_3000_concentrator_series_software/\nmatch ssh m|^SSH-([\\d.]+)-NetScreen\\r?\\n| p/NetScreen sshd/ i/protocol $1/ d/firewall/ cpe:/o:juniper:netscreen_screenos/\nmatch ssh m|^SSH-1\\.5-FucKiT RootKit by Cyrax\\r?\\n| p/FucKiT RootKit sshd/ i/**BACKDOOR** protocol 1.5/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch ssh m|^SSH-2\\.0-dropbear_([-\\w.]+)\\r?\\n| p/Dropbear sshd/ v/$1/ i/protocol 2.0/ o/Linux/ cpe:/a:matt_johnston:dropbear_ssh_server:$1/ cpe:/o:linux:linux_kernel/a\nmatch ssh m|^SSH-2\\.0-dropbear\\r\\n| p/Dropbear sshd/ i/protocol 2.0/ o/Linux/ cpe:/a:matt_johnston:dropbear_ssh_server/ cpe:/o:linux:linux_kernel/a\nmatch ssh m|^Access to service sshd from [-\\w_.]+@[-\\w_.]+ has been denied\\.\\r\\n| p/libwrap'd OpenSSH/ i/Access denied/ cpe:/a:openbsd:openssh/\nmatch ssh m|^SSH-([\\d.]+)-FortiSSH_([\\d.]+)\\r?\\n| p/FortiSSH/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-cryptlib\\r?\\n| p/APC AOS cryptlib sshd/ i/protocol $1/ o/AOS/ cpe:/o:apc:aos/a\nmatch ssh m|^SSH-([\\d.]+)-([\\d.]+) Radware\\r?\\n$| p/Radware Linkproof SSH/ v/$2/ i/protocol $1/ d/terminal server/\nmatch ssh m|^SSH-2\\.0-1\\.0 Radware SSH \\r?\\n| p/Radware sshd/ i/protocol 2.0/ d/firewall/\nmatch ssh m|^SSH-([\\d.]+)-Radware_([\\d.]+)\\r?\\n| p/Radware sshd/ v/$2/ i/protocol $1/ d/firewall/\nmatch ssh m|^SSH-1\\.5-By-ICE_4_All \\( Hackers Not Allowed! \\)\\r?\\n| p/ICE_4_All backdoor sshd/ i/**BACKDOOR** protocol 1.5/\nmatch ssh m|^SSH-2\\.0-mpSSH_([\\d.]+)\\r?\\n| p/HP Integrated Lights-Out mpSSH/ v/$1/ i/protocol 2.0/ cpe:/h:hp:integrated_lights-out/\nmatch ssh m|^SSH-2\\.0-Unknown\\r?\\n| p/Allot Netenforcer OpenSSH/ i/protocol 2.0/\nmatch ssh m|^SSH-2\\.0-FrSAR ([\\d.]+) TRUEX COMPT 32/64\\r?\\n| p/FrSAR truex compt sshd/ v/$1/ i/protocol 2.0/\nmatch ssh m|^SSH-2\\.0-(\\d{8,12})\\r?\\n| p/Netpilot config access/ v/$1/ i/protocol 2.0/\nmatch ssh m|^SSH-([\\d.]+)-RomCliSecure_([\\d.]+)\\r?\\n| p/Adtran Netvanta RomCliSecure sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-2\\.0-APSSH_([\\w.]+)\\r?\\n| p/APSSHd/ v/$1/ i/protocol 2.0/\nmatch ssh m|^SSH-2\\.0-Twisted\\r?\\n| p/Kojoney SSH honeypot/ i/protocol 2.0/ cpe:/a:twistedmatrix:twisted/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w.]+)\\r?\\n.*aes256|s p/Kojoney SSH honeypot/ i/Pretending to be $2; protocol $1/\nmatch ssh m|^SSH-2\\.0-Mocana SSH\\r\\n| p/Mocana embedded SSH/ i/protocol 2.0/\nmatch ssh m|^SSH-2\\.0-Mocana SSH \\r?\\n| p/Mocana embedded SSH/ i/protocol 2.0/\nmatch ssh m|^SSH-2\\.0-Mocana SSH ([\\d.]+)\\r?\\n| p/Mocana NanoSSH/ v/$1/ i/protocol 2.0/\nmatch ssh m|^SSH-1\\.99-InteropSecShell_([\\d.]+)\\r?\\n| p/InteropSystems SSH/ v/$1/ i/protocol 1.99/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-WeOnlyDo(?:-wodFTPD)? ([\\d.]+)\\r?\\n| p/WeOnlyDo sshd/ v/$2/ i/protocol $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-WeOnlyDo-([\\d.]+)\\r?\\n| p/WeOnlyDo sshd/ v/$2/ i/protocol $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-2\\.0-PGP\\r?\\n| p/PGP Universal sshd/ i/protocol 2.0/ cpe:/a:pgp:universal_server/\nmatch ssh m|^SSH-([\\d.]+)-libssh[_-]([-\\w.]+)\\r?\\n| p/libssh/ v/$2/ i/protocol $1/ cpe:/a:libssh:libssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-libssh\\n| p/libssh/ i/protocol $1/ cpe:/a:libssh:libssh/\nmatch ssh m|^SSH-([\\d.]+)-HUAWEI-VRP([\\d.]+)\\r?\\n| p/Huawei VRP sshd/ i/protocol $1/ d/router/ o/VRP $2/ cpe:/o:huawei:vrp:$2/\nmatch ssh m|^SSH-([\\d.]+)-HUAWEI-UMG([\\d.]+)\\r?\\n| p/Huawei Unified Media Gateway sshd/ i/model: $2; protocol $1/ cpe:/h:huawei:$2/\n# Huawei 6050 WAP\nmatch ssh m|^SSH-([\\d.]+)-HUAWEI-([\\d.]+)\\r?\\n| p/Huawei WAP sshd/ v/$2/ i/protocol $1/ d/WAP/\nmatch ssh m|^SSH-([\\d.]+)-VRP-([\\d.]+)\\r?\\n| p/Huawei VRP sshd/ i/protocol $1/ d/router/ o/VRP $2/ cpe:/o:huawei:vrp:$2/\nmatch ssh m|^SSH-([\\d.]+)-lancom\\r?\\n| p/lancom sshd/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-xxxxxxx\\r?\\n| p|Fortinet VPN/firewall sshd| i/protocol $1/ d/firewall/\nmatch ssh m|^SSH-([\\d.]+)-AOS_SSH\\r?\\n| p/AOS sshd/ i/protocol $1/ o/AOS/ cpe:/o:apc:aos/a\nmatch ssh m|^SSH-([\\d.]+)-RedlineNetworksSSH_([\\d.]+) Derived_From_OpenSSH-([\\d.])+\\r?\\n| p/RedLineNetworks sshd/ v/$2/ i/Derived from OpenSSH $3; protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-DLink Corp\\. SSH server ver ([\\d.]+)\\r?\\n| p/D-Link sshd/ v/$2/ i/protocol $1/ d/router/\nmatch ssh m|^SSH-([\\d.]+)-FreSSH\\.([\\d.]+)\\r?\\n| p/FreSSH/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-Neteyes-C-Series_([\\d.]+)\\r?\\n| p/Neteyes C Series load balancer sshd/ v/$2/ i/protocol $1/ d/load balancer/\nmatch ssh m|^SSH-([\\d.]+)-IPSSH-([\\d.]+)\\r?\\n| p|Cisco/3com IPSSHd| v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-DigiSSH_([\\d.]+)\\r?\\n| p/Digi CM sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-0 Tasman Networks Inc\\.\\r?\\n| p/Tasman router sshd/ i/protocol $1/ d/router/\nmatch ssh m|^SSH-([\\d.]+)-([\\w.]+)rad\\r?\\n| p/Rad Java SFTPd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\d.]+) in DesktopAuthority ([\\d.]+)\\r?\\n| p/DesktopAuthority OpenSSH/ v/$2/ i/DesktopAuthority $3; protocol $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-NOS-SSH_([\\d.]+)\\r?\\n| p/3Com WX2200 or WX4400 NOS sshd/ v/$2/ i/protocol $1/ d/WAP/\nmatch ssh m|^SSH-1\\.5-SSH\\.0\\.1\\r?\\n| p/Dell PowerConnect sshd/ i/protocol 1.5/ d/power-device/\nmatch ssh m|^SSH-([\\d.]+)-Ingrian_SSH\\r?\\n| p/Ingrian SSH/ i/protocol $1/ d/security-misc/\nmatch ssh m|^SSH-([\\d.]+)-PSFTPd PE\\. Secure FTP Server ready\\r?\\n| p/PSFTPd sshd/ i/protocol $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-BlueArcSSH_([\\d.]+)\\r?\\n| p/BlueArc sshd/ v/$2/ i/protocol $1/ d/storage-misc/\nmatch ssh m|^SSH-([\\d.]+)-Zyxel SSH server\\r?\\n| p/ZyXEL ZyWALL sshd/ i/protocol $1/ d/security-misc/ o/ZyNOS/ cpe:/o:zyxel:zynos/\nmatch ssh m|^SSH-([\\d.]+)-paramiko_([\\w._-]+)\\r?\\n| p/Paramiko Python sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-USHA SSHv([\\w._-]+)\\r?\\n| p/USHA SSH/ v/$2/ i/protocol $1/ d/power-device/\nmatch ssh m|^SSH-([\\d.]+)-SSH_0\\.2\\r?\\n$| p/3com sshd/ v/0.2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-CoreFTP-([\\w._-]+)\\r?\\n| p/CoreFTP sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-RomSShell_([\\w._-]+)\\r\\n| p/AllegroSoft RomSShell sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-IFT SSH server BUILD_VER\\n| p/Sun StorEdge 3511 sshd/ i/protocol $1; IFT SSH/ d/storage-misc/\nmatch ssh m|^Could not load hosy key\\. Closing connection\\.\\.\\.$| p/Cisco switch sshd/ i/misconfigured/ d/switch/ o/IOS/ cpe:/a:cisco:ssh/ cpe:/o:cisco:ios/a\nmatch ssh m|^Could not load host key\\. Closing connection\\.\\.\\.$| p/Cisco switch sshd/ i/misconfigured/ d/switch/ o/IOS/ cpe:/a:cisco:ssh/ cpe:/o:cisco:ios/a\nmatch ssh m|^SSH-([\\d.]+)-WS_FTP-SSH_([\\w._-]+)(?: FIPS)?\\r\\n| p/WS_FTP sshd/ v/$2/ i/protocol $1/ o/Windows/ cpe:/a:ipswitch:ws_ftp:$2/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-http://www\\.sshtools\\.com J2SSH \\[SERVER\\]\\r\\n| p/SSHTools J2SSH/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-DraySSH_([\\w._-]+)\\n\\n\\rNo connection is available now\\. Try again later!$| p/DrayTek Vigor 2820 ADSL router sshd/ v/$2/ i/protocol $1/ d/broadband router/ cpe:/h:draytek:vigor_2820/a\nmatch ssh m|^SSH-([\\d.]+)-DraySSH_([\\w._-]+)\\n| p/DrayTek Vigor ADSL router sshd/ v/$2/ i/protocol $1/ d/broadband router/\nmatch ssh m|^SSH-([\\d.]+)-Pragma FortressSSH ([\\d.]+)\\n| p/Pragma Fortress SSH Server/ v/$2/ i/protocol $1/ o/Windows/ cpe:/a:pragmasys:fortress_ssh_server:$2/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-SysaxSSH_([\\d.]+)\\r\\n| p/Sysax Multi Server sshd/ v/$2/ i/protocol $1/ o/Windows/ cpe:/a:sysax:multi_server:$2/ cpe:/o:microsoft:windows/a\n# CP-7900G and 8961\nmatch ssh m|^SSH-([\\d.]+)-1\\.00\\r\\n$| p/Cisco IP Phone sshd/ i/protocol $1/ d/VoIP phone/\nmatch ssh m|^SSH-([\\d.]+)-Foxit-WAC-Server-([\\d.]+ Build \\d+)\\n| p/Foxit WAC Server sshd/ v/$2/ i/protocol $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-ROSSSH\\r\\n| p/MikroTik RouterOS sshd/ i/protocol $1/ d/router/ o/Linux/ cpe:/o:linux:linux_kernel/a cpe:/o:mikrotik:routeros/\nmatch ssh m|^SSH-([\\d.]+)-3Com OS-([\\w._-]+ Release \\w+)\\n| p/3Com switch sshd/ v/$2/ i/protocol $1/ d/switch/ o/Comware/ cpe:/o:3com:comware/\nmatch ssh m|^SSH-([\\d.]+)-3Com OS-3Com OS V([\\w._-]+)\\n| p/3Com switch sshd/ v/$2/ i/protocol $1/ d/switch/ o/Comware/ cpe:/o:3com:comware/\nmatch ssh m|^SSH-([\\d.]+)-XXXX\\r\\n| p/Cyberoam firewall sshd/ i/protocol $1/ d/firewall/\nmatch ssh m|^SSH-([\\d.]+)-xxx\\r\\n| p/Cyberoam UTM firewall sshd/ i/protocol $1/ d/firewall/\nmatch ssh m|^SSH-([\\d.]+)-OpenSSH_([\\w._-]+)-HipServ\\n| p/Seagate GoFlex NAS device sshd/ v/$2/ i/protocol $1/ d/storage-misc/\nmatch ssh m|^SSH-([\\d.]+)-xlightftpd_release_([\\w._-]+)\\r\\n| p/Xlight FTP Server sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-Serv-U_([\\w._-]+)\\r\\n| p/Serv-U SSH Server/ v/$2/ i/protocol $1/ cpe:/a:serv-u:serv-u:$2/\nmatch ssh m|^SSH-([\\d.]+)-CerberusFTPServer_([\\w._-]+)\\r\\n| p/Cerberus FTP Server sshd/ v/$2/ i/protocol $1/ cpe:/a:cerberusftp:ftp_server:$2/\nmatch ssh m|^SSH-([\\d.]+)-CerberusFTPServer_([\\w._-]+) FIPS\\r\\n| p/Cerberus FTP Server sshd/ v/$2/ i/protocol $1; FIPS/ cpe:/a:cerberusftp:ftp_server:$2/\nmatch ssh m|^SSH-([\\d.]+)-SSH_v2\\.0@force10networks\\.com\\r\\n| p/Force10 switch sshd/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-Data ONTAP SSH ([\\w._-]+)\\n| p/NetApp Data ONTAP sshd/ v/$2/ i/protocol $1/ cpe:/a:netapp:data_ontap/\nmatch ssh m|^SSH-([\\d.]+)-SSHTroll| p/SSHTroll ssh honeypot/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-AudioCodes\\n| p/AudioCodes MP-124 SIP gateway sshd/ i/protocol $1/ d/VoIP adapter/ cpe:/h:audiocodes:mp-124/\nmatch ssh m|^SSH-([\\d.]+)-WRQReflectionForSecureIT_([\\w._-]+) Build ([\\w._-]+)\\r\\n| p/WRQ Reflection for Secure IT sshd/ v/$2 build $3/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-Nand([\\w._-]+)\\r\\n| p/Nand sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-SSHD-CORE-([\\w._-]+)-ATLASSIAN([\\w._-]*)\\r\\n| p/Apache Mina sshd/ v/$2-ATLASSIAN$3/ i/Atlassian Stash; protocol $1/ cpe:/a:apache:sshd:$2/\n# Might not always be Atlassian\nmatch ssh m|^SSH-([\\d.]+)-SSHD-UNKNOWN\\r\\n| p/Apache Mina sshd/ i/Atlassian Bitbucket; protocol $1/ cpe:/a:apache:sshd/\nmatch ssh m|^SSH-([\\d.]+)-GerritCodeReview_([\\w._-]+) \\(SSHD-CORE-([\\w._-]+)\\)\\r\\n| p/Apache Mina sshd/ v/$3/ i/Gerrit Code Review $2; protocol $1/ cpe:/a:apache:sshd:$3/\nmatch ssh m|^SSH-([\\d.]+)-SSHD-CORE-([\\w._-]+)\\r\\n| p/Apache Mina sshd/ v/$2/ i/protocol $1/ cpe:/a:apache:sshd:$2/\nmatch ssh m|^SSH-([\\d.]+)-Plan9\\r?\\n| p/Plan 9 sshd/ i/protocol $1/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\nmatch ssh m|^SSH-2\\.0-CISCO_WLC\\n| p/Cisco WLC sshd/ d/remote management/\nmatch ssh m|^SSH-([\\d.]+)-([\\w._-]+) sshlib: ([78]\\.\\d+\\.\\d+\\.\\d+)\\r\\n| p/MoveIT DMZ sshd/ v/$3/ i/sshlib $2; protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-Adtran_([\\w._-]+)\\r\\n| p/Adtran sshd/ v/$2/ i/protocol $1/ o/AOS/ cpe:/o:adtran:aos/\n# Axway SecureTransport 1.5 ssh (too generic? --ed.)\nmatch ssh m|^SSH-([\\d.]+)-SSHD\\r\\n| p/Axway SecureTransport sshd/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-DOPRA-([\\w._-]+)\\n| p/Dopra Linux sshd/ v/$2/ i/protocol $1/ o/Dopra Linux/ cpe:/o:huawei:dopra_linux/\nmatch ssh m|^SSH-([\\d.]+)-AtiSSH_([\\w._-]+)\\r\\n| p/Allied Telesis sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-CrushFTPSSHD\\r\\n| p/CrushFTP sftpd/ i/protocol $1/ cpe:/a:crushftp:crushftp/\n# Probably not version 5\nmatch ssh m|^SSH-([\\d.]+)-CrushFTPSSHD_5\\r\\n| p/CrushFTP sftpd/ i/protocol $1/ cpe:/a:crushftp:crushftp/\nmatch ssh m|^SSH-([\\d.]+)-srtSSHServer_([\\w._-]+)\\r\\n| p/South River Titan sftpd/ v/$2/ i/protocol $1/ o/Windows/ cpe:/a:southrivertech:titan_ftp_server:$2/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-WRQReflectionforSecureIT_([\\w._-]+) Build (\\d+)\\r\\n| p/Attachmate Reflection for Secure IT sshd/ v/$2/ i/Build $3; protocol $1/ cpe:/a:attachmate:reflection_for_secure_it:$2/\nmatch ssh m|^SSH-([\\d.]+)-Maverick_SSHD\\r\\n| p/Maverick sshd/ i/protocol $1/ cpe:/a:sshtools:maverick_sshd/\nmatch ssh m|^SSH-([\\d.]+)-WingFTPserver\\r\\n| p/Wing FTP Server sftpd/ i/protocol $1/ cpe:/a:wingftp:wing_ftp_server/\nmatch ssh m|^SSH-([\\d.]+)-mod_sftp/([\\w._-]+)\\r\\n| p/ProFTPD mod_sftp/ v/$2/ i/protocol $1/ cpe:/a:proftpd:proftpd:$2/\nmatch ssh m|^SSH-([\\d.]+)-mod_sftp\\r\\n| p/ProFTPD mod_sftp/ i/protocol $1/ cpe:/a:proftpd:proftpd/\nmatch ssh m|^SSH-([\\d.]+)--\\n| p/Huawei VRP sshd/ i/protocol $1/ o/VRP/ cpe:/o:huawei:vrp/\n# name is not hostname, but configurable service name\nmatch ssh m|^SSH-([\\d.]+)-SSH Server - ([^\\r\\n]+)\\r\\n\\0\\0...\\x14|s p/Ice Cold Apps SSH Server (com.icecoldapps.sshserver)/ i/protocol $1; name: $2/ o/Android/ cpe:/a:ice_cold_apps:ssh_server/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch ssh m|^SSH-([\\d.]+)-SSH Server - sshd\\r\\n| p/SSHelper sshd (com.arachnoid.sshelper)/ i/protocol $1/ o/Android/ cpe:/a:arachnoid:sshelper/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch ssh m|^SSH-([\\d.]+)-ConfD-([\\w._-]+)\\r\\n| p/ConfD sshd/ v/$2/ i/protocol $1/ cpe:/a:tail-f:confd:$2/\nmatch ssh m|^SSH-([\\d.]+)-SERVER_([\\d.]+)\\r\\n| p/FoxGate switch sshd/ v/$2/ i/protocol $1/\nmatch ssh m|^SSH-2\\.0-Server\\r\\n| p/AirTight WIPS sensor sshd/ i/protocol 2.0/\nmatch ssh m|^SSH-([\\d.]+)-EchoSystem_Server_([\\w._-]+)\\r\\n| p/EchoSystem sshd/ v/$2/ i/protocol $1/ cpe:/a:echo360:echosystem:$2/\nmatch ssh m|^SSH-([\\d.]+)-FileCOPA\\r\\n| p/FileCOPA sftpd/ i/protocol $1/ o/Windows/ cpe:/a:intervations:filecopa/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-PSFTPd\\. Secure FTP Server ready\\r\\n| p/PSFTPd/ i/protocol $1/ o/Windows/ cpe:/a:pleis:psftpd/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-NA_([\\d.]+)\\r\\n| p/HP Network Automation/ v/$2/ i/protocol $1/ cpe:/a:hp:network_automation:$2/\nmatch ssh m|^SSH-([\\d.]+)-Comware-([\\d.]+)\\r?\\n| p/HP Comware switch sshd/ v/$2/ i/protocol $1/ o/Comware/ cpe:/o:hp:comware:$2/\nmatch ssh m|^SSH-([\\d.]+)-SecureLink SSH Server \\(Version ([\\d.]+)\\)\\r\\n| p/SecureLink sshd/ v/$2/ i/protocol $1/ cpe:/a:securelink:securelink:$2/\nmatch ssh m|^SSH-([\\d.]+)-WeOnlyDo-WingFTP\\r\\n| p/WingFTP sftpd/ i/protocol $1/ cpe:/a:wftpserver:wing_ftp_server/\nmatch ssh m|^SSH-([\\d.]+)-MS_(\\d+\\.\\d\\d\\d)\\r\\n| p/Microsoft Windows IoT sshd/ v/$2/ i/protocol $1/ o/Windows 10 IoT Core/ cpe:/o:microsoft:windows_10:::iot_core/\nmatch ssh m|^SSH-([\\d.]+)-elastic-sshd\\n| p/Elastic Hosts emergency SSH console/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-ZTE_SSH\\.([\\d.]+)\\n| p|ZTE router/switch sshd| v/$2/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-SilverSHielD\\r\\n| p/SilverSHielD sshd/ i/protocol $1/ o/Windows/ cpe:/a:extenua:silvershield/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-XFB\\.Gateway ([UW]\\w+)\\n| p/Axway File Broker (XFB) sshd/ i/protocol $1/ o/$2/ cpe:/a:axway:file_broker/\nmatch ssh m|^SSH-([\\d.]+)-CompleteFTP[-_]([\\d.]+)\\r\\n| p/CompleteFTP sftpd/ v/$2/ i/protocol $1/ o/Windows/ cpe:/a:enterprisedt:completeftp:$2/ cpe:/o:microsoft:windows/a\nmatch ssh m|^SSH-([\\d.]+)-moxa_([\\d.]+)\\r\\n| p/Moxa sshd/ v/$2/ i/protocol $1/ d/specialized/\nmatch ssh m|^SSH-([\\d.]+)-OneSSH_([\\w.]+)\\n| p/OneAccess OneSSH/ v/$2/ i/protocol $1/ cpe:/a:oneaccess:onessh:$1/\nmatch ssh m|^SSH-([\\d.]+)-AsyncSSH_(\\d[\\w.-]+)\\r\\n| p/AsyncSSH sshd/ v/$2/ i/protocol $1/ cpe:/a:ron_frederick:asyncssh:$2/\nmatch ssh m|^SSH-([\\d.]+)-ipage FTP Server Ready\\r\\n| p/iPage Hosting sftpd/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-ArrayOS\\n| p/Array Networks sshd/ i/protocol $1/ o/ArrayOS/ cpe:/o:arraynetworks:arrayos/\nmatch ssh m|^SSH-([\\d.]+)-SC123/SC143 CHIP-RTOS V([\\d.]+)\\r\\n| p/Dropbear sshd/ i/protocol $1/ o/IPC@CHIP-RTOS $2/ cpe:/a:matt_johnston:dropbear_ssh_server/ cpe:/o:beck-ipc:chip-rtos:$2/\nmatch ssh m|^SSH-([\\d.]+)-Syncplify\\.me\\r\\n| p/Syncplify.me Server sftpd/ i/protocol $1/ cpe:/a:syncplify:syncplify.me_server/\n# Always 0.48 with static key. Dropbear, maybe?\nmatch ssh m|^SSH-([\\d.]+)-SSH_(\\d[\\d.]+)\\r\\n| p/ZyXEL embedded sshd/ v/$2/ i/protocol $1/ d/broadband router/\nmatch ssh m|^SSH-([\\d.]+)-TECHNICOLOR_SW_([\\d.]+)\\n| p/Technicolor SA sshd/ v/$2/ i/protocol $1/ d/broadband router/\nmatch ssh m|^SSH-([\\d.]+)-BoKS_SSH_([\\d.]+)\\r\\n| p/FoxT BoKS sshd/ v/$2/ i/protocol $1/ cpe:/a:fox_technologies:boks:$2/\nmatch ssh m|^SSH-([\\d.]+)-Gitblit_v([\\d.]+) \\(SSHD-CORE-([\\d.]+)-NIO2\\)\\r\\n| p/Apache Mina sshd/ v/$3/ i/Gitblit $2; protocol $1/ cpe:/a:apache:sshd:$3/ cpe:/a:jamesmoger:gitblit:$2/\nmatch ssh m|^SSH-([\\d.]+)-LXSSH_([\\d.]+)\\n| p/MRV LX sshd/ v/$2/ i/protocol $1/ d/terminal server/ cpe:/a:mrv:lx_system_software:$2/\nmatch ssh m|^SSH-([\\d.]+)-GoAnywhere([\\d.]+)\\r\\n| p/GoAnywhere MFT sshd/ v/$2/ i/protocol $1/ cpe:/a:linoma:goanywhere_mft:$2/\nmatch ssh m|^SSH-([\\d.]+)-SFTP Server\\r\\n| p/IBM Sterling B2B Integrator sftpd/ i/protocol $1/ cpe:/a:ibm:sterling_b2b_integrator/\nmatch ssh m|^SSH-([\\d.]+)-SSH\\r\\n| p/McAfee Web Gateway sshd/ i/protocol $1/ cpe:/a:mcafee:web_gateway/\n# Not sure if this is a version number or protocol number or what.\nmatch ssh m|^SSH-([\\d.]+)-SSH_2\\.0\\n| p/Digi PortServer TS MEI sshd/ i/protocol $1/ d/terminal server/\nmatch ssh m|^SSH-([\\d.]+)-CISCO_WLC\\r\\n| p/Cisco Wireless LAN Controller sshd/ i/protocol $1/\nmatch ssh m|^SSH-([\\d.]+)-Teleport (\\d[\\w._-]+)\\n| p/Gravitational Teleport sshd/ v/$2/ i/protocol $1/ cpe:/a:gravitational:teleport:$2/\nmatch ssh m|^SSH-([\\d.]+)-Teleport\\n| p/Gravitational Teleport sshd/ v/2.7.0 or later/ i/protocol $1/ cpe:/a:gravitational:teleport/\nmatch ssh m|^SSH-([\\d.]+)-Axway\\.Gateway\\r\\n| p/Axway API Gateway sshd/ i/protocol $1/ cpe:/a:axway:api_gateway/\nmatch ssh m|^SSH-([\\d.]+)-CPS_SSH_ID_([\\d.]+)\\r\\n| p/CyberPower sshd/ v/$2/ i/protocol $1/ d/power-device/\nmatch ssh m|^SSH-([\\d.]+)-1\\r\\n| p/Clavister cOS sshd/ i/protocol $1/ d/firewall/\n\n# FortiSSH uses random server name - match an appropriate length, then check for 3 dissimilar character classes in a row.\n# Does not catch everything, but ought to be pretty good.\nmatch ssh m%^SSH-([\\d.]+)-(?=[\\w._-]{5,15}\\r?\\n$).*(?:[a-z](?:[A-Z]\\d|\\d[A-Z])|[A-Z](?:[a-z]\\d|\\d[a-z])|\\d(?:[a-z][A-Z]|[A-Z][a-z]))% p/FortiSSH/ i/protocol $1/ cpe:/o:fortinet:fortios/\n# This might be bad, but we'll try it: 5 consonants in a row, but not including \"SSH\"\nmatch ssh m|^SSH-([\\d.]+)-(?=[\\w._-]{5,15}\\r?\\n$)(?!.*[sS][sS][hH]).*[b-df-hj-np-tv-xzB-DF-HJ-NP-TV-XZ]{5}| p/FortiSSH/ i/protocol $1/ cpe:/o:fortinet:fortios/\n\nsoftmatch ssh m|^SSH-([\\d.]+)-| i/protocol $1/\n\n\nmatch soldat m|^Soldat Admin Connection Established\\.\\.\\.\\r\\nAdmin connected\\.\\r\\n| p/Soldat game admin server/\nmatch soldat m|^Soldat Admin Connection Established\\.\\r\\nPassword request timed out\\.\\r\\n| p/Soldat game admin server/\n\nmatch solproxy m|^The solproxy is used by [\\d.]+\\n\\rThe client is closed!\\n\\r| p/Dell Serial Over LAN proxy/\n\nmatch stockfish m|^unknown command \\r\\nunknown command \\r\\n| p/Stockfish chess engine/\n\nmatch stratum m|^{\\\"id\\\":null,\\\"method\\\":\\\"mining\\.notify\\\",\\\"params\\\":\\[| p/Stratum bitcoin mining protocol/\n\n#Sun bug 6345644, https://community.oracle.com/thread/1906656?start=0&tstart=0\nmatch sun-alom m|^ {31}\\.,ad8{8}baa,\\n {28},d8{19}ba\\.\\n {25}\\.a8{26}a\\n {24}a8{12}\\\"{6}8{12}a\\n| p/Sun ALOM logo easter egg/ cpe:/a:sun:advanced_lights_out_manager/\n\nmatch synchroedit m|^SynchroEdit ([\\d.]+) running on ([\\w._-]+)\\n$| p/SynchroEdit request server/ v/$1/ h/$2/\n\nmatch sysinfo m|^\\* OK SSP MagniComp SysInfo Server ([\\w._-]+)\\n$| p/MagniComp SysInfo asset management/ v/$1/\n\nmatch textui m|^TS3\\n\\r| p/TeamSpeak 3 ServerQuery/ cpe:/a:teamspeak:teamspeak3/\nmatch textui m|^TS3 Client\\n\\r| p/TeamSpeak 3 ClientQuery/ cpe:/a:teamspeak:teamspeak3/\n\nmatch teamviewer m|^\\x17\\x24\\x0a\\x20\\x00....\\x08\\x13\\x80\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x11\\x80\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/TeamViewer/ cpe:/a:teamviewer:teamviewer/\nmatch teamviewer m|^\\x17\\x24\\x0a\\x20\\x00....\\x88\\x13\\x80\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x11\\x80\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/TeamViewer/ v/5/ cpe:/a:teamviewer:teamviewer:5/\nmatch teamviewer m|^\\x17\\x24\\x0a\\x20\\x00....\\xe8\\x42\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x10\\x80\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/TeamViewer/ cpe:/a:teamviewer:teamviewer/\nmatch teamviewer m|^\\x17\\x24\\x0a\\x20\\x00....\\x68\\x42\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x11\\x80\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/TeamViewer/ cpe:/a:teamviewer:teamviewer/\n\nmatch topdesk m|^401 TOPdesk Authentication Required\\r\\n$| p/TOPdesk/\n\n# BEEP/ANTP protocol uses RPY (reply) much like HTTP\n# See http://www.ietf.org/rfc/rfc3080.txt\n# and http://simp.mitre.org/drafts/antp.html\n# for details\nmatch beep m|^RPY \\d \\d \\. \\d \\d+\\r\\nContent-Type: application/beep\\+xml\\r\\n\\r\\n<greeting><profile uri=\\\"http://www\\.codingmonkeys\\.de/BEEP/SubEthaEditHandshake\\\"| p/SubEthaEdit collaborative text editor/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch beep m|^RPY \\d \\d \\. \\d \\d+\\r\\nContent-Type: application/beep\\+xml\\r\\n\\r\\n<greeting.<profile uri=\\\"http://www\\.apple\\.com/beep/GSS\\\"/>.*/beep/xgrid/controller/|s p/Apple Xgrid Controller/ d/specialized/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch beep m|^RPY 0 0 \\. 0 142\\r\\nContent-Type: application/beep\\+xml\\r\\n\\r\\n<greeting><profile uri='assure cluster notifications'/><profile uri='assure cluster client'/></greeting>END\\r\\n| p/SCOTTY Filetransfer/ o/Windows/ cpe:/a:scottygroup:filetransfer/ cpe:/o:microsoft:windows/a\nsoftmatch beep m|^RPY \\d \\d \\. \\d \\d+\\r\\nContent-Type: application/beep\\+xml\\r\\n|\n\nmatch synergy m|^\\0\\0\\0\\x0bSynergy\\0\\x01\\0| p/Synergy KVM/ i/plaintext/\n\nmatch kvm m|^\\0\\0\\0\\x0b<CSC/>\\0| p/Raritan KVM/\nmatch kvm m|^LFB 1\\.0[56]$| p/IBM BladeCenter KVM/\n# Encrypted, very general fingerprint must come after more-specific plaintext matches\nmatch synergy m|^\\0\\0\\0\\x0b.{11}$|s p/Synergy KVM switch/ v/>1.4.11/ i/encrypted/\n\nmatch RemoteMouse m|^SIN 17osx nop nopwd \\d+$|s p/Remote Mouse/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch RemoteMouse m|^SIN 17win nop nopwd \\d+$|s p/Remote Mouse/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# Redhat Linux 7.1 - HAHAHAHAHAHA!!!! I love this service :)\nmatch systat m|^USER       PID %CPU %MEM   VSZ  RSS TTY      STAT START   TIME COMMAND\\n| p/Linux systat/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch systat m|^  PID  PGRP SID PRI STATE   BLK  SIZE COMMAND\\n| p/QNX systat/ o/QNX/ cpe:/o:qnx:qnx/a\n\n# Ukrainian Taxi Software by EvOs: Такси Навигатор\nmatch taxinav m|^\\x9f\\x01<D><T RT=\"0\" MT=\"1\" MTData=\"| p/EvoS Taxi Navigator/\n\nmatch tcpwrapped m|^You are not welcome to use (\\w+) from [\\w._-]+\\.\\n$| p/BSD TCP Wrappers/ i/$1/\n\nmatch tdm m|^\\x01\\0\\0\\0\\x03$| p/Turbine Download Manager/\n\n# TeamSpeak 2 \"TCPQuery\" port.\nmatch teamspeak-tcpquery m|^\\[TS\\]\\r\\n| p/TeamSpeak 2 TCPQuery/ cpe:/a:teamspeak:teamspeak2/\n\n# Cisco router running IOS 12.1.5-12.2.13a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f$| p/Cisco router telnetd/ d/router/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\n# DrayTek Vigor 2600 aDSL router\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfb\\x01\\n\\r\\n\\rPassword: | p/DrayTek Vigor ADSL router telnetd/ d/broadband router/\n# DrayTek Vigor 2800-series ADSL router\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfb\\x01\\n\\r\\n\\r\\rAccount:| p/DrayTek Vigor ADSL router telnetd/ d/broadband router/\n# IBM Infoprint 12 printer with JetDirect\nmatch telnet m|^\\xff\\xfc\\x01\\r\\nPlease type \\[Return\\] two times, to initialize telnet configuration\\r\\nFor HELP type \\\"\\?\\\"\\r\\n> | p/HP JetDirect printer telnetd/ d/printer/\n# HP JetDirect 300X print server\nmatch telnet m|^\\xff\\xfc\\x01\\r\\nHP JetDirect\\r\\n\\r\\nPassword:$| p/HP JetDirect printer telnetd/ d/printer/\n# IBM High Performace Switch - Model 8275-416, Software version 1.1, Manufacturer IBM068\nmatch telnet m|^\\x1b\\[1;1H\\x1b\\[2J\\x1b\\[8;38H\\x1b\\[1;1H\\x1b\\[2;1H\\(C\\) Copyright IBM Corp\\. 1999\\x1b\\[3;1HAll Rights Reserved\\.| p/IBM switch telnetd/\nmatch telnet m|^\\x1b\\[H\\x1b\\[2JYou have connected to a FirstClass System\\. Please login\\.\\.\\.\\r\\nUserID: | p/FirstClass messaging system telnetd/ cpe:/a:opentext:firstclass/\n# Cisco Catalyst management console\n# 3Com 3Com SuperStack II Switch 3300\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfb\\x01| i|Usually a Cisco/3com switch| d/switch/ o/IOS/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nSun\\(tm\\) Advanced Lights Out Manager (\\d[-.\\w]+) \\(v(\\d+)\\)\\r\\n\\r\\nPlease login: | p/Sun Advanced Lights Out Manager/ v/$1/ i/on Sun v$2; for remote system control/ d/remote management/ cpe:/a:sun:advanced_lights_out_manager:$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nCopyright \\d+ Sun Microsystems, Inc\\.  All rights reserved\\.\\r\\nUse is subject to license terms\\.\\r\\n\\r\\n\\r\\nSun\\(tm\\) Advanced Lights Out Manager ([\\d.]+) \\(([\\w._-]+)\\)\\r\\n\\r\\nPlease login: | p/Sun Advanced Lights Out Manager telnetd/ v/$1/ d/remote management/ o/Solaris/ h/$2/ cpe:/a:sun:advanced_lights_out_manager:$1/ cpe:/o:sun:sunos/a\n# Epson Stylus Color 900N telnet\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01Connected to [-/.+\\w]+!\\r\\n\\r\\nPassword: | p/Epson printer telnetd/ d/printer/\n# This one may not technically be considered telnet protocol, but you seem to use it via telnet\nmatch telnet m|^220 SL4NT viewer service ready\\r\\n250 Currently connected channels: | p/Netal SLANT viewer/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfb\\0\\xff\\xfd\\0\\xff.*\\r\\rFrontDoor (\\d[-.\\w]+)/|s p/FrontDoor FIDONet Mailer telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nOK\\r\\n$| p/Motorola Vanguard router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfc\\x06.*\\nPrecidia Technologies\\r\\n([-.+\\w]+) Remote Configuration\\r\\n\\nPassword\\? |s p/Precidia serial2ethernet gateway telnetd/ i/model $1/\nmatch telnet m|^\\xff\\xfb\\x01\\n\\r.*Welcome to the Xylan PizzaSwitch! Version (\\d[-.\\w]+)\\n\\rlogin   : |s p/Xylan PizzaSwitch telnetd/ v/$1/ d/switch/\n# Bay Networks Accelar 1100 (version 2.0.5.5) switch\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\r\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\n\\r\\r\\* Bay Networks,Inc\\..*(Accelar [-.+\\w]+).*Software Release (\\d[-.\\w]+) |s p/Bay Networks Accelar switch telnetd/ v/$2/ i/$1/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\r\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\n\\r\\r\\* Nortel Networks,Inc\\..*\\n\\r\\r\\* Passport ([-.\\w]+) .*\\r\\* Software Release (\\d[-.\\w]+) |s p/Nortel Networks Passport switch telnetd/ v/$2/ i/Passport $1/ d/switch/\n# NCD Thinstar 300 running NCD Software 2.31 build 6\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01WinCE/WBT Command Shell Version (\\d[-.\\w]+)\\r\\nSerial Number: (\\w+)  MAC Address: 0000(\\w+)\\r\\nUUID: [-\\w]+\\r\\nPassword: | p/NCD Thinster terminal command shell/ v/$1/ i/Serial# $2; MAC $3/ d/terminal/\n# Netopia 4542 aDSL router telnetd\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[Hname:| p/Netopia ADSL router telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x01\\n\\r-> \\x08\\x08\\x08\\x08        \\*\\*\\*  EPSON Network Scanner Server \\((.*)\\)  \\*\\*\\*\\n\\r\\n\\r\\x08\\x08\\x08\\x08        \\n\\r| p/Epson Network Scanner Server/ i/$1/\n\n# NetportExpress PRO/100 3 port print server\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nNetportExpress\\(tm\\) ([-/.+\\w]+)\\r\\n.*\\r\\n\\r\\nlogin: | p/Intel NetportExpress print server telnetd/ i/Model $1/ d/print server/\nmatch telnet m|^\\r\\n\\r\\n\\*\\*\\* Closing Telnet connection due to host problems\\.\\r\\n\\r\\n\\xff\\xfb\\x01\\r\\nNetportExpress\\(tm\\) ([^\\r]+)\\r\\n.*\\r\\n\\r\\nlogin: | p/Intel NetportExpress print server telnetd/ i/Model $1/ d/print server/\n# 3Com OfficeConnect 812 Router telnetd\nmatch telnet m|^login: \\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfb\\x01| p/3Com OfficeConnect router telnetd/ d/router/\n# Nortel Networks Instant Internet 100\nmatch telnet m|^\\xff\\xfb\\x01\\r\\npassword: | p/Nortel Networks Instant Internet broadband router telnetd/ d/broadband router/\n# Network Appliance ONTAP 6.3.3 telnet\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x18\\xff\\xfd#| p/Netapp ONTAP telnetd/ cpe:/a:netapp:data_ontap/\n# Netgear RP114 broadband router or ZyXel P2302R VoIP adapter\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nPassword: | p/Netgear broadband router or ZyXel VoIP adapter telnetd/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[\\?7l\\x1b.*HP [-.\\w]+ ProCurve Switch ([-.\\w]+)\\r\\n\\rFirmware revision ([-.\\w]+)\\r\\n\\r\\r| p/HP ProCurve $1 Switch telnetd/ i/Firmware: $2/ d/switch/ cpe:/h:hp:procurve_switch_$1/ cpe:/o:hp:procurve_switch_software:$2/\nmatch telnet m|^\\x1b\\[20;1H\\r\\n\\r\\x1b\\[\\?25h\\x1b\\[20;11H\\x1b\\[21;1HSession Terminated, Connect again\\r\\n\\r\\x1b\\[\\?25h\\x1b\\[21;1H\\xff\\xfd\\x18\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[\\?7l\\x1b\\[[34];23r\\x1b\\[\\?6l\\x1b\\[1;1H\\x1b\\[\\?25l\\x1b\\[1;1HHP [-.\\w]+ ProCurve Switch ([-.\\w]+)\\r\\n\\rFirmware revision ([-.\\w]+)\\r\\n\\r\\r| p/HP ProCurve $1 Switch telnetd/ i/Firmware: $2/ d/switch/ cpe:/h:hp:procurve_switch_$1/ cpe:/o:hp:procurve_switch_software:$2/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[\\?7l\\x1b.*ProCurve [\\w._-]+ Switch ([\\w._-]+)\\r\\r\\nSoftware revision ([\\w._-]+)\\r\\r\\n|s p/HP ProCurve $1 switch telnetd/ i/Firmware: $2/ d/switch/ cpe:/h:hp:procurve_switch_$1/ cpe:/o:hp:procurve_switch_software:$2/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r.*Procurve Wireless Access Point (\\d+)\\r\\n|s p/HP ProCurve Access Point $1 WAP telnetd/ d/WAP/ cpe:/h:hp:procurve_access_point_$1/a\nmatch telnet m|^Check Point FireWall-1 Client Authentication Server running on [-.\\w]+\\r\\n\\r\\xff\\xfb\\x01\\xff\\xfe\\x01\\xff\\xfb\\x03User: | p/Check Point FireWall-1 Client Authentication Server/ cpe:/a:checkpoint:firewall-1/\n# Enterasys XP-8600 running E9.0.5.0\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x05\\xff\\xfd!| p/Enterasys XSR Security Router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nUsername:| p/Enterasys C2H124-48 switch telnetd/ d/switch/ cpe:/h:enterasys:c2h124-48/\n# Windows 2000 telnetd\nmatch telnet m|^\\xff\\xfd%\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfd\\x1f\\xff\\xfd\\0\\xff\\xfb\\0$| p/Microsoft Windows 2000 telnetd/ o/Windows/ cpe:/o:microsoft:windows_2000/a\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd'\\xff\\xfd\\x18\\xff\\xfb\\0\\xff\\xfd\\0\\xff\\xfb\\x01\\xff\\xfe\\x01GUI START\\n| p/Microsoft Windows 2000 telnetd/ o/Windows/ cpe:/o:microsoft:windows_2000/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd'\\xff\\xfd\\x1f\\xff\\xfd\\0\\xff\\xfb\\0Welcome to Microsoft Telnet Service \\r\\n| p/Microsoft Windows 2000 telnetd/ o/Windows/ cpe:/o:microsoft:windows_2000/a\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfd\\x1f\\xff\\xfd\\0\\xff\\xfb\\0Microsoft \\(R\\) Windows (NT |)\\(TM\\) Version (\\d[-.\\w]+) \\(Build (\\d+)\\)\\r\\nWelcome to Microsoft Telnet Service \\r\\nTelnet Server Build (\\d[-.\\w]+)\\n\\rlogin: = p/Microsoft Windows $1telnetd/ v/$4/ i/OS version $2 build $3/ o/Windows/ cpe:/o:microsoft:windows/a\n# Windows XP telnetd\nmatch telnet m|^\\xff\\xfd%\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd'\\xff\\xfd\\x1f\\xff\\xfd\\0\\xff\\xfb\\0| p/Microsoft Windows XP telnetd/ o/Windows XP/ cpe:/o:microsoft:windows_xp/\nmatch telnet m|^\\r\\nNo more connections are allowed to telnet server\\. Please try again later\\.\\0| p/Microsoft Windows XP telnetd/ i/no more connections allowed/ o/Windows XP/ cpe:/o:microsoft:windows_xp/\n# IRIX 6.5.18f telnetd\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd#\\xff\\xfd\\$| p/IRIX telnetd/ v/6.X/ o/IRIX/ cpe:/o:sgi:irix/a\n# OS 400 V4R4M0\n# OS/400 V5R1M0\nmatch telnet m|^\\xff\\xfd'\\xff\\xfd\\x18$| p|IBM OS/400 telnetd| o|OS/400| cpe:/o:ibm:os_400/a\n# JetDirect Model: J4169A Firmware: L.21.11\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\x07HP JetDirect\\r\\nPassword is not set\\r\\n| p/HP JetDirect printer telnetd/ i/No password/ d/printer/\n# HP Jetdirect telnet with password protection\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\x07HP JetDirect\\r\\n\\r\\nEnter username: | p/HP JetDirect printer telnetd/ d/printer/\n# HP MPE/iX 5.5 on HP 3000 telnet service\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfd!| p|HP MPE/iX telnetd|\n# Brother 1870N Printer\nmatch telnet m|^\\x1b\\[2J\\x1b\\[1;1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03| p|Brother/HP printer telnetd| d/printer/\n# AIX 4.3.3.0\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\n\\nIQinVision IQeye3 Version ([vV].*)\\n\\r\\nType HELP| p/IQinVision IQeye3 telnetd/ v/version $1/ d/webcam/\nmatch telnet m|^\\xff\\xfe%\\xff\\xfd\\x18$| p/AIX telnetd/ o/AIX/ cpe:/o:ibm:aix/a\nmatch telnet m|^\\r\\nEfficient ([-.\\w ]+) Router \\(([-.\\d/]+)\\) v(\\d[-.\\w]+) Ready\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfe\\x01Login: | p/Efficient router telnetd/ v/$3/ i/Model $1 - $2/ d/router/\n# http://mldonkey.berlios.de/\n# mldonkey-2.5-3 telnet port\nmatch telnet m|^\\xff\\xfd\\x1f\\n\\n\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\n\\n                         Welcome to MLdonkey          \\n| p/MLDonkey multi-network P2P admin port/\nmatch telnet m|^\\r\\nRaptor Firewall Secure Gateway\\.\\r\\n| p/Symantec Raptor firewall secure gateway telnetd/ cpe:/a:symantec:raptor_firewall/\nmatch telnet m|^\\r\\nSynchronet BBS for Win32  Version (\\d[-.\\w]+)\\r\\n| p/Synchronet BBS/ v/$1/ o/Windows/ cpe:/a:rob_swindell:synchronet:$1/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\r\\nSynchronet BBS for (\\w+)  Version (\\d[-.\\w]+)\\r\\n| p/Synchronet BBS/ v/$2/ o/$1/ cpe:/a:rob_swindell:synchronet:$2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nlogin: $| p/Orinoco WAP telnetd/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[1;1H\\x1b\\[2K\\x1b\\[2;1H\\x1b\\[2K\\x1b\\[3;1H\\x1b.*Nortel Networks.*BayStack ([-.\\w]+).*Versions: ([: \\w.]+)|s p/Nortel Networks telnetd/ i/Baystack $1; Versions: $2/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[1;1H\\x1b\\[2K\\x1b\\[2;1H\\x1b\\[2K\\x1b\\[3;1H\\x1b.*BayStack ([-\\w_.]+) .*HW:(\\w+)  FW:V([\\d.]+) SW:V([\\d.]+)\\x1b|s p/BayStack switch $1 telnetd/ v/HW:$2 FW:$3 SW:$4/ d/switch/\n# ASCII art banner that says \"BAYSTACK\"\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[58259456;1H\\x1b\\[0m\\x1b\\[1;1H \\*\\*\\*\\*\\*      \\*\\*\\*     \\*     \\*    \\*\\*\\*\\*\\*   \\*\\*\\*\\*\\*\\*\\*\\*\\*     \\*\\*\\*       \\*\\*\\*\\*\\*  \\*      \\*\\x1b\\[2;1H| p/BayStack switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\n\\r\\n.*Bay Networks (Bay[-.: \\w]+)\\n\\r|s p/Bay Networks telnetd/ i/$1/\nmatch telnet m|^Check Point FireWall-1 authenticated Telnet server running on| p/Check Point Firewall-1 telnetd/ cpe:/a:checkpoint:firewall-1/\nmatch telnet m|^\\r\\nSpeedStream ([^(\\r\\n]+) \\(.*\\) v(\\S+) Ready\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd| p/SpeedStream $1/ v/$2/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\rType \\\"\\?\\\" at the command prompt for a list of commands\\.\\n\\r.*Command-> |s p/SpeedStream 5660 router telnetd/ d/router/\n# Alcatel SpeedTouch 510 ADSL router - Admin Interface, version 4.0.2.0.0\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03Username : | p|Alcatel/Thomson SpeedTouch DSL router admin interface| d/broadband router/\nmatch telnet m|^\\r\\nRaptor Firewall Secure Gateway\\.\\r\\n\\r\\nAccess denied\\.\\r\\n| p/Symantec Raptor Firewall Secure Gateway telnetd/ i/Access Denied/ cpe:/a:symantec:raptor_firewall/\nmatch telnet m|^\\*\\*\\*\\*\\*\\*\\* System Image Boot \\*\\*\\*\\*\\*\\*\\*\\n\\r\\n\\rVina Technologies (.*) \\((\\d[-.\\w]+ build \\d+)\\)\\n\\r| p/Vina Technologies $1 telnetd/ v/$2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[0m\\x1b\\[2J\\x1b\\[01;00H\\r\\0Gigalink ([-+ \\w]+)| p/Gigalink telnetd/ i/on $1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb.*D-Link.*Telnet Console.*Model\\s+: ([-+\\w]+)|s p/D-Link telnetd/ i/on $1/\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[0m\\x1b\\[2J\\x1b\\[0m\\x1b\\[9;20HCopyright\\(C\\) 1995-99 D-Link Systems Inc\\.\\x1b\\[13;30HUser Name\\x1b\\[14;30HPassword\\x1b\\[23;10HMAC Address:\\x1b\\[8;29H([-.\\w]+) Console Program\\x1b\\[13;41H| p/D-Link switch telnetd/ i/D-Link $1/\nmatch telnet m|^\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfb\\x01\\xff\\xfb\\x03Ambit Cable Router\\r\\n\\r\\nLogin: | p/Ambit Cable Router telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfc\\x01\\r\\nHP JetDirect\\r\\n\\r\\nPlease type \\\"?\\\" for HELP, or \\\"/\\\" for current settings\\r\\n> $| p/HP JetDirect telnetd/ d/printer/\nmatch telnet m|^\\n\\rVina Technologies (.*) \\((\\d[-.\\w]+ build \\d+)\\)| p/Vina Technologies $1 telnetd/ v/$2/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfb\\x01\\x1b\\[0m\\x1b\\[1;1H\\x1b\\[2J\\rD\\r           \\n\\r             (DES-.*) Command Line Interface\\n\\r\\n| p/D-Link $1 telnetd/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n<< Command Line Interface V ([\\w._-]+) >>\\r\\n\\r\\nUser: | p/D-Link DVG-series VoIP gateway telnetd/ v/$1/ d/VoIP adapter/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[0m\\x1b\\[2J\\x1b\\[0m\\x1b\\[2J\\x1b\\[21;1H\\x1b\\[0m\\*+\\x1b\\[22;1H\\x1b\\[0mMessage Area:\\x1b\\[24;1H\\x1b\\[7mCTRL\\+R = Refresh +\\x1b\\[9;16H\\x1b\\[0mDES-?([\\w._-]+) Stackable Fast Ethernet Switch Console Management\\x1b| p/D-Link DES-$1 switch telnetd/ d/switch/ cpe:/h:dlink:des-$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[0m\\x1b\\[2J\\x1b\\[0m\\x1b\\[2J\\x1b\\[21;1H\\x1b\\[0m\\*+\\x1b\\[22;1H\\x1b\\[0mMessage Area:\\x1b\\[24;1H\\x1b\\[7mCTRL\\+R = Refresh +\\x1b\\[9;16H\\x1b\\[0m(SSR[\\w._-]+) Stackable Fast Ethernet Switch Console Management| p/Amer.com $1 switch telnetd/ d/switch/\n\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfc\\x1f\\n\\r\\n\\rUser Access Verification\\n\\r\\n\\r\\n\\r\\n\\r\\n\\rShell version (\\d\\S+).*Maipu Communication Technology Co\\.| p/Maipu Router/ i/shell v$1/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\x1b.*Intel Corporation, ([-+. \\w()]+)|s p/Intel telnetd/ i/on $1/\nmatch telnet m|^\\r\\nFlowPoint/(.*) Ready\\r\\n.*\\xff\\xfb\\x01\\xff\\xfb| p/Flowpoint telnet/ i/on $1/\nmatch telnet m|^Welcome to Tenor Multipath Switch Telnet Server.*Type: (\\S+)|s p/Tenor telnetd/ v/$1/ i/on Multipath Switch/\nmatch telnet m|^Welcome to Tenor Multipath Switch Alarm Server\\r\\nSerial #: ([\\w._-]+) \\x7c Name: ([\\w._-]+) \\x7c Type: ([\\w._-]+) \\x7c UTC: ([+-]\\d\\d:\\d\\d)\\r\\nConnected from IpAddr/Port# [\\d.]+/\\d+ to Port# \\d+\\r\\n\\r\\nAlarm> Password: | p/Quintum Tenor $3 VoIP gateway alarm telnetd/ i/serial number: $1; time zone: $4/ h/$2/ cpe:/h:quintum:tenor_$3/\nmatch telnet m|^Welcome to Tenor Multipath Switch Call Event Server\\r\\nSerial #: ([\\w._-]+) \\x7c Name: ([\\w._-]+) \\x7c Type: ([\\w._-]+) \\x7c UTC: ([+-]\\d\\d:\\d\\d)\\r\\nConnected from IpAddr/Port# [\\d.]+/\\d+ to Port# \\d+\\r\\n\\r\\nEVSR> Password: | p/Quintum Tenor $3 VoIP gateway call event telnetd/ i/serial number: $1; time zone: $4/ h/$2/ cpe:/h:quintum:tenor_$3/\nmatch telnet m|^Tenor Multipath Switch CDR Server\\r\\nConnected from IpAddr/Port# [\\d.]+/\\d+ to Port# \\d+\\r\\nPassword: | p/Quintum Tenor A800 VoIP gateway CDR telnetd/ cpe:/h:quintum:tenor_a800/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\x0d\\x0a\\x0d\\x0aCisco\\x20Systems.*Console/Telnet Access of the ([-. \\w]+) for Configuration Purposes|s p/Cisco $1 telnetd/ cpe:/a:cisco:telnet/\n# Cisco 350 Series Wireless AP 11.05\nmatch telnet m|^\\xff\\xfb\\x01\\n\\r\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08                           \\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08| p/Cisco WAP telnetd/ d/WAP/ cpe:/a:cisco:telnet/\n# Cisco 678 DSL router\nmatch telnet m|^\\r\\n\\r\\nUser Access Verification\\r\\nPassword:\\xff\\xfb\\x01$| p/Cisco DSL router telnetd/ d/broadband router/ cpe:/a:cisco:telnet/\n# Cisco 3640, 12406/PRP\nmatch telnet m|^\\r\\n\\r\\nUser Access Verification\\r\\n\\r\\nUsername: | p/Cisco router telnetd/ d/router/ cpe:/a:cisco:telnet/\n#  Cisco 2900 Catalyst switch, IOS 12.0(5)XU\n# Cisco 3600 router running IOS 12.X\n# Cisco 2600 IOS 12.0\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f.*User Access Verification\\r\\n\\r\\n(?:Username|Password): $=s p/Cisco IOS telnetd/ d/switch/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\n# Cisco Pix 501 PIX IOS 6.3(1) telnet\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x01.*\\r\\nUser Access Verification\\r\\n\\r\\nPassword: |s p/Cisco telnetd/ i/IOS 6.X/ d/firewall/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x01\\r\\r\\nUser Access Verification\\r\\r\\n\\r\\r\\nUsername:| p/Cisco PIX 500 series telnetd/ d/firewall/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\n# Cisco Catalyst 6509 - WS-C6509 Software, Version NmpSW: 5.5(1)\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\r\\n\\r\\nCisco Systems Console\\r\\n| p/Cisco Catalyst switch telnetd/ d/switch/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\r\\nPassword required, but none set\\r\\n| p/Cisco router telnetd/ i/password required but not set/ d/router/ cpe:/a:cisco:telnet/\nmatch telnet m|^Access not permitted\\. Closing connection\\.\\.\\.\\n$|s p/Cisco Catalyst switch telnetd/ i/access denied/ d/switch/ cpe:/a:cisco:telnet/\n# OpenBSD 2.3\n# FreeBSD 5.1\nmatch telnet m|^\\xff\\xfd%$| p/BSD-derived telnetd/\n# Solaris 9\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfd#\\xff\\xfd'\\xff\\xfd\\$$| p/Sun Solaris telnetd/ o/Solaris/ cpe:/o:sun:sunos/a\n# Redhat Linux 7.3 telnet\nmatch telnet m|\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd#\\xff\\xfd'$| p/Linux telnetd/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfb\\x01\\n\\rUser Name : $| p/APC network management card telnetd/ d/power-device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\n\\rUser Name : | p/APC telnetd/ i|Power/UPS device| d/power-device/\n# G-Net BB0060 ADSL Modem\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r                         \\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\n\\r.*GlobespanVirata Inc\\., Software Release ([-.\\w]+)\\n\\r|s p/GlobespanVirata telnetd/ v/$1/ d/broadband router/\n# HP-UX B.11.00 A\nmatch telnet m|^\\xff\\xfd\\$$| p/HP-UX telnetd/ o/HP-UX/ cpe:/o:hp:hp-ux/a\n# Cayman-DSL Model 3220-H, DMT-ADSL (Alcatel) OS version 6.3.0\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe\\x01\\n\\rlogin: $| p/Cayman-DSL router telnetd/ d/broadband router/\n# Blue Coat Port 80 Security Appliance  Model: Blue Coat SG400  Software Version: SGOS 2.1.6044 Software Release id: 19480 Service Pack 4\n# Maybe I should call this SGOS telnetd instead\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x1f\\r\\n\\r\\nUsername: $| p/Blue Coat telnetd/ o/SGOS/ cpe:/o:bluecoat:sgos/a\nmatch telnet m|^\\xff\\xfb\\x01@ Userid: | p/Shiva LanRover telnetd/\n# Netscreen ScreenOS 4.0.1r1.0 telnetd on a netscreen 5XT running firmware 4.0.1r1.0\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfb\\x01(?:\\xff\\xfe\\x01)?(?:\\xff.\\x03)?[\\w ]*Remote Management Console\\r\\n(?:\\r\\n)?login: $| p/Netscreen ScreenOS telnetd/ d/firewall/\n# Note that openwall telnetd is derived from OpenBSD telnetd\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd#\\xff\\xfd'\\xff\\xfd\\$$| p|Openwall GNU/*/Linux telnetd| o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfc\\x01\\r\\nHP JetDirect\\r\\n\\r\\nPlease type \\\"\\?\\\" for HELP, or \\\"/\\\" for current settings\\r\\n> $| p/HP Jet Direct printer telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nAXIS (\\S+) TELNET| p/AXIS Webcam/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\r\\nTelebit\\'s NetBlazer Version (\\S+)\\r\\n| p/Telebit NetBlazer/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03.*?FORE\\x20Systems,\\x20FORE\\x20ES-2810.*?Version (\\d[\\d\\.-]+)| p/FORE Systems ES-2810/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01.*ForeRunner ES-3810.*Enter Username: | p/FORE Systems ES-3810/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nCopyright \\(C\\) 1999 by  Extreme Networks\\r\\r\\n| p/Extreme Networks telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03.*?ES-1000\\x20Fast\\x20Ethernet\\x20Switch\\x20Console| p/Marconi ES-1000/\nmatch telnet m|^\\xff\\xfb\\x01login:\\x20$| p/telnet/ i/generic/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05Welcome to ([-\\w_]+) Debug Terminal - \\d*\\n\\r\\n\\r\\n\\rlogin:| p/HP StorageWorks SSL1016 tape autoloader telnetd/ i/Name: $1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\r\\n\\r\\nWelcome to Print Server\\r\\n\\r\\nPS>| p/Generic print server telnetd/ d/print server/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\n\\*+\\r\\n\\*  Welcome to Print Server  \\*\\r\\n\\*     Telnet Console +\\*\\r\\n\\*+\\r\\n\\r\\nServer Name    :  ([-\\w_.]+)\\0\\0\\0\\0\\0\\0\\0\\0\\r\\nServer Model   :  USB Print Server\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\r\\nF/W Version    :  ([\\d.]+)  \\0\\0\\0\\0\\r\\nMAC Address    :  ([\\w ]+)\\r\\nUptime         :  ([^\\r\\n]+)\\r\\n| p/TRENDnet TE4100-PS1U telnetd/ v/$2/ i/MAC: $3; Uptime $4/ d/print server/ h/$1/ cpe:/h:trendnet:te4100-ps1u/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\*+\\r\\n\\*  Welcome to TRENDnet Print Server  \\*\\r\\n\\*          Telnet Console            \\*\\r\\n\\*+\\r\\n\\r\\nServer Name    : *([\\w._-]+) *\\0\\0\\0\\0\\0\\0\\r\\nServer Model   : *([\\w._-]+) *\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\r\\nF/W Version    : *([\\w._-]+) *\\0\\0\\0\\0\\r\\nMAC Address    : *([0-9A-F ]+) *\\r\\nUptime         : *([^\\r\\n]*)\\r\\n\\nPlease Enter Password: | p/TRENDnet $2 print server telnetd/ v/$3/ i/MAC: $4; Uptime $5/ d/print server/ h/$1/ cpe:/h:trendnet:$2/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\n\\*+\\r\\n\\*  Welcome to Print Server  \\*\\r\\n\\*     Telnet Console        \\*\\r\\n\\*+\\r\\n\\r\\nServer Name    :  ([-\\w_.]+)\\r\\nServer Model   :  Pocket Size Print Server\\0\\0\\0\\0\\0\\0\\0\\0\\r\\nF/W Version    :  ([\\d.]+)  \\0\\0\\0\\0\\r\\nMAC Address    :  ([\\w ]+)\\r\\nUptime         :  ([^\\r\\n]+)\\r\\n\\nPlease Enter Password:| p/Lexmark W810 telnetd/ v/$2/ i/Name $1; MAC $3; Uptime $4/ d/printer/ cpe:/h:lexmark:w810/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\n\\*+\\r\\n\\*  Welcome to Print Server  \\*\\r\\n\\*     Telnet Console        \\*\\r\\n\\*+\\r\\n\\r\\nServer Name    :  ([-\\w_.]+)\\0*\\r\\nServer Model   :  3Port Print Server\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\r\\nF/W Version    :  ([-\\w_.]+)  \\0*\\r\\nMAC Address    :  ([\\w ]+)\\r\\nUptime         :  ([^\\r\\n]+)\\r\\n\\nPlease Enter Password: | p/3Port print server telnetd/ v/$2/ i/MAC $3; Uptime $4/ d/print server/ h/$1/\nmatch telnet m|^\\x1b\\[0m\\x1b\\[2J\\x1b\\[01;28HCONEXANT SYSTEMS, INC\\.\\x1b\\[02;19H ACCESS RUNNER ADSL CONSOLE PORT\\x1b\\[24;01H>>>\\x1b\\[24;01HLOGON PASSWORD>\\x1b\\[02;53H3\\.\\d+\\x1b\\[24;17H\\x1b\\[24;17H\\x1b\\[24;17H\\x1b\\[24;17H| p/Conexant Access Runner adsl router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\r\\nWelcome on (.*)\\r\\n\\r\\n\\r\\nUsername: | p/Cisco 2621 router telnetd/ i/Banner: $1/ d/router/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/h:cisco:router_2621/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x18\\nTelnet Service on the PrintServer\\n\\n\\rPassword: | p|Hawking/TRENDnet Print Server telnetd| d/print server/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n Welcome to OpenVMS \\(TM\\) Alpha Operating System, Version V([\\d.]+)    \\r\\n\\r\\n\\rUsername: | p/OpenVMS telnetd/ i/OpenVMS $1/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfd \\xff\\xfd!\\x07\\r\\n\\r\\n Welcome to OpenVMS \\(TM\\) Alpha Operating System, Version V([-\\w_.]+)  \\r\\n\\r\\n\\rUsername: | p/OpenVMS telnetd/ i/OpenVMS $1/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch telnet m|\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n Welcome to OpenVMS Alpha OS, Version V([\\d+.]+)| p/OpenVMS telnetd/ i/OpenVMS $1/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\x1b\\[0;37;40m\\x1b\\[2J\\x1b\\[0;37;40m\\x1b\\[1m\\x1b\\[5;27HVertical Horizon Stack Manager\\x1b\\[0;37;40m\\x1b\\[1m\\x1b\\[10;26HEnterasys Networks, Incorporated| p/Enterasys Vertical Horizon Manager/ d/switch/\nmatch telnet m|^\\xff\\xfb\\r\\nRemotelyAnywhere Telnet Server v([\\d.]+)\\r\\n.*\\r\\n\\r\\n([-\\w_. ]+) login\\r\\nuser name: | p/RemotelyAnywhere telnetd/ v/$1/ i/Name $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfd\\x1f\\xff\\xfd\\x18([^\\r\\n]+)\\r\\nRemotelyAnywhere Telnet Server ([\\d.]+)\\r\\n.*\\r\\n\\r\\n([-\\w_. ]+) login\\r\\nuser name: |s p/RemotelyAnywhere telnetd/ v/$2/ i/$1; Name $3/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\r\\nVxWorks login: \\xff\\xfb\\x01$| p/VxWorks telnetd/ o/VxWorks/ cpe:/o:windriver:vxworks/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\r\\n\\r\\nSelect Access Level\\r\\n===================\\r\\n1 - Read-Only\\r\\n2 - Installer\\r\\n3 - Administrator\\r\\n13008 >>> | p/BreezeCOM telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\nExterior router [-\\w_.]+\\r\\nType: Cisco 2651\\r\\nModule: E3/T3 interface\\r\\n\\r\\n| p/Cisco 2651 router telnetd/ d/router/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/h:cisco:router_2621/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n[-\\w_.]+>%| p/Cisco router telnetd/ d/router/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\nmatch telnet m=^\\xff\\xfb\\x01\\r\\n\\r\\n#\\r\\n\\| ELSA, MicroLink Cable\\r\\n\\| Ver\\. ([\\d.]+) / [\\d.]+ \\d\\d:\\d\\d .*\\r\\n\\| SN\\.  \\d+\\r\\n\\| Copyright \\(c\\) ELSA AG, Aachen \\(Germany\\)\\r\\n\\r\\ncm2, Connection No\\.: \\d+ \\(LAN\\) \\(read-only connection\\)\\r\\n\\r\\nPassword:= p/ELSA Microlink Cable modem/ v/$1/ i/read-only connection/ d/router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\npassword: $| p/Cisco LocalDirector telnetd/ d/load balancer/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\0\\xff\\xfd\\xfb\\xff\\xfd\\x03\\x1b\\[H\\x1b\\[2JYou have connected to a FirstClass System\\. Please login\\.\\.\\.\\r\\nUserID: | p/FirstClass telnetd/ cpe:/a:opentext:firstclass/\nmatch telnet m|^\\xff\\xfd\\x1f\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfb\\x03\\nWelcome to GoodTech Telnet Server for Windows 95/98 \\(V([\\d.]+)\\) \\(Evaluation Copy\\)\\n\\r\\n\\(C\\) Copyright \\d+-\\d+ GoodTech Systems, Inc\\.\\n\\r\\n\\nLogin username: | p/GoodTech telnetd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^Please wait \\.\\.\\. Connecting \\.\\.\\.| p/Java Object Oriented Telnet Talker/\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x18Georgia SoftWorks Telnet Server for Windows NT/2000/XP/2003 Ver\\. ([\\d.]+)\\n\\rEvaluation copy, \\d+ users enabled\\. Expiration date is \\d+/\\d+/\\d+\\.\\n\\r\\n\\rPlease wait\\.\\.\\.\\n\\rUser \\d+ of \\d+\\n\\r\\n\\r\\n\\rlogin:| p/Georgia SoftWorks telnetd/ v/$1/ i/Evaluation copy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x18Georgia SoftWorks Telnet Server for Windows NT/2000/XP Version ([\\d.]+)\\n\\rYour evaluation copy of this product expired, disconnecting\\.\\.\\.| p/Georgia SoftWorks telnetd/ v/$1/ i/Expired trial/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x18Georgia SoftWorks Telnet Server for Windows NT/2000/XP/2003 Ver\\. ([\\d.]+)\\n\\rRegistered copy, \\d+ users enabled\\.\\n\\r\\n\\rPlease wait\\.\\.\\.\\n\\rUser \\d+ of \\d+\\n\\r\\n\\r\\n\\rlogin:| p/Georgia SoftWorks telnetd/ v/$1/ i/Registered version/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x18Georgia SoftWorks Telnet Server for Windows NT/2000/XP/2003/Vista Ver\\. ([-\\w_.]+)\\n\\r| p/Georgia SoftWorks telnetd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x18Georgia SoftWorks Telnet Server for Windows NT/2000 Version ([\\w._-]+)\\n\\rRegistered copy| p/Georgia SoftWorks telnetd/ v/$1/ i/Registered version/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\t\\tWelcome to X330WAN-2DS1\\r\\n\\t\\tSW version ([\\d.]+)\\r\\n\\r\\n\\r\\nLogin: | p/Avaya X330WAN-2DS1 telnetd/ v/$1/ d/router/ cpe:/h:avaya:x330wan-2ds1/a\nmatch telnet m|^\\x1b\\[0m\\x1b\\[2J\\x1b\\[01;28HCONEXANT SYSTEMS, INC\\.\\x1b\\[02;14HATU-R ACCESS RUNNER ADSL TERMINAL\\x1b\\[24;01HENTER CHOICE-->| p/Conexant ATU-R ADSL router telnetd/ d/router/\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n#\\r\\n\\| LANCOM L-54g Wireless\\r\\n\\|= p/LANCOM L-54g Wireless router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfc\\x01\\r\\nHP JetDirect\\r\\n\\r\\nPassword: | p/HP JetDirect telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\r\\n\\r\\nCisco Systems, Inc\\. Console\\r\\n\\r\\n\\r\\n\\r\\n\\r\\nEnter password: | p/Cisco Catalyst switch telnetd/ d/switch/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\r\\n\\r\\nCisco Systems, Inc\\. Console\\r\\n\\r\\n\\r\\n\\r\\r\\n\\r\\nUsername: | p/Cisco Catalyst switch telnetd/ d/switch/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\nComOS - Livingston PortMaster\\r\\n\\r\\nlogin: | p/Livingston Portmaster telnetd/ d/telecom-misc/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r +\\*+\\n\\r +Welcome to DSLink 200 U/E\\n\\r +\\*+\\n\\r\\n\\rGlobespanVirata Inc\\., Software Release VIK-([\\w.]+)\\n\\r| p/DSLink 200 adsl modem telnetd/ v/Software version $1/ d/router/\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfd\\0\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\0This copy of the Ataman TCP Remote Logon Services is registered as licensed to:\\r\\n\\t(.*)\\r\\n\\r\\nAccount Name: | p/Ataman TCP Remote Logon Service telnetd/ i/Registered to $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfd\\x1f\\xff\\xfd\\x18Windows NT Workstation ([\\d.]+) \\(build \\d+\\) Service Pack (\\d+)\\r\\nRemotelyAnywhere Telnet Server ([\\d.]+)\\r\\n| p/RemotelyAnywhere telnetd/ v/$3/ o/Windows NT/ cpe:/o:microsoft:windows_nt:$1:sp$2/\nmatch telnet m|^\\r\\nSorry, Access to Telnet is Denied\\.\\r\\n$| p/Motorola VT1000v VOIP Adapter telnetd/ i/Access denied/ d/VoIP adapter/ cpe:/h:motorola:vt1000v/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n\\[ORiNOCO-AP-(\\d+)[-\\d]*\\]> Please enter password: | p/Orinoco AP-$1 telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\xfd\\xff\\xfb\\x01\\n\\r\\n\\rFabric OS \\(tm\\)  Release v([\\w.]+)\\n\\r\\n\\r| p/Brocade SilkWorm switch telnetd/ i/Fabric OS $1/ d/switch/ cpe:/o:brocade:fabric_os:$1/\nmatch telnet m|^\\xff\\xfb\\x05\\xff\\xfd\\x1f\\xff\\xfd\\x01\\xff\\xfb\\x03Nortel Networks CVX Access Switch\\r\\nlogin: | p/Nortel CVS Access switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\n\\r-> \\x08\\x08\\x08\\x08        \\*\\*\\*  EPSON Network Print Server \\(([^)]+)\\)  \\*\\*\\*\\n\\r\\n\\r\\x08\\x08\\x08\\x08        \\n\\rPassword: | p/EPSON Network print server telnetd/ v/$1/ d/print server/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\n\\nLantronix MSS100 Version V([\\d.]+)/\\d+\\(\\d+\\)\\n\\r\\nType HELP at the 'Local_2> ' prompt for assistance\\.\\n\\r\\n\\r\\n\\nUsername> | p/Lantronix MSS100 serial interface telnetd/ v/$1/ d/specialized/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\0\\r\\0\\r\\n\\x07# \\0| p/Lantronix MSS100 serial interface telnetd/ d/specialized/\nmatch telnet m|^\\xff\\xfb\\x01OPTIBASE MGW5100 COMMAND LINE INTERFACE\\r\\n| p/Optibase MGW5100 TV streaming device telnetd/ d/media device/ o/VxWorks/ cpe:/o:windriver:vxworks/a\nmatch telnet m|^\\r\\n\\0Videolan Server Administration System\\0\\r\\n\\r\\n\\0\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe\\\"Login: \\0| p/VideoLAN Server telnetd/ d/media device/\nmatch telnet m=^\\xff\\xfb\\x01\\r\\n\\r\\n#\\r\\n\\| ELSA LANCOM DSL/I-10 Office\\r\\n\\| Ver\\. ([\\d.]+) / [\\d.]+\\r\\n\\| SN\\.  (\\d+)\\r\\n= p/Elsa DSL I-10 router telnetd/ v/$1/ i/SN $2/ d/router/\nmatch telnet m|^PC Telnetd ([\\d.]+)\\r\\n\\r\\nlogin: | p/PC Telnetd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\r\\n>>> DECT@NET D&T Agent <<<\\r\\n\\r\\nlocal> | p/Philips DECT D&T Agent telnetd/\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[H\\x1b\\[2J\\x1b\\[0m\\x1b\\[0m\\x1b\\[0m\\x1b\\[H\\x1b\\[2J\\x1b\\[0m \\+-+\\+\\r\\n \\| NuSight GEMS Console +Version v([\\d.]+) \\|\\r\\n \\| Copyright \\(c\\) 1998-2001, NPI +\\|\\r\\n= p/NPI Keystone switch telnetd/ v/$1/ d/switch/\nmatch telnet m|^rsconfig: port rose not active\\n\\xff\\xfd\\\"\\r\\nLinuxNode v([\\d.]+) \\(([-\\w_.]+)\\)\\r\\n\\r\\nlogin: | p/LinuxNode telnetd/ v/$1/ o/Linux/ h/$2/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\\"\\r\\nLinuxNode v([\\d.]+) \\(([-\\w_.]+)\\)\\r\\n\\r\\nlogin: | p/LinuxNode telnetd/ v/$1/ o/Linux/ h/$2/ cpe:/o:linux:linux_kernel/a\n\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r\\nBusyBox v([-\\w.]+) \\(.*\\) Built-in shell \\(ash\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\n.*root@OpenWrt:/# |s p/BusyBox telnetd/ v/$1/ i/open; OpenWrt/ o/Linux/ cpe:/a:busybox:busybox:$1/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r\\nBusyBox v([-\\w_.]+) \\([^)]+\\) Built-in shell \\(ash\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\n# | p/BusyBox telnetd/ v/$1/ i/MacSense HomePod Wireless MP3 Player/ d/media device/ cpe:/a:busybox:busybox:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nBusyBox v([-\\w_.]+) \\([^)]+\\) Built-in shell \\(ash\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\n# | p/BusyBox telnetd/ v/$1/ i/Netgear DG834G/ d/router/ cpe:/a:busybox:busybox:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nBusyBox v([-\\w_.]+) \\([^)]+\\) Built-in shell \\(ash\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\n/bin # | p/BusyBox telnetd/ v/$1/ i/Syabas Popcorn Hour media player telnetd/ d/media device/ cpe:/a:busybox:busybox:$1/ cpe:/h:syabas:popcorn_hour/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r\\nBusyBox v([-\\w_.]+) \\([^)]+\\) Built-in shell \\(ash\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\nroot@H:/# $| p/BusyBox telnetd/ v/$1/ i/Accton VM1188T VoIP phone/ d/VoIP phone/ cpe:/a:busybox:busybox:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nBusyBox v([-\\w_.]+) \\([^)]+\\) built-in shell \\(ash\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\nermittle die aktuelle TTY\\r\\ntty is \\\"/dev/pts/0\\\"\\r\\nConsole Ausgaben auf dieses Terminal umgelenkt\\r\\n# | p/BusyBox telnetd/ v/$1/ i/AVM FRITZ!Box 7150 WAP/ d/WAP/ cpe:/a:busybox:busybox:$1/\n\n# Fairly common so relying on release date:\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nBusyBox v([-\\w_.]+) \\(2006\\.02\\.15-21:18\\+0000\\) Built-in shell \\(msh\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\n# | p/BusyBox telnetd/ v/$1/ i/DiskEdge storage telnet config/ d/storage-misc/ cpe:/a:busybox:busybox:$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\nRouter>| p/Cisco 806 router telnetd/ d/router/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/h:cisco:router_806/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\n\\r\\nUser Access Verification\\r\\n\\r\\nPassword: | p/Cisco 2514 router telnetd/ d/router/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/h:cisco:router_2514/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x01.*\\r\\n\\r\\nUser Access Verification\\r\\n\\r\\n\\xff\\xfd\\x18Username: |s p/Cisco ASA firewall telnetd/ d/firewall/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfe\\\"\\xff\\xfc\\\"\\x1b\\[2J\\x1b\\[3;0H\\x1b\\[0mLogin Menu \\x1b\\[m\\x1b\\[4;0H\\x1b\\[0m_+\\x1b\\[m\\x1b\\[1;0H\\x1b\\[0mMCT-2114 Version ([\\d.]+) \\x1b\\[m\\x1b\\[20;10H\\x1b\\[0m| p/MCT-2114 switch telnetd/ v/$1/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nAmiNET\\d+ login: | p/Amino AmiNET set-top box telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nMSDOS [\\d.]+ Windows [\\d.]+ \\([\\d.]+\\) \\(ttyp\\d\\)\\r\\n\\r\\nlogin: | p/Windows for Workgroups telnetd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\x07HP (\\w+)  Ethernet SNMP Module\\r\\n ROM B\\.([\\d.]+)\\r\\n EEPROM A\\.([\\d.]+)\\r\\n HW B\\.([\\d.]+)\\r\\n\\r\\nEnter password: | p/HP AdvanceStack $1 Ethernet hub SNMP Module telnetd/ i/ROM $2; EEPROM $3; HW $4/ d/hub/\nmatch telnet m|^USR5450 Telnet server v([\\d.]+)\\n\\r\\nPassword : | p/USR5450 access point telnetd/ v/$1/ d/router/\nmatch telnet m|^\\xff\\xfb\\0\\xff\\xfd\\0\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\x1b\\[1}\\x1b\\[0;(?:1;)?37;40m\\x1b\\[2J\\x1b\\[1;1HLogin Name:  | p/HP Integrated Lights-Out remote configuration telnetd/ d/remote management/ cpe:/h:hp:integrated_lights-out/\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[m\\x1b\\[m\\x1b\\[m\\x1b\\[m\\x1b\\[m\\x1b\\[16;35H\\x1b\\[1;1H\\x1b\\[2J\\x1b\\[16;35H\\x1b\\[1;1HLogin Screen\\x1b\\[8;5HCopyright \\(c\\) \\d+-\\d+ Enterasys Networks, Inc\\.  All rights reserved\\x1b.*RoamAbout R2\\x1b|s p/Enterasys RoamAbout WAP router telnetd/ d/router/\nmatch telnet m|^Welcome to the OfficeConnect\\(TM\\) LAN modem Telnet Server\\n\\rConnected From IpAddr/Port# \\w+/\\d+ To Port# \\d+\\n\\r\\nLANmodem> Password: | p/3Com OfficeConnect LAN modem telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\n\\*+\\r\\n\\*     Welcome to Telnet Console     \\*\\r\\n\\*+\\r\\n\\r\\nServer Name      : [^\\0]+\\0\\0\\0\\0\\0\\0\\0\\0\\0\\r\\nModel +: DP-([\\d.]+)\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\r\\nFirmware Version : ([\\d.]+)  \\0\\0\\0\\0\\r\\nMAC Address      : ([\\w ]+)\\r\\nUp Time          : ([^\\r\\n]+)\\r\\n| p/D-Link DP-$1 router telnetd/ i/Firmware $2; MAC $3; Uptime $4/ d/router/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfb\\x01\\d\\d-\\w+-\\d+ \\d\\d:\\d\\d:\\d\\d %MSCM-I-NEWTERM: New TELNET connection from (?:[\\d.]+)\\r\\r\\nPassword:| p/Dell PowerConnect switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfb\\x01User Name:| p/Dell PowerConnect switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\n\\r\\n\\r             Copyright \\(C\\) \\d+ Multi-Tech Systems, Inc\\.,\\n\\r                      Multi-Tech Systems, Inc\\.,\\n\\r                   2205 Woodale Drive, Mounds View,\\n\\r                        Minnesota 55112, USA\\.\\n\\r\\n\\r                       MultiVOIP Version ([\\d.]+)\\n\\r| p/Multicom voip telnetd/ i/MultiVOIP $1/ d/VoIP adapter/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\r\\n\\r\\r\\n\\r           Welcome to the WRT54G Shell Box\\r\\n\\r\\r\\n\\rFirmware version: Wifi-box\\.net ([\\d.]+)\\.wfb \\d\\d/\\d\\d/\\d\\d\\r\\n| p/Linksys WRT54G with wifi-box.net firmware telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03EthernetBoard OkiLAN ([\\w._-]+) Ver 0([\\w._-]+) TELNET server\\.\\r\\0\\n\\r\\0\\nlogin: | p/OkiLAN $1 print server telnetd/ v/$2/ d/print server/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03                  OkiLAN ([\\w._-]+) Configuration Utility\\r\\n\\r\\n Type your password\\. Press Enter when finished\\.\\r\\n\\r\\n Password: | p/OkiLAN $1 print server telnetd/ d/print server/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\0\\n\\nLantronix ETS16 Version V([\\d.]+)/\\d+\\(\\d+\\)\\n\\r\\0\\nType HELP at the 'BRTR-ETS16>' prompt for assistance\\.\\n\\r\\0\\nUsername> | p/Lantronix ETS16 terminal server telnetd/ v/$1/ d/terminal server/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03TELNET session now in ESTABLISHED state\\r\\n\\r\\n(.*) login: | p/Allied Telesyn Rapier switch telnetd/ i/$1/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\r\\nTELNET session now in ESTABLISHED state\\r\\n\\r\\n([\\w._-]+) login: | p/Allied Telesis x900-series switch telnetd/ d/switch/ h/$1/ cpe:/h:alliedtelesyn:x900/\nmatch telnet m%^\\xff\\xfe\\x01\\r\\n\\r\\n\\+=+\\+\\r\\n\\| +\\[ ConnectUPS Web/SNMP Card Configuration Utility \\] +\\|\\r\\n\\+=+\\+\\r\\n\\r\\nEnter Password: % p|ConnectUPS Web/SNMP Card telnetd| d/power-device/\nmatch telnet m%^\\xff\\xfe\\x01\\r\\n\\r\\n\\+=+\\+\\r\\n\\| +\\[ ConnectUPS Web/SNMP Card Configuration Utility \\] +\\|\\r\\n\\+\\x08\\x7c +Firmware Revision V([\\w._-]+) +\\|\\r\\n\\+=+\\+\\r\\n\\r\\nEnter Password: % p|ConnectUPS Web/SNMP Card telnetd| v/$1/ d/power-device/\nmatch telnet m|^\\r\\nWelcome to slush\\.  \\(Version ([\\d.]+)\\)\\r\\n\\r\\n\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03([-\\w_. ]+) login: | p/slush telnetd/ v/$1/ i/$2/ o/TiniOS/ cpe:/o:systronix:tinios/\nmatch telnet m|^\\xff\\xfb\\x01\\n\\r\\n\\rWebRamp 410i    login: $| p/WebRamp 410i ISDN router telnetd/ d/router/\nmatch telnet m|^Please Wait\\.\\.\\.Connection Accepted \\(TelSrv ([\\d.]+)\\)\\r\\n\\r\\nUsername : | p/TelSrc telnetd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nINTERMEC 540\\+/542\\+ TELNET Print Server V([\\d.]+) .*\\r\\n\\r\\nINTERMEC 540\\+/542\\+ network login: | p|Intermec 540+/542+ print server telnetd| v/$1/ d/print server/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\x1b\\[2J\\x1b\\[1;1HConnecting\\.\\.\\.\\.\\x1b\\[2J\\x1b\\[1;1HAdtran - TSU 120e\\r\\n\\r\\nPassword: | p/Adtran TSO 120e telnetd/ d/broadband router/ cpe:/h:adtran:tso_120e/a\nmatch telnet m|^\\xff\\xfd\\x1f\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfb\\x03\\nWelcome to GoodTech Systems Telnet Server for Windows \\S+ \\(Evaluation Copy\\)\\n\\r\\n\\(C\\) Copyright \\d+-\\d+ GoodTech Systems, Inc\\.\\n\\r\\n\\nLogin username: | p/GoodTech Systems telnetd/ i/Evaluation copy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfe\\\"\\xff\\xfb\\x03\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfd\\x1fBytefusion Telnet ([\\d.]+), Copyright \\d+-\\d+ Bytefusion Ltd\\.\\n\\rUnregistered Evaluation\\. See www\\.bytefusion\\.com/telnet\\.html\\r\\n\\n\\rWIN3 Login: | p/Bytefusion telnetd/ v/$1/ i/Evaluation copy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^Windows Telnet Server Version ([\\d.]+)\\r\\nCopyright\\(C\\) Jordan Stojanovski \\d+\\r\\n------------------------------------\\r\\nUser name: | p/Jordan Stojanovski Windows telnetd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfd\\0\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\0This is an unregistered copy of the Ataman TCP Remote Logon Services\\.\\r\\nThe Ataman TCP Remote Logon Services has a \\d+ day evaluation period\\.\\r\\nThis copy was installed \\d+ days ago\\.\\r\\n\\r\\nAccount Name: | p/Ataman telnetd/ i/Evaluation copy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x03\\x1b\\[1;1f\\x1b\\[37m +\\x1b\\[2;1f +\\x1b\\[3;1f +\\x1b\\[4;1f -+ +\\x1b\\[5;1f\\|  KpyM Telnet Server v([\\d.]+) +\\|= p/KpyM telnetd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\x1b\\[2J\\x1b\\(0\\x1b\\[01;00Hlqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqk\\x1b| p/3Com Linkswitch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nD-link Corp\\. Access Point login: | p/D-Link DWL access point telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[0m\\x1b\\[2J\\x1b\\[0m\\x1b\\[2J\\x1b\\[2;66H\\x1b\\[1m\\x1b\\[21;1H\\x1b\\[0m-+\\x1b\\[22;2H\\x1b\\[0mFunction:\\x1b\\[23;2H\\x1b\\[0mMessage:\\x1b\\[24;2H\\x1b\\[7mCTRL\\+R = Refresh +\\x1b\\[8;12H\\x1b\\[0mIBM BladeCenter 4-Port Gb Ethernet Switch Module Console| p/IBM BladeCenter 4-Port Gb switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18    \\x1bc\\x1b\\[2J\\x1b\\[1;1HTelnet\\r\\n\\x1b\\[3;1H                     CF8720 Olicom Fast Ethernet L3 Switch| p/Olicom CrossFire 8720 switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[0;1H\\x1b\\[J\\x1b\\[1;1H\\x1b\\[0;1H\\x1b\\[J\\x1b\\[1;1H\\x1b\\[0m =+\\r\\n AT-8326GB Management System Version ([\\d.]+) \\r\\n Remote - Telnet\\r\\n| p/Allied Telesyn 8326GB switch telnetd/ v/$1/ d/switch/ cpe:/h:alliedtelesyn:8326gb/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\n                 Welcome to Quidway A8010 Expert Multiservice Access Switch\\r\\n| p/Huawei Quidway A8010 remote access telnetd/ d/remote management/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[0m\\x1b\\[2J\\x1b\\[0m\\x1b\\[2J\\x1b\\[1;1H\\x1b\\[0m-.*Enter case-sensitive username\\. No username is assigned by default\\.|s p/Intel 460T Standalone switch telnetd/ d/switch/\nmatch telnet m|^\\r\\nEfficient 5851 SDSL \\[ATM\\] Router \\(5851-\\d+\\) v([-\\d.]+) Ready\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfe\\x01Login: | p/Efficient 5851 DSL router telnetd/ v/$1/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\r\\*+\\n\\r\\r\\* Copyright \\(c\\) \\d+ Nortel Networks, Inc\\.  \\*\\n\\r\\r\\* All Rights Reserved +\\*\\n\\r\\r\\* Passport 8010 +\\*\\n\\r\\r\\* Software Release ([\\d.]+) | p/Nortel Passport 8010 router telnetd/ v/$1/ d/router/ cpe:/h:nortel:passport_8010/a\nmatch telnet m|^Rapture Runtime Environment v([\\d.]+) -- \\(c\\) \\d+ -- Iron Realms Entertainment\\r\\n| p/Rapture-based MUD telnetd/ v/$1/\nmatch telnet m|^NPC Telnet permit one connection\\.\\r\\n But One connection\\(\\) already keep alive\\.\\r\\nGood Bye !! \\r\\n| p/Samsung printer telnetd/ d/printer/\nmatch telnet m|^\\n\\r\\n\\r.*\\* MWR Ver ([\\d.]+) \\*.*SMAUG|s p/SMAUG MUD server/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[0;0H\\x1b<\\r\\n          \\x1b\\[7m +\\x1b\\[0m +\\r\\n +\\x1b\\[7m +Welcome to Management Blade ([\\d.]+) | p/BX600 Blade Chassis Manager telnetd/ v/$1/ d/remote management/\nmatch telnet m|^\\r\\n\\r\\nWelcome to the SoundBridge Shell version ([\\d.]+) Release\\r\\nType '\\?' for help or 'help <command>' for help on <command>\\.\\r\\n\\r\\nSoundBridge> | p/Roku SoundBridge telnetd/ v/$1/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nWelcome to NetLinx v([\\d.]+) Copyright AMX | p/AMX NetLinx telnetd/ v/$1/ d/media device/ o/VxWorks/ cpe:/o:harman:amx_firmware:$1/ cpe:/o:windriver:vxworks/a\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nWelcome to NetLinx v([\\d.]+) , AMX LLC\\r\\n>| p/AMX NetLinx telnetd/ v/$1/ d/media device/ o/VxWorks/ cpe:/o:harman:amx_firmware:$1/ cpe:/o:windriver:vxworks/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n\\[Dell  TM (\\d+) AP 2\\]> Please enter password: | p/Dell TrueMobile $1 wireless router telnetd/ d/router/ cpe:/h:dell:truemobile_$1_wireless_broadband_router/\nmatch telnet m|^\\r\\nSiemens \\d+ T1E1 \\[COMBO\\] Router \\(([-\\d]+)\\) v([\\d.]+) Ready\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfe\\x01Username: | p/Siemens $1 T1E1 router/ v/$2/ d/router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\n\\r\\n\\r\\n\\rWelcome to the SIA2410R\\n\\r| p/Net to Net SIA2410R DSL router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01Welcome to the DataStage Telnet Server\\.\\r\\0\\r\\nEnter user name: | p/Ascentia DataStage telnetd/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[\\?7l\\x1b\\[4;23r\\x1b\\[\\?6l\\x1b\\[1;1H\\x1b\\[\\?25l\\x1b\\[1;1HCopyright \\(C\\) 1991-1994 Hewlett-Packard Co\\.  All Rights Reserved\\.| p/HP switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\nReload scheduled for .* \\(in .*\\)\\r\\nRouter>| p/Cisco 1601R router telnetd/ d/router/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/h:cisco:router_1601r/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03Telnet access disabled\\. Enable in switch CLI\\r\\n| p/Aruba Networks AP 61 telnetd/ d/router/ cpe:/h:arubanetworks:networks_ap_61/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05PointRed Technologies, Inc\\. PartNo: (?:[-\\d]+), Version: ([\\d.]+)\\r\\n\\r\\nlogin:| p/PointRed Technologies telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\n\\r\\n\\r +Copyright \\(C\\) \\d+ MultiTech Software Systems Inc\\.,\\n\\r.*MultiVoIP Version ([\\d.]+)\\n\\r|s p/MultiTech MultiVoIP telnetd/ v/$1/ d/VoIP adapter/\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n     ____  _  _  _            _      ____          _\\r\\n    / _  \\|\\| \\|\\| \\|\\(_\\)  ___   __\\| \\|    \\|  _ \\\\   __ _ \\| \\|_  __ _\\r\\n= p/Allied Data CopperJet router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfc\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x1f\\xff\\xfb\\\"\\xff\\xfb\\x05\\r\\nCLI access not allowed until the SCC is active\\.\\r\\n\\r\\n| p/Check Point firewall telnetd/ d/firewall/\nmatch telnet m|^\\xff\\xfb\\x01   IP PHONE 2 V([\\d.]+) | p/NG VoIP Phone 2 telnetd/ v/$1/ d/VoIP phone/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\n\\r\\n\\r\\n\\r  Huawei HONET UA5000 Universal Access Unit\\.\\n\\r  Copyright\\(C\\) 1998-2005 by Huawei Technologies Co\\., Ltd\\.\\n\\r\\r\\n>>User name:| p/Huawei HONET UA5000 Universal Access Unit telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n-> 115260:51\\.665 \\(nEcho\\): Log: \\[NON_FATAL\\] Num:\\[0\\], Mod:\\[tcpEchoBytes\\], EOF\\r\\n$| p/Xerox Phaser 4400DX printer/ d/printer/ cpe:/h:xerox:phaser_4400dx/a\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03SHARP (AR-\\w+) Ver ([\\w._+-]+) TELNET server\\.\\r\\0\\nCopyright\\([cC]\\) [\\d -]+,? silex technology, Inc\\.\\r\\0\\nlogin: $| p/Sharp $1 printer telnetd/ v/$2/ cpe:/h:sharp:$1/a\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03SHARP (MX-\\w+) Ver ([\\w._+-]+) TELNET server\\.\\r\\0\\nCopyright\\(C\\) [\\d -]+ SHARP CORPORATION\\r\\0\\nCopyright\\(C\\) [\\d -]+ silex technology, Inc\\.\\r\\0\\nlogin: | p/Sharp $1 printer telnetd/ v/$2/ cpe:/h:sharp:$1/a\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03Sharp (AR-\\w+) Ver ([\\w._+-]+) TELNET server\\.\\r\\0\\nCopyright\\(C\\) [\\d -]+ SHARP CORPORATION\\r\\0\\nCopyright\\(C\\) [\\d -]+ Japan Computer Industry Inc\\.\\r\\0\\nlogin: | p/Sharp $1 printer telnetd/ v/$2/ cpe:/h:sharp:$1/a\nmatch telnet m|^\\xff\\xfb\\x01AMBIT VoIP TRIO, ([\\w._/]+), MAC:([0-9A-F]{12}),VOIP FLG=1\\n\\r\\n\\rInternational numbers routed to VoIP\\.\\n\\r\\n\\rLogin: | p/Softbank Trio 1 WAP telnetd/ v/$1/ i/MAC: $2/ d/WAP/\n\n\n# A bit general:\nmatch telnet m|^\\xff\\xfb\\x01\\n?\\r\\n\\r?VxWorks login: | p/VxWorks telnetd/ o/VxWorks/ cpe:/o:windriver:vxworks/a\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\r\\nVxWorks login: | p/VxWorks telnetd/ o/VxWorks/ cpe:/o:windriver:vxworks/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nVxWorks login: | p/VxWorks telnetd/ o/VxWorks/ cpe:/o:windriver:vxworks/a\n# Oracle StorageTek 2540-M2 telnet server\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x1f\\r\\nVxWorks login: | p/VxWorks telnetd/ o/VxWorks/ cpe:/o:windriver:vxworks/a\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n([-\\w_.]+) wireless  login: $| p/Conceptronic C54APT wireless router telnetd/ i/Name $1/ d/router/ cpe:/h:conceptronic:c54apt/a\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\rPassword: $| p|ZyXEL Prestige/Efficient Speedstream adsl router telnetd| d/router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01password: $| p/D-Link ADSL router telnetd/ d/router/\nmatch telnet m|^\\r\\n\\xff\\xfb\\x01Enter password: $| p/SunSwitch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\rLogin: $| p/Cisco 3000 series VPN Concentrator telnetd/ d/terminal server/ cpe:/h:cisco:vpn_3000_concentrator/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\w+ login: | p/PXES Linux Thin Client telnetd/ d/terminal/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\n\\rlogin: | p/Cayman Gatorbox router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03(?:\\r\\n)?User: | p/Aruba switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01(?:\\xff\\xfd\\x03)?\\xff\\xfb\\x03(?:\\xff\\xfd\\x1f)?\\r\\n\\(([^)]+)\\) \\r\\nUser: | p/Aruba switch telnetd/ i/$1/ d/switch/\nmatch telnet m|^login: \\xff\\xfb\\x01\\xff\\xfb\\x03| p|USRobotics/Sagem router telnetd| d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfd\\0login: | p/Sagem router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Password: | p/Telindus router telnetd/ d/router/\nmatch telnet m|^220 FTP server \\(ver 1\\.0\\) ready\\.\\r\\n$| p/Mitel 3300 PBX controller ftpd/ d/PBX/\n\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nBusyBox on dslmodem login: | p/Actiontec DSL router/ d/router/ cpe:/a:busybox:busybox/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x1f\\xff\\xfd\\x18| p/BladeCenter or TANDBERG Codec telnetd/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nlogin: | p/D-Link DSL router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n([-\\w_.]+) login: | p|NASLite-SMB/Sveasoft Alchemy firmware telnetd| h/$1/\nmatch telnet m|^\\r\\nAnother telnet session is in progress\\.\\r\\n$| p/HP JetDirect telnetd/ d/printer/\nmatch telnet m|^\\r\\nSystem unavailable\\.  Please try later\\.\\r\\n$| p/Cisco CSS telnetd/ d/load balancer/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfa\\x18\\x01\\xff\\xf0$| p/Netgear FVS318 router telnetd/ d/router/ cpe:/h:netgear:fvs318/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n(FVS\\w+) login: | p/Netgear $1 router telnetd/ d/router/ cpe:/h:netgear:$1/a\nmatch telnet m|^\\xff\\xfb\\0\\xff\\xfd\\0\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03Login Name:  | p/HP Remote Lights-Out Edition II telnetd/ d/remote management/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\\"\\r\\n\\*$| p/Network Systems Group router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\r\\nUser Access Verification\\r\\n\\r\\nlogin:| p/Cisco 1721 router telnetd/ d/router/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/h:cisco:router_1721/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n Disconnecting\\.\\.\\.\\r\\n\\n$| p/HP LaserJet printer telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[0;0H\\x1b\\[K\\x1b\\[7mTelnet configuration                          RELEASE ([\\d.]+)\\x1b| p/Pirelli Age UB router telnetd/ v/$1/ d/router/\nmatch telnet m|^Telnet server disabled\\r\\n$| p/F5 BIG-IP load balancer telnetd/ i/telnet disabled/ d/load balancer/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n login: | p/Linksys WRT54G telnetd/ i/Sveasoft firmware/ d/WAP/ cpe:/h:linksys:wrt54g/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03([\\w._-]+) login: | p/BusyBox telnetd/ h/$1/ cpe:/a:busybox:busybox/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03login: | p/BusyBox telnetd/ cpe:/a:busybox:busybox/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n([\\w._-]+) login: | p/BusyBox telnetd/ h/$1/ cpe:/a:busybox:busybox/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03([\\w._-]+) login: | p/BusyBox telnetd/ h/$1/ cpe:/a:busybox:busybox/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03Fritz!Box user: | p/BusyBox telnetd/ o/FritzOS/ cpe:/a:busybox:busybox/a cpe:/o:avm:fritzos/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\(none\\) login: | p/BusyBox telnetd/ cpe:/a:busybox:busybox/\nmatch telnet m|^\\xff\\xfb\\x01Copyright \\(C\\) \\d+ by Compaq Computer Corp\\. \\r\\n\\rlogin: | p/Compaq 5450 switch telnetd/ d/switch/ cpe:/h:compaq:5450/a\nmatch telnet m|^\\n\\r\\n\\rTHIS IS A MUD BASED ON\\.\\.\\.\\.\\.\\n\\r\\n\\r                                ROM Version (.*)\\n| p/ROM-based MUD/ v/$1/\nmatch telnet m|^\\r\\n.*Based\\(loosely\\) on CircleMUD ([\\d.]+)|s p/CircleMUD-based MUD telnetd/ v/$1/\nmatch telnet m|^\\r\\n.*Based on CircleMUD ([\\w._-]+),\\r\\n|s p/CircleMUD telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\r\\n\\r\\nSelect Access Level\\r\\n===================\\r\\n1 - Read-Only\\r\\n2 - Installer\\r\\n3 - Administrator\\r\\n| p/BreezeACCESS wireless router telnetd/ d/router/\nmatch telnet m|^\\x1b\\[0;37;40m\\x1b\\[2J\\x1b\\[0;37;40m\\x1b\\[1m\\x1b\\[15;22HAT-(\\w+), version ([\\d.]+)\\x1b| p/Allied Telesyn $1 switch telnetd/ v/$2/ d/switch/ cpe:/h:alliedtelesyn:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[0;0H\\x1b\\[0J\\x1b\\[0;0H\\x1b\\[0J\\x1b\\[1;28HAT-([-\\w_.]+) Login Menu\\x1b\\[5;18HAT-[-\\w_.]+ Local Management System Version ([\\d.]+) \\x1b| p/Allied Telesyn $1 switch telnetd/ v/$2/ d/switch/ cpe:/h:alliedtelesyn:$1/a\n\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[1;1H\\x1b\\[0m\\x1b\\[\\?3l\\x1b\\(0\\x1b\\[2;40H\\x1b\\(B\\x1b\\(0\\x1b\\[2;28H\\x1b\\(BCSX([-\\w_.]+) Local Management\\x1b\\[0m\\x1b\\(0\\x1b\\[5;24H\\x1b\\(BCABLETRON Systems, Incorporated\\x1b| p/Cabletron CSX$1 router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05SpeedStream Telnet Server\\r\\n\\r\\n\\r\\nlogin: | p/Efficient Networks Speedstream router telnetd/ d/router/\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n#\\r\\n\\| LANCOM ([\\w._+-]+) ADSL/ISDN\\r\\n\\| Ver\\. ([\\d.]+) /= p|Lancom $1 DSL/ISDN router telnetd| v/$2/ d/router/\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n#\\r\\n\\| LANCOM ([\\w._+-]+)\\r\\n\\| Ver\\. ([\\w._-]+ / \\d\\d\\.\\d\\d\\.\\d\\d\\d\\d)\\r\\n\\| SN\\.  (\\d+)\\r\\n\\| Copyright \\(c\\) LANCOM Systems\\r\\n\\r\\nLC\\w+, Connection No\\.: \\d+ \\(WAN\\)\\r\\n\\r\\nUsername: = p/Lancom $1 VPN router telnetd/ v/$2/ i/serial number: $3/ d/router/ cpe:/h:lancom:$1/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n#\\r\\n\\x7c LANCOM ([\\w._+-]+) VPN\\r\\n\\x7c Ver\\. ([\\w._-]+ / \\d\\d\\.\\d\\d\\.\\d\\d\\d\\d / [\\w._/-]+)\\r\\n\\x7c SN\\.  (\\d+)\\r\\n| p/Lancom $1 VPN router telnetd/ v/$2/ i/serial number: $3/ d/router/ cpe:/h:lancom:$1/\nmatch telnet m|^\\xff\\xfb\\x01\\n\\rno data rcvd for version string\\n\\rrecv version id unsuccessful\\n\\rSSH Session task 0x\\w+: Version Exchange Failed\\n\\r| p/Cisco Aironet 1200 router telnetd/ cpe:/a:cisco:telnet/ cpe:/h:cisco:aironet_1200/\nmatch telnet m|^\\xff\\xfe\\x01Foxconn VoIP TRIO 3C| p/Foxconn VoIP TRIO 3C telnetd/\nmatch telnet m|^Sorry telnet connections not permitted\\.\\n$| p/Aruba router telnetd/ d/router/\nmatch telnet m|^\\r\\nSorry, this system is engaged\\.\\r\\n$| p/DirecWay satellite router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nBusyBox on \\(none\\) login: | p/BusyBox telnetd/ cpe:/a:busybox:busybox/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nBusyBox on ([-\\w_.]+) login: | p/BusyBox telnetd/ h/$1/ cpe:/a:busybox:busybox/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nBusyBox v([-\\w_.]+) \\(| p/BusyBox telnetd/ v/$1/ cpe:/a:busybox:busybox:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r\\nBusyBox v(.*) Built-in shell \\(ash\\)\\r\\n| p/BusyBox telnetd/ v/$1/ cpe:/a:busybox:busybox:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\(none\\) login: | p/utelnetd/ i/FetchTV DVR/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\(B\\x1b\\)0\\x1b\\[2J\\x1b\\[H\\x1b\\[m\\x0f\\x1b\\[10;32H\\x0e                 \\x1b\\[11;32H lq\\x0f\\x1b\\[1mLogin\\x0e\\x1b\\[mqqqqqqqqk\\x1b\\[12;32H x\\x1b\\[13C x\\x1b\\[13;32H mqqqqqqqqqqqqqqj\\x1b\\[12;34H| p/Adtran Atlass 500 T1 router telnetd/ d/router/ cpe:/h:adtran:atlass_500_t1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x1fHummingbird Ltd\\., Windows NT, Telnetd \\((\\w+) Version ([\\d.]+)\\)\\r\\n\\r\\nlogin: | p/Hummingbird windows telnetd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfb\\x01Hummingbird Communications Ltd\\., Windows NT, Telnetd Version ([\\d.]+) \\(([-\\w_.]+)\\)\\r\\n\\r\\n login: | p/Hummingbird windows telnetd/ v/$1/ o/Windows/ h/$2/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nUser Access Verification\\r\\n\\r\\nPlease Enter Login Name: | p/Foundry Networks telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nUser Access Verification\\r\\n\\r\\nPlease Enter Password: | p/Foundry Networks telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03BR-telnet@FI_Core>| p/Foundry FastIron 1500 switch telnetd/ d/switch/ cpe:/h:foundrynet:fastiron_1500/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\x1b\\[\\?3l\\x1b\\[2JPlease enter your user name and password!! \\r\\n\\r\\nLogin:| p/Hawking Technology print server telnetd/ d/print server/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nD-Link Access Point login: | p/D-Link Access Point telnetd/ d/router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03.*\\r\\n([-\\w_.]+) login: |s p/utelnetd/ o/Unix/ h/$1/\nmatch telnet m|^\\xff\\xfb\\x01Select access level \\(read, write, administer\\): | p/3Com SuperStack II Switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Login failed\\.\\r\\n| p/BusyBox telnetd/ i/OpenWRT, telnet disabled/ cpe:/a:busybox:busybox/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03Login failed\\.\\r\\n| p/BusyBox telnetd/ i/OpenWRT, telnet disabled/ cpe:/a:busybox:busybox/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\(none\\) login: | p/BusyBox telnetd/ v/1.0/ cpe:/a:busybox:busybox:1.0/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nGET / HTTP/1\\.0\\r\\n\\r\\n\\r\\nPartedMagic login: login: loginprompt\\.c:164: login_prompt: Assertion ${backquote}wlen == \\(int\\) len -1' failed\\.\\r\\n| p/BusyBox telnetd/ v/1.19.4/ i/Parted Magic pkg-shadow login/ cpe:/a:busybox:busybox:1.19.4/a\nmatch telnet m|^\\r\\nEfficient 5851 SDSL \\[CM\\] Router \\((5851-\\d+)\\) v([\\d.]+) Ready\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfe\\x01Login: | p/Efficient Networks $1 SDSL router telnetd/ v/$2/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\n\\nLantronix LPS1 Version V(\\d[\\w/-_+.]+)\\((\\d+)\\)\\n\\r\\nType HELP at the 'Local_3> ' prompt for assistance\\.\\n\\r\\nUsername> | p/Lantronix LPS1 telnetd/ v/$1/ i/Released $2/ d/print server/ cpe:/h:lantronix:lps1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\n(TA \\w+)\\r\\n\\n\\n\\ruser: | p/Adtran $1 router telnetd/ d/router/ cpe:/h:adtran:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\nPON 262194 PAAMCO (TA \\w+) Gen3\\r\\n\\n\\n\\ruser: | p/Adtran $1 router telnetd/ d/router/ cpe:/h:adtran:$1/a\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfb\\x01\\r\\n\\r\\r\\nUser Name:$| p/Dell PowerConnect switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[1;1H\\x1b\\[2K\\x1b.*BayStack ([-\\w_.]+) Main Menu\\x1b|s p/BayStack $1 switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r +\\*+\\n\\r +Welcome to ([-\\w_.]+)\\n\\r +\\*+\\n\\r\\n\\rD-Link Corp\\., Inc\\. Software Release ([-\\w_.)(/]+)\\n\\rCopyright \\(c\\) \\d+-\\d+ by D-Link Corp\\., Inc\\.\\n\\r\\n\\rlogin: | p/D-Link router telnetd/ v/$2/ i/$1/ d/router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03# | p/AML M7100 telnetd/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x1f\\r\\nUsing telnet exposes your password\\. Using ssh is a safer choice\\.\\r\\n\\r\\nUsername: | p/Blue Coat telnetd/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\nPIX passwd: | p/Cisco PIX firewall telnetd/ cpe:/o:cisco:pix_firewall_software/\nmatch telnet m|^TELNET server version ([\\d.]+) ready at \\r\\n\\r\\r\\npassword: \\xff\\xfc\\x01| p/ASCOM ColtSoho router telnetd/ v/$1/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n#-+\\r\\n# Tasman Networks Inc\\. Telnet Login\\r\\n#| p/Tasman Networks router telnetd/ d/router/\nmatch telnet m|^\\n\\r\\n\\rHi! I am your Net Tamagotchi! I love you!!| p/Net Tamagotchi telnetd/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\t\\t Welcome to P330\\r\\n\\t\\tSW version ([\\d.]+)\\r\\n\\r\\n\\r\\nLogin: | p/Avaya P330 switch telnetd/ v/$1/ d/switch/ cpe:/h:avaya:p330/a\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\t\\tWelcome to P333R\\r\\n\\t\\tSW version ([\\d.]+)\\r\\n\\r\\n\\r\\nLogin: | p/Avaya P333R switch telnetd/ v/$1/ d/switch/ cpe:/h:avaya:p333r/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05\\xff\\xfd\\x1fSpeedStream Telnet Server\\r\\n\\r\\n\\r\\nlogin: | p/SpeedStream router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\rwelcome on your dreambox! - Kernel (\\d[\\w.]+) \\([\\d:]+\\)\\.\\r\\n\\r([-\\w_.]+) login: | p/Dreambox DVB telnetd/ i/Kernel $1/ d/media device/ o/Linux/ h/$2/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nPLi dm7000 Helenite \\d+ \\(based on [-\\w_.]+\\)\\r\\n\\rwelcome on your dreambox! - Kernel ([-\\w_.]+) | p/Dreambox DVB telnetd/ i/Kernel $1; Helenite firmware/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r[ *\\r\\n]*Welcome on your dreambox! - Kernel (\\d[\\w.]+) | p/Dreambox DVB telnetd/ i/Kernel $1/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x1f\\r\\n\\x1b\\[34;1m   \\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\* \\r\\n\\x1b\\[34;1m| p/SAP J2EE engine telnetd/ cpe:/a:sap:j2ee_engine/\nmatch telnet m|^\\xff\\xfe\\\"\\xff\\xfb\\x01          \\x1b\\[H\\x1b\\[J\\x1b\\[3;1HCB-1000 S/N: (\\d+)\\x1b\\[3;56HSymbol Technologies, Inc\\.\\x1b\\[4;1HVersion ([-\\w_.]+)\\x1b\\[4;44HEthernet HW address ([\\w:]+)\\x1b\\[21;1H| p/Symbol CB-1000 bridge telnetd/ v/$2/ i/SN $1; MAC $3/ d/bridge/ cpe:/h:symbol:cb-1000/a\nmatch telnet m=^StoneGate firewall \\([\\d.]+\\) \\n\\r(?:SG login|Login): = p/StoneGate firewall telnetd/ d/firewall/\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[0m\\x1b\\[1;1H\\n\\r\\x1b\\[2;1H\\n\\r\\x1b\\[3;1H\\n\\r\\x1b\\[4;1H\\n\\r\\x1b\\[5;1H\\n\\r\\x1b\\[6;1H\\n\\r\\x1b\\[7;1H\\n\\r\\x1b\\[8;1H\\n\\r\\x1b\\[9;1H\\n\\r\\x1b\\[10;1H\\n\\r\\x1b\\[11;1H\\n\\r\\x1b\\[12;1H\\n\\r\\x1b\\[13;1H\\n\\r\\x1b\\[14;1H\\n\\r\\x1b\\[15;1H\\n\\r\\x1b\\[16;1HEnter Ctrl-Y to begin\\.\\x1b\\[18;3H\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\x1b\\[19;3H\\*\\*\\* Ethernet Switch 460-24T-PWR | p/Nortel 460-24T-PWR switch telnetd/ d/switch/ cpe:/h:nortel:460-24t-pwr/a\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[0m\\x1b\\[1;1H \\n\\r\\x1b\\[2;1H\\n\\r\\x1b\\[3;1H\\n\\r\\x1b\\[4;1H\\n\\r\\x1b\\[5;1H\\n\\r\\x1b\\[6;1H\\n\\r\\x1b\\[7;1H\\n\\r\\x1b\\[8;1H\\n\\r\\x1b\\[9;1H\\n\\r\\x1b\\[10;1H\\n\\r\\x1b\\[11;1H\\n\\r\\x1b\\[12;1H\\n\\r\\x1b\\[13;1H\\n\\r\\x1b\\[14;1H\\n\\r\\x1b\\[15;1H\\n\\r\\x1b\\[16;1HEnter Ctrl-Y to begin\\.\\x1b\\[18;3H\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\x1b\\[19;3H\\*\\*\\* BayStack 420 | p/BayStack 420 switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[0m\\x1b\\[1;1H\\x1b\\[2;1H\\x1b\\[3;1H\\x1b\\[4;1H ###      ###  ###########   ##########  ############# ########### ###\\x1b\\[5;1H ####     ### ############# ############ ############# ########### ###\\x1b\\[6;1H[ #]{70}\\x1b\\[7;1H[ #]{70}\\x1b\\[8;1H[ #]{70}\\x1b\\[9;1H[ #]{70}\\x1b\\[10;1H[ #]{70}\\x1b\\[11;1H[ #]{70}\\x1b\\[12;1H[ #]{78}\\x1b\\[13;1H[ #]{78}\\x1b\\[14;1H\\x1b\\[15;1H\\x1b\\[16;1HEnter Ctrl-Y to begin\\.\\x1b\\[18;3H\\*{38}| p/Nortel 4548 switch telnetd/ d/switch/ cpe:/h:nortel:4548/a\nmatch telnet m|^\\x1b\\[\\?25l\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[0m\\x1b\\[1;1H\\x1b\\[2;1H\\x1b\\[3;1H\\x1b\\[4;1H ###      ###  ###########   ##########  ############# ########### ###\\x1b\\[5;1H ####     ### ############# ############ ############# ########### ###\\x1b\\[6;1H[ #]{70}\\x1b\\[7;1H[ #]{70}\\x1b\\[8;1H[ #]{70}\\x1b\\[9;1H[ #]{70}\\x1b\\[10;1H[ #]{70}\\x1b\\[11;1H[ #]{70}\\x1b\\[12;1H[ #]{78}\\x1b\\[13;1H[ #]{78}\\x1b\\[14;1H\\x1b\\[15;1H\\x1b\\[16;1HEnter Ctrl-Y to begin\\.\\x1b\\[18;3H\\*{35}| p/Nortel 5510 switch telnetd/ d/switch/ cpe:/h:nortel:5510/\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[0m\\x1b\\[1;1H \\*\\*\\*\\*\\*      \\*\\*\\*     \\*     \\*    \\*\\*\\*\\*\\*   \\*\\*\\*\\*\\*\\*\\*\\*\\*     \\*\\*\\*| p/BayStack 470 switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[56184256;1H\\x1b\\[0m\\x1b\\[1;1H \\*\\*\\*\\*\\*      \\*\\*\\*     \\*     \\*    \\*\\*\\*\\*\\*   \\*\\*\\*\\*\\*\\*\\*\\*\\*     \\*\\*\\*| p/BayStack 5510 switch telnetd/ d/switch/\nmatch telnet m|^200 Hamster Remote Control, Hamster[ -]Playground Vr\\. ([\\w._-]+)\\r\\n| p/Hamster-Playground telnetd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^200 Hamster Remote Control, Hamster[ -]Playground Vr\\. [\\w._-]+ \\(Build ([\\w._-]+)\\)\\r\\n| p/Hamster Playground telnetd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m=^\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[H\\x1b\\[2J\\x1b\\[H\\x1b\\[1;12H----------------------------------------------------------\\x1b\\[2;11H\\|\\x1b\\[16CCisco VG248 \\(= p/Cisco VG248 telnetd/ d/VoIP adapter/ cpe:/a:cisco:telnet/ cpe:/h:cisco:vg248/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\x1b\\[\\?25h\\x1b\\[2J\\x1b\\[0;0H\\x1b<\\r\\nRemote Access Controller/Modular Chassis \\(DRAC/MC\\)\\r\\nCopyright \\(C\\) 2000-2\\d\\d\\d Dell Inc\\.| p|Dell DRAC/MC telnetd| d/remote management/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03IB-21E Ver ([\\d.]+) TELNET server\\.\\r\\0\\nCopyright \\(C\\) 2001-2003 KYOCERA CORPORATION\\r\\0\\n| p/Kyocera IB-21E telnetd/ v/$1/ d/print server/ cpe:/h:kyocera:ib-21e/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\n\\*+\\r\\n\\*  Welcome to D-Link Print Server  \\*\\r\\n\\* +Telnet Console +\\*\\r\\n\\*+\\r\\n\\r\\nServer Name    :  ([\\w._-]+)\\0+\\r\\nServer Model   :  ([\\w_.+-]+)\\0+\\r\\nF/W Version    :  ([\\w._-]+)  \\0.\\0+\\r\\nMAC Address    :  ([\\w ]+)\\r\\nUptime         :  ([^\\r\\n]+)\\r\\n\\nPlease Enter Password: |s p/D-Link $2 print server telnetd/ i/FW version $3; MAC $4; Uptime $5/ d/print server/ h/$1/ cpe:/h:dlink:$2/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\n\\*+\\r\\n\\*  Welcome to D-Link Print Server  \\*\\r\\n\\* +Telnet Console +\\*\\r\\n\\*+\\r\\n\\r\\nServer Name    :  ([\\w._-]+)\\0+\\r\\nServer Model   :  ([\\w_.+-]+)\\0|s p/D-Link $2 print server telnetd/ d/print server/ h/$1/ cpe:/h:dlink:$2/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\*+\\r\\n\\*  Welcome to D-Link Print Server  \\*\\r\\n\\* +Telnet Console +\\*\\r\\n\\*+\\r\\n\\r\\nServer Name    :  ([\\w._-]+)\\0+\\r\\nServer Model   :  ([\\w_.+-]+)\\0+\\r\\nF/W Version    :  ([\\w._-]+) *\\0.\\0+\\r\\nMAC Address    :  ([\\w ]+)\\r\\nUptime         :  ([^\\r\\n]+)\\r\\n\\n|s p/D-Link $2 print server telnetd/ i/FW version $3; MAC $4; Up $5/ d/print server/ h/$1/ cpe:/h:dlink:$2/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\*+\\r\\n\\*  Welcome to D-Link Print Server  \\*\\r\\n\\* +Telnet Console +\\*\\r\\n\\*+\\r\\n\\r\\nServer Name    :  ([\\w._-]+)\\0+\\r\\nServer Model   :  ([\\w._+-]+)\\0+\\r\\nF/W Version    :  ([\\w._-]+) *\\0.\\0+\\r\\nMAC Address    :  ([\\w ]+)|s p/D-Link $2 print server telnetd/ v/$3/ i/name $1; MAC $4/ d/print server/ cpe:/h:dlink:$2/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\*+\\r\\n\\*  Welcome to D-Link Print Server  \\*\\r\\n\\*.*\\r\\nServer Name    :  ([\\w._-]+)\\0+\\r\\nServer Model   :  ([\\w._+-]+)\\0|s p/D-Link $2 print server telnetd/ d/print server/ h/$1/ cpe:/h:dlink:$2/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\*+\\r\\n\\*  Welcome to D-Link Wireless Print Server  \\*\\r\\n\\* +Telnet Console +\\*\\r\\n\\*+\\r\\n\\r\\nServer Name    :  ([\\w._-]+)\\0+\\r\\nServer Model   :  ([\\w._+-]+)\\0+\\r\\nF/W Version    :  ([\\w._-]+)\\0.\\0+\\r\\nMAC Address    :  ([\\w ]+)|s p/D-Link $2 wireless print server telnetd/ i/FW $3; MAC $4/ h/$1/ cpe:/h:dlink:$2/a\nmatch telnet m|^\\xff\\xfe\\0\\xff\\xfc\\0\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\n\\n\\rLocal User Access Verification: \\n\\n\\rLogin: | p/Allied Telesyn switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n\\x1b\\[H\\x1b\\[JWelcome at ActiveFax Server\\.\\r\\n\\r\\n| p/ActiveFax telnetd/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nLogin: $| p/ActionTec DSL router/ d/broadband router/\nmatch telnet m|^\\xff\\xfc\\x01PCS-(\\w+) Telnet2? Server\\r\\nlogin: | p/Sony PCS-$1 telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03RemoteX Telnet Server V([\\d.]+)\\n\\r\\n\\rc:\\\\>| p/RemoteX telnetd/ v/$1/ d/game console/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03 ADSL Router\\r\\nLogin name: | p/BT Voyager ADSL router telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r +\\*+\\n\\r +Welcome to (ZXDSL [\\w._-]+)\\n\\r +\\*+\\n\\r\\n\\rZTE Corporation, Software Release VIK-([-\\w_.]+)\\n\\r| p/ZyXEL $1 telnetd/ v/$2/ d/broadband router/ cpe:/h:zyxel:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03                        =======================\\r\\n                        Welcome to (ZXDSL [\\w._-]+)\\r\\n                        =======================\\r\\nLogin:| p/ZyXEL $1 ADSL modem telnetd/ d/broadband router/ cpe:/h:zyxel:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03                ===========================\\r\\n                  Welcome to ZXDSL  ([\\w._-]+)\\r\\n                ===========================\\r\\n\\r\\nZTE Inc\\., Software Release ZXDSL 831CIIV([\\w._-]+)\\r\\n\\r\\nLogin name: | p/ZyXEL ZXDSL $1 ADSL modem telnetd/ v/$2/ d/broadband router/ cpe:/h:zyxel:zxdsl_$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03                =============================================\\r\\n                  Welcome to ZXDSL  ([\\w._-]+) : chipset BCM\\w+\\r\\n                =============================================\\r\\n\\r\\nZTE Inc\\., Software Release ZXDSL [\\w._-]+V([\\w._-]+)\\r\\n\\r\\nRelease Date: ([\\w/]+)\\r\\n\\r\\nLogin: | p/ZyXEL ZXDSL $1 ADSL modem telnetd/ v/$2 $3/ d/broadband router/ cpe:/h:zyxel:zxdsl_$1/\nmatch telnet m|^\\r\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\n\\r\\*  HiPath (\\d+) Telnet  \\*\\n\\r| p/Siemens HiPath $1 telnetd/ d/firewall/ cpe:/h:siemens:hipath_$1/a\nmatch telnet m%^\\xff\\xfe\\x01\\r\\n\\r\\n\\+=+\\+\\r\\n\\| +\\[ MGE UPS SYSTEMS SNMP/Web agent Configuration menu \\]% p/MGE UPS telnetd/ d/power-device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03root@HD:/# | p/utelnetd/ i/**NO PASSWORD**/ o/Unix/\nmatch telnet m|^(?:\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03)?\\*+\\r\\n\\r\\nThis session allows you to set the TCPIP parameters for your\\r\\nDell (?:Laser Printer )?(?:Printer )?(?:Dell )?([\\w._+-]+) .*Ethernet internal network device, with a hardware\\r\\naddress of ([0-9A-F:]{17}) \\(MSB, Canonical\\)\\.\\r\\nIt's an ethernet card\\.\\r\\nNetwork Firmware Version is V([\\w._-]+)\\(\\w+(?: MFP)?\\) ([\\d-]+)\\.\\r\\nSystem Up Time is ([^\\r\\n.]+)\\.\\r\\n\\r\\n| p/Dell $1 printer telnetd/ v/$3 $4/ i/MAC $2; uptime $5/ d/printer/ cpe:/h:dell:$1/a\nmatch telnet m|^(?:\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03)?\\*+\\r\\n\\r\\nThis session allows you to set the TCPIP parameters for your\\r\\nDell (?:Laser Printer )?(?:Printer )?(?:Dell )?([\\w._+-]+) .*Ethernet internal network device, with a hardware\\r\\naddress of [0-9A-F]{12} ([0-9A-F]{12}) \\(MSB, Canonical\\)\\.\\r\\n| p/Dell $1 printer telnetd/ i/MAC $2/ d/printer/ cpe:/h:dell:$1/a\nmatch telnet m|^(?:\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03)?\\*+\\r\\n\\r\\nThis session allows you to set the TCPIP parameters for your\\r\\nDell (?:Laser Printer )?(?:Printer )?(?:Dell )?([\\w._+-]+) .*Ethernet internal network device| p/Dell $1 printer telnetd/ d/printer/ cpe:/h:dell:$1/a\nmatch telnet m|^(?:\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03)?\\*+\\r\\n\\r\\nThis session allows you to set the TCPIP parameters for your\\r\\nLexmark ([\\w._+-]+) Ethernet internal network device, with a hardware\\r\\naddress of (\\w+) (\\w+) | p/Lexmark $1 printer telnetd/ i/MAC $2; MAC2 $3/ d/printer/ cpe:/h:lexmark:$1/a\nmatch telnet m|^(?:\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03)?\\*+\\r\\n\\r\\nThis session allows you to set the TCPIP parameters for your\\r\\nLexmark Optra LaserPrinter internal network device, \\r\\nwith a hardware address of (\\w+)     (\\w+)\\r\\n| p/Lexmark Optra LaserPrinter telnetd/ i/MAC $1; MAC2 $2/ d/printer/\nmatch telnet m|^(?:\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03)?\\*+\\r\\n\\r\\nThis session allows you to set the TCPIP parameters for your\\r\\nIBM Infoprint ([\\w._+-]+) Ethernet internal network device, with a hardware\\r\\naddress of((?: [0-9A-F]{12})+) \\(MSB, Canonical\\)\\.\\r\\nIt's an ethernet card\\.\\r\\n\\r\\n\\*{60}\\r\\n\\r\\n| p/IBM Infoprint $1 printer/ i/MAC addresses:$2/ cpe:/h:ibm:infoprint_$1/a\nmatch telnet m|^\\xff\\xfb\\\"\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\0\\xff\\xfd\\0\\n\\r\\nWelcome to the PDP-10 simulator\\r\\n\\n| p/PDP-10 simulator telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\(Enable\\) Password\\? | p/Enterasys gated config telnetd/ d/router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to Linux \\(ZEM200\\) for arca\\r\\n\\rKernel ([-\\w_.]+) on an arca \\r\\n\\rZEM200 login: | p/ZEM200 biometric device config telnetd/ i/Linux $1/ d/specialized/ o/Linux/ cpe:/o:linux:linux_kernel:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\n\\r\\nCGX3224 Switch Manager Console\\. Version: CGX([\\d.]+) Bld (\\d+),.*\\r\\n\\r\\nPassword:| p/COMPEX CGX3224 switch telnetd/ i/CGX $1.$2/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[0m\\x1b\\[2J\\x1b\\[01;00H\\r\\n\\r\\0\\r\\n\\r\\0[ \\t]+\\r\\n\\r\\0\\r\\n\\r\\0\\r\\0VersaXpress HPNA Routing Concentrator\\r\\n| p/Versatek VersaXpress HPNA Routing Concentrator telnetd/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nSportster Pro ([\\d.]+) Image Sagem D-BOX2 - Kernel ([-\\w_.]+) | p/Sagem D-BOX2 Sportster Pro telnetd/ v/$1/ i/linux kernel $2/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n.*Sagem D-BOX2 - Kernel ([-\\w_.]+) |s p/Sagem D-BOX2 telnetd/ i/linux kernel $1/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\0\\r\\n\\*\\*\\* Lantronix Universal Device Server \\*\\*\\*\\r\\n\\r\\0Serial Number (\\d+)  MAC address ([\\w:]+)\\r\\n\\r\\0Software Version V([\\d.]+) \\((\\d+)\\)\\r\\0\\r\\n\\r\\n\\r\\0Press Enter to go into Setup Mode \\r\\n\\r\\0| p/Lantronix Universal Device Server telnetd/ v/$3.$4/ i/Serial $1; MAC $2/\n\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\0\\nMAC address (\\w+)\\n\\r\\0Software version V([\\d.]+ \\(\\d+\\)) XPTEXE\\r\\0| p/Lantronix XPort telnetd/ v/$2/ i/MAC $1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\0\\nMAC address (\\w+)\\n\\r\\0Software version ([\\w._-]+ \\(\\d+\\)) XPTEXE\\r\\0\\n\\n\\r\\0Press Enter to go into Setup Mode \\n\\r\\0| p/Napco NetLink NL-MOD alarm system telnetd/ v/$2/ i/MAC $1/ d/security-misc/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\0\\nMAC address (\\w+)\\n\\r\\0Software version V([\\w._-]+ \\(\\d+\\)) M100\\r\\0| p/Lantronix Micro100 telnetd/ v/$2/ i/MAC $1/ cpe:/h:lantronix:micro100/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\0\\n\\*\\*\\* Lantronix Universal Device Server \\*\\*\\*\\r\\0\\nSerial Number (\\d+)  MAC address ([\\w:]+)\\n\\r\\0Software version V?0*([\\d.]+) \\((\\d+)\\)\\r\\0\\n| p/Lantronix Universal Device Server telnetd/ v/$3.$4/ i/Serial $1; MAC $2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\0\\n\\*\\*\\* Lantronix Universal Device Server \\*\\*\\*\\r\\0\\nSerial Number (\\d+)  MAC address (\\w+)\\n\\r\\0Software version V([\\w._-]+) | p/Lantronix UDS10 Ethernet-to-serial telnetd/ v/$3/ i/serial $1; MAC $2/ d/specialized/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\*\\*\\* Lantronix ([\\w._-]+) Device Server \\*\\*\\*\\r\\0\\nMAC address (\\w+)\\n\\r\\0Software version V([\\w._-]+) \\((\\d+)\\) \\r\\0\\n| p/Lantronix $1 Ethernet-to-serial telnetd/ v/$3 $4/ i/MAC $2/ d/specialized/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\n\\r\\0SNTP Version ([\\d.]+) Server ([\\w._-]+)\\n\\r\\0\\r\\0\\nMAC address (\\w+)\\n\\r\\0Software version V[\\d.]+ \\(\\d+\\) ([\\w._-]+)\\r\\0\\nPassword :| p/Larus 54580 NTP clock telnetd/ v/$2/ i/NTP $1; MAC $3/ h/$4/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\n\\r\\0\\*\\*\\* Mitsubishi ProjectorView Server \\*\\*\\*\\r\\0\\nMAC address (\\w+)\\n\\r\\0Software version V([\\w._-]+) \\((\\d+)\\) MELCO\\r\\0\\n\\n\\r\\0Press Enter for Setup Mode \\n\\r\\0| p/Mitsubishi Electric XD1000 ProjectorView telnetd/ v/$2 $3/ i/MAC $1/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\0\\n\\*\\*\\* TemPageR (\\w+) Settings \\*\\*\\*\\r\\0\\nMAC address ([0-9A-F]{12})\\n\\r\\0Software version V([^\\r]*)\\r\\0\\nPassword :| p/Avtech TemPageR $1 temperature monitor telnetd/ v/$3/ i/MAC $2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\0\\nMAC address ([0-9A-F]{12})\\n\\r\\0Software version V([\\w_.\\(\\) -]+) \\r\\0\\n\\n\\r\\0Press Enter for Setup Mode \\n\\r\\0| p/Enistic zone controller telnetd/ v/$2/ i/MAC $1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\n\\r\\0\\*\\*\\* Siemens (\\w+) \\*\\*\\*\\n\\r\\0\\r\\0\\nSerial Number (\\d+)  MAC address ([0-9A-F]{12})\\n\\r\\0Software version ([^\\r]+)\\r\\0\\nPassword :| p/Siemens $1 remote management telnetd/ v/$4/ i/serial $2; MAC $3/ d/remote management/\n\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd\\x21\\xff\\xfb\\x01\\xff\\xfb\\x03Fritz!Box web password: | p/AVM FRITZ!Box 7170 telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nFritz!Box web password: | p/AVM FRITZ!Box telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03Fritz!Box web password: | p/AVM FRITZ!Box WLAN 7390 telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nDD-WRT v([-\\w_+. ]+) Date:| p/DD-WRT telnetd/ v/$1/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nDD-WRT v([^\\r\\n]+)\\r\\n| p/DD-WRT telnetd/ v/$1/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03DD-WRT (v\\d+)[^\\r\\n]*\\r\\nRelease: ([^\\r\\n]+)\\r\\n\\xff\\r\\ngateway login: | p/DD-WRT telnetd/ v/$2/ i/DD-WRT $1/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03DD-WRT (v[^\\r\\n]+)\\r\\n| p/DD-WRT telnetd/ i/DD-WRT $1/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m=^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nDD-WRT (v[\\d.]+-sp2 (?:big|mini|mega|std)) \\(c\\) \\d\\d\\d\\d NewMedia-NET GmbH\\r\\nRelease: ([\\d/]+) \\(SVN revision: (\\d+\\w*)\\)\\r\\n\\r\\n([\\w._-]+) login: = p/DD-WRT telnetd/ i/DD-WRT $1 $2 r$3/ d/WAP/ o/Linux/ h/$4/ cpe:/o:linux:linux_kernel/a\nmatch telnet m=^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nDD-WRT (v[\\d.]+)-r(\\d+)M? (big|mini|mega|std|kong(?:ac)?) \\(c\\) \\d\\d\\d\\d NewMedia-NET GmbH\\r\\nRelease: ([\\d/]+)\\r\\n\\r\\n([\\w. -]+) login: = p/BusyBox telnetd/ v/1.14.0 or later/ i/DD-WRT $1 $3 $4 r$2/ d/WAP/ o/Linux/ h/$5/ cpe:/a:busybox:busybox:1.14.0 or later/a cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nDD-WRT std kongmod Release: ([\\d/]+) \\(SVN: ([\\w:]+)\\)\\r\\n\\r\\n\\r\\n([\\w._-]+) login: | p/DD-WRT telnetd/ i/DD-WRT std kongmod $1 r$2/ d/broadband router/ o/Linux/ h/$3/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd#\\xff\\xfd\\x1f\\xff\\xfd'\\xff\\xfd\\$$| p/Siemens HiPath PBX telnetd/ d/PBX/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Welcome to Network Camera telnet daemon\\r\\n\\r\\nPassword:| p/Vivotek 3102 Camera telnetd/ d/webcam/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\nU\\.S\\. Robotics\\r\\nTotal Control \\(tm\\) NETServer 8/16\\r\\n\\r\\nlogin: | p|USRobotics TotalControl NetServer 8/16 telnetd|\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\r\\n\\*\\*\\* ADTRAN TSU ESP \\*\\*\\*\\r\\n\\r\\n   ENTER PASSWORD -> \\xff\\xfd\\x03\\xff\\xfb\\x03| p/Adtran TSU-ESP telnetd/ d/telecom-misc/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\rError: \\r\\n\\rTelnet has NOT been enabled on your target VTrak 15100 system\\r\\n| p/VTrak 15100 telnetd/ d/storage-misc/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\n\\nLantronix (SCS\\d+) Version V([\\d/().]+)\\n\\r\\nType HELP| p/Lantronix $1 Secure Console Server telnetd/ v/$2/ d/terminal server/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\nPassword :| p/Cisco 7940 VoIP Phone telnetd/ d/VoIP phone/ cpe:/a:cisco:telnet/ cpe:/h:cisco:ip_phone_7940/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\(none\\) login: | p/Tandberg MPS 800 telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01Welcome to ([-\\w\\s.]+)\\r\\nTANDBERG Codec Release ([\\w.]+)| p/Tandberg MXP Video Conference appliance telnetd/ v/$2/ i/Site: $1/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01Welcome to \\r\\nTANDBERG Codec Release ([\\w._ -]+)\\r\\nSW Release Date: ([\\w._-]+)\\r\\n\\r\\nPassword: | p/Tandberg MXP Video Conference appliance telnetd/ v/$1/ i/release date: $2/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*+\\r\\n\\* Copyright \\(c\\) 1998-2006 Huawei Technologies Co\\., Ltd\\. All rights reserved \\*\\r\\n\\*| p/Huawei Quidway s8500 switch telnetd/ d/switch/ cpe:/h:huawei:quidway_s8500/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*+\\r\\n\\*  Copyright\\(c\\) 1998-2007 Huawei Technologies Co\\., Ltd\\.  All rights reserved\\.  | p/Huawei AR28-09 router telnetd/ d/router/ cpe:/h:huawei:ar28-09/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*+\\r\\n\\*  Copyright\\(c\\) 1998-2006 Huawei Technologies Co\\., Ltd\\.  All rights reserved\\.  \\*\\r\\n| p/Huawei Quidway S5624P-PWR telnetd/ d/switch/ cpe:/h:huawei:quidway_s5624p-pwr/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\r\\nEnter password: | p/Alteon Networks ACEDirector switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r +\\*+\\n\\r +Welcome to P([-\\w_.+]+) \\n\\r +\\*+\\n\\r\\n\\rZyXEL Inc\\., Software Release ([\\w.()]+)\\n\\r| p/ZyXEL Prestige $1 ADSL modem telnetd/ v/$2/ d/broadband router/ cpe:/h:zyxel:prestige_$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\r\\n\\r\\n\\r\\nWelcome to X2301 version V\\.([-\\w_+. ()]+) IPSec from [\\d/]+ [\\d:]+\\r\\nsystemname is ([-\\w_.]+),| p/Bintec X2301 ADSL modem telnetd/ v/$1/ i/Name $2/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\r\\n\\r\\n\\(([-\\w_.]+)\\) Enter password: | p/Ascend DSLPipe ADSL modem telnetd/ d/broadband router/ h/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r *\\**\\n\\r *Welcome to Viking II\\.  \\n\\r *\\**\\n\\r\\n\\rGlobespanVirata Inc\\., Software Release VIK-([-\\w_.]+)\\n\\r| p/GlobespanVirata Viking II telnetd/ v/$1/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[1;1H\\x1b\\[J\\x1b\\[22;0H>\\x1b\\[1K\\x1b\\[999D\\r\\0login: | p/Asante IntraCore 35160 telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\n\\r\\rTelnet session\\n\\r\\r\\n\\r\\r\\r\\nCarrier Access - Adit 600\\n\\r\\n\\r[\\d: /]+\\n\\r\\n\\r Login: | p/Carrier Access Adit 600 telnetd/\nmatch telnet m|^\\x1b\\[2J\\x1b\\[1;1fATOS Telnet Server\\r\\n\\r\\nCTRL\\+d to exit\\n\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03Init Command Line Interface\\.\\. \\n\\rBoot Version: [\\d.]+\\n\\rBoot Date: [\\d :/]+\\n\\rATOS Version: ([\\d.]+)  \\([^)]+\\)\\n\\rATOS Date: [\\d :/]+\\n\\rHardware: \\w+\\n\\rProduct Code  : \\d+\\n\\rSerial Number : (\\d+)\\n\\rStarVoice version: ([\\d.]+)\\n\\rStarVoice model: (\\w+)\\n\\rLes version: [\\d.]+\\n\\r\\n\\rUser name :| p/Aethra StarVoice $4 telnetd/ v/$3/ i/ATOS $1; Serial $2/ d/broadband router/ cpe:/h:aethra:starvoice_$4/a\nmatch telnet m|^\\x1b\\[2J\\x1b\\[1;1fATOS Telnet Server\\r\\n\\r\\nCTRL\\+d to exit\\n\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03Init Command Line Interface\\.\\. \\r\\nBoot Version: [\\d.]+\\r\\nBoot Date: [\\d :/]+\\r\\nATOS Version: ([\\d.]+)  \\([^)]+\\)\\r\\nATOS Date: [\\d :/]+\\r\\nHardware: \\w+\\r\\nProduct Code  : \\d+\\r\\nSerial Number : (\\d+)\\r\\nLAN0 MAC Address : ([A-F0-9:]+)\\r\\nADSL Modem SW version: [\\w._-]+ *\\r\\nADSL Modem API version: \\d+\\r\\nADSL Driver version: [\\w._-]+\\r\\n([\\w._-]+) release: ([\\w._-]+)+\\r\\nHW encryption not supported\\r\\nVinetic fw version : [\\w._-]+\\r\\n\\r\\nUser name :| p/Aethra StarVoice $4 telnetd/ v/$5/ i/ATOS $1; Serial $2; MAC $3/ d/broadband router/ cpe:/h:aethra:starvoice_$4/a\nmatch telnet m|^\\xff\\xfb\\x01VPAD01 V([\\d.]+) settings\\r\\nPassword:| p/E-tech VPAD01 telnetd/ v/$1/ d/VoIP adapter/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n(NE[-\\d]+) NetEngine IAD ([\\d.]+) \\r\\nSerial num : Ethernet Address : ([-\\w]+)\\r\\r\\n\\r\\nPress any key to continue\\.\\.\\.| p/Verilink NetEngine IAD $1 telnetd/ v/$2/ i/MAC $3/ d/VoIP adapter/\nmatch telnet m|^\\x1b\\[0m\\x1b\\[2J\\x1b\\[01;24HHUAWEI TECHNOLOGIES,CO\\.,LTD\\.\\x1b\\[02;19H ACCESS RUNNER ADSL CONSOLE PORT\\x1b| p/Huawei Access Runner ADSL telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\x01\\n\\r\\n\\r\\n\\r\\n\\n\\n\\n\\r\\t=+\\n\\r\\t +Samsung SWL-6100AP Configuration\\n\\r\\t| p/Samsung SWL-6100AP telnetd/ d/WAP/ cpe:/h:samsung:swl-6100ap/a\nmatch telnet m|^\\r\\nEfficient 5871 IDSL Router \\(5871-601 / 5871-001 HW\\) v([-\\d.]+) Ready\\r\\n| p/Efficient Networks 5871 IDSL router telnetd/ v/$1/ d/broadband router/\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r +\\*+\\n\\r +Welcome to [-\\w_.]+\\n\\r +\\*+\\n\\r\\n\\rD-Link (?:Corp|Inc)\\., Software Release R([-\\w_.]+)[\\r\\n(]= p/D-Link ADSL router telnetd/ v/$1/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nCopyright \\(c\\) 2004 - 2006 3Com Corporation\\. All rights reserved\\.\\r\\n\\n\\r\\n\\r\\0Username: \\n\\r\\0Password: \\n\\r\\0\\r\\n\\r\\nCopyright \\(c\\) 2004 - 2006 3Com Corporation\\. All rights reserved\\.\\r\\n\\n\\r\\n\\r\\0Username: | p/3Com WX4400 WAP telnetd/ d/WAP/ cpe:/h:3com:wx4400/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\x01Connected\\x1b\\[K\\r\\n\\x1b\\[1;1HAironet (BR\\w+) V([\\d.]+) +\\x1b| p/Aironet $1 telnetd/ v/$2/ d/WAP/ cpe:/h:cisco:aironet_$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03USR ADSL Gateway\\r\\nLogin: | p/USRobotics ADSL router telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nService Processor login: | p/HP-UX GSP processor telnetd/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfd\\0\\xff\\xfd\\x1f\\r\\n.*User Access Verification\\r\\n\\r\\nUsername: |s p/Cisco telnetd/ d/router/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\nmatch telnet m|^CCProxy Telnet>CCProxy Telnet Service Ready\\.\\r\\nCCProxy Telnet>| p/CCProxy telnet configuration/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03ADSL2\\+ Wireless Router (\\w+) \\r\\nSoftware Version: ([\\w.]+)\\r\\nLogin name: | p/BT ADSL2+ $1 wireless router telnetd/ v/$2/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01Symbol Access Point User/Admin password: | p/Symbol WAP telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfd \\xff\\xfd!\\xff\\xfe\\\"\\xff\\xfc\\\"Username Access Verification\\r\\n\\r\\nLogin :| p/Zelax router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Broadband Cable Device Telnet Daemon\\n\\r\\n\\rEnter user:| p|SMC8013WG cable modem/WAP telnetd| d/WAP/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\x1bmbedded Telnet Server \\r\\n\\r\\nWARNING:  Access allowed by authorized users only\\.\\r\\n\\r\\n| p/WebStar DPX 2203 cable modem telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nEmbedded Telnet Server\\r\\n\\r\\nWARNING:  Access allowed by authorized users only\\.\\r\\n\\r\\nLogin: | p/Cisco EPC3925 cable modem telnetd/ d/broadband router/ cpe:/h:cisco:epc3925/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05Welcome to Telnet Server ([\\w._-]+)\\r\\n\\x1b\\[0m\\x1b\\[2J\\x1b\\[05;28HDimension Switch (ES-\\w+)\\x1b\\[07;22H| p/ZyXEL $2 dimension switch telnetd/ v/$1/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05Welcome to Telnet Server ([\\w._-]+)\\r\\n\\x1b\\[0m\\x1b\\[2J\\x1b\\[05;28H(SM\\w+) Managed Switch\\x1b\\[07;22H\\x7fTallahasseeAdmin-Block\\x1b\\[15;30Husername:\\x1b\\[17;30Hpassword:\\x1b\\[15;39H| p/Milan MIL-$2 switch telnetd/ v/$1/ d/switch/ cpe:/h:milan:mil-$2/\nmatch telnet m|^\\r\\n\\r\\nPassword required, but none set\\r\\n| p/Cisco Catalyst switch telnetd/ i/no password set/ d/switch/ cpe:/a:cisco:telnet/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1fWelcome to your TiVo\\r\\n\\r\\n=\\[tivo:root\\]-# | p/TiVo telnetd/ i/OPEN/ d/media device/\nmatch telnet m|^\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfb\\x01\\xff\\xfb\\x03AMBIT Cable Modem\\r\\n\\r\\nlogin: | p/Ambit cable modem telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[0m\\x1b\\[1;1H\\x1b\\[2;1H\\x1b\\[3;1H\\x1b\\[4;1H ###      ###  ###########   ##########  #############| p/Nortel Baystack 470-48t switch telnetd/ d/switch/ cpe:/h:nortel:baystack_470-48t/a\nmatch telnet m|^\\xff\\xfb\\x01AN-30 Ver\\. ([\\d.]+) \\(c\\) Copyright 2000-2002 Redline Communications Inc\\.\\r\\n\\r\\nUsername:\\0| p/Redline Communications AN-30 wireless bridge telnetd/ v/$1/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\r\\nNortel Networks Layer2-3 GbE Switch Module\\.\\r\\n\\r\\n\\r\\nEnter password: | p/Nortel Gbe switch telnetd/ d/switch/\nmatch telnet m|^refused in\\.telnetd from [-\\w_.]+ logged\\n| p/tcpwrapped telnetd/ i/refused/\nmatch telnet m|^\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r.*Broadband Satellite HN7000S VSAT|s p/Hughes HN7000S Satellite Modem telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\n\\*+\\r\\n\\*  Welcome to Print Server  \\*\\r\\n\\*     Telnet Console        \\*\\r\\n\\*+\\r\\n\\r\\nServer Name    :  ([\\w._ -]+)\\0\\r\\nServer Model   :  APSUSB1\\0+\\r\\nF/W Version    :  ([\\w._-]+)  \\0\\0\\0\\0\\r\\nMAC Address    :  ([\\w ]+)\\r\\nUptime         :  ([^\\r\\n]+)\\r\\n| p/AirLink USB print server telnetd/ v/$2/ i/name $1; MAC $3; uptime $4/ d/print server/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r +\\*+\\n\\r +Welcome to SMC DSL MODEM\\n\\r +\\*+\\n\\r\\n\\rSMC Network Inc\\., Software Release ([^\\r\\n]+)\\n\\r| p/SMC DSL modem telnetd/ v/$1/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x1fError2 negotiated with client 18 and get 1 char is a a d\\..*VOIP CPE firmware +VG112-D51\\(S\\) +V([\\d.]+)|s p/VG112-D51 VoIP CPE telnetd/ v/$1/ d/VoIP adapter/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r +\\*+\\n\\r +Welcome to Viking  \\n\\r +\\*+\\n\\r\\n\\rGlobespanVirata Inc\\., Software Release ([\\w/.]+)\\n\\r| p/Viking router telnetd/ v/$1/ d/router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x1fWelcome to OSE Shell OSE([\\d.]+)\\.\\r\\n\\$ | p/Interpeak AB embedded security device telnetd/ i/OSE $1/ d/security-misc/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[0;0H\\x1b\\[1;32m                    \\.-------------\\.| p/stchat telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[2;28H\\x1b\\[m\\x1b\\[1mNetopia (\\w+) v([\\d.]+)\\x1b| p/Netgear Netopia $1 router telnetd/ v/$2/ d/router/ cpe:/h:netgear:netopia_$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\((FSM\\w+)\\) \\r\\nUser:| p/Netgear $1 router telnetd/ d/router/ cpe:/h:netgear:$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Access DENIED\\.\\r\\n| p/OpenWrt telnetd/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03([\\w-]+) Ver ([-\\w_.]+) TELNET server\\.\\r\\0\\nCopyright \\(C\\) [\\d-]+ KYOCERA CORPORATION\\r\\0\\nCopyright \\(C\\) [\\d-]+ KYOCERA MITA CORPORATION\\r\\0\\nlogin:| p/Kyocera $1 printer telnetd/ v/$2/ d/printer/ cpe:/h:kyocera:$1/a\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03([\\w-]+) Ver ([-\\w_.]+) TELNET server\\.\\r\\0\\nCopyright\\(C\\)[\\d-]+ KYOCERA MITA Corporation\\r\\0\\nCopyright\\(C\\)[\\d-]+ Revised Edition KYOCERA MITA Corporation\\r\\0\\nAll Rights Reserved\\.\\r\\0\\nlogin: | p/Kyocera $1 printer telnetd/ v/$2/ d/printer/ cpe:/h:kyocera:$1/a\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03(NS-\\w+) Ver ([\\w._-]+) TELNET server\\.\\r\\0\\nCopyright \\(C\\) 2001-2002 KYOCERA MITA CORPORATION\\r\\0\\nlogin: | p/Okidata $1 printer telnetd/ v/$2/ d/printer/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03NS-\\w+ Ver ([\\w._-]+) TELNET server\\.\\r\\0\\nCopyright \\(c\\) 2001 KYOCERA MITA CORPORATION\\r\\0\\nCopyright \\(c\\) 2003 Revised Edition KYOCERA MITA CORPORATION\\r\\0\\nAll Rights Reserved\\.\\r\\0\\nlogin: | p/Kyocera KM-2550 printer telnetd/ v/$1/ d/printer/ cpe:/h:kyocera:km-2550/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03Imagistics (\\w+) Ver ([\\d.]+) TELNET server\\.\\r\\0\\n\\r\\0\\nlogin: | p/Imagistics $1 printer telnetd/ v/$2/ d/printer/\nmatch telnet m=\\xff\\xfb\\x01\\r\\n\\r\\n#\\r\\n\\| Siemens I-Gate LAN 2\\r\\n\\| Ver\\. ([\\d.]+) / [\\d.]+\\r\\n\\| SN\\.  (\\w+)\\r\\n\\|= p/Siemens I-Gate LAN 2 telnetd/ v/$1/ i/Serial $2/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[1;1H\\x1b\\[2K\\x1b\\[2;1H\\x1b\\[2K\\x1b\\[3;1H\\x1b\\[2K\\x1b\\[4;1H\\x1b\\[2K\\x1b\\[5;1H\\x1b\\[2K\\x1b\\[6;.*Business Policy Switch 2000| p/Nortel Business Policy Switch 2000 telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\r\\nHP ProLiant BL p-Class C-GbE2 Interconnect Switch B\\r\\n| p/HP ProLiant BL p-Class C-GbE2 switch telnetd/ d/switch/\nmatch telnet m|^\\x11\\x11\\x11\\*\\*[-\\w_.]+\\r\\r\\[CONNECT TCP/IP/[\\d.]+/TELNET\\]\\r\\nT-Mail v\\.([^ ]+) \\(C\\) 1992-99 by Andy Elkin\\r\\n\\*\\*| p/T-Mail Fidonet BBS telnetd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^BeanShell ([-\\w_.]+) - by Pat Niemeyer \\(pat@pat\\.net\\)\\nbsh % | p/BeanShell java scripting telnet console/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[1;1H\\x1b\\[2K\\x1b\\[2;1H\\x1b\\[2K\\x1b\\[3;1H\\x1b\\[2K\\x1b\\[4;1H\\x1b\\[2K\\x1b\\[5;1H\\x1b\\[2K\\x1b\\[6;1H\\x1b.*BayStack 420 |s p/Nortel BayStack 420 switch telnetd/ d/switch/ cpe:/h:nortel:baystack_420/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\nUser Access Login\\r\\n\\r\\nPassword:| p/Adtran Netvanta 3200 router telnetd/ d/router/ cpe:/h:adtran:netvanta_3200/a\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n#\\r\\n\\| ELSA LANCOM 1000 Office\\r\\n\\| Ver\\. ([-\\w_.]+) / [\\d.]+\\r\\n\\| SN\\.  ([\\w.]+)\\r\\n\\| Copyright \\(c\\) ELSA AG, Aachen\\r\\n\\r\\n([-\\w_.]+), Verbindung= p/ELSA Lancom 1000 ISDN router telnetd/ v/$1/ i/Serial $2/ h/$3/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03SHARP (MX-\\w+) Ver ([-\\w_.]+) TELNET server\\.| p/Sharp $1 printer telnetd/ v/$2/ d/printer/ cpe:/h:sharp:$1/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\nUser Access Login\\r\\n\\r\\nUsername:| p/Procurve Secure Router telnetd/ d/router/\nmatch telnet m|^\\r\\nSorry, unable to access input device\\.\\r\\n$| p/Netgear WG102 WAP telnetd/ i/disabled/ d/WAP/ cpe:/h:netgear:wg102/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r +\\*+\\n\\r +Welcome to ([-\\w_.]+) *\\n\\r +\\*+\\n\\r\\n\\rZoom Software Release Zoom (X5 GS Ver [-\\w_.]+)\\n\\r| p/Zoom ADSL modem telnetd/ v/$2/ d/broadband router/ h/$1/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03IB-21E Ver ([\\d.]+) TELNET server\\.\\r\\0\\nCopyright \\(C\\) 2001 KYOCERA CORPORATION\\r\\0\\nlogin:| p/Kyocera IB-21E printer telnetd/ v/$1/ d/printer/ cpe:/h:kyocera:ib-21e/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nOpenDreambox ([-\\w_.]+) (dm\\w+)\\r\\n| p/Dreambox $2 telnetd/ v/$1/ d/media device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nOpenDreambox ([\\w._-]+) (dm\\w+)\\r\\n| p/Dreambox OpenDreambox $2 telnetd/ v/$1/ d/media device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\ndreamelite ([\\w._-]+) (dm\\w+)\\r\\n| p/Dreambox dreamelite $2 telnetd/ v/$1/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Welcome to (DCS-\\w+) telnet daemon\\r\\n\\r\\nPassword:| p/D-Link $1 webcam telnetd/ d/webcam/ cpe:/h:dlink:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nVoIP Phone V([-\\w_.]+) settings\\r\\nPassword:| p/Soyo G668 VoIP phone telnetd/ v/$1/ d/VoIP phone/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nAIRAYA login: $| p/Airaya WAP config telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01Welcome to VCSCDCS2\\r\\r\\nTANDBERG Codec Release L([\\d.]+)\\r\\r\\n| p/Tandberg T150 Personal VoIP phone telnetd/ i/Tandberg codec $1/ d/VoIP phone/\nmatch telnet m=^\\d+\\|Connected to foobar2000 Control Server v([\\d.]+)= p/foobar2000 remote control telnetd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff.\\x01\\0?\\xff\\xfd.*Welcome to ViewStation.*Password:|s p/Polycom ViewStation Video Conferencing telnetd/ d/webcam/\nmatch telnet m|^AD6680 Gateway Software\\r\\n[-\\w_]+  \\(MAC  ([\\w:]+)\\)\\r\\n| p/Netcomm V300 VoIP adapter telnetd/ i/MAC $1/ d/VoIP adapter/ cpe:/h:netcomm:v300/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r([\\d.]+)\\r\\n\\rLinux ([-\\w_.]+) on a armv4tl \\([\\d:]+\\)\\r\\n\\r([-\\w_.]+) login:| p/AXIS webcam telnetd/ v/$1/ i/Linux $2/ d/webcam/ o/Linux/ h/$3/ cpe:/o:linux:linux_kernel:$2/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\r\\nHP ProLiant BL p-Class C-GbE2 Interconnect Switch A\\.\\r\\n| p/HP ProLiant switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Netgear DM111 ADSL2\\+ Modem \\r\\nSoftware Version: ([-\\w_.]+)\\r\\nLogin name:| p/Netgear DM111 broadband router telnetd/ v/$1/ d/broadband router/ cpe:/h:netgear:dm111/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\nPrecise/RTCS v([\\d.]+) Telnet server\\r\\n\\r\\0\\r\\nService Port Manager Active\\r\\0\\r\\n<Esc> Ends Session\\r\\0\\r\\n| p/Precise RTCS telnetd/ v/$1/ i/Liebert OpenComms remote management/ d/remote management/ o/MQX RTOS/ cpe:/o:precise:mqx:$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\*+\\r\\n\\*  Welcome to Print Server  \\*\\r\\n\\* +Telnet Console +\\*\\r\\n\\*+\\r\\n\\r\\nServer Name    :  ([\\w._-]+)\\0\\0\\0\\0\\0\\0\\r\\nServer Model   :  2U1P Print Server\\0+\\r\\nF/W Version    :  ([\\w._-]+).*\\r\\nMAC Address    :  ([\\w ]+)| p/Xterasys 2U1P print server telnetd/ v/$2/ i/name $1; MAC $3/ d/print server/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nScarlet One\\r\\nFirmware version: ([-\\w_.]+)\\r\\nScarlet\\r\\n\\r\\nPlease login:| p/Scarlet One telnetd/ i/Firmware $1/ d/VoIP adapter/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd\\x18\\r\\ntelnet session telnet\\d+ on /dev/ptyb\\d+(?:\\r\\n)?\\r\\n\\r\\nlogin: | p/Extreme Networks switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n-> \\*\\*\\*  EPSON Network Print Server \\(([^)]+)\\)  \\*| p/Epson $1 print server telnetd/ d/print server/ cpe:/h:epson:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x03\\r\\n.*KpyM Telnet/SSH Server - fully functional unregistered version\\.\\r\\n|s p/KpyM telnetd/ i/Unregistered/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\n\\r\\nMMC Technology Telnet\\r\\nMW-3000AP   \\w+\\( Combo ([-\\w_.]+) \\)\\r\\n\\r\\n| p/MMC MW-3000AP telnetd/ i/$1/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\\"D-Link Access Point - AVC\\\" login: | p/D-Link DWL-2100AP telnetd/ d/WAP/ cpe:/h:dlink:dwl-2100ap/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r.*\\n\\r\\n\\rSoftware Release R([-\\w_.]+)\\([^)]+\\)\\n\\rCopyright \\(c\\) 2001-2003 by D-Link, Inc\\.\\n\\r\\n\\rlogin: |s p/D-Link D-500G telnetd/ v/$1/ d/broadband router/ cpe:/h:dlink:d-500g/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\nGO Networks MBW System - WLP\\r\\nSW Version: ([-\\w_.]+)\\r\\n\\r\\nUser Name:| p/GO Networks MBW telnetd/ v/$1/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n +Welcome to Media Gateway Processor\\r\\n +FW version ([-\\w_.]+)\\r\\n\\r\\nLogin:| p/Avaya Call Manager telnetd/ i/Firmware $1/ d/PBX/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe!\\xff\\xfd\\x1f\\xff\\xfe\\\"\\xff\\xfe\\x03IRRd version ([-\\w_.]+) \\[\\w+\\]\\r\\n\\r\\nUser Access Verification| p/Merit Internet Routing Registry telnet config/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nWelcome to the WhatRoute TELNET Server\\.\\r\\n| p/WhatRoute telnetd/ o/Mac OS/ cpe:/o:apple:mac_os/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nCNU-550pro login: | p/C-motech CNU-550pro telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03picotux login: | p/Picotux telnetd/ d/specialized/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\r\\nCadant C3 CMTS\\r\\n| p/Cadant C3 Cable Modem Termination Server telnetd/ d/specialized/\nmatch telnet m|^\\r\\n\\(c\\) Copyright 2005, Extron Electronics, IPL T S2, V([\\d.]+),| p/Extron IPL T S2 telnetd/ v/$1/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n.*HM410dp ADSL2\\+ Router\\r\\n\\r\\nLogin:|s p/Ericsson HM410dp ADSL router telnetd/ d/broadband router/ cpe:/h:ericsson:hm410dp/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Dynalink ADSL2\\+ Router RTA1320NZ .*\\r\\nSoftware Version: ([-\\w_.]+)\\r\\n| p/Dynalink RTA1320NZ ADSL router telnetd/ v/$1/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03NS-30G Ver ([-\\w_.]+) TELNET server\\.\\r\\0\\nCopyright \\(c\\) \\d+ KYOCERA| p/Kyocera NS-30G printer telnetd/ v/$1/ d/printer/ cpe:/h:kyocera:ns-30g/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to MediaMVP!\\r\\n| p/Hauppauge MediaMVP telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\r\\n\\r\\n\\r\\nWelcome to X4100 version V\\.([-\\w_.]+) Rev\\. (\\d+) \\(Patch (\\d+)\\) from [\\d/]+ [\\d:]+\\r\\nsystemname is ([-\\w_.]+),| p/Sun X4100 telnetd/ v/$1.$2.$3/ d/terminal server/ h/$4/\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03login: $| p/Axis 2100 Network Camera telnetd/ d/webcam/ cpe:/h:axis:2100_network_camera/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nZyXEL Corporation Embedded Telnet Server \\(c\\) 2000-2003\\r\\n| p/ZyXEL Prestige cable modem telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nZyXEL ([\\w._-]+) login: | p/ZyXEL $1 broadband router telnetd/ d/broadband router/ cpe:/h:zyxel:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nHGW EC506 login: | p/Huawei EC506 WAP telnetd/ d/WAP/ cpe:/h:huawei:ec506/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\0\\xff\\xfd\\0\\xff\\xfb\\x01\\r\\nMinix  (.*)\\r\\n\\r\\n([\\w._-]+) login:| p/Minix telnetd/ v/$1/ o/Minix/ h/$2/ cpe:/a:minix:telnetd:$1/ cpe:/o:minix:minix/a\nmatch telnet m=^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03(BCM\\w+) (?:ADSL|Broadband) Router\\r\\n= p/Broadcom $1 ADSL router telnetd/ d/broadband router/ cpe:/h:broadcom:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03(BCM\\w+) ADSL Router version ([\\w._-]+ \\([\\w._-]+\\))\\r\\nLogin: | p/Broadcom $1 ADSL router telnetd/ v/$2/ d/broadband router/ cpe:/h:broadcom:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03DSL Router\\.  Welcome!\\r\\nLogin: | p/Broadcom BCM96345 ADSL router telnetd/ d/broadband router/ cpe:/h:broadcom:bcm96345/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n\\r\\n\\r\\n(BCM\\w+) Broadband Router\\r\\n| p/Broadcom $1 ADSL router telnetd/ d/broadband router/ cpe:/h:broadcom:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03(BCM[\\w._-]+) xDSL Router\\r\\nLogin: | p/Broadcom $1 DSL router telnetd/ d/broadband router/ cpe:/h:broadcom:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nBroadcom Corporation Embedded BFC Telnet Server \\(c\\) 2000-2008\\r\\n\\r\\nWARNING:  Access allowed by authorized users only\\.\\r\\n\\r\\nLogin: | p/Broadcom Foundation Class telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfd!\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nBroadcom Corporation Embedded BFC Telnet Server \\(c\\) 2000-2008\\r\\n\\r\\nWARNING:  Access allowed by authorized users only\\.\\r\\n\\r\\nLogin: | p/Broadcom Foundation Class telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*+\\r\\n\\*  Copyright\\(c\\) 2004-2006 3Com Corp\\. and its licensors\\.| p/3Com Superstack switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\r\\n\\r\\nEnter password: | p/Nortel Alteon switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r +\\*+\\n\\r +Welcome  \\n\\r +\\*+\\n\\r\\n\\rSoftware Release ([\\w._]+)\\n\\rCopyright \\(c\\) 2001-2004\\n\\r\\n\\rlogin: | p/Siemens C2-010-I ADSL router telnetd/ v/$1/ d/broadband router/ cpe:/h:siemens:c2-010-i/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Dynalink Wireless ADSL2\\+ Router (\\w+) \\r\\nSoftware Version: ([\\w._-]+)\\r\\nLogin name: | p/Dynalink $1 WAP telnetd/ v/$2/ d/WAP/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\n\\r\\nProduct type: Avaya (\\w+) Media Gateway Release ([\\w._-]+)\\r\\n\\r\\n\\r\\n\\r\\nLogin: | p/Avaya $1 media gateway telnetd/ v/$2/ d/media device/\nmatch telnet m|^\\xff\\xfd\\0\\xff\\xfd\\x1fWelcome to MLDonkey ([\\w._-]+)\\n\\x1b\\[36mWelcome on mldonkey command-line\\x1b| p/MLDonkey telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\n\\r +\\*+\\n\\r +\\*   POSTEF ADSL Modem/Router ([\\w._-]+) | p/POSTEF $1 ADSL router telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03Belkin Network USB Hub Ver ([\\w._-]+) TELNET server\\.| p/Belkin network USB hub telnetd/ v/$1/ d/specialized/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\*+\\r\\n\\r\\* +\\*\\r\\n\\r\\*   The Gemini Project   \\*\\r\\n\\r\\* +\\*\\r\\n\\r\\*+\\r\\n\\r\\r\\n\\rwelcome on your dreambox! - Kernel ([\\w._-]+) | p/Dreambox media device telnetd/ i/Linux $1/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\*+\\r\\n\\r\\* +\\*\\r\\n\\r\\* +The Gemini Project (v[\\w. ]+) +\\*\\r\\n\\r\\* +XD mod, date: (?:[\\d.]+) +\\*\\r\\n\\r\\* +!!! WITHOUT BOMB !!! +\\*\\r\\n\\r\\* +\\*\\r\\n\\r\\*+\\r\\n\\r\\r\\n\\rwelcome on your dreambox! - Kernel ([\\w._-]+) | p/Dreambox media device telnetd/ i/Linux $2; Gemini $1/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$2/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nPLi dm500 Garnet \\d+ \\(based on ([\\w._-]+)\\)\\r\\n\\rwelcome on your dreambox! - Kernel ([\\w._-]+) \\([\\d:]+\\)\\.\\r\\n\\rdreambox login: | p/Dreambox 500 media device telnetd/ i/Linux $2; PLi image Garnet, based on $1/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$2/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nPLi dm500 Jade \\d+ \\(based on ([\\w._-]+)\\)\\r\\n\\rwelcome on your dreambox! - Kernel ([\\w._-]+) \\([\\d:]+\\)\\.\\r\\n\\rdm500 login: | p/Dreambox 500 media device telnetd/ i/Linux $2; PLi image Jade, based on $1/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$2/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nPLi\\xae jade dm7020si\\r\\n\\r\\r\\n\\rdm7020si login: | p/Dreambox 7020si media device telnetd/ i/PLi image jade/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*+\\r\\n\\*          All rights reserved \\(1997-2004\\)              \\*\\r\\n\\*      Without the owner's prior written consent,| p/Huawei Quidway Eudemon firewall telnetd/ d/firewall/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*+\\r\\n\\* Copyright\\(c\\) 1998-2008 Huawei Technologies Co\\., Ltd\\.                      \\*\\r\\n\\* Without the owner's prior written consent,| p/Huawei Quidway S8505 switch telnetd/ d/switch/ cpe:/h:huawei:quidway_s8505/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*+\\r\\n\\*  Copyright\\(c\\) 2004-2008 3Com Corp\\. and its licensors\\. All rights reserved\\.   \\*\\r\\n\\*  Without the owner's prior written consent,| p/3Com 4500 switch telnetd/ d/switch/ cpe:/h:3com:4500/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*+\\r\\n\\*          All rights reserved \\(1997-2006\\)              \\*\\r\\n\\*      Without the owner's prior written consent, +\\*\\r\\n| p/3Com 4500 switch telnetd/ d/switch/ cpe:/h:3com:4500/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*+\\r\\n\\* Copyright \\(c\\) \\d+-\\d+ Hangzhou H3C Tech\\. Co\\., Ltd\\. All rights reserved\\.  \\*\\r\\n\\* Without the owner's prior written consent,| p/H3C switch telnetd/ d/switch/\nmatch telnet m|^Welcome to the DataStage Telnet Server\\.\\r\\0\\r\\nEnter user name: | p/WebSphere DataStage telnetd/ cpe:/a:ibm:infosphere_datastage/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03-?>?\\r\\nHi, my name is :     ([^\\r\\n]+)\\r\\nHere is what I know about myself:\\r\\nModel:               VSX ([\\w._-]+)\\r\\nSerial Number:       (\\w+)\\r\\nSoftware Version:    Release ([\\w._-]+) -| p/VSX $2 telnetd/ v/$4/ i/name $1; serial $3/ d/telecom-misc/\nmatch telnet m|^\\r\\nSorry, this system is engaged by a rlogin session\\.\\r\\nHost IP address: ([\\d.]+)\\.\\nLogin name: ([\\w._-]+)\\.\\n| p/3Com LANplex switch telnetd/ i/in use by $2 from $1/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x01.*\\r\\n\\r\\nUser Access Verification\\r\\n\\r\\nUsername: |s p/Cisco ASA firewall telnetd/ d/firewall/ cpe:/a:cisco:telnet/\nmatch telnet m|^Connected\\r\\nUse log command to LOGON\\r\\n$| p/IBM 2218 Link Level Converter telnetd/ d/specialized/\nmatch telnet m|^Welcome to LDK-300 system\\. Press enter\\.\\r\\nYour address is| p/LG Aria LDK-300 PBX telnetd/ d/PBX/\nmatch telnet m|^\\d+-NENET AB Ethernet Com Card V([\\w._-]+)  Built .*\\r\\nDebugOutput: \\d+  DebugLevel: \\d+\\r\\nHit 0-4 to change debug level, S for socket status\\r\\n| p/NENET AB ethernet telnet config/ v/$1/\nmatch telnet m=^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03ADSL Router\\r\\nLogin (?:user|name): = p/ADSL router telnet config/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03AH4021\\r\\nLogin: | p/AliceBox AH4021 telnet config/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to Linux \\(ZEM300\\) for MIPS\\r\\n\\rKernel ([\\w._-]+) ([\\w._-]+) on an MIPS\\r\\n| p/ZKSoftware ZEM300 embedded Linux telnetd/ i/Kernel $1; MIPS/ o/Linux/ h/$2/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^uShare \\(([\\w._-]+)\\) \\(Built .*\\)\\nFor a list of registered commands type \\\"help\\\"\\n\\n> | p/GeeXboX uShare telnetd/ v/$1/\nmatch telnet m|^SMPlayer ([\\w._-]+)\\r\\nType help for a list of commands\\r\\n| p/SMPlayer telnetd/ v/$1/\nmatch telnet m|^S: FTGate [\\w._-]+ \\[Build ([\\w._-]+) .*\\]\\n\\r| p/Floosietek FTgate telnetd/ v/$1/\nmatch telnet m|^Slirp command-line ready \\(type \\\"help\\\" for help\\)\\.\\r\\nSlirp> | p|Slirp PPP/SLIP-on-terminal emulator telnetd|\nmatch telnet m|^Slirp v([\\w._-]+)(?: \\(BETA\\))?(?: FULL_BOLT)?\\n\\nCopyright \\(c\\) 1995,1996 Danny Gasparovski and others\\.\\n| p|Slirp PPP/SLIP-on-terminal emulator telnetd| v/$1/\nmatch telnet m|^Sorry, already connected\\.\\r\\n$| p|Slirp PPP/SLIP-on-terminal emulator telnetd| i/connection in progress/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nCopperJet ([\\w._-]+) RouterPlus .*\\r\\nFirmware version: ([\\w._ -]+)\\r\\nAllied Data Technologies\\r\\n\\r\\nPlease login: | p/Allied Data CopperJet $1 telnetd/ v/$2/ d/broadband router/ cpe:/h:allieddata:copperjet_$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03ASUS500ROUTER login: | p/ASUS WL-500g WAP telnetd/ d/WAP/\nmatch telnet m|^\\n\\rMordor MUD\\n\\r  Mordor v([\\w._-]+)\\n\\rProgrammed by:\\n\\r  Brooke Paul, Paul Telford & John P\\. Freeman\\n\\r| p/Mordor MUD telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03.*Firmware Version: ([\\w._-]+)\\r\\n\\rBuilt: .*\\r\\n\\rOA Bay Number:  \\d+ \\r\\n\\rOA Role: .*\\r\\n\\r([\\w._-]+) login:|s p/HP BladeSystem Onboard Administrator telnetd/ i/FW $1/ d/remote management/ h/$2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Welcome to the Windows CE Telnet service on MP370\\r\\n\\r\\nPocket CMD v ([\\w._-]+)\\r\\n\\\\> \\n\\r\\n\\\\> \\\\>| p/MP370 PDA Pocket CMD telnetd/ v/$1/ d/PDA/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n3Com Access Point 7760 login: | p/3Com 7760 WAP telnetd/ d/WAP/ cpe:/h:3com:7760/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03 login: | p/Netgear DG834GT telnetd/ d/broadband router/ cpe:/h:netgear:dg834gt/a\nmatch telnet m|^\\r\\nSiemens 5940 T1E1 \\[COMBO\\] Router \\(5940-001\\) v([\\w._-]+) Ready\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfe\\x01Username: | p/Siemens 5940 T1E1 router telnetd/ v/$1/ d/router/ cpe:/h:siemens:5940_t1e1/a\nmatch telnet m|^\\r\\n\\*+\\r\\n\\* +Network Services Processor                \\*\\r\\n\\*                      Version ([\\w._-]+)                       \\*\\r\\n\\*                ESI \\(Estech Systems, Inc\\.\\)| p/Estech Systems Inc Network Services Processor telnetd/ v/$1/ d/telecom-misc/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03PRICOM 3100 Ver ([\\w._-]+) TELNET server\\.\\r\\0\\nCopyright \\(C\\) 2002-2004 silex technology, Inc\\.\\r\\0\\nlogin:| p/PRICOM 3100 print server telnetd/ v/$1/ d/print server/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\r\\n\\r\\r\\nWelcome to Aerohive Wireless Product\\r\\r\\n\\r\\r\\nlogin: | p/Aerohive WAP telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nLexmark International Telnet\\r\\n\\r\\nlogin: | p/Lexmark C500 printer telnetd/ d/printer/ cpe:/h:lexmark:c500/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Siemens ADSL SL-2141 IS \\r\\nSoftware Version: ([\\w._-]+)\\r\\n| p/Siemens ADSL SL-2141 IS telnetd/ v/$1/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01Alcatel-Lucent: A7510\\r\\nA7510_(R\\d+) .*\\r\\n\\r\\n\\r\\nLogin: | p/Alcatel-Lucent A7510 Media Gateway telnetd/ v/$1/ d/telecom-misc/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfd\\x17\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd \\xff\\xfd#\\r\\n\\r\\n Welcome to OpenVMS \\(TM\\) VAX Operating System, Version V([\\w._-]+)    \\r\\n\\r\\n\\r\\0Username: | p/MultiNet OpenVMS telnetd/ i/OpenVMS $1; VAX/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n>>>  System ([\\w._-]+) - OpenVMS Alpha V([\\w._-]+)  <<<\\r\\n\\r\\n\\rUsername: | p/OpenVMS telnetd/ i/OpenVMS $2; Alpha/ o/OpenVMS/ h/$1/ cpe:/o:hp:openvms/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n Welcome to OpenVMS \\(TM\\) Alpha Operating System, Version V([\\w._-]+)  \\r\\n\\r\\n\\rUsername: | p/OpenVMS telnetd/ i/OpenVMS $1; Alpha/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\r\\nGbE2c (?:L2/L3 )?Ethernet Blade Switch for HP c-Class BladeSystem\\.\\r\\n\\r\\nCopyright\\(C\\)2003 Hewlett-Packard Development Company, L\\.P\\.\\r\\n\\r\\n\\r\\nEnter (?:password|tacacs username): = p/HP GbE2c Ethernet Blade Switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to \\r\\n\\r\\r\\n\\r       ###### .*Have a good time !! ;-\\)\\r\\n\\rCyberVia login:|s p/Cybervia media center telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\*+\\r\\n\\r\\* +\\*\\r\\n\\r\\*   The Gemini Project   \\*\\r\\n\\r\\* +\\*\\r\\n\\r\\*+\\r\\n\\r\\r\\n\\rOpenDreambox ([\\w._-]+) (\\w+)\\r\\n| p/Dreambox $1 telnetd/ i/OpenDreambox $2/ d/media device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\*+\\r\\n\\r\\* +\\*\\r\\n\\r\\*   The Gemini Project    \\*\\r\\n\\r\\* +\\*\\r\\n\\r\\*+\\r\\n.*Kernel ([\\w._-]+) \\(\\d+:\\d+:\\d+\\)\\.\\r\\n\\rdreambox login: |s p/Dreambox telnetd/ d/media device/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\*+\\r\\n\\r\\* +\\*\\r\\n\\r\\*   The Gemini Project   \\*\\r\\n\\r\\* +\\*\\r\\n\\r\\*+\\r\\n\\r\\r\\n\\rOpenDreambox ([\\w._-]+) (\\w+)\\r\\n| p/Dreambox $1 telnetd/ i/OpenDreambox $2/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfe\\\"\\xff\\xfb\\x01\\x1b\\[7m\\x1b\\[f\\x1b\\[9B\\x1b\\[9B\\x1b\\[5B  ArrowKey Or AZ:Move Cursor, Enter:Select, ESC:Escape, L:Line Draw, X:Redraw   \\x1b\\[0m\\x1b<\\x1b>\\x1b\\[\\?25l\\x1b\\[0m\\x1b\\[2J\\x1b\\(B\\x1b\\)0\\x0f\\x1b\\[7m\\x1b\\[f +Areca Technology Corporation RAID Controller| p/Areca RAID-Controller telnetd/ d/storage-misc/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03U\\.S\\. Robotics ADSL 4-Port Router\\r\\nLogin: | p/USRobotics ADSL router telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Siemens ADSL SL2-141-I HSN2 \\r\\nSoftware Version: ([\\w._-]+)\\r\\nLogin name: | p/Siemens ADSL SL2-141-I HSN2 ADSL telnetd/ v/$1/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03ROTAL Wireless ADSL2\\+ Router RTA1025W \\r\\nSoftware Version: ([\\w._-]+)\\r\\nLogin name: | p/ROTAL RTA1025W WAP telnetd/ v/$1/ d/WAP/\nmatch telnet m%^\\xff\\xfd\\x01\\xff\\xfd(?:|\\x1f|\\x1f\\xff\\xfd)\\x21\\xff\\xfb\\x01\\xff\\xfb\\x03 === IMPORTANT ============================\\r\\n  Use 'passwd' to set your login password\\r\\n  this will disable telnet and enable SSH\\r\\n.*\\r\\n KAMIKAZE \\(bleeding edge, (r\\d+)\\)%s p/BusyBox telnetd/ i/no password; OpenWrt Kamikaze $1/ d/WAP/ o/Linux/ cpe:/a:busybox:busybox/ cpe:/o:linux:linux_kernel/a\nmatch telnet m%^\\xff\\xfd\\x01\\xff\\xfd(?:|\\x1f|\\x1f\\xff\\xfd)\\x21\\xff\\xfb\\x01\\xff\\xfb\\x03 === IMPORTANT ============================\\r\\n  Use 'passwd' to set your login password\\r\\n  this will disable telnet and enable SSH\\r\\n ------------------------------------------\\r\\n\\r\\n\\r\\nBusyBox v([\\w._-]+) \\(.*\\) [Bb]uilt-in shell \\(ash\\)\\r\\n.*\\r\\n KAMIKAZE \\(([\\w._-]+)\\)%s p/BusyBox telnetd/ v/$1/ i/OpenWrt Kamikaze $2; no password/ d/WAP/ o/Linux/ cpe:/a:busybox:busybox:$1/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03 === IMPORTANT ============================\\r\\n  Use 'passwd' to set your login password\\r\\n  this will disable telnet and enable SSH\\r\\n ------------------------------------------\\r\\n\\r\\n\\r\\nBusyBox v(.*) built-in shell \\(ash\\)\\r\\n.*\\r\\n ATTITUDE ADJUSTMENT \\(bleeding edge, (r\\d+)\\)|s p/BusyBox telnetd/ v/$1/ i/no password; OpenWrt Attitude Adjustment $2/ d/WAP/ o/Linux/ cpe:/a:busybox:busybox:$1/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n === IMPORTANT ============================\\r\\n  Use 'passwd' to set your login password\\r\\n  this will disable telnet and enable SSH\\r\\n ------------------------------------------\\r\\n\\r\\n\\r\\nBusyBox v(.*) built-in shell \\(ash\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\n ___        ___  ___                                                 \\r\\n\\(  _${backquote}\\\\  _ /'___\\)'___\\)      Bifferboard mini-distribution v([\\w._-]+)\\r\\n| p/BusyBox telnetd/ v/$1/ i/Bifferboard $2/ o/Linux/ cpe:/a:busybox:busybox:$1/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03                        =======================\\r\\n                               DSL-500B       \\r\\n                        =======================\\r\\nLogin:| p/D-Link DSL-500B telnetd/ d/broadband router/ cpe:/h:dlink:dsl-500b/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\r\\nAG (\\d+)\\r\\n\\r\\n\\r\\nLogin: | p/Nomadix AG $1 telnetd/ d/WAP/ cpe:/h:nomadix:ag_$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to Linux \\(ZEM500\\) for MIPS\\r\\n\\rKernel ([\\w._-]+) \\w+ on an MIPS\\r\\n\\rZEM500 login: | p/ZKSoftware ZEM500 fingerprint reader telnetd/ i/Linux $1; MIPS/ d/security-misc/ o/Linux/ cpe:/o:linux:linux_kernel:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\x01Connected\\r\\n\\n\\rAironet BR500E V([\\w._-]+)                Main Menu| p/Cisco Aironet BR500E telnetd/ v/$1/ d/WAP/ cpe:/a:cisco:telnet:$1/ cpe:/h:cisco:aironet_br500e/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03login: | p/D-Link 524, DIR-300, or WBR-1310 WAP telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03TrioLink \\(ADSL IAD\\)\\r\\nLogin: | p/Nortel-LG VoIP IAD telnetd/ d/PBX/\nmatch telnet m|^Linux ([\\w._-]+) \\[INSTALL: [\\d-]+\\]\\nLASTPATCH: [\\d:-]+\\n| p/Netkit-telnetd/ i/Linux $1/ o/Linux/ cpe:/a:netkit:netkit/ cpe:/o:linux:linux_kernel:$1/a\nmatch telnet m|^\\xff\\xfb\\0\\xff\\xfd\\0\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\x1b\\[0;37;40m\\x1b\\[2J\\x1b\\[1;1HLogin Name:  | p/HP Remote Insight Lights-Out telnetd/ d/remote management/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Xcelerator IP \\r\\nLogin: | p/Vertical Xcelerator IP telnetd/ d/VoIP adapter/\nmatch telnet m|^Console is locked by another telnet/SSH application!\\n| p/Arris tm602g cable modem telnetd/ i/console in use/ d/broadband router/ cpe:/h:arris:tm602g/a\nmatch telnet m|^odec=\\d+ u=\\d+, p=\\d+, i=\\d+, max entries = \\d+ \\r\\n\\d+: IMGREQUEST: request_stats, image buffers available = \\d+ \\r\\n\\d+: MAIN: (\\d+) images\\(J=\\d+, P=\\d+, I=\\d+\\) stored on disk in last minute| p/Dedicated Micros Digital Sprite 2 DVR debug telnetd/ i/$1 images saved in last minute/ d/webcam/\nmatch telnet m|^\\r\\nSiemens 5940 T1E1 \\[COMBO\\] Router \\([\\w._-]+\\) v([\\w._-]+) Ready\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfe\\x01Username: | p/Siemens 5940 T1E1 router telnetd/ v/$1/ d/router/ cpe:/h:siemens:5940_t1e1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nWelcome to Dinion-IP-NWC [\\d.]+ from [\\d.]+\\r\\n| p/Dinion IP NWC webcam telnetd/ d/webcam/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Welcome to the Agilent PNA Network Analyzer at ([\\w._-]+)\\r\\n\\r\\nSCPI> | p/Agilent PNA Network Analyzer SCPI telnetd/ d/specialized/ h/$1/\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n#\\r\\n\\| ELSA LANCOM DSL/([\\w._-]+) Office\\r\\n\\| Ver\\. ([\\w._-]+) / ([\\w._-]+)\\r\\n\\| SN\\.  (\\w+)\\r\\n\\| Copyright \\(c\\) ELSA AG, Aachen\\r\\n\\r\\n= p|ELSA Lancom DSL/$1 Office router telnetd| v/$2 $3/ i/Serial $4/ d/router/\nmatch telnet m|^\\n\\rCMI SEC\\n\\rProgram: +\\d+\\n\\rMajor\\.Minor\\.Rel:  ([\\w._-]+)\\n\\rMAC Address:      ([\\w:]+)\\n\\r\\n\\rPress <ENTER> to go into setup mode\\.| p/ADP IP Timeclock telnetd/ v/$1/ i/MAC $2/ d/specialized/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfe\\x01\\xff\\xfd\\0\\r\\nser2net port \\d+ device (/dev/[-\\w_]+) \\[\\d+ \\w+\\] \\(Debian GNU/Linux\\)\\r\\n|s p/ser2net telnetd/ i/Debian; serial port $1/ o/Linux/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^Port's device already in use\\n\\r$| p/ser2net telnetd/ i/device in use/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe\\x01\\n\\rTerminal shell v1\\.0\\n\\r\\rCopyright \\xa9\\d+ Netopia, Inc\\.  All rights reserved\\.\\n\\r\\rNetopia Model ([\\w-]+) Wireless DSL Ethernet Switch\\n\\rRunning Netopia SOC OS version ([\\d.]+ \\(build \\w+\\))\\n| p/Netopia $1 wireless ADSL router telnetd/ i/SOC OS $2/ d/WAP/ o/SOC OS/ cpe:/h:netopia:$1/a cpe:/o:netopia:soc_os:$2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe\\x01\\n\\rTerminal shell v1\\.0\\n\\r\\rCopyright \\xa92008 Motorola, Inc\\.  All rights reserved\\.\\n\\r\\rNetopia Model ([\\d-]+)(?: AnnexA)? High-Power Wireless DSL Ethernet Managed Switch\\n\\rRunning Netopia SOC OS version ([\\w.-]+ \\(build \\w+\\))\\n| p/Netopia $1 wireless ADSL router telnetd/ i/SOC OS $2/ d/WAP/ o/SOC OS/ cpe:/h:netopia:$1/a cpe:/o:netopia:soc_os:$2/\n# The esses spell \"DSLink 260E\".\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03ssss   ssss sss     s         ss           sss   sss   sss  sssss \\r\\n s  s s   s  s                 s          s   s s  s  s   s  s   \\r\\n s  s s      s                 s          s   s s     s   s  s  \\r\\n s  s  ss    s     ss   ssss   s sss         s  ssss  s   s  sss  \\r\\n s  s    s   s      s    s  s  s s          s   s   s s   s  s   \\r\\n s  s     s  s      s    s  s  sss         s    s   s s   s  s    \\r\\n s  s s   s  s   s  s    s  s  s  s       s     s   s s   s  s   \\r\\nssss  ssss  ssssss sss  sss sssss ss      sssss  sss   sss  sssss\\r\\nLogin: $| p/Optimcom DSLink 260E ADSL router telnetd/\nmatch telnet m|^(?:\\x1b\\[23;1H\\r\\n\\r\\x1b\\[\\?25h\\x1b\\[23;11H\\x1b\\[24;1HSession Terminated, Connect again\\r\\n\\r\\x1b\\[\\?25h\\x1b\\[24;1H)?\\xff\\xfd\\x18\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[\\?7l\\x1b\\[3;23r\\x1b\\[\\?6l\\x1b\\[1;1H\\x1b\\[\\?25l\\x1b\\[1;1HProCurve (J\\w+) Switch (\\d+)\\r\\n\\rFirmware revision ([^\\r\\n]+)\\r\\n| p/HP ProCurve Switch $2/ i/JetDirect $1; firmware $3/ d/switch/ cpe:/h:hp:procurve_switch_$2/ cpe:/o:hp:procurve_switch_software:$3/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\n\\r\\nCache for Windows NT \\(Intel\\) 5\\.0\\.18 \\(Build 6103\\) [^\\r\\n]*\\r\\nNode \\w+ Port: ([\\w._-]+)/(\\d+)\\r\\n\\r\\nUsername: | p/InterSystems Cache ftpd/ i/port $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\.\\r\\n\\r\\nWelcome to the SX-2000 \\(vxTarget\\)\\r\\n\\r\\nlogin: \\0| p/Mitel SX-2000 PBX telnetd/ d/PBX/\nmatch telnet m|^\\w{12}\\r\\nETHMAC ([0-9a-f:]+)\\r\\nWIFIMAC ([0-9a-f:]+)\\r\\n>| p/Roku media player telnetd/ i/Ethernet MAC: $1, wi-fi MAC: $2/ d/media device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWireless AP Manager Console [^\\r\\n]+\\r\\n please enter your password: | p/Ovislink AirLive WAP telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfc\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x1f\\xff\\xfb\\\"\\xff\\xfb\\x05Login:| p/VBrick 4300 video encoder telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nYou are connected to configuration tool\\r\\nEnter the password: | p/Alvarion BreezeMAX WiMAX WAP telnetd/ d/WAP/\nmatch telnet m%\\xff\\xfe\\x01\\r\\n\\r\\n\\+============================================================================\\+\\r\\n\\|             \\[ interSeptor Configuration Utility Main Menu \\]                \\|\\r\\n\\+============================================================================\\+\\r\\n\\r\\nEnter Password: % p/Jacarta interSeptor environmental monitor telnetd/ d/specialized/\nmatch telnet m|^\\nThis is packet-o-matic built-([\\d-]+)\\nCopyright Guy Martin 2006-20\\d\\d\\n\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x1f\\xff\\xfe\\\"pom> | p/packet-o-matic telnetd/ i/built $1/\n# The ASCII art is a huge Conexant logo.\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n                ,vvvdP9P\\?\\?\\?\\^   ,,,\\r\\n              vvd###P\\^${backquote}\\^         vvvvv v\\r\\n         vv#####\\?\\^                  \\?\\?\\?\\?####vv,\\r\\n      vv####\\?\\?     ,vvvdP\\?\\?\\?\\^  ,,,        \\?\\?##\\^\\r\\n     v#####\\?    ,vvd##P\\?\\^        #\\?#v#vvv\\r\\n   v#####\\?    v###P\\^    ,vvv,        '\\?#\\?,\\r\\n  ######\\?   ####\\?\\^ ,vd#P\\?\\^     ${backquote}\\?\\?\\?##\\r\\n  #####\\?   v####  ,d##P\\^           ''\\r\\n ######   v####  \\]###L                   _   _          _                  ___\\r\\n #####\\?   v####  \\]##L                   /   / \\\\  \\|\\\\ \\|  \\|_  \\\\/   /\\\\   \\|\\\\ \\|   \\|\\r\\n ######    ####  \\]###L                  \\\\_  \\\\_/  \\| \\\\\\|  \\|_  /\\\\  /--\\\\  \\| \\\\\\|   \\|\\r\\n= p/Zoom X6 ADSL router telnetd/ d/broadband router/ cpe:/h:zoom:x6/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05\\r\\n\\*\\*\\* Welcome to VTM   \\*\\*\\*\\r\\n\\r\\n\\r\\n\\rLogin   : | p/Stratus ftServer VTM telnetd/ d/remote management/\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x03\\xff\\xfb\\x01jBASE Telnetd Server Version ([\\d.]+) \\n\\r\\r\\nAccount Name: | p/jBASE telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nWelcome to Ring v([\\d.]+) Copyright \\(C\\) AMX Corp\\. 2002-2003\\r\\n| p/AMX NXD-CV5 Modero touch panel telnetd/ v/$1/ d/specialized/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03TESTING MODEL ADSL Router\\r\\nLogin: | p/D-Link DSL-2542B ADSL router telnetd/ d/broadband router/ cpe:/h:dlink:dsl-2542b/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\[([^]]*)\\]\\[([^]]*)\\]\\[([^]]*)\\]\\r\\n| p/Neuf Box telnetd/ v/$2/ i/hardware $1; firmware $3/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\[(NB4-[\\w-]+)\\]\\[NB4-MAIN-R([\\w._-]+)\\]\\[NB4-ADSL-\\w+\\]\\r\\nLost login: | p/Neuf Box telnetd/ v/$2/ i/hardware $1/\nmatch telnet m|^\\xff\\xfe\\\"\\xff\\xfb\\x01\\x1b<\\x1b>\\x1b\\[\\?25l\\x1b\\[0m\\x1b\\[2J\\x1b\\(B\\x1b\\)0\\x0f\\x1b\\[7m\\x1b\\[f                  Areca Technology Corporation RAID Controller             | p/Areca 1280 RAID controller telnetd/ d/storage-misc/\nmatch telnet m|^Secure Defrag Service v([\\d.]+)\\r\\n \\[\\]\\r\\nlocal time: ([^\\r\\n]*)\\r\\n| p/Secure Defrag Service telnetd/ v/$1/ i/local time $2/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Huawei (SmartAX \\w+)\\r\\nLogin: | p/Huawei $1 ADSL router telnetd/ d/broadband router/ cpe:/h:huawei:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n\\r\\n\\r\\n\\*{76}\\r\\n\\r\\n +Minolta Network Configuration Utility\\r\\n +Minolta\\r\\n +Version ([\\w.]+)\\r\\n| p/Minolta PagePro 20 printer telnetd/ v/$1/ d/printer/ cpe:/h:minolta:pagepro_20/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x18\\xff\\xfb\\x03$| p/Tandem Himalaya K2000 telnetd/ o/GuardianOS/ cpe:/o:tandem:guardian/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03                  ZebraNet PrintServer Configuration Utility\\r\\n\\r\\n Type your password\\. Press Enter when finished\\.\\r\\n\\r\\n Password: | p/Zebra print server telnetd/ d/print server/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfe\\x01\\xff\\xfb\\x01\\s+ZebraNet Internal Wired PS Configuration Utility\\r\\n\\r\\n Type your password\\. Press Enter when finished\\.\\r\\n\\r\\n Password: | p/Zebra print server telnetd/ d/print server/\nmatch telnet m|^\\xff\\xfb\\x01\\n\\rWelcome to TrueTime Network Interface\\n\\r\\rUser name: | p/TrueTime GPS clock telnetd/\nmatch telnet m|^MythFrontend Network Control\\r\\nType 'help' for usage information\\r\\n---------------------------------\\r\\n# | p/mythfrontend MythTV control/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\(Cisco Controller\\) \\r\\nUser: | p/Cisco 4402 WLAN controller telnetd/ d/remote management/ cpe:/a:cisco:telnet/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\(Cisco Controller\\) \\r\\nUser: | p/Cisco WLAN controller telnetd/ d/remote management/ cpe:/a:cisco:telnet/\nmatch telnet m|^\\x1b\\[0m\\r\\nWelcome to (IC-\\d+)!\\r\\n\\r\\n\\x1b7\\x1b\\[\\?25l\\x1b\\[501;501H\\x1b\\[6n\\x1b8\\x1b\\[\\?25h\\r\\x1b\\[0m\\x1b\\[1mIC-\\d+ # \\x1b\\[0m\\x1b\\[J\\r\\x1b\\[10C| p/ICOM $1 amateur radio telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\x0c\\x1b\\[2JEnter Password: | p/InterTel IPRC VoIP management card telnetd/ d/PBX/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r.*\\xaf\\xaf\\xaf\\xaf\\xaf\\r\\n\\r               Kernel ([\\w._-]+) \\(00:17:54\\)\\r\\n\\rdreambox login: |s p/Dreambox DVB telnetd/ i/Linux $1/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r\\r\\n\\rWelcome to DreamBox\\.\\r\\n\\rRunning under Kernel ([\\w._-]+) \\.\\r\\n\\rBased on (Gemini [\\w._-]+ GUI)\\.\\r\\n\\rKernel and utilities compiled by SatDream\\.\\r\\n\\r\\r\\n\\r\\r\\n\\rhttp://www\\.satderam\\.ru , info@satdream\\.ru , dreambox@satdream\\.ru\\r\\n| p/Dreambox SatDream DVB telnetd/ i/Linux $1; based on $2/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nRSC version ([\\d.]+) \\(([\\w._-]+)\\)\\r\\n\\r\\nPlease login: | p/Sun Remote System Control telnetd/ v/$1/ d/remote management/ h/$2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\r\\n\\r\\n\\r\\nWelcome to (R\\w+) version (.*) from [\\d /:]+\\r\\nsystemname is ([\\w@_.-]+), location ([^\\r\\n]*)\\r\\n\\r\\n\\r\\nLogin: | p/Funkwerk bintec $1 router/ v/$2/ i/location: $4/ h/$3/ cpe:/h:funkwerk:bintec_$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03FAST(\\w+) ADSL Router \\(Software Version:([\\w._-]+)\\)\\r\\nLogin: | p/Sagem F@st $1 ADSL router telnetd/ v/$2/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[H\\x1b\\[2J\\x1b\\[H ------------------------------------------------------------------------------\\r\\r\\n                                D A T A C O M\\r\\r\\n +(DM\\w+) - Minimux Router\\r\\r\\n| p/Datacom $1 router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[H\\x1b\\[2J\\x1b\\[H ------------------------------------------------------------------------------\\r\\r\\n                                D A T A C O M\\r\\r\\n +(DM\\w+) - G\\.SHDSL 2 Wire Modem Router\\r\\r\\n| p/Datacom $1 router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\r\\nBNT Layer 2/3 Copper Gigabit Ethernet Switch Module for IBM BladeCenter\\.\\r\\n\\r\\n\\r\\nEnter password: | p|Nortel Layer 2/3 Gigabit Ethernet switch for IBM BladeCenter| d/switch/\n# The ascii art spells \"newcs\".\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\\"\\r\\n#####   ####  ##   ##  ####   #####\\r\\n##  ## ##  ## ## # ## ##  ## ##\\r\\n##  ## ###### ####### ##      #####\\r\\n##  ## ##     ####### ##  ##      ##\\r\\n##  ##  #####  ## ##   ####  ######\\r\\n     A Butter Team Creation\\r\\n\\r\\nPassword :| p/NewCS card sharing system telnetd/\nmatch telnet m|^sysrqd password: | p/sysrqd/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n(DGFV\\w+) login: | p/Netgear $1 WAP telnetd/ d/WAP/ cpe:/h:netgear:$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n(FVX\\w+) login: | p/Netgear $1 firewall/ d/firewall/ cpe:/h:netgear:$1/a\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[00H\\+----------------------------------------------------------------------\\+\\r\\0\\r\\n.*\\| Motorola (PTP \\d+) Lite Console Application +\\|\\r\\0\\r\\n.*\\| Software Version: ([\\w._-]+) +\\|\\r\\0\\r\\n\\| Hardware Version: ([\\w._-]+) +\\|\\r\\0\\r\\n=s p/Motorola $1 WAP telnetd/ v/$2/ i/hardware version $3/ cpe:/h:motorola:$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Actiontec DSL Gateway\\r\\nLogin: | p/Actiontec GT704-WGB WAP telnetd/ d/WAP/ cpe:/h:actiontec:gt704-wgb/a\nmatch telnet m|^\\xff\\xfc\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x1f\\xff\\xfb\\\"\\xff\\xfb\\x05TiMOS-([\\w._-]+) cpm/hops ALCATEL SR (\\w+)| p/Alcatel $2 SR router telnetd/ d/router/ o/TiMOS $1/ cpe:/o:alcatel-lucent:timos:$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfd\\0QEMU ([\\w._-]+) monitor - type 'help' for more information\\r\\n\\(qemu\\) | p/QEMU monitor telnetd/ v/$1/ cpe:/a:qemu:qemu:$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\0\\xff\\xfc\\0\\r\\0\\n(SC\\w+) Telnet session\\r\\0\\n\\r\\0\\nUsername: \\xff\\xf6| p/Beck IPC@CHIP $1 embedded telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\x1b\\[1;1H\\x1b\\[2J\\r\\n\\r\\nObeh\\xf6riga \\xe4ga ej tilltr\\xe4de\\r\\n\\r\\n\\xf6vertr\\xe4delse beivras\\.\\r\\n\\r\\n\\rUsername: | p/OpenVMS 8.3 telnetd/ i/Swedish/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch telnet m|^\\n\\rTA-005-FXO1-122M : CLI\\n\\rLogin : $| p/Open EasyChat210 VoIP phone telnetd/ d/VoIP phone/\nmatch telnet m|^\\xff\\xfe\\0\\xff\\xfc\\0\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f$| p/HP StorageWorks tape autoloader telnetd/ d/storage-misc/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to (OpenPhone \\w+) IP\\r\\n\\rVersion ([\\w._-]+)\\r\\n\\r\\r\\n\\rlast reset cause: software reset \\(memory controller also reset\\)\\r\\n\\r\\r\\n\\r([\\w._-]+) login: | p/Aastra $1 telnetd/ v/$2/ d/VoIP phone/ h/$3/ cpe:/h:aastra:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*{80}\\r\\n\\*  Copyright\\(c\\) 2004-2007 3Com Corp\\. and its licensors\\. All rights reserved\\.   \\*\\r\\n\\*  Without the owner's prior written consent,                                  \\*\\r\\n\\*  no decompiling or reverse-engineering shall be allowed\\.| p/3Com 5500G-EI switch telnetd/ d/switch/ cpe:/h:3com:5500g-ei/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*{80}\\r\\n\\*  Copyright\\(c\\) 2004-2009 3Com Corp\\. and its licensors\\. All rights reserved\\.   \\*\\r\\n\\*  Without the owner's prior written consent,                                  \\*\\r\\n\\*  no decompiling or reverse-engineering shall be allowed\\.| p/3Com 5500-EI switch telnetd/ d/switch/ cpe:/h:3com:5500-ei/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*{78}\\r\\n\\* Copyright \\(c\\) 2004-2010 3Com Corp\\. and its licensors\\. All rights reserved\\. \\*\\r\\n\\* This software is protected by copyright law and international treaties\\.    \\*\\r\\n\\* Without the prior written permission of 3Com Corporation and its licensors,\\*\\r\\n| p/3Com 4500G switch telnetd/ d/switch/ cpe:/h:3com:4500g/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*{57}\\r\\n\\*          All rights reserved \\(1997-2005\\)              \\*\\r\\n\\*      Without the owner's prior written consent,       \\*\\r\\n\\*no decompiling or reverse-engineering shall be allowed\\.\\*\\r\\n| p/3Com SuperStack 3 Switch 4500 or Huawei Quidway AR28-09 WAP telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\*{78}\\r\\n\\* Copyright \\(c\\) 2010-2\\d\\d\\d Hewlett-Packard Development Company, L\\.P\\. {10}\\*\\r\\n\\* Without the owner's prior written consent, {33}\\*\\r\\n\\* no decompiling or reverse-engineering shall be allowed\\. {20}\\*\\r\\n\\*{78}\\r\\n\\r\\n\\r\\nLogin authentication\\r\\n\\r\\n\\r\\nUsername:| p/HP Comware switch telnetd/ d/switch/ o/Comware/ cpe:/o:hp:comware/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\x01\\n\\r\\n\\r\\n\\r\\n\\n\\n\\n\\r\\t={51}\\n\\r\\t       Samsung ([\\w()-]+) Configuration\\n\\r\\t={51}\\n\\r\\n\\r\\tTo configure the Access Point, the password is required\\.\\n\\r\\tEnter password:| p/Samsung $1 WAP telnetd/ d/WAP/ cpe:/h:samsung:$1/a\nmatch telnet m|^220 SB06D2F0 FTP server \\(INTERFACE version ([\\w._-]+)\\) ready\\.\\n| p/Kyocera Mita KM-1530 printer telnetd/ v/$1/ d/printer/ cpe:/h:kyocera:mita_km-1530/a\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x18Georgia SoftWorks Telnet Server for Windows NT/2000/XP/2003/Vista/2008 Ver\\. ([\\w._-]+)\\n\\rEvaluation copy, \\d+ users enabled\\. Expiration date is ([\\d/]+)\\.\\n\\r\\n\\rUser \\d+ of \\d+\\n\\r\\n\\rlogin:| p/Georgia SoftWorks Telnet Server/ v/$1/ i/expiration date $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfc\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x1f\\xff\\xfb\\\"\\xff\\xfb\\x05Username:| p/OneAccess ONE100A router telnetd/ d/router/ o/OneOS/ cpe:/h:oneaccess:one100a/a cpe:/o:oneaccess:oneos/\n# The ASCII art is a big \"BS\" seal.\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\+{79}\\r\\n\\r\\+{33}#############\\+{33}\\r\\n\\r\\+{28}######           ######\\+{28}\\r\\n\\r| p/BitSwitcher firmware/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03login as: | p/D-Link DVA-G3170i telnetd/ d/broadband router/ cpe:/h:dlink:dva-g3170i/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03BR-telnet@(FES\\w+) Router>| p/Foundry $1 switch telnetd/ d/switch/ cpe:/h:foundrynet:$1/a\nmatch telnet m|^\\xff\\xfb\\\"\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x1f\\xff\\xfb\\x18Login: | p/Force10 S50N switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfc\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x1f\\xff\\xfb\\\"\\xff\\xfb\\x05PTLDOR69SH3HT4000HG6 Hatteras (\\w+)\\r\\nLogin: | p/Hatteras $1 PBX telnetd/ d/PBX/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03                        =======================\\r\\n                               ([\\w._-]+) +\\r\\n                        =======================\\r\\nLogin: | p/D-Link $1 ADSL router/ d/broadband router/ cpe:/h:dlink:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nCopyright \\(c\\) 2005 - 2008 Enterasys, Inc\\. All rights reserved\\.\\r\\n\\n\\r\\n\\r\\n\\r\\0Username: | p/Enterasys RBT-8200 switch telnetd/ d/switch/ cpe:/h:enterasys:rbt-8200/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nCopperJet ([\\w._-]+) Router VoATM\\r\\nFirmware version: ([\\w._-]+)\\r\\nAllied Data Technologies\\r\\n\\r\\nPlease login: | p/Allied Data CopperJet $1 ADSL router telnetd/ v/$2/ d/broadband router/ cpe:/h:allieddata:copperjet_$1/a\nmatch telnet m|^\\r={74}\\n\\rTransition Networks Telnet Server\\n\\rSystem name: SMKG-PKGEAST-([\\w._-]+)\\n\\rPress CTRL-D to disconnect\\.\\n\\rEnter password: | p/Raritan $1 KVM switch telnetd/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\nCTRING login: | p/MicroDigital MDR-4600 DVR telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\n\\r        Welcome to QUIDWAY ([\\w._-]+) Access Server\\n\\r      Copyright \\(c\\) \\d+-\\d+ HUAWEI TECH CO\\. LTD\\.\\n\\r\\n\\rUser Name:| p/Huawei Quidway $1 switch telnetd/ d/switch/ cpe:/h:huawei:quidway_$1/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n \\*{73}\\r\\n  This is a private system\\. \\r\\n  Do not attempt to login unless you are an authorized user\\.  \\r\\n  Any authorized or unauthorized access or use may be monitored and can\\r\\n  result in criminal or civil prosecution under applicable law\\.\\r\\n \\*{73}\\r\\n\\r\\nMP login: | p/HP Integrated Lights-Out Advanced telnetd/ d/remote management/ cpe:/h:hp:integrated_lights-out/\nmatch telnet m|^\\xff\\xfe\\\"\\xff\\xfb\\x01\\x1b\\[f\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[2C\\x1b\\[9B\\x1b\\[5B                      \\x1b\\[f\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[2C\\x1b\\[9B\\x1b\\[6B                      \\x1b\\[f\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[2C\\x1b\\[9B\\x1b\\[7B                      \\x1b\\[f\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[9B\\x1b\\[2B  Verify Password  \\x1b\\[f\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[9B\\x1b\\[4B                   \\x0e\\x1b\\[f\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[9C\\x1b\\[8C\\x1b\\[9B\\x1b\\[1Blqqqqqqqqqqqqqqqqqqqk\\x1b| p/DNF Storage F16fz NAS device telnetd/ d/storage-misc/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd!Username: | p/McData switch telnetd/ d/switch/\nmatch telnet m|^Sorry, new remote sessions are disallowed by current switch configuration\\.| p/Dell PowerConnect 6248 switch telnetd/ d/switch/ cpe:/h:dell:powerconnect_6248/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[H\\x1b\\[J\\r\\nWireless Router Manager Console , Version : ([\\w._-]+)\\r\\nPlease enter your password : | p/Ovislink WLA-9000AP WAP telnetd/ v/$1/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x18\\xff\\xfb\\x03\\xff\\xfd\\x1f| p/HP Tandem NonStop telnetd/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\x1b\\[2J\\x1b\\[H\\x0fUser Access Verification \\r\\n\\r\\nWaiting on TACACS\\+ server\\.\\.\\.\\r\\n\\nUser Access Verification\\r\\n\\r\\nUsername: | p/Adtran NetVanta 6355 VoIP gateway telnetd/ i/TACACS enabled/ d/VoIP adapter/ cpe:/h:adtran:netvanta_6355/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\*{60}\\r\\n\\* WARNING ALERT: AUTHORIZED USERS ONLY! +\\*\\r\\n\\* +\\*\\r\\n\\* All activities conducted on this system may be monitored \\*\\r\\n\\* and recorded\\. If you are not an authorized user, log off \\*\\r\\n\\* immediately\\.  Illegal entry, misuse, and / or criminal   \\*\\r\\n\\* activity will be documented and prosecuted to the full   \\*\\r\\n\\* extend of the law\\. +\\*\\r\\n\\*{60}\\r\\n\\r\\n\\r\\nPress <Enter> to accept and continue the login process\\.\\.\\.\\.\\r\\n| p/Foundry NetIron XMR 4000 router telnetd/ d/router/ cpe:/h:foundrynet:netiron_xmr_4000/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x05$| p/Dell PowerConnect or Netgear FSM700S switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\x1b\\[2J\\x1b\\[1;1H\\x1b\\[1mwb-adtran-\\w+       ADTRAN (TDU-\\w+)\\x1b\\[0m\\x1b\\[2;1HConnecting\\.\\.\\.\\.| p/Adtran $1 PBX telnetd/ d/PBX/\n# Probably more general than this --Ed.\nmatch telnet m|^\\r\\n%connection closed by remote host!\\0| p/HP H3C SR8808 SecBlade firewall module telnetd/ d/firewall/\nmatch telnet m|^Sorry, telnet is not allowed on this port!$| p/Cisco 4400 wireless LAN controller telnetd/ d/remote management/ cpe:/a:cisco:telnet/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\ncli ([\\w._-]+)\\r\\nUser Name: | p/ZyXEL G-570S WAP telnetd/ v/$1/ d/WAP/ cpe:/h:zyxel:g-570s/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nBUFFALO INC\\. LinkStation series HS-DHGL\\(JINMU\\)\\r\\n\\rFENCHURCH login: | p/Buffalo LinkStation HS-DHCL series NAS device/ d/storage-misc/\nmatch telnet m|^\\nFelix Remote Shell Console:\\r\\n============================\\r\\n\\r\\n-> | p/Apache Felix remote console/\nmatch telnet m|^\\r\\n\\r\\nBackup Server Telnet Session\\r\\n\\r\\nUser:| p/NovaNET-WEB backup server telnetd/\nmatch telnet m|^Start Telnet Server:\\r\\n| p/ATmega32 Telnet-to-RS232/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\\"\\[game001\\] remote control session\\.\\r\\nPassword:\\0$| p/Rappelz game admin telnetd/\nmatch telnet m|^\\r\\nVOLKTEK Corporation\\r\\nSystem version: ([\\w._-]+) \\((built at .*?)\\)\\r\\n\\r\\nUsername: | p/Volktek router telnetd/ v/$1/ i/$2/ d/router/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[\\?7l\\x1b\\[3;23r\\x1b\\[\\?6l\\x1b\\[1;1H\\x1b\\[\\?25l\\x1b\\[1;1HProCurve J\\w+ Switch ([\\w-]+)\\r\\n\\rSoftware revision ([\\w._-]+)\\r\\n| p/HP ProCurve $1 switch telnetd/ v/$2/ cpe:/h:hp:procurve_switch_$1/ cpe:/o:hp:procurve_switch_software:$2/\nmatch telnet m|^This is version ([\\w._-]+) of the API\\nSMS is enabled and HOMEAUTOMATION is enabled for you\\n>> | p/Dovado 4GR WAP telnetd/ v/$1/ d/WAP/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfb\\x01\\r\\n\\r\\x1b\\[2J\\x1b\\[0;0H\\x1b\\[K\\x1b\\[1;0H\\x1b\\[K\\x1b\\[2;0H\\x1b\\[K\\x1b\\[3;0H\\x1b\\[K\\x1b\\[4;0H\\x1b\\[K\\x1b\\[5;0H\\x1b\\[K\\x1b\\[6;0H\\x1b\\[K\\x1b\\[7;0H\\x1b\\[K\\x1b\\[8;0H\\x1b\\[K\\x1b\\[9;0H\\x1b\\[K\\x1b\\[10;0H\\x1b\\[K\\x1b\\[11;0H\\x1b\\[K\\x1b\\[12;0H\\x1b\\[K\\x1b\\[13;0H\\x1b\\[K\\x1b\\[14;0H\\x1b\\[K\\x1b\\[15;0H\\x1b\\[K\\x1b\\[16;0H\\x1b\\[K\\x1b\\[17;0H\\x1b\\[K\\x1b\\[18;0H\\x1b\\[K\\x1b\\[19;0H\\x1b\\[K\\x1b\\[20;0H\\x1b\\[K\\x1b\\[21;0H\\x1b\\[K\\x1b\\[22;0H\\x1b\\[K\\x1b\\[0;0H\\x1b\\[K\\x1b\\[1;0H\\x1b\\[K\\x1b\\[2;0H\\x1b\\[K\\x1b\\[3;0H\\x1b\\[K\\x1b\\[4;0H\\x1b\\[K\\x1b\\[5;0H\\x1b\\[K\\x1b\\[6;0H\\x1b\\[K\\x1b\\[7;0H\\x1b\\[K\\x1b\\[8;0H\\x1b\\[K\\x1b\\[9;0H\\x1b\\[K\\x1b\\[10;0H\\x1b\\[K\\x1b\\[11;0H\\x1b\\[K\\x1b\\[12;0H\\x1b\\[K\\x1b\\[13;0H\\x1b\\[K\\x1b\\[14;0H\\x1b\\[K\\x1b\\[15;0H\\x1b\\[K\\x1b\\[16;0H\\x1b\\[K\\x1b\\[17;0H\\x1b\\[K\\x1b\\[18;0H\\x1b\\[K\\x1b\\[19;0H\\x1b\\[K\\x1b\\[20;0H\\x1b\\[K\\x1b\\[3;27H            \\x1b\\[3;27HLogin Screen\\x1b\\[4;27H            \\x1b\\[4;27H============\\x1b\\[7;24H          \\x1b\\[7;24HUser Name:\\x1b\\[9;24H         \\x1b\\[9;24HPassword:\\x1b\\[7m\\x1b\\[7;36H                    \\x1b\\[7;36H                     \\x1b\\[7;36H\\x1b\\[7;36H| p/Cisco SRW2016 or SRW2024 router telnetd/ d/router/ cpe:/a:cisco:telnet/ cpe:/h:cisco:srw2016/ cpe:/h:cisco:srw2024/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nPassword: | p/Cyberoam UTM firewall telnetd/ d/firewall/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Login: | p/D-Link DSL-2640B ADSL router telnetd/ d/broadband router/ cpe:/h:dlink:dsl-2640b/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfb\\x01\\r\\n\\r\\r\\nUserName:| p/D-Link DGS-3100 switch telnetd/ d/switch/ cpe:/h:dlink:dgs-3100/\nmatch telnet m|^\\x0c\\r\\nusername: \\r\\npassword: \\r\\nUsername and password are invalid\\. Try again\\.\\. \\r\\n\\r\\nusername: | p/Mango DSP AVS Raven-M video server telnetd/ d/media device/\nmatch telnet m|^\\r\\nICTNET>| p/PostX IP Receiver telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03 Willkommen am THOMSON ([\\w._ -]+)\\r\\n   Plattform:CANT-P  Firmware:([\\w._-]+)  Seriennummer:([\\w._-]+)\\r\\n Bitte identifizieren Sie sich mit Ihrem Benutzernamen und Kennwort\\r\\n--------------------------------------------------------------------------------\\r\\n\\r\\n\\r\\n\\r\\n\\nUsername : | p/Thomson $1 ADSL router telnetd/ v/$2/ i/Serial number: $3/ d/broadband router/ cpe:/h:thomson:$1/\nmatch telnet m|^\\r\\r\\r\\n\\r\\nLocal Time: (\\w+, \\d+/\\d+/\\d+ \\d+:\\d+:\\d+)  Mac Address ([A-F0-9:]+)\\n\\rITW WeatherGoose II Version ([\\w._ ()-]+)\\n\\r\\n\\xff\\xfb\\x01\\xff\\xfe\\x01\\xff\\xfd\\x03Login:| p/ITW WeatherGoose II environmental monitor telnetd/ v/$3/ i/MAC address: $2; local time $1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nUsername: | p/Avocent KVM switch telnetd/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[0m\\x1b\\[1;1H\\x1b\\[2J\\x1b\\[\\?3l\\x1b\\[0m\\x1b\\[1;1H\\x1b\\[2J\\x1b\\[1;18H\\x1b\\[1mOlicom CrossFire Token-Ring Switch Manager\\x1b\\[0m\\x1b\\[1;80H| p/Olicom 8601 CrossFire token-ring switch manager telnetd/\nmatch telnet m|^\\xff\\xfb\\x01login : | p/Alcatel OmniSwitch 6400 or 8600 switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x18-------------------------------\\r\\n-----Welcome to ATP Cli------\\r\\n-------------------------------\\r\\n\\r\\nLogin: | p/Huawei HG655b DSL router telnetd/ d/broadband router/ cpe:/h:huawei:hg655b/\nmatch telnet m|^Welcome to ([\\w._-]+)\\.\\r\\r\\nUnauthorized access is punishable by law\\.\\r\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\((GSM[\\w._-]+)\\) \\r\\nUser:| p/Netgear $2 switch telnetd/ d/switch/ h/$1/ cpe:/h:netgear:$2/\nmatch telnet m|^ \\x1b\\[2JAccess Point Console\\r\\n--------------------\\r\\nVersion ([\\w._-]+)\\r\\n\\r\\n\\r\\x07Password: \\xff\\xfb\\x01| p/Blitzz BWA601 WAP telnetd/ v/$1/ d/WAP/ cpe:/h:blitzz:bwa601:$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01SB5100MoD by ToM - Embedded Telnet Server\\r\\n\\r\\n| p/SB5100MoD telnetd/ i/Motorola SB5100 WAP/ d/WAP/ cpe:/h:motorola:sb5100/\nmatch telnet m=^\\r\\nTelnet connection from [\\d.]+:\\d+ refused\\.\\r\\n\\r\\n(?:Knock it off; I'm not lettin' you in\\.\\.\\.|You again\\?  Don't make me call the cops\\.\\.\\.|Your IP address has been logged and reported to your ISP\\.)\\r\\n\\r\\n\\nBye bye\\.\\.\\.\\r\\n= p/SB5100MoD telnetd/ i/Motorola SB5100 WAP/ d/WAP/ cpe:/h:motorola:sb5100/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\r\\nWelcome to Trango Broadband Wireless (\\w+)-AP \\w+\\r\\nPassword: | p/Trango $1 WAP telnetd/ d/WAP/ cpe:/h:trango:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Innbox Home Gateway\\r\\nLogin: | p/Innbox Home Gateway firewall telnetd/ d/firewall/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfe\\x01\\xff\\xfb\\x01\\x1b\\[2J\\[ M113 \\]  B-02\\.54  VIP113  V-([\\w._-]+)  VB\\r\\nDate/time: \\d+\\.\\d+\\.\\d+/\\d+:\\d+:\\d+\\.\\d+\\r\\nSNumber: (M113-\\d+)\\r\\n\\r\\nVB login: | p/2N VoiceBlue Lite GSM gateway telnetd/ v/$1/ i/Serial number: $2/ cpe:/h:2n:voiceblue_lite/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nCopyright \\(c\\) 2002 - 2011 Trapeze Networks, Inc\\. All rights reserved\\.\\r\\n\\n\\r\\n\\r\\n\\r\\0Username: | p/Trapeze WX2200 WAP telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\n\\nLantronix MSS1 Version STI3\\.5/5\\(981103\\)\\n\\r\\nType HELP at the 'Local_2> ' prompt for assistance\\.\\n\\r\\nLogin password> | p/Lantronix MSS1 Micro Serial Server serial-to-Ethernet bridge telnetd/ d/bridge/\n# The stars spell \"BAYSTACK\".\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[32897132;1H\\x1b\\[0m\\x1b\\[1;1H \\*\\*\\*\\*\\*      \\*\\*\\*     \\*     \\*    \\*\\*\\*\\*\\*   \\*\\*\\*\\*\\*\\*\\*\\*\\*     \\*\\*\\*       \\*\\*\\*\\*\\*  \\*      \\*\\x1b\\[2;1H \\*    \\*    \\*   \\*    \\*     \\*   \\*            \\*        \\*   \\*     \\*       \\*      \\*\\x1b\\[3;1H| p/Nortel BayStack 470-24T switch telnetd/ d/switch/ cpe:/h:nortel:baystack_470-24t/a\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[0m\\x1b\\[1;1H\\x1b\\[2K \\*\\*\\*\\*\\*      \\*\\*\\*     \\*     \\*    \\*\\*\\*\\*\\*   \\*\\*\\*\\*\\*\\*\\*\\*\\*     \\*\\*\\*       \\*\\*\\*\\*\\*  \\*      \\*\\x1b\\[2;1H\\x1b\\[2K \\*    \\*    \\*   \\*    \\*     \\*   \\*            \\*        \\*   \\*     \\*       \\*      \\*\\x1b\\[3;1H\\x1b\\[2K| p/Nortel BayStack 470-48T switch telnetd/ d/switch/ cpe:/h:nortel:baystack_470-48t/a\nmatch telnet m|^\\xff\\xfb\\x01\\0\\xff\\xfd\\x03\\0\\r\\n\\r\\nHi, my name is :\\s*([\\w._-]+) NBTX\\r\\n\\r\\nSerial Number:\\s*(\\w+)\\r\\nBrand:\\s*Polycom\\r\\nSoftware Version:\\s*Release ([\\w._ -]+)\\r\\nModel:\\s*VS\\r\\nNetwork Interface:\\s*ISDN_UNKNOWN\\r\\nMP Enabled:\\s*No\\r\\nIP Address:\\s*[\\d.]+\\r\\nGMT:\\s*\\w+ \\w+ \\d+ \\d+:\\d+:\\d+ \\d+\\r\\nTime In Last Call:\\s*\\d+:\\d+:\\d+\\r\\nTotal Time In Calls:\\s*\\d+:\\d+:\\d+\\r\\nTotal Calls:\\s*\\d+\\r\\nSwitch Type:\\s*NI-1\\r\\nCountry Code:\\s*(\\d+)\\r\\nArea Code:\\s*(\\d+)\\r\\n| p/Polycom ViewStation video conferencing telnetd/ v/$3/ i/Serial number: $2; country code: $4; area code $5/ h/$1/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe\\\"Connected to Dynamips VM \\\"R1\\\" \\(ID 0, type c2691\\) - Console port\\r\\nPress ENTER to get the prompt\\.\\r\\n$| p/Dynamips telnetd/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfb\\x03$| p/Pirelli NetGate VOIP v2 broadband router telnetd/ d/broadband router/ cpe:/h:pirelli:netgate_voip_v2/a\nmatch telnet m|^\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nusername: | p/IBM BladeCenter Advanced Management Module telnetd/ d/remote management/ cpe:/h:ibm:advanced_management_module/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\rEXFO (BV[\\w._-]+)\\r\\n\\r\\r\\n\\rWARNING: This system is for use by authorized users only!\\r\\n\\r\\r\\n\\rPassword: | p/Exfo $1 Ethernet test device telnetd/ d/specialized/ cpe:/h:exfo:$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x18\\n\\rWelcome Visiting Huawei  Home Gateway\\n\\rCopyright by Huawei Technologies Co\\., Ltd\\.\\n\\rLogin:| p/Huawei STC router telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n  \\r\\nModel name : easyRAID ([\\w._+-]+)\\r\\nFirmware version : ([\\w._-]+)\\r\\nBootcode version : ([\\w._-]+)\\r\\nSerial number : (\\w+)\\r\\nCPU type: [^\\r]*\\r\\nInstalled memory : ([^\\r]+)\\r\\nController type: [^\\r]*\\r\\nDisk slot number: [^\\r]*\\r\\nDisk state : [^\\r]*\\r\\n  \\r\\n=== Welcome to CLI ([\\w._-]+) ===\\r\\nPlease input password: | p/easyRAID $1 telnetd/ v/$6/ i/firmware $2; bootcode $3; serial $4; memory $5/ d/storage-misc/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to Linux \\(([\\w._-]+)\\) for MIPS\\r\\n\\rKernel ([\\w._-]+) Treckle on an MIPS\\r\\n\\r[\\w._-]+ login: | p/ZKSoftware $1 access control device/ i/Linux $2; MIPS/ d/security-misc/ o/Linux/ cpe:/h:zksoftware:$1/ cpe:/o:linux:linux_kernel:$2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\\"\\[Fallen Heroes Console\\] remote control session\\.\\r\\nPassword:\\0| p/Rappelz game server admin telnetd/\nmatch telnet m|^\\x1b\\[1;31m           \\x1b\\[1;33m\\(\\x1b\\[1;31m     \\x1b\\[1;33m\\(\\x1b\\[1;31m      \\*     \\r\\n      \\*   \\)\\)\\\\ \\)  \\)\\\\ \\) \\x1b\\[1;33m\\(\\x1b\\[1;31m  ${backquote}    \\r\\n    ${backquote} \\)  /\\x1b\\[1;33m\\(\\x1b\\[1;31m\\x1b\\[1;33m\\(\\x1b\\[1;31m\\)/\\x1b\\[1;33m\\(\\x1b\\[1;31m \\x1b\\[1;33m\\(\\x1b\\[1;31m\\x1b\\[1;33m\\(\\x1b\\[1;31m\\)/\\x1b\\[1;33m\\(\\x1b\\[1;31m \\)\\\\\\)\\)\\x1b\\[1;33m\\(\\x1b\\[1;31m   \\r\\n     \\x1b\\[1;33m\\(\\x1b\\[1;31m \\)\\x1b\\[1;33m\\(\\x1b\\[1;31m_\\)\\)\\x1b\\[1;33m\\(\\x1b\\[1;31m_\\)\\) /\\x1b\\[1;33m\\(\\x1b\\[1;31m_\\)\\x7c\\x1b\\[1;33m\\(\\x1b\\[1;31m_\\)\\x1b\\[1;33m\\(\\x1b\\[1;31m\\)\\\\  \\r\\n    \\x1b\\[1;33m\\(\\x1b\\[1;31m_\\x1b\\[1;33m\\(\\x1b\\[1;31m_\\x1b\\[1;33m\\(\\x1b\\[1;31m\\)\\x7c_\\)\\)_ \\x1b\\[1;33m\\(\\x1b\\[1;31m_\\)\\) \\x1b\\[1;33m\\(\\x1b\\[1;31m_\\x1b\\[1;33m\\(\\x1b\\[1;31m\\)\\x1b\\[1;33m\\(\\x1b\\[1;31m\\x1b\\[1;33m\\(\\x1b\\[1;31m_\\) \\r\\n\\x1b\\[0;32m    \\x7c_   _\\x7c\\x7c   \\\\/ __\\x7c\\x7c  \\\\/  \\x7c \\r\\n      \\x7c \\x7c  \\x7c \\x7c\\) \\\\__ \\\\\\x7c \\x7c\\\\/\\x7c \\x7c \\r\\n      \\x7c_\\x7c  \\x7c___/\\x7c___/\\x7c_\\x7c  \\x7c_\\x7c \\r\\n  Terraria Dedicated Server Mod\\r\\n\\r\\n\\x1b\\[1;37mTerraria v([\\w._-]+) dedicated server remote console, running TDSM (#[\\w._-]+)\\.\\x1b\\[0m\\r\\n\\x1b\\[1;37mYou have 20 seconds to log in\\.\\x1b\\[0m\\r\\n\\x1b\\[1;36mLogin:\\x1b\\[0m \\xff\\xf9| p/Terraria Dedicated Server Mod telnetd/ v/$2/ i/for Terraria $1/\nmatch telnet m|^\\r\\rThis is a FirstClass system, from Open Text Corporation\\.\\r\\r\\rFirstClass is an e-mail and conferencing system with a graphical user interface\\.\\r\\r\\rThe Command Line Interface is not available on | p/OpenText FirstClass webmail command-line interface/ cpe:/a:opentext:firstclass/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Siemens ADSL (SL[\\w._-]+) IS \\r\\nSoftware Version: ([\\w._-]+)\\r\\nLogin name: | p/Siemens $1 ADSL router telnetd/ v/$2/ d/broadband router/ cpe:/h:siemens:$2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd'\\x1b\\[2J\\x1b\\[HMinecraft RemoteShell V([\\w._-]+)\\r\\nEnter username: | p/Minecraft RemoteShell/ v/$1/\nmatch telnet m|^Eltin\\r\\n Ethernut Nut/OS witamy\\.\\r\\nkey=[0-9A-F]+\\r\\n$| p/Ethernut demo telnetd/ i/Polish/ o|Nut/OS| cpe:/o:ethernut:nut_os::::pl/\nmatch telnet m|^\\xff\\xfb\\x01SOYO_SIP V([\\w._-]+) settings\\r\\nPassword:| p/Soyo SIP VoIP phone telnetd/ v/$1/ d/VoIP phone/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03U\\.S\\. Robotics Wireless MAXg ADSL Gateway\\r\\nLogin: | p/USRobotics Wireless MAXg ADSL router telnetd/ d/WAP/\nmatch telnet m|^Halt! Who goes there\\?\\n[\\w/+]+\\n| p/Polycom VoIP phone debug telnetd/ d/VoIP phone/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Schneider Automation, Inc\\. - Modbus Bridge \\((\\w+ CEV \\w+ \\w+)\\)\\r\\n\\r\\0\\r\\n\\r\\0Serial Number ([\\w._-]+)  Software Version V([\\w._-]+ \\(\\d+\\))\\r\\0\\r\\n\\r\\0\\r\\nPress Enter to go into Setup Mode, wait to close\\r\\n\\r\\0| p/Schneider Automation $1 Modbus-to-Ethernet bridge telnetd/ v/$3/ i/serial number: $2/ d/bridge/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\nnameDRAC login: | p/Dell iDRAC6 telnetd/ cpe:/h:dell:idrac6/\nmatch telnet m|^Horizon Control Remote Connection\\r\\nCopyright 2006-2009 Horizon Control Inc\\. All Rights Reserved\\r\\n    local commands: echo, noecho, prompt, noprompt, help, exit\\r\\n<tab><enter> at the start of a line will re-run the previous command\\r\\nHC>| p/Philips Strand Light Palette telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfd\\x1fWELCOME\\r\\n NO UNAUTHORIZED LOGIN\\r\\n Private property\\r\\nlogin: | p/Patton SmartNode 4638 VoIP adapter telnetd/ d/VoIP adapter/ o/SmartWare/ cpe:/h:patton:sn4638/ cpe:/o:patton:smartware/\nmatch telnet m|^\\xff\\xfb\\x01([\\w._-]+) Ver\\. ([\\w._-]+) \\(c\\) Copyright \\d+-\\d+ Redline Communications Inc\\.\\r\\n\\r\\nUsername:\\0| p/Redline $1 WAP telnetd/ v/$2/ d/WAP/ cpe:/h:redline:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\[NB6-SER-r0\\]\\[NB6-MAIN-R([\\w._-]+)\\]\\[NB6-ADSL-\\w+\\]\\r\\nnb6 login: | p/Neuf Box 6 ADSL router telnetd/ v/$1/ d/broadband router/\nmatch telnet m|^OMNIA\\r\\nd!6F'''=&%%3-%&0\\)! %    , \\.L\\*\\*\\*\\$ e&\\\"\\n\\rd!6B'&'\\?&%%3-\\$&0\\)| p/Telos Omnia-6EX audio processor telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\nWelcome to the Biamp Telnet server\\r\\n| p/Biamp AudioFLEX audio system telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\*\\*\\* IPCOM \\*\\*\\*\\r\\nlogin: | p/HP ProLiant ML110 Integrated Lights-Out telnetd/ cpe:/h:hp:integrated_lights-out/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Alice Modem WLAN ([\\w._-]+)\\r\\nAlice Software Version: ([\\w._-]+)\\r\\nLogin: | p/Alice $1 WLAN WAP telnetd/ v/$2/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03XMR-2:  Console access 2047\\r\\n\\r\\nUsername: | p/Brocade MLXe router telnetd/ d/router/ o/IronWare/ cpe:/o:brocade:ironware/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n------------------------------------------------------------------------------\\r\\n  Product      : (iMG\\w+)\\r\\n  Hw Revision  : S\\r\\n  Sw Version   : ([^\\r]+)\\r\\n  Build        : iMG\\w+\\r\\n  MAC          : ([0-9a-f:]+)\\r\\n  Copyright \\(c\\) \\d+ by Allied Telesis Holdings K\\.K\\.\\r\\n------------------------------------------------------------------------------\\r\\n------------------------------------------------------------------------------\\r\\n\\r\\nLogin: | p/Allied Telesis AT-$1 router/ v/$2/ i/MAC: $3/ d/router/ cpe:/h:alliedtelesyn:at-$1/\nmatch telnet m|^100 HELLO [0-9A-F]{8} - KSHELL V([\\w._-]+)\\r\\n| p/Koukaam NETIO-230A power controller telnetd/ v/$1/ d/power-device/ cpe:/h:koukaam:netio-230a/\nmatch telnet m|^100 HELLO [0-9A-F]{8}\\r\\n$| p/Koukaam NETIO-230A power controller telnetd/ d/power-device/ cpe:/h:koukaam:netio-230a/\nmatch telnet m|^Local Time \\w+, \\d\\d/\\d\\d/\\d\\d \\d\\d:\\d\\d:\\d\\d Mac Address ([0-9A-F:]+)\\n\\rITW Mini/([\\w._-]+) II Version ([\\w._-]+)\\n\\rlogin:| p/ITW MiniGoose XP II environmental monitor telnetd/ i/MAC: $1/ o|Mini/$2 II $3|\nmatch telnet m|^\\xff\\xfe\\x01\\r\\n\\r\\n\\*{59}\\r\\n\\*\\s*DVTel (DVT-\\w+) - ([\\w._-]+)\\s*\\*\\r\\n\\*{59}\\r\\nMain Menu\\r\\n| p/DVTel $1 security camera telnetd/ v/$2/ d/webcam/ cpe:/h:dvtel:$1/\nmatch telnet m|^\\xff\\xfb\\x01Comau (\\w+) Telnet \\(Version:([\\w._ -]+)\\) (\\d\\d-\\d\\d-\\d\\d) ready\\.\\r\\n\\nUser: | p/Comau $1 robot control unit telnetd/ v/$2 $3/ d/specialized/\n# Also Goip SMS gateway.\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nLogin:| p/Green Packet DX230 WAP telnetd/ d/WAP/ cpe:/h:green_packet:dx230/\n# actually µC/OS-III\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05Welcome to InterNiche Telnet Server ([\\w._-]+)\\r\\n\\r\\n\\r\\nlogin: | p/InterNiche telnetd/ v/$1/ o|uC/OS-III| cpe:/o:micrium:uc%2fos-iii/\nmatch telnet m|^\\r\\r\\n This service will offer one user to use it\\. \\r\\r\\n The Current User is \\[IP:([\\d.]+)\\]\\r\\r\\n| p/E-Tech PSU101 print server telnetd/ i/in use by $1/ d/print server/ cpe:/h:e-tech:psu101/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nsh-3\\.00# | p/Syabas Popcorn Hour media player telnetd/ d/media device/ cpe:/h:syabas:popcorn_hour/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to Vyatta\\r\\n\\rvyatta login: | p/Vyatta router telnetd/ d/router/ o/Linux/ cpe:/a:brocade:vyatta_vrouter_software/ cpe:/o:linux:linux_kernel/\n# vlc -I telnet --telnet-password test\nmatch telnet m|^VLC media player ([\\w._-]+) ([^\\n]+)\\nPassword: \\xff\\xfb\\x01| p/VLC media player telnetd/ v/$1 $2/ cpe:/a:videolan:vlc_media_player:$1/\nmatch telnet m|^\\*+ ISKRAEMECO \\*+\\r\\n\\*+ P2cc Consereth Communicator \\*+\\r\\nLogin:    | p/Iskraemeco P2CC smart electrical meter readout telnetd/ d/power-misc/ cpe:/h:iskraemeco:p2cc/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03TP-LINK Wireless ADSL2\\+ Router\\r\\nLogin: | p/TP-LINK TD-W8920G WAP http config/ d/WAP/ cpe:/h:tp-link:td-w8920g/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nNetDVRDVS:| p/UTT Hiper 2610 router telnetd/ d/router/ cpe:/h:utt:hiper_2610/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nWelcome to Oqus Command Interface\\n\\r\\n\\r\\r\\nlogin: \\r\\nWelcome to Oqus Command Interface\\n\\r\\n\\r\\r\\nlogin: | p/Qualisys Oqus 300 camera telnetd/ d/webcam/\n# The wildcard bytes appear to be a hexadecimal timestamp.\nmatch telnet m|^13C1........\\r\\n>|s p/Roku 2 XDS media player telnetd/ d/media device/\nmatch telnet m|^Username: \\r\\r\\nUsername: \\r\\r\\nUsername: | p/Sanyo VCC-HD2300 webcam telnetd/ d/webcam/ cpe:/h:sanyo:vcc-hd2300/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\r\\n\\r\\n\\r\\nWelcome to (RS\\w+) version V\\.([\\w._-]+) Rev\\. ([\\w._-]+) \\(Patch ([\\w._-]+)\\) IPSec from \\d\\d\\d\\d/\\d\\d/\\d\\d 00:00:00\\r\\nsystemname is ([\\w._ -]+), location (.*)\\r\\n\\r\\n\\r\\nLogin: | p/bintec $1 ADSL router telnetd/ v/$2 rev $3 patch $4/ i/location: $6/ h/$5/ cpe:/h:bintec:$1/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfb\\x01\\r\\n\\r\\x1b\\[2J\\x1b\\[0;0H\\x1b\\[K\\x1b\\[1;0H\\x1b\\[K\\x1b\\[2;0H\\x1b\\[K\\x1b\\[3;0H\\x1b\\[K\\x1b\\[4;0H\\x1b\\[K\\x1b\\[5;0H\\x1b\\[K\\x1b\\[6;0H\\x1b\\[K\\x1b\\[7;0H\\x1b\\[K\\x1b\\[8;0H\\x1b\\[K\\x1b\\[9;0H\\x1b\\[K\\x1b\\[10;0H\\x1b\\[K\\x1b\\[11;0H\\x1b\\[K\\x1b\\[12;0H\\x1b\\[K\\x1b\\[13;0H\\x1b\\[K\\x1b\\[14;0H\\x1b\\[K\\x1b\\[15;0H\\x1b\\[K\\x1b\\[16;0H\\x1b\\[K\\x1b\\[17;0H\\x1b\\[K\\x1b\\[18;0H\\x1b\\[K\\x1b\\[19;0H\\x1b\\[K\\x1b\\[20;0H\\x1b\\[K\\x1b\\[21;0H\\x1b\\[K\\x1b\\[22;0H\\x1b\\[K\\x1b\\[23;0HArrowKey/TAB/BACK=Move  SPACE=Toggle  ENTER=Select  ESC=Back| p/Linksys SRW2024 switch telnetd/ d/switch/ cpe:/h:linksys:srw2024/a cpe:/o:linksys:srw2024/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nSURPASS (RG\\w+) SCE Revision ([\\w._-]+)\\r\\nCopyright \\(c\\) 2006 Siemens AG\\r\\n([\\w._-]+) login: | p/Siemens $1 VoIP gateway telnetd/ v/$2/ h/$3/ cpe:/h:siemens:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nIngenic linux machine\\r\\n\\rKernel ([\\w._-]+) on an mips\\r\\n\\r\\(none\\) login: | p/Ingenic Linux telnetd/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\nmatch telnet m|^\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfb\\x01\\xff\\xfb\\x03Ambit (U\\w+) CableModem\\r\\n\\r\\nlogin: | p/Ambit $1 cable modem telnetd/ d/broadband router/ cpe:/h:ambit:$1/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd'\\xff\\xfd#| p/ZyXEL ZyWALL USG 200 firewall telnetd/ d/firewall/ cpe:/h:zyxel:zywall_usg_200/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n\\r\\n  Huawei (MA\\w+) Multi-service Access Module\\.\\r\\n  Copyright\\(C\\) \\d\\d\\d\\d-\\d\\d\\d\\d by Huawei Technologies Co\\., Ltd\\.\\r\\n\\r\\n>>User name:| p/Huawei $1 DSLAM telnetd/ cpe:/h:huawei:$1/\nmatch telnet m|^\\n\\rTA-004 -WB Slic-175SW-122M : CLI\\n\\rLogin : | p/Fujian SVG6000R VoIP gateway telnetd/ d/VoIP adapter/ cpe:/h:fujian:svg6000r/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03login:| p/Foxgate S9816 switch telnetd/ d/switch/ cpe:/h:foxgate:s9816/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nPLi\\xae openpli dm600pvr\\r\\n\\r\\r\\n\\rdm600pvr login: | p/OpenPLI telnetd/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\x1b\\[\\?25l\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[11;26HSwitch Password:  \\[ \\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\* \\]\\x1b\\[23;1H\\x1b\\[2KEnter text, press <Return> or <Enter> when complete\\.\\x1b\\[14;1H\\x1b\\[2K\\x1b\\[14;26HEnter Password: | p/Nortel 5530 Ethernet Routing Switch telnetd/ d/switch/ cpe:/h:nortel:ethernet_routing_switch_5530/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\r\\n\\*+\\r\\n\\r\\* Copyright \\(c\\) 2010 Avaya, Inc\\. +\\r\\n\\r\\* All Rights Reserved +\\r\\n\\r\\* Ethernet Routing Switch ([\\w._-]+) +\\r\\n\\r\\* Software Release ([\\w._-]+)| p/Avaya Ethernet Routing Switch $1 telnetd/ v/$2/ d/switch/ cpe:/h:avaya:$1/\n# The ASCII art spells \"AVAYA\".\nmatch telnet m|^\\x1b\\[\\?25l\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[0m\\x1b\\[1;1H\\x1b\\[2;1H\\x1b\\[3;1H {9}###   ### {12}###   ###   ### {12}###   ###\\x1b\\[4;1H {8}#{5}   ### {10}###   #{5}   ### {10}###   #{5}\\x1b\\[5;1H {7}### ###   ### {8}###   ### ###   ### {8}###   ### ###\\x1b\\[6;1H {6}###   ###   ### {6}###   ###   ###   ### {6}###   ###   ###\\x1b\\[7;1H {5}### {5}###   ###    ###   ### {5}###   ###    ###   ### {5}###\\x1b\\[8;1H    ### {7}###   ###  ###   ### {7}###   ###  ###   ### {7}###\\x1b\\[9;1H   #{10}  ###   #{6}   #{10}  ###   #{6}   #{10}  ###\\x1b\\[10;1H  #{12}  ###   ####   #{12}  ###   ####   #{12}  ###\\x1b\\[11;1H ### {13}###   ##   ### {13}###  ###   ### {13}###\\x1b\\[12;1H {48}###\\x1b\\[13;1H {47}###\\x1b\\[14;1H\\x1b\\[15;1H\\x1b\\[16;1HEnter Ctrl-Y to begin\\.\\x1b\\[18;3H\\*{17}| p/Avaya Ethernet Routing Switch 4550T telnetd/ d/switch/ cpe:/h:avaya:4550t/\n# The ASCII art spells \"NORTEL\"\nmatch telnet m|^\\x1b\\[\\?25l\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[0m\\x1b\\[1;1H\\x1b\\[2;1H\\x1b\\[3;1H\\x1b\\[4;1H ### {6}###  #{11}   #{10}  #{13} #{11} ###\\x1b\\[5;1H #### {5}### #{13} #{12} #{13} #{11} ###\\x1b\\[6;1H #{5}    ### ### {7}### ### {6}### {6}### {6}### {9}###\\x1b\\[7;1H #{6}   ### ### {7}### ### {6}### {6}### {6}### {9}###\\x1b\\[8;1H ### ###  ### ### {7}### #{12} {6}### {6}#{9}   ###\\x1b\\[9;1H ###  ### ### ### {7}### #{11} {7}### {6}#{9}   ###\\x1b\\[10;1H ###   #{6} ### {7}### ###   ### {9}### {6}### {9}###\\x1b\\[11;1H ###    #{5} ### {7}### ###    ### {8}### {6}### {9}###\\x1b\\[12;1H ### {5}#### #{13} ### {5}### {7}### {6}#{11} #{11}\\x1b\\[13;1H ### {6}###  #{11}  ### {6}### {6}### {6}#{11} #{11}\\x1b\\[14;1H\\x1b\\[15;1H\\x1b\\[16;1HEnter Ctrl-Y to begin\\.\\x1b\\[18;3H\\*{32}| p/Nortel Ethernet Routing Switch 4500-series telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r\\r\\n\\rWelcome in Online\\.PL/APPro/APLite\\r\\n\\rRunning on Realtek 8181/8186  SOC\\r\\n\\r\\r\\n\\r            more info: \\r\\n\\r            http://wifi\\.online\\.pl       \\r\\n\\r\\r\\n\\r\\r\\n\\r([\\w._-]+) login: | p/Airlive 5460AP WAP telnetd/ h/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05\\x1b\\[0m\\x1b\\[2J\\x1b\\[03;33HWelcome to the\\x1b\\[05;01H8 10/100TX \\+ 2 10/100/1000T/ Mini-GBIC Combo w/ 8 PoE Injector Managed Industrial Switch\\x1b\\[13;40H\\x1b\\[15;27HUser Name :\\x1b\\[17;27HPassword  :\\x1b\\[15;39H| p/Black Box 8-Port Ethernet switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd#\\xff\\xfd'\\xff\\xfd\\$\\xff\\xfd!| p/Cisco ASR 9010 router telnetd/ d/router/ o/IOS XR/ cpe:/h:cisco:asr_9010/ cpe:/o:cisco:ios_xr:3/\nmatch telnet m|^220 ([\\w._ -]+) \\(Cisco (BR\\w+) V([\\w._-]+)\\) ready\\r\\n| p/Cisco Aironet $2 WAP telnetd/ v/$3/ h/$1/ cpe:/h:cisco:aironet_$2/a\nmatch telnet m|^sh: /usr/syno/bin/synoautoblock: not found\\n\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03DiskStation login: | p/Synology DiskStation 1512+ NAS telnetd/ d/storage-misc/\nmatch telnet m|^\\xff\\xfb\\0\\xff\\xfd\\0\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03Login Name:  | p/HP Integrated Lights-Out 2 remote configuration telnetd/ d/remote management/ cpe:/h:hp:integrated_lights-out/\nmatch telnet m|^Welcome to NutOS Telnet\\.\\r\\n----------------------------\\r\\n| p|Nut/OS Demo telnetd| o|Nut/OS| cpe:/o:ethernut:nut_os/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x1f\\r\\nlogin: | p/Airspan MiMAX WiMAX WAP telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03(SI[\\w._-]+ Callisto[\\w._+-]+) Router \\(version ([\\w._-]+)\\)\\r\\n| p/Iskratel $1 router telnetd/ v/$2/ d/router/ cpe:/h:iskratel:$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd\\x18\\r\\ntelnet session telnet0 on /dev/ptyb0\\r\\n\\r\\n\\r\\nSystem is in trial for (\\d+) day\\(s\\) and this will expire in (\\d+) day\\(s\\)\\r\\nlogin: | p/Extreme Networks X460 switch telnetd/ i/$1-day trial expires in $2 days/ d/switch/ cpe:/h:extremenetworks:x460/\nmatch telnet m|^Netcool/Impact Command Line Interface for server ([\\w._-]+)\\nlogin: | p|IBM Netcool/Impact telnetd| h/$1/ cpe:/a:ibm:tivoli_netcool%2fimpact/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\r\\nEscape Character is usually 'CTRL\\+\\]'\\r\\n\\r\\n\\r\\ni\\.LON login: | p/Echelon i.LON web server telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\r\\nWelcome to KONICA MINOLTA (bizhub [\\w._-]+)\\r\\nIP : [\\d.]+\\r\\nHost Name : ([\\w._-]+)\\r\\n\\r\\nEnter Password:| p/Konica Minolta $1 printer http config/ d/printer/ h/$2/ cpe:/h:konicaminolta:$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfe\\x01\\r\\n\\r\\nWelcome to TSP100LAN TELNET Utility\\.\\r\\nCopyright\\(C\\) \\d\\d\\d\\d Star Micronics co\\., Ltd\\.\\r\\n\\r\\n<< Connected Device >>\\r\\n   Device Model : (TSP[\\w._-]+) \\(.*\\)\\r\\n   MAC Address  : ([0-9A-F:]+)\\r\\n\\r\\nlogin: | p/Star Micronics $1 printer ftpd/ i/MAC: $2/ d/printer/ cpe:/h:starmicronics:$1/\nmatch telnet m|^\\r\\nWelcome to yersinia version ([\\w._-]+)\\.\\r\\nCopyright \\d\\d\\d\\d-\\d\\d\\d\\d Slay & Tomac\\.\\r\\n\\r\\n\\0\\xff\\xfe\\\"\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfe\\x18\\xff\\xfe\\$\\xff\\xfe!\\xff\\xfe \\xff\\xfe\\x05\\r\\nlogin: | p/yersinia telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03===Actiontec xDSL Router===\\r\\nLogin: | p/Actiontec Q1000 DSL router telnetd/ d/broadband router/ cpe:/h:actiontec:q1000/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03DataEngine Telnet v([\\w._-]+)\\r\\n\\r\\n>| p/DataEngine telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01HGFMA-B> GET / HTTP/1\\.0\\r\\nGET: Command not found\\.\\r\\nHGFMA-B> \\r\\nHGFMA-B> | p/Hay Systems HSL 2.75G Femtocell telnetd/ d/WAP/ cpe:/o:hay_systems:hsl_2.75g_femtocell/\nmatch telnet m|^\\x1b\\[\\?25l\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfc\\\"\\xff\\xfd\\x1f\\x1b\\[2J\\x1b\\[0m\\x1b\\[40m\\x1b\\[30m\\x1b\\[1;1H\\x1b\\[34;1m\\xe2\\x95\\x94Enter your nickname for this session \\(Alt\\+1\\)\\xe2\\x95\\x90| p/dfterm2 telnetd for Dwarf Fortress game/\n# http://www.marss.eu/app/\nmatch telnet m|^connesso,1\\n| p/Marss IP Controller telnetd/ d/remote management/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03 \\r\\n \\r\\n \\r\\n\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\r\\n      \\r\\n      \\r\\n      \\r\\n     \\r\\n \\r\\n\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\r\\n\\r\\n\\r\\n\\r\\nWelcome to use ISOS ([\\w._-]+ SR[\\w._-]+)\\r\\n\\r\\nLogin: | p/ISOS telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfd\\x01Welcome to Stb's world\\r\\n\\r\\nUsername: | p/Zmodo DVR admin telnetd/ d/webcam/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nVuplus ([\\w._-]+) \\+ BlackHole ([\\w._-]+) vusolo2\\r\\n\\r\\r\\n\\rvusolo2 login: | p/VU+ Solo2 set-top box telnetd/ v/$1/ i/BlackHole $2/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\0\\xff\\xfd\\0Auto-sensing\\.\\.\\.\\r\\n    \\x1b\\[6n\\x08\\x08\\x08\\x08\\r    \\x1b\\[!\\x08\\x08\\x08\\r\\x01\\x01\\x01\\x01\\x01\\x01\\x01\\x01\\x01\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\r\\n\\r\\n            WELCOME!\\r\\n\\r\\nLegion \\(#(\\d+)\\)\\r\\nRunning Worldgroup by GALACTICOMM\\r\\nONLINE \\d+ BAUD AT \\d+:\\d\\d \\d+-\\w+-\\d\\d\\r\\n| p/Galacticomm Worldgroup BBS telnetd/ v/3.0/ i/legion #$1/ o/Windows NT/ cpe:/o:microsoft:windows_nt/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfb\\x01\\r\\n\\r\\r\\n\\r\\n\\r\\nUser Name:| p/Cisco SG300-28p switch telnetd/ d/switch/ cpe:/h:cisco:sg300-28p/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nWelcome to DXLINK-HDMI-RX v([\\w._-]+) Copyright AMX LLC \\d\\d\\d\\d\\r\\n\\r\\n>| p/AMX DXLink HDMI receiver telnetd/ v/$1/ d/media device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Login: | p/MPR-L8 3G mobile router telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\nRTCS v([\\w._-]+) Telnet server\\r\\npress Ctrl-L to enable/disable debug output\\r\\0\\r\\n\\r\\0\\r\\nService Port Manager Active\\r\\0\\r\\n<Esc> Ends Session\\r\\0\\r\\n| p/Precise RTCS telnetd/ v/$1/ i/Emerson Network Power Liebert NXC UPS/ o/MQX RTOS/ cpe:/h:emersonnetworkpower:liebert_nxc/ cpe:/o:precise:mqx:$1/\nmatch telnet m|^\\x1b\\[2J\\x1b\\[36m\\x1b\\[1mEmbedded Data Systems Telnet Server ([\\w._-]+)\\x1b\\[0m\\r\\nLogin: | p/Embedded Data Systems Ethernet-to-1-wire telnetd/ v/$1/ d/bridge/\nmatch telnet m|^Welcome to the DS2 command line processor\\r\\nUsername: | p/Dedicated Micros Digital Sprite 2 DVR telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n               Welcome to Zhone Technologies\\r\\n               Model: ZNID-GPON-([\\w._-]+) Router\\r\\n               Release: S([\\w._-]+)\\r\\n\\r\\nCopyright \\(C\\) \\d+-\\d+ by Zhone Technologies\\.  All Rights Reserved\\.\\r\\nConfidential, Unpublished Property of Zhone Technologies\\.\\r\\nRights Reserved Under the Copyright Laws of the United States\\.\\r\\n\\r\\nLogin: | p/Zhone zNID GPON $1 router telnetd/ v/$2/ d/router/ cpe:/h:zhone:znid_gpon_$1/\nmatch telnet m|^\\r\\n\\r\\n\\r\\n\\r\\n<<<<<  NetProbe Lite Setup Program >>>>>\\r\\n\\r\\n       Mega System Technologies Inc\\.\\r\\n       Copyright\\(c\\) 2000\\.  All Rights Reserved\\.\\r\\n<<<<<--------------------------------------------->>>>>\\r\\n       Press any key to continue \\.\\.\\.\\.\\.\\.\\.| p/Mega System Technologies NetProbe Lite environmental sensor telnetd/ d/specialized/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\0\\n\\*\\*\\*Benzing Ethernet Option \\*\\*\\*\\n\\r\\0\\r\\0\\nSerial Number (\\d+)  MAC address ([\\w:]+)\\n\\r\\0Software version ([\\w._-]+ \\([\\w._-]+\\))\\r\\0\\nPassword :| p/Kaba Benzing timeclock telnetd/ v/$3/ i/serial: $1; MAC: $2/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03(F[\\w._-]+)\\r\\n\\rLogin: | p/ZTE $1 router telnetd/ d/router/ cpe:/h:zte:$1/\nmatch telnet m|^\\x1b\\[1;1H\\x1b\\[H\\x1b\\[J\\x1b\\[1;1H\\r\\n\\r\\nHoneywell Building Network Adapter \\(BNA\\)\\r\\nBNA SUSI Server ([\\w._-]+)  \\(([\\w._-]+)\\)\\r\\n\\r\\n  login: | p/Honeywell Building Network Adapter SUSI telnetd/ v/$1/ d/router/ h/$2/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\*{80}\\r\\n {38}I\\( {10},\\\" {8}::\\r\\n  \\${9}  j\\${8}  \\${7}} {6}\\$\\$\\$ {6}\\.%\\$\\$\\$\\$w    q\\$\\$\\$\\$\\$:  j\\$\\$J  \\\"\\$\\$@\\r\\n| p/Teracom router telnetd/ d/broadband router/\nmatch telnet m|^\\r\\n\\r\\nNetwork Power Switch v([\\d.]+)        Site: (.+)\\r\\n\\r\\n| p/WTI Network Power Switch telnetd/ v/$1/ i/site: $2/ d/power-device/\nmatch telnet m|^(\\d\\d\\d\\d)Telnet command shell\\r\\nPlease input username and password!\\r\\n\\1Telnet-> | p/Aviosys IP Power telnetd/ i/model $1/ d/power-device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x03Please Log in\\n\\r\\r\\nUsername:| p/Microsemi PowerDsine telnetd/ d/power-device/\n#Tsunami MP.11 5054-R v2.2.0(126)\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n\\[([\\w.-]+)\\]> Please enter password: | p/Proxim Tsunami telnetd/ d/bridge/ h/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03SH 0 -- \\r\\nSC 0 -- Connected to TelnetWatcherModule as connection id:(\\d+)\\.\\r\\nSF 0 -- \\r\\n| p/Nuance ASR TelnetWatcherModule/ i/connection id: $1/\nmatch telnet m|^\\xff\\xfe\\x01Ethernet-Serial Server\\r\\nUser name:admin\\r\\nPassword:| p/Aaxeon DevoLinx Ethernet-Serial bridge telnetd/ d/bridge/\nmatch telnet m|^\\xff\\xfb\\0\\xff\\xfd\\0\\xff\\xfb,\\xff\\xfd,\\xff\\xfb'\\xff\\xfa,k\\x0f\\xff\\xf0| p/Aaxeon DevoLinx COM port redirector/ d/bridge/\nmatch telnet m|^\\r\\nSorry, Telnet is not enabled from your address\\.\\r\\n| p/ShoreTel VoIP appliance telnetd/ i/access denied by IP/ d/VoIP adapter/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\n\\*{29}\\r\\n\\*  Welcome to Print Server  \\*\\r\\n\\*     Telnet Console {8}\\*\\r\\n\\*{29}\\r\\n\\r\\nServer Name    :  ([\\w.-]+)\\0*\\r\\nServer Model   :  ([\\w._ -]+)\\0*\\r\\nF/W Version    :  ([\\d.]+)  \\0*\\r\\nMAC Address    :  (.. .. .. .. .. ..)\\r\\nUptime {9}:  ([\\w ,:]+)\\r\\n\\nPlease Enter Password: | p/CellVision Print Server telnetd/ v/$3/ i/model: $2; MAC address: $SUBST(4,\" \",\":\"); uptime: $5/ h/$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to the server management network terminal!\\r\\n\\r\\r\\n\\r\\r\\nlogin : | p/IBM Integrated Management Module telnetd/ d/remote management/ cpe:/h:ibm:integrated_management_module/\nmatch telnet m|^\\x1b\\[H\\x1b\\[J\\r\\x1b\\[100B\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x1f\\n\\n\\n\\n(DGS-[\\w-]+) login: | p/D-Link $1 telnetd/ d/switch/ cpe:/h:dlink:$1/a\n# Unauthenticated root shells!\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03((?:ba)?sh)-([\\d.]+)# | p/Linux telnetd/ i/unauthenticated root shell! $1 version $2/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r\\nBusyBox v([\\d.]+) \\([^)]+\\) built-in shell \\(ash\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\n~ # | p/BusyBox telnetd/ v/$1/ i/unauthenticated root shell!/ cpe:/a:busybox:busybox:$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nBusyBox v([\\d.]+) \\([^)]+\\) built-in shell \\(ash\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\nermittle die aktuelle TTY\\r\\ntty is \\\"/dev/pts/1\\\"\\r\\nweitere telnet Verbindung aufgebaut\\r\\n# | p/BusyBox telnetd/ v/$1/ i/unauthenticated root shell!/ cpe:/a:busybox:busybox:$1/a\nmatch telnet m|^Lvl: +([\\d.]+) +\\*\\*\\* StorageTek Tape Drive Telnet Session \\*\\*\\*\\r\\n\\r\\n| p/StorageTek tape drive telnetd/ v/$1/ d/storage-misc/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\n\\nIQinVision (\\w+) Version V([\\d/.()]+)\\n\\r\\nType HELP at the 'Local_2> ' prompt for assistance\\.\\n\\r\\nLogin password> | p/IQinVision $1 telnetd/ v/$2/ d/webcam/\nmatch telnet m|^\\r\\n\\*{52}\\r\\n\\* Welcome to telnet_debug {26}\\*\\r\\n\\* built-ins are: {35}\\*\\r\\n| p/HP LaserJet debug telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nPolycom Command Shell\\r\\r\\nXCOM host:    localhost port: 4121\\r\\r\\n| p/Polycom Command Shell telnetd/ d/VoIP phone/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03([\\w -]+) ADSL2\\+/VDSL2 WLAN Router\\r\\nLogin: | p/TeleWell $1 telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Comtrend Gigabit 802\\.11n Router\\r\\nLogin: | p/Comtrend router telnetd/ d/WAP/\nmatch telnet m|^OPTX>OPTX Telnet Server\\r\\nOPTX>Please Enter Username:| p|Ademco/Honeywell Vista ICM telnetd|\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\x1b\\[H\\x1b\\[JELSTER A1700 Vision Meter - Version ([\\d.]+)\\r\\n\\r\\(c\\) Copyright [\\d,-]+ SAN People\\r\\n\\r\\r\\n\\rA1700 login: | p/Elster electricity meter telnetd/ v/$1/ d/power-device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x18\\r\\nWelcome Visiting Huawei Home Gateway\\r\\nCopyright by Huawei Technologies Co\\., Ltd\\.\\r\\n\\r\\nLogin:| p/Huawei Home Gateway telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfb\\x01\\r\\nMSM for Windows NT, Version ([\\d.]+)  Line #\\d+  UCI: | p/Micronetics Standard MUMPS/ v/$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n/ # \\x1b\\[6n| p/Coolstream set-top box telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfd\\x18\\r\\nNode: ([\\w.-]+), Instance: ([\\w.-]+)\\r\\n\\r\\nUSER>| p/InterSystems Cache database console/ i/node: $1; instance: $2/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to VyOS\\r\\n\\r([\\w.-]+) login: | p/VyOS telnetd/ d/router/ h/$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nIFX CPE login: | p/BusyBox telnetd/ i/IFX CPE ADSL modem/ d/broadband router/ cpe:/a:busybox:busybox/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nDVR_NETRA Board \\(([^)]+)\\)\\r\\n\\rlogin: | p/Texas Instruments DVR_NETRA embedded telnetd/ v/$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n433R\\+ login: | p/Hame 433R+ 3G Gateway telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\npartedmagic login: | p/BusyBox telnetd/ i/PartedMagic/ cpe:/a:busybox:busybox/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Xblue X50\\r\\nLogin: | p/XBlue X50 telnetd/ d/VoIP phone/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\x1b\\[2J\\x1b\\[H\\x0f\\r\\n\\*{16} Warning \\*{26}\\r\\nUnauthorized access is prohibited\\.  Only authorized\\r\\nusers of Sprint or their affiliates may access this\\r\\ndevice\\.\\r\\n\\*{51}\\r\\n\\r\\nUser Access Login\\r\\n\\r\\nPassword:| p/Adtran 908 telnetd/ i/Sprint equipment/\nmatch telnet m|^\\xff\\xfb\\x01\\n\\r#-{71}\\n\\r# Tiara Telnet Login\\n\\r#-{71}\\n\\r\\r {8}\\rlogin: | p/Tiara telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nCopperJet (16[\\w-]+) RouterPlus\\r\\nFirmware version: ([\\d.]+)\\r\\nAllied Data Technologies\\r\\n\\r\\nPlease login: | p/Allied-Data CopperJet $1 ADSL modem telnetd/ v/$2/ d/broadband router/ cpe:/h:allied_data:copperjet_$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n Welcome to OpenVMS \\(TM\\) VAX Operating System, Version V([\\d.]+)    \\r\\n\\r\\n\\rUsername: | p/OpenVMS telnetd/ i/OpenVMS $1; VAX/ o/OpenVMS/ cpe:/o:hp:openvms:$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfd\\x1fPacketFront terminal\\r\\nLocaltime is .*\\r\\n\\r\\n| p/PacketFront telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfc\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x1f\\xff\\xfb\\\"\\xff\\xfb\\x05\\r\\n\\r\\nOne60L G\\.SHDSL PPPoEoA\\r\\n\\r\\nUsername:| p/One60L G.SHDSL modem telnetd/ d/broadband router/\nmatch telnet m|^\\r\\n\\(c\\) Copyright 20\\d\\d, Extron Electronics, ([^,]+), V([\\d.]+), ([\\d-]+)\\r\\n| p/Extron $1 telnetd/ v/$2/ i/part number $3/\nmatch telnet m=^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\rSTMicroelectronics Base Distribution version ([\\d.]+)\\r\\n\\rLinux/sh4 (2\\.\\d+\\.\\d+|3\\.\\d+).*\\r\\n\\r\\r\\n\\rsh-([\\d.]+)# = p/STMicroelectronics Base Distribution telnetd/ v/$1/ i/open; sh-$3/ o/Linux $2/ cpe:/o:linux:linux_kernel:$2/a\nmatch telnet m|^\\xff\\xfc\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x1f\\xff\\xfb\\\"\\xff\\xfb\\x05\\n\\*{17} User Access Login \\*{20}\\r\\n\\r\\nUser:| p/TP-LINK TL-SG2008 telnetd/ d/switch/ cpe:/h:tp-link:tl-sg2008/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n[ _\\r\\n\\x7c\\.',-]+Arago Project http://arago-project\\.org ([\\w._ -]+)\\r\\n\\r\\r\\n\\rArago ([\\d.]+) [\\w._ -]+\\r\\n\\r\\r\\n\\r\\r\\n[\\w._ -]+ login: | p/Arago Project telnetd/ v/$2/ i/device: $1/ cpe:/a:arago-project:arago:$2/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n[ _\\r\\n\\x7c\\.',-]+Arago Project http://arago-project\\.org ([\\w._ -]+)\\r\\n\\r\\r\\n\\rArago ([\\d.]+) [\\w._ -]+\\r\\n\\r\\r\\n\\r\\r\\n[\\w._ -]+ login: | p/Arago Project telnetd/ v/$2/ i/device: $1/ cpe:/a:arago-project:arago:$2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\r\\nSession code: | p/Get Console Airconsole serial adapter/ d/bridge/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03 {19}={22}\\r\\r\\n {20}Welcome to ZXDSL ([\\w._-]+)\\r\\r\\n {19}={22}\\r\\r\\n\\r\\r\\nZTE Inc\\., Software Release ZXDSL \\1V([\\w._-]+)\\r\\r\\n\\r\\r\\nLogin: | p/ZTE ZXDSL $1 telnetd/ v/$2/ d/broadband router/ cpe:/h:zte:zxdsl_$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[4;26HUsername: \\x1b\\[7;1m\\[  \\]\\x1b\\[0m\\x1b\\[5;26HPassword: \\[ \\*{15} \\]\\x1b\\[23;1H\\x1b\\[2KEnter text, press <Return> or <Enter> when complete\\.\\x1b\\[14;26HEnter Username: | p/Avaya ERS 5600-series telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfd\\x01Welcome to QualityView Ipcam \\r\\n\\r\\nUsername: | p/QualityView IPcam telnetd/ d/webcam/\nmatch telnet m|^\\xff\\xfd'| p/Netkit telnet-ssl telnetd/ cpe:/a:netkit:telnet-ssl/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfd\\x01                    Product of HUACAM\\r\\n  \\r\\n\\r\\nUsername: | p/Huacam telnetd/ d/webcam/\nmatch telnet m|^\\n\\nNexia Home Intelligence Bridge Version ([\\w._-]+), \\d+/\\d+/\\d+ \\(Z-Wave ([\\w._-]+)\\)\\r\\n| p/Nexia Home Intelligence Bridge telnetd/ v/$1/ i/Z-Wave $2/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01>$| p/Lantronix Evolution OS telnetd/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\x1b\\[2J\\x1b\\[H\\x0fUser Access Login\\r\\n\\r\\nUsername:| p/Adtran Netvanta router telnetd/ d/broadband router/\n# fingerprint was truncated.\nmatch telnet m|^Welcome to the Frampton Debug Terminal\\.\\n\\rType 'help' for help\\.\\n\\rESN | p/Roku debug terminal/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x05\\n\\r\\nNickname\\.\\r\\n| p/Eggdrop IRC bot DCC/ cpe:/a:eggheads:eggdrop/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\rNVS\\r\\n\\rLinux (2\\.\\d+\\.\\d+)(?:[\\w._-]+)? on a armv\\w+ \\(\\d\\d:\\d\\d:\\d\\d\\)\\r\\n\\r([\\w._-]+) login: | p/Network Video Streamer telnetd/ i/model: $2/ d/media device/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\n# FireBrick FB2700\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\0\\xff\\xfb\\0\\xff\\xfd\\x18\\x1b\\[2K\\r\\0Username: | p/FireBrick telnetd/ d/firewall/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x03\\r\\n\\x1b\\[22m\\x1b\\[37m\\x1b\\[25m\\x1b\\[40m\\x1b\\[1;1f\\x1b\\[0J\\r\\n\\r\\n\\x1b\\[22m\\x1b\\[30m\\x1b\\[25m\\x1b\\[43m ={65} \\r\\n  KpyM Telnet/SSH Server - fully functional unregistered version\\.  \\r\\n  Order registration key at http://www\\.kpym\\.com/ {19}\\r\\n  The registered version does not display this notice\\. {13}\\r\\n ={65} \\r\\n\\r\\n| p|KpyM Telnet/SSH Server telnetd| i/unregistered/ cpe:/a:kpym:kpym_telnet_ssh_server/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Username : | p/Technicolor TG582n WAP telnetd/ d/WAP/ cpe:/h:technicolor:tg582n/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nlogin: | p/Swann DVR telnetd/\nmatch telnet m|^\\n\\rIP phone -122M : CLI\\n\\rLogin : | p/Funkwerk IP50 VoIP phone telnetd/ d/VoIP phone/ cpe:/h:funkwerk:ip50/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Modem Digital xDSL DSLink ([\\w-]+)\\r\\nLogin: | p/Opticom DSLink $1 DSL modem telnetd/ d/broadband router/ cpe:/h:opticom:dslink_$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r        Welcome to the LTIB Embedded Linux Environment\\r\\n\\r\\r\\n\\r\\r\\n\\rP2020DS login: | p/LTIB Embedded Linux Environment telnetd/ i/P2020 Development System/ o/Linux/ cpe:/a:stuart_hughes:ltib/ cpe:/h:freescale:p2020ds/ cpe:/o:linux:linux_kernel/a\n\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Grandstream ([\\w-]+) Command Shell\\r\\nPassword: | p/Grandstream $1 VoIP phone telnetd/ d/VoIP phone/ cpe:/h:grandstream:$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03Grandstream (HT[\\w._-]+) Command Shell| p/Grandstream $1 VoIP phone telnetd/ d/VoIP phone/ cpe:/h:grandstream:$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f(?:\\xff\\xfd!)?\\xff\\xfb\\x01\\xff\\xfb\\x03[\\r\\n]*Grandstream ([\\w-]+)  V([\\w.]+) Command Shell| p/Grandstream $1 VoIP router telnetd/ v/$2/ d/VoIP adapter/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Grandstream ([\\w._-]+) Command Shell Copyright [\\d-]+\\r\\nPassword: | p/Grandstream $1 VoIP phone telnetd/ d/VoIP phone/ cpe:/h:grandstream:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Grandstream GXV(\\w+) \\( Boot:([\\w._-]+)  Loader:([\\w._-]+)  App:([\\w._-]+)  HW: ([\\w._-]+) \\) Command Shell\\r\\nPassword: | p/Grandstream GXV-$1 VoIP phone telnetd/ v/$4/ i/boot version: $2; loader version: $3; hardware version: $5/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03Grandstream (\\w+) Command Shell Copyright \\d\\d\\d\\d\\r\\nPassword: | p/Grandstream VoIP phone telnetd/ i/model: $1/ d/VoIP phone/ cpe:/h:grandstream:$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Grandstream (GXW\\w+) \\( Boot:[\\d.]+  Loader:[\\d.]+  App:([\\d.]+)  HW: [\\w.]+ \\) Command Shell\\r\\nPassword: | p/Grandstream $1 telnetd/ v/$2/ d/VoIP phone/ cpe:/h:grandstream:$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03Grandstream (\\w+) Command Shell Copyright 2006-20\\d\\d\\r\\nPassword: | p/Grandstream $1 VoIP phone telnetd/ d/VoIP phone/ cpe:/h:grandstream:$1/a\n\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfd\\x1f\\r\\nlogin: | p/Patton SmartNode 4638 VoIP adapter telnetd/ d/VoIP adapter/ o/SmartWare/ cpe:/h:patton:sn4638/ cpe:/o:patton:smartware/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\nPrecise/RTCS v([\\w._-]+) Telnet server\\r\\n\\x1b\\[0m\\x1b\\[2J\\x1b\\[1;1H\\x1b\\[\\?25l\\x1b\\[0;30;47m\\x1b\\[0;34;47m\\*{80}\\r\\0\\r\\n\\* {78}\\*\\r\\0\\r\\n\\*{80}\\r\\0\\r\\n\\* {12}Remote Status {13}\\* {12}Remote Control {13}\\*\\r\\0\\r\\n\\*{80}\\r\\0\\r\\n\\*  Exciter #: | p/Precise RTCS telnetd/ v/$1/ i/Harris FlexStar HDx-FM broadcast exciter/ o/MQX RTOS/ cpe:/h:harris:flexstar_hdx-fm/ cpe:/o:precise:mqx:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03(TD-\\w+) [\\d.]+ DSL Modem Router\\r\\nLogin: | p/TP-LINK $1 WAP telnetd/ d/WAP/ cpe:/h:tp-link:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r        Welcome to Intermec Printer\\r\\n\\r\\r\\n\\r\\d+-(\\w+)-\\w+ login: | p/Intermec $1 printer telnetd/ d/printer/ cpe:/h:intermec:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x1f\\r\\n#-{71}\\r\\n# SAMSUNG ELECTRONICS CO\\., LTD\\. Login\\r\\n#-{71}\\r\\n\\r\\n\\r\\rlogin: | p/Samsung Ubigate router telnetd/ d/router/\nmatch telnet m|^\\r\\r\\nWarning: Telnet is not a secure protocol, and it is recommended to use Stelnet\\.\\r\\n\\r\\nLogin authentication\\r\\n\\r\\n\\r\\nUsername:\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f| p/Huawei switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\nWarning: Telnet is not a secure protocol, and it is recommended to use Stelnet\\.\\r\\r\\n\\r\\nLogin authentication\\r\\n\\r\\n\\r\\nUsername:| p/Huawei switch telnetd/ d/switch/\nmatch telnet m|^Welcome to \\\"([^\"]+)\\\" running WEBSERVER on host \\\"([\\w.-]+)\\\"| p/WebCTRL diagnostic telnetd/ i/site: $1/ h/$2/ cpe:/a:automatedlogic:webctrl/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03NetComm ADSL\\d*\\+? Router\\r\\nLogin: | p/NetComm ADSL router telnetd/ d/broadband router/\n# Default root:public, enable password \"zte\"\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n {10}\\*{60}\\r\\n {26}Welcome to the world of CLI !\\r\\n {10}\\*{60}\\r\\nUsername:| p/ZTE router telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\0\\xff\\xfd\\0Auto-sensing\\.\\.\\.\\r\\n    \\x1b\\[6n\\x08\\x08\\x08\\x08\\r    \\x1b\\[!\\x08\\x08\\x08\\r\\x01\\x01\\x01\\x01\\x01\\x01\\x01\\x01\\x01\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08\\x08| p/Galacticomm Worldgroup Server BBS/ cpe:/a:galacticomm:worldgroup_server/\nmatch telnet m|^\\xff\\xfe\\x01\\x1b\\[40m\\x1b\\[32;1m\\x1b\\[2JIVN-GENETECINT - Role: Archiver Agent: ([\\da-f]{8}-[\\da-f]{4}-[\\da-f]{4}-[\\da-f]{4}-[\\da-f]{12})\\r\\n| p/Genetec Security Center Archiver Agent/ i/id: $1/ cpe:/a:genetec:security_center/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03(VMG\\d+(?:-\\w+)?)\\r\\nLogin: | p/ZyXEL DSL modem telnetd/ i/model: $1/ d/broadband router/ cpe:/h:zyxel:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\(Phicomm\\) login: | p/Busybox telnetd/ i/Phicomm M1 WAP/ d/WAP/ cpe:/a:busybox:busybox/ cpe:/h:phicomm:m1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x18\\xff\\xfa\\x18\\0VT100\\xff\\xf0\\x1b\\[2J\\x1b\\[H\\x1b\\[J\\n\\r\\n\\rPSNA Web/SNMP Agent Adapter\\(V([\\d.]+)\\)\\n\\r\\n\\rCopyright \\(c\\) 2002-\\d\\d\\d\\d, EMERSON Network Power Co\\., Ltd\\.\\n\\r\\n\\r\\n\\r\\n\\r> User name \\(1-10 chars\\): | p/Emerson PSNA card telnetd/ v/$1/ d/power-misc/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03SS_BHUB\\(([\\d.]+)\\) login: | p/Samsung Wireless Audio Multiroom hub telnetd/ v/$1/ d/media device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03ZyXEL VDSL Router\\r\\nLogin: | p/ZyXEL VDSL router telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nBusyBox v([\\w._-]+) \\([\\d.:+-]*\\) Built-in shell \\(ash\\)\\r\\nEnter 'help' for a list of built-in commands\\.\\r\\n\\r\\n# | p/BusyBox telnetd/ v/$1/ i/**BACKDOOR**; unauthenticated root shell/ cpe:/a:busybox:busybox:$1/a\nmatch telnet m|^\\x1b\\[m\\x1b\\[H\\x1b\\[2J\\x1b\\[1;1H\\t\\tDeltaV Batch Runtime Server Maintainance Port\\r\\n\\r\\n {9}1\\. General Information\\r\\n {9}2\\. Client Information\\r\\n {9}3\\. Cache Information\\r\\n {9}4\\. Audit Trail\\r\\n {9}5\\. Logging Information\\r\\n\\x1b\\[12;1H {79}\\x1b\\[11;1H\\r\\n\\tSelect:  | p/Emerson DeltaV batch server maintenance port/ cpe:/a:emerson:deltav/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nBlackHole ([\\d.]+) ([\\w.-]+)\\r\\n\\r\\r\\n\\r([\\w.-]+) login: | p/Vu+ Black Hole telnetd/ v/$1/ i/model: $2/ d/media device/ h/$3/ cpe:/h:vuplus:$2/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\r\\n\\r\\r\\n\\r\\r\\n\\r\\r\\n<{5}  UPS SNMP Agent II Setup Program >{5}\\r\\r\\n\\r\\r\\n {7}Mega System Technologies Inc\\.\\r\\r\\n {7}Copyright\\(c\\) \\d\\d\\d\\d\\.  All Rights Reserved\\.\\r\\r\\n<{5}-{45}>{5}\\r\\r\\n {7}Press any key to continue \\.{7}| p/MegaTec NetAgent UPS monitor telnetd/\nmatch telnet m|^System is currently engaged\\. Connection closing \\.\\.\\.\\r\\n| p/HP LaserJet printer telnetd/ i/busy/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03~ # | p/utelnetd/ i/Aruba WAP/ d/WAP/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to Linux \\(([^)]+)\\) for ARM\\r\\n\\rKernel ([\\d.]+) on ARM\\r\\n\\r[\\w._-]+ login: | p/INJES fingerprint scanner telnetd/ i/model: $1/ o/Linux $2/ cpe:/o:linux:linux_kernel:$2/a\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfd\\x1fUser name: | p/Microsoft Windows IoT Core telnetd/ o/Windows 10 IoT/ cpe:/o:microsoft:windows_10:::iot/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\npsh running\\. Type \\\"help\\\" for help or \\\"exit\\\" to exit\\.\\r\\npsh > | p/Polycom videoconferencing system diagnostic shell/ d/VoIP phone/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nCIMC Debug Firmware Utility Shell\\r\\n\\[ help \\]# | p/Cisco Integrated Management Controller utility shell/ cpe:/h:cisco:unified_computing_system_integrated_management_controller/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfd\\0| p/Cisco or Actiontec MI424WR router telnetd/ d/broadband router/ cpe:/h:actiontec:mi424wr/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfe\\\"\\xff\\xfb\\x01| p/FortiGate Application Filtering/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\x1b\\[\\?3l\\x1b\\[2JPlease enter your user name and password!! \\r\\n\\r\\nLogin:| p/HP Scanjet N6350 telnetd/ d/specialized/ cpe:/h:hp:scanjet_n6350/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfd\\x01\\xff\\xfd\\0(?:\\r\\0\\n\\r\\0\\n(?:\\r\\0\\n)?-{77}\\r\\0\\n)?Model name {7}: (NPort [\\w._-]+)\\r\\0\\nMAC address {6}: ([0-9A-F:]+)\\r\\0\\nSerial No\\. {7}: (\\d+)\\r\\0\\nFirmware version : ([^\\r]+)\\r\\0\\nSystem uptime    : ([^\\r]+)\\r\\0\\n| p/Moxa $1 serial-to-IP converter telnetd/ v/$4/ i/MAC $2; serial number $3; uptime $5/ cpe:/h:moxa:$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfd\\x01\\xff\\xfd\\0\\r\\0\\n\\r\\0\\n-{77}\\r\\0\\nModel name {7}: ([\\w-]+)\\r\\0\\nMAC address {6}: ([A-F0-9:]+)\\r\\0\\nSerial No {8}: (\\d+)\\r\\0\\nFirmware version : (([\\d.]+) Build \\d+)\\r\\0\\n| p/Moxa $1 telnetd/ v/$4/ i/MAC: $2; serial: $3/ cpe:/h:moxa:$1/ cpe:/o:moxa:$SUBST(1,\"-\",\"_\")_firmware:$5/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfb\\x03\\*{48}\\r\\nWelcome to ZXAN product (\\w+) of ZTE Corporation\\r\\n\\*{48}\\r\\n\\r\\nUsername:| p/ZTE $1 router telnetd/ d/broadband router/ cpe:/h:zte:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03NetComm ADSL2\\+ Wireless Router\\r\\nLogin: | p/NetComm ADSL2+ WAP telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\*{31}\\r\\n\\r\\* {29}\\*\\r\\n\\r\\* {10}iCVS Image {9}\\*\\r\\n\\r\\* {29}\\*\\r\\n\\r\\*  www\\.i-have-a-dreambox\\.com  \\*\\r\\n\\r\\* {29}\\*\\r\\n\\r\\*{31}\\r\\n\\r\\r\\n\\rwelcome on your dreambox!\\r\\n\\rKernel ((?:2\\.)?\\d\\.\\d+)[\\d.]* \\([^)]+\\)\\.\\r\\n\\r([\\w.-]+) login: | p/Dreambox iCVS image telnetd/ d/media device/ o/Linux $1/ h/$2/ cpe:/o:linux:linux_kernel:$1/a\nmatch telnet m|^\\nREINCARNA / Linux\\.Wifatch\\n\\nYour device has been infected by REINCARNA / Linux\\.Wifatch\\.\\n\\n| p|Reincarna/Linux.Wifatch virus| i/**MALWARE**/\n# TL-SG3424\nmatch telnet m|^\\xff\\xfc\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x1f\\xff\\xfb\"\\xff\\xfb\\x05Password required, but none set\\r\\n| p/TP-LINK switch telnetd/ i/locked: no password set/ d/switch/\nmatch telnet m|^\\x1b\\[H\\x1b\\[J\\r\\x1b\\[100B\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\x1b\\[100B\\r\\n\\t\\t Supermicro Switch \\r\\n\\r\\nSMIS login: | p/Supermicro switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfc\\x01\\xff\\xfb\\x03\\xff\\xfc'\\xff\\xfd\\x01\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfe\"\\xff\\xfd'\\x1bkNyanyanyanyanyanyanya\\.\\.\\.\\x1b\\\\\\x1b\\]1;Nyanyanyanyanyanyanya\\.\\.\\.\\x07\\x1b\\]2;Nyanyanyanyanyanyanya\\.\\.\\.\\x07\\x1b\\[H\\x1b\\[2J\\x1b\\[\\?25l\\r\\0\\n\\r\\0\\n\\r\\0\\n {29}\\x1b\\[1mNyancat Telnet Server| p/Nyancat telnet server/ cpe:/a:kevin_lange:nyancat/\nmatch telnet m|^\\r\\n\\r\\nHello, this is DPTECH ([\\w-]+)'s console\\.\\r\\n\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe\"\\xff\\xfd\\x1f\\xff\\xfd\\x18\\xff\\xfa\\x18\\x01\\xff\\xf0Login:| p/DPtech $1 telnetd/ cpe:/h:dptech:$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nKernel ([\\d.]+) on \\(/dev/pts/\\d\\)\\r\\n\\rLedCard login: | p/XIXUN LedCard LED sign control card telnetd/ d/specialized/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfd\\x01          The products of network camera\\r\\n\\r\\nUsername: | p/Hi3518 network camera telnetd/ d/webcam/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05\\x1b\\[0m\\x1b\\[2J\\x1b\\[03;33HWelcome to the\\x1b\\[05;21H(?:\\d+ [GF]E )*(?:POE)? Managed Ethernet Switch\\x1b\\[13;40H\\x1b\\[15;27HUser Name :\\x1b\\[17;27HPassword  :\\x1b\\[15;39H| p/ComNet managed Ethernet switch telnetd/ d/switch/\n# Found on Netgear GS108T, GS110T, GS716T\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\(Broadcom FASTPATH Switching\\) \\r\\nApplying Interface configuration, please wait \\.\\.\\.| p/Broadcom FASTPATH Switching telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfb\\x01\\r\\n\\rCannot authenticate user due to:\\r\\nbad/missing configuration, inaccessible server, user low privileges\\.\\r\\nPlease reconfigure or use Password Recovery\\.\\r\\n\\r\\n| p/Dell PowerConnect switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\r\\nX-Digital Hudson Command Processor ([\\d.]+)\\r\\r\\nBuilt (\\w\\w\\w +\\d+ \\d\\d\\d\\d +\\d+:\\d\\d:\\d\\d)\\r\\r\\n\\r\\r\\nHudson> | p/X-Digital Systems satellite receiver command processor/ v/$1/ i/built $2/ d/media device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\*{27}\\r\\n\\r\\* {25}\\*\\r\\n\\r\\*   The Gemini Project    \\*\\r\\n\\r\\* {25}\\*\\r\\n\\r\\*{27}\\r\\n\\r\\*   Prepared By \"drhg\"    \\* \\r\\n\\r\\*  \\( Dream-Gaza Team \\)    \\*\\r\\n\\r\\*   www\\.dreamgaza\\.com {5}\\* {29}\\r\\n\\r\\*{27}\\r\\n\\r\\r\\n\\rChecking Kernel, Please Wait \\.\\.\\.\\.\\r\\n\\r\\r\\n\\rKernel ([2-9][\\d.]+)\\.\\r\\n\\rmd5sum \\(dreambox Linux (\\w+) \\)\\.\\r\\n| p/Gemini Project telnetd/ i/firmware for Dreambox; arch: $2/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/a\n# Could be a router, too, I guess.\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x05\\xff\\xfd!\\xff\\xfb\\x01\\r\\n\\*{78}\\r\\n\\* Copyright \\(c\\) 2004-(20\\d\\d) Hangzhou H3C Tech\\. Co\\., Ltd\\. All rights reserved\\.  \\*| p/H3C telnetd/ i/copyright date: $1/ d/switch/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[\\?7l\\x1b\\[[03];23r\\x1b\\[\\?6l\\x1b\\[1;1H\\x1b\\[\\?25l\\x1b\\[1;1HHP ([A-Z\\d]+) ((\\d+)-\\w+) Switch\\r\\r\\nSoftware revision ([\\w.]+)\\r\\r\\n\\r\\r\\n(?:\\(C\\) )?Copyright| p/HP $2 switch telnetd/ v/$4/ i/model number: $1/ d/switch/ cpe:/h:hp:$3/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[\\?7l\\x1b\\[[03];23r\\x1b\\[\\?6l\\x1b\\[1;1H\\x1b\\[\\?25l\\x1b\\[1;1HHP ([A-Z\\d]+) Switch (\\d+\\w+?)\\r\\r\\nSoftware revision ([\\w.]+)\\r\\r\\n| p/HP $2 switch telnetd/ v/$3/ i/model number: $1/ d/switch/ cpe:/h:hp:$2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03(?:\\xff\\xfd\\x18)?\\xff\\xfd\\0(?:\\r\\n)*\\x1b\\(U\\x1b\\[8;25;80t\\x1b\\[1;25r(?:\\x1b\\[1;1H)?\\x1b\\[2J\\x1b\\[1;1H\\r\\n\\x1b\\[2;1H\\x1b\\(U(?:\\x1b\\[1;1H)?\\x1b\\[2J\\x1b\\[1;1HMystic BBS v(\\d[\\w .]+) for ([^\\r\\n]+) Node \\d+\\r\\n\\x1b\\[2;1HCopyright \\(C\\) 1997-2\\d\\d\\d By James Coyle\\r\\n\\x1b\\[3;1H\\r\\n\\x1b\\[4;1HDetecting terminal emulation: \\x1b\\[6n| p/Mystic BBS telnetd/ v/$1/ i/for $2/ cpe:/a:james_coyle:mystic_bbs:$1/\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03$| p/Aastra Office A400-series or Mitel MiVoice Office 400 PBX telnetd/ d/PBX/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\nPrecise/RTCS v(\\d[\\w._-]+) Telnet server\\r\\n\\x1b\\[2J\\r\\nUsername: | p/Precise RTCS telnetd/ v/$1/ cpe:/o:precise:mqx:$1/\n# Delay usually means this comes under GetRequest or GenericLines, but NULL fallback will work\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x05\\xff\\xfd\\x05/---------\\\\\\r\\nC A N O P Y\\r\\n\\r\\n Motorola Broadband Wireless Technology Center\\r\\n\\(Copyright 2001-20\\d\\d Motorola (?:Solutions )?Inc\\.\\)\\r\\n\\r\\n\\r\\n\\r\\n| p/Motorola Canopy Subscriber Module telnetd/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n\\r\\n {27}${backquote}!M{44}::~\\r\\n {31}${backquote}${backquote}!M{33}!:~${backquote} ~   \\r\\n| p/Arris cable modem telnetd/ d/broadband router/\nmatch telnet m|^\\r\\nWANFleX Access Control 0\\r\\nSbt\\r\\n\\r\\n\\xff\\xfb\\x01\\xff\\xfe\"\\xff\\xfd\\x03\\xff\\xfd\\x1f\\rLogin:\\r\\x1b\\[6C\\x1b\\[K\\r\\x1b\\[6C| p/WANFleX telnetd/ cpe:/a:infinet:wanflex/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfd!| p/MiamiDx telnetd/ o/AmigaOS/\nmatch telnet m|^\\r\\nWelcome to TELNET\\.\\r\\n| p/Atlona video switch telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nWelcome to IP bullet 5000 HD [\\d.]+ from [\\d.]+\\r\\n| p/Bosch DINION IP Bullet 5000 webcam telnetd/ d/webcam/ cpe:/h:bosch:ip_bullet_5000/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r\\*{44}\\r\\n\\r\\* {12}Welcome to SMG1016M {11}\\*\\r\\n\\r\\*{44}\\r\\n\\r\\r\\n\\r([\\w._-]+) login: | p/BusyBox telnetd/ v/1.14.0 or later/ i/Eltex SMG-1016M VoIP gateway/ h/$1/ cpe:/a:busybox:busybox:1.14.0 or later/a cpe:/h:eltex:smg-1016m/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nMICROSENS G6 Micro-Switch\\r\\n\\rMICROSENS-G6-MAC-([0-9A-F-]{17}) login: | p/BusyBox telnetd/ v/1.00-pre7 - 1.14.0/ i/Microsens G6 switch; MAC: $1/ d/switch/ cpe:/a:busybox:busybox:1.00-pre7 - 1.14.0/a cpe:/h:microsens:g6/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03(NBG\\d+)(?: v\\d+)? login: | p/BusyBox telnetd/ v/1.14.0 or later/ i/ZyXEL $1 WAP/ d/WAP/ cpe:/a:busybox:busybox:1.14.0 or later/a cpe:/h:zyxel:$1/a\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\r\\n\\*{9}Restricted Access\\*{9}\\r\\n\\r\\n\\r\\nMaximum number of telnet sessions has been reached\\.\\r\\n\\r\\n\\r\\n| p/Adtran NetVanta telnetd/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfc\"Reading data\\.\\.\\.\\r\\n\\r\\nPlease choose your terminal type \\(1:VT100 2:VT52 \\[1\\]\\): | p/VSCOM NetCom 113 terminal server telnetd/ d/terminal server/ cpe:/h:vscom:netcom_113/\n# Null probe hack, actually requires further probes to elicit.\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x18Welcome, you are from .*\\r\\n-------------------------------\\r\\n-----Welcome to ATP Cli------\\r\\n-------------------------------\\r\\n| p/Huawei HG-series router telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\r\\nWelcome to Command Shell!\\r\\nUsername:| p/Dinstar VoIP gateway telnetd/ d/VoIP adapter/\n# Maybe too broad? IAC DO LINEMODE followed by motd\nmatch telnet m|^\\xff\\xfd\"[^\\xff]*pennmush (\\d+\\.[\\w.-]+)| p/pennmush MUD server/ v/$1/ cpe:/a:pennmush:pennmush:$1/\nmatch telnet m|^\\xff\\xfd\"[^\\xff]*$| p/pennmush MUD server/ cpe:/a:pennmush:pennmush/\nmatch telnet m|^\\r\\nSorry, session limit reached\\.\\r\\n| p/Avaya switch telnetd/ i/session limit reached/ d/switch/\nmatch telnet m|^\\xff\\xfe\\x01\\n\\rAquaController Login\\n\\rlogin: | p/Neptune Systems AquaController aquarium monitor telnetd/ d/specialized/\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\r\\n\\r\\n\\r\\nUser: | p/Teldat CIT telnetd/ d/router/\nmatch telnet m|^\\r\\nSystem administrator is connecting from ([^,]+), \\r\\nReject the connection request !!!\\r\\n| p/Draytek Vigor router telnetd/ i/admin connecting from $1/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\0\\n\\n\\nBlackboard (AT\\d+) Configuration\\r\\0\\n\\nEnter Password > | p/Blackboard $1 POS device telnetd/ cpe:/h:blackboard:$1/\nmatch telnet m|^\\n\\rPlanet IP phone -122M : CLI\\n\\rLogin : | p/Planet IP phone telnetd/ d/VoIP phone/\n# Is the version actually the BusyBox version?\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nQTerm\\(v([\\d.]+)\\)  [\\w,: ]+ \\r\\r\\n\\r([\\w]+) login: | p/BusyBox telnetd/ i/SafeScan QTerm $1/ d/specialized/ h/$2/ cpe:/a:busybox:busybox/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nopenbh ([\\d.]+) (\\w+)\\r\\n\\r\\r\\n\\r\\w+ login: | p/BusyBox telnetd/ i/Open Black Hole $1; hardware: $2/ d/media device/ cpe:/a:busybox:busybox/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\r        Welcome to the Sierra Wireless Inc\\.  ALEOS Environment\\r\\n\\r\\r\\n\\r(\\w+) login: | p/BusyBox telnetd/ i/Sierra Wireless ALEOS; model: $1/ cpe:/a:busybox:busybox/a cpe:/h:sierrawireless:$1/\nmatch telnet m|^\\r\\n\\r\\n\\*{80}\\r\\n\\r\\n {25}VARIODYN D1 SYSTEM-CONTROL \\r\\n\\r\\n {13}version: ([\\w.]+) (DOM V\\d[\\w.]+)\\r\\n {11}copyright: HLS Austria 1991 - \\d\\d\\d\\d\\r\\n         device type: ([\\w-]+)\\r\\n| p/Esser Variodyn D1 voice alarm system telnetd/ i/firmware: $1; $2; model: $3/ d/security-misc/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nWelcome to the server management network terminal!\\r\\n\\r\\r\\n\\rlogin: | p/BusyBox telnetd/ i/IBM IMM2/ cpe:/a:busybox:busybox/a cpe:/h:ibm:integrated_management_module_2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x1f\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfb\\x03\\r\\n {6}\\*{73}\\r\\n {6}Welcome to (\\w+) Carrier-Class High-end Routing Switch of ZTE Corporation| p/ZTE switch telnetd/ i/model: $1/ d/switch/ cpe:/h:zte:$1/\nmatch telnet m|^\\xff\\xfe\\x01Welcome to BIAMP Tesira VoIP\\r\\nSystem: AudiaFlex ([\\w-]+) ([\\d.]+)\\r\\nBuild Date: .*\\r\\n\\r\\nUsername: | p/Biamp AudiaFlex $1 telnetd/ v/$2/ d/VoIP adapter/ cpe:/h:biamp:audiaflex_$1/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03Welcome to login the Cloud Server\\.\\r\\ndomain:| p/Dinstar SIMCloud telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nCopyright \\(c\\) 2002 - \\d\\d\\d\\d Juniper Networks, Inc\\. All rights reserved\\.\\r\\n\\n\\r\\n\\r\\n\\r\\0Username: | p/Juniper Mobility System Software telnetd/ cpe:/a:juniper:mobility_system_software/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nmsm V([\\d.]+\\(ABFR\\.\\d+\\)C\\d+) ([A-Z]+\\d+)\\r\\n\\r\\r\\n\\r\\r\\n[A-Z]+\\d+ login: | p/ZyXEL $2 telnetd/ v/$1/ cpe:/h:zyxel:$2/\n# Doesn't appear to support interaction, just monitoring of firmware update progress\nmatch telnet m|^\\n\\rCB % | p/Camille Bauer power monitor status/ d/power-misc/\n\n#(insert telnet)\n\n# BusyBox options string, so maybe these are too generic?\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nPassword: | p/D-Link Boxee Box or Cyberoam CR25ia telnetd/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03Login: | p/Pirelli VDSL router or ZyXEL Keenetic Omni telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nusername:| p/BusyBox telnetd/ v/1.14.0 or later/ i/TP-LINK ADSL2+ router telnetd/ d/WAP/ cpe:/a:busybox:busybox/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n username:| p/BusyBox telnetd/ v/1.00-pre7 - 1.14.0/ i/Observa Telecom BHS-RTA WAP telnetd/ d/WAP/ cpe:/a:busybox:busybox/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\nPlease login: | p/BusyBox telnetd/ v/1.00-pre7 - 1.14.0/ i/Ruckus VF7811 WAP/ d/WAP/ cpe:/a:busybox:busybox:1.00-pre7 - 1.14.0/a cpe:/h:ruckus:vf7811/a\n# This one also matches Netgear CG3000-25TAUS\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\(none\\) login: | p/security DVR telnetd/ i/many brands/\n\nmatch telnet-proxy m|^nodnsquery/[\\d.]+ is not authorized to use the telnet proxy\\r\\n| p/Gauntlet telnet proxy/\nmatch telnet-proxy m|^Eingabe Servername\\[:Port\\] : | p/JanaServer telnet proxy/ i/German/\nmatch telnet-proxy m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Telnet Gateway ready=enter computer name to connect to\\.\\\\x0d\\\\x0a\\\\xd\\\\xahost\\[:port\\]: \\r\\n| p/602LAN Suite telnet proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet-proxy m|^\\r\\n\\r\\nEnter computer name to connect to\\.\\r\\ne\\.g\\. \\\"NetCom\\.com\\\"<CR>| p/WinProxy telnet proxy/ o/Windows/ cpe:/a:bluecoat:winproxy/ cpe:/o:microsoft:windows/a\nmatch telnet-proxy m|^\\xff\\xfc\\x01\\xff\\xfd\\\"ixProxy V([\\d.]+), Copyright \\(C\\) \\d+ Ixia Communications\\r\\nEnter target port ip address as login name \\(example: 10\\.0\\.1\\.1\\)\\r\\nlogin:| p/Ixia ixProxy telnet proxy/ v/$1/\nmatch telnet-proxy m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Blue Coat Shell proxy\\r\\nShell-proxy>| p/Blue Coat Shell proxy/ o/SGOS/ cpe:/o:bluecoat:sgos/a\nmatch telnet-proxy m|^Welcome to kingate ([\\w._-]+)-win32 telnet proxy\\.\\r\\nPlease enter host and port\\r\\nexample: abc\\.com 23\\r\\nkingate >| p/kingate telnet proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch tn3270 m|^\\xff\\xfd\\x1d| p/IBM Telnet TN3270/ i/3270-REGIME/\nmatch tn3270 m|^\\xff\\xfd\\x28| p/IBM Telnet TN3270/ i/TN3270E/\n\n# textui should be used for text interfaces without authentication or telnet escape sequences\nmatch textui m|^\\r\\nHi, my name is : *(\\w.*)\\r\\nHere is what I know about myself:\\r\\nModel: *(\\w.*)\\r\\nSerial Number: *(\\w+)\\r\\nSoftware Version: *([\\d.]+)\\r\\nBuild Information: *\\d+\\r\\nTime In Last Call: *[\\d:]+\\r\\nTotal Time In Calls: *[\\d:]+\\r\\nTotal Calls: *\\d+\\r\\nSNTP Time Service: *\\w+ \\r\\nLocal Time is: .* ([-+]\\d\\d\\d\\d)\\r\\n| p/Polycom videoconferencing system control port/ v/$4/ i/name: $1; model: $2; serial: $3; timezone: $5/ cpe:/h:polycom:$2/\nmatch textui m|^This is the command interface for nd-charger \\(version ([\\d.]+) build ([\\d.-]+)\\)\\.\\r\\nReady\\.\\.\\. Type \"help\" for a list of available commands\\.\\r\\nOK\\(0\\)\\r\\n\\r\\n| p/Nomad Digital Charger command interface/ v/$1/ i/build $2/ cpe:/a:nomad_digital:charger/\nmatch textui m|^Welcome to Talk2MVpnService management Interface \\r\\n$| p/Talk2M VPN service management/ cpe:/a:ewon:talk2m/\nmatch textui m|^\\r\\n\\*{52}\\r\\n\\* Welcome to telnet_debug {26}\\*\\r\\n\\* Type \"help\" to see a list of supported commands\\. \\*\\r\\n\\*{52}\\r\\n\\r\\ntelnet_debug> | p/HP LaserJet telnet_debug/ d/printer/\nmatch textui m|^\\+\\+\\+    UGW-HUAWEI *\\d\\d\\d\\d-\\d\\d-\\d\\d \\d\\d:\\d\\d:\\d\\d ([A-Z]+)\\r\\nO&M| p/Huawei UGW/ i/time zone: $1/\nmatch textui m|^l\\0o\\0g\\0i\\0n\\0 \\0a\\0s\\0:\\0 \\0| p/Satel INT-TSI keypad telnetd/ d/security-misc/\nmatch textui m|^Cannot accept a new connection| p/Satel INT-TSI keypad telnetd/ i/busy/ d/security-misc/\n\nmatch terraria m|^0\\0\\0\\0\\x02Client sent invalid network message \\(168626705\\)| p/Terraria Dedicated Server Mod/ i/Terraria game server/\nmatch terraria m|^.\\0R\\0\\0[\\x01-\\x06]\\0.{6}|s\n\nmatch thinprint m|^\\x94$| p/ThinPrint print server/ d/print server/\n\n# tinc 1.0.2-2 on Linux\nmatch tinc m|^0 \\w+ 17\\n| p/tinc vpn daemon/\n\n# TIME\n# This will match systems with clocks set between the\n# following 2 dates:\n# 0xD5000000 = Fri Mar 29 04:56:48 2013\n# 0xEFFFFFFF = Fri Aug  6 04:03:59 2027\n# Calculate this with the Python program:\n# python -c 'import datetime; print datetime.datetime.fromtimestamp(0xca000000 - 2208988800).ctime()'\n# Also needs updating (search for TIME):\n#   UDP Help\n#   TCP NULL\nmatch time m|^[\\xd5-\\xef]...$|s i/32 bits/\nmatch time m|^[\\xd5-\\xef]....\\0\\0\\0$|s i/64 bits/\n\n# Need more examples... -Doug\nmatch timeedit m|^\\0\\0\\0H\\0\\0\\0\\x02\\x0fTimeEdit131\\.| p/Evolvera TimeEdit/ v/1.3.1/\n\n# Tiny Personal Firewall 2.0\nmatch tinyfw m|^\\x0f\\0\\n\\0\\x01\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xc0\\x0ef7\\xbb\\x9bS\\xfc\\x86\\xe4\\x7f\\x18\\xb8\\x97\\x06 | p/Tiny Personal Firewall/ v/2.0/\n\nmatch tivo-remote m|^CH_STATUS (\\d{4}(?: \\d{4})?) [REMOTLCADING]+\\r| p/TiVo TCP Remote/ i/channel: $1/ d/media device/\n\n# http://www.tmail.spb.ru/index-19.htm\nmatch tmail m|^\\*\\*\\x18B0800000000022d\\r\\n\\x11\\x11\\x11\\*\\*EMSI_REQA77E\\r\\r\\[CONNECT TCP/IP/[\\d.]+/IFC\\]\\r\\nT-Mail v([\\w.]+)/TCP/IP/Noncommercial \\(C\\) 1992-99 by Andy Elkin\\r\\n\\*\\*EMSI_REQA77E\\rSorry\\.\\. Mail only node\\.\\r\\n| p/T-Mail/ v/$1/\n\nmatch togamelogin m|^D\\0\\0\\n\\0\\0\\0\\x0b\\0n\\0\\0\\0....$|s p/Talisman Online game login/ cpe:/a:mira_game:talisman_online/\nmatch trackerlink m=^\\d+\\|\\d+\\|TrackerLINK Ver\\. ([\\d.]+)= p/TrackerLINK/ v/$1/\n\nmatch traficon-flux m|^\\0\\?\\0\\0\\0\\0\\0\\0\\x17\\x04q\\r\\$\\x07\\0\\0\\x08\\0\\0\\0\\0\\0\\0\\0\\0Welcome to the Watts-Sdk-Plugin\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x14\\0\\0\\0\\0\\0\\x02\\x17\\x04q\\r\\$\\x08\\0\\x04\\x04\\x05\\x005\\x01\\0\\0\\x14\\0\\0\\0\\0\\0\\x02\\x17\\x04q\\r\\$\\x08\\0\\x04\\x04\\x05\\x005\\0\\0\\x01\\x17\\0\\0\\0\\0\\0\\x06\\x17\\x04q\\r\\$\\x08\\0\\x04\\x04\\x05\\x000\\x01\\0(media/eventImage\\.jsp\\?eventImageId=PWI_[\\w._-]+\\.jpg)\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\?\\0\\0\\0\\0\\0\\0\\x17\\x04q\\r\\$\\x0c\\0\\0\\t\\0\\0\\0\\0\\0\\0\\0\\0KEEP ALIVE\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\x17\\0\\0\\0\\0\\0\\x06\\x17\\x04q\\r\\$\\x02\\0\\x04\\x04\\x04\\x000\\x01\\0(media/eventVideo\\.jsp\\?eventVideoId=WI_61_[\\w._-]+)\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Traficon Flux video detection system/ i/$1 $2/\n\nmatch transferimg m|^0202 Camera Server Ready        CS-73D9C2\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0Lab\\. de Inform\\xe1tica\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/D-Link DCS-900 webcam transfer image service/ d/webcam/ cpe:/h:dlink:dcs-900/\n\nmatch trasker m|^TTCP\\t([\\w._-]+)\\n| p/Trasker time management/ v/$1/\n\nmatch trendnet-webcam m|^0301&<\\x16\\0\\x84\\xc7\\x02\\xe0\\xe1\\xb1\\x008\\x13\\x1e\\x0b\\x80<\\x16\\0\\xc7\\t\\x8f\\x05\\xc0\\xf0X\\0\\x1c\\xc2c\\x01p\\x1e\\x0b\\x80\\xe3c\\x01p\\xdcX\\0\\x1c7\\x8f\\x05\\xc0q\\x0b\\x80\\xe3F\\xc7\\x02\\xe0\\xb8,\\0\\x8e\\x1b\\xb1\\x008n\\x05\\xc0q\\xa3\\x008n\\xb4\\x02\\xe0\\xb8\\xd1\\x01p\\xdch\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/TRENDnet TV-IP100 webcam display/ d/webcam/ cpe:/h:trendnet:tv-ip100/a\n\n# Kerio Personal Firewall 4.02 on Windows 2000, 4.0.11 on W2K SP4+ too (port 44xxx)\nmatch keriopfservice m|^\\x12\\0\\x03\\0\\x04\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Kerio PF 4 Service/ i/maybe 4.0.2-11/\n# Kerio PF 4.0.11 unregistered - GUI process (Port 1027-1200,44xxx? RPC?) on MS W2K SP4+\nmatch keriopfgui m|^\\x12\\0\\r\\0\\x03\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x9a\\x20\\xd0Z\\x1e\\x1b\\xa3\\*\\xf2\\xdd\\xe2\\(\\xc3sp&\\xda\\xe4Yp\\xdbET\\xf9\\x8cc\\xc24\\*Y\\xbe\\xb3\\xba\\xd6%\\xf5\\xb668\\xad\\xab>@D<\\x01<i\\x80O>\\xdd>\\)\\xdb\\x18\\xf55\\xd1\\xba\\x96\\x1c\\x17\\x17\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\x01| p/Kerio PF 4 GUI/ i/maybe 4.0.11/\n# Kerio Personal Firewall 2.1.4 on Windows\n# Tiny Personal Firewall 2.0\n# Kerio Personal Firewall, Firewall engine version 2.1.5 Driver version 3.0.0 on WinXP\nmatch tinyfw m|^\\x0f\\0\\n\\0\\x01\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Kerio Personal Firewall/ v/2.1.X/ i/or Tiny Personal Firewall/\n\nmatch trackmania-gbx m|^\\x0b\\0\\0\\0GBXRemote 2$| p/TrackMania game GBX remote/\n\nmatch ums-webviewer m|^UMSA\\x14\\0\\0\\0\\x01\\x01\\x01\\0\\0\\0\\0\\0\\x01\\0\\0\\0| p/UMS WebViewer video stream/ d/webcam/\nmatch unknown m|^\\r\\n%connection refused by remote host\\.$| p/Cisco or HP network device sshd or telnetd/ i/connection refused/\n\nmatch upnp m|^HTTP/0\\.0 400 Bad Request\\r\\nSERVER: Unspecified, UPnP/1\\.0, Unspecified\\r\\nCONTENT-LENGTH: 50\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n<html><body><h1>400 Bad Request</h1></body></html>| p/Belkin Wemo upnpd/ i/UPnP 1.0/ d/power-misc/\n\n# 2.1.19\nmatch urbackup m|^.{16}r\\0\\0\\0\\x03 \\0\\0\\0.{32}\\x03\\0\\0\\0\\x06\\0\\0\\0 N\\0\\0=\\0\\0\\0\\x04|s p/UrBackup/ cpe:/a:martin_raiber:urbackup/\n\nmatch usher m|^\\0dFE Hello! This is the monotone usher at localhost\\. What would you like\\?| p/Monotone Usher plugin/ cpe:/a:monotone:monotone/\n\nmatch venti m|^venti-02-libventi\\n| p/Plan 9 venti storage system/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\n\nmatch vidyoroom m|^Error VCXCI_ERROR_BADREQUEST error Code:3\\n$| p/VidyoRoom HD-220 videoconferencing system/ d/media device/\n\n# virtualhere 2.2.5, port 7575\nmatch virtualhere m|^\\0\\0\\0\\0%\\0\\0\\0\\x0c\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0.\\xca\\xc0T| p/VirtualHere USB Server/ cpe:/a:virtualhere:usbserver/\n\nmatch visitview m|^Greetings:  The VISITview Server \\$Revision: ([\\w._-]+) \\$ welcomes you!\\n$| p/VISITview/ v/$1/\n\n# VMware has a buch of different auth settings so this gets messy\nmatch vmware-auth m|^220 VMware Authentication Daemon Version (\\d[-.\\w]+).*\\r\\n530 Please login with USER and PASS\\.\\r\\n|s p/VMware Authentication Daemon/ v/$1/\nmatch vmware-auth m=^220 VMware Authentication Daemon Version (\\d[-.\\w]+), ServerDaemonProtocol:(SOAP|IPC), MKSDisplayProtocol:VNC= p/VMware Authentication Daemon/ v/$1/ i/Uses VNC, $2/\n\nmatch ssl/vmware-auth m|^220 VMware Authentication Daemon Version (\\d[-.\\w]+): SSL Required\\r\\n| p/VMware Authentication Daemon/ v/$1/\nmatch ssl/vmware-auth m|^220 VMware Authentication Daemon Version (\\d[-.\\w]+): SSL [rR]equired, MKSDisplayProtocol:VNC(?: ,)? \\r\\n| p/VMware Authentication Daemon/ v/$1/ i/Uses VNC/\nmatch ssl/vmware-auth m=^220 VMware Authentication Daemon Version (\\d[-.\\w]+): SSL Required, ServerDaemonProtocol:(SOAP|IPC), MKSDisplayProtocol:VNC= p/VMware Authentication Daemon/ v/$1/ i/Uses VNC, $2/\n\nmatch vmware-aam m|^\\0\\0..\\x01\\0\\0\\0\\x03\\x03\\x01\\x03@\\xe4\\x01\\x02\\0..\\0\\xfe\\xff\\xff\\xff\\0\\0d\\0\\0..\\0\\xfe\\xff\\xff\\xff\\0\\0d\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x14\\0\\0\\0\\x8fd\\0\\0...\\t\\0\\0\\0\\0.\\0\\0\\0.\\0\\0\\0..\\0\\0.\\0\\0\\0\\x6b\\x1f\\0\\0\\0\\0\\0\\0\\x02\\0\\0\\0\\x8fc\\0\\0...\\t\\0\\0\\0\\0\\.\\0\\0\\0\\0\\0\\0\\0| p/VMware Automated Availability Manager/\n\nmatch vnc m|^RFB 003\\.00(\\d)\\n$| p/VNC/ i/protocol 3.$1/\nmatch vnc m|^RFB 003\\.00(\\d)\\n\\0\\0\\0\\0\\0\\0\\0\\x1aToo many security failures$| p/VNC/ i/protocol 3.$1; Locked out/\nmatch vnc m|^RFB 003.130\\n$| p/VNC/ i/unofficial protocol 3.130/\nmatch vnc m|^RFB 003\\.88[89]\\n$| p/Apple remote desktop vnc/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch vnc m|^RFB 000\\.000\\n$| p/Ultr@VNC Repeater/ cpe:/a:ultravnc:repeater/\nmatch vnc m|^RFB 003\\.00(\\d)\\n\\0\\0\\0\\0\\0\\0\\0jServer license key is missing, invalid or has expired\\.\\nVisit http://www\\.realvnc\\.com to purchase a licence\\.| p/RealVNC/ i/Unlicensed; protocol 3.$1/ cpe:/a:realvnc:realvnc/\nmatch vnc m|^RFB 003\\.00(\\d)\\n\\0\\0\\0\\0\\0\\0\\0nVNC Server license key is missing, invalid or has expired\\.\\nVisit http://www\\.realvnc\\.com to purchase a license\\.| p/RealVNC/ i/Unlicensed; protocol 3.$1/ cpe:/a:realvnc:realvnc/\nmatch vnc m|^RFB 003\\.00(\\d)\\n\\0\\0\\0\\0\\0\\0\\0\\x8cLa licencia de VNC Server no se ha activado correctamente\\.\\n\\nNo se permitir\\xc3\\xa1n conexiones hasta que se aplique una clave de licencia v\\xc3\\xa1lida\\.| p/RealVNC/ i/Unlicensed; protocol 3.$1; Spanish/ cpe:/a:realvnc:realvnc::::es/\nmatch vnc m|^RFB 003\\.00(\\d)\\n\\0\\0\\0\\0\\0\\0\\0MTrial period has expired\\.\\nVisit http://www\\.realvnc\\.com to purchase a license\\.| p/RealVNC/ i/Trial expired; protocol 3.$1/ cpe:/a:realvnc:realvnc/\nmatch vnc m|^RFB 004\\.000\\n| p/RealVNC Personal/ i/protocol 4.0/ cpe:/a:realvnc:realvnc:::personal/\nmatch vnc m|^RFB 004\\.001\\n| p/RealVNC Enterprise/ i/protocol 4.1/ cpe:/a:realvnc:realvnc:::enterprise/\nmatch vnc m|^RFB 005\\.000\\n| p/RealVNC Enterprise/ v/5.3 or later/ i/protocol 5.0/ cpe:/a:realvnc:realvnc:::enterprise/\nmatch vnc m|^RFB 003\\.00(\\d)\\n\\0\\0\\0\\0\\0\\0\\0:Unable to open license file: No such file or directory \\(2\\)| p/RealVNC Enterprise Edition/ i/protocol 3.$1/ cpe:/a:realvnc:realvnc:::enterprise/\nmatch vnc m|^RFB 003\\.00(\\d)\\n\\0\\0\\0\\0\\0\\0\\0jServer license key is missing, invalid or has expired\\.\\nVisit http://www\\.realvnc\\.com to purchase a license\\.| p/RealVNC Enterprise/ i/protocol 3.$1/ cpe:/a:realvnc:realvnc:::enterprise/\nmatch vnc m|^RFB 103\\.006\\n| p/Microsoft Virtual Server remote control/ o/Windows/ cpe:/a:microsoft:virtual_server/ cpe:/o:microsoft:windows/a\nmatch vnc m|^ISD 001\\.000\\n$| p/iTALC/\nmatch vnc m|^.{27}\\x16\\x20\\xe4\\xb0\\x95\\x63\\x29\\x78\\xdb\\x6e\\x35\\x92$|s p/Ultr@VNC/ cpe:/a:ultravnc:ultravnc/\nmatch vnc m|^RFB 240\\.6\\n\\0\\x02$| p/BRemote VNC/\nmatch vnc m|^RFB 009\\.123\\n| p/ATEN KVM-over-IP VNC/ d/remote management/\nmatch vnc m|^RFB 003\\.00(\\d)\\n\\0\\0\\0\\0\\0\\0\\0kVNC Server is not licensed correctly\\.\\n\\nConnections will be prohibited until a valid license key is applied\\.| p/RealVNC/ i/unlicensed; protocol 3.$1/ cpe:/a:realvnc:realvnc/\n\nsoftmatch vnc m|RFB \\d\\d(\\d)\\.\\d\\d\\d\\n| i/protocol $1/\n\n# Softmatch because I have no idea what this service really is.\nsoftmatch vport m|^\\x02\\x83\\0vPORT Rev:\\+D2Tech\\+ VPORT  VPORT_R_([\\d_]+) \\n| p/D2Tech vPort/ v/$SUBST(1,\"_\",\".\")/ cpe:/a:d2tech:vport:$SUBST(1,\"_\",\".\")/\n\n# http://www.eterlogic.com/Products.VSPE.html\nmatch vspe m|^\\nADA38072\\r\\nAD_80099\\r\\nABA39071\\r\\nAB_07096\\r\\nACA40064\\r\\nAC_00090\\r\\nADA41066\\r\\nAD_81100\\r\\nABA42065\\r\\nAB_08097\\r\\nACA43067\\r\\nACA44068\\r\\nAC_01091\\r\\nADA45070\\r\\nAD_81100\\r\\nADA45070\\r\\nADA45070\\r\\nADA45070\\r\\nABA46069\\r\\nAB_09098\\r\\n| p/Eterlogic Virtual Serial Posts Emulator/ o/Windows/ cpe:/o:microsoft:windows/\n\nmatch vtun m|^VTUN server ver +(\\d[-.\\w /]+)\\n\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Vtun Virtual Tunnel/ v/$1/\nmatch vtun m|^VTUN server ver \\. (\\d[-.\\w /]+)\\n\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Vtun Virtual Tunnel/ v/$1/\nmatch vtun m|^VTUN server ver \\(.*\\) (\\d[-.\\w /]+)\\n\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Vtun Virtual Tunnel/ v/$1/\n\nmatch vhcs m|^250 OK moleSoftware VHCS2 Server Welcomes You !\\r\\n| p/moleSoftware virtual hosting control system/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\n# \"rel20\"\nmatch warcraft m|^\\0\\x30WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT\\0\\0'BE\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0.....| p/MaNGOS worldserver/ cpe:/a:getmangos:mangos/\nmatch warcraft m|^WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT\\n| p/MaNGOS worldserver/ cpe:/a:getmangos:mangos/\n\nmatch watchguard m|^EVENT 354 log info Connected to the WatchGuard Authentication Gateway SSO agent. Version ([\\w.]+) Build ([\\w]+). Connected at:([\\s\\w./:]+)To log in to the SSO Agent| p/WatchGuard Authentication Gateway SSO/ v/$1 (Build $2)/ i/System time:$3/ cpe:/a:watchguard:authentication_gateway/\n\nmatch weather m|^TrueWeather\\r\\n\\r\\n>| p/TrueWeather Desktop Weather Authority server/\n# http://www.3w.net/lan/faq.html\nmatch websense-eim m|^\\x96\\xfeS\\xab$| p/Websense EIM/\n\nmatch websm m|^\\+ read portFile\\n\\+ head -1\\n\\+ find /var/websm/| p/AIX wsmserver/ o/AIX/ cpe:/o:ibm:aix/a\nmatch websm m|^\\+ read portFile\\n\\+ find /var/websm/data/wservers/| p/AIX wsmserver/ o/AIX/ cpe:/o:ibm:aix/a\nmatch websm m|^\\+ find /var/websm/data/wservers/ -type f -print -name \\[0-9\\]\\*\\[0-9\\]\\n\\+ 2> /dev/null\\n\\+ head -1\\n\\+ read portFile\\n\\+| p/AIX wsmserver/ o/AIX/ cpe:/o:ibm:aix/a\n\nmatch weprint m|^\\0\\0\\x26\\xa1\\0\\0\\x26\\x99<header><type>hello</type><version>1</version><envVersion>2</envVersion><seq>[0-9a-f]+</seq><info>\\(c\\) 2008, EuroSmartz Ltd\\. Only for use with EuroSmartz approved software\\.</info><model>wep/([\\w._-]+)</model><id>\\d+</id><serverName>([\\w._-]+)</serverName>| p/WePrint printer sharing server/ v/$1/ h/$2/\n\nmatch wifi-mouse m|^system\\x20mac\\x2010\\.9\\nversion\\x201\\.5\\.0\\.0\\n$|s p/WiFi Mouse/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch wifi-mouse m|^system\\x20windows\\x206\\.1\\nversion\\x201\\.\\x205\\.\\x200\\.\\x200\\n$|s p/WiFi Mouse/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch wifi-mouse m|^system\\x20linux\\x2010\\.0\\.4\\nversion\\x201\\.\\x205\\.\\x200\\.\\x200\\n$|s p/WiFi Mouse/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\n# \"1.0\" is not a version\nmatch wikidpad m|^WikidPad_command_server 1\\.0\\n| p/WikidPad command server/\n\nmatch wincor-atm m|^pof16 \\(FillUp\\) v\\.([\\d.]+)\\n\\{cftftc\\}\\r| p/Wincor Nixdorf ATM service/ v/$1/ d/specialized/\n# These are probably a different service; seen running on the same system as the above\nmatch wincor-atm m|^p16in\\n| p/Wincor Nixdorf ATM service/ d/specialized/\nmatch wincor-atm m|^{cftftc}\\r| p/Wincor Nixdorf ATM service/ d/specialized/\n\nmatch winshell m|^WinShell:| p/Backdoor.WinShell.50/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# Could really be a better regex, but only had one submission\nmatch workrave m|^\\x002\\x02\\0\\0\\x06\\0[ \\da-f]+\\0.*\\x0bmicro_pause\\0.*\\nrest_break\\0.*\\x0bdaily_limit\\0|s p/Workrave/\n\n# CcXstream Media Server 1.0.15 on Linux - Uses XBMSP (X-Box Media Streaming Protocol)\nmatch xbmsp m|^XBMSP-1\\.0 1\\.0 CcXstream Media Server (\\d[-.\\w]+)\\n| p/CcXstream Media Server/ v/$1/\nmatch xbmsp m|^XBMSP-1\\.0 1\\.0 Media File XStream Server \\n| p/Media File XStream/\nmatch xbmsp m|^XBMSP-1\\.0 1\\.0 xbmsd ([\\w._-]+)\\n| p/xbmspd/ v/$1/\nmatch xinetd m=^(?:[-\\w_.]+ (?:tcp|udp) \\d{1,5}\\n)+= p/xinetd service display/ o/Unix/\n# XFCE Desktop Version 3.99.4 From Gentoo 1.4 Ebuild on Linux 2.4.6\nmatch xfce-session m|^\\0\\x01\\0.\\0\\0\\0\\0$|s p/XFCE Session Manager/\nmatch xmail-ctrl m|^\\+\\d+ <[\\d.]+@[\\d.]+> XMail ([\\d.]+) \\(Linux/Ix86\\) CTRL Server; .*\\r\\n| p/XMail CTRL Server/ v/$1/ o/Linux/ cpe:/a:davide_libenzi:xmail:$1/ cpe:/o:linux:linux_kernel/a\nmatch xmail-ctrl m|^\\+\\d+ <[\\d.]+@[\\d.]+> XMail ([\\d.]+) CTRL Server; .*\\r\\n| p/XMail CTRL Server/ v/$1/ cpe:/a:davide_libenzi:xmail:$1/\nmatch xmbmon m|^TEMP0 +: +[\\d.]+\\nTEMP1 +: +[\\d.]+\\nTEMP2 +: +[\\d.]+\\nFAN0 +: +[\\d.]+\\nFAN1 +: +[\\d.]+\\nFAN2 +: +[\\d.]+\\n| p/Mother Board Monitor/\n\n# Right now once a softmatch triggers, only match lines with the same\n# service name will match.  Like with the HTTP softmatch, this is somewhat\n# restrictive.  If softmatch is ever updated to behave differently\n# go ahead and uncomment these (Brandon)\n#softmatch xml m|^<\\?xml version=\\\"([^\\\"]+)\\\" encoding=\\\"([^\\\"]+)\\\"[^>]*(?<=\\?)>| i/XML version $1; encoding: $2/\n#softmatch xml m|^<\\?xml version=\\\"([^\\\"]+)\\\"[^>]*(?<=\\?)>| i/XML version $1/\n\nmatch xine-remote m|^([-\\w_.]+) xine-ui ([\\d.]+) remote server\\. Nice to meet you\\.\\n| p/Xine-UI remote control/ v/$2/ h/$1/\n\nmatch yiff m|^\\0\\0\\0\\n\\0\\x03\\0\\0\\0\\0$| p/YIFF network sound server/\n\nmatch zebra m|^\\r\\nHello, this is zebra \\(version (\\d[-.\\w]+)\\)\\.\\r\\nCopyright 1996-20| p/GNU Zebra routing software/ v/$1/ cpe:/a:gnu:zebra:$1/\nmatch zebra m|^\\r\\nHello, this is zebra \\(version (\\d[-.\\w]+)\\)\\.\\r\\nCopyright 200\\d| p/GNU Zebra routing software/ v/$1/ cpe:/a:gnu:zebra:$1/\nmatch zebra m|^Vty password is not set\\.\\r\\n$| p/Quagga routing software/ cpe:/a:quagga:quagga/\nmatch zebra m|^\\r\\nUser Access Verification\\r\\n\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe\\\"\\xff\\xfd\\x1fPassword: | p/GNU Zebra routing software/ cpe:/a:gnu:zebra/\n\nmatch zenworks m|^<AgentInfo><Version>([^<]+)</Version></AgentInfo>\\0?| p/ZENworks Patch Management/ v/$1/ o/Windows/ cpe:/a:novell:zenworks_patch_management_server:$1/ cpe:/o:microsoft:windows/a\n\nmatch pcp m|^\\0\\0\\0\\x14\\0\\0p\\0\\0\\0..\\0\\0\\0\\0\\x02\\x01\\0\\0|s p/SGI Performance Co-Pilot/ cpe:/a:sgi:performance_co-pilot/\nmatch pcp m|^\\0\\0\\0\\x14\\0\\0p\\0\\0\\0..\\xff\\xff\\xfc\\x11\\x02\\x000a|s p/SGI Performance Co-Pilot/ cpe:/a:sgi:performance_co-pilot/\n\nmatch sharp-twain m|^Network TWAIN server, protocol=1\\.0, status=ready, port=52001\\r\\n$| p/Sharp printer network TWAIN/ d/printer/\n\nmatch smtp m|^220 SPAM, we hates it.\\r\\n| p/Barracuda Spam firewall/\n\n# 13720/tcp\nmatch bprd m|^\\0\\0\\0.EXIT[ _]STATUS \\d+$|s p/Veritas Netbackup/ cpe:/a:symantec:netbackup/\nmatch bprd m|^request daemon can't accept sessions\\nanother instance may already be running\\.\\nAddress already in use\\n$| p/Veritas Netbackup/ cpe:/a:symantec:netbackup/\nmatch bprd m|^bp[-\\w]+: error while loading shared libraries: libstdc\\+\\+-libc6\\.2-2\\.so\\.3: cannot open shared object file: No such file or directory\\n$| p/Veritas Netbackup/ i/broken/ cpe:/a:symantec:netbackup/\n# 13782/tcp\nmatch bprd m|^gethostbyaddr: [\\w ]+\\n$| p/Veritas Netbackup/ i/refused/ cpe:/a:symantec:netbackup/\nmatch bprd m|^bpjava-msvc: error while loading shared libraries: libpam\\.so\\.0: cannot open shared object file: No such file or directory\\n| p/Veritas Netbackup/ i/broken/ cpe:/a:symantec:netbackup/\n\n# PostCast SMTP server 2.6.0 ( http://www.postcastserver.com/ )\nmatch smtp m|^220 PostCast SMTP server.*\\r\\n$| p/PostCast SMTP server/\n\nmatch omapi m|^\\0\\0\\0d\\0\\0\\0\\x18$| p/ISC (BIND|DHCPD) OMAPI/\n\nmatch openvpn m|^\\0\\x0e@........\\0\\0\\0\\0\\0\\0\\x0e@|s p/OpenVPN/ cpe:/a:openvpn:openvpn/\nmatch openvpn m|^\\0\\x0e@........\\0\\0\\0\\0\\0|s p/OpenVPN/ cpe:/a:openvpn:openvpn/\nmatch openvpn m|^\\0\\*@.*\\0\\0\\0\\0\\0|s p/OpenVPN/ cpe:/a:openvpn:openvpn/\n# Not sure about these. Maybe if we get more samples we could combine or generalize them:\nmatch openvpn m|^\\0<\\xaa\\xc5\\r\\^\\xf7\\x1b\\xd1\\xe1a/\\xe8\\x17P\\x9dOb\\xbb\\x93\\x87\\xe0\\xf3v\\x81K\\xa4!\\xe6\\xc7\\x01\\x977u5A\\xd1M\\x1b;\\xc7\\xcb\\x87\\xb5\\x87\\xf3~\\xc8w\\xef\\xd3\\x87eA\\0\\^\\xbf\\xc5\\x93i\\xf6\\x87$| p/OpenVPN/ cpe:/a:openvpn:openvpn/\nmatch openvpn m|^\\0<\\x07\\xbf4>JZ\\x18\\xc8\\{\\x95\\xc8\\x7f\\^\\xc2M\\xde\\x01W\\x06\\x90p\\x047\\xf4Hj\\x1c\\xa7\\x98\\]\\xad\\xb2\\x15-P\\x80\\xf3z\\xc4\\$F\\xbe\\xa8ar\\xd5\\x07mt\\)\\xef\\x05\\x98\\xa4\\x1fc\\$\\xac\\.\\xd4\\0\\x7cm\\xcd\\xa1L0 | p/OpenVPN/ cpe:/a:openvpn:openvpn/\n\nmatch openvpn-management m|^>INFO:OpenVPN Management Interface Version ([\\d.]+) -- type 'help' for more info\\r\\n>| p/OpenVPN Management Interface/ v/$1/ cpe:/a:openvpn:openvpn:$1/\n\nmatch osiris m|^\\x80[=+:]\\x01\\x03\\x01\\0.\\0\\0\\0\\x10\\0|s p/osiris host IDS agent/\n\n#<\\x03\\x01H\\|\\t\\xfa\\x80\\x1fr\\x1aN\\.\\xa2\\xa9\\?\\x0e~\\]\\xb7\\x9dG\\xb3\\x93E9p\\xb5\\x01\\xeb\\x8f21\\xde/\\0\\0\\x14\\x009\\x008\\x005\\0\\x16\\0\\x13\\0\\n\\x003\\x002\\0/\\0\\x05\\x02\\x01\\0\n###############^\\x16\\x03\\x01\\0.\\x01\\0\\0<\\x03\\x01I\\x01\\xe0\\x9dn\\xfd\\n\\x8c${backquote}\\x99\\xd9\\x9bV}\\x92\\xe4\\xe1\\xee\\xab\\x184\\x0f\\x08\\xb4\\xf1\\xfc\\x10XF\\xe9\\xae\\xfb\\0\\0\\x14\\x009\\x008\\x005\\0\\x16\\0\\x13\\0\\n\\x003\\x002\\0/\\0\\x05\\x02\\x01\\0\n###############^\\x16\\x03\\x01\\0.\\x01\\0\\0>\\x03\\x01I\\x7fDY\\(}\\xafA1%\\xe8W\\x8e\\x04\\x8e\\xeem\\x1aQ\\xa6k_\\x978\\x8a\\xe4\\xc5%_S\\xa9K\\0\\0\\x16\\x009\\x008\\x005\\0\\x16\\0\\x13\\0\\n\\0f\\x003\\x002\\0/\\0\\x05\\x02\\x01\\0\n\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\nAllow: OPTIONS, DESCRIBE, SETUP, PLAY, PAUSE, TEARDOWN\\r\\n\\r\\n$| p/Geovision webcam rtspd/ d/webcam/\n\nmatch svnserve m|^\\( success \\( \\d \\d \\( (?:ANONYMOUS )?\\) \\( | p/Subversion/ cpe:/a:apache:subversion/\n\nmatch sumatra-ds m|^v7\\x87\\x12\\0\\0\\0\\x01........$|s p/Sumatra DS Server/\n\nmatch trinitycore m|^Wrong IP!$| p/TrinityCore game server remote admin/\n\n# http://epos.ure.cas.cz/\nmatch ttscp m|^TTSCP spoken here\\r\\nprotocol: 0\\r\\nextensions:\\r\\nserver: Epos\\r\\nrelease: ([\\w._-]+)\\r\\nhandle: [\\w-]+\\r\\n$| p/Epos text-to-speech control protocol/ v/$1/\n\nmatch icecream m|^[\\x14-\\x1f]\\0\\0\\0$| p/icecreamd/\n\n#commenting out - not APC, likely java-object - TomS - 2010.09.26\n#match apc-agent m|^\\xac\\xed\\0\\x05$| p/APC PowerChute agent/ d/power-device/\n\nmatch afs3-fileserver m|^load1:[\\d.]+###load2:[\\d.]+###load3:[\\d.]+###MemTotal:(\\d+) kB###MemFree:(\\d+) kB| p/AFS fileserver/ i|$2/$1 kB free|\n\nmatch unitrends-backup m|^\\xa5A\\0\\x01\\0\\0\\0,\\0\\0\\0\\x02\\0\\0\\0L\\0\\0\\0\\x08Connect\\0\\0\\0\\0x\\0\\0\\0\\x0857222\\0\\0\\0$| p/Unitrends backup daemon/ cpe:/a:unitrends:enterprise_backup/\n\nmatch vss m|^GeOv\\x10\\0\\0\\0..\\0\\0\\0P\\x01\\0|s p/GeoVision IP camera Video Streaming Service/ d/webcam/\n\nmatch vtp m|^220 Welcome to Video Disk Recorder \\(VTP\\)\\r\\n| p/VTP control for VDR/ d/media device/\n\nmatch warcraft m|^\\x00\\x06\\xec\\x01....$|s p/World of Warcraft world server/\n# Also www.getmangos.com: free, open source World of Warcraft server.\n# Also Trinity World of Warcraft Server (for 3.3.5)\nmatch warcraft m|^\\x00\\x2a\\xec\\x01....|s p/World of Warcraft world server/\nmatch warcraft m|^\\x00\\x27\\x00\\x34.....................................$|s p/World of Warcraft world server/\n\nmatch wingate-control m|^.\\x01.[\\x02\\x03]\\x01\\d+\\0$|s p/WinGate Administration/ o/Windows/ cpe:/o:microsoft:windows/a\n# Wingate redir: Probably not general enough\nmatch wingate m|^\\0\\n\\0\\0\\x02\\0\\0\\0\\x01\\0$| p/WinGate transparent redirection/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch mail-admin m|^OK0100 eXtremail V([\\d.]+) release (\\d+) REMote management \\.\\.\\.\\r\\n| p/eXtremail remote management/ v/$1 release $2/\nmatch ppp m|^SuSE Meta pppd \\(smpppd\\), Version ([\\d.]+)\\r\\n| p/SuSE Meta pppd/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\n# \\xc0\\x21 -> LCP\nmatch ppp m|^\\x7e\\xff\\x7d\\x23\\xc0!}!}!} }4}\\\"}&} } } } }%}&\\xf4\\xd1\\xa2\\xf6}'}\\\"}\\(}\\\"\\xc7}#~~\\xff}#\\xc0!}!}!} }4}\\\"}&} } } } }%}&\\xf4\\xd1\\xa2\\xf6}'}\\\"}\\(}\\\"\\xc7}#~~\\xff}#\\xc0!}!}!} }4}\\\"}&} } } } }%}&\\xf4\\xd1\\xa2\\xf6}'}\\\"}\\(}\\\"\\xc7}#~~\\xff}#\\xc0!}!}!} }4}\\\"}&} } } } }%}&\\xf4\\xd1\\xa2\\xf6}'}\\\"}\\(}\\\"\\xc7}#~~\\xff}#\\xc0!}!}!} }4}\\\"}&} } } } }%}&\\xf4\\xd1\\xa2\\xf6}'}\\\"}\\(}\\\"\\xc7}#~~\\xff}#\\xc0!}!}!} }4}\\\"}&} } } } }%}&\\xf4\\xd1\\xa2\\xf6}'}\\\"}\\(}\\\"\\xc7}#~~\\xff}#\\xc0!}!}!} }4}\\\"}&} } } } }%}&\\xf4\\xd1\\xa2\\xf6\\x7d\\x27\\x7d\\x22\\x7d\\x28\\x7d\\x22\\xc7\\x7d\\x23\\x7e| p/pppd/\nmatch ppp m|^\\x7e\\xff\\x7d\\x23\\xc0!}!}!} }4}\\\"}&} } } } }%}&\\x81\\xf4\\xdb\\xc0}'}\\\"}\\(}\\\"\\xc4\\x80~~\\xff}#\\xc0!}!}!} }4}\\\"}&} } } } }%}&\\x81\\xf4\\xdb\\xc0}'}\\\"}\\(}\\\"\\xc4\\x80\\x7e| p/pppd/\n\nsoftmatch ppp m|^\\x7e\\xff\\x7d\\x23.*\\x7e|\n\nmatch pppctl m|^PPP on ([-\\w_.]+)> | p/pppctld/ h/$1/\n\nmatch qds m|^-=QDS Task Refactoring Dev v([\\w._-]+) Debug Tracing LiveView=-\\r\\nType quit or \\^X to close connection\\.\\r\\n\\r\\n$| p/QlikView Distribution Service/ v/$1/\n\nmatch honeypot m|^503 Service Unavailable\\r\\n\\r\\n\\0$| p/Network Flight Recorder BackOfficer Friendly honeypot/\nmatch honeypot m|^\\r\\nlogin: \\0$| p/Network Flight Recorder BackOfficer Friendly telnet honeypot/\nmatch honeypot m|^\\r\\n[-\\w_.]+ [\\d.]+ - Unauthorized access \\x07prohibited under penalty of law\\.\\r\\n\\r\\nlogin: \\xff\\xfc\\x01| p/Whiz Kid Technomagic Imaginary telnet honeypot/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch honeypot m|^Microsoft Windows XP \\[Version [\\d.]+\\]\\n\\(C\\) Copyright 1985-\\d+ Microsoft Corp\\.\\n\\nC:\\\\>| p/honeyd cmdexe.pl/\n\nmatch dlswpn m|(?<=.)IOS\\x20\\(tm\\)\\x20([-\\d\\w.]+).{20,30}\\x20Version\\x20([-\\d\\w.()]+),\\x20|s p/Cisco $1 Router/ i/IOS $2/ d/router/ o/IOS/ cpe:/o:cisco:ios/a\nmatch tunnelvision m|^HELLO Welcome to Tunnel Vision \\(([\\d.]+)\\)\\n| p/Tunnel Vision VPN info/ v/$1/\n\n\nmatch domain m|^\\x80\\xf0\\x80\\x12\\0\\x01\\0\\0\\0\\0\\0\\0\\x20CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01| p/Microsoft DNS/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows/a\n\nmatch amx-icsp m=^\\x02\\0\\]\\x02\\0\\0\\0\\0\\0\\0\\x01\\0.\\0\\0\\0\\x01\\x0f\\xff\\x81\\0\\x97\\0\\0\\0.\\0\\x04\\0\\0\\0\\x01\\x01\\+\\d+x\\d+\\0\\0\\x01\\|v([\\d.]+)\\0NI Master\\0AMX Corp\\.\\0\\x06\\x0c\\xc0\\xa8\\\"D\\x05'\\0${backquote}\\x9f....\\x02\\0U\\x02\\0\\0\\0\\0\\0\\0\\x01\\0.\\0\\0\\0\\x01\\x0f\\xff\\x82\\0\\x97\\0\\0\\0.\\0\\x04\\x01\\0\\0\\x01\\x01\\+N/A             \\x01zv([\\d.]+)\\0vxWorks Image\\0AMX Corp\\.\\0\\0\\0.\\x02\\0O\\x02\\0\\0\\0\\0\\0\\0\\x01\\0.\\0\\0\\0\\x01\\x0f\\xff\\x83\\0\\x97\\0\\0\\0.\\0\\x04\\x02\\0\\0\\x01\\x01\\+N/A             \\x01{v([\\d.]+)\\0BootROM\\0AMX Corp\\.\\0\\0\\0.\\x02\\0\\^\\x02\\0\\0\\0\\0\\0\\0\\x01\\0.\\0\\0\\0\\x01\\x0f\\xff\\x84\\0\\x97\\0\\0\\0.\\0\\x04\\x03\\0\\0\\x01\\x01\\x000000000000000000\\x01\\x0ev([\\d.]+)\\0AXLink I/F uController  \\0AMX Corp\\.\\0\\x03\\0.$= p/AMX ICSP/ v/$1/ i|VxWorks image $2; boot ROM $3; AXLink I/F uController $4| o/VxWorks/ cpe:/o:windriver:vxworks/a\n\nmatch uc4 m|^\\d\\d\\d\\d\\d\\d\\d\\dUC4:global001NAT {24}\\x04H(.+)\\x20| p/UC4 Executor/ i/name: $1/\nmatch uc4 m|^\\d\\d\\d\\d\\d\\d\\d\\dUC4:global001NAT {24}| p/UC4 Executor/\n\nmatch wbem m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: sfcHttpd\\r\\nContent-Length: 0\\r\\n\\r\\n| p/SBLIM Small Footprint CIM Broker/ cpe:/a:standards_based_linux_instrumentation_project:sfcb/\n\n# https://www.google.com/patents/US20070250671\nmatch wcbackup m|^~\\x80\\x04\\x80\\x04$| p/Windows Client Backup service/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# fallback hack\nmatch wolfssl m|^I hear ya fa shizzle!\\n$| p/WolfSSL example TLS server/ cpe:/a:wolfssl:wolfssl/\n\nmatch wyse-devmgr m|^Invalid Command Sent:GET / HTTP/1\\.0\\r\\n\\r\\n$| p/Wyse Device Manager/ cpe:/a:dell:wyse_device_manager/\n\n# Not sure about these. It's port 9200 on some printers. On Intermec printers\n# at least, port 9200 is some kind of XML printing service. The first byte\n# appears to be a total length.\nmatch xml-print m|^.\\0\\0\\0\\0(IBM Infoprint \\w+)\\0$|s p/$1 printer XML printing/ d/printer/\nmatch xml-print m|^.\\x2f\\0\\0\\0(Lexmark \\w+)\\0|s p/$1 printer XML printing/ d/printer/\n\n# http://www.brainz.co.kr/product/infra_05.php\nmatch zenius-sms m|^Zenius SMS Agent V([\\w. ]+) \\(zagent-\\w+-sparc\\) 1400\\r\\n\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Brainz Zenius Server Management System Agent/ v/$1/ i/SPARC/\n\nmatch zeo m|^\\0\\0\\0\\x04Z(\\d)0(\\d)$| p/Zope Enterprise Objects service/ i/ZODB $1.$2/ cpe:/a:zope:zope:$1.$2/ cpe:/a:zope:zope_enterprise_objects/\nmatch zeo m|^\\0\\0\\0\\x04Z(\\d)([1-9]\\d)$| p/Zope Enterprise Objects service/ i/ZODB $1.$2/ cpe:/a:zope:zope:$1.$2/ cpe:/a:zope:zope_enterprise_objects/\nmatch zeo-monitor m|^ZEO monitor server version ([\\w._-]+)\\n.*\\n\\nStorage: \\d+\\nServer started: ([\\w: ]+)\\n| p/Zope Enterprise Objects monitor server/ v/$1/ i/server started: $2/ cpe:/a:zope:zope_enterprise_objects:$1/\n\n# https://publib.boulder.ibm.com/infocenter/zos/v1r12/index.jsp?topic=%2Fcom.ibm.zos.r12.halc001%2Fmccic.htm\nmatch zos-commserver m|^EZY1315E \\d\\d/\\d\\d/\\d\\d \\d\\d:\\d\\d:\\d\\d INVALID TRANID=\\r\\n\\r\\n PARTNER INET ADDR=[\\d.]+ PORT=   \\d+                                      | p|IBM z/OS Communications Server| o|z/OS| cpe:/o:ibm:z%2fos/\n\n# http://rfc.zeromq.org/spec:15\n# This is a backwards-compatible handshake\nmatch zmtp m|^\\xff\\0\\0\\0\\0\\0\\0\\0\\x01\\x7f$| p/ZeroMQ ZMTP 2.0/\n\n# http://www.space-walrus.com/games/Minebuilder\n# Very general, so leaving it here at the end\n# Version: 1.12.1\nmatch minebuilder m|^\\0\\0\\0\\x1a$| p/Minebuilder game server/\n# possibly newer version?\nmatch minebuilder m|^\\0\\0\\0\\x1a\\x01$| p/Minebuilder game server/\n\n# https://github.com/quasar/QuasarRAT/\nmatch quasar m|^ \\0\\0\\0.{32}$|s p/QuasarRAT remote administration tool/ o/Windows/ cpe:/a:quasar:quasarrat/ cpe:/o:microsoft:windows/a\n\n# Port 9535: http://community.landesk.com/support/docs/DOC-1591\n# This is 264 random bytes, probably some sort of shared-key encryption\nmatch landesk-rc m=^(?!HTTP|RTSP|SIP).{264}$=s p/LANDesk remote management/ cpe:/a:landesk:landesk_management_suite/\n\n# Specific vendor telnet options that should be matched more accurately by prompt, etc.\n# Source: https://github.com/nmap/nmap/pull/1083\nsoftmatch telnet m|^\\xff\\xfb\\x01(?!\\xff)| p|APC PDU/UPS devices or Windows CE telnetd|\nsoftmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x1f(?!\\xff)| p/Aruba telnetd/\nsoftmatch telnet m|^\\xff\\xfd\\x03(?!\\xff)| p/Cisco telnetd/\nsoftmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f(?!\\xff)| p/Cisco IOS telnetd/\nsoftmatch telnet m|^\\xff\\xfd\\x1f(?!\\xff)| p/Cowrie Honeypot telnetd/\nsoftmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfb\\x01(?!\\xff)| p/Enterasys telnetd/\nsoftmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03(?!\\xff)| p/HP LaserJet telnetd/ d/printer/\nsoftmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01(?!\\xff)| p/HP Integrated Lights Out telnetd/ d/remote management/\nsoftmatch telnet m|^\\xff\\xfc\\x01(?!\\xff)| p/HP JetDirect telnetd/ d/printer/\nsoftmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f(?!\\xff)| p/Huawei telnetd/\nsoftmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfd\\x20\\xff\\xfd\\x23\\xff\\xfd\\x27(?!\\xff)| p/Linux telnetd/ o/Linux/ cpe:/o:linux:linux_kernel/a\nsoftmatch telnet m|^\\xff\\xfd\\x25\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x27\\xff\\xfd\\x1f\\xff\\xfd\\x00\\xff\\xfb\\x00(?!\\xff)| p/Microsoft Telnet Service telnetd/\nsoftmatch telnet m|^\\xff\\xfd\\x25\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfd\\x1f\\xff\\xfd\\x00\\xff\\xfb\\x00(?!\\xff)| p/Windows NT 4.0 telnetd/ o/Windows/ cpe:/o:microsoft:windows_nt:4.0/a\nsoftmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x00\\xff\\xfd\\x01\\xff\\xfd\\x00(?!\\xff)| p/Moxa Serial to Ethernet telnetd/\n\n# BusyBox matches. We'll softmatch to elicit submissions with details.\n# IAC DO TELOPT_LFLOW was removed in 1.14.0\nsoftmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03[^\\xff]| p/BusyBox telnetd/ v/1.14.0 or later/ cpe:/a:busybox:busybox:1.14.0 or later/a\n# IAC DO TELOPT_NAWS added in 1.00-pre7\nsoftmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03[^\\xff]| p/BusyBox telnetd/ v/1.00-pre7 - 1.14.0/ cpe:/a:busybox:busybox:1.00-pre7 - 1.14.0/a\n# looks like telnetd was added in 0.61\nsoftmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03[^\\xff]| p/BusyBox telnetd/ v/0.61 - 1.00-pre7/ cpe:/a:busybox:busybox:0.61 - 1.00-pre7/a\n\n# Matches lots of devices that require a terminal type to be sent\nsoftmatch telnet m|^\\xff\\xfd\\x18$|\n# General-purpose telnet softmatch\nsoftmatch telnet m=^(?:\\xff(?:[\\xfb-\\xfe].|\\xf0|\\xfa..))+(?:[\\0-\\x7f]|$)=\n# Null probe hack; these seem to come in response to random probes\nsoftmatch kerberos-sec m|^\\0\\0\\0[\\x40-\\x90]~[\\x3e-\\x8e]\\x30[\\x3c-\\x8c]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z|s i/server time: $1-$2-$3 $4:$5:$6Z/\n\n# A DOS/Win PE executable within 4 bytes of the beginning of stream\nsoftmatch ms-pe-exe m|^.{0,4}MZ.{76}This program cannot be run in DOS mode\\.|s p/Microsoft PE executable file/\n# Same thing for ELF\nsoftmatch elf-exe m|^.{0,4}\\x7fELF\\x01[\\x01\\x02]\\x01| p/ELF 32-bit executable file/\nsoftmatch elf-exe m|^.{0,4}\\x7fELF\\x02[\\x01\\x02]\\x01| p/ELF 64-bit executable file/\n\n\n##############################NEXT PROBE##############################\nProbe TCP GenericLines q|\\r\\n\\r\\n|\nrarity 1\nports 21,23,35,43,79,98,110,113,119,199,214,264,449,505,510,540,587,616,628,666,731,771,782,1000,1010,1040-1043,1080,1212,1220,1248,1302,1400,1432,1467,1501,1505,1666,1687-1688,2010,2024,2600,3000,3005,3128,3310,3333,3940,4155,5000,5400,5432,5555,5570,6112,6432,6667-6670,7144,7145,7200,7780,8000,8138,9000-9003,9801,11371,11965,13720,15000-15002,18086,19150,26214,26470,31416,30444,34012,56667\nsslports 989,990,992,995\n\n# Library as in books: http://solutions.3m.com/wps/portal/3M/en_US/library/home/resources/protocols/\nmatch 3m-sip m|^Invalid request string: Request string is: \\\"\\r\\\"$| p/Standard Interchange Prototol 2.0/ i/Integrated Library System authentication; Civica Spydus 7/\n\nmatch abc m|^Feedback\\nError=You need unique ID to command ABC!| p/ABC Torrent http interface/\n\nmatch achat m|^ERROR\\r\\n$| p/AChat chat system/\n\n# http://docs.unity3d.com/Documentation/Manual/SecuritySandbox.html\nmatch adobe-crossdomain m|^<\\?xml version='1\\.0'\\?>\\n<cross-domain-policy>\\n        <allow-access-from domain=\\\"([^\\\"]*)\\\" to-ports=\\\"([^\\\"]*)\\\" />\\n</cross-domain-policy>\\n$| p/Unity3D game engine webplayer cross-domain policy/ i/domain: $1; ports: $2/\nsoftmatch adobe-crossdomain m|^Goodbye\\r\\n| p/Unknown Adobe Flash socket policy daemon/\n\nmatch airdroid m|^#connected,all connect count: 1{\\\"event\\\":\\\"device_status\\\",\\\"data\\\":{\\\"wifi_name\\\":\\\"([^\\\"]+)\\\",\\\"wifi_signal\\\":\\d+,\\\"battery\\\":\\d+,\\\"batterycharging\\\":\\w+,\\\"gsm_signal\\\":\\d+,\\\"sms_unread\\\":\\d+,\\\"sdcard\\\":\\d+,\\\"updateinfo\\\":null}}| p/AirDroid status port/ i/Android; wi-fi name: $1/ d/phone/ cpe:/a:airdroid:airdroid/ cpe:/o:google:android/\n\nmatch spectraport m|^\\0\\x01\\0\\0\\0\\x8e\\0\\x03\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x002\\.1\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0([\\w._-]+)\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0[\\w._-]+\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x02'$| p/AirTight SpectraGuard server-to-server communication/ v/$1/\n\nmatch antivir m|^\\0\\0\\x80\\0$| p/drweb anti-virus/\nmatch as-servermap m|^-\\0\\0\\0\\0$| p|IBM OS/400 as-servermapd| o|OS/400| cpe:/o:ibm:os_400/a\nmatch access-remote-pc m|^\\x99\\xf3\\0\\0\\0\\0\\0\\0\\xff\\xff\\xff\\xff$| p/Access Remote PC/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch as-sts m|^\\0\\0\\0\\0\\0\\0\\0\\x08$| p/IBM Service Tool Server AS-STS/\n\nmatch authpoint m|^\\[AUTHPOINT RESPONSE\\]\\r\\nreturn_code=AUTHPOINT ERROR\\r\\nreturn_code_text=Error response parsed by base message object: Invalid or missing register #\\r\\nresponse=\\r\\nidentifier=\\r\\napproval_code=\\r\\n$| p/Authpoint payment processing/\n\nmatch avaya-aom m|^\\0\\0\\0T\\0\\0\\0\\x03\\0\\0\\0\\0\\0\\0\\0\\x01\\x1b\\xde\\x83B\\xca\\xc0\\xf3\\?\\0\\0\\0\\x06aomSrv\\0\\0\\0\\0\\0\\x01\\*\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\r[\\d.]+\\0\\0\\0\\0\\0\\0\\x04root\\0\\0\\x06\\(\\0\\0\\0J$| p/Avaya Alarm Origination Manager/ d/firewall/\n\nmatch avk m|^Unknown command\\r\\n$| p/G Data AVK anti-virus/\n\nmatch backdoor m|^Can't fork pty, bye!\\n$| p/PsychoPhobia backdoor/ i/**BACKDOOR**/\n\nmatch banner-ivu m|^ERROR 10000_EMPTY_FRAME_RECEIVED\\r\\n| p/Banner Engineering iVu Command Channel/ d/specialized/\n\nmatch biff m|^Message received\\n$| p/NotifyMail biffd/\nmatch biff m|^Use of uninitialized value in transliteration \\(tr///\\) at /var/jchkmail/user-filter| p/Joe's j-chkmail biffd/\n\nmatch bigant m|^ERR 0 222\\n\\n| p/BigAnt Messenger server/\n\nmatch bitdefender-ctrl m|^\\(null\\) 500 Internal Error\\n\\(null\\) 500 Internal Error\\n$| p/Bitdefender Remote Admin Console/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch bittorrent-tracker m|^This is not a rootkit or other backdoor, it's a BitTorrent\\r\\nclient\\. Really\\.| p/Transmission bittorrent tracker/ cpe:/a:transmissionbt:transmission/\n\n# bnetd (PvPGN BnetD Mod version 1.5.0) on Debian GNU/Linux (sid)\nmatch bnetd m|^BOT or Telnet Connection from \\[[\\d.]+\\]\\r\\n\\r\\nEnter your account name and password\\.\\r\\nSorry, there is no guest account\\.\\r\\n\\r\\nUsername: | p/PvPGN BnetD Mod/ v/1.5.0/\n\nmatch bnetd m|^Connection from \\[[\\d.]+\\]\\r\\n\\r\\nEnter your account name and password\\.\\r\\nSorry, there is no guest account\\.\\r\\n\\r\\nUsername: | p/bnetd/\n\n# bnetd server 0.4.25 on Linux\nmatch bnetd m|^Username: $| p/bnetd open source Blizzard Battlenet server/\nmatch bnetd m|^\\r\\nEnter your account name and password\\.\\r\\n\\r\\nUsername:| p/bnetd open source Blizzard Battlenet server/\nmatch boinc m|^<unrecognized/>\\n\\x03$| p/Boinc GUI RPC port/\nmatch boinc m|^<error>unrecognized op</error/>\\n\\x03$| p/Boinc GUI RPC port/\nmatch boinc m|^<boinc_gui_rpc_reply>\\n<error>unrecognized op</error>\\n</boinc_gui_rpc_reply>\\n\\x03| p/Boinc GUI RPC port/\nmatch boinc m|^<boinc_gui_rpc_reply>\\n<error>unrecognized op: \\r\\n\\r</error>\\n</boinc_gui_rpc_reply>\\n\\x03| p/Boinc GUI RPC port/\nmatch boinc m|^<boinc_gui_rpc_reply>\\n<client_version>(\\d+)</client_version>\\n<error>unrecognized op</error>\\n</boinc_gui_rpc_reply>\\n| p/Boinc GUI RPC port/ v/$1/\nmatch boinc m|^<boinc_gui_rpc_reply>\\n<client_version>(\\d+)</client_version>\\n<unauthorized/>\\n</boinc_gui_rpc_reply>\\n| p/Boinc GUI RPC port/ v/$1/\nmatch boinc m|^<boinc_gui_rpc_reply>\\n<major_version>(\\d+)</major_version>\\n<minor_version>(\\d+)</minor_version>\\n<release>(\\d+)</release>| p/Boinc GUI RPC port/ v/$1.$2.$3/\nmatch boinc m|^<boinc_gui_rpc_reply>\\n<unauthorized/>\\n</boinc_gui_rpc_reply>\\n\\x03| p/Boinc GUI RPC port/ i/Unauthorized/\n\nmatch bru m|^0\\nBad hex string for A from client\\n| p/Tolis BRU Server/\n\nmatch bzr m|^error\\x01Generic bzr smart protocol error: bad request '\\\\r'\\n$| p/Bazaar VCS bzr serve/\n\nmatch caldav m|^HTTP/1\\.1 503 Service Unavailable\\r\\nServer: DavMail Gateway ([\\w._-]+)\\r\\nDAV: 1, calendar-access, calendar-schedule, calendarserver-private-events, addressbook\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 32\\r\\n\\r\\njava\\.util\\.NoSuchElementException$|s p/DavMail CalDAV http gateway/ v/$1/ d/proxy server/\n\nmatch cassandra-native m|^.\\0\\0\\0\\0\\0\\0\\0.\\0\\0\\0\\n\\0[eE]Invalid or unsupported protocol version \\(13\\); the lowest supported version is (\\d+) and the greatest is (\\d+)| p/Apache Cassandra/ v/3.0.0 - 3.9/ i/native protocol version $1-$2/ cpe:/a:apache:cassandra:3/\nmatch cassandra-native m|^.\\x10\\0\\0\\0\\0\\0\\0.\\0\\0\\0\\n\\0\\\\Invalid or unsupported protocol version \\(13\\); supported versions are \\((\\d+[^)]+)\\)| p/Apache Cassandra/ v/3.10 or later/ i/native protocol versions $1/ cpe:/a:apache:cassandra:3/\n\nmatch cisco-lm m|^<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?><LicXmlDoc><MessageType><ParamValue>RESPONSE</ParamValue></MessageType><OperationCode><ParamValue>4923</ParamValue></OperationCode></LicXmlDoc>$| p/Cisco CallManager license manager/ v/6/ cpe:/h:cisco:call_manager:6/\n\n# Cisco PIX 501 running PIX IOS 6.3(1)\nmatch ciscopsdm m|^\\xc0\\0\\x01\\0....\\0\\0\\0\\x03|s p/Cisco PIX Secure Database Manager/ d/firewall/ o/IOS/ cpe:/o:cisco:ios/a\nmatch cisco7200sim m|^200-At least a module and a command must be specified\\r\\n200-At least a module and a command must be specified\\r\\n| p/Cisco 7200 Simulator/\n\nmatch citrix-licensing m|^WW\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Citrix Licensing Server/\n\nmatch clickhouse m|^\\x02e\\0\\0\\0\\x10DB::NetException/DB::NetException: Unexpected packet from client..0\\. clickhouse-server\\(StackTrace::StackTrace\\(\\)\\+0x16\\) \\[0x[0-9a-f]+\\]\\n| p/ClickHouse DBMS/ cpe:/a:yandex:clickhouse/\n\nmatch computone-intelliserver m|^\\nWelcome to the Computone IntelliServer ${backquote}([\\w._-]+)'\\nRunning cnx kernel release ([\\w._, -]+)\\n\\npt-ses day time  owner         command\\n| p/Computone IntelliServer serial port terminal server/ v/$2/ d/bridge/ o/cnx/ h/$1/\n\nmatch crossmatchverifier m|^Idle\\r\\n$| p/Cross Match Technologies Verifier fingerprint capture control port/\nsoftmatch clam m|^UNKNOWN COMMAND\\n$| p/Clam AV/ cpe:/a:clamav:clamav/\nmatch cmae m|^_err=refused%20by%20workers\\r\\n$| p/Cloudmark cmae_server antispam/\nmatch conserver m|^ok\\r\\nunknown command\\r\\nunknown command\\r\\n$| p/conserver serial console daemon/ d/specialized/\n\nmatch crestron-control m|^INVALID_COMMAND\\r| p/TiVo DVR Crestron control server/ d/media device/\n\nmatch cso m|^598:\\(null\\):Command not recognized\\.\\n| p/Columbia University QIL Gateway/ i/Qi to LDAP/\n\nmatch csync m|^Expecting SSL \\(optional\\) and CONFIG as first commands\\.\\n| p/csync2/\n\nmatch daap m|^HTTP/1\\.1 400 Bad Request\\r\\n(?:Date: .*\\r\\n)?DAAP-Server: iTunes/(\\d[-.\\w]+) \\((.*)\\)\\r\\n| p/Apple iTunes DAAP/ v/$1/ o/$2/ cpe:/a:apple:itunes:$1/\n\nmatch datamaxdb m|^X01\\r\\nX01\\r\\n$| p/MailMax DataMaxDB/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch desktop-central m|^Invalid FT GWADDR / START protocol\\n$| p/ManageEngine Desktop Central DesktopCentralServer/ d/remote management/ cpe:/a:zohocorp:manageengine_desktop_central/\nmatch desktop-central m|^Invalid GWADDR / START protocol\\n$| p/ManageEngine Desktop Central DesktopCentralServer/ d/remote management/ cpe:/a:zohocorp:manageengine_desktop_central/\nmatch desktop-central m|^\\x10\\0\\0\\0\\t\\xe7\\xa0o\\xde&\\xdc\\xfec\\xbf\\xb91\\xef\\xc3\\?\\xc9\\x10\\0\\0\\0\\xd9\\xe1\\x14\\xed\\xb2\\x7f\\xccGc\\xbf\\xb91\\xef\\xc3\\?\\xc9\\x08\\0\\xe4\\xd0\\xdfAl\\xf7\\x88y| p/ManageEngine Desktop Central DesktopCentralServer/ d/remote management/ cpe:/a:zohocorp:manageengine_desktop_central/\n\nmatch digi-usb m|^\\xff\\x14Port is out of range\\0\\xff\\x14Port is out of range\\0\\xff\\x14Port is out of range\\0\\xff\\x14Port is out of range\\0\\xff\\x14Port is out of range\\0| p/Digi USB-over-TCP bridge/ d/specialized/\n\nmatch dps-shell m|^\\+-{26}\\+\\r\\n\\x7c {6}Welcome to use {6}\\x7c\\r\\n\\x7c >Destiny DPS Mini shell< \\x7c\\r\\n\\+-{9}\\+-{16}\\+\\r\\n\\x7c Author  \\x7c TimesWu {8}\\x7c\\r\\n\\+-{9}\\+-{16}\\+\\r\\n\\x7c Version \\x7c V([\\d.]+) {10}\\x7c\\r\\n\\+-{9}\\+-{16}\\+\\r\\n| p/Destiny DPS Mini shell/ v/$1/ i/Ricoh printer/ d/printer/\n\nmatch drb m|^\\0\\0\\0\\x03\\x04\\x08F\\0\\0\\x03.\\x04\\x08o:\\x16DRb::DRbConnError\\x07:\\x07bt\\[.\\\"/(/usr/lib/ruby/([\\w._-]+)/drb)/drb\\.rb:573| p/Ruby DRb RMI/ i/Ruby $2; path $1/ cpe:/a:ruby-lang:ruby:$2/\n\n# HP Digital Sender Service (dss)\nmatch hpdss m|^(?:53 client not logged in\\.\\r\\n)+$| p/HP Digital Sender client/ cpe:/a:hp:digital_sending_software/\n\nmatch dusk m|^\\x03Not a valid name\\. This may because you left it blank or used invalid symbols\\. Please try again\\.\\n| p/Dusk Java-based game/\n\nmatch ecopy m|^e\\0C\\0o\\0p\\0y\\0V\\x004\\x000\\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\x006\\x007\\0 \\x004\\x000\\x002\\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\x000\\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\0 \\x000\\0F\\0a\\0i\\0l\\0e\\0d\\0 \\0t\\0o\\0 \\0r\\0e\\0t\\0r\\0i\\0e\\0v\\0e\\0 \\0a\\0 \\0f\\0u\\0l\\0l\\0 \\0e\\0C\\0o\\0p\\0y\\0 \\0T\\0c\\0p\\0H\\0e\\0a\\0d\\0e\\0r\\0:\\0 \\0o\\0n\\0l\\0y\\0 \\0\\[\\x004\\0\\]\\0 \\0b\\0y\\0t\\0e\\0s\\0 \\0r\\0e\\0c\\0e\\0i\\0v\\0e\\0d\\0!\\0$| p/eCopy Agent/\n\nmatch elm-agent m|^ELM Manager Agent ([\\w._-]+)\\r\\nCopyright \\xa9 \\d+-\\d+ TNT Software, Inc\\.\\r\\n| p/TNT ELM log agent/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/\nmatch elm-manager m|^ELM Enterprise Manager ([\\w._-]+)\\r\\nCopyright \\xa9 \\d+-\\d+ TNT Software, Inc\\.\\r\\n| p/TNT ELM log manager/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/\n\n# I think this type of eggdrop banner is only used when customized or such.\nmatch eggdrop m|^\\r\\nNickname\\.\\r\\nSorry, that nickname format is invalid\\.\\r\\n$| p/Eggdrop irc bot console/ cpe:/a:eggheads:eggdrop/\nmatch eggdrop m|\\r\\nSorry, that nickname format is invalid\\.\\r\\n$| p/Eggdrop irc bot console/ cpe:/a:eggheads:eggdrop/\nmatch eggdrop m|^\\r\\nSurnom\\.\\r\\nSorry, that nickname format is invalid\\.\\r\\n$| p/Eggdrop irc bot console/ i/French/ cpe:/a:eggheads:eggdrop::::fr/\n\nmatch emc-pp-mgmtsvc m|^<EMCP_Len\\d+><\\?xml version=\\\"1\\.0\\\" encoding=\\\"iso-8859-1\\\"\\?>\\n<pp_mgmt_packet>.*<version_protocol_major>(\\d+)</version_protocol_major>\\n\\t<version_protocol_minor>(\\d+)</version_protocol_minor>.*<host_name>([\\w._-]+)</host_name>.*<host_pp_version>(([\\d.]+)[^<]*)</host_pp_version>.*<host_os_version>([^<]+)</host_os_version>|s p/EMC PowerPath/ v/$4/ i/protocol $1.$2/ o/$6/ h/$3/ cpe:/a:emc:powerpath:$5/\n\nmatch etrayz-setup m|^\\r\\n\\r\\n\\0\\0\\0\\0\\x26\\x84\\0\\x04\\0\\0\\0\\0$| p/eTRAYz NAS device setup port/ d/storage-misc/\n\nmatch extron-serial m|^\\r\\n\\(c\\) Copyright 2\\d\\d\\d, Extron Electronics, ([^,]+), V([\\d.]+)\\r\\n| p/Extron $1 serial port/ v/$2/ cpe:/h:extron:$1/\n\nmatch finger m|^Gathering system data\\.\\.\\.\\nUsername Real name                      Idletime TTY Remote console location\\n| p/Cfingerd/\nmatch finger m|^Punix version ([\\d./()]+) - Current Time \\(since boot\\) \\d+:\\d\\d:\\d\\d\\r\\nName        pid    stat   pc       cpusec    stack    pr/sy   idle    tty\\r\\n| p/Lantronix ETS16 fingerd/ i/Punix $1/ d/terminal server/ o/Punix/ cpe:/o:christopher_williams:punix:$1/\nmatch finger m|^Finger online user list request denied\\.\\r\\n| p/SLMail fingerd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch finger m|^Username Real name                      Idletime TTY Remote console location\\n| p/Configurable Finger-Query Daemon/ o/Unix/\nmatch finger m|^Login     Name       Tty      Idle  Login Time   Office     Office Phone\\r\\n| p/Debian fingerd/ o/Linux/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch finger m|^\\r\\nIntegrated port\\r\\nPrinter Type: Dell Laser Printer ([-\\w+.]+)\\r\\nPrint Job Status: (.*)\\r\\n| p/Dell $1 laser printer fingerd/ i/Status: $2/ d/printer/\nmatch finger m|^\\r\\nIntegrated port\\r\\nPrinter Type: Dell ([-\\w+.]+) Laser Printer\\r\\nPrint Job Status: (.*)\\r\\n| p/Dell $1 laser printer fingerd/ i/Status: $2/ d/printer/\nmatch finger m|^This is finger server\\r\\n\\r\\nPlease use username@domain format\\.\\r\\n| p/ArGoSoft Mail fingerd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch finger m|^This is ([-\\w_.]+) finger server\\.\\r\\n\\r\\nPlease use username@domain format\\.\\r\\n| p/ArGoSoft Mail fingerd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch finger m|^\\r\\nIntegrated port\\r\\nPrinter Type: Lexmark ([^\\r\\n]+)\\r\\n| p/Lexmark $1 printer fingerd/ d/printer/ cpe:/h:lexmark:$1/a\nmatch finger m|^finger: /var/adm/lastlog open error\\nNo one logged on\\r\\n| p/Solaris 10 fingerd/ i/Nobody logged in/ o/Solaris/ cpe:/o:sun:sunos:5.10/\nmatch finger m|^finger: /var/adm/lastlog open error\\nLogin       Name| p/Solaris 10 fingerd/ i/Somebody logged in/ o/Solaris/ cpe:/o:sun:sunos:5.10/\nmatch finger m|^finger: /usr/adm/lastlog open error\\nLogin +Name +TTY Idle +When +Office\\r\\n| p|OSF/1 fingerd| o|OSF/1| cpe:/o:dec:osf_1/\nmatch finger m|^\\r\\nUSB port \\d+\\r\\nPrinter Type:  Photo AIO Printer (\\w+)\\r\\nPrint Job Status: ([^\\r\\n]+)\\r\\n| p/Dell Photo AIO $1 printer fingerd/ i/Status $2/ d/printer/ cpe:/h:dell:photo_aio_$1/a\nmatch finger m|^\\nDebian GNU/Linux      Copyright \\(c\\) 1993-1999 Software in the Public Interest\\n\\n                 Your site has been rejected for some reason\\.\\n\\n         This may be caused by a missing RFC 1413 identd on your site\\.\\n\\n| p/Debian Cfingerd/ o/Linux/ cpe:/a:debian:cfingerd/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/\nmatch finger m|^Debian GNU/Linux      Copyright \\(C\\) 1993-1999 Software in the Public Interest\\n.*You haven't specified a user\\.\\n\\n               A general listing is not provided to the public\\.|s p/Debian Cfingerd/ o/Linux/ cpe:/a:debian:cfingerd/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch finger m|^\\r\\nPrinter Type: Lexmark Optra LaserPrinter\\r\\n| p/Lexmark Optra LaserPrinter fingerd/ d/printer/\nmatch finger m|^MSS485 Version V([\\w._/-]+)\\(([\\w._-]+)\\) - Time Since Boot:| p/Lantronix MSS485 serial to ethernet bridge fingerd/ v/$1 $2/ d/bridge/\nmatch finger m|^Login     Name                Tty      Idle  Login Time   Office     Office Phone\\n| p/xfingerd/\nmatch finger m|^Please supply a username\\r\\n$| p/BSD fingerd/ cpe:/a:bsd:fingerd/\n# config from examples-standard/list, installed by default on Debian\nmatch finger m|^\\nHello [\\w.@-]*,\\nusers currently logged in are:\\n\\nNAME       LINE         TIME             IDLE          PID COMMENT\\n\\n\\r\\n| p/efingerd/ i/who -uHw/ cpe:/a:radovan_garabik:efingerd/\nmatch finger m|^\\nHello [\\w.@-]*,\\nusers currently logged in are:\\n\\n| p/efingerd/ cpe:/a:radovan_garabik:efingerd/\nmatch finger m|^Site: (.+)\\n\\nLogin     Name\\n| p/MiamiDx fingerd/ i/site: $1/ o/AmigaOS/\n\nmatch ftp m|^220 Welcome to Stupid-FTPd server\\.\\r\\n422 Too busy to play with you\\.\\r\\n| p/Stupid-FTPd/ cpe:/a:cinek:stupid-ftpd/\nmatch ftp m|^220 Service ready\\.\\r\\n501 Syntax Error\\.\\r\\n| p/Hay Systems HSL 2.75G Femtocell ftpd/ d/WAP/ cpe:/o:hay_systems:hsl_2.75g_femtocell/\n# Shodan shows lots of brands with varying other services, all seem to be DSL modems?\nmatch ftp m|^220 Welcome to TBS FTP Server\\.\\r\\n(?:202 Command not implemented, superfluous at this site\\.\\r\\n){2}| p/TBS embedded ftpd/ d/broadband router/\nmatch ftp m|^220 Service ready for new user\\r\\n500 '\\r\\n\\r\\n':command not understood\\.\\r\\n| p/Power Shield UPS ftpd/ d/power-device/\nmatch ftp m|^220 Hello!\\r\\n502 Invalid command \"\"\\r\\n502 Invalid command \"\"\\r\\n| p/FTP Server for 3DS/ d/media device/ cpe:/a:mtheall:ftpd/\n\nmatch medcart m|^PAR1\\.750800000002B123456\\?;\\?\\?;\\?\\?;\\?\\?;\\?\\?;\\?08AC| p/Howard Medical Med Display/ v/1.5.4.298/\n\nmatch modbus m|^\\r\\n\\r\\n\\0\\x03[\\0\\x01]\\x80[\\x01-\\x03]| p/Modbus TCP/\nmatch modbus m|^\\r\\n\\r\\n\\0\\x03[\\0\\x01]\\x80[\\x0a\\x0b]| p/Modbus TCP/ i/gateway/\n# https://www.kernel.org/pub/software/admin/mon/\nmatch mon m|^520 invalid command\\n$| p/mon service monitoring daemon/\n\nmatch mysql m|^\\x10\\0\\0\\x01\\xff\\x13\\x04Bad handshake$| p/MySQL/ cpe:/a:mysql:mysql/\n\n# Not sure if this is target MAC or scanner MAC\nmatch ndv m|^NDV_([\\d.]+) (?:[0-9a-f][0-9a-f]:){5}[0-9a-f][0-9a-f]\\n| p/Neocoretech NDV/ v/$1/ cpe:/a:neocoretech:ndv:$1/\n\nmatch netbackup m|^\\xea\\xdd\\xbe\\xef\\0\\0\\0\\x05\\0\\0\\x000\\0\\0\\x000\\0\\0..\\0\\0\\0\\x08\\0a\\0f\\0f\\0s\\0p\\0r\\0n\\0g\\0\\0\\0\\0\\0\\0\\0\\0$|s p/Veritas Netbackup Professional/\n\nmatch nimp m|^V([\\d.]+)\\r\\nERROR 0\\r\\n$| p/Linux NetworX Network ICE Management Protocol/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch nsi m|^%NSI\\x91\\xceWb\\0\\x08\\x02\\x04\\x0f\\x05\\0\\0| p/Cisco Network Spectrum Interface/\n\n# Alcatel Speedtouch ADSL Router\nmatch ftp m|^220 Inactivity timer = \\d+ seconds\\. Use 'site idle <secs>' to change\\.\\r\\n221 Goodbye \\(badly formated command seen\\)\\.  You uploaded 0 and downloaded 0 kbytes\\.\\r\\n221 Goodbye \\(badly formated command seen\\)\\.  You uploaded 0 and downloaded 0 kbytes\\.\\r\\n$| p/Alcatel Speedtouch ADSL router ftpd/ d/broadband router/\n# bftpd 1.0.22 on Linux 2.4\nmatch ftp m|^220 \\r\\n500 Unknown command: \\\"\\\"\\r\\n500 Unknown command: \\\"\\\"\\r\\n$| p/Bftpd/ cpe:/a:jesse_smith:bftpd/\n# Multitech MultiVoip 410 VoIP gateway\nmatch ftp m|^220 Service ready\\r\\n500 Unsupported command\\r\\n$| p/Multitech MultiVoip 410 VoIP gateway ftpd/ d/VoIP adapter/\n# NetportExpress PRO/100 3 port print server\nmatch ftp m|^220 FTP server ready\\.\\r\\n530 access denied\\.\\r\\n| p/Intel NetportExpress print server ftpd/ d/print server/\n# D-Link Print Server internal FTP daemon (Firmware version 1.38) - D-Link Print Server DP-101\nmatch ftp m|^220 FTP server ready\\.\\r\\n501 Command not supported\\.\\r\\n$| p/D-Link Printer Server ftpd/ d/print server/\nmatch ftp m|^220 ([-.\\w]+) FTP server ready\\.\\r\\n530 Please login with USER and PASS\\.\\r\\n530 Please login with USER and PASS\\.\\r\\n$| p/Solaris ftpd/ o/Solaris/ h/$1/ cpe:/o:sun:sunos/a\nmatch ftp m|^220 ([-.\\w]+) FTP Server ready \\.\\.\\.\\r\\n530 \\r  : User not logged in\\. Please login with USER and PASS first\\.\\r\\n530 \\r  : User not logged in\\. Please login with USER and PASS first\\.\\r\\n$| p/Bulletproof ftp server/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n# BulletProof FTP 2.21 on Windows 2000 Server\nmatch ftp m|^220 ftp\\r\\n$| p/Bulletproof ftp server/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 FTP server ready\\.\\r\\n200 NOOP command successful\\.\\r\\n| p/Tektronix Phaser ftpd/ d/printer/\nmatch ftp m|^220 \\\"Welcome to Bot FTP service\\.\\\"\\r\\n331 Please specify the password\\.\\r\\n230 Login successful\\. Have fun\\.\\r\\n| p/Unknown trojan ftpd/\nmatch ftp m|^220 OK\\n226 OK\\n| p/Sasser worm minimal ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\n# USR8022 or AirLive WT-2000R WAPs\nmatch ftp m|^220 FTPd ([\\d.]+)\\r\\n500 Bad command\\r\\n| p/Generic WAP ftpd/ v/$1/ d/WAP/\nmatch ftp m|^220 Telindus FTP server ready\\.\\r\\n502 Command not implemented\\.\\r\\n502 Command not implemented\\.\\r\\n| p/Telindus ftpd/ d/router/\nmatch ftp m|^220 Server ready\\r\\n500 '\\r': command not understood\\.\\r\\n500 '\\r': command not understood\\.\\r\\n| p/Welltech Wellgate VoIP adapter ftpd/ d/VoIP adapter/\nmatch ftp m|^220 muddleftpd \\(([\\d.]+)\\) server ready\\. Enter Username\\.\\r\\n500 Only one command at a time\\.\\r\\n| p/Muddleftpd/ v/$1/\nmatch ftp m|^220 .*\\r\\n500 Only one command at a time\\.\\r\\n| p/Muddleftpd/\nmatch ftp m|^220 OK\\r\\n500 Syntax error, command unrecognized\\.\\r\\n| p/NcFTPd/ i/Banner masking/\nmatch ftp m|^220 ([\\w._-]+) FTP server ready\\.\\r\\n502 '': command not understood\\.\\r\\n502 '': command not understood\\.\\r\\n| p/lukemftpd/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch ftp m|^220 ([\\w._-]+) FTP server ready\\.\\r\\n500 '': command not understood\\.\\r\\n500 '': command not understood\\.\\r\\n| p/OpenBSD ftpd/ h/$1/ cpe:/a:openbsd:ftpd/\nmatch ftp m|^220 FTP server ready\\.\\r\\n500 \\?\\r\\n500 \\?\\r\\n| p/Kiss DP-558 PVR ftpd/ d/media device/\nmatch ftp m|^220 ICS FTP Server ready\\r\\n500 '\\r': command not understood\\.\\r\\n500 '\\r': command not understood\\.\\r\\n| p/berretz.de mini-ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Welcome to pyftpd\\. Happy downloading\\.\\r\\n500 I'm gonna ignore this command\\.\\.\\. maybe later\\.\\.\\.\\r\\n| p/pyftpd/\nmatch ftp m|^220 Ready\\r\\n502 Not implemented\\r\\n$| p/Global Cache GC-100 ftpd/ d/media device/\nmatch ftp m|^220 FTP server ready\\.\\r\\n530 Please login with USER and PASS\\.\\r\\n$| p|TRENDnet/Hawking webcam ftpd| d/webcam/\nmatch ftp m|^220 ([\\w._-]+) server ready\\.\\r\\n502 command  not implemented\\.\\r\\n502 command  not implemented\\.\\r\\n| p/Konica Minolta bizhub printer smtpd/ d/printer/ h/$1/\nmatch ftp m|^220 Ftp firmware update utility\\r\\n500 Unknown command: \\\"\\\"\\r\\n500 Unknown command: \\\"\\\"\\r\\n| p/D-Link or USRobotics ADSL router firmware update ftpd/ d/broadband router/\nmatch ftp m|^220 Adtec .* FTP server, ready \\r\\n530 Login failed, check Username/Password\\.\\r\\n| p/Adtec broadcast video ftpd/ d/media device/\nmatch ftp m|^220 FTP Server Ready\\r\\n530 Authentication required\\.\\r\\n530 Authentication required\\.\\r\\n| p/HP LaserJet P4014 printer ftpd/ d/printer/ cpe:/h:hp:laserjet_p4014/a\nmatch ftp m|^230 FTP Server Ready\\r\\n530 Authentication required\\.\\r\\n530 Authentication required\\.\\r\\n| p/HP FTP Print Server/ v/3.0/ i/HP LaserJet 4250 printer/ d/printer/ cpe:/a:hp:ftp_print_server:3.0/ cpe:/h:hp:laserjet_4250/a\nmatch ftp m|^220 FTP server ready\\.\\r\\n530 USER and PASS required\\r\\n530 USER and PASS required\\r\\n| p/VBrick 4300 video encoder ftpd/ d/media device/\nmatch ftp m|^220 FTP server ready\\.\\r\\n510 command not supported\\.\\r\\n| p/Panasonic DP-1820E printer ftpd/ d/printer/ cpe:/h:panasonic:dp-1820e/a\nmatch ftp m|^220 ftp server ready\\.\\r\\n500 Unknown command: \\\"\\\"\\r\\n500 Unknown command: \\\"\\\"\\r\\n| p/Linksys WRT54Gv5 WAP ftpd/ d/WAP/ cpe:/h:linksys:wrt54gv5/a\nmatch ftp m|^220 Connection established\\.\\r\\n502  command not recognized\\.\\r\\n502  command not recognized\\.\\r\\n| p/Canon imageRUNNER C2880 printer ftpd/ d/printer/ cpe:/h:canon:imagerunner_c2880/\nmatch ftp m|^550 Access is denied\\.\\r\\n550 Access is denied\\.\\r\\n220 ProFTPD ([\\w._-]+) Server \\(([\\w._-]+)\\)| p/ProFTPD/ v/$1/ h/$2/ cpe:/a:proftpd:proftpd:$1/a\nmatch ftp m|^220 UnleashX FTP ready\\.\\r\\n503 Login with USER first\\.\\r\\n| p/UnleashX Xbox shell ftpd/ d/game console/\nmatch ftp m|^220 BBPS3FTP ready\\r\\n500 command not recognized\\r\\n| p/Blackbox PlayStation 3 ftpd/ d/game console/\nmatch ftp m|^220 IronPort WSA ready\\.\\r\\n500 Syntax error, command unrecognized\\.\\r\\n| p/IronPort WSA firewall ftpd/ d/firewall/\nmatch ftp m|^220 \\r\\n500-'\\r\\n500  ': command not understood\\.\\r\\n500-'\\r\\n500  ': command not understood\\.\\r\\n| p/Microsoft FTP Service/ o/Windows/ cpe:/a:microsoft:ftp_service/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ps2ftpd ready\\.\\r\\n500 Not understood\\.\\r\\n| p/ps2ftpd/ d/game console/\nmatch ftp m|^220-Authenticate for FTP Access\\. \\r\\n220 \\r\\n500-Syntax error -- unknown command\\r\\n500 \\r\\n500-Syntax error -- unknown command\\r\\n500 \\r\\n| p/Microsoft Forefront TMG firewall ftpd/ d/firewall/ o/Windows/ cpe:/a:microsoft:forefront_threat_management_gateway/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ZBR-79071 Version V([\\w._-]+) ready\\.\\r\\n500 Syntax error, command unrecognized or malformed\\r\\n500 Syntax error, command unrecognized or malformed\\r\\n| p/Zebra GK420d or GX430T printer ftpd/ v/$1/ d/printer/\nmatch ftp m|^220 \\r\\n502 No command sent\\r\\n| p/Fortigate appliance ftpd/ o/FortiOS/\nmatch ftp m|^220 File Manager ready \\r\\n550 Unsupported command\\r\\n550 Unsupported command\\r\\n| p/File Manager+ ftpd/ o/Android/ cpe:/a:alphainventor:filemanager/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\n\n# vsftpd (Very Secure FTP Daemon) 1.0.0 on linux with custom ftpd_banner\n# We'll have to see if this match is unique enough ... no, it is not enough...\n# Turning match line into softmatch because it can match much more than just\n# vsftpd and WU-FTPD... (Brandon)\n# Adding this back as a hard match or we'll never stop getting vsftpd\n# submissions. (David)\n# See version 2.0.8 note under TCP Help probe.\nmatch ftp m|^220 .*\\r\\n530 Please login with USER and PASS\\.\\r\\n530 Please login with USER and PASS\\.\\r\\n| p/vsftpd (before 2.0.8) or WU-FTPD/ cpe:/a:vsftpd:vsftpd/\n\nmatch ftp-proxy m|^220 .*FTP Proxy\\r\\n500 Syntax error, command unrecognized\\.\\r\\n| p/Cisco Web Security ftp proxy/ cpe:/h:cisco:web_security_appliance/\n\nmatch flashconnect m|^FlashCONNECT ([\\d.]+) invalid message\\.\\n$| p/Raining Data FlashCONNECT/ v/$1/\n\nmatch gearman m|^ERR UNKNOWN_COMMAND Unknown\\+server\\+command\\r\\nERR UNKNOWN_COMMAND Unknown\\+server\\+command\\r\\n$| p/Gearman Job Queue System/\nmatch genetec-directory m|^\\xde\\xad\\xad\\xde\\x0f\\x03\\0\\0\\xeed\\xab\\x99\\x01\\x05\\x06\\x05\\x07Content}\\x02\\0\\0\\x01\\0=Genetec\\.Net,| p/Genetec Security Center directory connection service/ cpe:/a:genetec:security_center/\nmatch geovision-control m|^..\\0\\0\\xff\\xff\\xff\\xff$|s p/Geovision webcam control/ d/webcam/\nmatch geovision-audio m|^\\$\\0\\0\\0\\xd4\\x17\\0\\0\\x01\\0\\0\\0\\x05\\0\\0\\0\\x01\\0\\0\\0\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Geovision webcam audio/ d/webcam/\n\n# original response was \"gipcPKHDb\\0\\0\\0\\[\\xbeW/\\x01\\0\\0\\0,\\x14\\0\\0\"\nmatch gipc m|^gipc....................HTTP/1\\.0 503 Service Unavailable\\r\\nHost: ([^\\r\\n]+)\\r\\nServer: GPnPD/([\\d.]+)\\r\\n\\r\\n| p/Oracle Grid Plug and Play daemon/ v/$2/ h/$1/\n\n# GKrellM System Monitor 2.1.15 on Linux\nsoftmatch gkrellm m|^<error>\\nBad connect string!| p/GKrellM System Monitor/\n\nmatch gntp m|^GNTP/1\\.0 -ERROR NONE\\r\\nError-Code: 301\\r\\nError-Description: Growl does not recognize the protocol beginning with \\r\\n\\r\\n\\r\\nOrigin-Software-Name: Growl\\r\\nOrigin-Software-Version: ([\\d.]+)\\r\\nOrigin-Platform-Version: ([\\d.]+)\\r\\nOrigin-Machine-Name: (.*)\\r\\nOrigin-Platform-Name: Mac OS X\\r\\n\\r\\n\\r\\n| p/Growl notification platform/ v/$1/ o/Mac OS X $2/ h/$3/ cpe:/a:growl:growl:$1/ cpe:/o:apple:mac_os_x:$2/\nsoftmatch gopher m|^i\\t?[\\x20-\\x7f]+\\tfake\\t\\(NULL\\)\\t0\\r\\n| p/Pygopherd or Phricken/\nsoftmatch gopher m|^[0-9ghisIT](?:\\t?[\\x20-\\x7f]+\\t){3}[0-9]+\\r\\n|\n\n# https://github.com/quine/GoProGTFO\nmatch gopro-json m|^\\{\"rval\": -7, \"param_size\": 0 \\}\\0| p/GoPro or similar camera json service/ d/webcam/\n\nmatch go-login m|^\\xff\\xff\\x80\\x80\\+\\]\\0\\0| p/GraphOn GO-Global/ cpe:/a:graphon:go-global/\n\nmatch control-gc-ports m|^unknowncommand 14\\r$| p/Global Cache GC-100 config/ d/media device/\n\n# UTF-16 decoded:\n# Version mismatch, driver version is \\\"0\\\" but server version is \\\"8\\\"...org\\.h2\\.jdbc\\.JdbcSQLException: Version mismatch, driver version is \\\"0\\\" but server version is \\\"8\\\" \\[90047-151\\]\\n\\tat org\\.h2\\.message\\.DbException\\.getJdbcSQLException\\(DbException\\.java:327\\)\\n\\tat org\\.h2\\.message\\.DbException\\.get\\(DbException\\.java:167\\)\\n\\tat org\\.h2\\.server\\.TcpServerThread\\.run\\(TcpServerThread\\.java:75\\)\\n\\tat java\\.lang\\.Thread\\.run\\(Thread\\.java:662\\)\\n\nmatch h2-pg m|^\\0\\0\\0\\0\\0\\0\\0\\x05\\x009\\x000\\x000\\x004\\x007\\0\\0\\0A\\0V\\0e\\0r\\0s\\0i\\0o\\0n\\0 \\0m\\0i\\0s\\0m\\0a\\0t\\0c\\0h\\0,\\0 \\0d\\0r\\0i\\0v\\0e\\0r\\0 \\0v\\0e\\0r\\0s\\0i\\0o\\0n\\0 \\0i\\0s\\0 \\0\\\"\\x000\\0\\\"\\0 \\0b\\0u\\0t\\0 \\0s\\0e\\0r\\0v\\0e\\0r\\0 \\0v\\0e\\0r\\0s\\0i\\0o\\0n\\0 \\0i\\0s\\0 \\0\\\"\\x008\\0\\\"\\xff\\xff\\xff\\xff\\0\\x01_\\xbf\\0\\0\\x01W\\0o\\0r\\0g\\0\\.\\0h\\x002\\0\\.\\0j\\0d\\0b\\0c\\0\\.\\0J\\0d\\0b\\0c\\0S\\0Q\\0L\\0E\\0x\\0c\\0e\\0p\\0t\\0i\\0o\\0n\\0:\\0 \\0V\\0e\\0r\\0s\\0i\\0o\\0n\\0 \\0m\\0i\\0s\\0m\\0a\\0t\\0c\\0h\\0,\\0 \\0d\\0r\\0i\\0v\\0e\\0r\\0 \\0v\\0e\\0r\\0s\\0i\\0o\\0n\\0 \\0i\\0s\\0 \\0\\\"\\x000\\0\\\"\\0 \\0b\\0u\\0t\\0 \\0s\\0e\\0r\\0v\\0e\\0r\\0 \\0v\\0e\\0r\\0s\\0i\\0o\\0n\\0 \\0i\\0s\\0 \\0\\\"\\x008\\0\\\"\\0 \\0\\[\\x009\\x000\\x000\\x004\\x007\\0-\\x001\\x005\\x001\\0\\]\\0\\n\\0\\t\\0a\\0t\\0 \\0o\\0r\\0g\\0\\.\\0h\\x002\\0\\.\\0m\\0e\\0s\\0s\\0a\\0g\\0e\\0\\.\\0D\\0b\\0E\\0x\\0c\\0e\\0p\\0t\\0i\\0o\\0n\\0\\.\\0g\\0e\\0t\\0J\\0d\\0b\\0c\\0S\\0Q\\0L\\0E\\0x\\0c\\0e\\0p\\0t\\0i\\0o\\0n\\0\\(\\0D\\0b\\0E\\0x\\0c\\0e\\0p\\0t\\0i\\0o\\0n\\0\\.\\0j\\0a\\0v\\0a\\0:\\x003\\x002\\x007\\0| p/H2 database PostgreSQL daemon/\n\nmatch halfd m|^{type INIT} {up \\d+} {auth \\d+} {name {([^}]+)}} {ip [\\d.]+} {max \\d+} {port (\\d+)}\\r\\n| p/halfd Half-Life admin/ i/Name $1; HL port $2/\n\nsoftmatch haproxy-stats m|^Unknown command\\. Please enter one of the following commands only :\\n  | p/HAProxy stats socket/ cpe:/a:haproxy:haproxy/\n\nmatch hasp-lm m|^\\xf2\\xfa\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\xf2\\0\\0\\0\\0\\0\\0\\0\\0$| p/Aladdin NetHASP license manager/\n\nmatch hpssd m|^msg=messageerror\\nresult-code=5\\n| p/HP Services and Status Daemon/ o/Linux/ cpe:/a:hp:linux_imaging_and_printing_project/ cpe:/o:linux:linux_kernel/a\n\n# Ubicom embedded ( http://www.ubicom.com/home.htm )\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nCache-control: no-cache\\r\\nServer: Ubicom/(\\d[-.\\w ]+)\\r\\n| p/Ubicom httpd/ v/$1/ cpe:/a:ubicom:httpd:$1/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nExpires: Mon, 1 Jan 2001 12:00:01 GMT\\r\\nCache-control: no-cache\\r\\nServer: Ubicom/([\\w._-]+)\\r\\nContent-Length: 11\\r\\nConnection: close\\r\\n\\r\\nBad RequestHTTP/1\\.1 500 Server Error\\r\\n\\r\\nConnection: close\\r\\n$| p/Ubicom httpd/ v/$1/ i/CradlePoint MBR1000 WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/\nmatch http m|^<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 3\\.2//EN\\\">\\n<html>\\n<head>\\n<title>GoodTech Systems Telnet Server Administration Login</title>\\n| p/GoodTech Systems telnet server http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 50\\r\\n\\r\\n<HTML><BODY><H1>400 Bad Request</H1></BODY></HTML>$| p/VMware Server http config/ cpe:/a:vmware:server/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-type: text/html; charset:UTF-8\\r\\n\\r\\n.*<TITLE>SQLite Book</TITLE>|s p/SQLite Book database frontend/\n\n# Some web servers don't give a 'Server: ' line for the Get request, but do for this probe.\nmatch http m|^HTTP/1\\.1 400 .*\\r\\nServer: Microsoft-IIS/(\\d[-.\\w]+)\\r\\n| p/Microsoft IIS httpd/ v/$1/ o/Windows/ cpe:/a:microsoft:internet_information_services:$1/ cpe:/o:microsoft:windows/a\n# Icecast version: 1.9+2.0alphasn\nmatch http m|^HTTP/1\\.0 401 Authentication Required\\r\\nWWW-Authenticate: Basic realm=\\\"Icecast2 Server\\\"\\r\\n\\r\\nYou need to authenticate\\r\\n| p/Icecast streaming media server/ cpe:/a:xiph:icecast/\n# Network Flight Recorder v3.2 on Solaris 8 (sparc)\nmatch http m|^HTTP/1\\.0 400 Bad request\\r\\n\\r\\n$| p/Network Flight Recorder IDS/\n# Cisco 350 Series 802.11 AP - THIS MATCH LINE MIGHT BE TOO GENERAL -Doug\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: thttpd/(\\d[-.\\w ]+)\\r\\n| p/thttpd/ v/$1/ d/WAP/ cpe:/a:acme:thttpd:$1/\n# OpenPGP Public Key Server 0.9.6\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: pks_www/([-\\w+.]+)\\r\\nContent-type: text/html\\r\\n\\r\\n<HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY></BODY>\\r\\n| p/OpenPGP Public Key Server/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"osiris\\\"\\r\\n| p/osiris host IDS web interface/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nCache-Control: no-cache, must-revalidate, max-age=0\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\n\\r\\n<html><body><h1>Not Implemented</h1>Whatever the heck you just requested, I can't generate\\.</body></html>| p/darkstat network analyzer httpd/ o/Unix/\nmatch http m|^\\xff\\xf0 400 Bad Request\\r\\n\\r\\n<HEAD><TITLE>400 Bad Request</TITLE></END>\\r\\n<BODY><H1>400 Bad Request</H1></BODY>| p/HP JetDirect printer embedded httpd/ d/printer/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\n.*This is a WebSEAL error message template file\\.|s p/Tivoli Access Manager WebSEAL httpd/ cpe:/a:ibm:tivoli_access_manager_for_e-business/\n# Keep this above the more general thttpd match lines below\nmatch http m|^UNKNOWN 400 Bad Request\\r\\nServer: thttpd\\r\\n.*<HTML>\\n\\t<HEAD><TITLE>Error</TITLE><LINK REL=\\\"stylesheet\\\" TYPE=\\\"text/css\\\" HREF=\\\"/std\\.css\\\">.*Your request has bad syntax or is inherently impossible to satisfy|s p/thttpd/ i/Linksys NSLU2 http config/ d/storage-misc/ cpe:/a:acme:thttpd/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\n.*<h2>400 Bad Request<h2>\\n  <p>\\n  Your request has bad syntax or is inherently impossible to satisfy\\.\\n|s p/thttpd/ cpe:/a:acme:thttpd/\nmatch http m|^UNKNOWN 400 Bad Request\\r\\nServer: unknown HTTP server\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n.*<BODY BGCOLOR=\\\"#cc9999\\\" TEXT=\\\"#000000\\\" LINK=\\\"#2020ff\\\" VLINK=\\\"#4040cc\\\">\\n<H2>400 Bad Request</H2>\\nYour request has bad syntax or is inherently impossible to satisfy\\.\\n|s p/thttpd/ i/IDIS surveillance DVR/ d/media device/ cpe:/a:acme:thttpd/\nmatch http m|^UNKNOWN 400 Bad Request\\r\\nServer: thttpd/([\\w.]+) \\w+\\r\\n| p/thttpd/ v/$1/ cpe:/a:acme:thttpd:$1/\nmatch http m|^UNKNOWN 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html\\r\\n.*<H2>400 Bad Request</H2>\\nYour request has bad syntax or is inherently impossible to satisfy\\.\\n|s p/thttpd/ cpe:/a:acme:thttpd/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-type: text/html; charset=iso-8859-1\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H2>400 Bad Request</H2>\\n<HR>\\nYour request has bad syntax or is inherently impossible to satisfy\\.\\n</BODY></HTML>\\n$| p/thttpd/ cpe:/a:acme:thttpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: UnrealEngine UWeb Web Server Build (\\d+)\\r\\n|s p/Unreal Tournament http admin/ v/Build $1/\nmatch http m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nAllow: GET, HEAD\\r\\n\\r\\n405 Method Not Allowed\\r\\n\\r\\n| p|D-Link printer/webcam http config|\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: WDaemon/([\\d.]+)\\r\\n| p/World Client WDaemon httpd/ v/$1/ i/Alt-N MDaemon webmail/ o/Windows/ cpe:/a:altn:mdaemon/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nAccept: text/html\\nConnection: close\\n\\n<html>\\n<body text=#FFFFFF bgcolor=#000000>\\n<center><b><hr height=4 width=400 color=#FF0000>\\n<font size=5>PunkBuster Server WebTool for ([-\\w_.]+)</font>| p/PunkBuster http config/ i/Game: $1/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: MpSconServer/([\\d.]+)\\r\\n| p/ZebraNet print server httpd/ i/MpSconServer $1/ d/print server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*var l1=\\\"([^\"]+)\\\"\\n.*document\\.write\\(\\\"D-Link DI-\\\"\\+l1\\)|s p/D-Link DI-$1 router http config/ d/router/\nmatch http m|^HTTP/1\\.0 400 bad http request\\r\\ndate: .*\\r\\nserver: SAP Web Application Server\\r\\n| p/SAP Web Application Server/ cpe:/a:sap:netweaver/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html; charset=UTF-8\\r\\nPragma: no-cache\\r\\nWindow-target: _top\\r\\n| p/Symantec AntiVirus Scan Engine http config/ cpe:/a:symantec:antivirus_scan_engine/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: QTSS ([\\d.]+) Admin Server/([\\d.]+)\\r\\n| p/QTSS Admin Server httpd/ v/$2/ i/QTSS $1/ cpe:/a:apple:quicktime_streaming_server:$1/\nmatch http m|^HTTP/1\\.0 400 Bad Request 2\\r\\nContent-Type: text/html\\r\\n\\r\\n<body><h1>HTTP/1\\.0 400 Bad Request 2</h1></body>\\r\\n$| p/WatchGuard Firebox http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Type: text/html\\r\\n\\r\\n<title>400 Bad Request</title><body>400 Bad Request</body>$| p/Generic router http config/ d/router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\nWWW-Authenticate: Basic realm=\\\"Anti-Spam SMTP Proxy \\(ASSP\\) Configuration\\\"\\nContent-type: text/html\\n\\n<html><body><h1>Unauthorized</h1>\\n</body></html>\\n| p/ASSP Anti-Spam Proxy http config/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nConnection: close\\r\\nServer: HttpServer/([\\d.]+)\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\n\\r\\nError:<HR>\\n<H1>Server Error: 400 Bad Request</H1>\\r\\n<P><HR><H2>URL parsing error</H2><P>| p/Cisco ONS MSPP httpd/ i/HttpServer $1/\nmatch http m|^HTTP/1\\.0 500 no query\\r\\n\\r\\n$| p/pkspxy/\nmatch http m|^HTTP/1\\.0 400 msg=Bad%20Request&rc=%00%00%03%1b\\r\\n| p/TimesTen httpd/\nmatch http m|^HTTP/1\\.1 400  Bad  request\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n\\r\\n<body><h1>HTTP/1\\.1 400  Bad  request <h1></body>| p/XOSoft WanSync http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/\\*\\.\\* 400 Bad Request\\r\\nDate: .*\\r\\nContent-Type:text/plain\\r\\nContent-Length:61\\r\\n\\r\\nThe received request is either NULL or invalid/wrong format\\r\\n| p/Kaba application server httpd/\n\n# This lame service responds in many weird ways - luckily always to GenericLines\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nContent-Type: text/xml\\r\\n\\r\\n<\\?xml version='1\\.0' encoding='UTF-8' \\?><autnresponse><action>NONE</action><response>The action you attempted is forbidden by your client</response></autnresponse>| p/Veritas backup exec continuous protection httpd/ cpe:/a:symantec:veritas_backup_exec/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\nContent-Type: text/xml\\n\\n<ACTION>GETSTATUS</ACTION><RESPONSE>The action you attempted is forbidden by your client</RESPONSE>| p/Veritas backup exec continuous protection httpd/ cpe:/a:symantec:veritas_backup_exec/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n\\n\\nCONNECTION NOT AUTHORIZED\\n\\n\\n| p/Veritas backup exec continuous protection httpd/ i/unauthorized/ cpe:/a:symantec:veritas_backup_exec/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/plain\\n\\n\\nConnection refused\\.\\nInvalid IP Address\\n| p/Veritas backup exec continuous protection httpd/ i/unauthorized/ cpe:/a:symantec:veritas_backup_exec/\n\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nServer: Fastream IQ Web/FTP Server\\r\\n\\r\\n| p/Fastream IQ reverse http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 -1 Internal Server Error\\r\\n\\r\\n| p/Panasonic webcam http config/ d/webcam/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\nServer: JBidWatcher/([\\d.]+) \\(Java\\)\\nWWW-Authenticate: Basic realm=\\\"JBidWatcher\\\"\\n| p/JBidWatcher httpd/ v/$1/ i/Java/\nmatch http m|^HTTP/1\\.0 501 R\\r\\nContent-Type: text/html\\r\\n\\r\\nNot Implemented| p|D-Link router/Airlink NAS http config|\nmatch http m|^HTTP/1\\.1 500 Internal server error\\r\\nContent-Length: 7\\r\\n\\r\\nBummah\\.| p/Sendmail Mailstream Manager http config/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: IngrianManagementConsole\\r\\n| p/Ingrian Management Console httpd/ d/security-misc/\nmatch http m|^\\(null\\) 400 Bad Request\\r\\nDate: .*<title>400 Bad Request</title></head>\\n<body>\\n<h3>400 Bad Request</h3>\\nCan't parse request\\.\\n</body>\\n</html>\\n|s p/m0n0wall http portal/ d/firewall/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\nmatch http m|^\\(null\\) 400 Bad Request\\r\\nServer: \\r\\nDate: .*<TITLE>400 Bad Request</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"white\\\" TEXT=\\\"#000000\\\" LINK=\\\"#2020ff\\\" VLINK=\\\"#4040cc\\\">\\n<H4>400 Bad Request</H4>\\nCan't parse request\\.\\n</BODY>\\n</HTML>\\n|s p/Netgear WNDR3300 WAP http config/ d/WAP/ cpe:/h:netgear:wndr3300/\nmatch http m|^HTTP/1\\.0 400 Bad Request protocol\\r\\nServer: httpd\\r\\n.*<TITLE>400 Bad Request protocol</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#FFFFFF\\\"><H4>400 Bad Request protocol</H4>\\nCan't parse request\\.\\n</BODY></HTML>\\n$|s p/Cisco WRV210 WAP http config/ d/WAP/ cpe:/h:cisco:wrv210/\nmatch http m|^\\(null\\) 400 Bad Request\\r\\nServer: AEWS/([\\w._-]+)\\r\\n.*<TITLE>400 Bad Request</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\" TEXT=\\\"#000000\\\" LINK=\\\"#2020ff\\\" VLINK=\\\"#4040cc\\\">\\n<H4>400 Bad Request</H4>\\nCan't parse request\\.\\n|s p/AEWS/ v/$1/ i/Avocent Mergepoint KVM switch/ cpe:/h:emerson:network_power_avocent_mergepoint_unity_2016/\nmatch http m|^\\(null\\) 302 Found\\r\\nServer: \\r\\nDate: .*\\r\\nLocation: /index\\.cgi\\r\\nContent-Type: text/html; charset=%s\\r\\nCache-Control: max-age=0\\r\\n| p|Intel/Acer/FlaconStor storage device http config| d/storage-misc/\nmatch http m|^\\(null\\) 400 Bad Request\\r\\nServer: mini_httpd/([\\w._ -]+)\\r\\n| p/mini_httpd/ v/$1/ cpe:/a:acme:mini_httpd:$1/\nmatch http m|^HTTP/1\\.1 505 Server Error\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><BODY>\\n<TITLE>505 Internal Server Error</TITLE><H1>Internal Server Error: Invalid request</H1>\\n<BR><BR>Internal Error\\.\\n</BODY></HTML>\\n| p/Google Desktop Search for Linux Beta httpd/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^<HTML><HEAD><TITLE>400 Malformed request line</TITLE></HEAD><BODY.*http://tjws\\.sourceforge\\.net\\\">Rogatkin's JWS based on Acme\\.Serve Version ([-\\w_.]+), .Revision: ([-\\w_.]+)|s p/TJWS httpd/ v/$2/ i/Based on Acme.Serve $1/\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nContent-Length: \\d+\\r\\n\\r\\nTraceback \\(most recent call last\\):\\n  File \\\"/usr/share/deluge/plugins/WebUi/gtk_cherrypy_wsgiserver\\.py\\\"| p/Deluge bittorrent http interface/ i/CherryPy httpd/ cpe:/a:cherrypy:cherrypy/\nmatch http m|^HTTP/1\\.0 400 Invalid Request\\r\\nContent-Type: text/html\\r\\nContent-Length: 31\\r\\n\\r\\n<title>Invalid Request</title>\\n$| p/opentracker BitTorrent tracker/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: HP Web Jetadmin (\\d[-.\\w]+)\\r\\n| p/HP Web Jetadmin print server http config/ v/$1/ d/print server/ cpe:/a:hp:web_jetadmin:$1/\nmatch http m|^HTTP/1\\.1 404 \\r\\n.*<ns1:stackTrace xmlns:ns1=\\\"http://xml\\.apache\\.org/axis/\\\">java\\.io\\.IOException: Cannot handle non-GET, non-POST, non-HEAD request\\n\\tat org\\.globus\\.wsrf\\.container\\.ServiceThread\\.parseHeaders\\(ServiceThread\\.java:855\\)|s p/Globus Web Service httpd/\nmatch http m|^HTTP/1\\.1 511 Not Implemented\\r\\n\\r\\n$| p|SMC Barricade/Netgear http config| d/broadband router/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\n.*document\\.write\\(document\\.nxp\\.skin\\.getProductName\\(\\)\\);\\n      document\\.write\\('Security Console :: Error</title>'\\);\\n|s p/Rapid7 NeXpose http config/ d/security-misc/ cpe:/a:rapid7:nexpose/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\n.*<link rel=\\\"shortcut icon\\\" href=\\\"/style/image/favicon\\.ico\\\" type=\\\"image/vnd\\.microsoft\\.icon\\\"></link>\\n   <script type=\\\"text/javascript\\\" src=\\\"/scripts/controller\\.js\\\"></script>\\n   <script type=\\\"text/javascript\\\" src=\\\"/scripts/sarissa\\.js\\\"></script>|s p/Rapid7 NeXpose http config/ d/security-misc/ cpe:/a:rapid7:nexpose/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: peerguardnf/([\\w._-]+) \\(Unix\\)\\r\\nX-Powered-By: You need to wind it\\r\\n| p/Phoenix Labs PeerGuardian httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\n.*<h2>Error parsing HTTP header</h2><pre>\\njava\\.net\\.ProtocolException: Cannot handle non-GET, non-POST, non-HEAD request\\n\\tat org\\.globus\\.wsrf\\.container\\.ServiceThread\\.parseHeaders\\(ServiceThread\\.java:1103\\)\\n|s p/Globus Toolkit Java Container httpd/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>HTTP 404 File not found</TITLE></HEAD><BODY TEXT=BLACK BGCOLOR=WHITE>The requested file was not found</BODY></HTML>| p/Websense Block Message httpd/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .*\\r\\nServer: cPanel\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"cPanel WebDisk\\\"\\r\\n\\r\\n| p/cPanel httpd/ i/unauthorized/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: micro_httpd\\r\\n| p/micro_http/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nServer: SNARE\\r\\nWWW-Authenticate: Basic realm=\\\"SNARE\\\"\\r\\n\\r\\n.*<ADDRESS>Snare Server Remote Control facility</ADDRESS>|s p/InterSect Alliance SNARE http config/ cpe:/a:intersectalliance:system_intrusion_analysis_and_reporting_environment/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: SNARE/1\\.0\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\n\\r\\n<html><body><center><h2>Page Not Found</h2></center></body></html>| p/InterSect Alliance SNARE http config/ i/no password/ cpe:/a:intersectalliance:system_intrusion_analysis_and_reporting_environment/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\ncharset: UTF8\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<title>MONyog</title>|s p/MONyog MySQL http admin/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: ATL Server - CounterSpyAgentSoapService\\r\\n.*<SOAP:Envelope xmlns:SOAP=\\\"http://schemas\\.xmlsoap\\.org/soap/envelope/\\\">\\r\\n  <SOAP:Body>\\r\\n   <SOAP:Fault>\\r\\n     <faultcode>SOAP:Client</faultcode>\\r\\n     <faultcode>Invalid Request</faultcode>\\r\\n     <detail>Not a recognized HTTP Verb &amp;Empty URL &amp;Not a recognized HTTP Version \\(only 1\\.1 is supported\\) &amp;</detail>\\r\\n   </SOAP:Fault>\\r\\n  </SOAP:Body>\\r\\n</SOAP:Envelope>|s p/Sunbelt Software CounterSpy Agent antimalware SOAP over HTTP/\nmatch http m|^HTTP/1\\.0 500 Internal error\\r\\nContent-Length: 49\\r\\nContent-Type: text/plain\\r\\n\\r\\nMethod not allowed \\(must be POST HTTP/1\\.0 or 1\\.1\\)$| p/SoftPerfect Bandwidth Manager httpd/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nServer: Dorgem/([\\w._-]+)\\r\\n| p/Dorgem webcam server http/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 400 Bad request version \\(crypto mismatch\\?\\)\\r\\nServer: ShadowBot/([\\d.]+)\\r\\n| p/ShadowBot/ v/$1/ i/HP Opsware/\nmatch http m|^\\(null\\) 400 Bad Request\\r\\nServer: \\r\\n.*<HTML>\\n            <HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\n            <BODY BGCOLOR=\\\"#cc9999\\\" TEXT=\\\"#000000\\\" LINK=\\\"#2020ff\\\" VLINK=\\\"#4040cc\\\">\\n            <H4>400 Bad Request</H4>\\nCan't parse request\\.\\n            <HR>\\n            <ADDRESS><A HREF=\\\"\\\"></A></ADDRESS>\\n            </BODY>\\n            </HTML>\\n$|s p/mini_httpd/ i/Linksys RVS4000 router/ d/router/ cpe:/a:acme:mini_httpd/ cpe:/h:linksys:rvs4000/a\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Extent/([\\d.]+)\\r\\n\\r\\n<HTML><HEAD>\\n<TITLE>Error</TITLE>\\n</HEAD>\\n<BODY>\\n<H2>400 Bad Request</H2></BODY>\\n</HTML>\\n$| p/Alepo Extent/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"esecsrva\\\"\\r\\n\\r\\n\\0{829,}| p/IBM Director wmicimserver httpd/ cpe:/a:ibm:director/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"esecsrva\\\"\\r\\n\\r\\n$| p/IBM Director wmicimserver httpd/ cpe:/a:ibm:director/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"ANLYX2\\\"\\r\\n\\r\\n\\0*$| p/IBM Director wmicimserver httpd/ cpe:/a:ibm:director/\nmatch http m|^HTTP/1\\.0 501 Document Follows\\r\\nContent-Type: text/html\\r\\nContent-Length: 106\\r\\n\\r\\n<HEAD><TITLE>501 Method Not Implemented</TITLE></HEAD>\\r\\n<BODY><H1>501 Method Not Implemented</H1>\\r\\n</BODY>$| p/HP StorageWorks AG118A tape autoloader http config/ d/storage-misc/\nmatch http m|^UNKNOWN 400 Bad Request\\r\\nServer: mini_httpd/([\\w._ -]+)\\r\\n| p/mini_httpd/ v/$1/ cpe:/a:acme:mini_httpd:$1/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html\\r\\n\\r\\n$| p/JBoss service httpd/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: PeopleSoft PSRENSRV/([\\w._-]+)\\r\\n.*<I>PeopleSoft PSRENSRV/[\\w._-]+ on http://([\\w._-]+):\\d+</I>|s p/PeopleSoft Remote Event Notification Server httpd/ v/$1/ h/$2/\nmatch http m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: HT5XX ht\\r\\n|s p/Grandstream HT502 VoIP router http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: sw-cp-server/([\\w._-]+)\\r\\n.*<title>400 - Bad Request</title>|s p/sw-cp-server httpd/ v/$1/ i/Parallels Plesk WebAdmin version/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d [\\w ]+\\r\\nServer: GRISOFT-AVG TCP Server/(\\d[-.\\w]+) .*\\r\\n| p/Grisoft AVG TCP Server/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<title>Netflix Application</title>.*<em>Generated by version ([\\w._-]+) </em>|s p/Netflix Application httpd/ v/$1/ o/iOS/ cpe:/o:apple:iphone_os/a\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: SonicWALL (SSL-VPN [\\w._-]+) Web Server\\.\\r\\n.*POST to non-script is not supported\\.\\n|s p/Boa httpd/ i/SonicWALL $1 http proxy/ d/proxy server/ cpe:/a:boa:boa/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: icecast/(\\d[-.\\w]+)\\r\\n| p|Shoutcast/Icecast streaming audio| v/$1/ cpe:/a:xiph:icecast:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-length: 0\\r\\n\\r\\nIBM Tivoli Identity Manager - ADK Version ([\\w._-]+)\\r\\n\\r\\n| p/IBM Tivoli Identity Manager httpd/ v/$1/ cpe:/a:ibm:tivoli_identity_manager:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>mongodb ([\\w._-]+):\\d+ </title>.*<pre>db version v([\\w._-]+), pdfile version ([\\w._-]+)\\ngit hash: ([0-9a-f]{40})\\nsys info: Linux [\\w._-]+ ([\\w._-]+) .* BOOST_LIB_VERSION=([\\w._-]+)\\n\\ndbwritelocked:  \\d+ \\(initial\\)\\nuptime:    ([^\\n]+)\\n|s p/MongoDB http console/ v/$2/ i/git version $4; pdfile $3; Boost $SUBST(6,\"_\",\".\"); uptime $7/ o/Linux $5/ h/$1/ cpe:/a:mongodb:mongodb:$2/ cpe:/o:linux:linux_kernel:$5/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>mongodb ([\\w._-]+):\\d+ </title>.*<pre>db version v([\\w._-]+), pdfile version ([\\w._-]+)\\ngit hash: nogitversion\\nsys info: Linux [\\w._-]+ ([\\w._-]+) .* BOOST_LIB_VERSION=([\\w._-]+)\\n\\ndblocked:  \\d+ \\(initial\\)\\nuptime:    ([^\\n]+)\\n|s p/MongoDB http console/ v/$2/ i/pdfile $3; Boost $SUBST(5,\"_\",\".\"); uptime $6/ o/Linux $4/ h/$1/ cpe:/a:mongodb:mongodb:$2/ cpe:/o:linux:linux_kernel:$4/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nServer: sfcHttpd\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\n\\r\\nHTTP/1\\.1 400 Bad Request\\r\\nServer: sfcHttpd\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\n\\r\\n| p/sfcHttpd/ i/SuperMicro IPMI Small Footprint CIM Broker/ cpe:/o:supermicro:intelligent_platform_management_firmware/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nServer: sfcHttpd\\r\\nContent-Length: 0\\r\\n\\r\\nHTTP/1\\.1 400 Bad Request\\r\\nServer: sfcHttpd\\r\\nContent-Length: 0\\r\\n\\r\\n| p/sfcHttpd/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: CleanMail Service ([\\w._-]+)\\r\\n|s p/CleanMail antispam http admin/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: lighttpd/([\\w._-]+).*<\\?xml version=\\\"1\\.0\\\" encoding=\\\"iso-8859-1\\\"\\?>\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\"\\n         \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" xml:lang=\\\"en\\\" lang=\\\"en\\\">\\n <head>\\n  <title>\\d\\d\\d - [\\w ]+</title>|s p/lighttpd/ v/$1/ cpe:/a:lighttpd:lighttpd:$1/\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nAllow: GET,HEAD\\r\\nDate: .*\\r\\nServer: Genetic Lifeform and Distributed Open Server ([\\w._-]+)\\r\\n| p/Hentai@Home httpd/ v/$1/\nmatch http m|^\\(null\\) 400 Bad Request\\r\\nServer: nexg_httpd\\r\\nDate: .*\\r\\nCache-Control: no-cache,no-store\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nConnection: keep-alive\\r\\nKeep-Alive: timeout=10, max=30\\r\\n\\r\\n| p/nexg_httpd/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\ntv2-auth-digest: [\\w=]+\\r\\n\\r\\n$| p/T-Home Entertain set-top box httpd/ d/media device/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: doubleTwist Sync \\(Android\\)\\r\\n|s p/doubleTwist httpd/ i/Android phone/ d/phone/ o/Linux/ cpe:/o:google:android/\nmatch http m|^HTTP/1\\.0 501 Unimplemented\\r\\nContent-Type: text/plain\\r\\nContent-Length: 17\\r\\n\\r\\n501 Unimplemented$| p/NetApp DFM httpd/\n# Date is wrongly localized, e.g. \"ven, 10 dic 2010 16:11:46 GMT\".\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nDate: .*\\r\\nContent-Length: 134\\r\\n\\r\\n<HTML><HEAD>\\n<TITLE>400 Bad Request</TITLE>\\n</HEAD><BODY>\\n<H1>Method Not Implemented</H1>\\nInvalid method in request<P>\\n</BODY></HTML>\\n$| p/Transmission BitTorrent management httpd/ cpe:/a:transmissionbt:transmission/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Type: text/html\\r\\nCache-Control: public,max-age=86400\\r\\nPragma: cache\\r\\nExpires: .*\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n  <title>400 Bad Request</title>\\n</head>\\n<body bgcolor=\\\"ffffff\\\">\\n  <h2>400 Bad Request<h2>\\n  <p>\\n  \\n</body>\\n</html>\\n$| p/Transmission BitTorrent management httpd/ v/2.52/ cpe:/a:transmissionbt:transmission:2.52/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nServer: UBServer ([\\w._-]+)\\r\\nConnection: close\\r\\n\\r\\n$| p/UBServer/ v/$1/ i/NBS smart card printer/\nmatch http m|^SAS/IntrNet Application Server Release ([\\w._-]+) \\((build \\d+)\\)\\n\\n$| p|SAS/IntrNet| v/$1 $2/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: Aimetis-InfoService/([\\w._-]+)\\r\\n| p/Aimetis InfoService httpd/ v/$1/ d/webcam/\nmatch http m|^HTTP/0\\.0 400 Bad request\\r\\nServer: Aos HTTP Server/([\\w._-]+)\\r\\nHTTP/0\\.0 400 Bad request\\r\\nServer: Aos HTTP Server/[\\w._-]+\\r\\nHTTP/0\\.0 400 Bad request\\r\\nServer: Aos HTTP Server/[\\w._-]+\\r\\nHTTP/0\\.0 400 Bad request\\r\\nServer: Aos HTTP Server/[\\w._-]+\\r\\nHTTP/0\\.0 400 Bad request\\r\\nServer: Aos HTTP Server/[\\w._-]+\\r\\nHTTP/0\\.0 400 Bad request\\r\\nServer: Aos HTTP Server/[\\w._-]+\\r\\nHTTP/0\\.0 400 Bad request\\r\\nServer: Aos HTTP Server/[\\w._-]+\\r\\nHTTP/0\\.0 400 Bad request\\r\\nServer: Aos HTTP Server/[\\w._-]+\\r\\nHTTP/0\\.0 400 Bad request\\r\\nServer: Aos HTTP Server/[\\w._-]+\\r\\n| p/A2 httpd/ v/$1/ o/A2/ cpe:/o:eth:a2/\n# Panasonic TV \"VIERA GT30 Series\" running \"FreeBSD/8.0 UPnP/1.0 Panasonic-MIL-DLNA-SV/1.0\"\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nCONNECTION: close\\r\\n\\r\\n$| p/Panasonic GT30 TV http admin/ d/media device/ o/FreeBSD 8.0/ cpe:/o:freebsd:freebsd:8.0/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0\\r\\nCache-Control: no-cache,no-store,no-cache\\r\\nContent-Type: application/json\\r\\nPragma: no-cache,no-cache\\r\\n\\r\\nHTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0\\r\\nCache-Control: no-cache,no-store,no-cache\\r\\nContent-Type: application/json\\r\\nPragma: no-cache,no-cache\\r\\n\\r\\n$| p/Microsoft Windows Live Mesh/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Technicolor WebServer/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: 42\\r\\n\\r\\nHTTP/1\\.0 400 Bad Request: Missing method\\r\\n\\r\\n\\r\\n$| p/Technicolor TG787 VoIP gateway http admin/ v/$1/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 501 Not implemented\\r\\nDate: .*\\r\\nServer: NetTalk-WebServer/([\\d.]+)\\r\\n| p/CapeSoft NetTalk WebServer/ v/$1/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r.*\\nServer: ([^,]+), (UPnP/[\\d.]+ DLNADOC/[\\d.]+), Serviio/([\\d.]+)\\r\\n|s p/Serviio media server httpd/ v/$3/ i/$2/ o/$1/\nmatch http m|^HTTP/1\\.1 404\\r\\nServer: NT-ware-EmbeddedTcpServer-HttpDevice/([\\d.]+)\\r\\n| p|NT-ware uniFLOW/MOM httpd| v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WEBrick/([\\d.]+) \\(Ruby/([\\d.]+)/([-\\d]+)\\)\\r\\n|s p/WEBrick httpd/ v/$1/ i/Ruby $2 ($3)/ cpe:/a:ruby-lang:ruby:$2/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n\\r\\n$| p|SAGE EAS Digital Endec remote audio monitor/level meter|\nmatch http m|^\\(null\\) 400 Bad Request\\r\\nServer: \\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/Arris TG862G http config/ d/WAP/ cpe:/h:arris:tg862g/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nServer: SNARE\\r\\nWWW-Authenticate: Digest realm=\\\"SNARE\\\", qop=\\\"auth\\\", nonce=\\\"[a-f0-9]+\\\", opaque=\\\"[a-f0-9]+\\\"\\r\\n\\r\\n| p/InterSect SNARE Server/ d/security-misc/ cpe:/a:intersectalliance:system_intrusion_analysis_and_reporting_environment/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: Piolink Switch\\r\\n| p/Piolink ADC/\nmatch http m|^HTTP/1\\.1 501\\r\\nX-AV-Server-Info: av=\\\"5\\.:0\\\"; cn=\\\"Sony Corporation\\\"; mn=\\\"([^\"]+)\\\"; mv=\\\"([^\"]+)\\\"\\r\\nX-AV-Physical-Unit-Info: pa=\\\"\\1\\\"\\r\\nConnection: close\\r\\n| p/Sony $1 AV receiver http info/ v/$2/ d/media device/ cpe:/h:sony:$1:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\nContent-Type: text/html; charset=UTF-8\\nContent-Length: \\d+\\n\\n<html>\\n<!--\\n \\* WiFi Keyboard - Remote Keyboard for Android\\.\\n \\* Copyright \\(C\\) 2011 Ivan Volosyuk\\n| p/WiFi Keyboard for Android/ d/phone/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Keep-Alive\\r\\nContent-Length: \\d+\\r\\nContent-Type: application/octet-stream\\r\\nDate: .*\\r\\nKeep-Alive: timeout=15; max=19\\r\\n\\r\\n\\0\\0\\0\\x03\\0\\0\\0\\x06error\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x05\\0\\0\\0\\x11no_save_password\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\x08pencore| p/SoftEther VPN httpd/ cpe:/a:university_of_tsukuba:softether_vpn/\nmatch http m|^HTTP/1\\.0 401\\r\\nWWW-Authenticate: Digest realm=\\\"mongo\\\", nonce=\\\"abc\\\", algorithm=MD5, qop=\\\"auth\\\" \\r\\n\\r\\nnot allowed\\n$| p/MongoDB simple REST interface/ v/1.5.0 or older/ cpe:/a:mongodb:mongodb/\nmatch http m|^HTTP/1\\.0 401\\r\\nWWW-Authenticate: Digest realm=\\\"mongo\\\", nonce=\\\"abc\\\", algorithm=MD5, qop=\\\"auth\\\" \\r\\nContent-Type: text/plain\\r\\n\\r\\nnot allowed\\n$| p/MongoDB simple REST interface/ v/1.5.0 - 1.9.0/ cpe:/a:mongodb:mongodb/\nmatch http m|^HTTP/1\\.0 401\\r\\nWWW-Authenticate: Digest realm=\\\"mongo\\\", nonce=\\\"abc\\\", algorithm=MD5, qop=\\\"auth\\\" \\r\\nContent-Type: text/plain;charset=utf-8\\r\\n\\r\\nnot allowed\\n$| p/MongoDB simple REST interface/ v/1.9.0 or later/ cpe:/a:mongodb:mongodb/\nmatch http m|^HTTP/1\\.0 401\\r\\nWWW-Authenticate: Digest realm=\\\"mongo\\\", nonce=\\\"abc\\\", algorithm=MD5, qop=\\\"auth\\\" \\r\\nContent-Type: text/plain;charset=utf-8\\r\\nConnection: close\\r\\nContent-Length: 12\\r\\n\\r\\nnot allowed\\n| p/MongoDB simple REST interface/ v/3.1.1 or later/ cpe:/a:mongodb:mongodb/\nmatch http m|^ 400 Invalid request\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Length: 15\\r\\n\\r\\nInvalid request| p/Acutenix WVS Scheduler/\nmatch http m|^HTTP/1\\.[01] 400 Bad Request\\r\\nConnection: close\\r\\nContent-length: 0\\r\\n\\r\\n$| p/Ajenti http control panel/ cpe:/a:ajenti:ajenti/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\ncharset: UTF8\\r\\nContent-Type: text/html\\r\\n\\r\\n{\\\"STATUS\\\": \\\"REDIRECT\\\", \\\"RESPONSE\\\": \\\"mlicense\\.html\\\"}| p/MONyog MySQL Monitor and Advisor/ cpe:/a:webyog:monyog/\nmatch http m|^HTTP/1\\.1 500 Server Error\\r\\nContent-Length: 42\\r\\nConnection: close\\r\\n\\r\\nError 500: Server Error\\nBad request: \\[\\r\\n\\r\\]| p/Mongoose httpd/ cpe:/a:cesanta:mongoose/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"Web UI Access\\\", nonce=\\\"[0-9a-f]{32}\\\", opaque=\\\"[0-9a-f]{32}\\\", stale=\\\"false\\\", algorithm=\\\"MD5\\\", qop=\\\"auth\\\"\\r\\ncontent-length: 0\\r\\n\\r\\n$| p/qBittorrent Web UI/ cpe:/a:qbittorrent:qbittorrent/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .* GMT\\r\\nConnection: Keep-Alive\\r\\nKeep-Alive: timeout=300\\r\\nServer: MSOS/([\\d.]+) mawebserver/([\\d.]+)\\r\\n| p/Patton mawebserver httpd/ v/$2/ i/MSOS $1/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\nServer: RStudio\\r\\n\\r\\n$| p/RStudio IDE httpd/ cpe:/a:rstudio:rstudio/\nmatch http m|^\\(null\\) 400 Bad Request\\r\\nServer: \\r\\n.*<HTML>\\n *<HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\n *<BODY BGCOLOR=\\\"#cc9999\\\" TEXT=\\\"#000000\\\" LINK=\\\"#2020ff\\\" VLINK=\\\"#4040cc\\\">\\n *<H4>400 Bad Request</H4>\\nCan't parse request\\.\\n|s p/mini_httpd/ cpe:/a:acme:mini_httpd/\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nServer: ArangoDB\\r\\nConnection: Close\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nContent-Length: 0\\r\\n\\r\\n| p/ArangoDB admin httpd/ cpe:/a:arangodb:arangodb/\n# Content-Type changed to application/json in 3.0\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nServer: ArangoDB\\r\\nConnection: Close\\r\\nContent-Type: application/json; charset=utf-8\\r\\nContent-Length: 0\\r\\n\\r\\n| p/ArangoDB admin httpd/ v/3.0 or 3.1/ cpe:/a:arangodb:arangodb/\n# X-Content-Type-Options header added in 3.2.devel\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nX-Content-Type-Options: nosniff\\r\\nServer: ArangoDB\\r\\nConnection: Keep-Alive\\r\\nContent-Type: application/json; charset=utf-8\\r\\nContent-Length: 0\\r\\n\\r\\n| p/ArangoDB admin httpd/ v/3.2 or later/ cpe:/a:arangodb:arangodb/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\ndate: .*\\r\\npragma: no-cache\\r\\nconnection: close\\r\\ncontent-length: \\d+ *\\r\\ncontent-type: text/html\\r\\n\\r\\n<html><head><title>Application Server Error</title>| p/SAP WebDispatcher/ cpe:/a:sap:web_dispatcher/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/plain\\r\\nCache-Control: no-cache\\r\\nConnection: \\r\\nDate: .* GMT\\r\\nServer: DT-UMESHKAL\\r\\nAccept-Ranges: None\\r\\nContent-Length: 4\\r\\n\\r\\n\\r\\n\\r\\n| p/Seagull BarTender printer driver httpd/ cpe:/a:seagull:bartender/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Length: 22\\r\\nContent-Type: text/plain\\r\\n\\r\\nMalformed Request-Line| p/CherryPy wsgiserver/ cpe:/a:cherrypy:cherrypy/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\nServer: Gateway Web Server/1\\.0\\nDate: .*\\n\\n| p/Mirasys WebClient server/ d/media device/ cpe:/a:mirasys:webclient/\n# No idea what this is: it's not https://github.com/rasteron/PyLime\nmatch http m|^HTTP/1\\.1 413 Request Entity Too Large\\r\\nDate: .*\\r\\nServer: pyLime/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/pyLime httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Thomson DSL router TR-069/ d/broadband router/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\ndate: .* GMT\\r\\npragma: no-cache\\r\\nconnection: close\\r\\ncontent-length: \\d+ *\\r\\ncontent-type: text/html\\r\\nserver: SAP NetWeaver Application Server ([\\d.]+) / ICM ([\\d.]+)\\r\\n\\r\\n| p/SAP NetWeaver Application Server Internet Communication Manager httpd/ v/$1/ i/ICM $2/ cpe:/a:sap:netweaver:$1/\n# port 40028\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Length: 22\\r\\nContent-Type: text/plain; charset=US-ASCII\\r\\nConnection: Close\\r\\n\\r\\nInvalid request line: | p/Amazon FireTV Stick/ d/media device/\n# port 45571\nmatch http m|^HTTP/1\\.0 400 Fail\\r\\n\\r\\n$| p/Amazon FireTV Stick/ d/media device/\n# ESM_SUITE: V9.4.1.0\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1><PRE>HTTP-E-ENOURL-Request not followed by a URL\\.\\n\\r\\n</PRE></BODY></HTML>\\n| p/EMC Smarts broker/ cpe:/a:emc:smarts/\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nConnection: close\\r\\nServer: NetData Embedded HTTP Server\\r\\n| p/NetData embedded httpd/ cpe:/a:firehol:netdata/\n# Hosafe HOSAFE-2MB3W 1080P IP Security Camera\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: application/soap\\+xml; charset=utf-8\\r\\nConnection: close\\r\\n\\r\\n$| p/Hosafe ONVIF camera SOAP httpd/ d/webcam/\n# Cisco DPC3828S DOCSIS 3.0 SB-WiFi(3x3) Gateway, port 1900\nmatch http m|^HTTP1\\.1 405 Method Not Allowed\\r\\n$| p/Cisco DPC3828S WiFi cable modem/ d/WAP/ cpe:/h:cisco:dpc3828s/\nmatch http m|^\\r\\n\\r\\n\\0HTTP/1\\.0 500 Internal Server Error\\r\\nContent-Length: 0\\r\\n\\r\\n| p/DeviceWISE Enterprise M2M httpd/ cpe:/a:telit:devicewise_m2m/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nExpires: .*\\r\\nServer: PulsarCoreEmbeddedPlantServer/1\\.0\\r\\nConnection: close\\r\\nCache-Control: public, max-age=2592000\\r\\nContent-Encoding: utf-8\\r\\nContent-Length: 28\\r\\nContent-Type: text/html\\r\\n\\r\\nIncorrect first header line | p/ThinKnx web ui/ d/specialized/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n\\r\\n<!doctype html>\\r\\n<html>\\r\\n<head>\\r\\n    <meta charset='utf8'>\\r\\n    <meta http-equiv='x-ua-compatible' content='ie=edge'>\\r\\n    <title>Octopus Tentacle</title>| p/Octopus Tentacle/ cpe:/a:octopus:tentacle/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nDate: .*\\r\\nServer: This is for PRTG Probes\\r\\n| p/PRTG remote probes httpd/ cpe:/a:paessler:prtg/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Length: 16\\r\\nContent-Type: text/plain\\r\\n\\r\\n400 Bad Request\\n| p/Neato Botvac Connected/ d/specialized/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Length: 0\\r\\n\\r\\n| p/FRITZ!Box TR-069 service/ d/broadband router/\n# \"The 6258 port is for the older 1Password 3 extension\"\n# Also matches Daylite Server Admin caldav\nsoftmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nAccept-Ranges: bytes\\r\\nDate: .* GMT\\r\\n\\r\\n| p/1Password Agent or Daylite Server Admin caldav/\n\n# full match including appliance model number under GetRequest\nsoftmatch http m|^UNKNOWN 400 Bad Request\\r\\nServer: Check Point SVN foundation\\r\\n| p/Check Point SVN foundation/\n# More complete match including API version under FourOhFourRequest\nsoftmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/plain\\r\\nConnection: close\\r\\n\\r\\n400 Bad Request| p|Golang net/http server| cpe:/a:golang:go/\n# version available with GetRequest\nsoftmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Length: 40\\r\\nContent-Type: text/plain; charset=UTF-8\\r\\nDate: .*\\r\\n\\r\\nMultiple leading empty lines not allowed| p/Calibre Content Server httpd/ cpe:/a:kovid_goyal:calibre/\n\nmatch http-proxy m%^HTTP/1\\.0 400 Bad Request\\r\\nContent-Type: text/html\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=(?:utf-8|us-ascii)\\r\\n\\r\\n<html><body>Invalid request<P><HR><i>This message was created by WinRoute Proxy</i></body></html>% p/WinRoute http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\n.*<html><body>\\t\\t<i><h2>Invalid request:</h2></i><p><pre>Bad request format\\.\\n</pre><b>\\t\\t</b><p>Please, check URL\\.<p>\\t\\t<hr>\\t\\tGenerated by Oops\\.\\t\\t</body>\\t\\t</html>$|s p/Oops! http proxy/ d/proxy server/\nmatch http-proxy m|^HTTP/1\\.0 503 Internal error\\r\\nServer: awarrenhttp/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html> <head> <title> Internal Error </title> </head> <body> <hr> <p> An internal server error occurred while processing your request\\. Please contact administrator\\.\\n<BR> <BR> Reason: Could not relay request </p> </body> </html>$| p/awarrenhttp http proxy/ v/$1/ i/Cyberoam CR200 proxy server/ d/proxy server/\nmatch http-proxy m|^<HTML><HEAD><TITLE>501 Not Implemented</TITLE></HEAD>\\n<BODY><H2>501 Not Implemented</H2>\\nThe requested method '' is not implemented by this server\\.\\n<HR>\\n<I>httpd/1\\.00</I></BODY></HTML>\\n$| p/thttpd/ i/Blue Coat PacketShaper 3500 firewall/ d/firewall/ cpe:/a:acme:thttpd/ cpe:/h:bluecoat:packetshaper_3500/\nmatch http-proxy m|^HTTP/1\\.[01] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mikrotik HttpProxy\\r\\n|s p/MikroTik http proxy/\n# Actually got over 600 spaces at the end of this, but that could be a fluke?\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Type: text/html\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html><body>[^<]+<P><HR><i>[^<]*Kerio Control[^<]*?</i></body></html> {100}| p/Kerio Control http proxy/ cpe:/a:kerio:control/\n#softmatch http-proxy m|^HTTP/1\\.1 400 Bad Request\\r\\n\\r\\n$| p/sslstrip/\n\nmatch hp-problemdiagnostics m|^<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<NETPATH_PROBE version=\\\"[\\w._-]+\\\">\\n\\t<SOURCE device_type=\\\"HOST\\\">\\n\\t\\t<DNS>([\\w._-]+)</DNS>\\n\\t\\t<IP_OUT>[\\d.]+</IP_OUT>\\n\\t</SOURCE>\\n\\t<DESTINATION name=\\\"\\\" arguments=\\\"\\\">\\n\\t\\t<ERROR code=\\\"3\\\">\\n\\t\\t\\t<MESSAGE>No destination specified</MESSAGE>\\n\\t\\t</ERROR>\\n\\t</DESTINATION>\\n</NETPATH_PROBE>\\n\\n$| p/HP Problem Diagnostics/ h/$1/\n\nmatch icontrolav2 m|^E04\\r\\nR\\r\\n| p/Pioneer iControlAV2 control port/ d/media device/\n\n# slident 0.0.19\nmatch ident m|^0, 0: ERROR: UNKNOWN-ERROR\\n$| p/slident/\n# mlidentd 1.1 on Linux\n# bqidentd on RSX-11M-PLUS\nmatch ident m|^0,0:ERROR:UNKNOWN-ERROR\\r\\n$| p/mlidentd or bqidentd/\n# This identd might be BSD derived:\nmatch ident m|^2 , 0 : ERROR : UNKNOWN-ERROR\\r\\n$|\nmatch ident m|^0 , 0 : ERROR : UNKNOWN-ERROR\\r\\n$|\n# FreeBSD 4.8-RC inetd internal identd\nmatch ident m|^0 , 0 : ERROR : INVALID-PORT\\r\\n$| p/FreeBSD identd/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\n# pidentd-3.1a19-157\nmatch ident m|^ : ERROR : UNKNOWN-ERROR\\r\\n$| p/pidentd/\nmatch ident m|^0, 0 : ERROR : X-INVALID-REQUEST\\r\\n$| p/Minidentd or fakeidentd/\n# http://packages.debian.org/unstable/net/ident2.html\nmatch ident m|^0 , 0 : ERROR : INVALID-PORT\\r\\n0 , 0 : ERROR : INVALID-PORT\\r\\n$| p/Ident2/\n# midentd 2.3.1 on Linux\nmatch ident m|^0, 0 : ERROR : INVALID-PORT\\r\\n| p/midentd/\n#midentd 2.1 on Linux 2.4.21\nmatch ident m|^0,0 : ERROR : INVALID-PORT\\r\\n| p/midentd/\n# authd 1.4.3 on Linux\nmatch ident m|^0 , 0 : ERROR :INVALID-PORT\\r\\n| p/authd/\nmatch ident m|^: USERID : UNIX : CacheFlow Server\\r\\n| p/CacheFlow identd/ o/CacheOS/ cpe:/o:bluecoat:cacheos/\nmatch ident m|^:USERID:OTHER:\\d+-ident-is-a-completely-pointless-protocol-that-offers-no-security-or-traceability-at-all-so-take-this-and-log-it!\\r\\n| p/Fake identd/\nmatch ident m|^ : USERID : UNIX : ([-\\w_]+)$| p/Klient identd/ i/IRC Nick $1/\nmatch ident m|^\\r\\n: ERROR : HIDDEN-USER\\r\\n$| p/Borderware Firewall identd/ d/firewall/\nmatch ident m|^ : USERID : UNIX : [a-z]{4,8}\\r\\n$| o/Windows/ cpe:/o:microsoft:windows/a\nmatch ident m|^1 , 1 : USERID : OTHER : chuck-the-bsd-deamon\\r\\n$| p/widentd/\nmatch ident m|^,  : USERID : UNIX : [^\\r\\n]+\\r\\n$| p/FTPRush FTP client identd/ o/Windows/ cpe:/a:ftprush:ftprush/ cpe:/o:microsoft:windows/a\nmatch ident m|^0 , 0 : ERROR : FORMAT-ERROR\\r\\n$| p/GTA GB-Ware firewall identd/ d/firewall/\nmatch ident m|^,  : USERID : UNIX : ([-\\w_]+)\\r\\n,  : USERID : UNIX : (?:[-\\w_]+)\\r\\n$| p/Snak IRC client identd/ i/username: $1/\nmatch ident m|^ : ERROR : INVALID-PORT\\r\\n| p/Quassel IRC/ cpe:/a:quassel:quassel/\nmatch ident m|^0,0:ERROR:INVALID-PORT\\r\\n| p/NetBSD identd/ o/NetBSD/ cpe:/o:netbsd:netbsd/a\n\nmatch ident m|^rc \\(tcp113\\): null list in concatenation\\n| p/Plan 9 identd/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\n\nmatch imap m|^\\* OK IMAP4 1\\.0 server ready\\r\\n\\* BAD Argument\\r\\n| p/Cisco VPN Concentrator 3000-series imapd/ d/terminal server/\n\nmatch imond m|^ERR password required\\r\\nERR password required\\r\\n| p/imond fli4l router config/ d/router/\nmatch imond m|^ERR administrator password required\\r\\nERR administrator password required\\r\\n$| p/imond fli4l router config/ d/router/\nmatch imond m|^ERR\\r\\nERR\\r\\n$| p/imond fli4l router config/ d/router/\n\n# Broken inetd configuration\n# <27>Dec 19 17:37:37 inetd\\[28433\\]: execv /usr/openv/netbackup/bin/bpjava-msvc: No such file or directory\nmatch inetd m|^<\\d+>[A-Z][a-z][a-z] +\\d+ \\d+:\\d+:\\d+ inetd\\[\\d+\\]: execv (/[-.\\\\/\\w]+): (\\w[\\s\\w.,-]+)$| p/inetd/ i/failed to exec $1: $2/\n\nmatch intow m|^<status><code>9999</code><result>App\\.Version is out of date please update your version of InTow Mobile</result>| p/InTow Mobile/ i/out of date/ o/iOS/ cpe:/o:apple:iphone_os/a\n\nsoftmatch insteon-plm m|^\\x15$| p/Insteon PLM/\n\nmatch asf-rmcp m|^\\0\\0\\0\\x02\\t\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0$| p/SuperMicro IPMI RMCP/ cpe:/o:supermicro:intelligent_platform_management_firmware/\n\n# Diverse IRC bot\nmatch ircbot m|^ \\r\\nSorry, that nickname format is invalid\\.\\r\\r\\n$| p/Diverse IRC bot/\n\nmatch irc m|^:([-\\w_.]+) 421 \\r\\n\\r\\n :\\r\\n\\r\\n unimplemented protocol request\\r\\n:[-\\w_.]+ 421 \\r\\n\\r\\n :\\r\\n\\r\\n unimplemented protocol request\\r\\n| p/Crackalaka ircd/ h/$1/\nmatch irc m|^:([-\\w_.]+) 421  : Unknown command\\r\\n:[-\\w_.]+ 421  : Unknown command\\r\\n| p/Free Lightweight IRC Program ircd/ h/$1/ cpe:/a:freenet:flip/\n\nmatch irc-proxy m|^\\+OK \\r\\n-ERR XXX authorization first\\r\\n$| p/muh irc proxy/\n\nmatch irr m|^% No search key specified\\n\\n| p/Merit Internet Routing Registry/\n\nmatch istat m|^<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?><isr athrej=\\\"1\\\"></isr>$| p/istatd server for iStat iPhone app/\n\n# http://docs.getisymphony.com/display/ISYM28/Status+API\nmatch isymphony-status m|^Error: Invalid command\\.\\nError: Invalid command\\.\\n$| p/iSymphony call manager Status API/\n\nmatch itach m|^ERR 001\\rERR 001\\r| p/Global Cache iTach API/ d/bridge/\n\n# http://java.decompiler.free.fr/?q=node/626\nmatch jd-gui m|^\\t$| p/JD-GUI Java decompiler/ v/0.3.3/\n\n# Port 21. http://www.jabaco.org/board/p2043-orpg-in-jabaco-applet.html#post2043\nmatch jrpgt m|^<<jrpgt!>>\\x7c$| p/JRPGT game server/ o/Windows/ cpe:/o:microsoft:windows/\n\nmatch jtag m|^\\x55\\x0a\\x04\\x0d\\xe5$| p/Macraigor mpDemon JTAG debugger/ d/specialized/\n\nmatch kerberos-sec m%^\\x00\\x00\\x00.~.0.\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01=\\xa9.\\x1b.([\\w._-]+)\\xaa%s p/MIT Kerberos/ i/server time: $1-$2-$3 $4:$5:$6Z/ h/$7/ cpe:/a:mit:kerberos:5/\n\nmatch keyence-pc m|^ER,,02\\rER,,02\\r| p|Keyence EtherNet/IP module| d/specialized/\n\nmatch labtech-redirector m|^\\x02\\0\\0\\x01B\\t\\0\\0\\x01B$| p/Labtech/ cpe:/a:labtech_software:labtech/\n\nmatch laserfiche m|^HLO 0 0 \\. 0 71\\r\\nContent-type: application/vnd\\.laserfiche\\.lrnp\\r\\n\\r\\nLRNP/1\\.1\\r\\n\\r\\nlistener\\r\\nEND\\r\\nERR 0 1 \\. 71 80\\r\\nContent-type: application/vnd\\.laserfiche\\.lrnp\\r\\n\\r\\n451 0 Invalid message \\(-2001\\)\\r\\nEND\\r\\n| p/Laserfiche document service/\n\nmatch lastfm m|^ERROR: Command doesn't seem to be followed by a space followed by arguments\\n$| p/Last.fm client/ cpe:/a:last:last.fm/\nmatch lexlm m|^.\\x08\\0\\0$|s p/Lexmark language monitor/\n\n# Part of Linux net-snmp-5.0.6-17\nmatch linuxconf m|^500 access denied: Check networking/linuxconf network access\\r\\n$| p/Linuxconf/ i/Access denied/ o/Linux/ cpe:/o:linux:linux_kernel/a\n# Linuxconf 1.26r4\nmatch linuxconf m|^500 access denied: Check config/networking/misc/linuxconf network access\\r\\n<p>\\r\\nBy default,| p/Linuxconf/ i/Access denied/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch lirc m|^BEGIN\\n\\r\\nERROR\\nDATA\\n1\\nbad send packet\\nEND\\nBEGIN\\n\\r\\nERROR\\nDATA\\n1\\nbad send packet\\nEND\\n| p/LIRC infrared receiver daemon/\n\nmatch loglogic m|^\\x02\\x02$| p/LogLogic protocol/ d/security-misc/\n\nmatch memcached m|^ERROR\\r\\nERROR\\r\\n$| p/Memcached/ cpe:/a:memcached:memcached/\n\nmatch minecraft m|^\\x0eYou need to log in!                                             $| p/Minecraft game server/\nmatch multicraft m|^>ERROR - client not authorized\\n>ERROR - client not authorized\\n| p/Bitnami Multicraft/\n\n# SnapMirror or SnapVault\nmatch netapp-filer m|^\\x0b\\0\\0\\0$| p/NetApp filer data transfer/\n\nmatch netasq-admin m|^200 code=00100200 msg=\\\"[^\"]+\\\"\\r\\n200 code=00100200 msg=\\\"[^\"]+\\\"\\r\\n$| p/Netasq firewall admin/ d/firewall/\n\nmatch netbios-ssn m|^\\x82\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Nepenthes honeypot netbios-ssn/\n\n# Netsaint Status Daemon 2.15\nmatch netsaint m|^Unknown command\\n$| p/Netsaint Status Daemon/\nmatch netsaint m|^ERROR No function requested from client\\.| p/Nagios Statd Server/ cpe:/a:nagios:nagios/\nmatch netsaint m|^ERROR: Unknown request number\\.| p/NC_Net nagios server/ cpe:/a:nagios:nagios/\n\n# NSClient - http://nsclient.ready2run.nl/\nmatch nsclient m|^ERROR:Wrong password$| p/Netsaint Windows Client/\nmatch nsclient m|^ERROR: Invalid password\\.\\nERROR: Invalid password\\.\\n$| p/NSClient++/ cpe:/a:nsclient:nsclient%2b%2b/\nmatch nsclient m|^ERROR: No command specified\\.\\nERROR: No command specified\\.\\n$| p/NSClient++/ cpe:/a:nsclient:nsclient%2b%2b/\n\n# http://olsr.org/?q=txtinfo_plugin\nmatch olsrd-txtinfo m|^HTTP/1\\.0 200 OK\\nContent-type: text/plain\\n\\nTable: Links\\nLocal IP\\tRemote IP\\tHyst\\.\\tLQ\\tNLQ\\tCost\\n[\\w._-]+\\t[\\w._-]+\\t[\\d.]+\\t[\\d.]+\\t[\\d.]+\\t[\\d.]+\\t\\n| p/olsrd txtinfo plugin/ v/0.6.3/\n# Nulls?\nmatch olsrd-txtinfo m|^HTTP/1\\.0 200 OK\\0Content-type: text/plain\\n\\0Table: Links\\nLocal IP\\tRemote IP\\tHyst\\.\\tLQ\\tNLQ\\tCost\\0[\\w._-]+\\t[\\w._-]+\\t[\\d.]+\\t[\\d.]+\\t[\\d.]+\\t[\\d.]+\\t\\n| p/olsrd txtinfo plugin/ v/0.6.7/\n\nmatch omniback m|^HP OpenView OmniBack II ([-.\\w]+): INET, | p/HP OpenView OmniBackII/ v/$1/ cpe:/a:hp:omniback_ii:$1/\n\nmatch omniinet m|^H\\0P\\0 \\0D\\0a\\0t\\0a\\0 \\0P\\0r\\0o\\0t\\0e\\0c\\0t\\0o\\0r\\0 \\0A\\0\\.\\x00[0\\0]*([\\0\\w._-]+):\\0 \\0I\\0N\\0E\\0T\\0,\\0 \\0i\\0n\\0t\\0e\\0r\\0n\\0a\\0l\\0 \\0b\\0u\\0i\\0l\\0d\\0 \\x00([\\0\\d]+),\\0 \\0b\\0u\\0i\\0l\\0t\\0 \\0o\\0n\\0 \\0.*\\n\\0\\0\\0$| p/HP Data Protector/ v/$P(1)/ i/build $P(2)/ cpe:/a:hp:data_protector:$P(1)/\n\n# tcp/2368\nmatch opentable-listener m|^OpenTable Listener Version ([\\w._-]+)\\r\\n\\r\\nerror=Bad request\\r\\n\\r\\nOTRequestHandler ([\\w._-]+) WebRequest\\r\\n\\r\\n\\0$| p/OpenTable restaurant reservation listener/ v/$1/ i/request handler version $2/\n# tcp/61031\nmatch opentable m|^\\xc1\\x02\\0\\0\\x14\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x44\\x28\\0\\0$| p/OpenTable restaurant reservation system/\n\nmatch oracle-db-rmi m|^\\0\\0\\xfa\\xda\\0\\x02$| p/Oracle Database Lite RMI/ cpe:/a:oracle:database_lite/\n\nmatch paromed m|^PCS-[\\w._-]+,V([\\w._-]+),OK\\nERROR:102: ENERROR:102: EN| p/Paromed milling machine/ v/$1/ d/specialized/\n\nmatch pathfinder-xml m|^<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?> <FatalError><Reason>Invalide XML!</Reason></FatalError>\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?> <FatalError><Reason>Invalide XML!</Reason></FatalError>\\r\\n| p/Avaya Scopia Pathfinder XML API/\n\n# torque, Tera-scale Open-source Resource and QUEue manager (PBS)\n# http://supercluster.org/torque\n# maui, http://supercluster.org/maui\nmatch pbs-maui m|^\\+2\\+15\\+15056\\+\\d+\\+\\d+| p|PBS/Maui Roll| i/Rocks Cluster/ d/specialized/\n# http://www.adaptivecomputing.com/blog-hpc/torque-protocols/\n# \"+2+1\" = version 2.1\n# \"5+15058\" = error 15058, PBSE_DISPROTO\n# \"+0\" = aux code 0 ?\n# \"+7\" = reply body type 7 ?\n# \"2+56\" = string length 56\nmatch pbs m|^\\+2\\+(\\d)5\\+15058\\+0\\+72\\+56Bad DIS based Request Protocol MSG=cannot decode message| p/Portable Batch System/ v/2.$1/\n\nmatch pmcd m|^\\0\\0\\0\\x14\\0\\0p\\0\\0\\0\\x03.\\xff\\xff\\xfc\\x11\\x02\\0..$|s p/SGI performance metrics collector daemon/ o/IRIX/ cpe:/o:sgi:irix:6.5/\n\nmatch icy m|^OK2\\r\\nicy-caps:\\d+\\r\\n\\r\\nOK\\r\\n$| p/Peercast/\nmatch icy m|^HTTP/1\\.0 200 OK\\r\\nContent-type: application/ogg\\r\\nicy-br:(\\d+)\\r\\nicy-description:VirtualDJ Direct Broadcast\\r\\nicy-genre:\\r\\nicy-name:VirtualDJ\\r\\nicy-pub:0\\r\\nicy-url:http://www\\.virtualdj\\.com/\\r\\nServer: VirtualDJ\\r\\n\\r\\n| p/VirtualDJ streaming audio/ i/Bitrate $1/\n\nmatch pgbouncer m|^E\\0\\0\\0&SERROR\\0C08P01\\0Mbad packet header\\0\\0| p/PgFoundry PgBouncer PostgreSQL connection pooler/ v/1.5.2 or earlier/\nmatch pgbouncer m|^E\\0\\0\\x002SERROR\\0C08P01\\0Mbad packet header: '0d0a0d0a'\\0\\0| p/PgFoundry PgBouncer PostgreSQL connection pooler/ v/1.5.3 or later/\n\n# Mercury/32 3.32 PH Server module on Windows XP\nmatch ph-addressbook m|^598::Command not recognized\\.\\r\\n598::Command not recognized\\.\\r\\n$| p|Mercury/32 PH addressbook server| o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch pop3 m|^\\+OK POP3 ([-.+\\w]+) v(\\d[-.\\w]+) server ready\\r\\n| p/ipop3d/ v/$2/ h/$1/\nmatch pop3 m|^\\+OK POP3 \\[([-.+\\w]+)\\] (\\d[-.\\w]+) server ready\\r\\n| p/ipop3d/ v/$2/ h/$1/\n# iopd 2003debian0.0304182231-1\nmatch pop3 m|^\\+OK POP3 \\[([-.\\w]+)\\] v(200[-.\\w]+) server ready\\r\\n-ERR Null command\\r\\n-ERR Null command\\r\\n| p/ipopd/ v/$2/ h/$1/\n# Solid POP3d 0.15\nmatch pop3 m|^\\+OK Solid POP3 server ready\\r\\n-ERR unknown command\\r\\n-ERR unknown command\\r\\n$| p/Solid POP3d/\n# OS 400 V4R4M0\nmatch pop3 m|^\\+OK POP3 server ready\\r\\n-ERR invalid command\\r\\n$| p/IBM OS 400 pop3d/ o|OS/400| cpe:/o:ibm:os_400/a\n# mailgate v3.5.177 on Win2K\nmatch pop3 m|^\\+OK pop server ready\\r\\n$| p/MailGate pop3d/ o/Windows/ cpe:/a:mailgate:mailgate/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3 server ready <[-\\w]+>\\r\\n-ERR Invalid command\\r\\n$| p/SmarterMail pop3d/ o/Windows/ cpe:/a:smartertools:smartermail/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK POP3\\r\\n-ERR Invalid command in current state\\.\\r\\n| p/hMailServer pop3d/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK XXX Private Mail server\\r\\n-ERR Invalid command in current state\\.\\r\\n| p/hMailServer pop3d/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([\\w._-]+)\\r\\n-ERR Invalid command in current state\\.\\r\\n-ERR Invalid command in current state\\.\\r\\n| p/hMailServer pop3d/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK .*\\r\\n-ERR Invalid command in current state\\.\\r\\n-ERR Invalid command in current state\\.\\r\\n| p/hMailServer pop3d/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch pop3 m|^\\+OK ([\\w._-]+) Welcome\\r\\n-ERR Invalid command \\(\\) \\(\\) p1=\\(\\)\\r\\n-ERR Invalid command \\(\\) \\(\\) p1=\\(\\)\\r\\n| p/SurgeMail pop3d/ h/$1/ cpe:/a:netwin:surgemail/\nmatch pop3 m|^-ERR Invalid command\\.\\r\\n-ERR Invalid command\\.\\r\\n| p/cPanel Courier pop3d/\nmatch pop3 m|^\\+OK POP3 ready\\r\\n-ERR invalid command\\r\\n| p/Zimbra Collabration Suite pop3d/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch pop3 m|^\\+OK DavMail POP ready at [^\\r\\n]*\\r\\n-ERR unknown command\\r\\n-ERR unknown command\\r\\n| p/DavMail pop3d/\nmatch pop3 m|^\\+OK ([\\w.-]+) POP3 ready\\r\\n-ERR Unkown command\\r\\n-ERR Unkown command\\r\\n| p/cbdev cmail pop3d/ h/$1/ cpe:/a:cbdev:cmail/\nmatch pop3 m|^\\+OK IBM Notes POP3 server version Release ([\\d.]+)FP(\\d+) HF(\\d+) ready on ([^/]+)/(.+)\\.\\r\\n| p/IBM Notes pop3d/ v/$1 FP$2 HF$3/ i/domain: $5/ h/$4/ cpe:/a:ibm:notes:$1:fp$2/\nmatch pop3 m|^\\+OK IBM Notes POP3 server version Release ([\\d.]+)FP(\\d+) ready on ([^/]+)/(.+)\\.\\r\\n| p/IBM Notes pop3d/ v/$1 FP$2/ i/domain: $4/ h/$3/ cpe:/a:ibm:notes:$1:fp$2/\nmatch pop3 m|^\\+OK IBM Notes POP3 server version Release ([\\d.]+) ready on ([^/]+)/(.+)\\.\\r\\n| p/IBM Notes pop3d/ v/$1/ i/domain: $3/ h/$2/ cpe:/a:ibm:notes:$1/\n\nmatch pop3 m|^\\+OK [^\\r\\n]*\\r\\n-ERR Unknown command\\.\\r\\n-ERR Unknown command\\.\\r\\n| p/Dovecot pop3d/ cpe:/a:dovecot:dovecot/\n\n# Perdition\nmatch pop3-proxy m|^\\+OK POP3 Ready ([-\\w_.]+) \\w+\\r\\n-ERR Null command, mate\\r\\n| p/Perdition pop3 proxy/ h/$1/ cpe:/a:horms:perdition/\nmatch pop3-proxy m|^\\+OK POP3 perditon ready on ([\\w._-]+) \\w+\\r\\n-ERR Null command, mate\\r\\n| p/Perdition pop3 proxy/ h/$1/ cpe:/a:horms:perdition/\nmatch pop3-proxy m|^\\+OK POP3Proxy ready\\r\\n-ERR Unknown command\\r\\n-ERR Unknown command\\r\\n| p/Astaro firewall pop3 proxy/ d/firewall/ cpe:/a:astaro:security_gateway_software/\nmatch pop3-proxy m|^\\+OK POP3Proxy ready on node \\d+\\r\\n-ERR Unknown command\\r\\n-ERR Unknown command\\r\\n| p/Astaro firewall pop3 proxy/ d/firewall/ cpe:/a:astaro:security_gateway_software/\n\n# Postgres 7.1.3\nmatch postgresql m|^EInvalid packet length\\0$| p/PostgreSQL DB/ cpe:/a:postgresql:postgresql/\n# postgresql-7.2.3-5.73; linux 2.4.20-18.7 redhat 7.3\nmatch postgresql m|^EFATAL 1:  invalid length of startup packet\\n\\0| p/PostgreSQL DB/ cpe:/a:postgresql:postgresql/\nmatch postgresql m|^EFATAL:  ung\\xfcltige L\\xe4nge des Startpakets\\n\\0| p/PostgreSQL DB/ i/German/ cpe:/a:postgresql:postgresql::::de/\nmatch postgresql m|^E\\0\\0\\09SFATAL\\0MExpecting a startup message, but received \\r\\0\\0| p/Postgres-XC/ v/1.1/\n\n# Port 6509.\nmatch printer m|^\\xff$| p/Panasonic mfpscdl.exe service/\n\n# port 5200\nmatch printeron m|^\\xc4\\t$| p/PrinterOn mobile print server/ d/print server/\n\nmatch priv-print m|^\\xc0\\0\\x12Data field missing$| p/AXIS 560 print server/ d/print server/ cpe:/h:axis:560/a\n\n# Postfix qmqpd on Linux 2.4\nmatch qmqp m|^58:Dnetstring format error while receiving QMQP packet header,$| p/Postfix qmqpd/ i/Quick Mail Queueing Protocol/ cpe:/a:postfix:postfix/\nmatch qnap-transcode m|^\\x01\\0\\0\\0client's request is accepted\\0{868}| p/QNAP NAS Transcoding Service/ d/storage-misc/\nmatch rethinkdb-client m|^ERROR: This is the rdb protocol port! \\(bad magic number\\)\\n$| p/RethinkDB client driver/ v/1.5.2 or earlier/\nmatch rethinkdb-client m|^ERROR: this is the rdb protocol port \\(bad magic number\\)\\n$| p/RethinkDB client driver/ v/1.6.0 -/\nmatch rethinkdb-client m|^ERROR: This is the rdb protocol port \\(bad magic number\\).\\n$| p/RethinkDB client driver/ v/1.13.0/\n# TODO: Can we get better matching based on when that null terminator snuck in there?\nmatch rethinkdb-client m|^ERROR: Received an unsupported protocol version\\. This port is for RethinkDB queries\\. Does your client driver version not match the server\\?\\n\\0?| p/RethinkDB client driver/ v/1.13.2 or newer/\n\nmatch realport m|^\\xff\\x17Access to unopened port.$|s p/Digi EtherLite 16 or 32 RealPort/ d/terminal server/\nmatch realport m|^\\xf0\\xff\\x14Port is out of range\\0| p/Digi RealPort/ d/terminal server/\n# Ximian Red Carpet Daemon 1.4.4 on RedHat Linux 9.0\nmatch redcarpet m|^Status: 400 Bad Request\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Ximian Red Carpet Daemon/\n\nmatch rlm m|^\\x01\\0\\x0c\\0LYEfffffff0\\0\\0\\0| p/Reprise License Manager/\n\nmatch rsa-authmgr m|^-ERR Invalid command: \\r\\n-ERR Invalid command: \\r\\n| p/RSA Authentication Manager node manager/ cpe:/a:rsa:authentication_manager/\n\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: AirTunes/([\\w._-]+)\\r\\nAudio-Jack-Status: connected; type=analog\\r\\n\\r\\n| p/RogueAmoeba Airfoil rtspd/ v/$1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch rtsp m|^RTSP/1\\.0 400 CSeq required\\r\\nContent-Length: 0\\r\\n\\r\\n| p/BlueCherry DVR rtspd/ d/media device/\n\nmatch s2-emerge m|^resolutions=\\\"4CIF\\\",\\\"2CIF\\\",\\\"CIF\\\",\\\"QCIF\\\"&mpeg_enabled=\\\"TRUE\\\"&jpeg_enabled=\\\"TRUE\\\"&alarms=\\d+&relays=\\d+&audio_in\\[\\]=0x3,0x0&audio_out=\\[\\]0x3,0x0\\0{375,}| p/S2 eMerge Door Access Controller/\n\nmatch samsung-twain m|^\\xa8\\x08C\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Samsung TWAIN/ i/SCX-4x28 series printer/ d/printer/\n\n# nibuf.cpp 3073 is version 38.9\n# After \"NI (network interface)\", the next 2 fields appear to be linked to version:\n# \\x00701\\x0038\\0 == 38.10\n# \\x00700\\x0038\\0 == 38.9\nmatch saprouter m|^\\0\\0\\0.NI_RTERR\\0.\\0\\0\\xff\\xff\\xff\\xa3\\0\\0\\0.\\*ERR\\*\\x001\\0Network packet too big\\0-93\\0NI \\(network interface\\)\\x00\\d+\\x00\\d+\\0nibuf\\.cpp\\x00\\d+\\0NiBufIIn: message length 218762506 exceeds max \\(10024\\)\\0([^\\0]*)\\0\\0\\0\\x00\\d+\\0SAProuter ([\\d.]+) \\(SP(\\d+)\\) on '([^']+)'\\0\\0\\0\\0\\0\\*ERR\\*\\0\\0\\0\\0\\0| p/SAProuter/ v/$2 SP$3/ i/local time: $1/ h/$4/ cpe:/a:sap:network_interface_router:$2:sp$3/\nmatch saprouter m|^\\0\\0\\0.NI_RTERR\\0.\\0\\0\\xff\\xff\\xff\\xa3\\0\\0\\0.\\*ERR\\*\\x001\\0Network packet too big\\0-93\\0NI \\(network interface\\)\\x00\\d+\\x00\\d+\\0nibuf\\.cpp\\x00\\d+\\0NiBufIIn: message length 218762506 exceeds max \\(10024\\)\\0([^\\0]*)\\0\\0\\0\\x00\\d+\\0SAProuter ([\\d.]+) on '([^']+)'\\0\\0\\0\\0\\0\\*ERR\\*\\0\\0\\0\\0\\0| p/SAProuter/ v/$2/ i/local time: $1/ h/$3/ cpe:/a:sap:network_interface_router:$2/\n\nmatch sdcomm m|^ERR 27$| p/RSA SecureID Ace Server/ cpe:/h:rsa:securid/\n\n# https://github.com/elvanderb/TCP-32764\nmatch scmm m|^MMcS\\xff\\xff\\xff\\xff\\0\\0\\0\\0| p/SerComm manufacturer backdoor/ d/broadband router/\n\nmatch seagull-lm m|^\\xf1\\xf8\\xf2\\xf6\\xf3\\xf3\\xf0\\xf0\\xf3\\xf8\\xf7\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xe2\\xf6\\xf5\\xf6\\xf9\\xc5\\xf9\\xc3\\0\\xf0\\xf0\\xf3\\xf1\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0\\xf0$| p/BlueZone Seagull license manager/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch bindshell m|^bash: line 1: \\$'\\\\r': command not found\\nbash: line 2: \\$'\\\\r': command not found\\n| p/Bash shell/ i/**BACKDOOR**/ cpe:/a:gnu:bash/\nmatch bindshell m|^bash: line 1: \\r: command not found\\nbash: line 2: \\r: command not found\\n| p/Bash shell/ i/**BACKDOOR**/ cpe:/a:gnu:bash/\nmatch bindshell m|\\r: bad character in file name: '/bin/\\r'\\n$| p/Plan 9 rc shell/ i/**BACKDOOR**/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\n\nmatch textui m|^\\r\\n <{5}-{35}>{5}\\r\\n <{5}    CipherLab  Ethernet Cradle {5}>{5}\\r\\n <{5}-{35}>{5}\\r\\n {10}\\[Press 'Enter' to continue\\.\\]\\r\\nKernel Version: Kernel-([\\w._-]+)\\r\\nLib Version: Ethernet Cradle-([\\w._-]+)\\r\\nMACID: ([\\dA-F:]+)\\r\\nIP: [\\d.]+\\r\\nLocal Name: ([^\\r\\n]+)\\r\\n\\r\\n| p/CipherLab Ethernet Cradle command shell/ v/$2/ i/Kernel-$1; MAC: $3/ d/specialized/ h/$4/\n\n# Softmatch because we have a new probe to try to get more info: SharpTV\nsoftmatch sharp-remote m|^ERR\\rERR\\rERR\\rERR\\r| p/Sharp TV remote control/ d/media device/\n\nmatch smtp m|^220 ([\\w._-]+) ESMTP ready\\r\\n500 5\\.5\\.1 Command unrecognized\\r\\n500 5\\.5\\.1 Command unrecognized\\r\\n| p/Kerio MailServer smtpd/ h/$1/\nmatch smtp m|^220 ([\\w._-]+) ESMTP I2PNet Mailservice\\r\\n500 5\\.5\\.2 Error: bad syntax\\r\\n500 5\\.5\\.2 Error: bad syntax\\r\\n| p/I2P smtpd/ h/$1/\n\n# Hopefully obsoleted by the SOCKS probes -Doug\n#match socks m|^\\0\\[\\r\\n...\\0$| p/Socks4/\n#match socks m|^\\x05\\x01\\0.\\0\\0\\0\\0\\0\\0$| p/Socks5/\n\nmatch solfe m|^\\x02\\0\\x01\\xfb\\xff\\xfb\\xff\\xff\\xff\\xff\\xffNOSUP| p/HP PNM Solid FlowEngine/\n\nmatch softros-im m|^none\\r\\n$| p/Softros LAN Messenger instant messaging/\n\nmatch spamassassin m|^SPAMD/1\\.0 76 Bad header line: \\r\\n| p/SpamAssassin spamd/ cpe:/a:apache:spamassassin/\n\nmatch sqlmonitor m|^\\0\\0\\0\\0\\0$| p/Red-Gate SQL Monitor/ o/Windows/ cpe:/a:red-gate:sql_monitor/ cpe:/o:microsoft:windows/a\n\nmatch starbound m|^\\0\\x08\\0\\0\\x02\\x9c| p/Starbound game server/\n\nmatch stargazer m|^ERHD$| p/Stargazer Billing System/\n\n# Giving some problems:\n#match stickynote m|^\\x01\\0\\0\\0$| p/StickyNote windows freeware/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch sstp m|^SSTP/([\\d.]+) 400 Bad Request\\r\\n\\r\\n\\0$| p/Sakura Script Transfer Protocol/ i/Protocol $1/\n\nmatch smux m|^A\\x01\\x02$| p/Linux SNMP multiplexer/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch sphereicall m|^\\x01\\0\\0\\0z\\0\\0\\x003,DBServer,\\d+,Restarts,\\d+,\\d+,UpTime,\\d+,\\d+,MediaServer| p/Sphericall DBServer MediaServer VoIP/\n\n# http://www.getingeasia.com/products/healthcare-products/traceability-asset-management/t-doc-2000\nmatch t-doc-2000 m|^READY \\r\\nERROR 10000 \\\"Unknown command\\. Write HELP to get help\\.\\\" \\[Unknown\\]\\r\\nERROR 10000 \\\"Unknown command\\. Write HELP to get help\\.\\\" \\[Unknown\\]\\r\\n| p/Getinge T-DOC 2000 hospital instrument management system/\n\n# http://forum.ragezone.com/f440/guide-mini-setup-1-35-a-494256/\nmatch talesofpirates-gate m|^\\0\\x02\\0\\x02\\0\\x02\\0\\x02\\0\\x02$| p/Tales of Pirates game gate server/\n\nmatch telemecanique m|^220 Service ready on ([\\w._-]+) system Version:([\\w._:-]+) Subsystem:([\\w._:-]+)\\r\\n500 Unsupported command\\r\\n| p/Telemecanique Magelis XBTGT 7340 industrial control/ v/$2/ i/Subsystem $3; Name $1/ d/specialized/\n\n# This could go into the null probe, but the problem is that it is a prefix\n# of what other routers (at least HP JetDirect printer telentd) send.\n# And at least the JD sends the string below first, before it send the\n# rest in other packets.  So it is best to capture this one here in\n# GenericLines.\n# Removed because of too many conflicts!\n#match telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01$| p/Nokia M1112 router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfc\\\"\\r\\n\\r\\n\\n\\rauthentication failed!\\n\\rpassword: | p/Effekta MH 6000 UPS telnetd/ d/power-device/\nmatch telnet m|^\\xff\\xfc\\\"\\xff\\xfb\\x01\\r\\nPassword: \\r\\nbad password\\r\\n| p|Campbell Scientific NL-100/105 Ethernet-to-serial bridge telnetd| d/bridge/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\r\\nUsername: \\r\\nPassword: \\r\\nAccess Denied\\r\\n| p/InterSystems CTELNETD/\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfb\\x1f\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfe'\\xff\\xfc'\\xff\\xfc\\\"\\xff\\xfd\\x1f\\xff\\xfa\\x18\\x01\\xff\\xf0\\0\\r\\nWelcome to ([\\w._-]+), please identify yourself\\r\\n\\r\\nuser:\\r\\r\\npass:\\*ReactOS Operating System \\[Version ([\\w._-]+)\\]\\r\\n\\(C\\) Copyright [\\d-]+ ReactOS Team\\.\\r\\n\\r\\nC:\\\\ReactOS\\\\System32>| p/ReactOS telnetd/ v/$2/ i/no authentication/ h/$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nUser:\\r\\n\\r\\nUser:\\r\\n\\r\\nUser:| p/Dell PowerConnect M6220-series switch telnetd/ d/switch/ cpe:/h:dell:powerconnect_m6220/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\r\\nUsername:\\r\\r\\nError: Username must be non-NULL\\r\\r\\nUsername:\\r\\r\\nError: Username must be non-NULL\\r\\r\\nUsername:| p/Enterasys 1H582-25 switch telnetd/ d/switch/ cpe:/h:enterasys:1h582-25/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r \\r\\nlogin: \\r\\n| p/Embedded Data Systems HA7Net Ethernet adapter telnetd/ d/bridge/\nmatch telnet m|^RGC011001002\\r\\nAST000200000000000000001111110110000\\r\\nR\\r\\nR\\r\\nR\\r\\nR\\r\\n| p/Pioneer VSX-2020 video receiver telnetd/ d/media device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd!\\r\\n\\r\\n\\d+:\\d+:\\d+  \\d+ \\w+ \\d+\\r\\nEnter your user id: \\x07| p/TigerLogic D3 Database telnetd/\nmatch telnet m|^\\n\\rTA-004-PSTN-122M : CLI\\n\\rLogin : Login Incorrect\\n\\r\\n\\rLogin : Login Incorrect\\n\\r\\n\\rLogin : | p/Minitar MVA11A VoIP gateway telnetd/ d/VoIP adapter/ cpe:/h:minitar:mva11a/\nmatch telnet m|^NAK COMMAND\\r\\n| p/Pollin AVR-NET-IO Ethernet module telnetd/\nmatch telnet m|^\\xff\\xfd\\x03\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x17Please wait\\. The connection to your station is still in the process of being established\\. Your last input has been discarded\\.\\r\\nPlease wait\\. The connection to your station is still in the process of being established\\. Your last input has been discarded\\.\\r\\n| p/Burroughs MCP telnetd/ o/Burroughs MCP/ cpe:/o:burroughs:mcp/\n# KONICA MINOLTA 210 printer\nmatch telnet m|^\\n\\rUser Name : \\n\\rPassword :\\n\\r\\r\\n\\*\\*\\* Incorrect User Name or Password \\*\\*\\*\\r\\n\\n\\rUser Name : | p/Konica Minolta printer telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfd\\x03\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nWelcome to MonarchNet2\\r\\nEnter Password:| p/Avery Dennison MonarchNet2 printer management system/\nmatch telnet m|^Enter PIN>\\nBAD PIN\\n| p/Gigaset telnetd/ d/VoIP phone/\nmatch telnet m|^\\xff\\r\\nLogin: \\r\\nPassword: \\r\\n\\r\\nLogin incorrect\\.\\r\\nPlease input Login ID again\\.\\r\\n\\r\\nLogin: | p/Samsung CLP-315W telnetd/ d/printer/ cpe:/h:samsung:clp-315w/a\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x05\\xff\\xfd!\\xff\\xfb\\x01TELNET_SERVER V([\\d.]+) RTOS-UH \\(c\\)IEP,1995-\\d\\d\\d\\d ready\\r\\nUsername:| p/RTOS-UH telnetd/ v/$1/ o/RTOS-UH/ cpe:/o:universitathanover:rtos-uh/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03login as: \\r\\n\\r\\n's password: \\x1b\\[H\\x1b\\[J\\r\\nLogin failed, please check 'username', 'password' again\\. If Caps-Lock enabled\\?\\r\\n\\r\\nlogin as: | p/EnGenius telnetd/ d/WAP/\nmatch telnet m|^LOGIN: \\r\\nlogin incorrect\\r\\n\\r\\nLOGIN: \\r\\nlogin incorrect\\r\\n\\r\\nLOGIN: | p/Lutron HomeWorks telnetd/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfd\\x18\\r\\0\\r\\nPassword: \\x1b\\[2J\\x1b\\[1;1H\\x1b\\[0m\\x1b\\[7m {25}\\x1b\\[0m +DS ([\\w-]+) | p/Infortrend EonStor DS iSCSI host telnetd/ i/model: $1/ d/storage-misc/ cpe:/h:infortrend:esds_$1/\nmatch telnet m|^\\xff\\xfb\\0\\xff\\xfb\\x01\\xff\\xfe\\0\\xff\\xf9 \\x1b\\[1;36m Welcome to the \\x1b\\[1;31m LEDI NETWORK ITS 2\\x1b\\[1;36m Telnet Configuration Utility \\r\\n\\r\\nSerial Number:\\t\\t\\x1b\\[1;37m(\\d+)\\r\\n\\x1b\\[1;36mMAC address:\\t\\t\\x1b\\[1;37m([\\dA-F:]{17})\\r\\n\\xff\\xf9\\r\\nlogin: \\xff\\xf9\\xff\\xf9Password: \\xff\\xf9\\xff\\xf9\\r\\nLogin incorrect \\(hit <C/R> to continue\\)\\r\\n| p/LEDY Network ITS 2 telnet configuration utility/ i/serial: $1; MAC: $2/ d/specialized/ cpe:/h:gorgy-timing:ledi_network_its_2/\nmatch telnet m|^Password: $| p/SmartThings hub telnetd/ cpe:/h:smartthings:hub/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nPowerAlert TelNet Console: ([\\d.]+)\\r\\nSerial Number:\\t(\\w+)\\r\\n\\r\\n\\r \\r\\nlogin: \\r\\n| p/Tripp Lite PowerAlert telnetd/ v/$1/ i/sn: $2/ cpe:/a:tripp_lite:poweralert:$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\nLANIER Maintenance Shell\\.   \\n\\rUser access verification\\.\\n\\rPassword:| p/Lanier printer maintenance telnetd/ d/printer/\nmatch telnet m|^login: password: bad login\\r\\nlogin: \\0| p/Lutron RadioRA 2 home control system telnetd/\n\nmatch textui m|^dubbo>$| p/Alibaba Dubbo remoting telnetd/ cpe:/a:alibaba:dubbo/\nmatch textui m|^\\n\\rCMI Genus Setup\\n\\rProgram: *([\\d-]+)\\n\\rVersion Info: *([\\d.]+)\\n\\rMAC Address: *([A-F\\d:]{17})\\n\\r\\n\\rPress <ENTER> to go into setup mode\\.\\n\\r\\n\\rWelcome to Genus Setup\\n\\r\\n\\*{40}\\n\\rGENUS SETTINGS\\n\\rHost Name: *([\\w.-]+)\\n\\r| p/CMI Genus timekeeper $1 setup/ v/$2/ i/MAC: $3/ h/$4/\nmatch textui m|^too many clients, shut down int 15 seconds\\n| p/Vizio television textui/ d/media device/\n\nmatch tor-control m|^514 Authentication required\\.\\r\\n$| p/Tor control port/ i/Authentication required/ cpe:/a:torproject:tor/\nmatch univention-json m|^RESPONSE/None/53/application/json:  \\n\\{\"status\": 554, \"message\": \"Unparsable message body\"\\}| p/Univention Management Console/ o/Linux/ cpe:/a:univention:univention_corporate_server/ cpe:/o:linux:linux_kernel/a\n\n# Solaris 9\nmatch uucp m|^login: Please enter user name: Password: $| p/Solaris uucpd/ o/Solaris/ cpe:/o:sun:sunos/a\n# SunOS 4\nmatch uucp m|^login: Password: Login incorrect\\.$| p/SunOS uucpd/ o/SunOS/ cpe:/o:sun:sunos/a\nmatch uucp m|^login: login: login: $| p/NetBSD uucpd/ o/NetBSD/ cpe:/o:netbsd:netbsd/\nmatch uucp m|^login: uucpd: \\d+-\\d+ The user is not known\\.\\n| p/AIX uucpd/ o/AIX/ cpe:/o:ibm:aix/a\n\nmatch upnp m|^HTTP/0\\.0 400 Bad Request\\r\\nSERVER: Unspecified, UPnP/1\\.0, Unspecified\\r\\nCONTENT-LENGTH: 50\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n<html><body><h1>400 Bad Request</h1></body></html>| p/Belkin WeMo upnpd/ d/power-device/\nmatch upnp m|^ 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: Net-OS (\\d+)\\.xx UPnP/([\\d.]+)\\r\\n\\r\\n<HTML><HEAD><TITLE>501 Not Implemented</TITLE></HEAD><BODY><H1>Not Implemented</H1>The HTTP Method is not implemented by this server\\.</BODY></HTML>\\r\\n| p/Digi NET+OS UPnPd/ i/UPnP $2/ o/NET+OS $1/ cpe:/o:digi:net%2bos:$1/\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nDATE: .*\\r\\nConnection: Keep-Alive\\r\\nServer: Sky Router UPnP\\r\\nContent-Length: 0\\r\\nContent-Type: text/xml; charset=\"utf-8\"\\r\\nEXT:\\r\\n\\r\\n| p/Sky Home Hub SR102 upnpd/ d/broadband router/\n\nmatch ups m|^32\\r $| p/Cyber Power PowerPanelPlus UPS Server/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch whois m|^Process query: ''\\nQuery recognized as IP(?:v4)?\\.\\nQuerying ([\\w\\d_.-]+):(\\d+) with whois\\.\\n\\n| p/gwhois/ i/Uses $1:$2/\nmatch whois m|^Process query: ''\\nQuery recognized as IP\\.\\n| p/gwhois/\nmatch whois m|^%rwhois V-[\\w:.-]+ ([-\\w_.]+) \\(by Network Solutions, Inc\\. V-([\\d.]+)\\)\\n| p/rwhois/ v/$2/ h/$1/\nmatch whois m|^Query may not be an empty string\\n| p/Public Interest Registry whois server/\nmatch whois m|^WHOIS LIMIT EXCEEDED - SEE WWW\\.PIR\\.ORG/WHOIS FOR DETAILS\\n| p/Public Interest Registry whois server/\nmatch whois m=^ -{62}\\n \\| UNINET WHOIS Server {40}\\|\\n \\| Created by i-DNS\\.net\\t\\t\\t\\t\\t      \\|\\n.* INFO: This domain name has not been registered\\.\\n=s p/Uninet whois/\n\nmatch irr m|^%  No entries found for the selected source\\(s\\)\\.\\n$| p/Merit Internet Routing Registry whoisd/\n\nmatch wincomm m|^128 System Incompatible Windows Communicator client or server version\\r\\n128 System Incompatible Windows Communicator client or server version\\r\\n| p/Windows Communicator/\nmatch zebedee m|^\\x02\\x01$| p/Zebedee encrypted tunnel/\n\nmatch bmc-perform-service m|^SDPACK$| p/BMC Perform Service Daemon/\n# Grisoft AVG antivirus server (distributing virus database updates)\n\nmatch nntp m|^200 Coruscant BBS News \\(Synchronet NNTP Service v(\\d[-.\\w ]+)\\)\\r\\n| p/Synchronet NNTP Service/ v/$1/ cpe:/a:rob_swindell:synchronet:$1/\n\nmatch telnet m|^\\xff\\xfb\\x01\\n\\rSSH service name not present in rcvd msg\\n\\rSSH Session task 0x\\w+: Version Exchange Failed\\n\\r\\n\\r\\n\\rSSH service name not present in rcvd msg\\n\\r| p/Cisco Aironet 350-series WAP telnetd/ d/WAP/ cpe:/a:cisco:telnet/ cpe:/o:cisco:aironet_350/\nmatch telnet m|^\\xff\\xfe\\\"\\xff\\xfb\\x01\\xff\\xfb\\x03User : \\r\\n\\r?SpeedTouch \\(([-\\w]+)\\)\\r\\n\\r?Password : Invalid Password\\r\\n\\r?Closing connection\\r\\n| p/Alcatel SpeedTouch DSL router/ i/MAC $1/ d/router/\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\nAccount Name: \\r\\nPassword: \\r\\nThis copy of the Ataman Telnetd Server is registered as licensed to:\\r\\n\\t(.+)\\r\\n\\r\\nLogin failed: unknown user name, password or privilege incorrect\\.\\r\\n| p/Ataman telnetd/ i/Registerd to $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^Password:\\xff\\xfb\\x01\\n\\rTry again, you polio:\\n\\n\\rTry again, you polio:\\n| p/VLC Player telnetd/ cpe:/a:videolan:vlc_media_player/\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n\\r\\n +-+\\r\\n +\\| Cyclades-PR4000: CyROS  V_([\\d.]+)  \\(.*\\)     \\|\\r\\n= p/Cyclades PR4000 router telnetd/ v/$1/ d/router/\n# Billion 741GE or D-Link DSL2-300G\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nLogin: \\r\\n\\r\\nYou must supply a username\\r\\n\\r\\nLogin: \\r\\n\\r\\nYou must supply a username\\r\\n\\r\\nLogin: | p/Billion or D-Link ADSL router telnetd/ d/router/\n# Not sure if this is really a telnet service but many people reported it running on port23:\nmatch telnet m|^\\xff\\xfb\\x01$| p/SMC SMC2870W Wireless Ethernet Bridge/ d/bridge/\nmatch telnet m|^\\r\\n\\r\\nThis is a FirstClass system, from Open Text Corporation\\.\\r\\n\\r\\n\\r\\nFirstClass is an e-mail and conferencing system with a graphical user interface\\.\\r\\n\\r\\n\\r\\nThe Command Line Interface is not available on this sy| p/FirstClass telnetd/ i/CLI disabled/ cpe:/a:opentext:firstclass/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nPassword:\\r\\nLogged in as guest\\r\\n| p/Linkstar Comsat router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01Login: \\r\\nLogin: \\r\\nLogin: | p/Lingo VoIP config telnetd/ d/VoIP adapter/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\nuser: \\r\\npassword: \\r\\n\\r\\nuser: | p/KIRK Wireless Server 600 telnetd/ d/VoIP adapter/\nmatch telnet m|^\\xff\\xfb\\x01\\n\\r-> \\n\\r-> \\n\\r-> | p/Coresma Phazer Docsis USB cable modem telnetd/ d/broadband router/\nmatch telnet m|^bad password\\r\\n$| p/Cybersitter CLI/\nmatch telnet m|^\\xff\\xfd\\\"\\xff\\xfb\\x01SSE version ([\\d.]+)\\r\\nCopyright [\\d, ]+ by Motorola\\r\\nUsername:| p/Motorola Canopy WAP telnetd/ i/SSE $1/ d/telecom-misc/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\n\\[ORiNOCO-AP-[-\\w]+\\]> Please enter password: \\r\\nIncorrect Password\\r\\n\\r\\n\\[ORiNOCO-AP-[-\\w]+\\]> Please enter password: \\r\\n| p/ORiNOCO wireless router telnetd/ d/router/\nmatch telnet m|^\\xff\\xfb\\x01Password\\? \\r\\n500 Configuration error\\. Disconnecting!\\n| p/Tru64 UNIX gated/ o/Tru64 UNIX/ cpe:/o:compaq:tru64/a\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n\\r\\nlogin: \\r\\n\\r\\n\\r\\r\\npassword: $| p/Welltech Wellgate VoIP adapter telnetd/ d/VoIP adapter/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x1f\\xff\\xfd\\x18Avocent CPS-810 S/W Version ([\\d.]+)\\r\\nUsername: \\r\\nPassword: \\r\\nInvalid Login\\r\\nUsername: | p/Avocent CPS-810 serial port server telnetd/ v/$1/ d/specialized/ cpe:/h:avocent:cps-810/\n\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\nGestetner Maintenance Shell\\.   \\n\\rUser access verification\\.\\n\\rPassword:| p/Gestetner DSm622 maintenance telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\nNRG Maintenance Shell\\.   \\n\\rUser access verification\\.\\n\\rPassword:| p/NRG maintenance telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\nNRG Maintenance Shell\\.   \\n\\rUser access verification\\.\\n\\rlogin:| p/NRG maintenance telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\nRICOH Maintenance Shell\\.   \\n\\rUser access verification\\.\\n\\r| p/Ricoh maintenance telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\nRICOH Maintenance Shell\\.   ([\\w:]+)\\n\\rUser access verification\\.\\n\\rPassword:| p/Ricoh maintenance telnetd/ i/MAC $1/ d/print server/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\nSAVIN Maintenance Shell\\.   \\n\\rUser access verification\\.\\n\\r| p/SAVIN printer telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\nTOSHIBA Maintenance Shell\\.   \\n\\rUser access verification\\.\\n\\rlogin:| p/Toshiba print server telnetd/ d/print server/\n\nmatch telnet m|^\\r\\nPress return:\\*\\*\\*\\*\\r\\nEnter Password:| p/IPSentry telnetd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x03\\r\\0\\n\\r\\0\\n\\r\\0\\n\\r\\0\\n- NetQue AppleTalk/NetWare/TCP/LAT Printer Server| p/EMULEX NetQue print server telnetd/ d/print server/\nmatch telnet m|^\\r\\n\\r\\nUser Access Verification\\r\\n\\r\\nPassword: \\r\\nPassword: \\r\\nPassword: \\r\\n% Bad passwords\\r\\n| p/Cisco telnetd/ d/router/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\r\\n\\r\\nlogin: | p/freeSSHd telnetd/ o/Windows/ cpe:/a:freesshd:freesshd/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfb\\x01\\x1b\\[7l\\x1b\\[\\?1l\\x1b\\[0m\\x1b\\[2JUsername: \\x1b\\[7l\\x1b| p/CyberSwitching Dualcom power device rabbit 2000 embedded telnetd/ d/power-device/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nRead /disclaimer\\.txt and have fun with yadi on your Nokia D-BOX2 - Kernel ([-\\w_.]+) \\(| p/Nokia D-BOX2 telnetd/ i/Linux $1/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$1/a\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nPhilips D-BOX2 - Kernel ([\\w._-]+) \\(| p/Philips D-BOX2 telnetd/ i/Linux $1/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\n\\rLogin: \\n\\r\\n\\r\\n\\rLogin: \\n\\rLogin: | p/Nortel Extranet Contivity Secure IP Services telnetd/ d/security-misc/ cpe:/h:nortel:contivity/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\n\\r\\n\\rlogin: \\r\\n\\r\\nLogin incorrect\\r\\n\\r\\nlogin: | p/Cisco Intrusion Prevention System telnetd/ d/security-misc/ o/IOS/ cpe:/a:cisco:telnet/ cpe:/o:cisco:ios/a\nmatch telnet m|^ 105 Access denied\\.\\r\\n 105 Access denied\\.\\r\\n 105 Access denied\\.\\r\\n 105 Access denied\\.\\r\\n| p/ShroudBNC telnet config/\nmatch telnet m|^User Name: \\r\\r\\nPassword: \\r\\r\\nRemote MAC address: | p/Airaya WAP diagnostics telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nAP11G login: \\r\\n\\r\\nPassword: | p/OfficeConnect AP11G WAP telnetd/ d/WAP/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03Welcome to the Windows CE Telnet service on ([-\\w_.]+)\\r\\n\\r\\nlogin: \\n\\r\\nPassword:| p/Windows CE telnetd/ o/Windows CE/ h/$1/ cpe:/o:microsoft:windows_ce/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x03\\xff\\xfb\\x03\\x1b\\[2J\\x1b\\[H \\n\\r\\0\\x1b\\[H\\x1b\\[JPASSaPORT CS-(\\d+)  SW V([-\\w_.]+) , HW V([-\\w_.]+)\\r\\n\\r\\n| p/RADLINX PASSaPORT CS terminal server telnetd/ i/$1 ports; SW $2; HW $3/ d/terminal server/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nlogin: \\r\\npassword: \\r\\nLogin incorrect!\\r\\n$| p/Netgear GS108T switch telnetd/ d/switch/ cpe:/h:netgear:gs108t/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\x1fError2 negotiated with client \\d+ and get 1 char is a a d\\. \\n\\r\\n\\r\\*+\\n\\r\\*\\* +\\*\\*\\n\\r\\*\\* IP Phone firmware +V([\\w._-]+) | p/Thomson VoIP phone telnetd/ v/$1/ d/VoIP phone/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nLogin: \\r\\r\\nPassword: \\r\\r\\n\\r\\r\\nLogin failed\\r\\r\\n\\r\\r\\nLogin: | p/Siemens SANTIS WAP telnetd/ d/WAP/\nmatch telnet m|^Password: \\xff\\xfb\\x01\\r\\nWrong password\\.\\r\\nPassword: \\r\\nWrong password\\.\\r\\nPassword: | p/VLC media player telnetd/ cpe:/a:videolan:vlc_media_player/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfd\\x01\\xff\\xfe\\x01\\xff\\xfd WxGoos-(\\d+) v([\\w._-]+) | p/WxGoos-$1 Climate Monitor telnetd/ v/$2/ d/specialized/\nmatch telnet m|^\\xff\\xfd\\0\\xff\\xfd\\x03\\xff\\xfb\\0\\xff\\xfb\\x03\\xff\\xfb\\x01\\x03\\x04\\r\\nPassword: \\r\\n\\n\\rComtrol DeviceMaster RTS   ModelID: (\\d+) \\n\\r\\rNS-Link ([\\w._-]+) \\n\\rBuilt: .*\\n\\rIP Addr: [\\d.]+  Mask: [\\d.]+ Gateway: [\\d.]+ \\n\\rMAC Addr: ([\\w ]+) \\n\\r\\n\\r\\r\\n\\rdm> \\r\\nInvalid Command\\r\\n\\rdm>| p/Comtrol DeviceMaster RTS ethernet to serial telnetd/ i/Model $1; NS-Link $2; MAC $3/ d/specialized/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\xff\\xfd\\x18\\r\\0\\r\\nPassword: \\r\\nPassword incorrect\\r\\n| p/Sun StorEdge 3511 telnetd/ d/storage-misc/\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd!\\xff\\xfb\\x01\\xff\\xfb\\x03AH4222\\r\\nLogin: \\r\\n\\r\\nPassword: | p/Club-Internet telnetd/ d/broadband router/\nmatch telnet m|^\\xff\\xfe\\x01\\xff\\xfb\\x01\\xff\\xfc\\\"\\xff\\xfd\\x1flogin: \\r\\nlogin: \\r\\nlogin: | p/GigaVUE-420 switch telnetd/ d/switch/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfe\\x01-> \\n\\r-> \\n\\r-> | p/ser2net telnetd/\nmatch telnet m|^\\x1b\\[24;1HUsername: \\x1b\\[\\?25h\\x1b\\[24;1H\\x1b\\[\\?25h\\x1b\\[24;11H\\x1b\\[24;11H\\x1b\\[\\?25h\\x1b\\[24;11H\\x1b\\[24;1H\\r\\n\\r\\x1b\\[\\?25h\\x1b\\[24;11H\\xff\\xfd\\x18\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[\\?7l\\x1b\\[3;23r\\x1b\\[\\?6l\\x1b\\[1;1H\\x1b\\[\\?25l\\x1b\\[1;1HProCurve (\\w+) Switch (\\w+)\\r\\n\\rSoftware revision ([\\w.]+)\\r\\n| p/HP ProCurve Switch $2 telnetd/ v/$3/ i/JetDirect $1/ d/switch/ cpe:/h:hp:procurve_switch_$2/ cpe:/o:hp:procurve_switch_software:$3/\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfb\\x01\\x1b\\[2J\\x1b\\[\\?7l\\x1b\\[4;23r\\x1b\\[\\?6l\\x1b\\[1;1H\\x1b\\[\\?25l\\x1b\\[1;1HCopyright \\(C\\) 1991-\\d\\d\\d\\d Hewlett-Packard Co\\..*\\x1b\\[1;1HHP ProCurve Switch ([\\w-]+)\\x1b|s p/HP ProCurve Switch $1 telnetd/ d/switch/ cpe:/h:hp:procurve_switch_$1/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nConfiguration Login: \\r\\n\\r\\n\\r\\nConfiguration Login: \\r\\nConfiguration Login: $| p/HP E1200 storage telnetd/ d/storage-misc/\nmatch telnet m|^\\r\\nEnter Password: \\r\\nInvalid Password\\.\\r\\nEnter Password: \\r\\nInvalid Password\\.\\r\\nEnter Password: | p/WPI Network Power Switch (remote reboot) telnetd/ d/remote management/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nWelcome to IFBD-HE05/06 TELNET Utility\\.\\r\\nCopyright\\(C\\) 2005 Star Micronics co\\., Ltd\\.\\r\\n\\r\\n<< Connected Device >>\\r\\n    Device Model: (\\w+) \\(STR_T-001\\)\\r\\n    NIC Product : IFBD-HE05/06\\r\\n    MAC Address : ([0-9A-F:]+)\\r\\n\\r\\n\\r \\r\\nlogin: \\r\\n| p/Star Micronics $1 printer telnetd/ i/MAC address: $2/ d/printer/ cpe:/h:starmicronics:$1/a\nmatch telnet m|^\\xff\\xfb\\x01Username: \\n\\rPassword: \\n\\rUsername: | p/3Com 8760 WAP telnetd/ d/WAP/ cpe:/h:3com:8760/a\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\nLANIER Maintenance Shell\\.   \\n\\rUser access verification\\.\\n\\rlogin:| p/Ricoh Aficio printer telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nUser Name : \\r\\nUser Name : \\r\\nUser Name : | p/APC AP9630 network management telnetd/ d/power-device/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\n\\r\\nWelcome to VIP-X ([\\w._-]+) from [\\w._-]+\\r\\nTLS invalid record length\\r\\n\\r\\n\\r\\n\\r\\ninvalid username\\r\\n\\r\\nTLS version 0300 not supported\\r\\nenter username  -> | p/Bosch VIP X1 video encoder telnetd/ d/webcam/ h/$1/\nmatch telnet m|^\\r\\nUser ID:Password:\\r\\nUser ID:| p/NEC SL-series debug terminal/ d/VoIP phone/\nmatch telnet m|^Commands: \\n\\t\\[\\x1b\\[1;32m:d\\x1b\\[0m\\]isable \\[ category \\x7c module \\x7c all \\]\\n\\t\\[\\x1b\\[1;32m:e\\x1b\\[0m\\]nable \\[ category \\x7c module \\x7c all \\]\\n\\t\\[\\x1b\\[1;32m:s\\x1b\\[0m\\]tatus\\n\\t\\[\\x1b\\[1;32m:h\\x1b\\[0m\\]elp\\n\\t\\[\\x1b\\[1;32m:q\\x1b\\[0m\\]uit\\n\\x1b\\[1;31m\\[E\\]\\[EncoderSrv\\] /home/leonwang/platform/([\\w._-]+)/Application_IPCAM/| p/Climax IP camera text UI/ i/model: $1/ cpe:/h:climax_technology:$1/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01Connected to EPSON Network Image Express !!!\\r\\n\\r\\nPassword: \\r\\n\\r\\nLogin successful \\r\\n| p/Epson Network Image Express telnetd/ i/no password/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x01Connected to EPSON Network Image Express !!!\\r\\n\\r\\nPassword: \\r\\n| p/Epson Network Image Express telnetd/\n\nmatch transbase m|^\\0\\0\\+\\x04\\0\\0\\0@TransBase Multiplexer error report:\\nIllegal request| p/Transbase Database/\n\nmatch tsd m|^unknown command: \\.  Try ${backquote}help'\\.\\nunknown command: \\.  Try ${backquote}help'\\.\\n| p/OpenTSDB TSD/ i/also http/ cpe:/a:opentsdb:opentsdb/\n\nmatch tsdns m|^[\\d.]+:\\$PORT$| p/TeamSpeak domain name server/\n\n# MiniUPnP\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Tomato UPnP/([\\w.]+) MiniUPnPd/([\\w.]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/Tomato firmware; UPnP $1/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$2/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: UPnP/Tomato ([\\d.-]+) ([-\\w_ ]+) UPnP/([\\d.]+) MiniUPnPd/([\\d.]+)\\r\\n|s p/MiniUPnP/ v/$4/ i/Tomato $1 $2 firmware; UPnP $3/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$4/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: (RT-\\w+) UPnP/([\\w.]+) MiniUPnPd/([\\w.]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/Asus $1 WAP; UPnP $2/ d/WAP/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/h:asus:$1/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AsusWRT/([\\d.]+) UPnP/([\\w.]+) MiniUPnPd/([\\w.]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/AsusWRT $1; UPnP $2/ d/WAP/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:asus:asuswrt:$1/\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: DrayTek/Vigor([\\w._-]+) UPnP/([\\w.]+) miniupnpd/([\\w.]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/DrayTek Vigor $1 router; UPnP $2/ d/broadband router/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/h:draytek:vigor_$1/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Green Packet WiMax/([\\w._-]+) UPnP/([\\w.]+) miniupnpd/([\\w.]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/Green Packet WiMax $1 router; UPnP $2/ d/broadband router/ cpe:/a:miniupnp_project:miniupnpd:$3/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ZTE/1.0 UPnP/([\\w.]+) miniupnpd/([\\w.]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/ZTE broadband router; UPnP $1/ d/broadband router/ cpe:/a:miniupnp_project:miniupnpd:$2/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: OpenWRT/kamikaze UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/OpenWrt Kamikaze; UPnP $1/ d/WAP/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$2/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: OpenWRT/OpenWRT/Backfire__(r\\d+)_ UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/OpenWrt Backfire $1; UPnP $2/ d/WAP/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: OpenWRT/OpenWRT/Backfire__unknown_ UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/OpenWrt Backfire; UPnP $1/ d/WAP/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$2/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: OpenWRT/OpenW[Rr][Tt]/Attitude_Adjustment__(r\\d+)_ UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/OpenWrt Attitude Adjustment $1; UPnP $2/ d/WAP/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: OpenWRT/OpenWrt/Barrier_Breaker__(r\\d+)_ UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/OpenWrt Barrier Breaker $1; UPnP $2/ d/WAP/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: OpenWRT/OpenWrt/Chaos_Calmer__(r\\d+)_ UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/OpenWrt Chaos Calmer $1; UPnP $2/ d/WAP/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:linux:linux_kernel/a\n# Lots of devices, all sorts\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: FedoraCore/(\\d+) UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/Fedora Core $1; UPnP $2/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:fedoraproject:fedora_core:$1/\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Netgear/[\\w._-]+ UPnP/([\\w._-]+) miniupnpd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/Netgear DG834G or WNDR3300 WAP; UPnP $1/ d/WAP/ cpe:/a:miniupnp_project:miniupnpd:$2/a cpe:/h:netgear:dg834g/ cpe:/h:netgear:wndr3300/\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Arris/[\\w._-]+ UPnP/([\\w._-]+) miniupnpd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/Arris TG862G WAP; UPnP $1/ d/WAP/ cpe:/a:miniupnp_project:miniupnpd:$2/a cpe:/h:arris:tg862g/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: neufbox/neufbox UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n\\r\\n|s p/MiniUPnP/ v/$2/ i/Neufbox; UPnP $1/ d/broadband router/ cpe:/a:miniupnp_project:miniupnpd:$2/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ASUSTeK UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n\\r\\n|s p/MiniUPnP/ v/$2/ i/Asus; UPnP $1/ d/broadband router/ cpe:/a:miniupnp_project:miniupnpd:$2/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Debian/([\\w.]+) UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/Debian $1; UPnP $2/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:debian:debian_linux:$1/\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Debian/([\\w.]+) UPnP/([\\w._-]+) miniupnpd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/Debian $1; UPnP $2/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:debian:debian_linux:$1/\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Tenda UPnP/([\\w._-]+) miniupnpd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/Tenda broadband router; UPnP $1/ d/broadband router/ cpe:/a:miniupnp_project:miniupnpd:$2/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Ubuntu/([\\w._-]+) UPnP/([\\w._-]+) miniupnpd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/Ubuntu $1; UPnP $2/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:canonical:ubuntu_linux:$1/ cpe:/o:linux:linux_kernel/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Compal Broadband Networks, Inc/Linux/(\\d[\\w._-]+) UPnP/([\\d.]+) MiniUPnPd/([\\d.]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/Compal Broadband Networks; UPnP $2/ o/Linux $1/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:linux:linux_kernel:$1/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Linux/(([234]\\.[\\d.]+)[\\w._-]+) UPnP/([\\w._-]+) [Mm]ini[Uu][Pp]n[Pp]d/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$4/ i/Linux $1; UPnP $3/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$4/a cpe:/o:linux:linux_kernel:$2/\nmatch upnp m|^ 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nServer: Linux/BHR4 UPnP/([\\d.]+) MiniUPnPd/([\\d.]+)\\r\\n| p/MiniUPnP/ v/$2/ i/Verizon FiOS BHR4 router; UPnP $1/ d/broadband router/ cpe:/a:miniupnp_project:miniupnpd:$2/a cpe:/h:verizon:bhr4/\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: SmoothWall Express/([\\d.]+) UPnP/([\\d.]+) MiniUPnPd/([\\d.]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/SmoothWall Express $1; UPnP $2/ d/firewall/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:smoothwall:smoothwall:$1/\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: MF60/([\\d.]+) UPnP/([\\d.]+) miniupnpd/([\\d.]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/ZTE MF60 $1; UPnP $2/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/h:zte:mf60/\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/UPnP $1/ cpe:/a:miniupnp_project:miniupnpd:$2/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: UPnP/([\\w._-]+) MiniUPnPd\\r\\n|s p/MiniUPnP/ i/UPnP $1/ cpe:/a:miniupnp_project:miniupnpd/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: miniupnpd/([\\w._-]+) UPnP/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/UPnP $1/ cpe:/a:miniupnp_project:miniupnpd:$2/a\n\n# MiniDLNA\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\n\\r\\n<HTML><HEAD><TITLE>501 Not Implemented</TITLE></HEAD><BODY><H1>Not Implemented</H1>The HTTP Method is not implemented by this server\\.</BODY></HTML>\\r\\n| p/MiniDLNA/ cpe:/a:minidlna:minidlna/a\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: Debian/([\\w._/-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/Debian $1; DLNADOC $2; UPnP $3/ o/Linux/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:debian:debian_linux:$1/ cpe:/o:linux:linux_kernel/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: RedHatEnterpriseServer/([\\w._/-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/RHEL $1; DLNADOC $2; UPnP $3/ o/Linux/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:linux:linux_kernel/ cpe:/o:redhat:enterprise_linux:$1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: Fedora/([\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/Fedora $1; DLNADOC $2; UPnP $3/ o/Linux/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:fedoraproject:fedora:$1/ cpe:/o:linux:linux_kernel/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: RAIDiator/([\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/RAIDiator $1; DLNADOC $2; UPnP $3/ o/Linux/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:linux:linux_kernel/a cpe:/o:netgear:raidiator:$1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: Ubuntu/([\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/Ubuntu $1; DLNADOC $2; UPnP $3/ o/Linux/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:canonical:ubuntu_linux:$1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: Gentoo/([\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/Gentoo $1; DLNADOC $2; UPnP $3/ o/Linux/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:gentoo:linux:$1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: SUSE LINUX/n/a DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$3/ i/SUSE Linux; DLNADOC $1; UPnP $2/ o/Linux/ cpe:/a:minidlna:minidlna:$3/a cpe:/o:suse:suse_linux/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: Linux/([\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/DLNADOC $2; UPnP $3/ o/Linux $1/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: (?:Linux )?(([234]\\.[\\d.]+)[\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$5/ i/Linux $1; DLNADOC $3; UPnP $4/ o/Linux/ cpe:/a:minidlna:minidlna:$5/a cpe:/o:linux:linux_kernel:$2/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: OpenWrt Linux/([\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/OpenWrt; DLNADOC $2; UPnP $3/ o/Linux $1/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: FreeBSD/([\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/DLNADOC $2; UPnP $3/ o/FreeBSD $1/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:freebsd:freebsd:$1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer:  ?DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$3/ i/DLNADOC $1; UPnP $2/ cpe:/a:minidlna:minidlna:$3/a\n# Catch-all for weird cases reporting OS incorrectly.\n# Avoid any that match OS/version so we can add those as they are submitted\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: ([^/ ]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/OS: $1; DLNADOC $2; UPnP $3/ cpe:/a:minidlna:minidlna:$4/a\n\n# ReadyDLNA (formerly miniDLNA)\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: RAIDiator/([\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) ReadyDLNA/([\\w._-]+)\\r\\n| p/ReadyDLNA/ v/$4/ i/RAIDiator $1; DLNADOC $2; UPnP $3/ o/Linux/ cpe:/o:linux:linux_kernel/a cpe:/o:netgear:raidiator:$1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: Linux[ /]([\\d.]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) ReadyDLNA/([\\w._-]+)\\r\\n| p/ReadyDLNA/ v/$4/ i/DLNADOC $2; UPnP $3/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: ([\\d._-]+)ReadyNAS DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) ReadyDLNA/([\\w._-]+)\\r\\n| p/ReadyDLNA/ v/$4/ i/ReadyNAS; DLNADOC $2; UPnP $3/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: (?:Linux )?(([234]\\.[\\d.]+)[\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) ReadyDLNA/([\\w._-]+)\\r\\n| p/ReadyDLNA/ v/$5/ i/Linux $1; DLNADOC $3; UPnP $4/ o/Linux/ cpe:/o:linux:linux_kernel:$2/\n# Catch-all for weird cases reporting OS incorrectly.\n# Avoid any that match OS/version so we can add those as they are submitted\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: ([^/ ]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) ReadyDLNA/([\\w._-]+)\\r\\n| p/ReadyDLNA/ v/$4/ i/OS: $1; DLNADOC $2; UPnP $3/\n\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nConnection: close\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>501 Not Implemented</TITLE></HEAD><BODY><H1>Not Implemented</H1>The HTTP Method is not implemented by this server\\.</BODY></HTML>\\r\\n$| p/MiniUPnP/ cpe:/a:miniupnp_project:miniupnpd/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Linux Mips ([\\w._-]+) UPnP/([\\w.]+) MiniUPnPd/([\\w.]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/Linux $1 (MIPS); UPnP $2/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:linux:linux_kernel:$1/a\nmatch upnp m|^ 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: SmoothWall Express/([\\w._-]+) UPnP/([\\w.]+) miniupnpd/([\\w.]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/SmoothWall Express $1; UPnP $2/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^ 501 Not Implemented\\r.*\\nServer: SDK ([\\d.]+) UPnP/([\\d.]+) MiniUPnPd/([\\d.]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/Netgear SDK $1; UPnP $2/ cpe:/a:miniupnp_project:miniupnpd:$3/a\nmatch upnp m|^ 501 Not Implemented\\r.*\\nServer: SDK ([\\d.]+) UPnP/([\\d.]+) MiniUPnPd/([\\d.]+)_MTK_v([\\d_]+)\\r\\n\\r\\n|s p/MiniUPnP/ v/$3/ i|Linksys/Belkin WiFi range extender; SDK $1; UPnP $2; MTK $SUBST(4,\"_\",\".\")| cpe:/a:miniupnp_project:miniupnpd:$3/a\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nDATE: .*\\r\\nConnection: Keep-Alive\\r\\nServer: UPnP/([\\d.]+)\\r\\nContent-Length: 0\\r\\nContent-Type: text/xml; charset=\\\"utf-8\\\"\\r\\nEXT:\\r\\n\\r\\n$| p/UPnP/ v/$1/ d/broadband router/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: *Linux/([-\\w_.]+), UPnP/([-\\w_.]+), TwonkyVision UPnP SDK/([-\\w_.]+)\\r\\n|s p/TwonkyMedia UPnP/ i/Linux $1; UPnP $2; SDK $3/ o/Linux/ cpe:/a:packetvideo:twonky/ cpe:/o:linux:linux_kernel:$1/a\nmatch upnp m|^HTTP/1\\.1 400 Bad request\\r\\nServer: Reciva UPnP/([\\w._-]+) Radio/([\\w._-]+) DLNADOC/([\\w._-]+)\\r\\nContent-length: 0\\r\\nConnection: close\\r\\n\\r\\n$| p/dnt IPdio radio UPnP/ v/$2/ i/UPnP $1; DLNADOC $3/ d/media device/\nmatch upnp m|^HTTP/0\\.0 400 Bad Request\\r\\nServer: ([\\w._-]+) \\d+/Service Pack (\\d+), UPnP/([\\d.]+), TVersity Media Server\\r\\n| p/TVersity Media Server UPnP/ v/$1 SP $2/ i/UPnP $3/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch upnp m|^HTTP/0\\.0 400 Bad Request\\r\\nServer: Windows/([\\w._-]+\\.2600)/Service Pack (\\d+), UPnP/([\\d.]+), TVersity Media Server/([\\w._-]+)\\r\\n| p/TVersity Media Server UPnP/ v/$4/ i/UPnP $3; Windows build $1/ o/Windows XP/ cpe:/o:microsoft:windows_xp::sp$2/\nmatch upnp m|^HTTP/0\\.0 400 Bad Request\\r\\nServer: Windows/([\\w._-]+)\\.6001/Service Pack (\\d+), UPnP/([\\d.]+), TVersity Media Server/([\\w._-]+)\\r\\n| p/TVersity Media Server UPnP/ v/$4/ i/UPnP $3; Windows build $1/ o/Windows Vista/ cpe:/o:microsoft:windows_vista::sp$2/\nmatch upnp m|^HTTP/0\\.0 400 Bad Request\\r\\nServer: ([\\w._-]+) 2/, UPnP/([\\w._-]+), TVersity Media Server\\r\\n|s p/TVersity Media Server UPnP/ v/$1/ i/UPnP $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDATE: .*\\r\\nConnection: Keep-Alive\\r\\nServer: LINUX/([\\w._-]+) UPnP/([\\d.]+) BRCM400/([\\d.]+)\\r\\n| p|Belkin/Linksys wireless router UPnP| i/UPnP $2; BRCM400 $3/ d/router/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDATE: .*\\r\\nConnection: Keep-Alive\\r\\nServer: LINUX/([\\w._-]+) UPnP/([\\d.]+) ZyXEL-UPnP/([\\w._-]+)\\r\\n| p/ZyXEL wireless router UPnP/ i/UPnP $2; ZyXEL-UPnP $3/ d/router/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: Symbian/([\\w._-]+) UPnP/([\\d.]+)\\r\\nContent-Length: 151\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<html><head>\\n<title>400 Bad Request</title>\\n</head><body>\\n<h1>Bad Request</h1>\\n<hr />\\n</body></html>$| p/Nokia N85 media share/ i/SymbianOS $1; UPnP $2/ d/phone/ o/Symbian/ cpe:/o:symbian:symbian/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: XboxUpnp/([\\w._-]+) UPnP/([\\w._-]+) Xbox/2\\.0\\.(\\d+)\\.0\\r\\n|s p/Microsoft Xbox 360 upnpd/ v/$1/ i/UPnP $2; Xbox Dashboard 2.0.$3.0/ o/Xbox 360/ cpe:/h:microsoft:xbox_360_kernel:$3/\nmatch upnp m|^HTTP/0\\.0 400 Bad Request\\r\\nSERVER: Linux/([\\w._-]+) UPnP/([\\w._-]+) SKY DLNADOC/([\\w._-]+)\\r\\n\\r\\n| p/BSkyB router upnpd/ i/UPnP $2; DLNADOC $3/ d/broadband router/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\n# ISP-branded, could be Actiontec, ZyXEL, Westell, Motorola, Netopia, 2Wire, Cisco, Thompson.\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nDATE: .*\\r\\nServer: LINUX/([\\w._-]+) UPnP/([\\d.]+) CenturyLink-TR064/([\\d.]+)\\r\\nContent-Length: 0\\r\\nContent-Type: text/xml; charset=\\\"utf-8\\\"\\r\\nEXT:\\r\\n\\r\\n| p/CenturyLink DSL modem upnpd/ v/$3/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/a\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nDATE: .*\\r\\nConnection: Keep-Alive\\r\\nServer: LINUX/([\\w._-]+) UPnP/([\\d.]+) CenturyLink-UPnP/([\\d.]+)\\r\\nContent-Length: 0\\r\\nContent-Type: text/xml; charset=\\\"utf-8\\\"\\r\\nEXT:\\r\\n\\r\\n| p/CenturyLink DSL modem upnpd/ v/$3/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/a\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nCONTENT-TYPE: text/xml; charset=\"utf-8\"\\r\\nDATE: .*\\r\\nEXT: \\r\\nSERVER: UPnP/([\\d.]+) AwoX/([\\d.]+)\\r\\nCONTENT-LENGTH: 0\\r\\n| p/AwoX upnpd/ v/$2/ i/UPnP $1/\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ([34][\\d.]+)(?:-generic)? Microsoft-Windows/[\\d.]+ Windows-Media-Player-DMS/[\\d.]+ DLNADOC/([\\d.]+) UPnP/([\\d.]+) QNAPDLNA/([\\d.]+)\\r\\n|s p/QNAP DLNA/ v/$4/ i/DLNADOC $2; UPnP $3/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/a\n\n# maybe shouldn't be softmatch, but we get such good info from the bit in the Server header\nsoftmatch upnp m|^ 501 Not Implemented\\r.*\\nServer: [^\\r\\n]*UPnP/([\\d.]+) MiniUPnPd/([\\d.]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/UPnP $1/ cpe:/a:miniupnp_project:miniupnpd:$2/a\n\nmatch uptime-agent m|^ERR\\n$| p/up.time server monitor/\n# Version 5.3.0 - Is this a memory address?\nmatch uptime-agent m|^ERR - Command '\\xe0\\xb6VU\\xd8\\xbaVU' not found\\n| p/up.time server monitor/\n\nmatch unreal-media m|^\\xb1\\x36\\x00\\x00\\x19\\x00\\x00\\x00\\x30\\x05\\xff\\x8f\\x00\\x00\\x00\\x00\\x88\\xff.\\x03.\\xef.\\x00$|s p/Unreal Media Server/ o/Windows/ cpe:/o:microsoft:windows/\n\nmatch signiant m|^dds_pc: _ms=([\\w._-]+)\\xfe_si=Process controller\\xfe_mid=9010\\xfe_sev=0\\xfe_dt=\\d+/\\d+/\\d+\\xfe_tm=\\d+:\\d+:\\d+\\xfe_pkg=\\xfe\\n\\n| p/Signiant Media Exchange/ h/$1/\n\nmatch spy-net m=^tentarnovamente\\|\\r\\ntentarnovamente\\|\\r\\n= p/Spy-Net or CyberGate backdoor/ i/**BACKDOOR**/\n\n# Vizio Smart TV model M501D-A2R on 8099/tcp w/ssl tunnel\nmatch vizio-tv m|^ERROR\\x7c101\\x7cUnknown Message Type\\x7cEND| p/Vizio Smart TV unknown service/ d/media device/\n\nmatch vnc m|^0\\x82\\x01\\n\\x02\\x82\\x01\\x01\\0| p/Ultr@VNC/ v/1.0.8.0/ o/Windows/ cpe:/a:ultravnc:ultravnc:1.0.8.0/ cpe:/o:microsoft:windows/a\n\nmatch bitkeeper m|^ERROR-Try help\\nERROR-Try help\\n$| p/Bitkeeper/\nmatch webcache m|^HTTP/1\\.0 400 Bad Request\\r\\nExpires: .*\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head><title>Bad formed request or url</title>\\n| p/webcache/\n# Novell ZENworks for Desktops Imaging Proxy 4.01.03\n# Not sure if this is netware specific (linux too?) -Doug\nmatch zenimaging m|^\\xff\\xff\\xfb&$| p/Novell ZENworks Imaging Proxy/ cpe:/a:novell:zenworks_desktops/\n\nmatch ajp12 m|^Status: 400 Bad Request\\r\\nServlet-Error: Malformed data sent to JServ\\r\\n\\r\\n$| p/Apache Jserv/\n\nmatch nuttcp m|^KO\\nnuttcp-t: v([\\d.]+): error scanning parameters\\nmay be using older client version than server\\n\\r\\nKO\\n| p/nuttcp network throughput tester/ v/$1/\nmatch backdoor m|^sh-2\\.05b\\$ | p/r0nin rootkit backdoor/\n\nmatch upsd m|^ERR UNKNOWN-COMMAND\\nERR UNKNOWN-COMMAND\\n$| p/Network UPS Tools upsd/ v/2.6.1/ i/Synology DS209 NAS device/ d/storage-misc/ cpe:/h:synology:ds209/\n\nmatch websense-eim m|^\\0\\x0c\\r\\n\\0\\x01\\0\\x01\\0\\0\\0\\0$| p/Websense EIM/ cpe:/a:websense:websense/\n\nmatch websocket m|^HTTP/1\\.1 400 \\r\\nServer: WebSocket\\+\\+/([\\d.]+)\\r\\n\\r\\n| p/WebSocket++/ v/$1/ cpe:/a:zaphoyd:websocketpp:$1/\nmatch websocket m|^HTTP/1\\.1 404 WebSocket Upgrade Failure\\r\\nContent-Type: text/html\\nServer: TooTallNate Java-WebSocket\\r\\n| p/Java-WebSocket/ cpe:/a:tootallnate:java-websocket/\n\nmatch wesnoth m|^\\0\\0\\0.\\0\\0\\0\\x1f\\x02version\\0\\x04([\\d.]+)\\0\\0\\x02mustlogin\\0\\x05\\x01\\0|s p/Battle For Wesnoth game server/ v/$1/\nmatch wesnoth m|^\\0\\0\\0.\\0\\0\\0.\\x1f\\x8b\\x08\\0\\0\\0\\0\\0\\0\\xff\\x8b\\.K-\\*\\xce\\xcc\\xcf\\x8b\\xe5\\x8a\\xd6\\x873\\x01 \\xbc\\x17\\x06\\x15\\0\\0\\0| p/Battle For Wesnoth game server/\n\nmatch workrave m|^\\0\\x26\\x02\\0\\0\\x06\\0.[\\d.]+:\\d+\\0\\x01\\0\\x11\\0\\x04\\0\\x01\\0\\x03\\0\\xaa\\x02\\0\\0\\x06\\0.[\\d.]+:\\d+\\0\\x01\\0\\x10\\0\\x88\\0\\x03\\0\\x0bmicro_pause\\0\\x20\\x4c\\xa4\\x86\\x8e\\0\\0\\0\\xb4\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0L\\xa4\\x86\\x8d\\0\\0\\0\\xb4\\0\\0\\0\\x0arest_break\\0|s p/Workrave/\n\nmatch wrproxy m|^error wrproxy: Error parsing command line\\0| p/Wind River wrproxy/ cpe:/a:windriver:workbench/\n\nmatch wtam m|^WTAM/1\\.0 401 Unrecognized Command\\n\\n$| p/Webtrends WTAM/\n\nmatch wub-command m|^Command Shell\\r\\n\\r\\n% \\r\\n% | p/Wub httpd command console/\n\nmatch xboxdebug m|^201- connected\\r\\n407- unknown command\\r\\n$| p/Microsoft XBox Debugging Kit/ d/game console/\nmatch xns m|^HELLO XBOX!$| p/Relax XBOX file server/ d/game console/\n\nmatch zabbix m|^ZBXD\\x01.\\0\\0\\0\\0\\0\\0\\0ZBX_NOTSUPPORTED|s p/Zabbix Monitoring System/ cpe:/a:zabbix:zabbix/\n\nmatch zmodem m|^\\*\\*\\x18B0100000023be50\\r\\x8a\\x11$| p/ZMODEM/\n\n# Know the device, but not the service.\n# Port 2000.\n# match unknown m|^\\x20$| p/Samsung CLX-3175FW printer/ d/printer/\n\n\n##############################NEXT PROBE##############################\nProbe TCP GetRequest q|GET / HTTP/1.0\\r\\n\\r\\n|\nrarity 1\nports 1,70,79,80-85,88,113,139,143,280,497,505,514,515,540,554,591,620,631,783,888,898,900,901,1026,1080,1042,1214,1220,1234,1314,1344,1503,1610,1611,1830,1900,2001,2002,2030,2064,2160,2306,2396,2525,2715,2869,3000,3002,3052,3128,3280,3372,3531,3689,3872,4000,4444,4567,4660,4711,5000,5427,5060,5222,5269,5280,5432,5800-5803,5900,5985,6103,6346,6544,6600,6699,6969,7002,7007,7070,7100,7402,7776,8000-8010,8080-8085,8088,8118,8181,8530,8880-8888,9000,9001,9030,9050,9080,9090,9999,10000,10001,10005,11371,13013,13666,13722,14534,15000,17988,18264,31337,40193,50000,55555\nsslports 443,993,995,1311,1443,3443,4443,5061,5986,7443,8443,8531,9443,10443,14443,44443,60443\n\nmatch adobe-crossdomain m|^<\\?xml version=\\\"1\\.0\\\"\\?>\\r\\n<!DOCTYPE cross-domain-policy SYSTEM \\\"/xml/dtds/cross-domain-policy\\.dtd\\\">\\r\\n<cross-domain-policy>\\r\\n    <!-- This is a master socket policy file -->\\r\\n    <!-- No other socket policies on the host will be permitted -->\\r\\n    <site-control permitted-cross-domain-policies=\\\"master-only\\\"/>\\r\\n    <!-- This will allow access to port 1800 -->\\r\\n    <allow-access-from domain=\\\"([^\\\"]*)\\\" to-ports=\\\"([^\\\"]*)\\\"/>\\r\\n</cross-domain-policy>\\r\\n| p/Adobe cross-domain policy/ i/Snom 870 VoIP phone; domain: $1; ports: $2/ d/VoIP phone/ cpe:/h:snom:870/\n\nmatch ajp13 m|^AB\\0\\x13\\x04\\x01\\x90\\0\\x0bBad Request\\0\\0\\0AB\\0\\x02\\x05\\x01$| p/Apache Jserv/\n\nmatch athinfod m|^athinfod: invalid query\\.\\n$| p/Athena athinfod/\n\nmatch automate m|^\\x031[\\w+/]{54}nXAvc01KqG\\x03\\r\\n$| p/AutoMate Task Service/ v/9/\n\n# using line numbers to distinguish versions\n# for f in *.tar.gz; do echo -en $f\"\\t\"; tar --wildcards -xOf $f '*/amavisd' | grep -n -e '__DATA__' -e \"Missing 'request'\" | grep -B1 req | awk -F: '{a=$1-a}END{print a}'; done\n# Avoiding pre- and rc- versions for brevity\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:187),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.3.0 - 2.3.2/ cpe:/a:ijs:amavisd_new:2.3/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:190),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.3.3/ cpe:/a:ijs:amavisd_new:2.3.3/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:195),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.4.0/ cpe:/a:ijs:amavisd_new:2.4.0/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:207),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.4.1 - 2.4.2/ cpe:/a:ijs:amavisd_new:2.4/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:208),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.4.3 - 2.4.4/ cpe:/a:ijs:amavisd_new:2.4/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:210),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.4.5/ cpe:/a:ijs:amavisd_new:2.4.5/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:214),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.5.0/ cpe:/a:ijs:amavisd_new:2.5.0/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:217),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.5.1 - 2.5.4/ cpe:/a:ijs:amavisd_new:2.5/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:230),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.6.0/ cpe:/a:ijs:amavisd_new:2.6.0/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:185),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.7.0 - 2.7.2/ cpe:/a:ijs:amavisd_new:2.7/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:188),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.8.0/ cpe:/a:ijs:amavisd_new:2.8.0/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:193),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.8.1/ cpe:/a:ijs:amavisd_new:2.8.1/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:196),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.9.0 - 2.10.1/ cpe:/a:ijs:amavisd_new:2/\nmatch am-pdp m|^setreply=450 4\\.5\\.0 Failure:%20Missing%20'request'%20field%20at%20\\(eval%20\\d+\\)%20line%20(?:197),%20<GEN\\d+>%20line%20\\d\\.\\r\\n| p/amavisd-new AM.PDP/ v/2.11.0 - 2.11.1/ cpe:/a:ijs:amavisd_new:2.11/\n\nmatch amqp m|^AMQP\\x00\\x00\\x09\\x01$| p/Advanced Message Queue Protocol/\nmatch amqp m|^AMQP\\x01\\x01\\x00\\x0a$| p/Advanced Message Queue Protocol/\n\nmatch as2 m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Cleo LexiCom/([\\w._-]+) \\(([^)]+)\\)\\r\\n| p/Cleo LexiCom AS2/ v/$1/ o/$2/\n\n# Kerio PF 4.0.11 unregistered - Service process (Port 44xxx?) on MS W2K SP4+\nmatch keriopfservice m|^(HTTP/1\\.0) 200 OK\\r\\nServer: Kerio Personal Firewall\\r\\n| p/Kerio PF 4 Service/ i/$1/\n\nmatch backupexec-remote m|^\\xf6\\xff\\xff\\xff\\x10\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Veritas Backup Exec Remote Agent/ cpe:/a:symantec:veritas_backup_exec/\n\nmatch backdoor m|^:[-\\w_.]+ 451 GET :\\r\\n| p/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch backdoor m|^<HTML>\\n<HEAD>\\n<TITLE>Directory /</TITLE>\\n<BASE HREF=\\\"file:/\\\">\\n</HEAD>\\n<BODY>\\n<H1>Directory listing of /</H1>| p/No-auth shell/ i/**BACKDOOR**/ o/Unix/\n\nmatch banner-ivu m|^ERROR 10101_GROUP_NOT_FOUND\\r\\n| p/Banner Engineering iVu Command Channel/ d/specialized/\n\nmatch beep m|^RPY \\d \\d \\. \\d \\d+\\r\\nContent-Type: application/beep\\+xml\\r\\n\\r\\n<greeting><profile uri='http://xml\\.resource\\.org/profiles/NULL/WIOServerProfile' /><profile uri='http://iana\\.org/beep/TLS' /><profile uri='http://xml\\.resource\\.org/profiles/NULL/ChatServerProfile' /></greeting>END\\r\\n| p/Blackboard WebCT chat server/\n\nmatch bentley-projectwise m|^ACKNOSEC$| p/Bentley Systems ProjectWise/\n\nmatch bigant m|^HTTP/1\\.1  403\\naenflag:0\\ncontent-length:0\\nserver:AntServer\\n\\n| p/BigAnt Messenger server/\n\nmatch bittorrent m|^Nice try\\.\\.\\.\\r\\n$| p/Transmission Bittorrent client/ cpe:/a:transmissionbt:transmission/\nmatch bitcoin-jsonrpc m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n\\r\\nJSONRPC server handles only POST requests| p/Bitcoin or Litecoin JSON-RPC/\n\nmatch bluecoat-logd m|^\\x03\\0\\0\\x01$| p/Blue Coat Reporter log server/\n\nmatch brio m|^com\\.sqribe\\.null\\0java\\.lang\\.String\\0com\\.sqribe\\.transformer\\.TransformerException\\0java\\.lang\\.String\\0TRCP version mismatch: Current version: (\\d+) Client version: unknown\\0$| p/Brio 8 business intelligence tool/ v/$1/\n\nmatch caldav m|^HTTP/1\\.1 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: negotiate \\r\\nWWW-Authenticate: digest nonce=\\\"\\d+\\\", realm=\\\"/Search\\\", algorithm=\\\"md5\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Twisted/([\\w._-]+) TwistedWeb/([\\w._-]+)\\r\\n|s p/TwistedWeb httpd/ v/$2/ i/Apple iCal Server; Twisted $1/ cpe:/a:twistedmatrix:twisted:$1/ cpe:/a:twistedmatrix:twistedweb:$2/a\nmatch caldav m|^HTTP/1\\.1 401 Unauthorized\\r\\n.*WWW-Authenticate: Basic realm=\\\"Zarafa CalDav Gateway\\\"\\r\\nContent-Length: 0\\r\\nServer: Zarafa\\r\\n| p/Zarafa CalDav Gateway/ cpe:/a:zarafa:zarafa/\nmatch caldav m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CalendarServer/([\\w._-]+)\\(iCalServerv([\\w._-]+)\\) Twisted/([\\w._-]+) TwistedWeb/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?DAV: 1|s p/TwistedWeb httpd/ v/$4/ i/Calendar and Contacts Server $1; iCalServer $2; Twisted $3/ o/Mac OS X/ cpe:/a:twistedmatrix:twisted:$3/ cpe:/a:twistedmatrix:twistedweb:$4/a cpe:/o:apple:mac_os_x/a\nmatch caldav m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CalendarServer/([\\w._()-]+) Twisted/([\\w._-]+) TwistedWeb/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?DAV: 1|s p/TwistedWeb httpd/ v/$3/ i/Calendar and Contacts Server $1; Twisted $2/ cpe:/a:twistedmatrix:twisted:$2/ cpe:/a:twistedmatrix:twistedweb:$3/a\nmatch caldav m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: WSGIServer/([\\w._-]+) Python/([\\w._-]+)\\r\\nContent-Length: \\d+\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE html>\\n<title>Radicale</title>Radicale works!| p/Radicale CalDAV CardDAV/ i/WSGIServer $1; Python $2/ cpe:/a:kozea:radicale/ cpe:/a:python:python:$2/ cpe:/a:python:wsgiref:$1/\nmatch caldav m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Length: 0\\r\\nWww-Authenticate: Digest realm=\\\"Daylite\\\", qop=\\\"auth\\\", nonce=\\\"[\\dA-F]{8}-[\\dA-F]{4}-[\\dA-F]{4}-[\\dA-F]{4}-[\\dA-F]{12}\\\"\\r\\nAccept-Ranges: bytes\\r\\nDate: .* GMT\\r\\n\\r\\n| p/Daylite Server Admin/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\n\nmatch cassandra-native m|^\\x83\\0\\0\\0\\0\\0\\0\\0\\x8c\\0\\0\\0\\0\\0\\x86io\\.netty\\.handler\\.codec\\.DecoderException: org\\.apache\\.cassandra\\.transport\\.ProtocolException: Invalid or unsupported protocol version: 71| p/Apache Cassandra/ i/native protocol version 3/ cpe:/a:apache:cassandra/\nmatch cassandra-native m|^\\x82\\0\\0\\0\\0\\0\\0\\0\\x8c\\0\\0\\0\\0\\0\\x86io\\.netty\\.handler\\.codec\\.DecoderException: org\\.apache\\.cassandra\\.transport\\.ProtocolException: Invalid or unsupported protocol version: 71| p/Apache Cassandra/ i/native protocol version 2/ cpe:/a:apache:cassandra/\nmatch cassandra-native m|^\\x81\\0\\0\\0\\0\\0\\0\\0\\x8c\\0\\0\\0\\0\\0\\x86io\\.netty\\.handler\\.codec\\.DecoderException: org\\.apache\\.cassandra\\.transport\\.ProtocolException: Invalid or unsupported protocol version: 71| p/Apache Cassandra/ i/native protocol version 1/ cpe:/a:apache:cassandra/\nmatch cassandra-native m|^.\\0\\0\\0\\0\\0\\0\\0.\\0\\0\\0\\n\\0[eE]Invalid or unsupported protocol version \\(71\\); highest supported is (\\d+) | p/Apache Cassandra/ v/2.2.0 - 2.2.9/ i/native protocol version $1/ cpe:/a:apache:cassandra:2.2/\nmatch cassandra-native m|^.\\0\\0\\0\\0\\0\\0\\0.\\0\\0\\0\\n\\0[eE]Invalid or unsupported protocol version \\(71\\); the lowest supported version is (\\d+) and the greatest is (\\d+)| p/Apache Cassandra/ v/3.0.0 - 3.9/ i/native protocol version $1-$2/ cpe:/a:apache:cassandra:3/\nmatch cassandra-native m|^.\\x10\\0\\0\\0\\0\\0\\0.\\0\\0\\0\\n\\0\\\\Invalid or unsupported protocol version \\(71\\); supported versions are \\((\\d+[^)]+)\\)| p/Apache Cassandra/ v/3.10 or later/ i/native protocol versions $1/ cpe:/a:apache:cassandra:3/\n\nmatch clickhouse m|^\\x02e\\0\\0\\0\\x10DB::NetException/DB::NetException: Unexpected packet from client..0\\. clickhouse-server\\(StackTrace::StackTrace\\(\\)\\+0x16\\) \\[0x[0-9a-f]+\\]\\n| p/ClickHouse DBMS/ cpe:/a:yandex:clickhouse/\nsoftmatch clickhouse m|^HTTP/1\\.0 400 Bad Request\\r\\n\\r\\nPort \\d+ is for clickhouse-client program\\.\\r\\nYou must use port \\d+ for HTTP\\.\\r\\n| p/ClickHouse DBMS/ cpe:/a:yandex:clickhouse/\n\nmatch cryptonote m|^HTTP/1\\.0 200 OK\\nContent-Type: text/plain\\nContent-Length: 20\\n\\nmining server online| p/node-cryptonote-pool CryptoNote miner/ i/Node.js/ cpe:/a:nodejs:node.js/\nmatch csta m|^<HTML>\\r\\n<HEAD>\\r\\n<TITLE>CSTA-Mono Server Home Page </TITLE>\\r\\n| p/Alcatel OmniPCX Enterprise/ d/PBX/ cpe:/a:alcatel-lucent:omnipcx/\n\nmatch daap m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nDate: .*\\r\\nContent-Length: 24\\r\\n\\r\\nCommand not implemented\\.$| p/Amarok music player DAAP/\nmatch daap m|^HTTP/1\\.1 400 Bad Request\\r\\n(?:Date: .*\\r\\n)?DAAP-Server: iTunes/(\\d[-.\\w]+) \\((.*)\\)\\r\\n| p/Apple iTunes DAAP/ v/$1/ o/$2/ cpe:/a:apple:itunes:$1/\nmatch daap m|^HTTP/1\\.1 403 Forbidden\\r\\nDate: .*\\r\\nDAAP-Server: iTunes/(\\d[-.\\w]+) \\((.*)\\)\\r\\nContent-Type: application/x-dmap-tagged\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Apple iTunes DAAP/ v/$1/ o/$2/ cpe:/a:apple:itunes:$1/\nmatch daap m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: mt-daapd/([-\\w.]+)\\r\\n|s p/mt-daapd DAAP/ v/$1/\n# Also \"DAAP Music Sharing Plugin on rhythmbox 2.96\"\nmatch daap m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/mt-daapd DAAP/\nmatch daap m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDAAP-Server: daap-sharp\\r\\nContent-Type: application/x-dmap-tagged\\r\\nContent-Length: \\d+\\r\\n\\r\\ninvalid session id| p/DAAPsharp DAAP/\nmatch daap m|^HTTP/1\\.0 400 Bad Request\\nServer: Hughes Technologies Embedded Server \\(persistent patch\\)\\r\\n| p/daapd/ i/Hughes embedded/\nmatch daap m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"forked-daapd web interface\\\"\\r\\nContent-Length: 92\\r\\nServer: forked-daapd/([\\w._-]+)\\r\\n\\r\\n<html><head><title>401 Unauthorized</title></head><body>Authorization required</body></html>\\r\\n$| p/forked-daapd/ v/$1/\nmatch daap m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"forked-daapd web interface\\\"\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n\\r\\n<html><head><title>401 Unauthorized</title></head><body>Authorization required</body></html>$| p/forked-daapd/\n\nmatch dnet-keyproxy m|^HTTP/1\\.0 302 Found\\r\\nLocation: http://www\\.distributed\\.net/\\r\\n\\r\\n$| p/Distributed.Net HTTP Keyproxy/\n\nsoftmatch docker m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: application/json\\r\\nDate: .*\\r\\nContent-Length: 29\\r\\n\\r\\n\\{\"message\":\"page not found\"\\}\\n| p/Docker remote API/\n\nmatch drda m|^\\0\\x79\\xd0\\x02\\xff\\xff\\0\\x73\\x12\\x4c\\0\\x06\\x11\\x49\\0\\x08\\0\\x4e\\x11S\\0\\xd3| p/IBM DRDA/\nmatch drda m|^\\0\\x1b\\xd0\\x02\\0\\x01\\0\\x15\\x12\\x4c\\0\\x06\\x11\\x49\\0\\x08\\0\\x06\\0\\x0c\\0\\0\\0\\x05\\x11\\x4a\\x03$| p/Apache Derby DRDA/ cpe:/a:apache:derby/\n\nmatch dslcpe m|^GET: command not found\\n\\r   acog,          AutobootConfigOptionGet\\n\\r| p/dsl_cpe_control/ d/broadband router/\n\nmatch econtagt m|^=\\0\\0\\0$| p/Compuware ServerVantage EcoNTAgt/ cpe:/a:compuware:servervantage_agent/\n\nmatch elasticsearch m|^This is not a HTTP port$| p/Elasticsearch binary API/ cpe:/a:elasticsearch:elasticsearch/\nmatch emco-remote-screenshot m|^\\x06!\\x01\\0\\0\\0\\0\\0\\xff\\xd8\\xff\\xe0\\0\\x10JFIF| p/EMCO Remote Screenshot/\n\nmatch encase m|^....\\x80\\0\\0\\0\\0\\0\\0\\0........\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0F\\0\\0\\0\\xb0\\x04\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xfe1\\0\\n\\0m\\0a\\0i\\0n\\0\\n\\0n\\0\\n\\0I\\0n\\0v\\0a\\0l\\0i\\0d\\0 \\0h\\0e\\0a\\0d\\0e\\0r\\0 \\0c\\0h\\0e\\0c\\0k\\0s\\0u\\0m\\0\\n\\0\\n\\0..........| p/EnCase Servlet/\n\nmatch eth-jsonrpc m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: application/json\\r\\nVary: Origin\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\n\\r\\n\\{\"jsonrpc\":\"([\\d.]+)\",\"error\":\\{\"code\":-32600,\"message\":\"EOF\"\\}\\}\\n| p/Ethereum JSON-RPC/ i/jsonrpc $1/\nmatch fhem m|^\\n\\[LaCrosseITPlusReader\\.(\\d[\\w.]+) \\w\\w\\w \\d\\d \\d\\d\\d\\d \\(RFM\\d+ f:\\d+ t:[\\d~]+\\) \\+ DHT\\d+\\]\\r\\n| p/LaCrosse IT+ Reader/ v/$1/ d/specialized/\n\n# Digital UNIX 5.6\nmatch finger m|^Login name: /         \\t\\t\\tIn real life: \\?\\?\\?\\r\\n\\r\\nLogin name: GET       \\t\\t\\tIn real life: \\?\\?\\?\\r\\n\\r\\nLogin name: HTTP/1\\.0  \\t\\t\\tIn real life: \\?\\?\\?\\r\\n$| p/Digital UNIX fingerd/ o/Digital UNIX/ cpe:/o:dec:digital_unix/a\n# Internet Rex v2.67 Beta 1a\nmatch finger m|^No such user No such user N\\n$| p/Internet Rex finger server/\n# IQinVision IQeye3 security camera\nmatch finger m|^\\n Nodename:\\s+(\\w+)\\r\\n| p/IQinVision fingerd/ i/Camera/ d/webcam/ h/$1/\n# FreeBSD 4.9-STABLE /usr/libexec/fingerd/\nmatch finger m|^finger: /: no such user\\r?\\nfinger: GET: no such user\\r?\\nfinger: HTTP/1\\.0: no such user\\r?\\n$| p/FreeBSD fingerd/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\n# Bay Networks Micro Annex Comm. Server R10.0\nmatch finger m|^No such activity\\.\\r\\n$| p/Bay Networks Micro Annex terminal server fingerd/ d/terminal server/\n# Mercury/32 3.32 Finger Server module on Windows XP\nmatch finger m|^GET / HTTP/1\\.0 is not known at this site\\.\\r\\n$| p|Mercury/32 fingerd| o/Windows/ cpe:/o:microsoft:windows/a\n# ffingerd 1.28\nmatch finger m|^That user does not want to be fingered\\.\\n$| p/ffingerd/\n# Finger 0.17 from debian linux (which is from Linux netkit I believe)\n# OpenBSD 2.3\nmatch finger m|^finger: GET: no such user\\.\\nfinger: /: no such user\\.\\nfinger: HTTP/1\\.0: no such user\\.\\n$| p|BSD/Linux fingerd| o/Unix/\n# Linux port of in.fingerd from OpenBSD network tools - started with -w to show welcome banner\nmatch finger m|^\\r\\nWelcome to Linux version (\\d[-.\\w]+) at ([-.\\w]+) !\\r\\n\\n.*\\n\\r\\nfinger: GET: no such user\\.|s p/OpenBSD fingerd/ i/ported to Linux/ o/Linux $1/ h/$2/ cpe:/o:linux:linux_kernel:$1/\n# Redhat Linux from finger-server-0.17-9 RPM\nmatch finger m|^finger: GET: no such user.\\r\\nfinger: /: no such user.\\r\\nfinger: HTTP/1.0: no such user.\\r\\n$| p/Linux fingerd/ o/Linux/ cpe:/o:linux:linux_kernel/a\n# NetBSD 1.6ZA (berkeley fingerd 8.1 sibling)\nmatch finger m|^finger: GET: no such user\\nfinger: /: no such user\\nfinger: HTTP/1\\.0: no such user\\n$| p/NetBSD fingerd/ cpe:/o:netbsd:netbsd/\n# Solaris 9\nmatch finger m|^Login       Name               TTY         Idle    When    Where\\r\\nGET                   \\?\\?\\?\\r\\n/                     \\?\\?\\?\\r\\nHTTP/1\\.0              \\?\\?\\?\\r\\n$| p/Sun Solaris fingerd/ o/Solaris/ cpe:/o:sun:sunos/a\n# mlfingerd 1.1\nmatch finger m|^Information for user 'GET\\+20\\+2F\\+20HTTP\\+2F1\\.0':\\r\\nUnknown user\\.\\r\\n$| p/mlfingerd/\n# SGI IRIX 6.5.18f finger\nmatch finger m|^Login name: GET       \\t\\t\\tIn real life: \\?\\?\\?\\r\\n$| p/SGI IRIX or NeXTSTEP fingerd/\n# Windows fingerd\nmatch finger m|^No such user\\n$| p/Windows fingerd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch finger m|^MSS100 Version V([\\d/.]+)\\(\\d+\\) - Time Since Boot: \\d+:\\d\\d:\\d\\d\\r\\nName        pid     stat  pc       cpusec    stack    pr/sy   idle    tty\\r\\n| p/Lantronix MSS100 serial interface fingerd/ v/$1/ d/specialized/\nmatch finger m|^finger: GET / HTTP/1\\.0: no such user\\n| p/efingerd/ o/Unix/ cpe:/a:radovan_garabik:efingerd/\nmatch finger m|^ +-;;=\\n +\\.;M####\\+\\n| p/mIRC with ircN script fingerd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch finger m|^User not found\\r\\n| p/XMail fingerd/ cpe:/a:davide_libenzi:xmail/\nmatch finger m|^EMail       : [-\\w_.]+@([-\\w_.]+)\\r\\n  Real Name : \\?\\?\\r\\n  Home Page : \\?\\?\\r\\n| p/XMail fingerd/ h/$1/ cpe:/a:davide_libenzi:xmail/\nmatch finger m|^\\r\\nIntegrated port\\r\\nPrinter Type: IBM Infoprint (.*)\\r\\n| p/IBM Infoprint $1 fingerd/ d/print server/ cpe:/a:ibm:infoprint_$SUBST(1,\" \",\"_\")/\nmatch finger m|^Login name: HTTP/1\\.0       In real life: \\?\\?\\?\\r\\n| p/OpenVMS fingerd/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch finger m|^No information available\\r\\n$| p/Post.Office fingerd/\nmatch finger m|^finger: sorry, no such user\\.\\n$| p/xfingerd/\nmatch finger m|^finger: HTTP/1\\.0: no such user\\.\\r\\n| p/BSD fingerd/ cpe:/a:bsd:fingerd/\nmatch finger m|^no such user here\\n$| p/MiamiDx fingerd/ o/AmigaOS/\n\nmatch git m|^0077ERR \\n  Your Git client has made an invalid request:\\n  GET / HTTP/1\\.0\\r\\n\\r\\n\\n  Visit http://support\\.github\\.com for help$| p/Git/ i/GitHub/\n\nmatch gnutella m|^HTTP/1\\.[01] 404 Not Found\\r\\nServer: gtk-gnutella/(\\d[-.\\w]+) \\(([^\\)\\r\\n]+)\\)\\r\\n| p/gtk-gnutella P2P client/ v/$1/ i/$2/\nmatch gnutella m|^HTTP/1\\.[01] 403 Browse Host Disabled\\r\\nServer: gtk-gnutella/(\\d[-.\\w]+) \\(([^\\)\\r\\n]+)\\)\\r\\n| p/gtk-gnutella P2P client/ v/$1/ i/$2; browse host disabled/\nmatch gnutella m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: gtk-gnutella/(\\d[-\\w.]+) \\([-\\d]+; GTK2; Linux i686\\)\\r\\n.*sharing (\\d+) files ([\\d.]+ \\w+) total</h3>\\r\\n|s p/gtk-gnutella P2P client/ v/$1/ i/Sharing $2 files, $3/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\n# LimeWire 3.5.8 on Suse Linux 8.1\nmatch gnutella m|^HTTP/1\\.1 406 Not Acceptable\\r\\n(?:\\r\\n)?$| p/LimeWire Gnutella P2P client/ cpe:/a:limewire:limewire/\nmatch gnutella m|^HTTP/1\\.0 406 Not Acceptable\\r\\nDate: .*\\r\\nServer: LimeWire/([\\w._-]+)\\r\\n| p/LimeWire Gnutella P2P client/ v/$1/ cpe:/a:limewire:limewire:$1/\nmatch gnutella m|^HTTP/1\\.0 200\\r\\nServer: Mutella\\r\\n| p/Mutella Gnutella P2P client/\nmatch gnutella m|^HTTP/1\\.1 404 Not Found\\r\\nServer: giFT-Gnutella/(\\d[-.\\w]+)\\r\\n| p/GiFT P2P client gnutella module/ v/$1/\nmatch gnutella m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Shareaza (\\d\\S+)|s p/Shareaza/ v/$1/\nmatch gnutella m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: BearShare ([\\d.]+)\\r\\n|s p/BearShare Gnutella P2P client/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch gnutella m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: BearShare ([\\d.]+) \\(([^)]+)\\)\\r\\n|s p/BearShare Gnutella P2P client/ v/$1/ i/$2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch gnutella m|^HTTP/1\\.1 503 Web: Disabled\\r\\nServer: BearShare Pro ([\\d.]+)\\r\\nContent-Length: \\d+\\r\\n| p/BearShare Pro Gnutella P2P client/ v/$1/ i/Web disabled/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch gnutella m|^HTTP/1\\.1 503 Web: Disabled\\r\\nServer: BearShare Lite ([\\d.]+)\\r\\nContent-Length: \\d+\\r\\n| p/BearShare Lite Gnutella P2P client/ v/$1/ i/Web disabled/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch gnutella m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: GhostWhiteCrab/([\\d.]+)\\r\\nConnection: close\\r\\n\\r\\n| p/GhostWhiteCrab gnutella cache/ v/$1/\nmatch gnutella m|^HTTP/1\\.0 501 Not Implemented\\r\\nDate: .*\\r\\nServer: Frosty/([\\w._-]+)\\r\\nContent-Length: 0\\r\\nConnection: Close\\r\\n\\r\\n| p/Frostwire P2P/ i/Frosty $1/\n\nmatch gopher m|^HTTP/1\\.0 200 Ok\\r\\nMIME-Version: 1\\.0\\r\\nServer: GopherWEB/(\\d[-.\\w]+)\\r\\n| p/Internet Gopher Server/ i/Gopher+ protocol; GopherWeb $1/\nmatch gopher m|^0'/GET / HTTP/1\\.0' doesn't exist!\\t\\terror\\.host\\t1\\r\\n\\.\\r\\n$| p/Bucktooth gopherd/\nmatch gopher m|^3 --6 Bad Request\\. \\r\\n\\.\\r\\n$| p/Windows gopherd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch gopher m|^3 --6 Ung\\xfcltige Anforderung\\. \\r\\n\\.\\r\\n$| p/Windows gopherd/ i/German/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch gopher m|^3'/GET / HTTP/1\\.0' does not exist \\(no handler found\\)\\t\\terror\\.host\\t1\\r\\n| p/pygopherd/\n# GoFish is also a Gopher-to-HTTP gateway.\nmatch gopher m|^HTTP/1\\.0 500 Server Error\\r\\nServer: Server: GoFish/([\\d.]+) \\(Linux\\)\\r\\n|s p/GoFish gopherd/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch gopher m|^3Sorry, but the requested token 'GET / HTTP/1\\.0\\r\\n' could not be found\\.\\tErr\\t([\\w._-]+)\\t\\d+\\r\\n\\.\\r\\n\\r\\n| p/Geomyidae/ h/$1/\nmatch gopher m|^iUnable to locate requested resource\\.\\t\\t([\\w._-]+)\\t\\d+\\r\\n\\.\\r\\n| p/Gopher Cannon/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/\nmatch gopher m|^Error: File or directory not found!\\r\\n______________________________________________________________________\\r\\n              Gophered by Gophernicus/([\\w._-]+) on archlinux/rolling | p/Gophernicus/ v/$1/ o/Linux/ cpe:/o:archlinux:arch_linux/ cpe:/o:linux:linux_kernel/\nmatch gopher m|^iWelcome to Gophernicus!\\t.*server version\\.: Gophernicus/([\\w._-]+)\\t|s p/Gophernicus gopherd/ v/$1/\nmatch gopher m|^HTTP/1\\.1 400 Bad request\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nServer: Motsognir\\r\\n.*<a href='gopher://([^/]+)/'|s p/Motsognir gopherd/ h/$1/ cpe:/a:mateusz_viste:motsognir/\nmatch gopher-proxy m|^3That item is not currently available\\.\\r\\n$| p/Symantec gopher proxy/\n\n# GoverLan Remote Admin/Control (Tom Sellers)\nmatch goverlan m|^\\0\\0\\0\\0/\\x20HT| p/Goverlan Remote Administration/ cpe:/a:pjtech:goverlan/\n\nmatch gpsd m|^GPSD,G=\\?,E=\\?,T=\\?,T=\\?,T=\\?,P=\\?\\r\\n| p/gpsd/ cpe:/a:gpsd_project:gpsd/\nmatch gpsd-ng m|^{\\\"class\\\":\\\"VERSION\\\",\\\"release\\\":\\\"([\\w._-]+)\\\",\\\"rev\\\":\\\"([\\w._:-]+)\\\",\\\"proto_major\\\":\\d+,\\\"proto_minor\\\":\\d+}\\r\\n$| p/GPSD-NG/ v/$1 rev $2/\n\nmatch groupwise m|^\\xbc\\xef\\x16\\0\\xb5\\xfe\\x14\\0\\0\\0\\0 \\xb5x3\\x06a\\x05\\0\\0\\x16\\0\\xbc\\xef\\x1a\\0\\xb5\\xfe\\x18\\0\\0\\0\\0 d\\xcf2\\n\\0\\0\\0\\0\\0\\0\\0\\0\\x1a\\0\\xbc\\xef\\x14\\0\\xb5\\xfe\\x0e\\0\\x02\\0\\x02!\\x03\\x16\\x7f\\$r\\xe7\\x14\\0$| p/Novell GroupWise/ cpe:/a:novell:groupwise/\n\nmatch hadoop-ipc m|^\\0\\0\\0\\0\\x03\\0\\0\\0\\x7c\\xff\\xff\\xff\\xff\\0\\0\\0\\)org\\.apache\\.hadoop\\.ipc\\.RPC\\$VersionMismatch\\0\\0\\0>Server IPC version (\\d+) cannot communicate with client version 47| p/Hadoop IPC/ i/IPC version $1/ cpe:/a:apache:hadoop/\nmatch hadoop-ipc m|^\\0\\0\\0\\x7c{\\x08\\xff\\xff\\xff\\xff\\x0f\\x10\\x02\\x18\\t\\\"\\)org\\.apache\\.hadoop\\.ipc\\.RPC\\$VersionMismatch\\*>Server IPC version (\\d+) cannot communicate with client version \\d+\\x0e:\\0@\\x01| p/Hadoop IPC/ i/IPC version $1/ cpe:/a:apache:hadoop/\nsoftmatch hadoop-ipc m|^HTTP/1\\.1 404 Not Found\\r\\nContent-type: text/plain\\r\\n\\r\\nIt looks like you are making an HTTP request to a Hadoop IPC port\\. This is not the correct port for the web interface on this daemon\\.\\r\\n| p/Hadoop IPC/ cpe:/a:apache:hadoop/\n\n# Responds with a binary protocol for other probes (GenericLines and RPCCheck).\nmatch hillstone-vpn m|^HTTP/1\\.1 301 Moved Permanently\\r\\nLocation: /login\\.html\\r\\nContent-Length: 157\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>301 Moved Permanently</title></head><body>\\n<h1>Moved Permanently</h1>\\nMoved to: <a href=\\\"/login\\.html\\\">/login\\.html</a>\\n<hr>\\n</body></html>\\n$| p/Hillstone SSL VPN/\n\nmatch hp-logic-analyzer m|^\\r\\n\\r0\\.1/PTTH / TEG.\\r\\n$| p/HP 1662C logic analyzer/ d/specialized/\n\n# Needs to go before the Apache match lines -Doug\nmatch http-proxy m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-orenosp-filt:|s p/Orenosp reverse http proxy/\n# Needs to go before BaseHTTPServer match lines.\nmatch ovs-agent m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: BaseHTTP/([\\d.]+) Python/([\\w.]+)\\r\\n.*<title>Python: OVSAgentServer Document</title>|s p/Oracle OVSAgentServer/ v/22/ i/BaseHTTPServer $1; Python SimpleXMLRPCServer; Python $2/ cpe:/a:python:basehttpserver:$1/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: BaseHTTP/([\\w._+-]+) Python/([\\w._+-]+)\\r\\n.*<title>Supybot Web server index</title>|s p/BaseHTTPServer/ v/$1/ i/Supybot IRC bot HTTP stats; Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 200 Script output follows\\r\\nServer: BaseHTTP/([\\w._-]+) Python/([\\w._-]+)\\r\\n.*<title>Mercurial repositories index</title>|s p/BaseHTTPServer/ v/$1/ i/Mercurial hg serve; Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 200 Script output follows\\r\\nServer: BaseHTTP/([\\w._-]+) Python/([\\w._-]+)\\r\\n.*<title>: Mercurial repositories index</title>|s p/BaseHTTPServer/ v/$1/ i/Mercurial hg serve; Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: BaseHTTP/([\\d.]+) Python/([\\w.]+)\\r\\n.*<tt>This&nbsp;server&nbsp;exports&nbsp;the&nbsp;following&nbsp;methods&nbsp;through&nbsp;the&nbsp;XML-RPC&nbsp;protocol.</tt>|s p/BaseHTTPServer/ v/$1/ i/Python SimpleXMLRPCServer; Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\n\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n(?:.*\\r\\n)?Server: MochiWeb/(\\d[-.\\w]+) \\([-.'\\w\\s]+\\)\\r\\n| p/MochiWeb Erlang HTTP library/ v/$1/ cpe:/a:mochiweb_project:mochiweb:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n(?:.*\\r\\n)?Server: MochiWeb/(\\d[-.\\w]+) WebMachine/([.\\d]*) \\(.*\\)\\r\\n| p/MochiWeb Erlang HTTP library/ v/$1/ i/WebMachine $2/ cpe:/a:mochiweb_project:mochiweb:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: MochiWeb/([\\w._-]+) \\(Any of you quaids got a smint\\?\\)\\r\\n.*<title>RabbitMQ Management</title>|s p/MochiWeb Erlang HTTP library/ v/$1/ i/RabbitMQ management/ cpe:/a:mochiweb_project:mochiweb:$1/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nServer: MochiWeb/([\\w._-]+) \\(Any of you quaids got a smint\\?\\)\\r\\nLocation: http://[\\w._-]+:(\\d+)/\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/MochiWeb Erlang HTTP library/ v/$1/ i/RabbitMQ management; redirect to port $2/ cpe:/a:mochiweb_project:mochiweb:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Apache/([\\d.]+)\\r\\nPragma: no-cache\\r\\nDate: .*<title></title>\\r\\n.*\\r\\nvar my_upnp = 1;\\r\\n// backup log and config\\r\\nvar PM = \\\"7004ABR\\\";|s p/SMC 7004ABR broadband router  http config/ i/Identifies as Apache $1/ d/broadband router/ cpe:/h:smc:7004abr/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nPragma: no-cache\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Login to the Router Web Configurator\\\"\\r\\n\\r\\n<html>\\n  <head>\\n  <title>401 Unauthorized</title>\\n  </head>\\n<body>\\n\\n<div align=\\\"center\\\">| p/DrayTek Vigor ADSL router webadmin/ d/broadband router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: webfs/(\\d[-.\\w]+)\\r\\n| p/WebFS httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML>\\n<!-- Copyright IBM Corporation, 1999 -->\\n<HEAD>\\n<META HTTP-EQUIV=\\\"Content-Type\\\" CONTENT=\\\"text/html; charset=| p/IBM switch webadmin/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: WebCam2000/(\\d[-.\\w]+) \\(([-/.+\\w]+); www\\.stratoware\\.com/webcam2000/\\)\\r\\n| p/WebCam2000 httpd/ v/$1/ i/$2/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nServer: BWS/1\\.0b3\\r\\n\\r\\n| p/Corel Paradox relational database web interface/ v/9.X/ i/Embedded BWS 1.0b3/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: WebSite/(\\d[-.\\w]+)\\r\\n| p/Deerfield VisNetic WebSite Professional/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d\\r\\nServer: Statistics Server (\\d[-.\\w]+)\\r\\n| p/DeepMetrix Statistics Server/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nDate: Tue, 07 Oct 2003 12:26:05 GMT\\r\\nAllow: GET, HEAD\\r\\nServer: Spyglass_MicroServer/(\\d[-.\\w]+)\\r\\n\\r\\n<html>\\n\\n<head>\\n\\n<title>.*PhaserLink| p/Tektronix Phaser printer webadmin/ i/Ebedded Spyglass MicroServer $1/ d/printer/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: 3Com/v(\\d[-.\\w]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate:Basic realm=\\\"device\\\"\\r\\n|s p/3Com switch webadmin/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\nDate: .*\\nServer: Acme\\.Serve/v(\\d[-.\\w ]+)\\nConnection: close\\nExpires: .*\\nWWW-Authenticate: Basic realm=\\\"PowerChute network shutdown\\\"\\n|s p/Acme.Serve/ v/$1/ i/APC Powerchute/ d/power-device/ cpe:/a:acme:acme.serve:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\nDate: .*\\nServer: Acme\\.Serve/v(\\d[-.\\w ]+) of \\w+\\nConnection: close\\nExpires: .*\\nWWW-Authenticate: Basic realm=\\\"PowerChute Network Shutdown\\\"\\n|s p/Acme.Serve/ v/$1/ i/APC Powerchute/ d/power-device/ cpe:/a:acme:acme.serve:$1/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: /index\\.htm\\r\\n\\r\\n| p/Alcatel Speedtouch ADSL router webadmin/ d/broadband router/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: pks_www/(\\d[-.\\w]+)\\r\\n| p/OpenPGP public key server/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Apache/0\\.6\\.5\\r\\nPragma: no-cache\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"System Setup\\\"\\r\\n| p/BenQ AWL wireless router webadmin/ d/broadband router/\n# Orinoco bg-2000 Access Point\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Agranat-EmWeb/R([\\w_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"gateway\\\"\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Orinoco WAP http config/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\n# ORiNOCO AP-600\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Virata-EmWeb/R([\\w_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Access-Product\\\"\\r\\n| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Orinoco WAP http config/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 200 OK\\nConnection: close\\nContent-type: image/gif\\nPragma: no-cache\\nContent-Length: 22528\\n\\nMZ| p/bobax.worm.c httpd/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# HP Printers\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html;charset=ISO-8859-1\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n<HTML> \\n<HEAD>\\n<TITLE> | p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet http config/ d/printer/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html;charset=ISO-8859-1\\r\\nExpires: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n<!DOCTYPE html\\nPUBLIC | p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html;charset=utf-8\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n<!--  DOCTYPE tag is included to support the XHTML  -->\\n<!DOCTYPE html\\n   PUBLIC | p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\nLocation: https://([\\d.]+)/\\r\\nContent-Type: text/html\\r\\nContent-Length: [89][0123456789]\\r\\n\\r\\n<HEAD><TITLE>Moved</TITLE></HEAD><BODY>| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet http config/ d/printer/ h/$2/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 301 Resource Moved\\r\\nCONTENT-LENGTH: 0\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: HP-ChaiSOE/([\\d.]+)\\r\\n|s p/HP-ChaiSOE/ v/$1/ i/HP LaserJet http config/ d/printer/\nmatch http m|^HTTP/1\\.1 301 Resource Moved\\r\\nCONTENT-LENGTH: 0\\r\\nEXPIRES: .*\\r\\nLocation: /hp/device/this\\.LCDispatcher\\r\\nCACHE-CONTROL: no-cache\\r\\nSERVER: HP-ChaiSOE/([\\d.]+)\\r\\n-ONNECTION: Keep-Alive\\r\\n\\r\\n| p/HP-ChaiSOE/ v/$1/ i/HP LaserJet http config/ d/printer/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html;charset=ISO-8859-1\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n<HTML> \\n<HEAD>\\n<TITLE> | p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet http config/ d/printer/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\nLocation: https://([\\d.]+)/\\r\\nContent-Type: text/html\\r\\nContent-Length: 90\\r\\n\\r\\n<HEAD><TITLE>Moved</TITLE></HEAD><BODY>| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP Color LaserJet 3500 http config/ d/printer/ h/$2/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:color_laserjet_3500/a\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\nAccept-Ranges: none\\r\\nLocation: https://([\\d.]+)/\\r\\nContent-Type: text/html\\r\\nContent-Length: 90\\r\\n\\r\\n| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP Officejet Pro L7680 http config/ d/printer/ h/$2/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:officejet_pro_l7680/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\n.*\\n\\n\\n<title> HP Color LaserJet 2840  /|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP Color LaserJet 2840 http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:color_laserjet_2840/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\n.*<title>HP Officejet Pro (\\w+)(?: A\\w+)?</title>\\n|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP Officejet Pro $2 http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:officejet_pro_$2/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\n.*<title>HP Officejet (\\w+) series</title>|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP Officejet $2 http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:officejet_$2/a\nmatch http m%^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?.*\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html; ?charset=UTF-8\\r\\nExpires: .*<title>HP (Color |)LaserJet ([\\w._ -]+)&nbsp;&nbsp;&nbsp;%si p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP $2LaserJet $3 printer http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\n.*<title>HP LaserJet (\\w+)&nbsp;&nbsp;&nbsp;|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet $2 printer http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:laserjet_$2/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d Server: \\$ProjectRevision: ([\\w._-]+) \\$\\r\\n.*<title>HP LaserJet (\\w+)&nbsp;&nbsp;&nbsp|s p/HP LaserJet $2 printer http config/ v/$1/ d/printer/ cpe:/h:hp:laserjet_$2/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\n.*<title>HP Photosmart ([\\w._+-]+) series</title>|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP Photosmart $2 series printer http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m=^HTTP/1\\.1 [45]\\d\\d .*\\r\\nServer: HP HTTP Server; (?:HP )+([^-]+) (?:series |MFP )?- \\w+; Serial Number: (\\w+);=s p/HP $1 printer http config/ i/Serial $2/ d/printer/ cpe:/h:hp:$1/\nmatch ipp m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nServer: HP HTTP Server; HP ([^;]+?) - (\\w+); Serial Number: (\\w+); (?:[\\w_]+ )?Built:[^{]+ {\\w+, ASIC id 0x[\\da-f]+}\\r\\n\\r\\n$| p/HP $1 ipp/ i/model $2; serial $3/ d/printer/ cpe:/h:hp:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: \\$ProjectRevision: ([\\w._-]+) \\$\\r\\n.*<title>HP LaserJet (\\w+)</title>|s p/HP LaserJet $2 printer http config/ v/$1/ d/printer/ cpe:/h:hp:laserjet_$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: \\$ProjectRevision: ([\\w._-]+) \\$\\r\\n.*<title>HP Color LaserJet (\\w+)</title>|s p/HP Color LaserJet $2 http config/ v/$1/ d/printer/ cpe:/h:hp:laserjet_$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: \\$ProjectRevision: ([\\w._-]+) \\$\\r\\n.*<title>HP LaserJet (\\w+)(?: MFP)&nbsp;&nbsp;&nbsp;[\\d.]+</title>|s p/HP LaserJet $2 printer http config/ v/$1/ d/printer/ cpe:/h:hp:laserjet_$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: \\$ProjectRevision: ([\\w._-]+) \\$\\r\\n.*<title>HP LaserJet Professional (\\w+)&nbsp;&nbsp;&nbsp;[\\d.]+</title>|s p/HP LaserJet $2 printer http config/ v/$1/ d/printer/ cpe:/h:hp:laserjet_$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nTransfer-Encoding: chunked\\r\\n.*<title>\\r\\n[0-9A-F]+\\r\\nHP LaserJet Professional (\\w+)\\r\\n|s p/HP LaserJet $1 printer http config/ d/printer/ cpe:/h:hp:laserjet_$1/\n\nmatch http m|^HTTP/1\\.0 200 OK\\nServer: stats\\.mod/(\\d[-.\\w]+)\\n| p/Eggdrop stats.mod web statistics module/ v/$1/ cpe:/a:eggheads:eggdrop/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: PPR-httpd/(\\d[-.\\w]+)\\r\\n| p/PPR print spooling daemon ppradmin/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: RAC_ONE_HTTP (\\d[-.\\w]+)\\r\\n| p/Dell Embedded Remote Access card httpd/ v/$1/ d/terminal server/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>EpsonNet WebAssist Rev\\.(\\d[-.\\w]+)</TITLE>| p/EpsonNet WebAssist printer configuration/ v/$1/ d/printer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><META HTTP-EQUIV=\\\"Content-type\\\" CONTENT=\\\"text/html; charset=iso-8859-1\\\">\\r\\n<TITLE>Lexmark ([-/.+\\w]+)</TITLE>| p/Lexmark printer webadmin/ i/Lexmark $1/ d/printer/\n# GenericLines has Server: thttpd.\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nExpires: Sun, 27 Feb 1972 08:00:00 GMT\\r\\n.*<title>Lexmark ([\\w._/ +-]+)</title>|s p/thttpd/ i/Lexmark $1 printer http config/ d/printer/ cpe:/a:acme:thttpd/ cpe:/h:lexmark:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\nServer: III (\\d[-.\\w]+)\\n| p/Innovative Interfaces Innopac httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"CISCO_WEB\\\"\\r\\n| p/Cisco DSL router webadmin/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/([\\w.]+)\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Cisco Systems, Inc\\.</TITLE>.*Cisco IP Phone ([-\\w_]+)|s p/Allegro RomPager/ v/$1/ i/Cisco IP Phone $2/ d/VoIP phone/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nRAKeepAliveHeader: \\.+\\r\\n| p/RemotelyAnywhere remote PC management httpd/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: RemotelyAnywhere/([\\d.]+)\\r\\n|s p/RemotelyAnywhere remote PC management httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Ipswitch-IMail/(\\d[-.\\w]+)\\r\\n| p/Ipswitch IMail web service/ v/$1/ o/Windows/ cpe:/a:ipswitch:imail:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: IMail_Monitor/(\\d[-.\\w]+)\\r\\n| p/Ipswitch IMail Monitor web service/ v/$1/ o/Windows/ cpe:/a:ipswitch:imail:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Ipswitch Web Calendaring /(\\d[-.\\w]+)\\r\\n| p/Ipswitch IMail Web Calendar/ v/$1/ o/Windows/ cpe:/a:ipswitch:imail:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSet-Cookie:WhatsUp={[-\\w]+}; path=/\\r\\nContent-Type: text/html\\r\\nServer: Ipswitch ([\\d.]+)\\r\\n| p/Ipswitch WhatsUp httpd/ v/$1/ o/Windows/ cpe:/a:ipswitch:whatsup/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\n\\r\\n<html><head><title>Authentication Form</title></head><BODY BGCOLOR=\\\"#000000\\\" TEXT=\\\"#00FF00\\\"><p><h3 align=left><font face=\\\"arial,helvetica\\\">Client Authentication Remote Service</font>| p/Check Point Firewall-1 Client Authentication httpd/ cpe:/a:checkpoint:firewall-1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\n\\r\\n.*<title>\\n  Authentication Form.*Client Authentication Remote \\nService</font>.*FireWall-1 message: User: <p> <P>\\n|s p/Check Point Firewall-1 Client Authentication httpd/ cpe:/a:checkpoint:firewall-1/\nmatch http m|^HTTP/1\\.0 200\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<TITLE>Error</TITLE>\\n<BODY>\\n<H1>Error</H1>\\nFW-1 at ([-\\w_.]+): Failed to connect to the WWW server\\.</BODY>\\r\\n| p/Check Point Firewall-1 httpd/ h/$1/ cpe:/a:checkpoint:firewall-1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"FW-1\\\"\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<TITLE>Error</TITLE>\\n<BODY>\\n<H1>Error 401</H1>\\n\\nFW-1 at ([-\\w_.]+):| p/Check Point Firewall-1 httpd/ h/$1/ cpe:/a:checkpoint:firewall-1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nPragma: no-cache\\r\\n(?:X-Frame-Options: DENY\\r\\n)?Cache-Control: no-cache\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\"Content-type\" content=\"text/html; charset=iso-8859-1\">\\r\\n<title>Client Authentication</title>\\r\\n</head>\\r\\n<body bgcolor=\"#7E7E7E\">\\r\\n\\t<table style=\"color:white;\" width=\"100&#37\">| p/Check Point VPN-1 Client Authentication httpd/ cpe:/a:checkpoint:vpn-1/\n\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Check Point SVN foundation| p/Check Point SVN foundation httpd/ d/firewall/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: HP-UX_Apache-based_Web_Server/(\\d[-.\\w]+) (.*)\\r\\n| p/HP Apache-based httpd/ v/$1/ i/$2/ o/HP-UX/ cpe:/h:hp:apache-based_web_server:$1/ cpe:/o:hp:hp-ux/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: HP-UX_Apache-based_Web_Server\\r\\n| p/HP Apache-based httpd/ o/HP-UX/ cpe:/h:hp:apache-based_web_server/ cpe:/o:hp:hp-ux/a\nmatch http m|^HTTP/1\\.1 302 Moved\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\nLocation: /1[012]\\d{8}/l\\r\\n\\r\\n<H1>Document| p/Novell NetMail ModWeb webmail/ cpe:/a:novell:netmail/\nmatch http m=^GIF89a\\xa8\\0-\\0\\xf7\\0\\0\\x03\\x03\\x03\\x83\\x83\\x83\\xc4\\xc4\\xc4\\xfe\\x02\\x02\\xc9\\x85c\\x85|\\xb5\\xe2\\xe2\\xe2\\xca\\xa2\\x8e\\xd4RRCCC\\xdeb\\\"\\xa5\\xa5\\xa5\\xe7\\xc5= p/Tweak XP web advertisement blocker/\n# Management interface for Xerox Phaser printers.\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nExpires: .*\\r\\nLast-Modified: .*\\r\\nPragma: no-cache\\r\\nServer: Allegro-Software-RomPager/(\\d[-.\\w]+)\\r\\n\\r\\n<HTML>\\n<!--Copyright \\(c\\) Xerox Corporation | p/Allegro RomPager/ v/$1/ i/Xerox printer http admin/ d/printer/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nExpires: .*\\r\\nLast-Modified: .*\\r\\nPragma: no-cache\\r\\nServer: Allegro-Software-RomPager/(\\d[-.\\w]+)\\r\\n\\r\\n<html>\\n<head>\\n<title>\\nHome - \\nPhaser (\\w+)</title>\\n|s p/Allegro RomPager/ v/$1/ i/Xerox printer http admin; printer $2/ d/printer/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"CentreWare_IS_Admin\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n| p/Allegro RomPager/ v/$1/ i/Xerox Phaser http admin/ d/printer/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Type: text/html\\r\\nDate: .*Server: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n<html>\\n<head>\\n<title>\\nAccueil - \\nPhaser (\\w+)</title>|s p/Allegro RomPager/ v/$1/ i/Xerox printer webadmin; printer $2; French/ d/printer/ cpe:/a:allegro:rompager:$1:::fr/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\n.*<title>\\nXerox&nbsp;Phaser (\\w+)\\n-\\nStatus\\n</title>|s p/Xerox Phaser printer http admin/ i/model: $1/ d/printer/ cpe:/h:xerox:phaser_$1/\n\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nserver: IronPort httpd/(\\d[-.\\w]+)\\r\\n| p/IronPort mail appliance admin websever/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R(\\d[-.\\w]+)\\r\\nContent-Type: text/html\\r\\nExpires: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n\\n<html>\\n<head><title>(CopperJet [-.+\\w ]+)</title>| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Allied Data CopperJet ADSL modem; $2/ d/broadband router/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\nServer: dhttpd/(\\d[-.\\w]+)\\r\\n| p/dhttpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Snap Appliance, Inc\\./(\\d[-.\\w]+)\\r\\n| p/Snap Appliance storage system webadmin/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\n<FRAMESET COLS=\\\"105,\\*\\\" FRAMEBORDER=NO BORDER=0\\nFRAMESPACING=0>\\n<FRAME SRC=\\\"/side\\.html\\\" SCROLLING=NO>\\n<FRAME SRC=\\\"/startupdata\\.html\\\">\\n</FRAMESET>\\n</HTML>\\n$| p/Motorola cable modem webadmin/ d/broadband router/\nmatch http m|^HTTP/1\\.0 200 OK\\nDate: .*\\nServer: Intel NetportExpressPro/(\\d[-.\\w]+)\\n| p/Intel NetportExpress Pro print server webadmin/ v/$1/ d/print server/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nContent-Type: text/html; charset=\\\"utf-8\\\"\\r\\n\\r\\n<HTTP>\\r\\n<HEAD>\\r\\n  <TITLE>MythTV Status</TITLE>| p/MythTV Linux PVR webadmin/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\n# Very specific... Will probably have to be changed when MythTV changes their CSS...\nmatch http m|^HTTP/1\\.[01] 200 .*<style type=\\\"text/css\\\" title=\\\"Default\\\" media=\\\"all\\\">\\r\\n  <!--\\r\\n  body {|s p/MythTV Linux PVR webadmin/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: http://[-.+\\w]+:32\\d\\d\\d/\\r\\n\\r\\n$| p/Sun Solaris Management Console/ i/Apache Tomcat/ o/Solaris/ cpe:/a:apache:tomcat/ cpe:/o:sun:sunos/a\n# Cyclades PR2000 Router\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"PR2000 - Login\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/ ?([\\w.]+)\\r\\n\\r\\n.*</H1>This object on the Cyclades PR2000 - RomPager server is protected|s p/Allegro RomPager/ v/$1/ i/Cyclades PR2000 router http admin/ d/router/ cpe:/a:allegro:rompager:$1/\n# 3Com OfficeConnect 812 Router telnetd\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"OCR-([-.\\w]+)\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/(\\d[-.\\w]+)\\r\\n| p/Allegro RomPager/ v/$2/ i/3Com OfficeConnect Router http admin; OfficeConnect OCR-$1/ d/router/ cpe:/a:allegro:rompager:$2/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"APC Management Card\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/ ?([\\w.]+)\\r\\n\\r\\n| p/Allegro RomPager/ v/$1/ i/APC Management Web Server/ d/power-device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"PDU\\\"\\r\\nServer: Allegro-Software-RomPager/ ?([\\w.]+)\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Protected Object</TITLE>\\n</HEAD>\\n<BODY BGCOLOR=\\\"WHITE\\\">\\n<H1>Protected Object</H1>\\nThis object on the MasterSwitch Web Server is protected\\.| p/Allegro RomPager/ v/$1/ i/APC masterswitch http config/ d/power-device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"MasterSwitch Plus\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/ ?([\\w.]+)\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Protected Object</TITLE>.*This object on the APC Management Web Server is protected\\.|s p/Allegro RomPager/ v/$1/ i/APC masterswitch http config/ d/power-device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\">\\n.*<META NAME=Copyright CONTENT=\\\"Copyright \\(c\\) 2003 3Com Corporation\\. All Rights Reserved\\.\\\">\\n.*<META http-equiv=\\\"3Cnumber\\\" content=\\\"([-.\\w]+)\\\">\\n|s p/3Com OfficeConnect router webadmin/ i/3Com${backquote} $1/ d/router/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/ ?([\\w.]+)\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML//EN\\\">\\n\\n<html>\\n\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; iso-8859-1\\\">\\n<title>Summit Management Interface</title>|s p/Allegro RomPager/ v/$1/ i/Summit Management Interface/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/([\\w.]+)\\r\\n\\r\\n\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\">\\n<html>\\n<head>\\n<title>\\n([^&\\r\\n]+)&nbsp;- Status</title>|s p/Allegro RomPager/ v/$1/ i/Roku Sound Bridge http config; name $2/ d/media device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"\\r\\n\\r\\n<title>401 Unauthorized</title><body><h1>401 Unauthorized</h1></body>| p/Acer Warplink Firewall Router webadmin/ d/router/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Sitecom WL-([-.\\w]+)\\\"\\r\\n| p/Sitecom $1 http config/ d/WAP/ cpe:/h:sitecom:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"SitecomWL([\\w._-]+)\\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n401 Unauthorized\\.| p/Sitecom WL-$1 WAP http config/ d/WAP/ cpe:/h:sitecom:wl-$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\"><html><body bgcolor=\\\"#C0C0C0\\\" text=\\\"#000000\\\" vlink=\\\"#800080\\\" link=\\\"#0000FF\\\"><P><h1>TempTrax Digital Thermometer</h1>| p/SensaTronics TempTrax Digital Thermometer/ d/specialized/\nmatch http m|^HTTP/1\\.1 401 Unauthorised\\r\\nServer: Zeus/(\\d[-.\\w]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: basic realm=\\\"Zeus Admin Server\\\"\\r\\n|s p/Zeus httpd Admin Server/ v/$SUBST(1,\"_\",\".\")/ cpe:/a:zeus:zeus_web_server:$SUBST(1,\"_\",\".\")/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Zeus/(\\d[-.\\w]+)\\r\\n|s p/Zeus httpd/ v/$1/ cpe:/a:zeus:zeus_web_server:$1/\nmatch http m|^HTTP/1\\.0 404 File not Found\\r\\nServer: SPiN ChatSystem/(\\d[-.\\w]+)\\r\\n| p/SPiN web chat system/ v/$1/\n\n# IP_SHARER WEB\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\">\\n\\n<html><head><title>Setup</title>| p/IP_SHARER WEB/ v/$1/ i/Siemens SpeedStream SS2601/ d/router/ cpe:/a:siemens:ip_sharer_web:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\nunknown \\(([\\d.]+)\\) is managing this device| p/IP_SHARER WEB/ v/$1/ i/TRENDnet router http config; being managed by $2/ d/router/ cpe:/a:trendnet:ip_sharer_web:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\n.*<meta name=\\\"description\\\" content=\\\"Belkin (\\d+)\\\">|s p/IP_SHARER WEB/ v/$1/ i/Belkin $2 wifi router http config/ d/WAP/ cpe:/a:belkin:ip_sharer_web:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\n.*<title>Setup</title>.*type=\\\"text/javascript\\\">\\nfunction loadnext\\(\\)|s p/IP_SHARER WEB/ v/$1/ i/TRENDnet TW100-BRV204 router http config; no admin pass/ d/router/ cpe:/a:trendnet:ip_sharer_web:$1/ cpe:/h:trendnet:tw100-brv204/a\nmatch http m=^HTTP/1\\.0 200 OK\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\n.*<title>TRENDnet \\| TW100-BRF114 \\| Setup</title>=s p/IP_SHARER WEB/ v/$1/ i/TRENDnet TW100-BRF114 router http config/ d/router/ cpe:/a:trendnet:ip_sharer_web:$1/ cpe:/h:trendnet:tw100-brf114/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"NETGEAR WP([-\\w+]+)\\\"\\r\\n\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Netgear $2 WAP http config/ d/WAP/ cpe:/a:netgear:ip_sharer_web:$1/ cpe:/h:netgear:$2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(AT-\\w+)\\\"\\r\\nContent-type: text/html\\r\\n\\r\\n401 Unauthorized| p/IP_SHARER WEB/ v/$1/ i/Allied Telesyn $2 WAP http config/ d/broadband router/ cpe:/a:alliedtelesyn:ip_sharer_web:$1/ cpe:/h:alliedtelesyn:$2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"BEFSR41W\\\"\\r\\nContent-type: text/html\\r\\n\\r\\n401 Unauthorized| p/IP_SHARER WEB/ v/$1/ i/Linksys BEFSR41W router http config/ d/router/ cpe:/a:linksys:ip_sharer_web:$1/ cpe:/h:linksys:befsr41w/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(DG[\\w]+)\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Netgear $2 WAP http config/ d/WAP/ cpe:/a:netgear:ip_sharer_web:$1/ cpe:/h:netgear:$2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(FM\\w+)\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Netgear $2 http config/ d/broadband router/ cpe:/a:netgear:ip_sharer_web:$1/ cpe:/h:netgear:$2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(FR[-.\\w+]+)\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Netgear $2 firewall router http config/ d/router/ cpe:/a:netgear:ip_sharer_web:$1/ cpe:/h:netgear:$2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"NeedPassword\\\"\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n401 Unauthorized$| p/IP_SHARER WEB/ v/$1/ i/TRENDnet TW100-BRV204 router http config; admin pass set/ d/router/ cpe:/a:trendnet:ip_sharer_web:$1/ cpe:/h:trendnet:tw100-brv204/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"NeedPassword\\\"\\r\\nContent-type: text/html\\r\\n\\r\\n401 Unauthorized| p/IP_SHARER WEB/ v/$1/ i|Airlink/Sitecom wireless router| d/router/ cpe:/a:airlink:ip_sharer_web:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(NR[\\w+]+)\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Netgear $2 router http config/ d/router/ cpe:/a:netgear:ip_sharer_web:$1/ cpe:/h:netgear:$2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(WGPS[\\w+]+)\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Netgear $2 print server http config/ d/print server/ cpe:/a:netgear:ip_sharer_web:$1/ cpe:/h:netgear:$2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"WRT54GC\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Linksys WRT54GC http config/ d/WAP/ cpe:/a:linksys:ip_sharer_web:$1/ cpe:/h:linksys:wrt54gc/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"WYR-G54\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Buffalo Airstation WYR-G54 WAP http config/ d/WAP/ cpe:/a:buffalo:ip_sharer_web:$1/ cpe:/h:buffalo:airstation_wyr-g54/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\">\\n<html><head>\\n<meta name=\\\"description\\\" content=\\\"SOHO Version ([\\d.]+)\\\">\\n\\n<title>Setup</title>\\n| p/IP_SHARER WEB/ v/$1/ i/SpeedStream router http config; SOHO Version $2/ d/router/ cpe:/a:speedstream:ip_sharer_web:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nContent-type: text/html\\r\\n\\r\\nunknown \\(.*\\) is managing this device| p/IP_SHARER WEB/ v/$1/ i/SpeedStream router http config/ d/router/ cpe:/a:speedstream:ip_sharer_web:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"FVS114\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Netgear ProSafe FVS114 firewall http config/ d/firewall/ cpe:/a:netgear:ip_sharer_web:$1/ cpe:/h:netgear:prosafe_fvs114/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"FWG114P\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Netgear FWG114P wireless firewall http config/ d/firewall/ cpe:/a:netgear:ip_sharer_web:$1/ cpe:/h:netgear:fwg114p/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"MR814v2\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Netgear MR814v2 wireless router http config/ d/router/ cpe:/a:netgear:ip_sharer_web:$1/ cpe:/h:netgear:mr814v2/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(WGR614[^\"]*)\\\"\\r\\n| p/IP_SHARER WEB/ v/$1/ i/Netgear $2 router http config/ d/router/ cpe:/a:netgear:ip_sharer_web:$1/ cpe:/h:netgear:$2/a\n\n# PRINT_SERVER WEB\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\nServer: PRINT_SERVER WEB ([\\w._-]+)\\r\\n.*<meta name=\\\"description\\\" content=\\\"([\\w-]+) \\d+\\\">\\n\\n<title>NetGear Print Server Setup</title>|s p/PRINT_SERVER WEB/ v/$1/ i/Netgear $2 print server http config/ d/print server/ cpe:/a:netgear:print_server_web:$1/ cpe:/h:netgear:$2/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: PRINT_SERVER WEB ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"NeedPassword\\\"\\r\\nContent-type: text/html\\r\\n| p/PRINT_SERVER WEB/ v/$1/ i/Netgear Mini print server http config/ d/print server/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: PRINT_SERVER WEB ([\\w._-]+)\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>NETGEAR Setup</title>| p/PRINT_SERVER WEB/ v/$1/ i/Netgear print server http config/ d/print server/\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\nServer: PRINT_SERVER WEB ([\\w._-]+)\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\">\\n<html><head><title>NETGEAR Setup</title>| p/PRINT_SERVER WEB/ v/$1/ i/Netgear PS110 print server http config/ d/print server/ cpe:/h:netgear:ps110/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: PRINT_SERVER WEB ([\\d.]+)\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"NeedPassword\\\"\\r\\n\\r\\n401 Unauthorized$| p/PRINT_SERVER WEB/ v/$1/ i/Linksys wireless print server http config/ d/print server/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: PRINT_SERVER WEB ([\\d.]+)\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"NETGEAR PS121v2\\\"\\r\\n| p/PRINT_SERVER WEB/ v/$1/ i/Netgear PS121v2 print server http config/ d/print server/ cpe:/h:netgear:ps121v2/a\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\nServer: PRINT_SERVER WEB ([\\w._-]+)\\r\\n.*<title>Print Server Setup</title>.*name=\\\"main\\\" src=\\\"ps_stat\\.htm\\\"|s p/PRINT_SERVER WEB/ v/$1/ i/LevelOne FPS-3001TXU print server http config/ d/print server/ cpe:/h:levelone:fps-3001txu/a\n\n# Netgear FR314 Firewall Router\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: NETGEAR Firewall\\r\\n| p/Netgear FR-series firewall router http config/ d/router/\n# Netgear FVS318 Firewall/Router\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Netgear\\r\\nContent-Type: text/html\\r\\nPragma: no-cache\\r\\nLast Modified: .*\\r\\nConnection: close\\r\\n\\r\\n.*<title>\\r\\t\\t\\tNETGEAR Router \\r|s p/Netgear FVS318 router http config/ d/router/ cpe:/h:netgear:fvs318/a\n# Netgear RP614 firmware version 4.12\nmatch http m%^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"((?:RP|WGU)\\w+)\\\"\\r\\nServer: Embedded HTTPD v([\\w._-]+), % p/Delta Networks Embedded HTTPD $2/ i/Netgear $1 router http config/ d/broadband router/ cpe:/h:netgear:$1/\n# CiscoSecure ACS 3.1 on Windows 2000 Server\n# Cisco Secure ACS for Windows 2000\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nContent-length: \\d+\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>CiscoSecure ACS Login</title>| p/Cisco Secure ACS web interface/ o/Windows/ cpe:/a:cisco:secure_access_control_server/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nContent-length: \\d+\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>CiscoSecure ACS for Windows 2000/NT Login</title>\\r\\n| p/Cisco Secure ACS web interface/ o/Windows/ cpe:/a:cisco:secure_access_control_server/ cpe:/o:microsoft:windows/a\n# Pix Device Manager (PDM) version 3.01\nmatch http m|^HTTP/1\\.[01] 401 Unauthorized\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"PIX\\\"|s p/Cisco PIX Device Manager/ d/firewall/ cpe:/o:cisco:pix_firewall_software/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: DHost/(\\d[-.\\w]+) HttpStk/(\\d[-.\\w]+)\\r\\n| p/Novell eDirectory DHOST httpd/ v/$1/ i/HttpStk: $2; used by iMonitor/ o/Unix/ cpe:/a:novell:edirectory/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: 3ware/(\\d[-.\\w]+)\\r\\n| p/3Ware web interface/ v/$1/ i/RAID storage/\n\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Cherokee\\r\\n|s p/Cherokee httpd/ cpe:/a:cherokee-project:cherokee/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Cherokee/([-.\\w]+)\\r\\n|s p/Cherokee httpd/ v/$1/ cpe:/a:cherokee-project:cherokee:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Cherokee/([-.\\w]+) \\(Debian GNU/Linux\\)\\r\\n|s p/Cherokee httpd/ v/$1/ i/Debian/ o/Linux/ cpe:/a:cherokee-project:cherokee:$1/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Cherokee/([-.\\w]+) \\(Ubuntu\\)\\r\\n|s p/Cherokee httpd/ v/$1/ i/Ubuntu/ o/Linux/ cpe:/a:cherokee-project:cherokee:$1/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Cherokee/([-.\\w]+) \\(openSUSE Build Service\\)\\r\\n|s p/Cherokee httpd/ v/$1/ i/OpenSUSE/ o/Linux/ cpe:/a:cherokee-project:cherokee:$1/ cpe:/o:novell:opensuse/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Cherokee/([-.\\w]+) \\(Gentoo Linux\\)\\r\\n|s p/Cherokee httpd/ v/$1/ i/Gentoo/ o/Linux/ cpe:/a:cherokee-project:cherokee:$1/ cpe:/o:gentoo:linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Cherokee/([-.\\w]+) \\(UNIX\\)\\r\\n|s p/Cherokee httpd/ v/$1/ o/Unix/ cpe:/a:cherokee-project:cherokee:$1/\n\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: HomeSeer\\r\\n| p/HomeSeer Home Control Web Interface/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 401 \\r\\nWWW-Authenticate: Basic realm=\\\"HomeSeer\\d+\\\"\\r\\n\\r\\n| p/HomeSeer Home Control Web Interface/ o/Windows/ cpe:/o:microsoft:windows/a\n# Multitech MultiVoip 410 VoIP gateway\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: RTXCweb Software (\\d[-.\\w]+)\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<META HTTP-EQUIV=\\\"PRAGMA\\\" CONTENT=\\\"NO-CACHE\\\">\\r\\n<META HTTP-EQUIV=\\\"EXPIRES\\\" CONTENT=\\\"-1\\\">\\r\\n<script language = \\\"Javascript\\\">\\r\\nvar title_string = \\\" v \\[Firmware - [\\w ]+\\]| p/RTXCweb/ v/$1/ i/Multitech MultiVoip VoIP gateway http config/ d/VoIP adapter/\n# NetComm NB1300 ADSL Modem/Router\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: WindWeb/(\\d[-.\\w]+)\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"([-./\\w ]+)\\\"\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/WindWeb/ v/$1/ i/$2 router http config/ d/broadband router/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: SimpleServer:WWW/(\\d[-.\\w]+)\\r\\n| p/AnalogX SimpleServer httpd/ v/$1/ o/Windows/ cpe:/a:analogx:simpleserver_www:$1/ cpe:/o:microsoft:windows/a\n# Xitami - Try to match PHP first!\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nContent-Length: \\d+\\r\\nX-Powered-By: ([-/.\\w ]+)\\r\\nContent-Type: .*\\r\\nServer: Xitami\\r\\n| p/Xitami httpd/ i/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Xitami\\r\\n|s p/Xitami httpd/\nmatch http m|^ERROR: Malformed startup string$| p/Xitami httpd admin port/\nmatch http m|^HTTP/1\\.1 500 Server Error\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nServer: Radio UserLand/(\\d[\\w .]+)-([-.\\w ]+)\\r\\n\\r\\n| p/Radio Userland blog server/ v/$1/ i/$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: (?:prod )?[Ff]red (\\d[-.\\w]+) \\(build (\\d+)\\) HTTP Servlets\\r\\n\\r\\n|s p/Freenet Fred anonymous P2P/ v/$1 build $2/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: diva_httpd\\r\\n| p/Eicon Diva ISDN card configuration server/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Resin/(\\d[-.\\w]+)\\r\\n| p/Caucho Resin JSP engine/ v/$1/ cpe:/a:caucho:resin:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nMIME-Version: 1\\.0\\r\\nServer: linuxconf/(\\d[-.\\w]+)\\r\\n| p/Linuxconf web configuration server/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: TinyWeb/([\\d.]+)\\r\\n|s p/Tinyweb httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WebSitePro/(\\d[-.\\w]+)\\r\\n|s p/O'Reilly WebSite Pro/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Lucent Security Management Admin Server \\r\\n| p/Lucent Security Management Admin Server/ i/Lucent VPN Firewall/ cpe:/a:lucent:security_management_server/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: thttpd/(\\d[-.+\\w]+) ([\\w?]+)\\r\\n| p/thttpd/ v/$1 $2/ cpe:/a:acme:thttpd:$1_$2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: thttpd/(\\d[-.+\\w]+) ([\\w?]+) Built-in PHP| p/thttpd/ v/$1 $2/ i/Built-in PHP/ cpe:/a:acme:thttpd:$1_$2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: thttpd\\r\\n| p/thttpd/ cpe:/a:acme:thttpd/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: PHP/([\\d.]+)\\r\\nServer: thttpd/([\\w.]+) PHP/([\\d.]+)\\r\\n|s p/thttpd/ v/$2/ i/PHP $1 ($3)/ cpe:/a:acme:thttpd:$2/ cpe:/a:php:php:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: thttpd/([\\w.]+) PHP/([\\d.]+)\\r\\n|s p/thttpd/ v/$1/ i/PHP $2/ cpe:/a:acme:thttpd:$1/ cpe:/a:php:php:$2/\n\nmatch http m|^HTTP/1\\.[01] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FirstClass/(\\d[-.\\w]+)\\r\\n|s p/FirstClass/ v/$1/ cpe:/a:opentext:firstclass:$1/\nmatch http m|^HTTP/1\\.1 400 Bad request\\r\\nServer: Citrix Web PN Server\\r\\n| p/Citrix Metaframe ICA Browser/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: HP-ChaiServer/(\\d[-.\\w]+)\\r\\nContent-length: 0\\r\\n\\r\\n|s p/HP JetDirect printer webadmin/ i/HP-ChaiServer $1/ d/printer/\n# mldonkey-2.5-3 http port on Linux 2.4.21\nmatch http m|^HTTP/1\\.[01] 404 Not Found\\r\\nServer: MLdonkey\\r\\nConnection: close\\r\\nContent-Type: application/x-bittorrent\\r\\nContent-length: 0\\r\\n\\r\\n| p/MLDonkey multi-network P2P web interface/\nmatch http m%^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"(?:MLdonkey|P2P)\\\"\\r\\n% p/MLDonkey multi-network P2P web interface/\n# Docupoint Discovery 3.0(Apache) on Windows 2000 Professional\nmatch http m|^<html>\\r<head><title>Docupoint Discovery</title>\\r<META HTTP-EQUIV=\\\"Content-Type\\\" CONTENT=\\\"text/html; CHARSET=UTF-8\\\">\\r| p/Docupoint Discovery search engine/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.1//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml11/DTD/xhtml11\\.dtd\\\">\\n<html><head><title>BitTorrent download info</title>\\n?</head>\\n<body>\\n<h3>BitTorrent download info</h3>\\n<ul>\\n<li><strong>tracker version:</strong> (\\d[-.\\w]+)</li>|s p/BitTorrent P2P tracker/ v/$1/ i/bttrack.py/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: eMule\\r\\n.*<title>eMule (\\d[-.\\w]+) |s p/eMule P2P/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: eMule\\r\\n.*<title>eMule Plus (\\d[-.\\w]+) |s p/eMule Plus P2P/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: eMule\\r\\n.*<title>Web Interface ([\\w._-]+)</title>|s p/eMule P2P/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: eMule\\r\\n|s p/eMule P2P/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: embedded\\r\\n.*<title>eMule ([\\w._-]+) \\[MorphXT v([\\w._-]+)\\]|s p/eMule MorphXT P2P/ v|$1/$2|\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: aMule\\r\\n.*<title>aMule (\\d[-.\\w]+) - Web Control Panel</title>|s p/aMule P2P/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: aMule\\r\\n| p/aMule P2P/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Agent-ListenServer-HttpSvr/1\\.0\\r\\n.*<ComputerName>([-.\\w]+)</ComputerName><version>([\\d\\.]+)</version>|s p/Network Associates ePolicy Orchestrator/ v/$2/ h/$1/ cpe:/a:mcafee:epolicy_orchestrator_agent:$2/\n# Network Associates EPO 3.0\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Agent-ListenServer-HttpSvr/1\\.0\\r\\n.*<ComputerName>([-.\\w]+)</ComputerName>|s p/Network Associates ePolicy Orchestrator/ h/$1/ cpe:/a:mcafee:epolicy_orchestrator_agent/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nServer: Agent-ListenServer-HttpSvr/1\\.0\\r\\n| p/Network Associates ePolicy Orchestrator/ cpe:/a:mcafee:epolicy_orchestrator_agent/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nSPIPE-Authenticate: {[-\\w]+}\\r\\n\\r\\n$| p/Network Associates ePolicy Orchestrator/ cpe:/a:mcafee:epolicy_orchestrator_agent/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: [dD]ebut/(\\d[-.\\w]+)\\r\\n|s p/Debut embedded httpd/ v/$1/ i|Brother/HP printer http admin| d/printer/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: kpf\\r\\n| p/KDE Public Fileserver/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Netscape-FastTrack/(\\d[-.\\w]+)\\r\\n| p/Sun Iplanet httpd/ v/$1/ cpe:/a:netscape:fasttrack_server:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: dwhttpd/(\\d[-.\\w]+) \\(([^\\r\\n\\)]+)\\)\\r\\nContent-type: text/html\\r\\n\\r\\n.*<TITLE>AnswerBook2: Personal Library</TITLE>\\n|s p/Sun AnswerBook2 httpd/ v/$1/ i/$2/ cpe:/a:sun:solaris_answerbook2:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: enCoreXpress/(\\d[-.\\w]+)\\r\\n|s p/enCoreXpress MOO/ v/$1/ i|http://lingua.utdallas.edu/encore|\n# Lispweb 2.0 Allegro Common Lisp.\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nMime-Version: .*\\nServer: LispWeb (\\d[-.\\w]+) \\(acl\\)\\n| p/Lispweb httpd/ v/$1/\n# World Client for MDaemon (www.altn.com) on Windows 2000\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: WDaemon/(\\d[-.\\w]+)\\r\\n| p/World Client WDaemon httpd/ v/$1/ i/Alt-N MDaemon webmail/ o/Windows/ cpe:/a:altn:mdaemon/ cpe:/o:microsoft:windows/a\n# pop3proxy web interface from spambayes 1.0a5 on Linux\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\">\\r\\n<html>\\r\\n<head>\\r\\n<title id=\\\"title\\\">Home</title>\\r\\n<meta content=\\\"no-cache\\\" http-equiv=\\\"Pragma\\\"/>\\r\\n<meta content=\\\"no-cache\\\" http-equiv=\\\"Cache\\\"/>\\r\\n| p/Spambayes pop3proxy web interface/\n# Oracle XML Database - SuSe Linux 8.1 Personal, Linux 2.4.19, Oracle9i Database\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle XML DB/(Oracle[\\w]+ Enterprise Edition Release) (\\d[-.\\w]+) |s p/Oracle XML DB Enterprise Edition httpd/ v/$2/ i/$1/ cpe:/a:oracle:database_server:$2::enterprise/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle XML DB/Oracle Database\\r\\n|s p/Oracle XML DB Enterprise Edition httpd/ cpe:/a:oracle:database_server:::enterprise/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Oracle9iAS \\((\\d[-.\\w]+)\\) Containers for J2EE\\r\\n| p/Oracle 9iAS J2EE httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Oracle9iAS/(\\d[-.\\w]+) Oracle HTTP Server\\r\\n| p/Oracle 9iAS httpd/ v/$1/ cpe:/a:oracle:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Oracle9iAS\\r\\n| p/Oracle 9iAS httpd/ cpe:/a:oracle:http_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nAllow: .*\\r\\nServer: Oracle9iAS-Web-Cache/(\\d[-.\\w]+)\\r\\n| p/Oracle 9iAS Web Cache/ v/$1/ cpe:/a:oracle:application_server_web_cache:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle9iAS/(\\d[-.\\w]+)  Lotus-Domino Oracle9iAS-Web-Cache/(\\d[-.\\w]+) |s p/Lotus Domino httpd/ i/Proxied by Oracle9iAS $1 Web Cache $2/ cpe:/a:ibm:lotus_domino_web_server/ cpe:/a:oracle:application_server_web_cache:$2/\nmatch http m|^HTTP/1\\.1 401 Unauthorized.*\\r\\nWWW-Authenticate:.*\\r\\nDate:.*\\r\\nServer:Criston Precision Agent (\\d[-_.\\w]+)| p/Criston Precision Agent/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: ALT-N SecurityGateway ([0-9]+.[0-9]+.[0-9]+)| p/ALT-N SecurityGateway httpd/ v/$1/\n\n# ntop - lots of submissions\nmatch ntop-http m|^HTTP/1\\.0 \\d\\d\\d .*\\nServer: ntop/(\\d[-.\\w]+) [^\\r\\n]*\\([\\w\\d-]*linux[\\w\\d-]*\\)\\r?\\n|s p/Ntop web interface/ v/$1/ o/Linux/ cpe:/a:ntop:ntop:$1/ cpe:/o:linux:linux_kernel/a\nmatch ntop-http m|^HTTP/1\\.0 \\d\\d\\d .*\\nServer: ntop/(\\d[-.\\w]+) \\([\\w\\d.-]*freebsd[\\w\\d.-]*\\)\\r?\\n|s p/Ntop web interface/ v/$1/ o/FreeBSD/ cpe:/a:ntop:ntop:$1/ cpe:/o:freebsd:freebsd/a\nmatch ntop-http m|^HTTP/1\\.0 \\d\\d\\d .*\\nServer: ntop/(\\d[-.\\w]+) \\(([-.\\w]+)\\)\\n|s p/Ntop web interface/ v/$1/ i/$2/ cpe:/a:ntop:ntop:$1/\nmatch ntop-http m|^HTTP/1\\.0 \\d\\d\\d .*\\nServer: ntop/(\\d[-.\\w]+) \\([^\\)\\r]+\\)\\r\\n|s p/Ntop web interface/ v/$1/ cpe:/a:ntop:ntop:$1/\nmatch ntop-http m|^HTTP/1\\.0 \\d\\d\\d .*Server: ntop/([-\\w_.]+)|s p/Ntop web interface/ v/$1/ cpe:/a:ntop:ntop:$1/\nmatch ntop-http m|^HTTP/1\\.0 401 Unauthorized to access the document\\nWWW-Authenticate: Basic realm=\\\"ntop HTTP server\\\"\\n| p/Ntop web interface/ cpe:/a:ntop:ntop/\nmatch ntop-http m|^HTTP/1\\.0 \\d\\d\\d .*Server: ntop/([\\d.]+) SourceForge \\.tgz \\(([-\\w_.]+)\\)\\r\\n|s p/Ntop web interface/ v/$1 SourceForge .tgz/ i/platform $2/ cpe:/a:ntop:ntop:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apt-proxy (\\d[-.\\w]+)\\r\\n|s p/Debian Apt-proxy/ v/$1/\nmatch http m|^HTTP/1\\.0 404 NON-EXISTENT BACKEND\\r\\n\\r\\n$| p/Debian Apt-proxy/ i/Broken: no backend/\n# This one is too general; I'm not including it -Doug\n#match http m|^HTTP/1\\.0 404 Not Found(\\r\\nConnection: close)?\\r\\n\\r\\n$| p/Debian Apt-proxy/\n\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: eHTTP v([\\w._-]+)\\r\\n.*<title>\\s*([\\w._-]+)\\s*-\\s*(?:HP )?(?:\\w+ )?ProCurve Switch ([\\w._-]+)|s p/eHTTP/ v/$1/ i/HP ProCurve Switch $3 http config/ h/$2/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:procurve_switch_$3/ cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: eHTTP v([\\w._-]+)\\r\\n.*<title>\\s*(?:HP )?(?:\\w+\\s+)?ProCurve Switch ([\\w._-]+)|s p/eHTTP/ v/$1/ i/HP ProCurve Switch $2 http config/ d/switch/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:procurve_switch_$2/ cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: eHTTP v([\\w._-]+)\\r\\n.*<title>\\s*([\\w._-]+)\\s*-\\s*(?:HP )?(?:\\w+ )?ProCurve ([\\w._-]+) Switch|s p/eHTTP/ v/$1/ i/HP ProCurve Switch $3 http config/ h/$2/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:procurve_switch_$3/ cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: eHTTP v([\\w._-]+)\\r\\n.*<title>\\s*(?:HP )?(?:\\w+\\s+)?ProCurve ([\\w._-]+) Switch|s p/eHTTP/ v/$1/ i/HP ProCurve Switch $2 http config/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:procurve_switch_$2/ cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: eHTTP v([\\w._-]+)\\r\\n.*<title>\\s*([ \\w._-]+?)\\s*-\\s*(?:HP )?(?:\\w+ )?ProCurve Switch ([\\w._-]+)|s p/eHTTP/ v/$1/ i/HP ProCurve Switch $3 http config; \"$2\"/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:procurve_switch_$3/ cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: eHTTP v([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"HP ([-.\\w]+)\\\"\\r\\n\\r\\n|s p/eHTTP/ v/$1/ i/HP $2 http config/ d/switch/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:$2/a cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: eHTTP v([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"ProCurve (J\\w+)\\\"\\r\\n\\r\\n|s p/eHTTP/ v/$1/ i/HP ProCurve Switch $2 http config/ d/switch/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:procurve_switch_$2/ cpe:/o:hp:procurve_switch_software/\n# HP ProCurve 1810G - 24 GE, P.2.2, eCos-2.0, CFE-2.1\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Web Server\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n\\r\\n   <!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\">\\n<HTML>\\n<HEAD>\\n   <TITLE>Login</TITLE>| p/HP ProCurve Switch 1810G http config/ d/switch/ cpe:/h:hp:procurve_switch_1810g/ cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: eHTTP v([\\w._-]+)\\r\\n.*<title>HP Virtual Stack</title>\\n<!-- Changed by: Jon A\\. LaRosa, 26-Apr-2000 -->\\n|s p/eHTTP/ v/$1/ i/HP ProCurve Switch 2626 http config/ d/switch/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:procurve_switch_2626/ cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: eHTTP v([\\w._-]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 115\\r\\nCache-Control: no-cache\\r\\nSet-Cookie: sessionId =;path=/; postId=[^;]*; \\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\\\"Refresh\\\"\\r\\ncontent=\\\"1;url=html/nhome\\.html\\\">\\r\\n</head>\\r\\n\\r\\n<body>\\r\\n</body>\\r\\n</html>\\r\\n| p/eHTTP/ v/$1/ i/HP 2530 switch http config/ d/switch/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:2530/\n# 5406zl, 2920-POE+, 2530-48G\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: eHTTP v([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: sessionId ?=\\w|s p/eHTTP/ v/$1/ i/HP switch http config/ d/switch/ cpe:/a:ehttp:ehttp:$1/\n\n\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Sun-ONE-Application-Server/([\\w._-]+)\\r\\n|s p/Sun ONE Application Server/ v/$1/ cpe:/a:sun:one_application_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: SunONE WebServer ([\\w._-]+)\\r\\n|s p/Sun ONE Web Server/ v/$1/ cpe:/a:sun:one_web_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Sun-ONE-Web-Server/([\\w._-]+)\\r\\n|s p/Sun ONE Web Server/ v/$1/ cpe:/a:sun:one_web_server:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Sun ONE Web Server ([\\w._-]+)\\r\\n|s p/Sun ONE Web Server/ v/$1/ cpe:/a:sun:one_web_server:$1/\n\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: IBM_HTTP_Server/(\\d[-.\\w]+) +(?:Apache/)?(\\d[-.\\w]+) \\(([^\\r\\n]+)\\)\\r\\n|i p/IBM HTTP Server/ v/$1/ i/Derived from Apache $2; $3/ cpe:/a:ibm:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: IBM_HTTP_Server/(\\d[-.\\w]+) +(?:Apache/)?(\\d[-.\\w]+)\\r\\n|i p/IBM HTTP Server/ v/$1/ i/Derived from Apache $2/ cpe:/a:ibm:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: IBM_HTTP_SERVER/(\\d[-.\\w]+) +Apache/(\\d[-.\\w]+) \\(Unix\\) DAV/([\\d.]+)\\r\\n| p/IBM HTTP Server/ v/$1/ i/Derived from Apache $2; DAV $3/ o/Unix/ cpe:/a:ibm:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: IBM_HTTP_SERVER/(\\d[-.\\w]+) +Apache/(\\d[-.\\w]+) \\(Unix\\) PHP/([\\d.]+)\\r\\n| p/IBM HTTP Server/ v/$1/ i/Derived from Apache $2; PHP $3/ o/Unix/ cpe:/a:ibm:http_server:$1/ cpe:/a:php:php:$3/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: IBM_HTTP_SERVER/(\\d[-.\\w]+) +Apache/(\\d[-.\\w]+) \\(Unix\\) mod_jk\\r\\n| p/IBM HTTP Server/ v/$1/ i/Derived from Apache $2; using mod_jk/ o/Unix/ cpe:/a:ibm:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: IBM_HTTP_Server/(\\d[-.\\w]+) (Apache/.*)\\r\\n| p/IBM HTTP Server/ v/$1/ i/Derived from $2/ cpe:/a:ibm:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: IBM_HTTP_Server/(\\d[-.\\w]+) (Apache/.*) \\(Win32\\)\\r\\n|s p/IBM HTTP Server/ v/$1/ i/Derived from $2/ o/Windows/ cpe:/a:ibm:http_server:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: IBM_HTTP_Server/(\\d[-.\\w]+) \\(Win32\\)\\r\\n|s p/IBM HTTP Server/ v/$1/ i/Derived from Apache/ o/Windows/ cpe:/a:ibm:http_server:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: IBM_HTTP_Server/(\\d[-.\\w]+) \\(Unix\\)\\r\\n|s p/IBM HTTP Server/ v/$1/ i/Derived from Apache/ o/Unix/ cpe:/a:ibm:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: IBM_HTTP_Server\\r\\n| p/IBM HTTP Server/ i/Derived from Apache/ cpe:/a:ibm:http_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: IBM_HTTP_Server\\r\\n|s p/IBM HTTP Server/ i/Derived from Apache/ cpe:/a:ibm:http_server/\n\n\n# Embedded HTTP Server: http://xaxxon.slackworks.com/ehs/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Embedded HTTP Server ([\\w_.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(USR\\d+)\\\"\\r\\nConnection: close\\r\\n\\r\\n| p/Embedded HTTP Server/ v/$1/ i/USRobotics $2 wireless router http config/ d/router/ cpe:/h:usrobotics:$2/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Embedded HTTP Server *([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"DI-(\\w+) *\\\"\\r\\n| p/Embedded HTTP Server/ v/$1/ i/D-Link DI-$2 http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Embedded HTTP Server v([\\w._-]+)\\r\\n.*<body bgcolor=\\\"#DAE3EB\\\"|s p/Embedded HTTP Server/ v/$1/ i/SMC wireless router http config/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Embedded HTTP Server v([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"DWL-810\\+\\\"\\r\\n| p/Embedded HTTP Server/ v/$1/ i/D-Link DWL-810+ WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Embedded HTTP Server V([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(DWL-[\\w+-.]+)\\\"\\r\\n| p/Embedded HTTP Server/ v/$1/ i/D-Link $2 WAP http config/ d/WAP/ cpe:/h:dlink:$2/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Embedded HTTP Server USR([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"([^\"]+)\\\"\\r\\nConnection: close\\r\\n\\r\\n<| p/Embedded HTTP Server/ v/$1/ i/USRobotics router http config; name $2/ d/router/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Embedded HTTP Server ([\\w._-]+)    \\r\\nWWW-Authenticate: Basic realm=\\\"([^\"]+)\\\"\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#ffffff\\\"><H4>401 Unauthorized</H4></BODY></HTML>\\n$| p/Embedded HTTP Server/ v/$1/ i/D-Link DWL-9000+ WAP http config; name $2/ d/WAP/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Embedded HTTP Server ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"AP0F1D85\\\"\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#ffffff\\\"><H4>401 Unauthorized</H4></BODY></HTML>\\n| p/Embedded HTTP Server/ v/$1/ i/Topcom skyracer 544 router http config/ d/router/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Embedded HTTP Server ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"([^\"]+)\\\".*\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#ffffff\\\"><H4>401 Unauthorized</H4></BODY></HTML>\\n|s p/Embedded HTTP Server/ v/$1/ i/D-Link DWL-624 WAP http config; name $2/ d/WAP/ cpe:/h:dlink:dwl-624/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Embedded HTTP Server ([\\w._ -]+)\\r\\nWWW-Authenticate: Basic realm=\\\"AP-Router\\\"\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#ffffff\\\"><H4>401 Unauthorized</H4></BODY></HTML>\\n| p/Embedded HTTP Server/ v/$1/ i/Topcom wireless router http config/ d/router/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Embedded HTTP Server ([\\w._-]+) *\\r\\nWWW-Authenticate: Basic realm=\\\"(DWL-[-+.\\w]+)\\\"\\r\\n| p/Embedded HTTP Server/ v/$1/ i/D-Link $2 http config/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Embedded HTTP Server ([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"([-+.\\w]+)\\\"\\r\\nConnection:| p/Embedded HTTP Server/ v/$1/ i/D-Link $2 http config/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Embedded HTTP Server v([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(DWL-[-+.\\w]+)\\\"\\r\\nConnection: close\\r\\n\\r\\n| p/Embedded HTTP Server/ v/$1/ i/D-Link $2 http config/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Embedded HTTP Server V([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"802\\.11g Wireless Broadband Router\\\"\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#ffffff\\\"><H4>401 Unauthorized</H4></BODY></HTML>\\n| p/Embedded HTTP Server/ v/$1/ i/Topcom Skyr@cer WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: Embedded HTTP Server\\.\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"0; URL=/cgi-bin/welcome\\.cgi\\\">|s p/Embedded HTTP Server/ i/Linksys RVL200 VPN router http config/ d/router/ cpe:/h:linksys:rvl200/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: Embedded HTTP Server\\.\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"0; URL=/scgi-bin/index\\.htm\\\">|s p/Embedded HTTP Server/ i/Netgear ProSafe firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: Embedded HTTP Server\\.\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"0; URL=/scgi-bin/platform\\.cgi\\\">|s p/Embedded HTTP Server/ i/Cisco firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Embedded Web Server\\r\\n.*<TITLE>Enterasys Login</TITLE>|s p/Embedded HTTP Server/ i/Enterasys C5124 switch http config/ d/switch/ cpe:/h:enterasys:c5124/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Embedded HTTP Server ([\\d.]+)\\r\\n| p/Embedded HTTP Server/ v/$1/\n# The \"malformed or illegal\" matches a Boa server elsewhere in the file.\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\nServer: Embedded HTTP Server\\.\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\n<BODY><H1>400 Bad Request</H1>\\nYour client has issued a malformed or illegal request\\.\\n</BODY></HTML>\\n$| p/Boa httpd/ i/BillionGuard router/ d/router/ cpe:/a:boa:boa/\n# Maybe a different \"Embedded HTTP Server.\"\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"VPN\\\"\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nServer: Embedded HTTP Server v([\\d.]+), \\d+, Magic Control Technology Inc\\.\\r\\n\\r\\n| p/Magic Control Technology Embedded HTTP Server/ v/$1/ i/IOGear BOSS http config/ d/storage-misc/\n\n# D-Link DWL-1000AP webadmin\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: PSIWBL/(\\d[-.\\w]+)\\r\\nDate: .*Title: www\\r\\n\\r\\n<HTML>\\n <HEAD>\\n   <meta http-equiv=\\\"Refresh\\\" content=\\\"0; url=/startup/startup\\.shtml\\\">\\n </HEAD>\\n <BODY>\\n </BODY>\\n</HTML>$|s p/PSIWBL/ v/$1/ i/D-Link http config/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"(DIR-\\w+)\\\"\\r\\n|s p/D-Link $1 WAP http config/ d/WAP/ cpe:/h:dlink:$1/a\n# D-Link DWL-1000AP Wireless Access Point\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: PSIWBL/(\\d[-.\\w]+)\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Enter Password \\(Leave User Name Empty\\)\\\"\\r\\n| p/PSIWBL/ v/$1/ i/D-Link http config/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: WhatsUp_Gold/(\\d[-.\\w]+)\\r\\n| p/Ipswitch WhatsUp Gold/ v/$1/ cpe:/a:ipswitch:whatsup_gold:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"(MR[-.\\w]+)\\\"\\r\\nContent-Type: text/html\\r\\nServer: ZyXEL-RomPager/(\\d[-.\\w]+)\\r\\n\\r\\n| p/ZyXEL RomPager/ v/$2/ i|Netgear $1 WAP/router http config| d/WAP/ cpe:/a:zyxel:rompager:$2/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"(R[PT][-.\\w]+)\\\"\\r\\nContent-Type: text/html\\r\\nServer: ZyXEL-RomPager/(\\d[-.\\w]+)\\r\\n\\r\\n| p/ZyXEL RomPager/ v/$2/ i/Netgear $1 router http config/ d/router/ cpe:/a:zyxel:rompager:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ZyXEL-RomPager/([\\w._-]+)\\r\\n|s p/ZyXEL RomPager/ v/$1/ cpe:/a:zyxel:rompager:$1/\n# Netgear MR814 wireless router remote administration, Firmware 4.13 Aug 20 2003\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"(MR[-.+\\w]+)\\\"\\r\\nServer: Embedded HTTPD v(\\d[-.\\w]+), (.*)\\r\\n| p/Embedded HTTPD/ v/$2/ i/Netgear $1 WAP http config; $3/ d/WAP/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Prestige ([-.\\w ]+)\\\"\\r\\nContent-Type: text/html\\r\\nServer: ZyXEL-RomPager/(\\d[-.\\w ]+)\\r\\n\\r\\n| p/ZyXEL Prestige webadmin/ v/$2/ i/Prestige model $1/ cpe:/a:zyxel:rompager:$2/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Prestige ([-.\\w ]+)\\\"\\r\\nContent-Type: text/html\\r\\nServer: RomPager/(\\d[-.\\w ]+) ([-./\\w]+)\\r\\n\\r\\n| p/ZyXEL Prestige webadmin/ v/$2/ i/Prestige model $1; $3/ cpe:/a:zyxel:rompager:$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Roxen/(\\d[-.\\w]+)\\r\\n|s p/Roxen/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Roxen\\r\\n|s p/Roxen/\n# A-link (Avaks) Hasbani Web Server on RoadRunner 44b ADSL Router\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nServer: WindWeb/(\\d[-.\\w]+)\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Home Gateway\\\"\\r\\nContent-Type: text/html\\r\\n\\r\\nHasbani Web Server| p/WindWeb/ v/$1/ i/A-link Hasbani http config/ d/broadband router/ cpe:/a:windriver:windweb:$1/\n# Sambar Server V5.3 on Windows NT\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: SAMBAR ([\\d.]+)\\r\\n| p/Sambar/ v/$1/ cpe:/a:sambar:sambar_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: SAMBAR\\r\\n| p/Sambar/ cpe:/a:sambar:sambar_server/\nmatch http m|^HTTP/1\\.1 .*\\r\\nDate: .*\\r\\nServer: aEGiS_nanoweb/(\\d[-.\\w]+) \\(([^\\)]+)\\)\\r\\n| p/AEGiS Nanoweb httpd/ v/$1/ i/$2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WebLogic WebLogic Server (\\d[-.\\w]+(?: SP\\d+)?) +\\w\\w\\w|s p/WebLogic applications server/ v/$1/ cpe:/a:oracle:weblogic_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WebLogic ([\\d.]+) Service Pack (\\d+) [^\\r\\n]+\\r\\n|s p/WebLogic applications server/ v/$1/ i/Service Pack $2/ cpe:/a:oracle:weblogic_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: WebLogic Server ([\\d.]+ SP\\d+) | p/WebLogic httpd/ v/$1/ cpe:/a:oracle:weblogic_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Date: .*<META NAME=\\\"GENERATOR\\\" CONTENT=\\\"WebLogic Server\\\">\\n|s p/WebLogic httpd/ cpe:/a:oracle:weblogic_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Connection: close\\r\\nDate: .*\\nX-Powered-By: Servlet/([\\w._-]+) JSP/([\\w._-]+)\\r\\n|s p/Oracle WebLogic Server/ i/Servlet $1; JSP $2/ cpe:/a:oracle:jsp:$2/ cpe:/a:oracle:weblogic_server/\n# Samba 3.0.0rc4-Debian\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\\\"SWAT\\\"\\r\\n| p/Samba SWAT administration server/ cpe:/a:samba:samba/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nDate: .*\\n<TITLE>Samba Web Administration Tool</TITLE>|s p/Samba SWAT administration server/ cpe:/a:samba:samba/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>.*</TITLE></HEAD><BODY><H1>.*</H1>Samba is configured to deny access from this client\\n<br>Check your \\\"hosts allow\\\" and \\\"hosts deny\\\" options in smb\\.conf <p></BODY></HTML>\\r\\n\\r\\n$| p/Samba SWAT administration server/ i/Access denied/ cpe:/a:samba:samba/\nmatch http m|^HTTP/1\\.0 500 Server Error\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>500 Server Error</TITLE></HEAD><BODY><H1>500 Server Error</H1>chdir failed - the server is not configured correctly<p></BODY></HTML>\\r\\n\\r\\n| p/Samba SWAT administration server/ i/broken/ cpe:/a:samba:samba/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: icecast/(\\d[-.\\w]+)\\r\\n| p/Icecast streaming media server/ v/$1/ cpe:/a:xiph:icecast:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Icecast (\\d[-.\\w]+)\\r\\n| p/Icecast streaming media server/ v/$1/ cpe:/a:xiph:icecast:$1/\nmatch http m|^HTTP/1\\.0 404 Not Available\\r\\nContent-Type: text/html\\r\\n\\r\\n<b>Could not parse XSLT file</b>\\r\\n| p/Icecast streaming media server/ cpe:/a:xiph:icecast/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n.*<html>\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\">\\n<title>Icecast for ([\\w._-]+ \\[Station\\])</title>\\n<link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"style\\.css\\\">|s p/Icecast streaming media server/ i/$1/ cpe:/a:xiph:icecast/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d [^\\r\\n]*\\r\\n.*<title>Icecast Streaming Media Server</title>\\n|s p/Icecast streaming media server/ cpe:/a:xiph:icecast/\nmatch http m=^HTTP/1\\.1 200 OK\\r\\nContent-Type: (?:audio/mpeg|application/x-ogg)\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache, no-store\\r\\n\\r\\n= p/mpd/ i/Music Player Daemon streaming media server/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: HP-Web-Server-(\\d[-.\\w]+)\\r\\n.*<!-- framework\\.ini ([A-Z]:\\\\[-.\\w \\\\]+)-->|s p/HP Web Jetwebadmin/ v/$1/ i/framework.ini: $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: HP-Web-Server-(\\d[-.\\w]+)\\r\\n.*<!-- framework\\.ini (/[\\w\\\\/-_. ]+)-->|s p/HP Web Jetwebadmin/ v/$1/ i/framework.ini: $2/ o/Unix/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: HP Web Jetadmin (\\d[-.\\w]+)\\r\\n| p/HP Web Jetadmin print server http config/ v/$1/ d/print server/ cpe:/a:hp:web_jetadmin:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: HP Web Jetadmin/(\\d[-.\\w]+) (.*)\\r\\n| p/HP Web Jetadmin print server http config/ v/$1/ i/$2/ d/print server/ cpe:/a:hp:web_jetadmin:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: HP-Web-JetAdmin-(\\d[-.\\w]+)\\r\\n| p/HP Web Jetadmin print server http config/ v/$1/ d/print server/ cpe:/a:hp:web_jetadmin:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Tomcat Web Server/(\\d[-.\\w ]+) \\( ([^)]+) \\)\\r\\n|s p/Apache Tomcat/ v/$1/ i/$2/ cpe:/a:apache:tomcat:$1/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Tomcat Web Server/(\\d[-.\\w ]+)\\r\\n\\r\\n|s p/Apache Tomcat/ v/$1/ cpe:/a:apache:tomcat:$1/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Servlet-Engine: Tomcat Web Server/(\\d[-.\\w]+) \\(([^\\)]+)\\)\\r\\n|s p/Apache Tomcat/ v/$1/ i/$2/ cpe:/a:apache:tomcat:$1/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Servlet-Engine: Tomcat Web Server/(\\d[-.\\w]+) \\(([^\\)]+)\\) \\(([^\\)]+)\\)\\r\\n|s p/Apache Tomcat/ v/$1/ i/$2; $3/ cpe:/a:apache:tomcat:$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d [^\\r\\n]+\\r\\nContent-Type: text/html;charset=.*\\r\\nServer: Apache\\r\\n\\r\\n[\\r\\n]*<!DOCTYPE html>.*<title>Apache Tomcat/(\\d[\\w._-]+)(?: - Error report)?</title>|s p/Apache Tomcat/ v/$1/ cpe:/a:apache:tomcat:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: 3ware/(\\d[-.\\w]+)\\r\\n.*<title>3ware 3DM - No remote access</title>|s p/3Ware 3DM Raid Daemon/ v/$1/ i/Access denied/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: publicfile|s p/publicfile httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Apache\\r\\n.*<title>BIG-IP&reg;- Redirect</title>|s p/Apache httpd/ i/F5 BIG-IP load balancer/ d/load balancer/ cpe:/a:apache:http_server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Apache\\r\\n.*<title>VisualSVN Server</title>|s p/Apache httpd/ i/VisualSVN/ cpe:/a:apache:http_server/\n# X-KBOX-WebServer and X-KBOX-Version headers have same info\nmatch http m|^HTTP/1\\.1 200 OK\\r.*\\nServer: Apache\\r.*\\nX-DellKACE-Appliance: (\\w+)\\r\\nX-DellKACE-Host: ([\\w.-]+)\\r\\nX-DellKACE-Version: ([\\d.]+)\\r\\n|s p/Dell KACE Management Appliance/ v/$3/ i/model $1; Apache httpd/ d/remote management/ h/$2/ cpe:/a:dell:kace_$1_systems_management_appliance_software:$3/ cpe:/h:dell:kace_$1_systems_management_appliance/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nDate: .*\\r\\nServer: Apache\\r\\nWWW-Authenticate: Digest realm=\\\"Sage Digital ENDEC\\\"| p/Apache httpd/ i|SAGE Digital ENDEC EAS/CAP receiver unit| cpe:/a:apache:http_server/\n\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate: .*\\r\\nServer: Apache-AdvancedExtranetServer/(\\d[-.\\w]+) \\(Mandrake ?[Ll]inux/[-.\\w]+\\) (.*)\\r\\n| p/Apache Advanced Extranet Server httpd/ v/$1/ i/$2/ o/Linux/ cpe:/a:apache:http_server:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate: .*\\r\\nServer: Apache-AdvancedExtranetServer/(\\d[-.\\w]+) \\(Mandrake ?[Ll]inux/[-.\\w]+\\)\\r\\n| p/Apache Advanced Extranet Server httpd/ v/$1/ o/Linux/ cpe:/a:apache:http_server:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate: .*\\r\\nServer: Apache-AdvancedExtranetServer/(\\d[-.\\w]+) \\(Linux-Mandrake/[-.\\w]+\\)\\r\\n| p/Apache Advanced Extranet Server httpd/ v/$1/ o/Linux/ cpe:/a:apache:http_server:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate: .*\\r\\nServer: Apache-AdvancedExtranetServer/(\\d[-.\\w]+) \\(Linux-Mandrake/[-.\\w]+\\) (.*)\\r\\n| p/Apache Advanced Extranet Server httpd/ v/$1/ i/$2/ o/Linux/ cpe:/a:apache:http_server:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate: .*\\r\\nServer: Apache-AdvancedExtranetServer/(\\d[-.\\w]+)\\r\\n| p/Apache Advanced Extranet Server httpd/ v/$1/ o/Linux/ cpe:/a:apache:http_server:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate: .*\\r\\nServer: Apache-AdvancedExtranetServer\\r\\n|s p/Apache Advanced Extranet Server httpd/ o/Linux/ cpe:/a:apache:http_server/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate: .*\\r\\nServer: ?(.*) Apache-AdvancedExtranetServer/(\\d[-.\\w]+) \\(Mandrakelinux/[-.\\w]+\\) ?(.*)\\r\\n| p/Apache Advanced Extranet Server httpd/ v/$2/ i/$1 $3/ o/Linux/ cpe:/a:apache:http_server:$2/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate: .*\\r\\nServer: Apache-AdvancedExtranetServer/(\\d[-.\\w]+) \\(Mandriva Linux/PREFORK-([-\\w_.]+)\\) (.*)\\r\\n| p/Apache Advanced Extranet Server httpd/ v/$1/ i/Mandriva $2; $3/ o/Linux/ cpe:/a:apache:http_server:$1/ cpe:/o:mandriva:linux/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache-AdvancedExtranetServer/([\\d.]+) \\(Mandrakelinux/PREFORK-([-\\w_.]+)\\) ?([^\\r\\n]*)\\r\\n|s p/Apache Advanced Extranet Server httpd/ v/$1/ i/Mandrake $2; $3/ o/Linux/ cpe:/a:apache:http_server:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache Tomcat/(\\d[-.\\w]+)|s p/Apache Tomcat/ v/$1/ cpe:/a:apache:tomcat:$1/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nServer: Apache[- ]Coyote/(\\d[-\\d.]+)\\r\\n.*/Tomcat-(\\d[-\\d.]+)\\r\\n|s p|Apache Tomcat/Coyote JSP engine| v/$1/ i/Tomcat $2/ cpe:/a:apache:coyote_http_connector:$1/ cpe:/a:apache:tomcat:$2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nServer: Apache[- ]Coyote/(\\d[-\\d.]+)\\r\\n|s p|Apache Tomcat/Coyote JSP engine| v/$1/ cpe:/a:apache:coyote_http_connector:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache/([\\w._-]+) Ben-SSL/([\\w._-]+) \\(Unix\\)\\r\\n|s p/Apache httpd/ v/$1/ i/Ben-SSL $2/ o/Unix/ cpe:/a:apache:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<address>Apache Server at ([\\w._-]+) Port \\d+</address>\\n</body></html>\\n$|s p/Apache httpd/ h/$1/ cpe:/a:apache:http_server/a\n# https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/http/http_protocol.c\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Apache\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<html><head>\\n<title>401 Authorization Required</title>\\n</head><body>\\n<h1>Authorization Required</h1>\\n<p>This server could not verify that you\\nare authorized to access the document\\nrequested\\.  Either you supplied the wrong\\ncredentials \\(e\\.g\\., bad password\\), or your\\nbrowser doesn't understand how to supply\\nthe credentials required\\.</p>\\n</body></html>\\n$|s p/Apache httpd/ cpe:/a:apache:http_server/\n\n# Apache Stronghold\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate:.*\\r\\nServer: Stronghold/([-.\\w]+) Apache/([-.\\w]+)| p/Apache Stronghold httpd/ v/$1/ i/based on Apache $2/ cpe:/a:redhat:stronghold:$1/\nsoftmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate:.*\\r\\nServer: Stronghold| p/Apache Stronghold httpd/ i/based on Apache/ cpe:/a:redhat:stronghold/\n\n\nmatch ssl/http m|^HTTP/1.1 400 Bad Request\\r\\n.*?Server: nginx/([\\d.]+)[^\\r\\n]*?\\r\\n.*<title>400 The plain HTTP request was sent to HTTPS port</title>|s p/nginx/ v/$1/ cpe:/a:igor_sysoev:nginx:$1/\nmatch ssl/http m|^HTTP/1.1 400 Bad Request\\r\\n.*<title>400 The plain HTTP request was sent to HTTPS port</title>|s p/nginx/ cpe:/a:igor_sysoev:nginx/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*?\\r\\nServer: nginx\\r\\n|s p/nginx/ cpe:/a:igor_sysoev:nginx/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nServer: nginx/([\\d.]+)\\r\\n|s p/nginx/ v/$1/ cpe:/a:igor_sysoev:nginx:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nServer: nginx/([\\d.]+) \\(Ubuntu\\)\\r\\n|s p/nginx/ v/$1/ i/Ubuntu/ o/Linux/ cpe:/a:igor_sysoev:nginx:$1/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nServer: nginx/([\\d.]+) \\+ ([^\\r\\n]*)\\r\\n|s p/nginx/ v/$1/ i/$2/ cpe:/a:igor_sysoev:nginx:$1/\n\n# Citrix NFuse 2.0 on MS IIS 5.0\nmatch http m|^HTTP/1\\.[01].*\\r\\nServer: Microsoft-IIS/([-.\\w]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Location: http://[^/]+/nfuse.htm\\r\\n.*\\r\\n---- NFuse ([-.\\w]+) \\(Build |s p/Citrix NFuse/ v/$2/ i/Microsoft IIS $1/ o/Windows/ cpe:/a:microsoft:internet_information_services:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01].*\\r\\nServer: Microsoft-IIS/([-.\\w]+)\\r\\n|s p/Microsoft IIS httpd/ v/$1/ o/Windows/ cpe:/a:microsoft:internet_information_services:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01].*\\r\\nServer: Microsoft-IIS/([-.\\w]+) (mod_perl/[-.\\w]+ Perl/[-.\\w]+)\\r\\n|s p/Microsoft IIS httpd/ v/$1/ i/$2/ o/Windows/ cpe:/a:microsoft:internet_information_services:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .+\\r\\nServer: Tomcat/([-.\\w]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nServlet-Engine: Tomcat/[-.\\w]+ \\(Java ([-.\\w]+); SunOS ([-.\\w]+) (\\w+); java\\.vendor=Sun Microsystems Inc\\.\\)\\r\\n| p/Solaris management console server/ i/Java $2; Tomcat $1; SunOS $3 $4/ o/SunOS/ cpe:/a:apache:tomcat:$1/ cpe:/a:sun:jre:$2/ cpe:/o:sun:sunos:$3/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CommuniGatePro/([-.\\w ]+)\\r\\n|s p/CommuniGate Pro httpd/ v/$1/ cpe:/a:stalker:communigate_pro/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: DSS ([-.\\w]+) Admin Server/([-.\\w]+)|s p/DarwinStreamingServer/ v/$1/ i/Admin Server $2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: QTSS (\\d[-.\\w]+) Admin Server/(\\d[-.\\w]+)\\r\\n| p/Apple QTSS Admin Server/ v/$2/ i/from QTSS $1/ cpe:/a:apple:quicktime_streaming_server:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: fnord/(\\d[-.\\w]+)\\r\\n| p/Fnord httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Fnord\\r\\n| p/Fnord httpd/\nmatch http m=^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<title>Not Found</title>(?:This host is not served here\\.|No such file or directory\\.)$= p/Fnord httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MiniServ/([\\d.]+)\\r\\n|s p/MiniServ/ v/$1/ i/Webmin httpd/\nmatch http m|^HTTP/1.1 200 OK\\r\\nServer: NetWare-Enterprise-Web-Server/([-.\\w]+)\\r\\n| p/Novell NetWare enterprise web server/ v/$1/ o/NetWare/ cpe:/o:novell:netware/a\nmatch http m|^HTTP/1.1 302 Object Moved Temporarily\\r\\nServer: NetWare HTTP Stack\\r\\n| p/Novell NetWare HTTP Stack/ i/HTTPSTK.NLM/ o/NetWare/ cpe:/o:novell:netware/a\nmatch http m|^HTTP/1.1 \\d\\d\\d [\\w ]+\\r\\nServer: NetWare HTTP Stack\\r\\n| p/Novell NetWare HTTP Stack/ i/HTTPSTK.NLM/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: HTTPd-WASD/([-.\\w]+) OpenVMS/(.*)\\r\\n| p/WASD httpd/ v/$1/ i/$2/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: HTTPd-WASD/([-.\\w]+) OpenVMS/(.*)\\r\\n| p/WASD httpd/ v/$1/ i/$2/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Lotus-Domino/Release-(\\d[-.\\w]+)\\r\\n|s p/Lotus Domino httpd/ v/$1/ cpe:/a:ibm:lotus_domino_web_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Lotus-Domino/Release-(\\d[-.\\w]+)\\(Intl\\)\\r\\n|s p/Lotus Domino International httpd/ v/$1/ cpe:/a:ibm:lotus_domino_web_server:$1::intl/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Lotus-Domino/Release\\r\\n|s p/Lotus Domino httpd/ cpe:/a:ibm:lotus_domino_web_server/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Lotus-Domino/(\\d[-.\\w]+)\\r\\n|s p/Lotus Domino httpd/ v/$1/ cpe:/a:ibm:lotus_domino_web_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Lotus-Domino(?:/0)?\\r\\n|s p/Lotus Domino httpd/ cpe:/a:ibm:lotus_domino_web_server/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Domino-Go-Webserver/([\\d.]+)\\r\\n|s p/Lotus Domino Go httpd/ v/$1/ cpe:/a:ibm:lotus_domino:$1/\n\n# G-Net BB0060 ADSL Modem (I'm not sure this is GlobespanVirata, but that is\n# what the t3lnetd on this device said).\nmatch http m|^HTTP/1.1 302 Document Follows\\r\\nLocation: /hag/pages/home.ssi\\r\\n\\r\\n$| p/GlobespanVirata httpd/ i/on broadband router/\nmatch http m|^HTTP/1.0 200 OK\\r\\nServer:HTTP/1.0\\r\\n.*<title>Hewlett Packard</title>|s p/HP Jetdirect httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: EHTTP/([\\d.]+)\\r\\nPragma:no-cache\\r\\nContent-Type:text/html\\r\\n\\r\\n<html> \\n<head>\\n<title> \\n(.*) \\n- HP \\w+ ProCurve Switch (\\w+)\\n</title>| p/eHTTP/ v/$1/ i/HP ProCurve Switch $3 http config/ d/switch/ h/$2/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:procurve_switch_$3/ cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: EHTTP/([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"HP ([-.\\w]+)\\\"\\r\\n| p/eHTTP/ v/$1/ i/HP $2 switch http admin/ d/switch/ cpe:/a:ehttp:ehttp:$1/ cpe:/h:hp:$2/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/([-.\\w]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n\\n<!--\\nFile name: index\\.html\\n\\nThis is the 'parent' file that calls the individual child frames\\. \\nThis is the file that is first accessed when the user types http://<ipaddress> \\nin the browser toolbar\\. \\n\\nThe UI Architecture consists of a total of 4 frames\\. This file calls 3 high-level |s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet printer http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:laserjet/\nmatch http m|^HTTP/1\\.0 \\d{3} .*\\r\\nServer: CompaqHTTPServer/([\\w\\d.]+)\\r\\n|s p/Compaq Insight Manager HTTP server/ v/$1/ cpe:/a:hp:compaqhttpserver:$1/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\"Linksys ([\\w._-]+)\"\\r\\n| p/Linksys router http config/ i/device model $1/ d/WAP/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Dell TrueMobile ([\\d.]+) Wireless Broadband Router\\\"\\r\\n| p/Dell TrueMobile $1 wireless router http config/ d/WAP/ cpe:/h:dell:truemobile_$1_wireless_broadband_router/\nmatch http m|^HTTP/1\\.[01] 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys ([\\w._-]+)\\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/Linksys $1 WAP http config/ d/WAP/ cpe:/h:linksys:$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"(WRT[-\\w]+)\\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/Linksys $1 router http config/ d/WAP/ cpe:/h:linksys:$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\nContent-type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"(WRT[^\"]+)\\\"\\r\\n\\r\\n<HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY><H1>401 Unauthorized</H1>\\n\\n</BODY>\\n| p/Linksys $1 router http config/ d/WAP/ cpe:/h:linksys:$1/a\nmatch http m|^HTTP/1\\.0 401 Not Authorized\\r\\nServer: RapidLogic/([\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nPragma: no-cache\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys WRT55AG\\\"\\r\\n\\r\\n\\r\\nAuthorization Required\\r\\n\\r\\n| p/RapidLogic httpd/ v/$1/ i/Linksys WRT55AG WAP http config/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:linksys:wrt55ag/a\nmatch http m|^HTTP/1\\.1 401 Not Authorized\\r\\nServer: Rapid Logic/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"([^\"]*)\\\"\\r\\n|s p/RapidLogic httpd/ v/$1/ i/Linksys $2 WAP http config/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:linksys:$2/a\nmatch http m|^HTTP/1\\.[01] 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\"MET-(\\w+)\"\\r\\n| p/Linksys $1 http config/ d/router/ cpe:/h:linksys:$1/a\n# Notice the spelling mistake in the HTML\nmatch http m|^HTTP/1\\.0 401 Bad Request\\r\\nServer: httpd\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Bad Request</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H4>401 Bad Request</H4>\\nCann't use wireless interface to access web\\.\\n</BODY></HTML>\\n| p/Linksys WRT54G WAP http config/ i/Wireless admin disabled/ d/WAP/ cpe:/h:linksys:wrt54g/a\nmatch http m|^<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\">\\r\\n<HTML><HEAD><TITLE>Bad Request</TITLE>.*<H4>401 Bad Request</H4>Cann't use wireless interface to access web\\.\\\";|s p/Linksys WRT54G WAP http config/ i/Wireless admin disabled/ d/WAP/ cpe:/h:linksys:wrt54g/a\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: httpd\\r\\nDate:.*\\n\\t\\t<title>(WRT54\\w+) - Info</title>|s p/DD-WRT milli_httpd/ i/Linksys $1 WAP http config/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nContent-Type: text/html\\r\\nServer: httpd\\r\\nDate: .*\\r\\nConnection: close\\r\\nCache-Control: no-store, no-cache, must-revalidate\\r\\nCache-Control: post-check=0, pre-check=0\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\n<html>\\n\\t<head>\\n\\t\\t<meta http-equiv=\\\"Content-Type\\\" content=\\\"application/xhtml\\+xml; charset=iso-8859-1\\\" />\\n\\t\\t<link rel=\\\"icon\\\" href=\\\"images/favicon\\.ico\\\" type=\\\"image/x-icon\\\" />\\n\\t\\t<link rel=\\\"shortcut icon\\\" href=\\\"images/favicon\\.ico\\\" type=\\\"image/x-icon\\\" />\\n\\t\\t<script type=\\\"text/javascript\\\" src=\\\"common\\.js\\\"></script>\\n\\t\\t<script type=\\\"text/javascript\\\" src=\\\"lang_pack/english\\.js\\\"></script>\\n\\t\\t<script type=\\\"text/javascript\\\" src=\\\"lang_pack/language\\.js\\\"></script>| p/DD-WRT milli_httpd/ d/broadband router/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys WRT300N\\\"\\r\\n| p/Linksys WRT300N WAP http config/ d/WAP/ cpe:/h:linksys:wrt300n/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Boa/([\\w._-]+) \\(([^)]+)\\)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Linksys ([\\w._-]+)\\\"\\r\\n|s p/Boa/ v/$1/ i/Linksys $3 WAP http config; $2/ cpe:/a:boa:boa:$1/ cpe:/h:linksys:$3/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Shared Storage Drive\\\"\\r\\n| p/Maxtor Shared Storage NAS http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"NETWORK HDD\\\"\\r\\n| p/Argosy Research HD363N Network HDD http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"SimpleShare \\(default user name is admin and password is simple\\)\\\"\\r\\n| p/SimpleShare WAP http config/ d/WAP/\n\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Alcatel Lucent ([\\w._-]+) ([\\w._-]+)\\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n$| p/Alcatel-Lucent $1 WAP http config/ v/$2/ d/WAP/ cpe:/h:alcatel-lucent:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"(RT-[^\"]+)\\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/Asus $1 WAP http config/ d/WAP/ cpe:/h:asus:$1/a\n\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Insight Manager (\\d)\\r\\n\\r\\n|s p/Compaq Insight Manager/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache, no-store, must-revalidate\\r\\nExpires: 0\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/GNU Httptunnel/\n# Blue Coat Port 80 Security Appliance Model: Blue Coat SG400 Software Version: SGOS 2.1.6044 Software Release id: 19480 Service Pack 4\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nLocation: /Secure/Local/console/index\\.htm\\r\\n\\r\\n$| p/Blue Coat Security Appliance HTTP admin interface/ o/SGOS/ cpe:/o:bluecoat:sgos/a\nmatch http m|^HTTP/1\\.1 401 Authentication Required\\r\\nWWW-Authenticate: Basic realm=\\\"[\\d.]+\\\"\\r\\nRefresh: 0;URL=\\\"/Secure/Local/console/logout\\.htm\\\"\\r\\nServer: BlueCoat-Security-Appliance\\r\\n| p/Blue Coat SG210 http proxy config/ d/proxy server/ o/SGOS/ cpe:/o:bluecoat:sgos/a\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: AkamaiGHost\\r\\n| p/AkamaiGHost/ i|Akamai's HTTP Acceleration/Mirror service|\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Netscape-Enterprise/([-. \\w]+)\\r\\n|s p/Netscape Enterprise httpd/ v/$1/ cpe:/a:netscape:enterprise_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Netscape-Enterprise/([-. \\w]+)\\r\\n|s p/Netscape Enterprise httpd/ v/$1/ cpe:/a:netscape:enterprise_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Netscape-Enterprise/([\\w._-]+) ([^\\r]+)\\r\\n|s p/Netscape Enterprise httpd/ v/$1/ i/$2/ cpe:/a:netscape:enterprise_server:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r?\\nDate: .*\\r?\\nServer: NCSA/([\\d.]+)\\r?\\n| p/NCSA httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Netscape-FastTrack/(\\d[-.\\w]+)\\r\\n| p/Netscape FastTrack web server/ v/$1/ cpe:/a:netscape:fasttrack_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: (Oracle[-.\\w/]+) Oracle HTTP Server ([-.\\w]+)|s p/Oracle HTTP Server/ v/$1/ i/$2/ cpe:/a:oracle:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle HTTP Server Powered by Apache\\r\\n|s p/Oracle HTTP Server Powered by Apache/ cpe:/a:oracle:http_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle HTTP Server Powered by Apache/([-.\\w]+)\\r\\n|s p/Oracle HTTP Server Powered by Apache/ v/$1/ cpe:/a:oracle:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle HTTP Server Powered by Apache/([-.\\w]+) \\(Win32\\) ([^\\r\\n]+)\\r\\n|s p/Oracle HTTP Server Powered by Apache/ v/$1/ i/$2/ o/Windows/ cpe:/a:oracle:http_server:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle HTTP Server Powered by Apache/([-.\\w]+) \\(Unix\\) ([^\\r\\n]+)\\r\\n|s p/Oracle HTTP Server Powered by Apache/ v/$1/ i/$2/ o/Unix/ cpe:/a:oracle:http_server:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Pragma: no-cache\\r\\nServer: Allegro-Software-RomPager/ ?([\\w.]+)\\r\\n\\r\\n<HTML><head>\\n<META HTTP-EQUIV=\\\"Content-Type\\\" CONTENT=\\\"text/html; charset=iso-8859-1\\\">\\n<TITLE></TITLE></HEAD><frameset framespacing=\\\"0\\\" BORDER=\\\"false\\\" frameborder=\\\"0\\\" rows=\\\"90,\\*\\\">\\n  <frame NAME=\\\"fLogo\\\" scrolling=\\\"no\\\" noresize src=\\\"/html/Hlogo\\.html\\\"|s p/Allegro RomPager/ v/$1/ i/D-Link DSL-300g or g+ http config/ d/broadband router/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Please enter your user name and password on (DSL-[\\w+]+)\\\"\\r\\n|s p/D-Link $1 http config/ d/broadband router/ cpe:/h:dlink:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"(DSL-[\\w+]+) Admin Login\\\"\\r\\n|s p/D-Link $1 http config/ d/broadband router/ cpe:/h:dlink:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic Realm=\\\"(DSL-[\\w._-]+) Admin Login\\\"\\r\\n|s p/D-Link $1 http config/ d/broadband router/ cpe:/h:dlink:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"IntelEmbeddedWeb@Express460T\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/([\\w.]+)\\r\\n| p/Allegro RomPager/ v/$1/ i/Intel 460T Standalone Switch/ cpe:/a:allegro:rompager:$1/\n# Some D-Link Switches\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/ ?([\\w.]+)\\r\\n\\r\\n.*DES-(\\d+) Web Management|s p/Allegro RomPager/ v/$1/ i/D-Link DES-$2 switch http config/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/ ?([\\w.]+)\\r\\n\\r\\n.*<TITLE>.*?(DES-\\d+).*?</TITLE>|s p/Allegro RomPager/ v/$1/ i/D-Link $2 Switch http config/ cpe:/a:allegro:rompager:$1/ cpe:/h:dlink:$2/a\n\n# iCal 3.6\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Wapapi/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\r\\n<head><title>iCal Tutorial:  Introduction</title></head>|s p/Wapapi/ v/$1/ i/Brown Bear iCal web calendar/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Wapapi/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\n.*<META name=\\\"description\\\" content=\\\"iCal Web Calendar Server by Brown Bear Software www\\.brownbearsw\\.com\\\">\\r\\n|s p/Wapapi/ v/$1/ i/Brown Bear iCal web calendar/\n\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Virata-EmWeb/R([\\w_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Administration Tools\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n$| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Netscreen administrative web server/ d/firewall/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\w_]+)\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n.*<link rel=\\\"SHORTCUT ICON\\\" href=\\\"/favicon\\.ico\\\">\\n\\n<title>Login</title>|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Netscreen administrative web server/ d/firewall/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Web/R([\\w_]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<html>\\n<head>\\n\\n<script language=\\\"javascript\\\">\\n|s p/Web/ v/$SUBST(1,\"_\",\".\")/ i/Netscreen administrative web server/ d/firewall/\n\n# Phaser860 Printer\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .*\\r\\nAllow: GET, HEAD\\r\\nServer: Spyglass_MicroServer/(\\d[-.\\w]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML><HEAD><TITLE>Not Found</TITLE></HEAD>\\r\\n<BODY>The requested URL was not found\\.</BODY></HTML>\\r\\n| p/Spyglass MicroServer/ v/$1/ d/printer/\n# Cisco Catalyst 3500-XL switch IOS 12.0(5)XU\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nContent-[Tt]ype: text/html\\r\\nExpires: .*\\r\\nWWW-Authenticate: Basic realm=\\\"level 15 access\\\"\\r\\n| p/Cisco IOS http config/ d/switch/ o/IOS/ cpe:/o:cisco:ios/a\n# Cisco 828 G.SHDSL\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: cisco-IOS/(\\d[-.\\w ]+) HTTP-server/(\\d[-().\\w ]+)\\r\\n| p/Cisco IOS http config/ v/$2/ i/IOS $1/ o/IOS/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: cisco-IOS\\r\\n| p/Cisco IOS http config/ o/IOS/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.0 200 OK \\nServer: cisco-IOS Technologies/([\\w._-]+) HTTP-server\\n| p/Cisco IOS http config/ v/$1/ o/IOS/ cpe:/o:cisco:ios/a\n# Xerox Document Centre (DocuCentre) 425\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nAllow: GET, HEAD\\r\\nServer: Xerox_MicroServer/([-.\\w]+)\\r\\nExpires: .*\\r\\nCache-Control: no-cache\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>([-.+ \\w]+)</TITLE>| p/Xerox MicroServer httpd/ v/$1/ i/on $2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nAllow: GET, HEAD\\r\\nServer: Xerox_MicroServer/([-.\\w]+)\\r\\n| p/Xerox MicroServer httpd/ v/$1/ i|usually a printer/copier|\nmatch http m=^HTTP/1\\.1 200 OK\\r\\n.*<!-- Copyright \\(c\\) (?:\\d+, \\d+|\\d+-\\d+), Fuji Xerox Co\\., Ltd\\. All Rights Reserved\\. -->.*<TITLE>\\r\\nDocument Centre (\\w+) - [\\d.]+\\r\\n</TITLE>=s p/FujiXerox Document Centre $1 http config/ d/printer/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nAllow: GET, HEAD\\r\\nServer: Spyglass_MicroServer/(\\d[-.\\w]+)\\r\\nLast-Modified: .*\\r\\nExpires: .*\\r\\nPragma: no-cache\\r\\n\\r\\n\\n<html> \\n<head>\\n   <meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\">\\n   <meta name=\\\"keywords\\\" content=\\\"printer; embedded web server; int| p/Spyglass MicroServer/ v/$1/ i/embedded in printer/ d/printer/\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nServer: Cougar (\\d[-.\\w]+)\\r\\n\\r\\n$| p/Microsoft Windows Media Services/ v/$1/ o/Windows/ cpe:/a:microsoft:windows_media_services:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: video/x-ms-asf\\r\\nCache-Control: max-age=0, no-cache\\r\\nServer: Cougar/(\\d[-.\\w]+)\\r\\n| p/Microsoft Windows Media Services/ v/$1/ o/Windows/ cpe:/a:microsoft:windows_media_services:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: NetApp//?(\\d[-.\\w]+)\\r\\n|s p/NetApp filer httpd/ v/$1/ o/Data ONTAP/ cpe:/a:netapp:data_ontap/ cpe:/o:netapp:data_ontap/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/(\\d[\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Frameset//EN\\\"\\r\\n\\t\\t\\t\\\"http://www\\.w3\\.org/TR/REC-html40/frameset\\.dtd\\\">\\r\\n<HTML>\\r\\n<HEAD>\\r\\n\\t<TITLE>Netopia Router Web </TITLE>| p/Netopia RapidLogic admin server/ v/$1/ d/router/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WebSTAR/(\\d[-.()\\w]+) ID/| p/WebSTAR httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: 4D_WebSTAR_S/([\\d.]+) \\(MacOS X\\)\\r\\n| p/WebSTAR httpd/ v/$1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Agranat-EmWeb/R([\\w_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"accessPoint\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n$| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Orinoco AP-200 webadmin/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 404 NO_STREAM_FOUND\\r\\nConnection: close\\r\\n\\r\\n$| p/Chain Cast P2P streaming service/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Rex/(9\\.0\\.0\\.\\d+)\\r\\n| p/Chain Cast support service/ v|Rex/$1|\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Boa/(\\d[-.\\w]+) \\(with Intersil Extensions\\)\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"WG602 v2\\\"\\r\\n| p/Boa httpd/ v/$1 (with Intersil Extensions)/ i/Netgear WG602v2 wireless router http config/ d/router/ cpe:/a:boa:boa:$1/ cpe:/h:netgear:wg602v2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Boa/(\\d[-.\\w]+) \\(with Intersil Extensions\\)\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"LOGIN Enter Password \\(default is medion, ignore username\\)\\\"\\r\\n| p/Boa/ v/$1 (with Intersil Extensions)/ i/Medion router http config/ d/router/ cpe:/a:boa:boa:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Boa/(\\d[-\\w_.]+) \\(with Intersil Extensions\\)\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Enter Password \\(Leave User Name Empty\\)\\\"\\r\\n| p/Boa/ v/$1 (with Intersil Extensions)/ i/CN3000 WAP http config/ d/WAP/ cpe:/a:boa:boa:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Boa/([-\\w_.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Broadband Router\\\"\\r\\n| p/Boa/ v/$1/ i/Arescom NetDSL ADSL router http config/ d/broadband router/ cpe:/a:boa:boa:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Boa/(\\d[-.\\w]+)\\r\\n| p/Boa HTTPd/ v/$1/ cpe:/a:boa:boa:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: (\\d[-.\\w]+)\\r\\n.*<title>GNUMP3d |s p/GNUMP3d streaming server/ v/$1/ cpe:/a:gnu:gnump3d:$1/\n\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Jetty\\((\\d[-.\\w]+)\\)\\r\\n\\r\\n<html>\\n  <head><title>Wildfire HTTP Binding Service</title></head>|s p/Jetty/ v/$1/ i/Wildfire HTTP Bindings/ cpe:/a:mortbay:jetty:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Jetty\\((\\d[-.\\w]+)\\)\\r\\n\\r\\n.*Contexts known to this server are: <ul><li><a href=\\\"/ninan/\\\">/ninan|s p/Jetty/ v/$1/ i/Ninan usenet downloader http interface/ cpe:/a:mortbay:jetty:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Jetty/(\\d[-.\\w]+) \\(([^)\\r\\n]+)\\)?\\r\\n| p/Jetty/ v/$1/ i/$2/ cpe:/a:mortbay:jetty:$1/\nmatch http m|^HTTP/1\\.[01] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Jetty\\(([\\w._-]+)\\)\\r\\n|s p/Jetty/ v/$1/ cpe:/a:mortbay:jetty:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MortBay-Jetty-([-\\w_.]+)\\r\\n|s p/Jetty/ v/$1/ cpe:/a:mortbay:jetty:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Error 404 - Not Found</TITLE>\\n<BODY>\\n<H2>Error 404 - Not Found\\.</H2>\\nNo context on this server matched or handled this request\\.| p/Jetty/ cpe:/a:mortbay:jetty/\n\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WebSphere Application Server/([-\\w_.]+)\\r\\n|s p/IBM WebSphere Application Server/ v/$1/ cpe:/a:ibm:websphere_application_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: JRun Web Server/([\\d.]+)\\r\\n|s p/JRun Web Server/ v/$1/ cpe:/a:adobe:jrun:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: JRun Web Server\\r\\n|s p/JRun Web Server/ cpe:/a:adobe:jrun/\nmatch http m|^401 Access denied\\r\\nWWW-Authenticate: Negotiate \\r\\nContent-length: 0\\r\\n\\r\\n| p/Microsoft IIS WebDAV/ v/5.0/ i/access denied/ o/Windows/ cpe:/a:microsoft:internet_information_services:5.0/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Negotiate\\r\\nWWW-Authenticate: NTLM\\r\\nX-Powered-By: ASP\\.NET\\r\\n| p/Microsoft IIS WebDAV/ o/Windows/ cpe:/a:microsoft:internet_information_services/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: RomPager/([-.\\w/ ]+)\\r\\n|s p/Allegro RomPager/ v/$1/ i/ZyXEL ZyWALL 2/ cpe:/a:allegro:rompager:$1/\n\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Gordian Embedded([\\d.]+)\\r\\n.*<title>IQeye3|s p/Gordian httpd/ v/$1/ i/IQinVision IQeye3 webcam http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Gordian Embedded([\\d.]+)\\r\\nContent-type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n\\n<HTML>\\n<HEAD>\\n<TITLE>Lantronix ThinWeb Manager ([\\d.]+): Home</TITLE>\\n|s p/Gordian httpd/ v/$1/ i/Lantronix ThinWeb Manager $2 http config/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Gordian Embedded([\\d.]+)\\r\\nContent-type: text/html\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nExpires: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\n\\r\\n<html>\\n<head>\\n<title>Lantronix Web Manager</title>\\n| p/Gordian httpd/ v/$1/ i|Lantronix MSS/100 http config|\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nServer: Gordian Embedded([\\d.]+)\\r\\n.*<HTML>\\n<HEAD>\\n<TITLE>Lantronix - Authentication for ([^<]+)</TITLE>\\n|s p/Gordian httpd/ v/$1/ i/Lantronix MSSVIA http config/ h/$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: IDSL MailGate (\\d[-.\\w]+)\\r\\n| p/MailGate web proxy/ v/$1/ cpe:/a:mailgate:mailgate:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<TITLE>The AXIS 200 Home|s p/AXIS 200/ d/webcam/\n# A couple little easter eggs! -Doug (who else?)\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\nServer: Anti-Web V([\\d.]+) \\([\\w .-]+\\)\\n| p/Anti-Web httpd/ v/$1/ i/Best httpd out there!/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\nServer: Anti-Web HTTPD V([\\d.]+) \\([\\w .-]+\\)\\n| p/Anti-Web httpd/ v/$1/ i/Best httpd out there!/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r?\\nServer: Antiweb/([\\w._-]+)\\r?\\n| p/Antiweb/ v/$1/ i/Best httpd out there!/ o/Unix/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: ArGoSoft Mail Server Pro for WinNT/2000/XP, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft Mail Server Pro httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\n# Lantronix ThinWeb Manager\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nLocation: /iw/webdesk/login/\\r\\nX-Cache: MISS from .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/Interwoven TeamSite/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: OpenSA/([\\d.]+) / Apache/([\\d.]+) \\((\\w*)\\) mod_ssl/([\\d.]+) OpenSSL/([\\d.]+)\\r\\n.*<LINK REL=\\\"SHORTCUT ICON\\\" HREF=\\\"http://([\\w.-_]+)/iss\\.ico\\\">\\r\\n<TITLE> System Scanner Vista Welcome Page </TITLE>\\r\\n|s p/ISS System Scanner Vista/ i|OpenSA/$1 Apache/$2 mod_ssl/$4 OpenSSL/$5| o/$3/ h/$6/ cpe:/a:openssl:openssl:$5/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: OpenSA/([\\d.]+) / Apache/([\\d.]+) \\(Win32\\) ([^\\r\\n]+)\\r\\n| p/OpenSA httpd/ v/$1/ i/Apache $2; $3/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: BaseHTTP/([\\d.]+) Python/([\\w.]+) edna/([\\d.]+)\\r\\n| p/BaseHTTPServer/ v/$1/ i/Edna Streaming MP3 Server $3; Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 404 Path not found: /\\r\\nServer: BaseHTTP/([\\d.]+) Python/([\\w.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 198\\r\\n\\r\\n<head>\\n<title>Error response</title>\\n</head>\\n<body>\\n<h1>Error response</h1>\\n<p>Error code 404\\.\\n<p>Message: Path not found: /\\.\\n<p>Error code explanation: 404 = Nothing matches the given URI\\.\\n</body>\\n$|s p/BaseHTTPServer/ v/$1/ i/Open ERP XML-RPC; Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Speed Touch WebServer/([\\d.]+)\\r\\nContent-type: text/html\\r\\nContent-length: \\d*\\r\\n\\r\\nHTTP/1\\.0 400 Bad Request\\r\\n: Invalid or incomplete request\\.\\r\\n\\r\\n| p/Alcatel Speedtouch ADSL router httpd/ v/$1/ d/router/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: http://[\\w._-]+:(\\d+)\\r\\n\\r\\nHTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: 112\\r\\n\\r\\n<HTML><HEAD><TITLE>HTTP/1\\.0 404 Not Found</TITLE></HEAD><BODY>\\r\\n<H1>HTTP/1\\.0 404 Not Found\\.</H1>\\r\\n</BODY></HTML>$| p/Technicolor TG787 VoIP gateway http admin/ i/redirect to port $1/ d/VoIP adapter/\n# Management Interface for Netscape FastTrack web server 2.01\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Netscape-Administrator/([\\d.]+)\\r\\n| p/Netscape FastTrack Administrator/ v/$1/ cpe:/a:netscape:fasttrack_server:$1/\n# Siemens SpeedStream 2-port SS2601 Router\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?WWW-Authenticate: Basic realm=\\\"InterMapper\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: InterMapper/([\\d.]+)\\r\\n|s p/InterMapper Network Monitor httpd/ v/$1/\n\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nMIME-version: 1\\.0\\r?\\nServer: ZOT-PS-(\\d+)/([\\w._-]+)\\r?\\nWWW-Authenticate: Basic realm=\\\"(TL-[\\w._-]+)\\\"\\n| p/Zero One Technology $1 httpd/ v/$2/ i/TP-LINK $3 print server/ d/print server/ cpe:/h:tp-link:$3/ cpe:/h:zero_one_tech:$1/\n# Branded as Longshine, TRENDnet, TP-LINK, IOGear, Hawking\n# Date is usually (always?) Mon, 24 Sep 2001 18:00:00 GMT\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .* GMT\\r\\nMIME-version: 1\\.0\\r?\\nServer: ZOT-PS-(\\d+)/([\\w._-]+)\\r?\\n| p/Zero One Technology $1 httpd/ v/$2/ d/print server/ cpe:/h:zero_one_tech:$1/\n\n\nmatch http m|^HTTP/1\\.0 302 Temporarily Moved\\nLocation: /winamp\\?page=main\\nConnection: close\\nContent-type: text/html\\n\\n<html>\\n<head>\\n<title>Winamp Web Interface</title>| p/Winamp Web Interface/ cpe:/a:nullsoft:winamp/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Lasso/([\\d.]+)\\r\\n\\r\\n|s p/Lasso httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: BaseHTTP/([\\d.]+) Python/([\\w.]+)\\r\\nDate: .*<title>Roundup trackers index</title></head>\\n<body><h1>Roundup trackers index</h1>|s p/BaseHTTPServer/ v/$1/ i/Roundup issue tracker; Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: BaseHTTP/([\\d.]+) Python/([\\w.]+)\\r\\n.*<title>Ajaxterm</title>|s p/BaseHTTPServer/ v/$1/ i/Ajaxterm; Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: fwlogwatch[ /]([\\d.]+) 200\\d/\\d\\d/\\d\\d \\(C\\) Boris Wesslowski| p/fwlogwatch/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: GNUMP3d ([-\\w_.]+)\\r\\n| p/GNUMP3d streaming server/ v/$1/ cpe:/a:gnu:gnump3d:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: ([\\d.]+)\\r\\nContent-type: text/html; charset=utf-8\\r\\nSet-Cookie: theme=Tabular;path=/; expires=.*;\\r\\nConnection: close\\r\\n\\r\\n| p/GNUMP3d/ v/$1/ cpe:/a:gnu:gnump3d:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: HTTP/x\\.y\\.z \\(Unix\\) PHP/x\\.y\\.z mod_ssl/x\\.y\\.z SSL/x\\.y\\.z\\r\\nLast-Modified: .*\\r\\nETag: \\\".*\\\"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Loading\\.\\.\\.</TITLE>\\n| p/Coldfusion httpd/ i/SSL support/ o/Unix/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nServer: SIMS/([\\w.]+)\\r\\n\\r\\n<HTML>\\r<HEAD>\\r  <TITLE>Stalker Internet Mail Server: Setup Entrance</TITLE>\\r</HEAD>\\r<BODY BGCOLOR=white>\\r\\r<H2><TABLE WIDTH=\\\"100%\\\" BORDER=0 CELLSPACING=0 CELLPADDING=0>\\r<TR>\\r<TD><H3><IMG SRC=\\\"/Icon\\.gif\\\" ALIGN=MIDDLE>([-\\w_.]+)</H3>| p/Stalker Mail Server web config/ v/$1/ o/Mac OS/ h/$2/ cpe:/o:apple:mac_os/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache  -OOPS Development Organization-\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Powered-By: ([^\\r\\n]+)\\r\\n|s p/Apache - OOPS Devel Org/ i/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache  -OOPS Development Organization-\\r\\n|s p/Apache - OOPS Devel Org/\nmatch http m|^HTTP/1\\.0 200 OK\\nDATE: .*\\nPragma: no-cache\\nServer: Delta UPSentry\\n| p/Sentry Bulldog UPS httpd/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Gatling/([\\d.]+)\\r\\n|s p/Gatling httpd/ v/$1/\n# PolyCom ViewStation 128\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Viavideo-Web\\r\\n|s p/Polycom ViewStation/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nDate: .*\\nMIME-version: [\\d.]+\\nServer: Micro-HTTP/([\\d.]+)\\nContent-type: text/html\\n.*Copyright Tektronix, Inc\\.|s p/Tektronix printer httpd/ i|Micro-HTTP/$1| d/printer/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: IBM HTTP Server/([\\w]+)\\r\\n| p/IBM httpd/ v/$1/ cpe:/a:ibm:http_server:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: SAlive/ ([\\d.]+)\\r\\n|s p/Servers Alive network monitor/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type:text/html\\r\\nContent-Length:\\d+\\r\\n\\n\\n<HTML>\\n<HEAD>\\n<TITLE>Not Supported</TITLE>\\n</HEAD>\\n<body>\\n\\n<H1 ALIGN=CENTER>The Command sent is not Supported</H1>\\n\\n\\n</BODY>\\n</HTML>\\n\\n\\0\\0| p/NetWare FTP stats httpd/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Abyss/([-\\w.]+)-Linux AbyssLib/([\\d.]+)\\r\\n|s p/Abyss httpd/ v/$1/ i|AbyssLib/$2| o/Linux/ cpe:/a:aprelium:abyss_web_server_x1:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Abyss/([-\\w.]+) \\(Win32\\) AbyssLib/([\\d.]+)\\r\\n|s p/Abyss httpd/ v/$1/ i|AbyssLib/$2| o/Windows/ cpe:/a:aprelium:abyss_web_server_x1:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Abyss/([-\\w.]+)-Win32 AbyssLib/([\\d.]+)\\r\\n|s p/Abyss httpd/ v/$1/ i|AbyssLib/$2| o/Windows/ cpe:/a:aprelium:abyss_web_server_x1:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Abyss/([-\\w.]+)-MacOS X AbyssLib/([\\d.]+)\\r\\n|s p/Abyss httpd/ v/$1/ i|AbyssLib/$2| o/Mac OS X/ cpe:/a:aprelium:abyss_web_server_x1:$1/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Abyss/([-\\w.]+)-Linux AbyssLib/([\\d.]+)\\r\\nWWW-Authenticate: Basic Realm=\\\".*Abyss Web Server Console\\\"\\r\\n|s p/Aprelium Abyss httpd console/ i/Abyss $1; AbyssLib $2/ o/Linux/ cpe:/a:aprelium:abyss_web_server_x1:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Abyss/([-\\w.]+) \\(Win32\\) AbyssLib/([\\d.]+)\\r\\nWWW-Authenticate: Basic Realm=\\\".*Abyss Web Server Console\\\"\\r\\n|s p/Aprelium Abyss httpd console/ i/Abyss $1; AbyssLib $2/ o/Windows/ cpe:/a:aprelium:abyss_web_server_x1:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: LseriesWeb/([\\w.-]+) \\(HP_UNIQUE\\)\\r\\n| p/HP Tape Library Web Interface Software httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: AOLserver/([\\w+.]+)\\r\\n|s p/AOLserver httpd/ v/$1/ cpe:/a:aol:aolserver:$1/\nmatch http m=^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: uIP/([\\d.]+) (?:http://www\\.sics\\.se/~adam/uip/|\\(http://dunkels\\.com/adam/uip/\\))\\r\\n= p/uIP/ v/$1/ cpe:/a:adam_dunkels:uip:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"DI-514\\\"\\r\\n\\r\\n<title>401 Unauthorized</title><body><h1>401 Unauthorized</h1></body>| p/D-Link DI-514 router http config/ d/router/ cpe:/h:dlink:di-514/a\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http(s?)://SwitchViewIP\\.Avocent\\.com/splashscreen\\.asp\\r\\n| p/GoAhead WebServer/ i/Avocent Switchview http$1 config/ d/switch/ cpe:/a:goahead:goahead_webserver/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Orion/([\\d.]+)\\r\\n| p/Orion Java Application Server httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Agent-ListenServer-HttpSvr/([\\d.]+)\\r\\n| p/Network Associates ePO Agent/ i/Agent ListenServer $1/ o/Windows/ cpe:/a:mcafee:epolicy_orchestrator_agent/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: RMC Webserver ([\\d.]+)\\r\\n| p/RMC httpd/ v/$1/ i/Dell Embedded Remote Access Card/ d/remote management/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: TwistedWeb/([\\w.]+)\\r\\n|s p/TwistedWeb httpd/ v/$1/ cpe:/a:twistedmatrix:twistedweb:$1/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Twisted/([\\d.]+) TwistedWeb/SVN-Trunk\\r\\n|s p/TwistedWeb httpd/ v/SVN-Trunk/ i/Twisted $1/ cpe:/a:twistedmatrix:twisted:$1/ cpe:/a:twistedmatrix:twistedweb:svn-trunk/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Twisted/([-\\w_.+]+) TwistedWeb/\\[twisted\\.web\\d+, version ([^]]+)\\]\\r\\n|s p/TwistedWeb httpd/ v/$2/ i/Twisted $1/ cpe:/a:twistedmatrix:twisted:$1/ cpe:/a:twistedmatrix:twistedweb:$2/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Twisted/([\\w._-]+) TwistedWeb/\\[OPSI\\.web\\d+, version ([^]]+)\\]\\r\\n|s p/TwistedWeb httpd/ v/$2/ i/Twisted $1; OPSI client management system/ cpe:/a:twistedmatrix:twisted:$1/ cpe:/a:twistedmatrix:twistedweb:$2/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Length: 141\\r\\nServer: Twisted/([\\w._+-]+) TwistedWeb/([\\w._+-]+)\\r\\nDAV: 1, access-control\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: digest nonce=\\\"\\d+\\\", realm=\\\"/Search\\\", algorithm=\\\"md5\\\"\\r\\nConnection: close\\r\\n\\r\\n<html><head><title>Unauthorized</title></head><body><h1>Unauthorized</h1><p>You are not authorized to access this resource\\.</p></body></html>$| p/TwistedWeb httpd/ v/$2/ i/Twisted $1; Mac OS X teamsserver/ o/Mac OS X/ cpe:/a:twistedmatrix:twisted:$1/ cpe:/a:twistedmatrix:twistedweb:$2/a cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Twisted/([\\w._-]+) TwistedWeb/([\\w._-]+)\\r\\n.*<meta name=\\\"generator\\\" content=\\\"\\\">\\n<meta name=\\\"apple_required_ui_revision\\\" content=\\\"\\\">\\n<meta name=\\\"apple_collab_uid\\\" content=\\\"\\\">\\n|s p/TwistedWeb httpd/ v/$2/ i/Twisted $1; Mac OS X teamsserver/ o/Mac OS X/ cpe:/a:twistedmatrix:twisted:$1/ cpe:/a:twistedmatrix:twistedweb:$2/a cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.[01].*\\r\\nServer: Twisted/([\\.\\d]+) TwistedWeb/([\\.\\d]+)|s p/TwistedWeb httpd/ v/$2/ i/Twisted $1/ o/Mac OS X/ cpe:/a:twistedmatrix:twisted:$1/ cpe:/a:twistedmatrix:twistedweb:$2/a cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Connection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html.*\\r\\n\\r\\n<!DOCTYPE html\\nPUBLIC.*\\n<title>MikroTik RouterOS Managing Webpage</title>\\n|s p/MikroTik router config httpd/ d/router/ cpe:/o:mikrotik:routeros/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html.*\\r\\n\\r\\n<!DOCTYPE html PUBLIC.*<title>RouterOS router configuration page</title>|s p/MikroTik router config httpd/ d/router/ o/RouterOS/ cpe:/o:mikrotik:routeros/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Azureus ([\\d.]+)\\r\\n|s p/Azureus Bittorrent tracker httpd/ v/$1/ cpe:/a:azureus:azureus:$1/\nmatch http m|^HTTP/1\\.1 401 BAD\\r\\nWWW-Authenticate: Basic realm=\\\"Azureus - Swing Web Interface\\\"\\r\\n\\r\\nAccess Denied\\r\\n| p/Azureus Bittorrent webui plugin/ i/Access denied/ cpe:/a:azureus:azureus/\nmatch http m|^HTTP/0\\.9 200 Document follows\\r\\nConnection: close\\r\\nMIME-Version: 1\\.0\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n.*<html> \\r\\n<head> \\r\\n   <title>Thomson Cable Modem Diagnostics</title>\\r\\n|s p/Thomson Cable Modem Web Diagnostics/ d/broadband router/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: micro_httpd\\r\\n.*<title>Thomson Cable Modem Diagnostics</title>\\r\\n|s p/micro_httpd/ i/Thomson Cable Modem Web Diagnostics/ d/broadband router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: https://(iDRAC-\\w+)(?::443)?(?:/Applications/dellUI/login\\.htm)?\\r\\n\\r\\n| p/GoAhead WebServer/ i/Dell iDRAC http config/ d/remote management/ h/$1/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\n| p/GoAhead WebServer/ cpe:/a:goahead:goahead_webserver/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: FortiWeb-([\\d.]+)\\r\\n| p/Fortinet FortiWifi 60 http config/ i/FortiWeb $1/ d/router/ cpe:/h:fortinet:fortiwifi_60/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Serverdoc Remote\\\"\\r\\nConnection: close\\r\\n\\r\\n\\r\\n| p/Serverdoc remote httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\n<title>BNBT Tracker Info</title>\\n|s p/BNBT Bittorrent Tracker/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: AnomicHTTPD \\(www\\.anomic\\.de\\)\\r\\n| p/AnomicHTTPD/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\n.*\\n<html lang=\\\"(..)\\\">\\n<head>\\n<title>POPFile |s p/POPFile web control interface/ i/Lang: $1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n\\n\\n\\n\\t\\n\\n\\n\\t\\n\\n\\n\\n\\n\\n<!--  -->\\n\\n\\n\\n<!-- \\$R..file: i_pagestart\\.shtm,v \\$  -->\\n<html>\\n<head>\\n| p/Axis 5400 print server web config/ d/print server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nAllow: GET, HEAD\\r\\nServer: Spyglass_MicroServer/([\\w.]+)\\r\\n\\r\\n<html>\\n\\n<head>\\n\\n<title>  Software de administraci&#243;n de impresora PhaserLink  </title>\\n\\n| p/Spyglass_MicroServer/ v/$1/ i/Tektronix Phaser printer http config/ d/printer/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Microsoft-WinCE/([\\d.]+)\\r\\n| p/ChipPC Extreme httpd/ o/Windows CE $1/ cpe:/o:microsoft:windows_ce/a\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nDate: .*\\r\\nServer: Microsoft-WinCE/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: 125\\r\\n\\r\\n<html><head><title>Access Denied</title></head><body><B>Access denied\\.</B><P>The action requested is forbidden\\.</body></html>$| p/Crestron automation system httpd/ d/media device/ o/Windows CE $1/ cpe:/h:crestron/ cpe:/o:microsoft:windows_ce:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: DManager\\r\\nMIME-version: 1\\.0\\r\\nWWW-Authenticate: Basic realm=\\\"surgemail| p/SurgeMail webmail/ i/DNews based/ cpe:/a:netwin:surgemail/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: DManager\\r\\n| p/DNews Web Based Manager/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: IDS-Server/([\\d.]+)\\r\\n| p/IDS-Server httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Connection: keep-alive\\r\\nContent-Type: text/HTML\\r\\nContent-Length: \\d+\\r\\nServer: Indy/([\\d.]+)\\r\\nSet-Cookie: .*\\r\\n\\r\\n<!-- header\\.html -->.*TeamSpeak|s p/Indy httpd/ v/$1/ i/TeamSpeak 1.X http admin/ cpe:/a:indy:httpd:$1/ cpe:/a:teamspeak:teamspeak_classic/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Connection: keep-alive\\r\\nContent-Type: text/HTML\\r\\nContent-Length: \\d+\\r\\nServer: Indy/([\\d.]+)\\r\\nSet-Cookie: .*<title>TeamSpeak 2 - Server-Administration</title>|s p/Indy httpd/ v/$1/ i/TeamSpeak 2.X http admin/ cpe:/a:indy:httpd:$1/ cpe:/a:teamspeak:teamspeak2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\nServer: Indy/([\\d.]+)\\r\\n\\r\\n| p/Indy httpd/ v/$1/ i/TiVo Home Media Option/ cpe:/a:indy:httpd:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nDate: .*\\nServer: FrontPage-PWS32/([\\d.]+)\\n| p/FrontPage Personal Webserver/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: WindWeb/([\\d.]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Home Gateway\\\"\\r\\n\\r\\n<html>\\r\\n\\r\\n<head>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=windows-1252\\\">\\r\\n<meta name=\\\"GENERATOR\\\" content=\\\"Microsoft FrontPage 4\\.0\\\">\\r\\n<meta name=\\\"ProgId\\\" content=\\\"FrontPage\\.Editor\\.Document\\\">\\r\\n<title>Pirelli Smart Gate</title>\\r\\n\\r\\n| p/WindWeb/ v/$1/ i/Pirelli Smartgate Ethernet DSL router web config/ d/router/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*Server: TSM_HTTP/([\\d.]+)\\n|s p/TSM httpd/ v/$1/ i/Tivoli Storage Manager http interface/ cpe:/a:ibm:tivoli_storage_manager:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*Server: ADSM_HTTP/([\\d.]+)\\nContent-type: text/html\\n\\n<HEAD>\\n<TITLE>\\nServer Administration\\n</TITLE>\\n\\n<META NAME=\\\"IBMproduct\\\" CONTENT=\\\"ADSM\\\">\\n<META NAME=\\\"IBMproductVersion\\\" CONTENT=\\\"([\\d.]+)\\\">.*Storage Management Server for AIX|s p/ADSM httpd/ v/$1/ i/Tivoli Storage Manager http interface $2/ o/AIX/ cpe:/a:ibm:tivoli_storage_manager:$2/ cpe:/o:ibm:aix/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: ADSM_HTTP/([\\d.]+)\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>Server Administration</title></head><body><h1>Not Supported</h1><p>ANR4747W The web administrative interface is no longer supported\\. Begin using the Integrated Solutions Console instead\\.</p></body></html>| p/Tivoli Storage Manager http interface/ v/$1/ i/discontinued/ cpe:/a:ibm:tivoli_storage_manager:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*Server: ADSM_HTTP/([\\d.]+)\\r?\\n.*<TITLE>\\nServer Administration\\n</TITLE>.*<META NAME=\\\"IBMproductVersion\\\" CONTENT=\\\"([\\d.]+)\\\">.*<TITLE>\\nAdministrator Login\\n</TITLE>.*Storage Management Server for Windows|s p/ADSM httpd/ v/$1/ i/Tivoli Storage Manager http interface $2/ o/Windows/ cpe:/a:ibm:tivoli_storage_manager:$2/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: EPSON-HTTP/([\\d.]+)\\r\\n| p/Epson printer httpd/ v/$1/ d/printer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-length: \\d+\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/REC-html40/loose\\.dtd\\\">\\n<HTML>\\n<HEAD>\\n<TITLE>ADSL ROUTER Control Panel</TITLE>\\n</HEAD>\\n| p/Dynalink RTA DSL router http config/ d/router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: ENI-Web/R([\\d_.]+)\\r\\nContent-Type: text/html\\r\\nExpires: .*\\r\\nLast-Modified: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n<html>\\n\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\">\\n<title>SpeedStream (\\d+) Management Interface</title>\\n</head>\\n\\n| p/ENI-Web httpd/ v/$1/ i/SpeedStream $2 router http config/ d/router/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .*\\r\\nServer: ENI-Web/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"standard@\\d+\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n| p/ENI-Web httpd/ v/$1/ i/SpeedStream router http config/ d/router/\n\nmatch http m|^HTTP/1\\.1 403 Forbidden \\( The server denies the specified Uniform Resource Locator \\(URL\\)\\. Contact the server administrator\\.  \\)\\r\\n| p/Microsoft ISA httpd/ o/Windows/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized \\( The server requires authorization to fulfill the request\\. Access to the Web server is denied\\. Contact the server administrator\\.  \\)\\r\\n| p/Microsoft ISA httpd/ o/Windows/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request \\( The data is invalid\\.  \\)\\r\\nVia:| p/Microsoft ISA Server http proxy/ o/Windows/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 403 Forbidden \\( The ISA Server denied the specified Uniform Resource Locator \\(URL\\)\\.  \\)| p/Microsoft ISA httpd/ o/Windows/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 500 \\( The server denied the specified Uniform Resource Locator \\(URL\\)\\. Contact the server administrator\\.  \\)| p/Microsoft ISA httpd/ o/Windows/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 500 \\(  Connection refused \\)\\r\\n| p/Microsoft ISA httpd/ o/Windows/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 500 \\( No data record is available\\. For more information about this event, see ISA Server Help\\.  \\)\\r\\n| p/Microsoft ISA httpd/ o/Windows/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 500 Internal Server Error \\( An internal error occurred\\.  \\)\\r\\n| p/Microsoft IIS httpd/ o/Windows/ cpe:/a:microsoft:internet_information_services/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .* \\( El servidor requiere autorizaci\\xf3n para satisfacer la petici\\xf3n\\. Acceso al servidor Web denegado\\. P\\xf3ngase en contacto con el administrador del servidor\\.  \\)| p/Microsoft ISA httpd/ i/Spanish/ o/Windows/ cpe:/a:microsoft:isa_server::::es/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .* \\( La p\\xe1gina debe visualizarse en un canal seguro \\(es decir, en un nivel de sockets seguro\\)\\. P\\xf3ngase en contacto con el administrador del servidor\\.  \\)| p/Microsoft ISA httpd/ i/Spanish/ o/Windows/ cpe:/a:microsoft:isa_server::::es/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .* \\( El servidor deniega la direcci\\xf3n URL \\(Uniform Resource Locator\\) especificada\\. P\\xf3ngase en contacto con el administrador del servidor\\.  \\)| p/Microsoft ISA httpd/ i/Spanish/ o/Windows/ cpe:/a:microsoft:isa_server::::es/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 403 Forbidden \\( Der Server hat den angegebenen URL \\(Uniform Resource Locator\\) verweigert\\. Wenden Sie sich an den Serveradministrator\\.  \\)\\r\\n| p/Microsoft IIS httpd/ i/German/ o/Windows/ cpe:/a:microsoft:internet_information_services::::de/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 403 Forbidden \\( Der Server hat die angegebene URL verweigert\\. Wenden Sie sich an den Serveradministrator\\.  \\)\\r\\n| p/Microsoft IIS httpd/ i/German/ o/Windows/ cpe:/a:microsoft:internet_information_services::::de/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 403 Forbidden \\( The server denied the specified Uniform Resource Locator \\(URL\\)\\. Contact the server administrator\\.  \\)\\r\\n| p/Microsoft IIS httpd/ o/Windows/ cpe:/a:microsoft:internet_information_services/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 403 Forbidden \\( Der Server hat den angegebenen URL verweigert\\. Wenden Sie sich an den Serveradministrator\\.| p/Microsoft IIS httpd/ i/German/ o/Windows/ cpe:/a:microsoft:internet_information_services::::de/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 403 Forbidden \\( Le serveur a refus\\xc3\\xa9 l'URL \\(Uniform Resource Locator\\) sp\\xc3\\xa9cifi\\xc3\\xa9e\\. Contactez l'administrateur du serveur\\.| p/Microsoft IIS httpd/ i/French/ o/Windows/ cpe:/a:microsoft:internet_information_services::::fr/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 403 Forbidden \\( El servidor deneg\\xc3\\xb3 la direcci\\xc3\\xb3n URL \\(Uniform Resource Locator\\) especificada\\. P\\xc3\\xb3ngase en contacto con el administrador del servidor\\.| p/Microsoft IIS httpd/ i/Spanish/ o/Windows/ cpe:/a:microsoft:internet_information_services::::es/ cpe:/o:microsoft:windows/a\n\n# MS ISA Server 2000 enterprise edition on windows 2000 advanced server\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( The Uniform Resource Locator \\(URL\\) does not use a recognized protocol\\. Either the protocol is not supported or the request was not typed correctly\\. Confirm that a valid protocol is in use \\(for example, HTTP for a Web request\\)\\.  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server http proxy/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( L'URL \\(Uniform Resource Locator\\) n'utilise pas de protocole reconnu\\. Le protocole n'est pas pris en charge, ou la demande n'a pas \\xc3\\xa9t\\xc3\\xa9 saisie correctement\\. V\\xc3\\xa9rifiez qu'un protocole valide est utilis\\xc3\\xa9, par exemple HTTP pour une demande Web\\.  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server http proxy/ i/French/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server::::fr/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( La direcci\\xc3\\xb3n URL \\(Uniform Resource Locator\\) no utiliza un protocolo reconocido\\. El protocolo no es compatible o la petici\\xc3\\xb3n no se escribi\\xc3\\xb3 correctamente\\. Confirme que se utiliza un protocolo v\\xc3\\xa1lido \\(por ejemplo, HTTP para una petici\\xc3\\xb3n de web\\)\\.  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server http proxy/ i/Spanish/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server::::es/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( O URL n\\xc3\\xa3o usa um protocolo reconhecido\\. N\\xc3\\xa3o h\\xc3\\xa1 suporte para o protocolo ou a solicita\\xc3\\xa7\\xc3\\xa3o n\\xc3\\xa3o foi digitada corretamente\\. Confirme se um protocolo v\\xc3\\xa1lido est\\xc3\\xa1 em uso \\(por exemplo, HTTP para uma solicita\\xc3\\xa7\\xc3\\xa3o da Web\\)\\.  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server http proxy/ i/Portuguese/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server::::pt/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( Die URL \\(Uniform Resource Locator\\) verwendet ein unbekanntes Protokoll\\. Entweder wird das Protokoll nicht unterst\\xc3\\xbctzt, oder die Anforderung wurde nicht richtig eingegeben\\. Vergewissern Sie sich, dass ein g\\xc3\\xbcltiges Protokoll, wie z\\.B\\. HTTP f\\xc3\\xbcr eine Webanforderung, verwendet wird\\.  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server http proxy/ i/German/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server::::de/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( L'Uniform Resource Locator \\(URL\\) non utilizza un protocollo conosciuto\\. Il protocollo non \\xc3\\xa8 supportato oppure la richiesta non \\xc3\\xa8 stata digitata correttamente\\. Confermare la validit\\xc3\\xa0 del protocollo in uso \\(ad esempio, HTTP per una richiesta Web\\)\\.  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server http proxy/ i/Italian/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server::::it/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( URL-\\xd0\\xb0\\xd0\\xb4\\xd1\\x80\\xd0\\xb5\\xd1\\x81 \\xd0\\xbd\\xd0\\xb5 \\xd0\\xb8\\xd1\\x81\\xd0\\xbf\\xd0\\xbe\\xd0\\xbb\\xd1\\x8c\\xd0\\xb7\\xd1\\x83\\xd0\\xb5\\xd1\\x82 \\xd0\\xbf\\xd0\\xbe\\xd0\\xb4\\xd0\\xb4\\xd0\\xb5\\xd1\\x80\\xd0\\xb6\\xd0\\xb8\\xd0\\xb2\\xd0\\xb0\\xd0\\xb5\\xd0\\xbc\\xd1\\x8b\\xd0\\xb9 \\xd0\\xbf\\xd1\\x80\\xd0\\xbe\\xd1\\x82\\xd0\\xbe\\xd0\\xba\\xd0\\xbe\\xd0\\xbb\\. \\xd0\\x9f\\xd1\\x80\\xd0\\xbe\\xd1\\x82\\xd0\\xbe\\xd0\\xba\\xd0\\xbe\\xd0\\xbb \\xd0\\xbd\\xd0\\xb5 \\xd0\\xbf\\xd0\\xbe\\xd0\\xb4\\xd0\\xb4\\xd0\\xb5\\xd1\\x80\\xd0\\xb6\\xd0\\xb8\\xd0\\xb2\\xd0\\xb0\\xd0\\xb5\\xd1\\x82\\xd1\\x81\\xd1\\x8f, \\xd0\\xbb\\xd0\\xb8\\xd0\\xb1\\xd0\\xbe \\xd0\\xb7\\xd0\\xb0\\xd0\\xbf\\xd1\\x80\\xd0\\xbe\\xd1\\x81 \\xd0\\xb2\\xd0\\xb2\\xd0\\xb5\\xd0\\xb4\\xd0\\xb5\\xd0\\xbd \\xd0\\xbd\\xd0\\xb5\\xd0\\xbf\\xd1\\x80\\xd0\\xb0\\xd0\\xb2\\xd0\\xb8\\xd0\\xbb\\xd1\\x8c\\xd0\\xbd\\xd0\\xbe\\. \\xd0\\xa3\\xd0\\xb1\\xd0\\xb5\\xd0\\xb4\\xd0\\xb8\\xd1\\x82\\xd0\\xb5\\xd1\\x81\\xd1\\x8c, \\xd1\\x87\\xd1\\x82\\xd0\\xbe \\xd0\\xb8\\xd1\\x81\\xd0\\xbf\\xd0\\xbe\\xd0\\xbb\\xd1\\x8c\\xd0\\xb7\\xd1\\x83\\xd0\\xb5\\xd1\\x82\\xd1\\x81\\xd1\\x8f \\xd0\\xb2\\xd0\\xb5\\xd1\\x80\\xd0\\xbd\\xd1\\x8b\\xd0\\xb9 \\xd0\\xbf\\xd1\\x80\\xd0\\xbe\\xd1\\x82\\xd0\\xbe\\xd0\\xba\\xd0\\xbe\\xd0\\xbb \\(\\xd0\\xbd\\xd0\\xb0\\xd0\\xbf\\xd1\\x80\\xd0\\xb8\\xd0\\xbc\\xd0\\xb5\\xd1\\x80 HTTP \\xd0\\xb4\\xd0\\xbb\\xd1\\x8f \\xd0\\xb2\\xd0\\xb5\\xd0\\xb1-\\xd0\\xb7\\xd0\\xb0\\xd0\\xbf\\xd1\\x80\\xd0\\xbe\\xd1\\x81\\xd0\\xbe\\xd0\\xb2\\)\\.  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server http proxy/ i/Russian/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server::::ru/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( \\xe7\\xbb\\x9f\\xe4\\xb8\\x80\\xe8\\xb5\\x84\\xe6\\xba\\x90\\xe5\\xae\\x9a\\xe4\\xbd\\x8d\\xe5\\x99\\xa8\\(URL\\)\\xe6\\x9c\\xaa\\xe4\\xbd\\xbf\\xe7\\x94\\xa8\\xe5\\x8f\\xaf\\xe4\\xbb\\xa5\\xe8\\xaf\\x86\\xe5\\x88\\xab\\xe7\\x9a\\x84\\xe5\\x8d\\x8f\\xe8\\xae\\xae\\xe3\\x80\\x82\\xe5\\x8d\\x8f\\xe8\\xae\\xae\\xe4\\xb8\\x8d\\xe5\\x8f\\x97\\xe6\\x94\\xaf\\xe6\\x8c\\x81\\xe6\\x88\\x96\\xe9\\x94\\xae\\xe5\\x85\\xa5\\xe7\\x9a\\x84\\xe8\\xaf\\xb7\\xe6\\xb1\\x82\\xe4\\xb8\\x8d\\xe6\\xad\\xa3\\xe7\\xa1\\xae\\xe3\\x80\\x82\\xe8\\xaf\\xb7\\xe7\\xa1\\xae\\xe8\\xae\\xa4\\xe6\\x89\\x80\\xe4\\xbd\\xbf\\xe7\\x94\\xa8\\xe7\\x9a\\x84\\xe5\\x8d\\x8f\\xe8\\xae\\xae\\xe6\\x9c\\x89\\xe6\\x95\\x88\\(\\xe4\\xbe\\x8b\\xe5\\xa6\\x82\\xef\\xbc\\x8c\\xe4\\xb8\\xba Web \\xe8\\xaf\\xb7\\xe6\\xb1\\x82\\xe4\\xbd\\xbf\\xe7\\x94\\xa8 HTTP\\)\\xe3\\x80\\x82  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server Web Proxy/ i/Chinese (Simplified)/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server::::zh/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( \\xe7\\xb5\\xb1\\xe4\\xb8\\x80\\xe8\\xb3\\x87\\xe6\\xba\\x90\\xe5\\xae\\x9a\\xe4\\xbd\\x8d\\xe5\\x99\\xa8 \\(URL\\) \\xe6\\xb2\\x92\\xe6\\x9c\\x89\\xe4\\xbd\\xbf\\xe7\\x94\\xa8\\xe5\\xb7\\xb2\\xe8\\xbe\\xa8\\xe8\\xad\\x98\\xe7\\x9a\\x84\\xe9\\x80\\x9a\\xe8\\xa8\\x8a\\xe5\\x8d\\x94\\xe5\\xae\\x9a\\xe3\\x80\\x82\\xe5\\xa6\\x82\\xe6\\x9e\\x9c\\xe4\\xb8\\x8d\\xe6\\x98\\xaf\\xe4\\xb8\\x8d\\xe6\\x94\\xaf\\xe6\\x8f\\xb4\\xe9\\x80\\x9a\\xe8\\xa8\\x8a\\xe5\\x8d\\x94\\xe5\\xae\\x9a\\xef\\xbc\\x8c\\xe5\\xb0\\xb1\\xe6\\x98\\xaf\\xe9\\x8d\\xb5\\xe5\\x85\\xa5\\xe7\\x9a\\x84\\xe8\\xa6\\x81\\xe6\\xb1\\x82\\xe4\\xb8\\x8d\\xe6\\xad\\xa3\\xe7\\xa2\\xba\\xe3\\x80\\x82\\xe8\\xab\\x8b\\xe7\\xa2\\xba\\xe8\\xaa\\x8d\\xe4\\xbd\\xbf\\xe7\\x94\\xa8\\xe4\\xb8\\xad\\xe7\\x9a\\x84\\xe9\\x80\\x9a\\xe8\\xa8\\x8a\\xe5\\x8d\\x94\\xe5\\xae\\x9a\\xe6\\x9c\\x89\\xe6\\x95\\x88 \\(\\xe4\\xbe\\x8b\\xe5\\xa6\\x82 Web \\xe8\\xa6\\x81\\xe6\\xb1\\x82\\xe7\\x9a\\x84 HTTP\\)\\xe3\\x80\\x82  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server Web Proxy/ i/Chinese (Traditional)/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server::::zh_tw/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( URL\\(Uniform Resource Locator\\)\\xec\\x97\\x90\\xec\\x84\\x9c \\xec\\x9d\\xb8\\xec\\x8b\\x9d\\xeb\\x90\\x9c \\xed\\x94\\x84\\xeb\\xa1\\x9c\\xed\\x86\\xa0\\xec\\xbd\\x9c\\xec\\x9d\\x84 \\xec\\x82\\xac\\xec\\x9a\\xa9\\xed\\x95\\x98\\xec\\xa7\\x80 \\xec\\x95\\x8a\\xec\\x8a\\xb5\\xeb\\x8b\\x88\\xeb\\x8b\\xa4\\. \\xec\\xa7\\x80\\xec\\x9b\\x90\\xeb\\x90\\x98\\xec\\xa7\\x80 \\xec\\x95\\x8a\\xeb\\x8a\\x94 \\xed\\x94\\x84\\xeb\\xa1\\x9c\\xed\\x86\\xa0\\xec\\xbd\\x9c\\xec\\x9d\\xb4\\xea\\xb1\\xb0\\xeb\\x82\\x98 \\xec\\x9e\\x85\\xeb\\xa0\\xa5\\xed\\x95\\x9c \\xec\\x9a\\x94\\xec\\xb2\\xad\\xec\\x9d\\xb4 \\xec\\x98\\xac\\xeb\\xb0\\x94\\xeb\\xa5\\xb4\\xec\\xa7\\x80 \\xec\\x95\\x8a\\xec\\x8a\\xb5\\xeb\\x8b\\x88\\xeb\\x8b\\xa4\\. \\xec\\x98\\xac\\xeb\\xb0\\x94\\xeb\\xa5\\xb8 \\xed\\x94\\x84\\xeb\\xa1\\x9c\\xed\\x86\\xa0\\xec\\xbd\\x9c\\xec\\x9d\\x84 \\xec\\x82\\xac\\xec\\x9a\\xa9\\xed\\x95\\x98\\xea\\xb3\\xa0 \\xec\\x9e\\x88\\xeb\\x8a\\x94\\xec\\xa7\\x80 \\xed\\x99\\x95\\xec\\x9d\\xb8\\xed\\x95\\x98\\xec\\x8b\\xad\\xec\\x8b\\x9c\\xec\\x98\\xa4\\. \\xec\\x98\\x88\\xeb\\xa5\\xbc \\xeb\\x93\\xa4\\xec\\x96\\xb4 \\xec\\x9b\\xb9 \\xec\\x9a\\x94\\xec\\xb2\\xad\\xec\\x9d\\x98 \\xea\\xb2\\xbd\\xec\\x9a\\xb0\\xec\\x97\\x90\\xeb\\x8a\\x94 HTTP\\xec\\x9e\\x85\\xeb\\x8b\\x88\\xeb\\x8b\\xa4\\.  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server Web Proxy/ i/Korean/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server::::ko/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( Uniform Resource Locator \\(URL\\) \\xe8\\xaa\\x8d\\xe8\\xad\\x98\\xe3\\x81\\x95\\xe3\\x82\\x8c\\xe3\\x81\\xa6\\xe3\\x81\\x84\\xe3\\x82\\x8b\\xe3\\x83\\x97\\xe3\\x83\\xad\\xe3\\x83\\x88\\xe3\\x82\\xb3\\xe3\\x83\\xab\\xe3\\x82\\x92\\xe4\\xbd\\xbf\\xe7\\x94\\xa8\\xe3\\x81\\x97\\xe3\\x81\\xa6\\xe3\\x81\\x84\\xe3\\x81\\xbe\\xe3\\x81\\x9b\\xe3\\x82\\x93\\xe3\\x80\\x82\\xe3\\x83\\x97\\xe3\\x83\\xad\\xe3\\x83\\x88\\xe3\\x82\\xb3\\xe3\\x83\\xab\\xe3\\x81\\x8c\\xe3\\x82\\xb5\\xe3\\x83\\x9d\\xe3\\x83\\xbc\\xe3\\x83\\x88\\xe3\\x81\\x95\\xe3\\x82\\x8c\\xe3\\x81\\xa6\\xe3\\x81\\x84\\xe3\\x81\\xaa\\xe3\\x81\\x84\\xe3\\x81\\x8b\\xe3\\x80\\x81\\xe8\\xa6\\x81\\xe6\\xb1\\x82\\xe3\\x81\\x8c\\xe6\\xad\\xa3\\xe3\\x81\\x97\\xe3\\x81\\x8f\\xe5\\x85\\xa5\\xe5\\x8a\\x9b\\xe3\\x81\\x95\\xe3\\x82\\x8c\\xe3\\x81\\xbe\\xe3\\x81\\x9b\\xe3\\x82\\x93\\xe3\\x81\\xa7\\xe3\\x81\\x97\\xe3\\x81\\x9f\\xe3\\x80\\x82\\xe6\\x9c\\x89\\xe5\\x8a\\xb9\\xe3\\x81\\xaa\\xe3\\x83\\x97\\xe3\\x83\\xad\\xe3\\x83\\x88\\xe3\\x82\\xb3\\xe3\\x83\\xab \\(Web \\xe8\\xa6\\x81\\xe6\\xb1\\x82\\xe3\\x81\\xab\\xe3\\x81\\xaf HTTP \\xe3\\x81\\xaa\\xe3\\x81\\xa9\\) \\xe3\\x81\\x8c\\xe4\\xbd\\xbf\\xe7\\x94\\xa8\\xe3\\x81\\x95\\xe3\\x82\\x8c\\xe3\\x81\\xa6\\xe3\\x81\\x84\\xe3\\x82\\x8b\\xe3\\x81\\x93\\xe3\\x81\\xa8\\xe3\\x82\\x92\\xe7\\xa2\\xba\\xe8\\xaa\\x8d\\xe3\\x81\\x97\\xe3\\x81\\xa6\\xe3\\x81\\x8f\\xe3\\x81\\xa0\\xe3\\x81\\x95\\xe3\\x81\\x84\\xe3\\x80\\x82  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server http proxy/ i/Japanese/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server::::ja/ cpe:/o:microsoft:windows/a\n\nmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( L'URL \\(Uniform Resource Locator\\) n'utilise pas de protocole reconnu\\. Soit le protocole n'est pas pris en charge, soit la demande n'a pas \\xe9t\\xe9 tap\\xe9e correctement\\.| p/Microsoft ISA Server Web Proxy/ i/French/ o/Windows/ cpe:/a:microsoft:isa_server::::fr/ cpe:/o:microsoft:windows/a\nsoftmatch http-proxy m|^HTTP/1\\.1 502 Proxy Error \\( [^\\r\\n]+  \\)\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\n| p/Microsoft ISA Server http proxy/ o/Windows/ h/$1/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 407 Proxy Authentication Required \\( The ISA Server requires authorization to fulfill the request\\. Access to the Web Proxy service is denied\\.  \\)\\r\\n| p/Microsoft ISA Server Web Proxy/ i/Proxy auth required/ o/Windows/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 407 Proxy Authentication Required \\( El servidor ISA requiere autorizaci\\xc3\\xb3n para completar la petici\\xc3\\xb3n\\. Acceso denegado al servicio de proxy web\\.  \\)\\r\\n| p/Microsoft ISA Server Web Proxy/ i/Spanish; Proxy auth required/ o/Windows/ cpe:/a:microsoft:isa_server::::es/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^IsException=TRUE\\r\\nExceptionMsg=| p/Microsoft ISA Server Web Proxy/ o/Windows/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\n\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>SMC Barricade Wireless Broadband Router</TITLE>| p/SMC Barricade WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n.*<HTML><HEAD><TITLE>SMC Barricade Broadband Router</TITLE>|s p/SMC Barricade router http config/ d/broadband router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Monkey/([\\d.]+) \\(Linux\\)\\r\\n|s p/Monkey httpd/ v/$1/ o/Linux/ cpe:/a:monkey-project:monkey_http_daemon:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Monkey/([\\d.]+)\\r\\n|s p/Monkey httpd/ v/$1/ cpe:/a:monkey-project:monkey_http_daemon:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Monkey Server\\r\\n| p/Monkey httpd/ cpe:/a:monkey-project:monkey_http_daemon/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nDate: .*\\nPragma: no-cache\\n      Server: wr_httpd/([\\d.]+)\\n| p/wr_httpd embedded httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nContent-length: 0\\r\\nWWW-Authenticate: Basic realm=\\\"Cayman-2E\\\"\\r\\n\\r\\n| p/Cayman 2E router http config/ d/router/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nContent-length: 0\\r\\nWWW-Authenticate: Basic realm=\\\"Cayman-DSL\\\"\\r\\n\\r\\n| p/Cayman DSL router http config/ d/router/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<h1>Bad Request \\(Invalid .*\\)</h1>$| p/Microsoft IIS httpd/ cpe:/a:microsoft:internet_information_services/\nmatch http m|^HTTP/1\\.0 200 OK\\nMIME-version: 1\\.0\\nContent-type: text/html\\n\\n<html>\\n<head><title> XTide Tide Prediction Server </title>| p/xtide Tide prediction httpd/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Agranat-EmWeb/R([\\d_.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"User\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Nortel Bay router http config/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nPragma: no-cache\\r\\n.*<title>DTA310 Web Configuration Pages</title></head>|s p/DTA310 VoIP router http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\nContent-length: \\d+\\n\\n<html><head><title></title>.*<font size=\\\"5\\\"><a href=\\\"PrintSir\\.htm\\\">Enter PrintSir utilities</font><|s p/Edimax Printserver httpd/ d/print server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FSPMS/([\\d.]+) \\(Win32\\)|s p/F-Secure Policy Manager Server httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"SpeedTouch \\(([-\\w]+)\\)\\\"\\r\\n\\r\\n| p/SpeedTouch DSL router http config/ i/MAC $1/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: RapidLogic/([\\d.]+)\\r\\nMIME-version: [\\d.]+\\r\\nContent-type: text/html\\r\\nDate: .*<META NAME=\\\"GENERATOR\\\" Content=\\\"Visual Page 2\\.0 for Windows\\\">\\r\\n|s p/RapidLogic httpd/ v/$1/ i/Brocade Silkworm Fibreswitch http config/ d/switch/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Netscape-Commerce/([\\d.]+)\\r\\n| p/Netscape-Commerce httpd/ v/$1/ cpe:/a:netscape:commerce_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic Realm=\\\"DSLink 200 U/E\\\"\\r\\n| p/DSLink 200 DSL router http config/ d/router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nServer: TUX/([\\d.]+) \\(Linux\\)\\r\\n| p/TUX httpd/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nExpires: .*\\r\\nContent-Type: text/html\\r\\n\\r\\n\\n<html>\\n\\n  <head>\\n    <meta http-equiv=\\\"content-type\\\" content=\\\"text/html;charset=iso-8859-1\\\">\\n    \\n    <title>Remote UI &lt;Top Page&gt; :  ; [\\d ]+</title>\\n| p/Canon LBP-2000 printer httpd/ d/printer/ cpe:/h:canon:lbp-2000/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<title>Remote UI &lt;Top Page&gt; : iR(\\w+) ;|s p/Canon imageRUNNER $1 printer http config/ d/printer/ cpe:/h:canon:imagerunner_$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>Remote UI \\(Top Page\\):&nbsp;(MF\\w+) Series|s p/Canon $1 printer http config/ d/printer/ cpe:/h:canon:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: 2Wire-Gateway/([-\\w_.]+)\\r\\n| p/2Wire HomePortal router http config/ i/Firmware $1/ d/router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: 2wire Gateway ([\\d.]+)\\r\\n|s p/2Wire HomePortal http config/ v/$1/ d/broadband router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: 2wire Gateway\\r\\n|s p/2Wire HomePortal router http config/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\n.*<title>2Wire HomePortal</title>|s p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/2Wire HomePortal router http config/ d/router/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma:no-cache\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<title>AXIS ([\\d/+]+); IP address: [\\d.]+</title>\\n| p/AXIS $1 print server http config/ d/print server/ cpe:/h:axis:$1/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d.*<TITLE>Lantronix Web Manager ([\\d.]+) : Home</TITLE>|s p/Lantronix Web Manager/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"DI-(\\w+)\\\"\\r\\n\\r\\n| p/D-Link DI-$1 http config/ d/WAP/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic Realm=\\\"D-Link ([-\\w_.]+) Router\\\"\\r\\n| p/D-Link $1 router http config/ d/WAP/ cpe:/h:dlink:$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"administration\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Efficient Networks router http config/ d/router/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\n\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!--CAS:0003--><HTML><HEAD><SCRIPT LANGUAGE=JavaScript><!--\\ndocument\\.write\\(\\\"<TITLE>\\\"\\)\\nvar l1=\\\"713P\\\"| p/D-Link DI-713P wireless access point http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 401 NG\\r\\nWWW-Authenticate: Basic realm=\\\"AirLive W([\\w._-]+)\\\"\\r\\n\\r\\n<!--CAS:0003-->Unauthorized| p/AirLive W$1 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 401 NG\\r\\nWWW-Authenticate: Basic realm=\\\"(RT-[\\w._-]+)\\\"\\r\\n\\r\\n<!--CAS:0003-->Unauthorized| p/Asus $1 WAP http config/ d/WAP/ cpe:/h:asus:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!---CAS:0003--><HTML><HEAD><TITLE>SMC Barricade Wireless Broadband Router</TITLE>| p/SMC Barricade wireless broadband router http config/ d/broadband router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!---CAS:0003--><HTML><HEAD><TITLE>Broadband NAT Router Web-Console</TITLE>| p/Digtus DN-11001 broadband router http config/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!---CAS:0003--><HTML><HEAD>\\n<TITLE>Wireless Broadband NAT Router Web-Console| p/Safecom SWBR 54000 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!---CAS:0003--><HTML><HEAD>\\n<TITLE>(FBR-[\\w._-]+)  Broadband NAT Router Web-Console</TITLE>| p/LevelOne $1 router http config/ d/router/ cpe:/h:levelone:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!---CAS:0003--><HTML><HEAD>\\n<TITLE>(WBR-[\\w._-]+) Wireless Broadband NAT Router Web-Console</TITLE>| p/LevelOne $1 router http config/ d/router/ cpe:/h:levelone:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!---CAS:0003--><HTML><HEAD><TITLE>Broadband NAT Router Web-Console</TITLE>| p/ArtDio ARU-504 broadband router http config/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!---CAS:0003--><HTML><HEAD><TITLE>U\\.S\\. Robotics Broadband Router Configuration</TITLE>| p/USRobotics ADSL router http config/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!---CAS:0003--><HTML><HEAD>\\n<TITLE> Broadband NAT Router Web-Console           </TITLE>|s p/D-Link DGE-530T network adapter http config/\n\nmatch http m|^HTTP/1\\.0 200 OK\\r\\ncontent-type:text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>WWWinamp</TITLE>| p/WWWinamp remote control httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Length: \\d+\\r\\n.*<TITLE>Live view / - AXIS 205(?: Network Camera)? version ([\\d.]+)</TITLE>\\n|s p/AXIS 205 network camera web interface/ v/$1/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: RapidLogic/([\\d.]+)\\r\\nMIME-version: [\\d.]+\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n  <title>VT1000v Status</title>| p/RapidLogic httpd/ v/$1/ i/Motorola VT1000v VoIP Adapter http config/ d/VoIP adapter/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:motorola:vt1000v/a\nmatch http m|^HTTP/1\\.0 200 Okay\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n<head><title>home\\.htm</title>| p/NetComm NS4000 network camera http interface/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nContent-Type: \\(null\\)\\r\\nConnection: close\\r\\n\\r\\n([-\\w_.]+)\\n$| p/IRC Services http stats/ h/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Oracle Application Server Containers for J2EE\\r\\n| p/Oracle Application Server httpd/ cpe:/a:oracle:application_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Oracle Application Server Containers for J2EE 10g \\(([\\d.]+)\\)\\r\\n| p/Oracle Application Server httpd/ v/$1/ cpe:/a:oracle:application_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Oracle Application Server Containers for J2EE 10g \\(([\\d.]+)\\) - Developer Preview\\r\\n| p/Oracle Application Server httpd/ v/$1/ i/Developer preview/ cpe:/a:oracle:application_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Oracle-Application-Server-(\\d+[a-z])\\r\\n| p/Oracle Application Server $1 httpd/ cpe:/a:oracle:application_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Oracle-Application-Server-(\\d+[a-z])/([\\d.]+) Oracle-HTTP-Server\\r\\n| p/Oracle Application Server $1 httpd/ v/$2/ cpe:/a:oracle:application_server:$2/ cpe:/a:oracle:http_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle-Application-Server-(\\d+[a-z])/([\\d.]+) Oracle-HTTP-Server|s p/Oracle Application Server $1 httpd/ v/$2/ cpe:/a:oracle:application_server:$2/ cpe:/a:oracle:http_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: OracleAS-Web-Cache-(\\d+[a-z])/([\\d.]+)\\r\\n|s p/OracleAS Web Cache $1/ v/$2/ cpe:/a:oracle:application_server_web_cache:$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle-Application-Server-(\\d+[a-z])/([\\d.]+) Oracle-HTTP-Server OracleAS-Web-Cache-(\\d+[a-z])/([\\d.]+) |s p/Oracle Application Server $1 httpd/ v/$2/ i/OracleAS-Web-Cache-$3 $4/ cpe:/a:oracle:application_server_web_cache:$4/ cpe:/a:oracle:http_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Oracle-HTTP-Server\\r\\n| p/Oracle HTTP Server/ cpe:/a:oracle:http_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle Containers for J2EE\\r\\n.*<TITLE>Oracle Application Server 10g Release 3 \\(([\\d.]+)\\)|s p/Oracle Application Server 10g httpd/ v/$1/ i/Oracle Containers for J2EE/ cpe:/a:oracle:application_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle Containers for J2EE\\r\\n.*<title>Oracle Containers for J2EE 10g Release 3 \\(([\\d.]+)\\)|s p/Oracle Application Server 10g httpd/ v/$1/ i/Oracle Containers for J2EE/ cpe:/a:oracle:application_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle Containers for J2EE\\r\\n.*<TITLE>Welcome to Oracle Containers for J2EE 10g \\(([\\w._-]+)\\)</TITLE>|s p/Oracle Application Server 10g httpd/ v/$1/ i/Oracle Containers for J2EE/ cpe:/a:oracle:application_server:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-type: text/html\\r\\nCache-Control: public\\r\\nPragma: cache\\r\\nExpires: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys (WR\\w+)\\\"\\r\\n| p/Linksys $1 router http config/ d/router/ cpe:/h:linksys:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?content-length: \\d+\\r\\ncontent-type: text/html\\r\\ndate: .*<title>MikroTik RouterOS Managing Webpage</title>|s p/MikroTik httpd/ cpe:/o:mikrotik:routeros/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Askey Software ([\\d.]+)\\r\\n.*<title>Scientific.A..anta WebStar Cable Modem</title>.*|si p/Scientific Atlanta WebStar cable modem http config/ i/Askey Software $1/ d/broadband router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: XES 8830 WindWeb/([\\d.]+)\\r\\n| p/WindWeb/ v/$1/ i|Xerox 8830 printer/plotter| d/printer/ cpe:/a:windriver:windweb:$1/ cpe:/h:xerox:8830/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized \\r\\nServer:httpd\\r\\nDate: .*\\r\\nContent-Type:text/html\\r\\nWWW-Authenticate: Basic realm=\\\"U\\.S\\.Robotics\\\"\\r\\nConnection:close\\r\\n\\r\\n<HTML> <Title> 401 unAuthorized </title>                   <body> <H1> 401 unauthorized request </H1></body>                   </HTML>| p/USRobotics router http config/ d/broadband router/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: micro_httpd.*Basic realm=\\\"USR ADSL Gateway\\\"\\r\\n|s p/micro_httpd/ i/USRobotics router http config/ d/broadband router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: WN/([\\d.]+)\\r\\n| p/WN httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"DWL-700AP\\\"\\r\\n\\r\\n| p/D-Link DWL-700AP router http config/ d/router/ cpe:/h:dlink:dwl-700ap/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: WindWeb/([\\d.]+)\\r\\nDate: .*\\r\\nContent-Type: \\r\\n\\r\\n<html>\\n<head>\\n<title>DW6000 System Control Center</title>| p/WindWeb/ v/$1/ i/Hughes DW6000 satellite router http config/ d/router/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nServer: WindWeb/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"HUGHES Terminal\\\"\\r\\n\\r\\n<html>\\n<head>\\n<title>HN7000S System Control Center</title>|s p/WindWeb/ v/$1/ i/Hughes HN7000S satellite router http config/ d/router/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"DM602 \\\"\\r\\nContent-type: text/html\\r\\nContent-length: 0\\r\\n\\r\\n/\\\"\\r\\nContent-type: text/html\\r\\nContent-length: 0\\r\\n\\r\\n| p/Netgear DM602 router http config/ d/router/ cpe:/h:netgear:dm602/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"EvoCam\\\"| p/EvoCam http interface/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: GST ([\\d.]+) .*\\r\\n| p/Linksys WAP11 http config/ i/Firmware $1/ d/router/ cpe:/h:linksys:wap11/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nConnection: [Cc]lose\\r\\nServer: LANCOM ([\\w._+/-]+) Office ([\\w. /]+)\\r\\n| p|Lancom DSL/$1 router http config| v/$2/ d/router/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nConnection: Close\\r\\nServer: LANCOM ([\\w._+/-]+) Wireless ([\\w. /]+)\\r\\n| p/Lancom $1 wireless router http config/ v/$2/ d/router/ cpe:/h:lancom:$1/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nConnection: Close\\r\\nServer: LANCOM ([\\w._+/-]+) ADSL/ISDN ([\\w. /]+)\\r\\n| p|Lancom $1 DSL/ISDN router http config| v/$2/ d/router/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nConnection: Close\\r\\nServer: LANCOM ([\\w._+/-]+) VPN (?:\\(Annex B\\) )?([\\w. /]+)\\r\\n| p/Lancom $1 VPN http config/ v/$2/ d/security-misc/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\n.*<title>Cisco Systems, Inc\\. VPN (\\d+) Concentrator|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Cisco VPN $2 Concentrator http config/ d/terminal server/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nServer: Web Server\\r\\n\\r\\n$| p/Cisco VPN Concentrator http config/ d/terminal server/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nServer: Web Server\\r\\nLocation: .*\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HEAD><TITLE>Moved</TITLE></HEAD><BODY><A HREF=\\\".*\\\">Moved</A></BODY>\\r\\n$| p/Cisco VPN Concentrator http config/ d/terminal server/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nServer: Web Server\\r\\nLocation: https://[\\d.]+/webvpn\\.html\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HEAD><TITLE>Moved</TITLE></HEAD><BODY><A HREF=\\\"https://[\\d.]+/webvpn\\.html\\\">Moved</A></BODY>\\r\\n| p/Cisco VPN Concentrator http config/ d/terminal server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Web Server\\r\\n.*\\n<title>Cisco Systems, Inc\\. VPN (\\d+) Concentrator \\[VPN-EPUL\\]</title>|s p/Cisco VPN $1 Concentrator http config/ d/terminal server/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: BrowseAmp\\r\\n| p/BrowseAmp WinAmp webcontrol plugin/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><META HTTP-EQUIV=\\\"Content-type\\\" CONTENT=\\\"text/html; charset=iso-8859-1\\\">\\r\\n<TITLE>Dell Laser Printer (\\w+)</TITLE>| p/Dell Laser Printer $1 http config/ d/printer/\nmatch http m|^HTTP/1\\.0 401 Password Required\\r\\nWWW-Authenticate: Basic realm= StarVoice\\r\\nServer: GoAhead-Webs\\r\\n| p/GoAhead WebServer/ i/Aethra Starvoice DSL router http config/ d/router/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Thy/([\\d.]+) Debian/[\\w/]+ \\([^)]+\\) GnuTLS/([\\d.]+) zlib/([\\d.]+)\\r\\n| p/Thy httpd/ v/$1/ i/Debian; GnuTLS $2; zlib $3/ o/Linux/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Thy/([\\d.]+) Debian \\(\\w+\\) GnuTLS/([\\d.]+) zlib/([\\d.]+)\\r\\n| p/Thy httpd/ v/$1/ i/Debian; GnuTLS $2; zlib $3/ o/Linux/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Thy/([\\d.]+) zlib/([\\d.]+)\\r\\n| p/Thy httpd/ v/$1/ i/zlib $2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: FileMakerPro/([\\w.]+) WebCompanion/([\\w.]+)\\r\\n| p/WebCompanion httpd $2/ i/FileMakerPro $1/ cpe:/a:filemaker:filemaker_pro:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FileMakerPro/([\\d.]+)\\r\\n|s p/FileMakerPro httpd/ v/$1/ cpe:/a:filemaker:filemaker_pro:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: AdSubtract ([\\d.]+)\\r\\n| p/AdSubtract httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer:ATMEL Embedded Webserver\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys WAP11\\\",\\r\\n\\r\\n| p/ATMEL embedded httpd/ i/Linksys WAP11 http config/ d/router/ cpe:/h:linksys:wap11/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys WAP11\\\"\\r\\n\\r\\n| p/Linksys WAP11 http config/ d/router/ cpe:/h:linksys:wap11/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: bozohttpd/(\\w+)\\r\\n|s p/bozohttpd/ v/$1/ cpe:/a:eterna:bozohttpd:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Null httpd ([\\d.]+)\\r\\n|s p/Null httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\nServer: Dune/([\\d.]+)\\r\\n| p/Dune httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Meredydd Luff's Surfboard/([\\d.]+) \\(UNIX/\\w+\\)\\r\\n| p/Surfboard httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: zawhttpd ([\\d.]+)\\r\\n| p/zawhttpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nDate: .*\\nServer: NeepHttpd/([\\d.]+) \\(Linux\\)\\n| p/NeepHttpd/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nConnection: close\\r\\nServer: WindWeb/([\\d.]+)\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Home Gateway\\\"\\r\\n\\r\\nHasbani Web Server Error Report:| p/WindWeb/ v/$1/ i/Conexant DSL router http config/ d/router/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1.0 401 Unauthorized\\r\\nConnection: close\\r\\nServer: WindWeb/([\\d\\.]+)\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\"(AG \\w+)\"\\r\\n| p/WindWeb/ v/$1/ i/Nomadix $2 router http config/ d/router/ cpe:/a:windriver:windweb:$1/ cpe:/h:nomadix:$2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: WindWeb/([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Home Gateway\\\"\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nAge: 0\\r\\n\\r\\nHasbani Web Server Error Report:<HR>\\n<H1>Server Error: 401 Unauthorized</H1>\\r\\n<P><HR><H2>Access denied</H2><P><P><HR><H1>/doc/index\\.htm</H1><P>| p/WindWeb/ v/$1/ i/3Com router http config/ d/router/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nConnection: close\\r\\nServer: WindWeb/([\\d.]+)\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Home Gateway\\\"\\r\\n\\r\\nHasbani Web Server Error Report:<HR>\\n<H1>Server Error: 403 Forbidden</H1>\\r\\n<P><HR><H2>Access denied</H2><P>| p/WindWeb/ v/$1/ i/eTec DSL router http config/ d/router/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: AKCP Embedded Web Server\\r\\n.*<font color=#FFCC66>Uptime Devices</font>|s p/AKCP embedded httpd/ i|UptimeDevices Sensorprobe temp/humidity http config| d/specialized/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nServer: SHS\\r\\n|s p/Small Home Server httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nLast-Modified: .*\\r\\nContent-length: \\d+\\r\\n\\r\\n<html>\\n<head>\\n\\t<title>PXES on P\\d+</title>| p/PXES Linux Thin Client httpd/ d/terminal/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch http m|^HTTP/1\\.1 401 Access Denied Still Working\\r\\nWWW-Authenticate: Basic realm=.*\\r\\nServer: cpsrvd/([\\w._-]+)\\r\\n|s p/cPanel httpd/ v/$1/ i/unauthorized/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 401 Access Denied Still Working\\r\\nWWW-Authenticate: Basic realm=\\\"[^\"]+\\\"\\r\\nConnection: close\\r\\nSet-Cookie: logintheme=cpanel;| p/cPanel httpd/ i/unauthorized/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\nServer: cpaneld/([\\d.]+)\\n|s p/cPanel httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\nServer: cpsrvd/([\\d.]+)\\r\\n|s p/cPanel httpd/ v/$1/ o/Unix/\n\nmatch http m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\w._-]+)\\r\\n.*<title>(DWL-\\w+)</title>|s p/Allegro RomPager/ v/$1/ i/D-Link $2 WAP http config/ d/WAP/ cpe:/a:allegro:rompager:$1/ cpe:/h:dlink:$2/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?MIME-Version: [\\d.]+\\r\\nServer: CERN/([\\d.]+)\\r\\n.*alert\\(\\\"\\\\r\\\\nThis version of your browser cannot support the router's configuration completely\\. Please refer to the router's CD-ROM for upgrade information\\.\\\"\\);|s p/CERN httpd/ v/$1/ i/Edimax BR-6004 broadband router http config/ d/broadband router/ cpe:/h:edimax:br-6004/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: close\\r\\nDate: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nServer: Web-Server/([\\d.]+)\\r\\n\\r\\n<HTML>\\n<FRAMESET ROWS=\\\"82,40,\\*\\\"| p/Web-Server httpd/ v/$1/ i|NRG/Ricoh copier http config| d/printer/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Savant/([\\d.]+)\\r\\n| p/Savant httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Connection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n.*<th width=\\\"50%\\\">TiVo Web Project - TCL - v([\\d.]+)&nbsp;</th><th>&nbsp;|s p/TiVo Web Project http interface/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\nContent-Length: \\d+\\r\\nServer: TiVo Server/([\\d.]+)\\r\\n\\r\\n| p/TiVo Desktop httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: WebTopia/([\\w.]+) \\(Unix\\)\\r\\n| p/Archetopia WebTopia httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Connection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n.*C<small>ISCO<font height=10 size=2> S<small>YSTEMS<br>|s p/Cisco IP Phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Apache/([\\d.]+)\\+NITI ([^\\r\\n]+)\\r\\n| p/Net Integration Modified Apache httpd/ v/$1/ i/$2/ cpe:/a:apache:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Microsoft ASP\\.NET Web Matrix Server/([\\d.]+)\\r\\n| p/Microsoft ASP.NET Web Matrix httpd/ v/$1/ o/Windows/ cpe:/a:microsoft:asp.net/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Type: text/html\\r\\n\\r\\n.*<TITLE>Lexmark Optra (\\w+)</TITLE>|s p/Lexmark Optra $1 printer http config/ d/printer/ cpe:/h:lexmark:optra_$1/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Type: text/html\\r\\n\\r\\n.*<TITLE>Lexmark Optra SC (\\w+)</TITLE>|s p/Lexmark Optra SC $1 printer http config/ d/printer/ cpe:/h:lexmark:optra_sc_$1/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: GWS/([\\d.]+)\\r\\n|s p/Google httpd/ v/$1/ i/GWS/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: GFE/([\\d.]+)\\r\\n|s p/Google httpd/ v/$1/ i/GFE/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: GWS-GRFE/([\\d.]+)\\r\\n|s p/Google httpd/ v/$1/ i/GWS-GRFE/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\n# These should hopefully match before the more general Ubicom line in GenericLines\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nCache-control: no-cache\\r\\nServer: Ubicom/(\\d[-.\\w ]+)\\r\\nContent-Length: \\d+\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys WET54G\\\"\\r\\n| p/Ubicom httpd/ v/$1/ i/Linksys WET54G wireless bridge http config/ d/bridge/ cpe:/a:ubicom:httpd:$1/ cpe:/h:linksys:wet54g/a\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nCache-control: no-cache\\r\\nServer: Ubicom/(\\d[-.\\w ]+)\\r\\nLocation: login\\.html\\r\\n\\r\\n$| p/Ubicom httpd/ v/$1/ i/SMC SMC2870W Wireless bridge http config/ d/bridge/ cpe:/a:ubicom:httpd:$1/ cpe:/h:smc:smc2870w/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Ubicom/([\\d.]+)\\r\\n.*<title>(DI-\\w+)</title>\\n|s p/Ubicom httpd/ v/$1/ i/D-Link $2 router http config/ d/router/ cpe:/a:ubicom:httpd:$1/ cpe:/h:dlink:$2/a\nmatch http m=^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nServer: Ubicom/([\\d.]+)\\r\\nContent-Type: text/html\\r\\n\\r\\n\\xef\\xbb\\xbf.*<title>TRENDnet TEW-([\\w ]+) Router \\|\\r\\n\\t\\t Login\\r\\n\\t</title>=s p/Ubicom httpd/ v/$1/ i/TRENDnet TEW-$2 WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/\nmatch http m=^HTTP/1\\.0 200 200 OK\\r\\n.*Server: Ubicom/([\\d.]+)\\r\\n.*\\n\\t<title>D-LINK SYSTEMS, INC\\. \\| WIRELESS ROUTER  :\\n\\t\\t Login\\n\\t</title>=s p/Ubicom httpd/ v/$1/ i/D-Link DIR-655 WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/ cpe:/h:dlink:dir-655/a\nmatch http m%^HTTP/1\\.0 200 OK\\r\\n.*Server: Ubicom/([\\d.]+)\\r\\n.*<link rel=\\\"stylesheet\\\" rev=\\\"stylesheet\\\" href=\\\"/substyle_(DIR-\\w+)\\.css\\\" type=\\\"text/css\\\" />.*<title>D-LINK SYSTEMS, INC\\. \\| WIRELESS ROUTER  :\\r\\n         Login\\r\\n    </title>%s p/Ubicom httpd/ v/$1/ i/D-Link $2 WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/ cpe:/h:dlink:$2/a\nmatch http m=^HTTP/1\\.0 200 OK\\r\\n.*Server: Ubicom/([\\d.]+)\\r\\n.*<title>D-LINK SYSTEMS, INC\\. \\| WIRELESS ROUTER  :\\r\\n         Login\\r\\n    </title>=s p/Ubicom httpd/ v/$1/ i/D-Link DIR-655 WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/ cpe:/h:dlink:dir-655/a\nmatch http m=^HTTP/1\\.0 200 OK\\r\\n.*Server: Ubicom/([\\d.]+)\\r\\n.*<title>D-LINK SYSTEMS, INC\\. \\| WIRELESS ROUTER :\\r\\r\\nLogin\\r\\r\\n</title>=s p/Ubicom httpd/ v/$1/ i/D-Link WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/\n\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Default: admin/1234\\\"\\r\\n| p/GoAhead WebServer/ i/Router with realtek 8181 chipset http config/ d/router/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nCache-Control: max-age=3600\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<META HTTP-EQUIV=\\\"Pragma\\\" CONTENT=\\\"no-cache\\\"> \\n<title>Base Station Management Tool</title>\\n<META HTTP-EQUIV=\\\"MSThemeCompatible\\\"| p/Microsoft Wireless Base Station http config/ d/router/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nContent-Length: 169\\r\\nContent-Type: text/html\\r\\nLocation: /Volumes/\\r\\n\\r\\n<head><title>Moved Temporarily</title></head>\\r\\n<body><h2>Moved Temporarily!</h2>\\r\\n<p>The requested resource has been temporarily movedto a new location\\.\\r\\n</p>\\r\\n</body>\\r\\n$| p/AXIS StorPoint CD http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nContent-length: \\d+\\r\\n.*<!-- \\(c\\) Copyright Axis Communications.*Network CD-ROM Server</h2>|s p/AXIS StorPoint CD http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n.*<title>Cisco Systems, Inc\\. VPN 3002 Hardware Client|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Cisco VPN 3002 http config/ d/security-misc/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nContent-Length: \\d+\\r\\nServer: Boche/([\\d.]+) xmmsd/([\\d.]+)\\r\\n\\r\\n| p/Boche httpd/ v/$1/ i/xmmsd xmms http admin $2/ o/Unix/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: libwww-perl-daemon/([\\d.]+)\\r\\n| p/libwww-perl-daemon httpd/ v/$1/ cpe:/a:gisle_aas:libwww-perl:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: \\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML>\\n<HEAD>\\n  <META HTTP-EQUIV=Refresh CONTENT=\\\"0; URL=/cgi-bin/index\\.cgi\\\">\\n</HEAD>\\n</HTML>\\n\\n| p/Barracuda Spam firewall http config/ d/firewall/\n\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<title>MiniShare</title>\\r\\n.*<td class=\\\"total\\\" colspan=\\\"2\\\">Total: (\\d+) files</td><td class=\\\"totalsize\\\">([^<]+)</td></tr>\\r\\n</table>\\r\\n<hr><p class=\\\"versioninfo\\\"><a href=\\\"http://minishare\\.sourceforge\\.net/\\\">MiniShare ([\\d.]+)</a>|s p/MiniShare http interface/ v/$3/ i/$1 files, $2 shared/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<title>MiniShare</title>\\r\\n.*<td class=\\\"total\\\" colspan=\\\"2\\\">Total: (\\d+) files</td><td class=\\\"totalsize\\\">([^<]+)</td></tr>|s p/MiniShare http interface/ i/$1 files, $2 shared/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<title>MiniShare</title>\\r\\n|s p/MiniShare http interface/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch http m|^<html>\\n<head>\\n<title>Touchstone Status</title>\\n<META HTTP-EQUIV=\\\"Pragma\\\"| p/Arris Touchstone Cable Modem http config/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MACOS_Personal_Websharing\\r\\n.*<meta name=Title content=\\\"([^\"]+)\\\">|s p/Mac OS X Personal Websharing httpd/ i/Name $1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\n# Server line is odd. Somebody's idea of a joke?\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Sinclair ZX-81 Spectrum\\r\\n| p/Urchin Web Statistics httpd/ cpe:/a:google:urchin/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: WWW File Share Pro\\r\\n| p/WWW File Share Pro httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nExpires: 0\\r\\n<META http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=ISO-8559-1\\\">\\r\\nLocation: http://\\(null\\)/index\\.html\\r\\n\\r\\n| p/GoAhead WebServer/ i/ASUS SL6000 series router http config/ d/router/ cpe:/a:goahead:goahead_webserver/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: HP Apache-based Web Server/(\\d[\\w.]+) \\(Unix\\)\\r\\n| p/HP Apache-based httpd/ v/$1/ o/HP-UX/ cpe:/h:hp:apache-based_web_server:$1/ cpe:/o:hp:hp-ux/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: HP Apache-based Web Server/(\\d[\\w.]+) \\(Unix\\) ?([^\\r\\n]+)\\r\\n| p/HP Apache-based httpd/ v/$1/ i/$2/ o/HP-UX/ cpe:/h:hp:apache-based_web_server:$1/ cpe:/o:hp:hp-ux/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection:close\\r\\nHost:([-\\w_.]+)\\r\\nServer:WebSVR Version ([^\\r\\n]+)\\r\\n| p/WebSVR httpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Internet Firewall\\r\\n| p/3Com OfficeConnect Firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Router/([\\d.]+)\\r\\nContent-Type: text/html\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic Realm=\\\"Login as admin\\\"\\r\\n\\r\\n| p/Router httpd/ v/$1/ i/D-Link DI-804V VPN router http config/ d/router/ cpe:/h:dlink:di-804v/a\nmatch http m|^<html>\\n<title>NETGEAR Web Smart Switch</title>\\n<frameset rows='109,\\*' framespacing=0 frameborder=no>\\n <frame name=top src=top\\.htm scrolling=no>\\n| p/Netgear FS526T Switch http config/ d/switch/ cpe:/h:netgear:fs526t/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>NETGEAR Web Smart Switch</TITLE>\\r\\n| p/Netgear FS726TP switch http config/ d/switch/ cpe:/h:netgear:fs726tp/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>NETGEAR Web Smart Switch</TITLE>\\n| p/Netgear GS724T Switch http config/ d/switch/ cpe:/h:netgear:gs724t/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\n.*\\n<html><head><title>NETGEAR Web Smart Switch</title>|s p/Netgear GS108T switch http config/ d/switch/ cpe:/h:netgear:gs108t/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\n.*\\n<html>\\n<title>NETGEAR Web Smart Switch</title>|s p/Netgear GS716T switch http config/ d/switch/ cpe:/h:netgear:gs716t/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: swcd/([\\d.]+)\\r\\n| p/swcd httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: LiveStats Reporting Server\\r\\n.*<TITLE>DeepMetrix LiveStats ([\\d.]+) - Login</TITLE>|s p/DeepMetrix LiveStats httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Embedded HTTPD v([\\d.]+), \\d+\\(c\\) Delta Networks Inc\\.\\r\\n.*<title>NETGEAR Router</title>|s p/Delta Networks Embedded HTTPD/ v/$1/ i/Netgear router http config/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Embedded HTTPD v([\\d.]+), \\d+\\(c\\) Delta Networks Inc\\.\\r\\n| p/Delta Networks Embedded HTTPD/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nAllow: .*\\r\\nServer: Spyglass_MicroServer/([\\w.]+)\\r\\n| p/Spyglass Microserver embedded httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*<title>Metasploit Framework Web Console v([-\\w_.]+)</title>|s p/Metasploit Framework web console/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nHTTP/1\\.0 200 OK\\r\\nServer: (\\w+)\\r\\nConnection: close\\r\\nCache-Control: must-revalidate = no-cache\\r\\nContent-Type: text/html\\r\\nExpires: 0\\r\\nLast-Modified: 0\\r\\n\\r\\n<html><head>\\r\\n<title>Netgear Access Point http config</title>| p/$1/ i/Netgear WG602 wireless router http config/ d/router/ cpe:/h:netgear:wg602/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nServer: Grandstream/([\\d.]+)\\r\\n\\r\\n<HTML><HEAD><TITLE>Login Page</TITLE>.*<font size=4 color=\\\"ffffffff\\\">Welcome to Grandstream IP Phone</font>|s p/Grandstream httpd/ v/$1/ i/BudgeTone-100 VoIP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html;charset=iso-8859-1\\r\\nContent-Length: \\d+\\r\\nServer: Grandstream (BT\\w+) ([\\w._-]+)\\r\\n| p/Grandstream $1 VoIP phone http config/ v/$2/ d/VoIP phone/ cpe:/h:grandstream:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Grandstream\\r\\n.*<title>Grandstream Device Configuration</title>\\n.*<form action=\\\"dologin\\.htm\\\" method=\\\"post\\\" name=\\\"loginForm\\\">\\n|s p/Grandstream GXV-3000 VoIP phone http config/ d/VoIP phone/ cpe:/h:grandstream:gxv-3000/\nmatch http m|^HTTP/1\\.0 200 OK\\n.*<title>Grandstream Device Configuration</title>\\n.*<form action=\\\"/cgi-bin/dologin\\\" method=\\\"post\\\" name=\\\"loginForm\\\">|s p/Grandstream HT502 VoIP router http config/ d/VoIP adapter/ cpe:/h:grandstream:ht502/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>Grandstream Device Configuration</title>\\r\\n.*<form action=\\\"dologin\\.htm\\\" method=\\\"post\\\" name=\\\"loginForm\\\">|s p/Grandstream HT286 VoIP router http config/ d/VoIP adapter/ cpe:/h:grandstream:ht286/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Tcl-Webserver/([\\d.]+) .*CRADLE VERSION ([\\d.]+) CONTENTS TEMPLATE\\r\\n|s p/Tcl-Webserver/ v/$1/ i/Cradle Web-Access httpd $2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Tcl-Webserver/([\\d.]+) .*\\r\\n| p/Tcl-Webserver/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ListManagerWeb/([\\w.]+) \\(based on Tcl-Webserver/([\\d.]+)\\)\\r\\n|s p/Lyris ListManagerWeb/ v/$1/ i/based on Tcl-Webserver $2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\nExpires: .*\\r\\nWWW-Authenticate: Basic realm=\\\"level \\d+ access\\\"\\r\\n\\r\\n<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not authentication-capable or authentication failed\\.</BODY>\\r\\n\\r\\n| p/Cisco wireless router http config/ d/router/\nmatch http m|^HTTP/1\\.0 401 Unauthorized \\nContent-type:text/html\\nExpires: .*\\nWWW-Authenticate: Basic realm=\\\"access\\\"\\n\\n<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY BGCOLOR=#FFFFFF><H1>Authorization Required</H1>Browser not authentication-capable or authentication failed\\.</BODY>\\n\\n| p/Cisco Catalyst switch http config/ d/switch/ o/IOS/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\nExpires: .*\\r\\nWWW-Authenticate: Basic realm=\\\"access\\\"\\r\\n\\r\\n<HEAD><TITLE>Authorization Required</TITLE>.*Browser not authentication-capable or authentication failed|s p|Cisco switch/router http config| o/IOS/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: 4D_WebStar_(\\w+)/([\\d.]+)\\r\\n| p/4D WebStar $1/ v/$2/ o/Mac OS/ cpe:/o:apple:mac_os/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Got-Fish: Pike v([\\d.]+ release \\d+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Caudium/([^\\r\\n]+)\\r\\n|s p/Caudium httpd/ v/$2/ i/Pike $1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Caudium/([^\\r\\n]+)\\r\\n|s p/Caudium httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Caudium\\r\\n|s p/Caudium httpd/\n\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?MIME-Version: [\\d.]+\\r\\nServer: JC-HTTPD/([\\d.]+)\\r\\n.*<title>(C[-+\\w]+)</title>|s p/Oki Data $2 printer http config/ i/JC-HTTPD $1/ d/printer/ cpe:/h:oki:data_$2/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?MIME-Version: [\\d.]+\\r\\nServer: JC-HTTPD/([\\d.]+)\\r\\n.*<TITLE>(IB-[-+\\w]+)</TITLE>|s p/Kyocera $2 printer http config/ i/JC-HTTPD $1/ d/printer/ cpe:/h:kyocera:$2/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nMIME-Version: 1\\.0\\r\\nServer: JC-HTTPD/([\\w._-]+)\\r\\n.*<title>Network USB Hub</title>|s p/JC-HTTPD/ v/$1/ i/Belkin Network USB Hub http config/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nMIME-Version: 1\\.0\\r\\nServer: JC-HTTPD/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 748\\r\\n.*\\r\\n<frame name=topframe noresize scrolling=no src=\\\"\\./top\\.htm\\\">\\r\\n<frame name=main src=\\\"\\./eng/start/start\\.htm\\\">\\r\\n|s p/JC-HTTPD/ v/$1/ i/Kyocera FS-1030D printer http config/ d/printer/ cpe:/h:kyocera:fs-1030d/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nMIME-Version: 1\\.0\\r\\nServer: JC-HTTPD/([\\d.]+)\\r\\n.*<title>Imagistics\\w+ - TOP PAGE -</title>|s p/JC-HTTPD/ v/$1/ i/Sharp Imagistics printer http config/ d/printer/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nMIME-Version: 1\\.0\\r\\nServer: JC-HTTPD/([\\d.]+)\\r\\n.*<title>Sharp(AR-\\w+) - TOP PAGE -</title>|s p/JC-HTTPD/ v/$1/ i/Sharp $2 network card http config/ d/printer/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nMIME-Version: 1\\.0\\r\\nServer: JC-HTTPD/([\\d.]+)\\r\\nConnection: close\\r\\nContent-Type: text/html;\\r\\nContent-Length: 306\\r\\nAccept-Ranges: none\\r\\n\\r\\n<HTML>\\r\\n<HEAD><META HTTP-EQUIV=\\\"content-type\\\" CONTENT=\\\"text/html; charset=x-sjis\\\">\\r\\n<TITLE>HTTP 1\\.0/404</TITLE>\\r\\n|s p/JC-HTTPD/ v/$1/ i/Sharp AR-M550N printer http config/ d/printer/ cpe:/h:sharp:ar-m550n/a\n# Sharp, Ricoh\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nMIME-Version: 1\\.0\\r\\nServer: JC(-S?)HTTPD/([\\d.]+)\\r\\n| p/JC$1HTTPD/ v/$2/ d/printer/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nMIME-Version: 1\\.0\\r\\nServer: JC-HTTPD/([\\w._-]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nAccept-Ranges: none\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>(SX-\\w+)</title>\\r\\n| p/JC-HTTPD/ v/$1/ i/Silex $2 USB bridge http config/ d/bridge/ cpe:/h:silex:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nMIME-Version: 1\\.0\\r\\nServer: JC-HTTPD/([\\w._-]+)\\r\\nConnection: close\\r\\nContent-Type: text/html;charset=x-sjis\\r\\nContent-Length: \\d+\\r\\nAccept-Ranges: none\\r\\n\\r\\n<HTML><HEAD><TITLE>([\\w._-]+/[\\w._-]+) HomePage</TITLE>.*<NOFRAMES>This page is only for InternetExplorer3\\.0\\(or later\\) and NetScape Navigator3\\.0\\(or later\\)\\.</NOFRAMES>|s p/JC-HTTPD/ v/$1/ i/Star Micronics TSP700 printer/ d/printer/ h/$2/ cpe:/h:starmicronics:tsp700/a\n\nmatch http m|^HTTP/1\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Date: .*<html>\\n<head>\\n<title> Sun Java\\(tm\\) System Messenger Express </title>|s p/Sun Java System Messenger Express httpd/ cpe:/a:sun:java_system_messenger_express/\nmatch http m|^HTTP/1\\.0 (?:[^\\r\\n]+\\r\\n)+?\\r\\n<html>\\n<head>\\n<title>Login : Messenger Express</title>\\n<script>\\n|s p/Netscape Messenger Express httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*<title>Sun Java\\[tm\\] System Calendar Express (\\d+) ([\\w]+)</title>|s p/Sun Java System Calendar Express $1 httpd/ v/$2/ cpe:/a:sun:java_system_calendar_server:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\n\\n<title>.* NDT server</title>\\n| p/NDT httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: GeoHttpServer\\r\\n| p/GeoVision GeoHttpServer for webcams/ d/webcam/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: ATR/([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"ATI Switch\\\"\\r\\n| p/ATR httpd/ v/$1/ i/Allied Telesyn Rapier switch http config/ d/switch/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: ATR-HTTP-Server/([\\d.]+)\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Allied Telesyn Rapier (\\w+)\\\"\\r\\n| p/ATR httpd/ v/$1/ i/Allied Telesyn Rapier $2 switch http config/ d/switch/ cpe:/h:alliedtelesyn:rapier_$2/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: UPS_Server/([\\d.]+)\\r\\n.*\\r\\n<TITLE>ConnectUPS Web/SNMP Card</TITLE>|s p/UPS_Server httpd/ v/$1/ i|Powerware ConnectUPS WEB/SNMP Card http config| d/power-device/\nmatch http m|^HTTP/1\\.0 401 ;unauthorized\\r\\nServer: UPS_Server/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nConnection: Close\\r\\nSet-Cookie: ups=\\d+\\r\\nWWW-Authenticate: Basic realm=\\\"UPS Web Card\\\"\\r\\n| p/UPS_Server httpd/ v/$1/ i/Eaton 9355 UPS http config/ d/power-misc/\nmatch http m|^HTTP/1\\.0 200 ;OK\\r\\nServer: UPS_Server/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nConnection: Close\\r\\n\\r\\n<html>\\n<head>\\n<title>UPS Properties</title>\\n| p/MGE UPS_Server httpd/ v/$1/ d/power-device/\nmatch http m|^HTTP/1\\.0 200 ;OK\\r\\nServer: UPS_Server/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nExpires: Thu, 26 Oct 1995 00:00:00 GMT\\r\\nConnection: Close\\r\\n\\r\\n<html>\\n<head>\\n<title>UPS Properties</title>\\n| p/APC UPS_Server httpd/ v/$1/ i/APC 66074 network management card/ d/power-device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: PortWise mVPN \\(www\\.portwise\\.com\\)\\r\\n|s p/PortWise mVPN httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: WYM/([\\d.]+)\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Camera Server\\\"\\r\\n| p/WYM httpd/ v/$1/ i/IP-Video embedded camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\r\\n\\r\\n<head>\\r\\n<title>Mercury HTTP Services</title>\\r\\n| p|Mercury/32 httpd| o/Windows/ cpe:/o:microsoft:windows/a\n# Wow! Temperature of the device! The Java version seems to be incorrect, though, so I'm excluding it\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: Java/[\\d.]+\\r\\nContent-type: text/html\\r\\nContent-length: \\d+\\r\\n\\r\\n.*<TITLE>TINIWebServer</TITLE>.*Current temperature ([\\d.]+) F<BR>|s p/TINIWebServer Java httpd/ i/Device temperature $1F/ o/TiniOS/ cpe:/o:systronix:tinios/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .*\\nThe requested URL '' was not found on the Divar\\.<p>\\nReturn to|s p/Bosch Divar closed circuit camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 501 Unsupported method \\('GET'\\)\\r\\nServer: BaseHTTP/([\\d.]+) Python/([\\w.]+)\\r\\n| p/BaseHTTPServer/ v/$1/ i/Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Cable Modem\\\"\\r\\nContent-length: \\d+\\r\\nContent-type: text/html\\r\\nConnect: Keep-Alive\\r\\n\\r\\n<html>\\r\\n<head><title>401 Unauthorized</title></head>\\r\\n<body><h1>401 Unauthorized</h1>\\r\\n<p>Access to this resource is denied; your client has not supplied the correct authentication\\.</p></body>\\r\\n</html>\\r\\n| p|Coresma/Belkin Cable Modem httpd| d/router/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"NETGEAR (WGR\\w+)\\\"\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head><title>401 Unauthorized</title></head>\\r\\n<body><h1>401 Unauthorized</h1>\\r\\n<p>Access to this resource is denied; your client has not supplied the correct authentication\\.</p></body>\\r\\n</html>\\r\\n$| p/Netgear $1 WAP http config/ d/WAP/ cpe:/h:netgear:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\n.*<!-- Begin Hiding\\n         netscapeVersion =|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP Deskjet 5800 http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:deskjet_5800/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\n.*\\n\\n<title></title>\\n\\n\\n\\n\\n<script language=\\\"JavaScript1\\.1\\\">\\n<!-- Begin Hiding\\n netscapeVersion =|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i|HP PhotoSmart/Deskjet printer http config| d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Sun_Ray_Admin_Server/([\\d.]+)\\r\\n| p/SunRay http config/ v/$1/ o/Solaris/ cpe:/a:sun:ray_server_software/ cpe:/o:sun:sunos/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: WatchGuard Firewall\\r\\nwww-authenticate: Digest realm=\\\"WatchGuard SOHO (.+) Configuration\\\"| p/WatchGuard SOHO $1 http config/ d/firewall/ cpe:/h:watchguard:soho_$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WindWeb/([\\d.]+)\\r\\nConnection: close\\r\\n.*\\r\\n<title>Cisco Web Accessible Phone Settings</title>\\r\\n|s p/WindWeb/ v/$1/ i/Cisco 7935 IP Phone Conference Station http config/ d/VoIP phone/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"NETGEAR (D\\w+)\\\"\\r\\n| p/Netgear $1 router http config/ d/router/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"NETGEAR (DG[-\\w+]+) \\\"| p/Netgear $1 router http config/ d/router/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"NETGEAR DG\\w+  \\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n\\n<meta name=\\\"description\\\" content=\\\"DG(\\w+) FR \\d+\\\">\\n| p/Netgear DG$1 FR WAP http config/ i/French/ d/WAP/ cpe:/h:netgear:dg$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"NETGEAR (\\w+) *\\\"\\r\\n| p/Netgear $1 router http config/ d/broadband router/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"NETGEAR (\\w+) ADSL2\\+ Modem\\\"\\r\\n| p/Netgear $1 ADSL router http config/ d/broadband router/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: NetPort Software ([\\d.]+)\\r\\n.*<TITLE>Connection Information</TITLE><!-- Copyright\\(C\\) \\d+ Efficient Ne..orks -->|s p/NetPort httpd/ v/$1/ i/Efficient Networks Speedstream DSL router http config/ d/router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: NetPort Software ([\\d.]+)\\r\\n| p/NetPort httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nVia: [\\d.]+ Application and Content Networking System Software ([\\d.]+)\\r\\n| p/Cisco ACNS http cache/ v/$1/ o/IOS/ cpe:/a:cisco:application_and_content_networking_system_software:$1/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<a href=\\\"http://www\\.cisco\\.com/\\\">Application and Content Networking (?:System )?Software ([\\d.]+)</a>\\)\\n</BODY></HTML>\\n|s p/Cisco ACNS httpd/ v/$1/ o/IOS/ cpe:/a:cisco:application_and_content_networking_system_software:$1/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>VLC media player</title>\\n|s p/VLC media player http interface/ cpe:/a:videolan:vlc_media_player/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<a href=\\\"http://www\\.videolan\\.org/\\\">VLC media player ([\\d.]+)[^<]+</a> \\(http interface\\)</h2>\\n|s p/VLC media player http interface/ v/$1/ cpe:/a:videolan:vlc_media_player:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"WebAdmin\\\"\\r\\n\\r\\n<HTML>\\n<HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\" TEXT=\\\"#000000\\\" LINK=\\\"#2020ff\\\" VLINK=\\\"#4040cc\\\">\\n| p/ActionTec DSL http config/ d/broadband router/\nmatch http m|^HTTP/1\\.0 302 Document Follows\\r\\nLocation: https?:///private/welcome\\.ssi\\r\\nConnection: close\\r\\n\\r\\n$| p|BladeCenter/IBM RSA2 http config| d/remote management/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: \\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nDate:.*//inserted by Edward on 2004/01/07 for user pressing \\\"Enter\\\" to login if \\\"Username\\\" and \\\"Password\\\" are right|s p/D-Link DSL router http config/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: OmniHTTPd/([\\d.]+)\\r\\n|s p/OmniHTTPd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: OmniSecure/([\\w.]+)\\r\\n|s p/OmniSecure httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\n\\r\\n<HTML><HEAD><META HTTP-EQUIV=\\\"refresh\\\" CONTENT=\\\"0;URL=/bluedragon/nonadmin\\.cfm\\\"></HEAD></HTML>\\n\\n| p/Blue Dragon Built-in httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MirandaWeb/([\\d.]+)\\r\\n|s p/MirandaWeb http plugin for Miranda-IM/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<title>OfficeConnect Wireless 11g Cable/DSL Gateway</title>\\n|s p/3Com OfficeConnect wireless router http config/ d/router/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<title>OfficeConnect 11Mbps Wireless Access Point</title>\\n|s p/3Com OfficeConnect wireless access point http config/ d/router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Mirapoint/([-\\w_.]+)\\r\\n| p/Mirapoint email appliance http interface/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>Network Storage Link for USB 2\\.0 Disks</title>\\r\\n\\r\\n|s p/Linksys NSLU2 http config/ d/storage-misc/ cpe:/h:linksys:nslu2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Unknown\\r\\n.*<title>NetEnforcer Manager</title>|s p/Allot NetEnforcer bandwidth management http config/ d/load balancer/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: \\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n.*<meta name=\\\"description\\\" content=\\\"(DG\\d+)\\\">\\r\\n<title>NetGear Gateway Setup</title>|s p/Netgear $1 router http config/ d/router/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: LabVIEW/([\\d.]+)\\r\\n| p/National Instruments LabVIEW integrated httpd/ v/$1/ d/specialized/ cpe:/a:ni:labview:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: [\\d.]+/[\\d.]+\\r\\n.*<link rel=\\\"stylesheet\\\" href=\\\"\\.\\./www/neronet\\.css\\\" type=\\\"text/css\\\">|s p/NeroNET Nero Burning ROM http plugin/ cpe:/a:nero:neronet/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: http://www\\.cfauth\\.com/\\?cfru[\\w=]+\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n| p/CacheFlow http cache/ o/CacheOS/ cpe:/o:bluecoat:cacheos/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Groove-Relay/([\\d.]+)\\r\\n| p/Groove-Relay http service/ v/$1/ cpe:/a:microsoft:groove_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Askey Software ([\\d.]+)\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n\\r\\n<head>\\r\\n<title>Cable Modem Web Page</title>\\r\\n<meta name=\\\"GENERATOR\\\" content=\\\"Microsoft FrontPage 4\\.0\\\">\\r\\n| p/Askey httpd/ v/$1/ i/Motorola VoIP adapter http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Askey/([\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\n\\r\\n.*<b>This \\r\\n        website is blocked by the URL filter of Wireless Router\\. Please browse to another \\r\\n        site or go back\\.</b>|s p/Askey httpd/ v/$1/ i/Siemens Gigaset SE505 WAP http config/ d/WAP/ cpe:/h:siemens:gigaset_se505/a\n\nmatch http m|^HTTP/1\\.0 404 File Not Found\\r\\nContent-Type: text/html\\r\\n\\r\\n<b>The source you requested could not be found\\.</b>\\r\\n$| p/Icecast http statistics plugin/ cpe:/a:xiph:icecast/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n.*<title>Icecast Streaming Media Server</title>\\n|s p/Icecast http statistics plugin/ cpe:/a:xiph:icecast/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*title>Security</title>.*font size=4 face=Arial>This unit is password protected</font></p><p align=center><font size=3 face=Arial>Please enter the correct password  to access the web pages</font>|s p|VoIP/POTS gateway http config| d/VoIP adapter/\n\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>CiscoSecure ACS Login</title>|s p/Cisco Secure ACS login/ o/IOS/ cpe:/a:cisco:secure_access_control_server/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>CiscoSecure ACS Trial Login</title>\\r\\n|s p/Cisco Secure ACS login/ i/Trial version/ o/IOS/ cpe:/a:cisco:secure_access_control_server/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: httpd\\r\\n.*<title>Motorola HomeNet Product </title>|s p/Motorola broadband router http config/ d/broadband router/\nmatch http m|^HTTP/1\\.0 200 OK\\nServer: Olicom/v([\\d.]+)\\nExpires: .*\\nContent-Length: \\d+\\n\\n<html>\\r\\n\\r\\n<head>\\r\\n<title>(CF\\w+) Olicom Fast Ethernet L3 Switch \\([\\d.]+\\)</title>| p/Olicom httpd/ v/$1/ i/Olicom $2 switch http config/ d/switch/ cpe:/h:olicom:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\n\\r\\n<html><head>\\n<title>\\n  Authentication Form \\n</title> \\n</head> \\n \\n<BODY BGCOLOR=\\\"#000000\\\" TEXT=\\\"#00FF00\\\"> \\n\\n<p> \\n<h3 align=left><font face=\\\"arial,helvetica\\\">Client Authentication Remote \\nService</font></h3>| p/Check Point firewall client authentication httpd/ d/firewall/\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: CPWS/([^\\s]+).*content=\\\"WEBUI LOGIN PAGE\\\" /><TITLE>Gaia</TITLE>.*var version='([\\d\\w.]+)';var formAction|s p/Check Point firewall SmartPortal/ v/$2/ i/CPWS $1/ d/firewall/\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nCONTENT-LENGTH: 42\\r\\n\\r\\nYour request cannot be properly processed\\.$| p/DVR 2400 Security Camera web interface/ d/webcam/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: IBM-HTTP-Server/([\\d.]+)\\r\\n| p/IBM httpd/ v/$1/ cpe:/a:ibm:http_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Agranat-EmWeb/R([\\d_]+)\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nETag: \\\"[^\"]+\\\"\\r\\n.*<FRAME NAME=\\\"logon\\\" SRC=\\\"logon\\.html\\\" SCROLLING=\\\"auto\\\">\\n</FRAMESET>\\n<BODY BGCOLOR=\\\"#FFFFFF\\\">\\n</BODY>\\n</HTML>\\n|s p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Nortel BayStack switch http config/ d/switch/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: WebSnmp Server Httpd/([\\d.]+)\\r\\n| p/Apache WebSnmp module/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nContent-type: text/html\\n.*<frame src=\\\"PrintServer\\.htm\\\" name=\\\"PrintServer\\\" scrolling=\\\"auto\\\">.*<a href=\\\"PrintServer\\.htm\\\">Enter PrintServer utilities</font>|s p|Gembird/Hawking/Netgear print server http config| d/print server/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"ADSL Router \\(ANNEX A\\)\\\"\\r\\n.*System Authentication Failed\\.|s p/TRENDnet DSL router http config/ d/router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Plan9\\r\\n|s p/Plan 9 httpd/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: IceWarp WebSrv/([\\d.]+)\\r\\n| p/IceWarp webmail httpd/ v/$1/ cpe:/a:icewarp:webmail:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: IceWarp/([\\d.]+)\\r\\n| p/IceWarp webmail httpd/ v/$1/ cpe:/a:icewarp:webmail:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: WindWeb/([\\d.]+)\\r\\nDate: .*\\r\\nContent-Type: \\r\\n\\r\\n<html>\\n<head>\\n<title>DW([\\d]+) System Control Center</title>| p/WindWeb/ v/$1/ i/Hughes DirecWay $2 satellite router http config/ d/router/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\nDate: .*\\nServer: BBIagent\\.Net/([\\d.]+) Powered by HKSP\\.COM\\n| p/BBIagent.Net httpd/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nExpires: 0\\r\\nSet-Cookie: hpRibSession=;| p/HP Remote Lights-Out Edition II http config/ d/remote management/ cpe:/h:hp:integrated_lights-out/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\n.*Copyright 2001,2003 Hewlett-Packard Development Company.*<title>\\r\\nData Frame - Browser not HTTP 1\\.1 compatible\\r\\n</title>|s p/HP Remote Lights-Out http config/ d/remote management/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/ ([\\d.]+)\\r\\n\\r\\n<HTML><HEAD>\\n<script Language=\\\"JavaScript\\\">\\nfunction login\\(\\)\\n{\\ntop\\.location = \\\"/alogin\\.htm\\\"\\n}\\nfunction delay\\(\\)|s p/Allegro RomPager/ v/$1/ i/APC Masterswitch power controller http admin/ d/power-device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"Masterswitch\\\"\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n| p/Allegro RomPager/ v/$1/ i/APC Masterswitch power controller http admin/ d/power-device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.[01] 403 Forbidden\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/ *([\\w._-]+)\\r\\n.*<H1>Notice</H1>\\nSomeone is currently logged into the APC Management Web Server\\.<p>|s p/Allegro RomPager/ v/$1/ i/APC Masterswitch power controller http admin; server busy/ d/power-device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: BASIC realm=\\\"Administrator or User\\\"\\r\\n\\r\\nPassword Error\\. \\r\\n\\r\\n$| p/D-Link web camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nContent-Length: \\d+\\n.*<B>Cable Modem Description :</B>.*<P>ZyXEL Prestige (\\w+), HW V([\\d.]+), SW ZyNOS V([\\d.]+)\\(|s p/ZyXEL Prestige $1 router http config/ i/HW version $2; ZyNOS $3/ d/broadband router/ o/ZyNOS/ cpe:/h:zyxel:prestige_$1/a cpe:/o:zyxel:zynos/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: micro_httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"ZyXEL\\\"\\r\\n| p/micro_httpd/ i/ZyXEL Cable Modem http config/ d/broadband router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"(FVL[\\w+]+)\\\"\\r\\nContent-type: text/html\\r\\n\\r\\n401 Unauthorized| p/Netgear $1 router http config/ d/router/ cpe:/h:netgear:$1/a\n\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><FRAMESET COLS=\\\"23%,\\*\\\"><FRAME NAME=\\\"side\\\" SRC=\\\"MENUNET\\.htm\\\"><FRAME NAME=\\\"middle\\\" SRC=\\\"HOME\\.htm\\\"></FRAMESET><NOFRAMES>Your Browser must support frames to view this page\\.</NOFRAMES></HTML>$| p/OkiLan 6020e print server http config/ d/print server/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Web-Server/([\\d.]+)\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n.*<title>Web Image Monitor</title>\\n|s p/Web-Server httpd/ v/$1/ i/Ricoh Aficio printer web image monitor/ d/printer/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Web-Server/([\\d.]+)\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n.*<title>websys default page</title>\\n|s p/Web-Server httpd/ v/$1/ i/Ricoh Aficio printer web image monitor/ d/printer/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSet-Cookie: ssnid=[^;]+; path=/;\\r\\nContent-Type: text/html; charset=[Uu][Tt][Ff]-8\\r\\nWWW-Authenticate: Basic realm=\\\"sapbc\\\"\\r\\n| p/SAP Business Connector/ cpe:/a:sap:business_connector/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Type: text/html\\r\\n.*<!-- Copyright \\(c\\) \\d+-\\d+, Fuji Xerox Co\\., Ltd\\. All Rights Reserved\\. -->\\r\\n.*<TITLE>\\r\\nDocuColor (\\d+) - [\\d.]+\\r\\n</TITLE>|s p/Xerox DocuColor $1 printer http config/ d/printer/ cpe:/h:xerox:docucolor_$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nAllow: GET, HEAD\\r\\nServer: Spyglass_MicroServer/([-\\w_.]+)\\r\\n\\r\\n<html>\\n\\n<head>\\n\\n<title>  PhaserLink Printer Management Software  </title>| p/Spyglass_MicroServer/ v/$1/ i/Tektronix PhaserLink printer http config/ d/printer/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><TITLE>Lexmark Optra ([^<]+)</TITLE>| p/Lexmark Optra $1 printer http config/ d/printer/ cpe:/h:lexmark:optra_$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Rapid Logic/([\\d.]+)\\r\\n.*<!-- Copyright &#copy; \\d+-\\d+ Hewlett Packard Company\\. All rights reserved\\. -->\\r\\n.*<title>hp business inkjet ([^<]+)</title>|s p/RapidLogic httpd/ v/$1/ i/HP Business Inkjet $2 printer http config/ d/printer/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:hp:business_inkjet_$2/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: OpenLink-Web-Configurator/([\\d.]+)\\r\\n| p/OpenLink http config/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\nServer: wr_httpd/([\\d.]+) .*\\nWWW-Authenticate: Basic realm=\\\"WebRamp \\(use wradmin as the User Name\\)\\\"\\n| p/wr_httpd/ v/$1/ i/Webramp router http config/ d/router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*{FONT: bold 10pt Arial,Helvetica,sans-serif; COLOR: white;}.*{FONT: 10pt Arial,Helvetica,sans-serif; COLOR: black; BORDER: Medium White None; border-collapse: collapse}.*{\\tCOLOR: #b5b5e6}.*{COLOR: #b5b5e6}.*src=Gozila\\.js>|s p/Linksys BEFW11S4 router http config/ d/router/ cpe:/h:linksys:befw11s4/a\nmatch http m|^<html>\\n<title>(DGS-\\w+) *(?:Login)?</title>\\n| p/D-Link $1 Gigabit switch http config/ d/switch/ cpe:/h:dlink:$1/\nmatch http m|^HTTP/1\\.1 401 Authorized Required\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys WML(\\w+)\\\"\\r\\n| p/Linksys WML$1 media device http config/ d/media device/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CERN/([-\\w.]+)\\r\\n|s p/CERN httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\n<TITLE>KONICA MINOLTA PageScope Light for (Di\\d+)</TITLE>\\r\\n|s p/Konica Minolta Di$1 printer http config/ i/PageScope Light/ d/printer/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\n<title>KONICA MINOLTA PageScope Web Connection</title>\\r\\n|s p/Konica Minolta PageScope Web Connection/ d/printer/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\n<TITLE>KONICA MINOLTA PageScope Web Connection for (\\w+)</TITLE>\\r\\n|s p/Konica Minolta $1 printer http config/ i/PageScope Web Connection/ d/printer/ cpe:/h:konicaminolta:$1/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Embperl/([\\w.]+) Apache/([\\w.]+) \\(Fedora\\)\\r\\n| p/Apache httpd/ v/$2/ i/Embperl $1; Fedora/ o/Linux/ cpe:/a:apache:http_server:$2/ cpe:/a:ecos:embperl:$1/ cpe:/o:fedoraproject:fedora/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Embperl/([\\w.]+) Apache/([\\w.]+) \\(Debian GNU/Linux\\) (.*)\\r\\n| p/Apache httpd/ v/$2/ i/Embperl $1; Debian; $3/ o/Linux/ cpe:/a:apache:http_server:$2/ cpe:/a:ecos:embperl:$1/ cpe:/o:debian:debian_linux:$3/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Embperl/([\\w.]+) Apache/([\\w.]+) \\(Debian GNU/Linux\\)\\r\\n| p/Apache httpd/ v/$2/ i/Embperl $1; Debian/ o/Linux/ cpe:/a:apache:http_server:$2/ cpe:/a:ecos:embperl:$1/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: SiteScope/([\\d.]+) .*\\r\\n| p/Mercury SiteScope Application Managment httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: \\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\">\\n<html>\\n<head>\\n<title>OSBRiDGE (\\w+) Login Page</title>\\n|s p/OSBRiDGE $1 router http config/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: SilverStream Server/([\\d.]+)\\r\\n\\r\\n|s p/SilverStream Application Server httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>Welcome to Squeezebox</title>|s p/Slim Devices Squeezebox http config/ d/media device/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: PicoWebServer\\r\\n| p/Newmad PicoWebServer/ d/PDA/ o/Windows CE/ cpe:/o:microsoft:windows_ce/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: tivo-httpd-1:([^\\r\\n]+)\\r\\n| p/TiVo To Go httpd/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Dahlia/([\\d.]+) \\([^)]+\\)\\r\\n.*<title>Sony Library Administration Menu</title>\\r\\n|s p/Dahlia httpd/ v/$1/ i/Sony Storestation http interface/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<th width=\\\"50%\\\">TivoWebPlus Project - v([\\d.]+)&nbsp;</th>|s p/TiveWebPlus Project httpd/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<TITLE>Main Menu \\[[\\w._-]+\\]</TITLE>.*<A title=\\\"Return to Main Menu\\\" HREF=\\\"/\\\">TivoWebPlus</A>|s p/TiveWebPlus Project httpd/ d/media device/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WEBrick/([\\d.]+) \\(Ruby/([\\d.]+)/([-\\d]+)\\)\\r\\n|s p/WEBrick httpd/ v/$1/ i/Ruby $2 ($3)/ cpe:/a:ruby-lang:ruby:$2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WEBrick/([\\d.]+) \\(Ruby/([\\d.]+)/([-\\d]+)\\) OpenSSL/([-\\w_.]+)\\r\\n|s p/WEBrick httpd/ v/$1/ i/Ruby $2 ($3); OpenSSL $4/ cpe:/a:openssl:openssl:$4/ cpe:/a:ruby-lang:ruby:$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>FRITZ!Box|s p/FRITZ!Box http config/ d/broadband router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>404 Not Found \\(ERR_NOT_FOUND\\)</TITLE></HEAD><BODY><H1>404 Not Found</H1><BR>ERR_NOT_FOUND<HR><B>AR7 Webserver</B>| p/FRITZ!Box router http config/ i/TI AR7 chip/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: WebCam2000/([\\d.]+) \\(Windows; http://www\\.webcam2000\\.info/\\)\\r\\n| p/WebCam2000 httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 401 Login failed!\\r\\nServer: micro_httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"WRT54GXv2\\\"\\r\\n| p/micro_httpd/ i/Linksys WRT54GXv2 http config/ d/broadband router/ cpe:/a:acme:micro_httpd/ cpe:/h:linksys:wrt54gxv2/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d(?:[^\\r\\n]+\\r\\n)*?\\r\\n<HTML>\\n<HEAD><TITLE>OpenWrt</TITLE>|s p/OpenWrt BusyBox httpd/ d/WAP/ o/Linux/ cpe:/a:busybox:busybox/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\n\\t\\t<title>OpenWrt Administrative Console</title>|s p/OpenWrt BusyBox httpd/ d/WAP/ o/Linux/ cpe:/a:busybox:busybox/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<meta http-equiv=\\\"refresh\\\" content=\\\"0; URL=/?cgi-bin/webif[\\w/.]+sh\\\" />\\n|s p/OpenWrt BusyBox httpd/ d/WAP/ o/Linux/ cpe:/a:busybox:busybox/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"OpenWrt\\\"\\r\\n\\r\\n|s p/Linksys WRT OpenWrt http config/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"WRT54GS\\\"\\r\\n|s p/Linksys WRT54GS WAP http config/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"[Tt]omato\\\"\\r\\n|s p/Linksys WRT54G WAP http config/ i/Tomato firmware/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"WRT(\\w+)\\\"\\r\\n|s p/Tomato WAP firmware httpd/ i/Linksys WRT$1 WAP/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nContent-Type: text/html; charset=utf-8\\r\\nCache-Control: no-cache, no-store, must-revalidate, private\\r\\nExpires: Thu, 31 Dec 1970 00:00:00 GMT\\r\\nPragma: no-cache\\r\\nWWW-Authenticate: Basic realm=\\\"[^\"]*\\\"\\r\\nConnection: close\\r\\n\\r\\n<html><head><title>Error</title></head><body><h2>401 Unauthorized</h2> Unauthorized</body></html>$| p/Tomato WAP firmware httpd/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Linksys WAG(\\w+) ?\\\"\\r\\n|s p/Linksys WAG$1 WAP http config/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Linksys WRT(\\w+)\\\"\\r\\n|s p/Linksys WRT$1 WAP http config/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*var path='http://www\\.axis\\.com/cgi-bin/prodhelp\\?prod=axis_(\\d+)&ver=([\\d.]+)|s p/AXIS $1 print server http config/ v/$2/ cpe:/h:axis:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nHTTP/1\\.0 200 OK\\r\\nServer: ap\\r\\n.*<title>NetGear Remote Bridge Setup</title>|s p/Netgear ethernet Bridge http config/ d/bridge/\n\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\n.*<TITLE>optiPoint ([\\w .]+) Home Page</TITLE>|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Siemens optiPoint $2 VoIP phone http config/ d/VoIP phone/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:siemens:optipoint_$2/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\n.*<TITLE>optiPoint(\\d+)Entry Home Page</TITLE>|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Siemens optiPoint $2 entry http config/ d/VoIP phone/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\n.*<TITLE>optiPoint(\\d+)Standard Home Page</TITLE>|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Siemens optiPoint $2 standard http config/ d/VoIP phone/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\n.*<TITLE>optiPoint(\\d+)Advance Home Page</TITLE>|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Siemens optiPoint $2 advance http config/ d/VoIP phone/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\n\nmatch http m|^HTTP/\\d\\.\\d \\d\\d\\d .*\\r\\nServer: Mathopd/([\\w.]+)\\r\\n| p/Mathopd httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: ml_www/(.*)\\r\\n| p/ml_www WinAmp control httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http://Netlinx/WebControl\\.asp\\r\\n\\r\\n| p/GoAhead WebServer/ i|AMX NetLinx A/V control| d/media device/ cpe:/a:goahead:goahead_webserver/ cpe:/o:harman:amx_firmware/\nmatch http m|^HTTP/1\\.0 200 OK \\r\\nCache-Control: max-age=60\\r\\nContent-type: text/html; charset=ISO-8859-1\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Frameset//EN\\\" >\\r\\n<HTML>\\r\\n    <HEAD><TITLE>SandvallsangFSK: (\\w+)</TITLE>| p/Kirk $1 VoIP gateway http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\n.*<title>POPFile Control Center</title>\\n|s p/POPFile http control center/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\n(?:[^\\r\\n]+\\r\\n)*?Pragma: no-cache\\r\\n.*<title>POPFile Control Center</title>\\r\\n|s p/POPFile http control center/ v/1.1.1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: fhttpd/([\\d.]+)\\r\\n| p/fhttpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nCache-Control: no-cache\\r\\n\\r\\n<html>\\r\\n<head><meta charset=\\\"utf-8\\\">\\r\\n<title> Home </title>\\r\\n<script language=\\\"JavaScript\\\">\\r\\n<!--\\r\\n// the start of Cookie related function\\r\\nfunction getCookieVal \\(offset\\) {  \\r\\n| p/Samsung ML-2251N printer http config/ d/printer/ cpe:/h:samsung:ml-2251n/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Siemens Web User Interface\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Siemens router http config/ d/router/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\" /\\\"\\r\\nContent-type: text/html\\r\\nContent-length: 0\\r\\n\\r\\n$| p|Casi-Rusco camera/Bestelco VoIP phone http config|\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MyServer ([-\\w.]+)\\r\\n|s p/MyServer httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Quantum Corporation\\./([\\d.]+)\\r\\n| p/Quantum backup appliance http config/ v/$1/ d/storage-misc/\nmatch http m|^<html><head><title>ServiceRegistry</title><META HTTP-EQUIV=\\\"Pragma\\\" CONTENT=\\\"no-cache\\\"></head><basefont size=\\\"2\\\" face=\\\"Arial\\\" color=\\\"Black\\\">.*<br><h1><i>ServiceRegistry</i></h1>\\r\\nAvailable commands:\\r\\n<ul>| p/HP SAN Manager ServiceRegistry httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"HP ISEE @| p/HP ISEE httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Simple java\\r\\n.*<title>hp OpenView storage area manager - GUI download</title>|s p/Simple java httpd/ i/HP OpenView Storage Area Manager http config/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Micro-Web\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<TITLE> HP StorageWorks MSL Tape Library Management Console </TITLE>\\n| p/Micro-Web/ i/HP StorageWorks MSL Tape Library http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: RapidLogic/([\\d.]+)\\r\\n.*<HTML>\\n<HEAD>\\n<TITLE>Switch Explorer</TITLE>\\n|s p/RapidLogic httpd/ v/$1/ i/Fabric switch http config/ d/switch/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Mono-XSP Server/([\\d.]+) Unix\\r\\n| p/Mono-XSP .NET httpd/ v/$1/ o/Unix/ cpe:/a:mono:xsp:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: SimpleHTTP/([\\d.]+) Python/([\\d.]+)\\r\\n| p/Karrigell Python httpd/ i/SimpleHTTP $1; Python $2/ cpe:/a:python:python:$2/ cpe:/a:python:simplehttpserver:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Cougar ([\\d.]+)\\r\\n|s p/VideoLAN Server streaming media/ i/Cougar $1/\nmatch http m|^HTTP/1\\.0 404 Not found\\r\\n.*<title>Error 404</title>.*<a href=\\\"http://www\\.videolan\\.org\\\">VideoLAN</a>|s p/VideoLAN Server streaming media/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-type: text/html; charset=UTF-8\\r\\nCache-Control: no-cache\\r\\nContent-Length: \\d+\\r\\n.* - - - - >\\r?\\n<  index\\.html: VLC media player web interface\\r?\\n|s p/VLC media player http interface/ cpe:/a:videolan:vlc_media_player/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>mikrotik routeros > administration</title>.*font-size: 9px\\\">mikrotik routeros ([\\d.]+) administration|s p/MikroTik router http config/ i/RouterOS $1/ d/router/ cpe:/o:mikrotik:routeros:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>mikrotik routeros > administration</title>|s p/MikroTik router http config/ d/router/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: thttpd-alphanetworks/([\\d.]+)\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Broadband Router\\\"\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad=javascript:document\\.forms\\[0\\]\\.submit\\(\\);>| p/thttpd-alphanetworks/ v/$1/ i/FiberLine router http config/ d/router/ cpe:/a:alphanetworks:thttpd:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: RMC Webserver ([\\d.]+)\\r\\n.*<title>Remote Access Controller</title>|s p/Dell Remote Access Controller http interface/ v/$1/ d/remote management/ cpe:/h:dell:remote_access_card/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"PROJECTOR[3]?\\\" \\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><BODY><H2>HTTP Error 401 - Unauthorized</H2><HR></BODY></HTML>| p/Panasonic Video Projector http config/ d/media device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Footprint ([\\d.]+)/FPMCP\\r\\n| p/Sandpiper Footprint http load balancer/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: LogMeIn Web Gateway\\r\\n| p/LogMeIn remote access web gateway/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: ArGoSoft Mail Server Freeware, Version [\\d.]+ \\(([\\d.]+)\\)\\r\\n| p/ArGoSoft Mail Server Freeware httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nServer: Fastream NETFile Web Server ([\\d.]+)\\r\\n| p/Fastream httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 \\(OK\\) \\r\\nPragma: No-Cache\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nServer: HTTP Server\\r\\n.*Copyright \\d+, \\d+ Nortel Networks\\.|s p/WindWeb/ i/Nortel Extranet switch http config/ d/switch/ cpe:/a:windriver:windweb/\nmatch http m|^<html>\\n<title>24-Port 10/100M Fast Ethernet Web Smart Switch</title>\\n<frameset rows='60,\\*'.*<frame name=main src=cgi_login noresize>\\n|s p/TRENDnet SMART24B switch http config/ d/switch/ cpe:/h:trendnet:smart24b/a\nmatch http m|^HTTP/1.0 403 Forbidden\\r\\nServer: SI3PHX1/([\\d.]+)\\r\\n| p/Prolexic DDoS protected httpd/ i|SI3PHX1/$1|\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: WebServer ([\\d.]+)\\r\\nLast-Modified: .*\\r\\nETag: \\\"[-\\w]+\\\"\\r\\nAccept-Ranges: bytes\\r\\n| p/Cryptologic httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: WebServer/([\\d.]+)\\r\\n.*<META http-equiv=\\\"Refresh\\\" content=\\\"0; Url=/trane/tsws/login\\.htm\\\" >\\n  <title>redirect</title>|s p/Trane Tracer Summit building control httpd/ v/$1/ d/remote management/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: HDS Hi-Track Server/([\\d.]+)\\r\\n| p/Hi-Track httpd/ v/$1/ i/Hitachi Data System http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: WebTrends HTTP Server ([\\w.]+)\\r\\n| p/Webtrends httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: WebTrends HTTP Server \\r\\n| p/Webtrends httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Desktop On-Call HTTPD V([\\d.]+)\\r\\n| p/IBM Desktop On-Call httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: OCServer\\r\\nContent-Type: text/html\\r\\n\\r\\n\\n\\n<!-- WebConnect HTML -->| p/OCServer httpd/ i/WebConnect http service/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: ENI-Web/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"standard@3Com\\\"\\r\\n\\r\\n| p/ENI-Web httpd/ v/$1/ i/Speedstream DSL router http config/ d/router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Keep-Alive\\r\\nKeep-Alive: timeout=180\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n<head>\\n<META HTTP-EQUIV=\\\"EXPIRES\\\" CONTENT=\\\"0\\\">\\n<meta http-equiv=\\\"Pragma\\\" Content=\\\"No-cache\\\">\\n</head>\\n<body>\\n<center>\\n<h3><BR>Sorry, the switch is already being managed\\. Concurrent management is not allowed!\\n</center>\\n</body></html>\\n\\0| p/Compex switch http config/ d/switch/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: \\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Actiontec</TITLE>\\n\\n|s p/Actiontec DSL router http config/ d/router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: JavaWebServer/([\\d.]+) \\r\\nContent-Length: .*<HEAD>\\n<TITLE>CentreVu Explorer II</TITLE>\\n|s p/JavaWebServer/ v/$1/ i/Lucent CentreVu Explorer II http config/ d/telecom-misc/\nmatch http m|^<!-- saved from url=\\(\\d+\\)http://internet\\.e-mail -->\\n<html>\\n\\n<head>\\n<title>HTML-Konfiguration</title>\\n\\n| p/micro_httpd/ i/Deutsche Telekom wireless router http config/ d/router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\nWWW-Authenticate: Basic realm=\\\"Web Host Manager\\\"\\nConnection: close\\nServer: whostmgr/([\\d.]+)\\n| p/whostmgr httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: RMC Webserver ([\\d.]+)\\r\\nLast-Modified: .*\\r\\nAllow: GET, HEAD\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>TopTools Remote Control</TITLE>\\r\\n| p/RMC httpd/ v/$1/ i/HP TopTools http control/\n# HP OpenView ITO agent (probably version 7.25) on Windows, port 381\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?server: BBC (\\d[-.\\w]+); com\\.hp\\.openview\\.Coda (\\d[-.\\w]+)\\r\\n\\r\\n|s p/BBC httpd/ v/$1/ i/HP OpenView ITO agent - Coda $2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?server: BBC (\\d[-.\\w]+); com\\.hp\\.openview\\.bbc\\.LLB[Ss]erver (\\d[-.\\w]+)\\r\\n\\r\\n|s p/BBC httpd/ v/$1/ i/HP OpenView ITO agent - LLB server $2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Servertec-IWS/([\\d.]+)\\r\\n| p/Servertec IWS Java httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: DirectUpdate/([\\d.]+)\\r\\n| p/DirectUpdate dynamic IP updater/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CCS/Jigsaw/([\\d.]+)\\r\\n|s p/Commerce One httpd/ i/Java Jigsaw $1/ cpe:/a:w3:jigsaw:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: VisiBroker/([\\d.]+)\\r\\n\\r\\n|s p/Borland VisiBroker CORBA httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Compaq Insight Manager XE ([\\d.]+)\\r\\n|s p/Compaq Insight Manager XE httpd/ v/$1/ cpe:/a:compaq:insight_manager_xe:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ISS-PXServer/([\\d.]+)\\r\\n|s p/ISS-PXServer httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Jigsaw/([\\w.-]+)\\r\\n|s p/Java Jigsaw httpd/ v/$1/ cpe:/a:w3:jigsaw:$1/\nmatch http m|^Language received from client: .*\\nSetlocale: .*\\n| p/AIX Web-based System Manager/ o/AIX/ cpe:/o:ibm:aix/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: gnump3d2 ([\\d.]+) \\([\\d/]+\\)\\r\\n| p/GNUMP3d streaming server/ v/$1/ cpe:/a:gnu:gnump3d:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: SpyBot([\\d.]+)\\r\\n| p/SpyBot httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<HTML>\\n<HEAD><TITLE>NBX NetSet</TITLE>\\n|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/3Com SuperStack 3 NBX switch http config/ d/switch/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: WWW-KODEKS/([\\d.]+)\\r\\n| p/Knowledge On Demand httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Ares ([\\d.]+)\\r\\nConnection: Keep-Alive\\r\\n\\r\\n| p/Ares Galaxy P2P httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Paws/([\\d.]+)\\r\\n.*<title>ParaSoft LicenseServer  ([\\d.]+)</title>|s p/Paws/ v/$1/ i/ParaSoft LicenseServer $2/\nmatch http m|^HTTP/1\\.1 ERROR\\r\\nServer: Server: Paws/([^\\r\\n]+)\\r\\nDate: \\d.*\\r\\nExpires: .*\\r\\nContent-type: text/html\\r\\nContent-length: 2\\r\\n\\r\\n\\r\\n$| p/Paws/ v/$1/ i/ParaSoft Concerto software development platform/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/plain\\r\\n\\r\\nNode: \\d+\\n| p/DSpy D2OL statistics httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: WindWeb/([\\d.]+)\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Horizon Monitor  HTML</TITLE>\\n| p/WindWeb/ v/$1/ i/Sun Tape Library http config/ d/storage-misc/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: monit ([\\d.]+)\\r\\n| p/monit httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Red Carpet Daemon/([\\d.]+)\\r\\n\\r\\n| p/Red Carpet httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: CL-HTTP/([\\d.]+) \\(LispWorks; ([\\d.]+)\\)\\r\\n| p/CL-HTTPd/ v/$1/ i/LispWorks $2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: SAP-Internet-SapDb-Server/([\\d.]+)\\r\\n| p/SAP Internet DB httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: JTALKServer\\r\\n| p/JTALKServer httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"HostMonitor's Web Service\\\"\\r\\n\\r\\n| p/HostMonitor Web Service/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: iSoft Commerce Suite Server\\r\\n| p/iSoft Commerce Suite httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\.\\r\\nServer: MS \\.NET Remoting, MS \\.NET CLR ([\\d.]+)\\r\\n| p/MS .NET Remoting httpd/ i/.NET CLR $1/ o/Windows/ cpe:/a:microsoft:.net_framework:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: BSE ([\\d.]+)\\r\\n| p/BSE httpd/ v/$1/ i/Pinnacle Showcenter http config/ d/media device/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: WebMail/([\\d.]+)\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\n\\r\\n<!-- top\\.txt -->\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>WebMail Server</TITLE>\\r\\n| p/True North Soft WebMail httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 \\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>MX G2000 DEDICATED FILE SERVER</TITLE>| p/Murex G2000 file server httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nExpires: \\d+\\r\\nCache-Control: no-cache\\r\\nServer: Indy/([\\d.]+)\\r\\nLocation: /prtg\\.htm\\r\\nSet-Cookie: PRTG4SESSION=| p/Indy httpd/ v/$1/ i/Paessler PRTG bandwidth monitor/ cpe:/a:indy:httpd:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nExpires: \\d+\\r\\nCache-Control: no-cache\\r\\nServer: Indy/([\\d.]+)\\r\\nLocation: /allsensors\\.htm\\r\\n\\r\\n<HTML><BODY><B>301 Moved Permanently</B></BODY></HTML>\\r\\n| p/Indy httpd/ v/$1/ i/Paessler PRTG bandwidth monitor/ o/Windows/ cpe:/a:indy:httpd:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nExpires: \\d+\\r\\nCache-Control: no-cache\\r\\nServer: Indy/([\\d.]+)\\r\\nLocation: /sensorlist\\.htm\\r\\n\\r\\n| p/Indy httpd/ v/$1/ i/Paessler PRTG bandwidth monitor/ o/Windows/ cpe:/a:indy:httpd:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Indy/([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Please enter your login for PRTG(\\d)\\\"\\r\\n|s p/Indy httpd/ v/$1/ i/Paessler PRTG SNMP $2 bandwidth monitor/ o/Windows/ cpe:/a:indy:httpd:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 56\\r\\nExpires: 0\\r\\nCache-Control: no-cache\\r\\nServer: Indy/([\\w._-]+)\\r\\nLocation: /login\\.htm\\r\\n\\r\\n<HTML><BODY><B>301 Moved Permanently</B></BODY></HTML>\\r\\n| p/Indy httpd/ v/$1/ i/Paessler PRTG bandwidth monitor/ o/Windows/ cpe:/a:indy:httpd:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: PRTG/([\\w._-]+)\\r\\n|s p/Indy httpd/ v/$1/ i/Paessler PRTG bandwidth monitor/ o/Windows/ cpe:/a:indy:httpd:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: _httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"\\.\\\"\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H4>401 Unauthorized</H4>\\nAuthorization required\\.\\n</BODY></HTML>\\n| p/Kaspersky AntiVirus http admin/ v/4.X/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Indy/([\\d.]+)\\r\\n.*\\r\\n<title>Server Monitor Lite</title>\\r\\n|s p/Indy httpd/ v/$1/ i/Pure Networking Server Monitor Lite http interface/ cpe:/a:indy:httpd:$1/\nmatch http m|^HTTP/1\\.0 .*\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: JavaOpServer\\r\\n| p/JavaOp httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: SmarterTools/([\\d.]+)\\r\\n.*SmarterStats.*; Professional Edition - v\\.([\\d.]+) - Customer Login Page\\r\\n|s p/SmarterTools httpd/ v/$1/ i/SmarterStats $2 http interface/ cpe:/a:smartertools:smarterstats:$2/ cpe:/a:smartertools:smartertools_web:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Project Engine Server\\r\\n| p/Project Engine Server httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Indy/([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"NetStatus Professional\\\"\\r\\n|s p/Indy httpd/ v/$1/ i/NetStatus Professional/ o/Windows/ cpe:/a:indy:httpd:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: McAfee-Agent-HttpSvr/([\\d.]+)\\r\\n| p/McAfee Agent httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: HoneydHTTP/([\\d.]+) Python/([\\d.]+)\\r\\n| p/Honeyd httpd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: 3ware/([\\d.]+)\\r\\n.*<title>3ware 3DM2 - ([-\\w_.]+) - Summary</title>|s p/3ware 3DM2 Serial RAID http config/ v/$1/ d/storage-misc/ h/$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: 3ware/([\\d.]+)\\r\\n.*<title>3DM2 - ([-\\w_.]+) - Summary</title>|s p/3ware 3DM2 Serial RAID http config/ v/$1/ d/storage-misc/ h/$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: unknown\\r\\nLocation: https://xweb-ext/__extraweb__/\\r\\nSet-Cookie: EXTRAWEB_REFERER=| p/Aventail SSL VPN Concentrator http config/ d/security-misc/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Accept: application/vnd\\.syncml\\+xml, application/vnd\\.syncml\\+wbxml\\r\\nCache-Control: no-store\\r\\nServer: MultiSync Plugin\\r\\n\\r\\nNo such file or directory\\.|s p/SyncML PIM sync server for MultiSync/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: C4D/([\\d.]+)\\r\\n| p/Cinema 4D Renderer http interface/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: servermgrd\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n.*<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 3\\.2 Final//EN\\\"><HTML>\\r\\n<HEAD>\\r\\n<TITLE>Server Admin module list</TITLE>|s p/Apple Server Monitor http interface/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nServer: servermgrd\\r\\nWWW-Authenticate: Basic realm = \\\"Server Admin\\\"\\r\\n.*The server could not verify that you are authorized to access the requested content\\.<P>\\r\\n<HR>\\r\\n</BODY></HTML>\\r\\n\\r\\n|s p/Apple Server Monitor http interface/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nServer: servermgrd\\r\\nSupportsXMLRPC\\r\\nSupportsBinaryPlist\\r\\nContent-Type: \\xe2\\x80\\xa0%\\xc6\\x92<\\r\\n| p/Mac OS X Server Admin http config/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: servermgrd\\r\\nConnection: close\\r\\nContentType: text/html\\r\\n| p/Apple Server Monitor http interface/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: BBC ([\\d.]+) ; /Hewlett-Packard/OpenView/AutoDiscovery/com\\.hp\\.openview\\.OvAgency\\.OvAgencyCommand [\\d.]+\\r\\n\\r\\n|s p/BBC httpd/ v/$1/ i/HP OpenView AutoDiscovery http interface/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Sun-Java-System/Application-Server\\r\\n|s p/Sun Java System Application Server httpd/ i/Servlet $1/ cpe:/a:sun:java_system_application_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Sun-Java-System/Application-Server\\r\\n| p/Sun Java System Application Server httpd/ cpe:/a:sun:java_system_application_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Sun-Java-System-Application-Server/([^\\r\\n]+)\\r\\n| p/Sun Java System Application Server httpd/ v/$1/ cpe:/a:sun:java_system_application_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Sun-Java-System-Web-Server/([\\d.]+)\\r\\n| p/Sun Java System httpd/ v/$1/ cpe:/a:sun:java_system_web_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Sun Java System Application Server Platform Edition ([\\d_.]+)\\r\\n|s p/Sun Java System Application Server Platform Edition httpd/ v/$2/ i/Servlet $1/ cpe:/a:sun:java_system_application_server:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Sun Java System Application Server ([\\w._-]+)\\r\\n|s p/Sun Java System Application Server httpd/ v/$2/ i/Servlet $1/ cpe:/a:sun:java_system_application_server:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n.*<title>Netopia Home Page</title>|s p/Allegro RomPager/ v/$1/ i/Netopia DSL router http config/ d/router/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"Netopia-(\\w+)\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n| p/Allegro RomPager/ v/$2/ i/Netopia $1 router http config/ d/router/ cpe:/a:allegro:rompager:$2/ cpe:/h:netopia:$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Type: text/html\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n\\n<html>\\n<head>\\n<title>\\nNetopia Router</title>\\n|s p/Allegro RomPager/ v/$1/ i/Netopia Cayman 334x router http config/ d/router/ cpe:/a:allegro:rompager:$1/ cpe:/h:netopia:cayman_334x/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=BIG5\\r\\nPragma: No-cache\\r\\nServer: ACOS HTTPD/([\\d.]+)\\r\\nCache-Control: no-cache\\r\\n.*<title>Authorization Page</title>.*action=\\\"checkAuthorization\\\" target=\\\"_self\\\">\\r\\n|s p/ACOS httpd/ v/$1/ i/Foxconn VoIP TRIO 3C http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: AltaVista Avhttpd ([\\d.]+)\\r\\n| p/Altavista Enterprise Search httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Servage\\.net Cluster \\(Enhanced Apache\\) \\(Unix\\) (.*)\\r\\n| p/Servage.net enhanced Apache/ i/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d(?:[^\\r\\n]+\\r\\n)*?\\r\\n<!-- Login\\.html -->\\n\\n\\n.*<title>Login</title>.*colors\\n\\ndk blue: #adc3dc\\nlt blue: #d2dae3\\norange: #ee7d00\\nlt orange: #FDDF97\\n|s p/Aruba router http config/ d/router/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nDate: .*\\r\\nLocation: https://securelogin\\.arubanetworks\\.com/| p/Aruba router secure http config/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nAccept-Ranges: none\\r\\n.*<title>Citrix Administration Tool</title>| p/Citrix Secure Gateway http admin/ o/Windows/ cpe:/a:citrix:secure_gateway/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nAccept-Ranges: none\\r\\nLocation: /CitrixLogonPoint/AccessGateway/\\r\\n\\r\\n| p/Citrix Secure Gateway http admin/ o/Windows/ cpe:/a:citrix:secure_gateway/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nAccept-Ranges: none\\r\\nLocation: /CitrixLogonPoint/Secured/\\r\\n\\r\\n| p/Citrix Secure Gateway http admin/ o/Windows/ cpe:/a:citrix:secure_gateway/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nAccept-Ranges: none\\r\\nLocation: https://([\\w._-]+)/CitrixLogonPoint/Default/\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Citrix Access Gateway firewall http config/ d/firewall/ o/Windows/ h/$1/ cpe:/a:citrix:access_gateway/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Type: text/html; charset=utf-8\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nCache-Control: no-store\\r\\n.*<title>Instant Virtual Extranet</title>|s p/Juniper Seca HTTPS VPN appliance/ d/security-misc/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Nucleus WebServ\\r\\nWWW-Authenticate: Basic realm=\\\"/\\\"\\r\\n.*<H1>Authorization Required</H1></BODY></HTML>\\r\\n|s p/Nucleus WebServ/ i/Allied Telesyn 802x switch http config/ d/switch/ cpe:/h:alliedtelesyn:802x/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: RapidLogic/([\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>Spectrum24 Access Point</title>\\r\\n\\r\\n| p/RapidLogic httpd/ v/$1/ i/Symbol Spectrum24 access point http config/ d/router/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"VoIP Configuration Web Server\\\"\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<body><h1>401 Unauthorized</h1></body></html>\\r\\n$| p/Welltech Wellgate VoIP adapter http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Thunderstone-Texis/([\\d.]+)\\r\\n| p/Thunderstone Texis search appliance http config/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"B49G\\\"\\r\\n| p/Gigabyte B49G WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WoWEmu\\r\\n| p/WoWEmu httpd/ i/World of Warcraft emulated server/\nmatch http m=^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: InkHTTP/([\\d.]+) Python/([\\d.]+)\\r\\nDate: .*<title>Wirehog \\| =s p/Wirehog http transfer interface/ i/InkHTTP $1; Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>   IP PHONE 2 V([\\d.]+)         </TITLE>| p/NG VoIP Phone 2 http config/ v/$1/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\n\\r\\n<!DOCTYPE html.*\\n<title>WikiHome</title>\\n</head>\\n<body>\\n<div id='header'>\\n<form method='get' action='/?Search'>\\n<table border='0' width='100%'>\\n<tr>\\n<td align='left' ><strong>WikiHome</strong>  \\( <a href='\\?edit' title='Edit this wiki page contents\\. \\[alt-j\\]' accesskey='j'>Edit</a> \\)|s p/Didiwiki httpd/\nmatch http m|^HTTP/1\\.0 400 Wrong Port\\r\\nServer: ConferenceRoom/IRC\\r\\nConnection: Close\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>Connection to Wrong Port</TITLE></HEAD>\\r\\n<BODY>You have connected to an IRC server as if it were a web server</BODY>\\r\\n</HTML>\\r\\n| p/ConferenceRoom ircd/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer:httpd\\r\\nDate: .*\\r\\nContent-Type:text/html\\r\\n\\r\\n<html><title>400 Bad Request </title>                         <body> <h1> Bad Request or Syntax Error/Not able to                         understand the request| p/Sagem F@st router httpd/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: NETID/([\\d.]+)\\r\\n| p/Optivity NetID httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: WYM/([\\d.]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nLast-Modified: .*\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>IP Camera</TITLE>\\n| p/WYM httpd/ v/$1/ i/Aviosys IP Camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n<H1>\\w+: A WebGroup/Virtual Host to handle / has not been defined\\.</H1><BR><H3>\\w+: A WebGroup/Virtual Host to handle [-\\w_.:/]+ has not been defined\\.</H3><BR><I>IBM WebSphere Application Server</I>| p/IBM WebSphere httpd/ cpe:/a:ibm:websphere_application_server/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n<H1>\\w+: Un host WebGroup/Virtual per la gestione / non \\xe8 stato definito\\.</H1><BR><H3>\\w+: A WebGroup/Virtual Host to handle [-\\w_.:/]+ has not been defined\\.</H3><BR><I>IBM WebSphere Application Server</I>| p/IBM WebSphere httpd/ i/Italian/ cpe:/a:ibm:websphere_application_server::::it/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n<H1>\\w+: Un host WebGroup/Virtual per la gestione / non \\xe8 stato definito\\.</H1><BR><H3>SRVE0017W: Un host WebGroup/Virtual per la gestione / non \\xe8 stato definito\\.</H3><BR><I>IBM WebSphere Application Server</I>| p/IBM WebSphere httpd/ i/Italian/ cpe:/a:ibm:websphere_application_server::::it/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html;charset=ISO-8859-1\\r\\n\\$WSEP: \\r\\nContent-Language: .*\\r\\nServer: WebSphere Application Server/([\\d.]+)\\r\\n| p/IBM WebSphere httpd/ v/$1/ cpe:/a:ibm:websphere_application_server:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\t<title>Strongdc\\+\\+ webserver - Login Page</title>\\t|s p/StrongDC++ httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: HellBot\\r\\n| p/HellBot Trojan httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: ENI-Web/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"standard@Modem\\\"\\r\\n\\r\\n| p/ENI-Web httpd/ v/$1/ i/Efficient SpeedStream router http config/\nmatch http m|^<html>\\n<title>48-Port 10/100/1000Mbps Web-Smart Gigabit Ethernet Switch</title>\\n| p/D-Link 48-Port switch http config/ d/switch/ cpe:/h:dlink:48-port/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: MailEnable-HTTP/([\\d.]+)\\r\\n| p/MailEnable httpd/ v/$1/ o/Windows/ cpe:/a:mailenable:mailenable:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nServer: Indy/([\\d.]+)\\r\\n\\r\\n<HTML><BODY><B>200 OK</B></BODY></HTML>\\r\\n| p/Indy httpd/ v/$1/ i/WebRoot SpySweeper http config/ o/Windows/ cpe:/a:indy:httpd:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: Close\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nLocation: login\\.php\\r\\nServer: Kerio Embedded WebServer ([\\d.]+)\\r\\nX-Powered-By: PHP/([\\d.]+)\\r\\n\\r\\n| p/Kerio Embedded httpd/ v/$1/ i/PHP $2/ o/Windows/ cpe:/a:php:php:$2/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Agranat-EmWeb/R([\\d._]+)\\r\\nWWW-Authenticate: Basic realm=\\\"read@\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/3Com SuperStack II Switch http config/ d/switch/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: and-httpd/(\\d+\\.\\d+\\.[-.\\w]+) \\(Debug\\)|s p/and-httpd/ v/$1/ i/Debug version/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: and-httpd/(\\d+\\.\\d+\\.[-.\\w]+) ([^\\r\\n]+)|s p/and-httpd/ v/$1/ i/$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: and-httpd/(\\d+\\.\\d+\\.[-.\\w]+)|s p/and-httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: and-httpd|s p/and-httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H4>401 Unauthorized</H4>\\nAuthorization required\\.\\n</BODY></HTML>\\n| p/Linksys Wireless-G DSL router http config/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nPragma: no-cach\\r\\nContent-Type: text/html; charset=windows-1251\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>UserGate report area</TITLE>\\r\\n| p/UserGate http report area/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^<HTML>\\r\\n<HEAD>\\r\\n<TITLE>UserGate report area</TITLE>\\r\\n| p/UserGate http report area/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Kerio MailServer ([\\d.]+) patch (\\d+)\\r\\n\\r\\n|s p/Kerio MailServer http config/ v/$1 patch $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: VOIP\\r\\nWWW-Authenticate: Digest realm=\\\"VOIP\\\", nonce=\\\"\\w+\\\", opaque=\\\"\\w+\\\",| p/ACT VoIP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: KHAPI/([\\d.]+) \\(Linux\\)\\r\\n|s p/KHAPI httpd/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\n# HP OpenView ITO agent (probably version 7.25) on Windows, port 383\n# Moved from RTSPRequest because fallback can take care of it\nmatch http m|^HTTP/1\\.1 \\d\\d\\d.*\\r\\nContent-Type: text/html(?:; charset=us-ascii)?\\r\\nServer: Microsoft-HTTPAPI/([\\d.]+)\\r\\n| p/Microsoft HTTPAPI httpd/ v/$1/ i|SSDP/UPnP| o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Mediasurface/([\\d.]+)\\r\\n| p/Mediasurface CMS httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: RapidLogic/([\\d.]+)\\r\\n.*<TITLE>WireSpeed Data Gateway</TITLE>|s p/RapidLogic httpd/ v/$1/ i/WireSpeed Data Gateway router http config/ d/router/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: SmarterTools/([\\d.]+)\\r\\n.*SmarterStats|s p/SmarterTools SmarterStats httpd/ v/$1/ o/Windows/ cpe:/a:smartertools:smarterstats/ cpe:/a:smartertools:smartertools_web:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: SmarterTools/([\\d.]+)\\r\\n| p/SmarterTools httpd/ v/$1/ o/Windows/ cpe:/a:smartertools:smartertools_web:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<HTML><HEAD><TITLE>Scientific-Altanta WebStar Cable Modem</TITLE>|s p/Scientific-Altanta WebStar Cable Modem http config/ d/broadband router/\n# WebStar DPC2100 and EPC2100\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: micro_httpd\\r\\n.*<title>Scientific-Altanta WebStar Cable Modem</title>|s p/micro_httpd/ i/Scientific Atlanta WebStar Cable Modem http config/ d/broadband router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\n.*\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http://Device/config/log_off_page\\.htm\\r\\n\\r\\n| p/GoAhead WebServer/ i/Dell PowerConnect http config/ d/switch/ cpe:/a:goahead:goahead_webserver/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Enable Mode\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n<HTML><HEAD><TITLE><script>document\\.location\\.href='/config/AccessNotAllowedPage\\.htm'| p/Allegro RomPager/ v/$1/ i/Dell PowerConnect http config/ d/switch/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d(?:[^\\r\\n]+\\r\\n)*?\\r\\n<BODY><CENTER><BR><BR><strong><font size=5 face=verdana>SRW224 24-Port 10/100 \\+ 2-Port Gigabit <BR>|s p/Linksys SRW224 gigabit switch http config/ d/switch/ cpe:/h:linksys:srw224/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nServer: SQ-WEBCAM\\r\\n| p/dvr1614n web-cam httpd/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: BeOS/PoorMan\\r\\n|s p/BeOS poorman httpd/ o/BeOS/ cpe:/o:be:beos/\nmatch http m|^HTTP/1\\.0 200\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML>\\r\\n<HEAD><TITLE>WJ-NT104 MAIN PAGE</TITLE></HEAD>\\r\\n| p/Panasonic WJ-NT104 network camera httpd/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: TwistedWeb/([\\d.]+)\\r\\n\\r\\n.*<title>Punjab |s p/TwistedWeb httpd/ v/$1/ i/Punjab HTTP -> XMMP proxy/ cpe:/a:twistedmatrix:twistedweb:$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<title>I\\.M\\. Everywhere</title>|s p/Trillian IM Everywhere http plugin/ o/Windows/ cpe:/a:trillian:trillian/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Grandstream/([\\d.]+)\\r\\n\\r\\n|s p/Grandstream VoIP phone http config/ v/$1/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"(RV042)\\\"\\r\\n| p/thttpd/ i/Linksys $1 VPN router http config/ d/router/ cpe:/a:acme:thttpd/ cpe:/h:linksys:$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"(RV0041)\\\"\\r\\n.*<h2>401 Unauthorized<h2>\\n  <p>\\n  Authorization required for the URL\\.\\n</body>\\n</html>\\n$|s p/thttpd/ i/Linksys $1 router http config/ d/router/ cpe:/a:acme:thttpd/ cpe:/h:linksys:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Router/([\\d.]+)\\r\\n.*<TITLE>Cable/xDSL Wireless Router</TITLE>|s p/SparkLAN WX-2211A wireless router http config/ v/$1/ d/router/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: LiteServe/([\\d.]+)\\r\\n| p/Perception LiteServe httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: httpd-impacct/([\\d.]+) ([\\d/]+)\\r\\n| p/Zonet ZSR0104CP router http config/ v/$1/ i/Released $2/ d/router/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: YAZ/([\\w._-]+)\\r\\n|s p/YAZ Z39.50 http interface/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: svea_httpd/([\\d.]+) ([^\\r\\n]+)\\r\\n| p/svea_httpd/ v/$1 $2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: svea_httpd/([\\d.]+)\\r\\n| p/svea_httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Microsoft-PWS/([\\d.]+)\\r\\n| p/Microsoft Peer Web Services httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Microsoft-PWS-95/([\\d.]+)\\r\\n| p/Microsoft Peer Web Services 95 httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nConnection: Close\\r\\nLocation: /iw-cc/command/iw\\.base\\.show_done_page| p/Interwoven TeamSite game proxy httpd/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: http://xbtt\\.sourceforge\\.net/\\r\\n\\r\\n| p/xbtt bittorrent tracker httpd/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: http://([-\\w_.]+)/.*<FONT face=\\\"Helvetica\\\">\\n<big>Redirect \\(authentication_redirect_to_virtual_host\\)</big>|s p/Blue Coat http config/ h/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\nServer: EntropyChat ([\\d.]+)\\n| p/cPanel EntropyChat httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Jaguar Server Version ([\\d.]+)\\r\\n.*<TITLE>Sybase EAServer Version ([\\d.]+)\\n</TITLE>|s p/Jaguar/ v/$1/ i/Sybase EAServer $2/ cpe:/a:sybase:easerver:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Jetty\\(EAServer/([\\w._ -]+)\\)\\r\\n|s p/Jetty/ i/Sybase EAServer $1/ cpe:/a:mortbay:jetty/ cpe:/a:sybase:easerver:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: BRS-WebWeaver/([\\d.]+)\\r\\n| p/BRS WebWeaver httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: eSoft/([\\d.]+) \\(Unix\\)\\r\\n| p/eSoft emumail webmail httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nServer: tigershark/([\\d.]+) | p/tigershark httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.1 200 Document Follows\\r\\n.*CONTENT=\\\"TANDBERG ASA \\(http://www\\.tandberg\\.net\\)\\\">\\r\\n<meta name=\\\"description\\\"\\r\\ncontent=\\\"TANDBERG is a leading global provider of videoconferencing|s p/Tandberg video conferencing http config/ d/media device/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nContent-type: text/html\\r\\nServer: Tandberg Television Web server\\r\\n| p/Tandberg Television httpd/ d/media device/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"([^\\\"]+)\\\"\\r\\n.*\\r\\n.*\\r\\nServer :Tandberg Television Web server\\r\\n| p/Tandberg Television httpd/ i/Realm: $1/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\n\\n<!-- \\n#ident \\\"%W%\\\"\\n# Copyright \\(c\\) 2\\d+ SteelEye Technology Inc\\. - Mountain View, CA, USA\\n################### LifeKeeper| p/SteelEye LifeKeeper cluster http config/ o/Unix/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Ubicom/([\\d.]+)\\r\\n.*<title>D-Link Gaming Router : Login</title>|s p/Ubicom httpd/ v/$1/ i/D-Link gaming router http config/ d/router/ cpe:/a:ubicom:httpd:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>LANIER 5613 / LANIER Network Printer D model-Network Administration</TITLE>|s p/Allegro RomPager/ v/$1/ i/Lanier 5613 network printer http config/ d/printer/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nServer: Novell-HTTP-Server/([\\w.]+)\\n.*<TITLE>GroupWise WebAccess</TITLE>|s p/Novell-HTTP-Server/ v/$1/ i/Novell GroupWise webmail/ cpe:/a:novell:groupwise_webaccess/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Novell-Agent ([\\w._-]+) \\(Linux\\)\\r\\n.*<TITLE>GroupWise Monitor  - Status</TITLE>|s p/Novell GroupWise Monitor/ v/$1/ o/Linux/ cpe:/a:novell:groupwise/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nDate: .*\\nServer: Novell-HTTP-Server/([\\w._-]+)\\n| p/Novell httpd $1/\nmatch http m|^HTTP/1\\.0 400\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Error</title></head><body>\\r\\n<h2>ERROR: 400</h2>\\r\\nHost name unspecified\\.\\n<br>\\r\\n</body></html>\\r\\n$| p/Teros application firewall/ d/firewall/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Intoto ?Http ?Server..([\\d.]+)\\r\\n|s p/Intoto httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: httrack-small-server\\r\\n| p/httrack offline browsing httpd/ o/Windows/ cpe:/a:httrack:httrack/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: GeneWeb/([\\d.]+)\\r\\n| p/GeneWeb httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*USEMAP=.SwitchMasthead ALT=\\\\\\\"Fast Ethernet Switch 8275-416\\\\|s p/IBM 8275-416 switch http config/ d/switch/ cpe:/h:ibm:8275-416/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: jabberd ([\\d.]+)\\r\\n| p/jabberd httpd/ v/$1/ cpe:/a:jabberd:jabberd:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html>\\n\\t<head>\\n\\t\\t<title>Enigma Web Interface</title>\\n\\t| p/Dreambox DVB Enigma httpd/ d/media device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: VB150\\r\\n.*<title>WebView Livescope</title>|s p/Canon WebView VB150 http config/ d/webcam/ cpe:/h:canon:webview_vb150/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: iGuard Embedded Web Server/([\\w.]+) \\((FPS\\d+)\\) SN:([-\\w]+)\\r\\n| p/iGuard Embedded Web Server/ v/$1/ i/iGuard $2 FingerPrint Scanner http config; SN: $3/ d/security-misc/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>SP200X Web Configuration Pages</title>|s p/SignalSys SP200X VoIP http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Beagle-XSP Server/([\\d.]+) Unix\\r\\nX-Powered-By: ([^\\r\\n]+)\\r\\n| p/Beagle XSP/ v/$1/ i/$2/ o/Unix/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"Instant Internet\\\"\\r\\n\\r\\n| p/Nortel Instant Internet remote access httpd/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: NetworkActiv-Web-Server/([\\d.]+)\\r\\n|s p/NetworkActiv httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: ATEN HTTP Server\\(V([\\d.]+)\\)\\r\\n| p/Aten httpd/ v/$1/ i/Aten KVM http config/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-authenticate: basic realm=\\\"Vina Technologies eLink 200\\\"\\r\\n| p/Vina Technologies eLink 200 http config/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-authenticate: basic realm=\\\"Vina Technologies T1 Integrator\\\"\\r\\n| p/Vina Technologies T1 Integrator http config/ d/telecom-misc/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: CPWS\\r\\n| p/Connectra Check Point Web Security httpd/ d/security-misc/ cpe:/a:checkpoint:connectra/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Agranat-EmWeb/R([-\\w_.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Efficient Networks Web User Interface\\\"\\r\\n\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Efficient Networks router http config/ d/router/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Niagara Web Server/([\\d.]+)\\r\\nNiagara-Release: ([-\\w_.]+)\\r\\n|s p/Sun Niagara httpd/ v/$1/ i/Niagara release $2/\n#The following two lines are for the Tridium Niagara embedded device httpd, NOT the Sun (now Oracle) Solaris httpd - Tom\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nNiagara-Platform: ([^\\r\\n]+).*Server: Niagara Web Server/([\\d.]+)\\r\\n|is p/Tridium Niagara httpd/ v/$2/ d/specialized/ o/$1/ cpe:/a:tridium:niagara:$2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Niagara Web Server/([\\d.]+)\\r\\n|is p/Tridium Niagara httpd/ v/$1/ d/specialized/ cpe:/a:tridium:niagara:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: The Knopflerfish HTTP Server\\r\\n|s p/Knopflerfish httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: HTTP\\r\\n.*<title>Inventel</title>|s p/Inventel router http config/ d/router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Nanox WebServer\\r\\n| p/Nanox Web Digital Video Recorder http config/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: NetPort Software ([\\d.]+)\\r\\nDate:.* - VSX 7000</title>|s p/NetPort httpd/ v/$1/ i/Polycom VSX 7000 video conferencer http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Firewall\\r\\n.*<TITLE>WatchGuard Configuration Settings</TITLE>|s p/WatchGuard Firebox Soho Firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?WWW-Authenticate: Digest  realm=\\\"spa user\\\", domain=\\\"/\\\".*<title>Sipura SPA Configuration</title>|s p/Sipura SPA VoIP http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: ipMonitor ([\\d.]+)\\r\\n| p/MediaHouse ipMonitor httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\nServer: Tarantella/([\\d.]+)\\n| p/Tarantella httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: RealServer ([\\d.]+)\\r\\n.*<H2>Access to RealServer 5\\.0 Administration Denied</H2></HTML>\\n|s p/RealServer httpd/ v/$1/ i/Access denied/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<TITLE>AXIS ([\\d]+) Camera Server</TITLE>|s p/AXIS $1 camera httpd/ d/webcam/ cpe:/h:axis:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<TITLE>The AXIS 200\\+ Home Page</TITLE>|s p/AXIS 200+ camera httpd/ d/webcam/ cpe:/h:axis:200%2b/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<TITLE>AXIS 2400 Video Server</TITLE>|s p/AXIS 2400 video httpd/ d/webcam/ cpe:/h:axis:2400/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Web Crossing/([\\d.]+)\\r\\n|s p/Web Crossing collaboration httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Kannel/([\\d.]+)\\r\\n| p/Kannel SMS proxy httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/(\\d[-.\\w]+)\\r\\n\\r\\n.*<title>ExtremeWare Management Interface</title>|s p/Allegro RomPager/ v/$1/ i/Extreme Networks switch http config/ d/switch/ o/ExtremeWare/ cpe:/a:allegro:rompager:$1/ cpe:/o:extremenetworks:extremeware/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/(\\d[-.\\w]+)\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>AudioCodes\\n</TITLE>|s p/Allegro RomPager/ v/$1/ i/AudioCodes VoIP gateway http config/ d/VoIP adapter/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"Switched Rack PDU\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n| p/Allegro RomPager/ v/$1/ i/APC switched rack PDU http config/ d/power-device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"IES-1000 \\w+-\\d+\\\"\\r\\nContent-Type: text/html\\r\\nServer: ZyXEL-RomPager/([\\d.]+)\\r\\n\\r\\n| p/ZyXEL RomPager/ v/$1/ i/ZyXEL IES-1000 DSLAM http config/ d/telecom-misc/ cpe:/a:zyxel:rompager:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: DIONIS/([\\d.]+)\\r\\n| p/DIONIS httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 400 Bad-Request\\nHTTP/1\\.0 200 OK\\r\\n.*Aironet BR500E V([\\d.]+)</td>|s p/Cisco Aironet BR500E wireless bridge http config/ v/$1/ d/WAP/ cpe:/h:cisco:aironet_br500e/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"4AFXS Configuration Web Server\\\"\\r\\n| p/SunComm 4AFXS VoIP gateway http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ATR-HTTP-Server/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Allied Telesyn AR410\\\"\\r\\n|s p/ATR httpd/ v/$1/ i/Allied Telesyn AR410 http config/ d/router/ cpe:/h:alliedtelesyn:ar410/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle_Web_Listener/([\\d.]+)EnterpriseEdition\\r\\n|s p/Oracle Web Listener Enterprise Edition/ v/$1/ cpe:/a:oracle:apex:$1::enterprise/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle_Web_Listener/([\\d.]+)AdvancedEdition\\r\\n|s p/Oracle Web Listener Advanced Edition/ v/$1/ cpe:/a:oracle:apex:$1::advanced/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle_Web_listener_?([^\\r\\n]+)\\r\\n|s p/Oracle Web Listener/ v/$1/ cpe:/a:oracle:apex:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: VOMwebserver v([\\d.]+)\\r\\n|s p/VOMwebserver/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: RapidLogic/([\\d.]+)\\r\\n.*<TITLE>Net2Phone Init Page</TITLE>|s p/RapidLogic httpd/ v/$1/ i/Net2Phone VoIP adapter http config/ d/VoIP adapter/ cpe:/a:rapidlogic:httpd:$1/\n\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>IT Temperature Monitor: ([^<]+)</title>.*<TD>Model:</TD><TD width=10 rowspan=3><BR></TD><TD>([-\\w_.]+)</TD><TD width=20 rowspan=3><BR></TD><TD>Firmware Version:</TD><TD width=10 rowspan=3><BR></TD><TD>([\\d.]+)</TD>|s p/Sensatronics $2 remote temperature monitor httpd/ i/name $1; Firmware version $3/ d/specialized/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>IT Temperature monitor: ([^<]+)</title>.*<TD>Model:</TD><TD width=10 rowspan=7><BR></TD><TD>([-\\w_.]+)</TD>.*<TD>Firmware Version:</TD><TD>([\\d.]+)</TD>|s p/Sensatronics $2 remote temperature monitor httpd/ i/name $1; Firmware version $3/ d/specialized/\n\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<font color=#FFFFFF size=5>Cisco ATA 186 \\(SIP\\)</font>|s p/Cisco ATA 186 SIP http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: AKCP Embedded Web Server| p/AKCP embedded httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\d.]+)\\r\\n.*<meta content=\\\"Printer with Embedded Web Server\\\"|s p/Allegro RomPager/ v/$1/ i/Xerox Phaser 4500 printer http config/ d/printer/ cpe:/a:allegro:rompager:$1/ cpe:/h:xerox:phaser_4500/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>JetDirect Home Page</TITLE>\\r\\n\\r\\n</HEAD>\\r\\n<BODY>\\r\\n<P>\\r\\nWelcome to the HP JetDirect print server!\\r\\n| p/HP JetDirect printer http config/ d/printer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: JVC/([\\d.]+)\\r\\n.*<html>\\r\\n<head>\\r\\n.*<title>V\\.Networks|s p/JVC V.Networks video httpd/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.0 401\\r\\nServer: JVC/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<html><body><h1>401 Unauthorized</h1></body></html>\\r\\n|s p/JVC V.Networks video httpd/ v/$1/ i/Authentication enabled/ d/media device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?WWW-Authenticate: Digest  realm=\\\"pap user\\\".*<title>Linksys PAP2 Configuration</title>|s p/Linksys PAP2 VoIP http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: SWS-([\\d.]+)\\r\\n|s p/Sun WebServer/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>Dominion SX32</title>|s p/Raritan Dominion SX32 http config/ d/terminal server/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Sensorsoft-Remote-Watchman-Enterprise/([\\d.]+)\\r\\n| p/Sensorsoft Remote Watchman Enterprise/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: /cgi-bin/guestimage\\.html\\r\\nContent-type: text/html; charset=ISO-8859-1\\r\\nCache-Control: no-cache\\r\\n\\r\\n.*<title>\\r\\nRedirect to guestimage: /cgi-bin/guestimage\\.html\\r\\n|s p/thttpd/ i/Mobotix M10 PRISMB web cam http config/ d/webcam/ cpe:/a:acme:thttpd/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nContent-Length: 0\\r\\nLocation: /\\?[a-z\\d]{7,8}\\r\\n| p/Urchin RSS aggregator/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Meridian Data/([\\d.]+)\\r\\n| p/Meridian Quantum Snap! http config/ v/$1/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Login\\\"\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY><H1>401 Unauthorized Access Attempt</H1>\\nYou are not authorized to access the requested file\\.</BODY></HTML>$| p/Cisco VG248 http config/ d/telecom-misc/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\n.*<H1>(ZBR\\d+) - ZebraNet PrintServer</H1>|s p/ZebraNet $1 print server http config/ d/print server/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: GoAhead-Webs\\r\\nDate: (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?WWW-Authenticate: Basic realm=\\\"Wireless Access Point\\\"\\r\\n.*\\r\\n<html><head><title>Document Error: Unauthorized</title></head>\\r\\n\\t\\t<body><h2>Access Error: Unauthorized</h2>\\r\\n\\t\\twhen trying to obtain <b>/</b><br><p>Access to this document requires a User ID</p></body></html>\\r\\n\\r\\n|s p/GoAhead WebServer/ i/Ovislink WAP http config/ d/WAP/ cpe:/a:goahead:goahead_webserver/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"(WN-\\w+)\\\"\\r\\n.*<title> Authorization warning</title>|s p/Ovislink $1 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nServer: HyNetOS/([\\d.]+)\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>EverFocus EDSR Applet \\(([\\d.]+)\\)</TITLE>| p/EverFocus webcam http config/ i/EDSR Applet $2; HyNetOS $1/ d/webcam/ o/HyNetOS/ cpe:/o:hyperstone:hynetos:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n<head>\\n<title>MoBif TA-200 Configuration</title>\\n| p/MoBif TA-200 http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/([\\w.]+)\\r\\n\\r\\n.*<title>PagePro 9100 / PagePro 9100</title>\\n.*<a href=\\\"http://www\\.minolta-qms\\.com\\\">|s p/Allegro RomPager/ v/$1/ i/Minolta 9100 printer http config/ d/printer/ cpe:/a:allegro:rompager:$1/ cpe:/h:minolta:9100/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>OkiLAN (\\w+)</TITLE>| p/OkiData printer http config/ i/OkiLAN $1/ d/printer/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: IPCheck/([\\d.]+) *\\r\\n\\r\\n|s p/IPCheck httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Aragorn\\r\\nWWW-Authenticate: Basic realm=\\\"Please enter User name and password\\\"\\r\\n| p/Aastra 480i VoIP phone http config/ d/VoIP phone/ cpe:/h:aastra:480i/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Aragorn\\r\\nWWW-Authenticate: Basic realm=\\\"Aastra ([\\w._ -]+)\\\"\\r\\n| p/Aastra $1 VoIP phone http config/ d/VoIP phone/ cpe:/h:aastra:$1/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: snom embedded\\r\\n.*\\n<TITLE>snom ?(\\w+)(?:-[\\dA-F]+)?</TITLE>\\n|s p/Snom $1 VoIP phone http config/ d/VoIP phone/ cpe:/h:snom:$1/a\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nCache-Control: no-store\\r\\nServer: snom embedded\\r\\n.*<TITLE>snom VoIP phone: Error</TITLE>|s p/Snom 300 VoIP phone http config/ i/secure connection required/ d/VoIP phone/ cpe:/h:snom:300/a\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: snom embedded\\r\\n.*\\n<html>\\n<head>\\n\\n<title>snom 105 VoIP Phone :: Home</title>|s p/Snom 105 VoIP phone http config/ d/VoIP phone/ cpe:/h:snom:105/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"main@SP1\\\"\\r\\nContent-type: text/html\\r\\n {34}\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/CyberIQ HyperFlow 3 switch http config/ d/switch/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nAllow:GET\\r\\nContent-Type:text/html\\r\\nExpires: .*\\r\\nContent-Length:\\d+\\r\\n\\r\\n<HTML><HEAD><TITLE>Ringdale Printserver </TITLE>| p/Ringdale print server http config/ d/print server/\nmatch http m|^HTTP/1\\.0 302 Found\\nLocation: /login\\.ews\\r\\nCache-Control: no-store\\nContent-Type: text/html\\r\\n\\r\\n| p/Emerald Management Suite httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"FXO Configuration Web Server\\\"\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<body><h1>401 Unauthorized</h1></body></html>\\r\\n| p/Tandem NSK D40 http config/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: glass/([\\d.]+) Python/([-\\w.]+)\\r\\n| p/IronPort AsyncOS http config/ i/glass $1; Python $2/ o/AsyncOS/ cpe:/a:python:python:$2/ cpe:/o:cisco:asyncos/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nPragma: No-cache\\r\\nServer: ACOS HTTPD/([\\d.]+)\\r\\nCache-Control: no-cache\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<html>\\r\\n<head>\\r\\n<title>neuf telecom</title>\\r\\n|s p/ACOS httpd/ v/$1/ i/Neuf Box router http config/ d/router/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: U S Software Web Server\\r\\n.*<html>\\n<head>\\n<title>StorageLoader</title>\\n|s p/Tandberg Data StorageLoader http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: U S Software Web Server\\r\\n.*<html>\\r\\n<head>\\r\\n<title>StorageLoader</title>\\r\\n|s p/Tandberg Data StorageLoader Ultrium LTO http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: VykTor XML WinAmp Server/([\\d.]+)\\r\\nMIME-version: [\\d.]+\\r\\n.*<title>Snow Crash</title>\\r\\n|s p/Snowcrash WinAmp http control plugin/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\r\\nDate: .*\\n<TITLE>\\nGigaset M740 AV - Experimentelles Web-Interface\\n</TITLE>\\n|s p/Siemens Gigaset M740 http config/ d/media device/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Spinnaker/([\\d.]+)\\r\\n| p/Searchlight Software Spinnaker httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\nWWW-Authenticate: Basic realm=\\\"HERCULES\\\"\\n| p/Hercules mainframe emulator http config/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\n(?:X-Frame-Options: SAMEORIGIN\\r\\n)?Location: https://pgpuniversal_| p/PGP Universal httpd/ cpe:/a:pgp:universal_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle/([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"XDB\\\"\\r\\n|s p/Oracle XDB httpd/ v/$1/ cpe:/a:oracle:database_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle XML DB/Oracle Database\\r\\nWWW-Authenticate: Basic realm=\\\"XDB\\\"\\r\\n|s p/Oracle XDB httpd/ cpe:/a:oracle:database_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle XML DB/Oracle9i Release ([^\\r\\n]+)\\r\\n|s p/Oracle XDB httpd/ v/$1/ cpe:/a:oracle:database_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\n<meta name=\\\"GENERATOR\\\" content=\\\"Active WebCam ([\\d.]+) \\(http://www\\.pysoft\\.com\\) \\[Unregistered\\]\\\">\\r\\n\\r\\n|s p/Active WebCam httpd/ v/$1/ i/Unregistered/ d/webcam/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Venturi NMS\\\"\\r\\n| p/GoAhead WebServer/ i/Venturi wireless accelerator http config/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?server: SAP Web Application Server \\(([-\\w_.;]+)\\)\\r\\n|s p/SAP Web Application Server/ v/$1/ cpe:/a:sap:netweaver:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"SIP Phone\\\"\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>401 Unauthorized Ip Phone Access</title>\\r\\n| p/Tecom Co. SIP-Phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: SentinelKeysServer/([\\w._-]+)\\r\\n| p/SafeNet Sentinel Keys License Monitor httpd/ v/$1/ i/Java Console/ cpe:/a:safenet-inc:sentinel_keys_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Techno Vision Security System Ver\\. ([\\d.]+)\\r\\n| p/Techno Vision Security System http config/ v/$1/ d/webcam/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: webcamXP\\r\\n\\r\\n<html><head><title>.*</title><meta name=\\\"generator\\\" content=\\\"webcamXP PRO v([\\d.]+)\\\">|s p/webcamXP PRO http config/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: webcamXP\\r\\n|s p/webcamXP httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: webcamXP (\\d+)\\r\\n|s p/webcamXP httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Rapidsite/Apa/([\\d.]+) \\(Unix\\) (.*)\\r\\n| p|Rapidsite/Apa httpd| v/$1/ i/$2/ o/Unix/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Rapidsite/Apa\\r\\n| p|Rapidsite/Apa httpd|\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"Sip Utility Set\\\", nonce=| p/Avaya 4602 VoIP phone http config/ d/VoIP phone/ cpe:/h:avaya:4602/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Sun-ILOM-Web-Server/([\\d.]+)\\r\\n| p/Sun Integrated Lights-Out httpd/ v/$1/ d/remote management/ cpe:/h:sun:integrated_lights-out:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Apple Embedded Web Server/([\\d.]+)\\r\\n| p/Apple Embedded httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: iPrism-httpd/v3 \\(Unix\\) ssl_enabled ossl\\r\\n| p/St. Bernard iPrism firewall http config/ i/ssl enabled/ d/firewall/ o/Unix/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nServer: iPrism/v3\\r\\n| p/St. Bernard iPrism firewall http config/ d/firewall/\n# ExtremeWare XOS was renamed ExtremeXOS in version 12.0\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: XOS (\\w+)\\r\\n| p/ExtremeWare XOS httpd/ v/$1/ o/ExtremeXOS/ cpe:/o:extremenetworks:extremeware_xos/\nmatch http m|^HTTP/1\\.0 200 Okay\\r\\nConnection: close\\r\\nServer: BaseSwitch 801FM\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\n<HEAD><TITLE>Welcome to Transtec AG WEBServer</TITLE>| p/Transtec BaseSwitch 801FM http config/ d/switch/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\nContent-Length: 0\\r\\nWWW-Authenticate: Basic realm=\\\"Authenticated_User@P330\\\"\\r\\n\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Avaya P330 switch http config/ d/switch/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:avaya:p330/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Systinet Server for Java/([\\d.]+) \\(([^)]+)\\)\\r\\n| p/Systinet Server for Java/ v/$1/ i/$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Miralix License Server\\r\\n| p/Miralix license server httpd/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch http m=^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: (EWS-NIC\\w+)/([\\d.]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<title>Dell (?:Laser Printer|Color Laser|MFP Laser) ([\\w+]+)</title>\\n= p/$1/ v/$2/ i/Dell $3 laser printer http config/ d/printer/ cpe:/h:dell:$3/\nmatch http m=^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: (EWS-NIC\\w+)/([\\d.]+)\\r\\n.*<title>\\r\\nDell (\\w+) (?:Color Laser|MFP)</title>=s p/$1/ v/$2/ i/Dell $3 printer http config/ d/printer/ cpe:/h:dell:$3/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: (EWS-NIC\\w+)/([\\d.]+)\\r\\n.*<title>(Phaser \\w+) - Phaser [\\w-]+</title>|s p/$1/ v/$2/ i/Xerox $3 printer http config/ d/printer/ cpe:/h:xerox:$3/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: (EWS-NIC\\w+)/([\\d.]+)\\r\\n.*<title>(WorkCentre \\w+)</title>|s p/$1/ v/$2/ i/Xerox $3 printer http config/ d/printer/ cpe:/h:xerox:$3/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: (EWS-NIC\\w+)/([\\d.]+)\\r\\n|s p/$1/ v/$2/ i/Xerox printer http config/ d/printer/\n\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: tracd/([-\\w_.]+) Python/([-\\w_.]+)\\r\\n| p/Tracd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Sametime Server \\(Meeting Services\\) ([\\d.]+)\\r\\n\\r\\n| p/IBM Lotus Sametime httpd/ v/$1/ cpe:/a:ibm:lotus_sametime:$1/\n# Not sure if this is used anywhere other than the debian\n# apt caching server \"approx\"...\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: OCaml HTTP Daemon\\r\\n| p/OCaml httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-Type: text/plain\\nContent-Length: \\d+\\n\\nerror\\nno table param specified\\n| p/Ingenuity Works ATRT minidb/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Anapod Manager ([\\w.]+)\\r\\n| p/Anapod iPod Explorer httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: IISGuard\\r\\n| p/Troxo IISGuard/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>Smart VoIP IAD Web Configuration Pages</title>|s p/Patton SmartLink 4020 VoIP adapter http config/ d/VoIP adapter/ cpe:/h:patton:sl4020/ cpe:/o:patton:smartware/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: DesktopAuthority/([\\d.]+)\\r\\n|s p/ScriptLogic DesktopAuthority httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 302 Please login\\.\\nDate: .*\\nServer: (P560\\.GSI\\.[\\d.]+)\\n| p/Gemtek P560 WAP http config/ v/$1/ d/WAP/ cpe:/h:gemtek:p560/a\nmatch http m|^HTTP/1\\.0 302 Please login\\.\\nDate: .*\\nServer: RG4000\\.CMC\\.([\\d.]+)\\n| p/RG4000 Access Control Gateway/ v/$1/ d/security-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n\\r\\n<HTML>\\r\\r\\n<BODY>\\r\\r\\n\\r\\r\\n<APPLET CODE=\\\"SimpleCamApplet2\\.class\\\" CODEBASE=\\\"http://([-\\w_.]+)/.*\\\" WIDTH=\\\"(\\d+)\\\" HEIGHT=\\\"(\\d+)\\\">| p/SimpleCam httpd/ i/Webcam resolution: $2x$3/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: LogMeIn/([\\d.]+)\\r\\n|s p/LogMeIn httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: MacroMaker\\r\\n| p/MacroMaker httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m=^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: NI Service Locator/([\\w._-]+) \\((?:SLServer|LabVIEW)\\)\\r\\n= p/National Instruments LabVIEW service locator httpd/ v/$1/ cpe:/a:ni:labview:$1/\nmatch http m|^HTTP/1\\.1 406 Not Acceptable\\r\\nServer: Phex ([\\d.]+)\\r\\n\\r\\n| p/Phex HTML-Shared File Export httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 403 Browsing disabled\\r\\nServer: Phex ([\\d.]+)\\r\\n\\r\\n$| p/Phex HTML-Shared File Export httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 NoPhrase\\r\\n.*\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>\\[JMX RI/([\\d.]+)\\] Agent View</TITLE>|s p/Sun Java Management Extensions Reference Installation httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nETag: \\\"[\\w_]+\\\"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 79\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<script language=javascript>\\n\\ntop\\.location=\\\"/login\\\";\\n\\n</script>\\n</html>\\n| p|Fortinet VPN/firewall http config| d/firewall/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: httpd\\r\\nDate: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<script>\\ntop\\.location\\.href=\\\"/login_en\\.htm\\\";\\n</script>\\n\\n| p/Siemens Gigaset SE505 WAP http config/ d/WAP/ cpe:/h:siemens:gigaset_se505/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: Gigaset ([^\\r\\n]+)\\r\\n| p/Siemens Gigaset $1 WAP http config/ d/WAP/ cpe:/h:siemens:gigaset_$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: Keep-Alive\\r\\nServer: Siemens Gigaset C450 IP\\r\\n| p/Siemens Gigaset C450 IP VoIP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: Keep-Alive\\r\\nServer: Siemens Gigaset ([^\\r\\n]+)\\r\\n| p/Siemens Gigaset $1 WAP http config/ d/WAP/ cpe:/h:siemens:gigaset_$1/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"dbox\\\"\\r\\n\\r\\nAccess denied\\.\\r\\n| p/Dbox2 Neutrino httpd/ d/media device/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: nhttpd/([\\w._-]+) \\(yhttpd_core/([\\w._-]+)\\)\\r\\n.*<title>dbox yWeb</title>|s p/nhttpd/ v/$1/ i/dbox yWeb http config; based on yhttpd_core $2/ d/media device/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: nhttpd/([\\w._-]+) \\(yhttpd_core/([\\w._-]+)\\)\\r\\n|s p/nhttpd/ v/$1/ i/based on yhttpd_core $2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<meta http-equiv=\\\"powerstate\\\" content=\\\"Switch Port7,0\\\">\\n<meta http-equiv=\\\"powerstate\\\" content=\\\"Switch Port8,0\\\">\\n<TITLE>ExpPowerControl</TITLE>|s p/Expert Power Control NET http config/ d/power-device/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: aidex/([\\d.]+) \\(Win32\\)\\r\\n| p/aidex httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: httpd\\r\\n.*<!-- \\r\\n\\(c\\) 2003 Motorola, Inc\\. All Rights Reserved\\. \\r\\n-->\\r\\n\\r\\n<title>Motorola HomeNet Product WE800G</title>\\r\\n|s p/Motorola HomeNet WE800G http config/ d/bridge/ cpe:/h:motorola:homenet_we800g/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: httpd\\r\\n.*<!-- \\r\\n\\(c\\) 2003 Motorola, Inc\\. All Rights Reserved\\. \\r\\n-->\\r\\n\\r\\n<title>Motorola HomeNet Product WR850G</title>\\r\\n|s p/Motorola HomeNet WR850G http config/ d/broadband router/ cpe:/h:motorola:homenet_wr850g/a\nmatch http m|^HTTP/1\\.0 200 Ok Welcome to VOC\\r\\nServer: Voodoo chat daemon ver perl ([^\\r\\n]+)\\r\\n| p/Voodoo chat daemon httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: AP HTTP Server\\r\\nSet-Cookie: LogIn=0\\r\\n.*<frame name=\\\"top\\\" src=\\\"/cgibin/entry\\\" marginwidth=\\\"10\\\" marginheight=\\\"10\\\" scrolling=\\\"auto\\\" frameborder=\\\"0\\\">\\n    <frame name=\\\"center\\\" src=\\\"/user/images/selected/logslct\\.gif|s p/Nortel Integrated Conference bridge http config/ i/AP HTTPd/ d/bridge/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Polycom SoundPoint IP Telephone HTTPd\\r\\n| p/Polycom SoundPoint VoIP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: BISW_SDR\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"WebAdmin\\\"\\r\\nPragma: no-cache\\r\\n| p|Billion/TeleWell ADSL modem http config| d/broadband router/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n.*getElementById\\(\\\"cTextChg\\\"\\)\\.innerHTML = \\\"<p>Die soeben durchgef&uuml;hrte System&uuml;berpr&uuml;fung hat ergeben,<br>\\\" \\+\\n \\\"dass ihr Bildschirm nicht die minimal erforderliche Aufl\\xf6sung hat\\.</p>|s p/T-Com Speedport W 501V WAP http config/ i/German/ d/WAP/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: David-WebBox/([\\w.]+) \\((\\d+)\\)\\r\\n| p/David WebBox httpd/ v/$1.$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: RapidLogic/([\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>WireSpeed Dual Connect</TITLE>\\r\\n\\r\\n<META http-equiv=\\\"PRAGMA\\\" content=\\\"NO-CACHE\\\"></META>\\r\\n\\r\\n| p/Westell C90 ADSL router http config/ v/RapidLogic httpd $1/ d/broadband router/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:westell:c90/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nMIME-Version: 1\\.0\\r\\nDate: .*\\r\\nServer: PeopleSoft RENSRV/v([\\d.]+)\\r\\n| p/Peoplesoft REN Server httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nExpires: .*\\r\\nPragma: no-cache\\r\\n\\r\\n<HTML><HEAD><TITLE>Actiontec</TITLE>\\n|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Actiontec R1524SU http config/ d/broadband router/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:actiontec:r1524su/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: HFS ([^\\r\\n]+)\\r\\n|s p/HttpFileServer httpd/ v/$1/ o/Windows/ cpe:/a:rejetto:httpfileserver:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Set-Cookie: HFS_SID=0\\.\\d{15}; path=/|s p/HttpFileServer httpd/ o/Windows/ cpe:/a:rejetto:httpfileserver/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Ultraseek/([\\d.]+)\\r\\n| p/Ultraseek httpd/ v/$1/ cpe:/a:ultraseek:ultraseek:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Cache-control: no-cache\\r\\nContent-length: \\d+\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>LANB Remote Upgrade Authentication</TITLE>\\r\\n.*<FONT face=\\\"Arial Black\\\" color=black size=5>VoIP Card Remote Upgrade</FONT>|s p/LG Electronics VoIP board http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: CherryPy/([\\w._-]+)\\r\\n.*Hi, this is ehcp-python background proses, under development now\\.\\.\\.|s p/CherryPy httpd/ v/$1/ i/Easy Hosting Control Panel/ cpe:/a:cherrypy:cherrypy:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: IVC Enterprise Video Server\\r\\n| p/IVC Enterprise Video Server http config/ d/webcam/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Network Camera\\\"\\r\\nContent-Type: text/html\\r\\nServer: Network Camera\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Protected Object</TITLE></HEAD><BODY>\\n<H1>Protected Object</H1>This object is protected\\.<P>\\n</BODY></HTML>| p/Vivotek 3102 Camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<ADDRESS>Cheyenne/([\\d.]+) Server at ([-\\w_.]+) Port \\d+</ADDRESS>\\n|s p/Cheyenne httpd/ v/$1/ h/$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<title>Lantronix WEB-Manager</title>\\r\\n|s p/Lantronix Universal Device Server http config/\nmatch http m|^<HTML><HEAD><META HTTP-EQUIV=refresh CONTENT=30; \\n\\t\\turl=status\\.html><TITLE>Stratasys Modeler Queue &amp; Job Status</TITLE>| p/Stratasys Modeler Queue printer http config/ d/printer/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"ATAboy2-| p/GoAhead WebServer/ i/InfiniSAN ATAboy2 http config/ d/storage-misc/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Micro-Web\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<P><TABLE BORDER=0 CELLPADDING=0 CELLSPACING=0 WIDTH=\\\"100%\\\">\\n<TR><TD WIDTH=\\\"100%\\\" ALIGN=CENTER>\\n<APPLET CODE=\\\"Login\\.class\\\" WIDTH=545 HEIGHT=418\\nALT=\\\"\\[ Login applet is not available \\]\\\">\\n| p/Micro-Web/ i/Overland Storage Neo2000 http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 200\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\nCONTENT-LENGTH: \\d+\\r\\n\\r\\n<html>\\r\\n <head>\\r\\n  <title>([\\w._-]+)</title>\\r\\n| p/Allen-Bradley $1 http config/ cpe:/h:allen_bradley:$1/\nmatch http m|^HTTP/1\\.0 200 OK    \\r\\nServer: A-B WWW/([\\d.]+)\\r\\n.*<img src=\\\"/images/rockcolor\\.gif|s p/Allen-Bradley WWW httpd/ v/$1/ i/Rockwell Automation Ethernet Processor http config/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: NetPort Software ([\\d.]+)\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\\\"content-type\\\" content=\\\"text/html;charset=Shift_JIS\\\">\\r\\n<title>NEC Projector LAN Control</title>\\r\\n| p/NetPort httpd/ v/$1/ i/NEC Projector http config/ d/media device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\nContent-Length: \\d+\\nPragma: no-cache\\nExpires: 0\\nConnection: close\\n\\n<HTML><HEAD><TITLE>Bridgit Conferencing Server</TITLE>| p/Bridgit Conferencing httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nContent-Length: \\d+\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\n<HEAD><TITLE>\\nSMART - SMART Bridgit - Download Conferencing Software\\n</TITLE>| p/Bridgit Conferencing httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Web Server\\r\\n.*\\n<title>Cisco Systems, Inc\\. VPN 3000 Concentrator \\[vpn-conc-3030\\]</title>\\n|s p/Cisco VPN 3000 Concentrator http config/ d/security-misc/ cpe:/o:cisco:vpn_3000_concentrator_series_software/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nDate: .*\\r\\nLocation: /webct/entryPageIns\\.dowebct\\r\\n| p/WebCT httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Henry/([\\d.]+)\\r\\nno-cache: set-cookie\\r\\nSet-Cookie: Customer=\\\"-[\\d_]+\\\";| p/Henry httpd/ v/$1/ i/NEC Aspire WebPro http config/ d/telecom-misc/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nP3P: CP=\\\"NON DSP CURa OUR NOR UNI\\\"\\r\\nLocation: http://[\\d.]+/auth\\.asp\\r\\n\\r\\n<html><head></head><body>\\r\\nMoved to this <a href=\\\"http://[\\d.]+/auth\\.asp\\\">location</a>\\.\\r\\n<!-- response_code_begin ERIC_RESPONSE_OK| p/GoAhead WebServer/ i|Peppercon/Paradox alarm system http config| d/remote management/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: TABS http server/([\\d.]+)\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE> 404 File Not Found</TITLE>\\r\\n</HEAD>\\r\\n\\r\\n<BODY>\\r\\n<h2>File Not Found</h2>\\r\\n</BODY>\\r\\n</HTML>| p/TABS httpd/ v/$1/ i/Server Observer Network Monitor/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 401\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\nWWW-Authenticate: Basic Realm=\\\"Vibe Streamer\\\"\\r\\n\\r\\n\\r\\nAccess denied| p/Vibe Streamer httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<!-- Copyright \\(c\\) 2000-2002, Fuji Xerox Co\\., Ltd\\. All Rights Reserved\\. -->\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<META HTTP-EQUIV=\\\"Content-Type\\\" CONTENT=\\\"text/html; charset=ISO-8859-1\\\">\\r\\n<TITLE>\\r\\nWorkCentre (\\w+) -|s p/Xerox WorkCentre $1 http config/ d/printer/ cpe:/h:xerox:workcentre_$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<!-- Copyright \\(c\\) \\d+-\\d+, Fuji Xerox Co\\., Ltd\\. All Rights Reserved\\. -->\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<META http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=windows-1252\\\">\\r\\n<TITLE>\\r\\nXerox WorkCentre ((?:Pro )?\\w+) -|s p/Xerox WorkCentre $1 http config/ d/printer/ cpe:/h:xerox:workcentre_$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<!--\\s+/\\*-+\\*\\\\\\s+Copyright \\(c\\) 2002-2006 Xerox Corporation\\. All Rights Reserved\\..*<title>\\s*XEROX WORKCENTRE|s p/Xerox WorkCentre http config/ d/printer/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<body><h2>HTTP/1\\.1 404 Not Found</h2></body>| p/VypressChat httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nDate: .*\\r\\nMIME-Version: 1\\.0\\r\\nServer: Rogatkin's JWS based on Acme\\.Serve/.Revision: ([\\d.]+) .\\r\\nLast-modified: .*\\r\\nContent-Range: bytes [-\\d/]+\\r\\nAccept-Ranges: bytes\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>\\r\\nblank page\\r\\n</title>\\r\\n<META HTTP-EQUIV=\\\"Refresh\\\" CONTENT=\\\"2;URL=about:blank\\\">\\r\\n</head>\\r\\n<body>\\r\\nThere is nothing to see here, please move along!\\r\\n</body>\\r\\n</html>\\r\\n| p/JWS based on Acme.Serve/ v/$1/ i/SageTV PVR remote control/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: SnapStream\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nContent-Type:text/html\\r\\n\\r\\n<html>\\r\\n<body>\\r\\n<h1>Beyond TV Web Admin Redirector</h1>| p/SnapStream Beyond TV http config/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: SnapStream Web Server/([\\d.]+)\\r\\n.*<title>\\r\\nBeyond TV - Web Admin Redirector\\r\\n</title>\\r\\n<meta HTTP-EQUIV=\\\"REFRESH\\\" CONTENT=\\\"2; URL=http://([\\w_.-]+):(\\d+)\\\">\\r\\n|s p/SnapStream Web Server/ v/$1/ i/Beyond TV http config; redirect to port $3/ d/media device/ h/$2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\nWWW-Authenticate: Basic realm=\\\"Server Manager\\\"\\n\\nYou must login to continue\\n| p/ServerCP httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\ncontent-type: text/html\\r\\nconnection: close\\r\\npragma: no-cache\\r\\nX-Powered-By: PHP/([\\d.]+)\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"DTD/xhtml1-transitional\\.dtd\\\">\\n<html><head>\\n<style type=\\\"text/css\\\"><!--\\nbody {background-color: #ffffff;| p/Miranda mbot plugin/ i/PHP $1/ cpe:/a:php:php:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\ncontent-type: text/html\\r\\nconnection: close\\r\\npragma: no-cache\\r\\nX-Powered-By: PHP/([\\d.]+)\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"DTD/xhtml1-transitional\\.dtd\\\">\\n<html><head>\\n<style type=\\\"text/css\\\">\\nbody {background-color: #ffffff;| p/Mianda mbot plugin/ i/PHP $1/ cpe:/a:php:php:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Freechal P2P/([\\d.]+)\\r\\n| p/Freechal P2P httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Httpinfo olsrd plugin ([\\d.]+) HTTP/1\\.1\\r\\n| p/olsrd http info plugin/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 200 OK \\r\\nServer: Simple java\\r\\nDate: .*\\r\\nContent-length: \\d+\\r\\nLast Modified: .*\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title> RAID webConsole ([-\\w_.]+)</title>| p/Intel Java RAID webConsole/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nLast-Modified: .*\\n<HTML><HEAD><TITLE>Gopher</TITLE></HEAD><BODY>Welcome to Gopherspace!  You are browsing Gopher through\\na Web interface right now\\.|s p/pygopherd web-gopher gateway/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: DirectAdmin Daemon v([\\d.]+) Registered to ([^\\r\\n]+)\\r\\n| p/DirectAdmin httpd/ v/$1/ i/Registered to $2/ cpe:/a:directadmin:directadmin:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: DirectAdmin Daemon v([\\d.]+) Registered to \\r\\n| p/DirectAdmin httpd/ v/$1/ cpe:/a:directadmin:directadmin:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"dreambox\\\"\\r\\n\\r\\n| p/Dreambox httpd/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Keep-Alive\\r\\nKeep-Alive: timeout=180\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n.*<H2>Wireless LAN Access Point Management</H2><br>\\n    <Form method=\\\"POST\\\" action=\\\"act_login\\\">\\n|s p/Compex Wifi APN NetPassage http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\n\\r\\n<HTML><HEAD><TITLE>WinRoute Pro - Web Interface</TITLE>| p/Kerio WinRoute Pro firewall http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nCache-Control: no-cache\\r\\nConnection: Close\\r\\nContent-Length: 0\\r\\nContent-Type: application/octet-stream\\r\\nDate: .*\\r\\nLocation: /nonauth/login\\.php\\r\\nPragma: no-cache\\r\\nServer: Kerio WinRoute Firewall Embedded Web Server\\r\\n\\r\\n| p/Kerio WinRoute firewall http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\ndate: .*\\r\\nserver: WebSEAL/([\\d.]+) \\(Build (\\d+)\\)\\r\\n| p/Tivoli Access Manager WebSEAL httpd/ v/$1 build $2/ cpe:/a:ibm:tivoli_access_manager_for_e-business:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Indy/([\\d.]+)\\r\\n.*\\r\\n<GOTO href=\\\".*/kiss\\.php\\\"|s p/Indy httpd/ v/$1/ i/FreeKiSS DVD player http config/ o/Windows/ cpe:/a:indy:httpd:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: httpd\\r\\n.*\\n<title>SHARED STORAGE DRIVE</title>\\n|s p/Maxtor Shared Storage Plus http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: VCS-VideoJet-Webserver\\r\\n.*<title>VCS AG VideoJet 1000</title>|s p/VCS AG VideoJet 1000 http config/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: VCS-VideoJet-Webserver\\r\\n.*<title>browser_capture</title>\\r\\n<script type=\\\"text/javascript\\\" for=document event=\\\"onkeydown\\(\\)\\\" language=\\\"JScript\\\">if\\(window\\.event\\.keyCode==\\\"123\\\"\\)|s p/VCS-VideoJet-Webserver httpd/ i/Bosch VIP X1 video encoder http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: DVSS-HttpServer/([\\d.]+)\\r\\n| p/DVSS Herculese DVR http config/ v/$1/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: Close\\r\\nContent-Type: text/html\\r\\nServer: pcastd ([\\d.]+)\\r\\n| p/Buffalo Linkstation http config/ i/pcastd $1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: BigFixHTTPServer/([\\d.]+)\\r\\n| p/BigFix enterprise patch management httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200\\r\\nContent-Type:text/html\\r\\n\\r\\n<!--SELECTserver Full Page Header-->\\r\\n<html>\\r\\n\\r\\n<head>\\r\\n<title>\\r\\nSELECTserver: License Manager\\r\\n| p/Bentley SELECTserver license manager/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Catalyst: ([\\d.]+)\\r\\n\\r\\n|s p/Catalyst Framework httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 301 moved \\(redirection follows\\)\\r\\nServer: BaseHTTP/([\\d.]+) Python/([\\w.]+)\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\nLocation: http://([-\\w_.:]+)/viewcvs/\\r\\n\\r\\n| p/BaseHTTPServer/ v/$1/ i/ViewCVS http interface; Python $2/ h/$3/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"DCM-202\\\"\\r\\n| p/GoAhead WebServer/ i/D-Link DCM-202 Docsis Cable Modem http config/ d/router/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: micro_httpd\\r\\n.*\\r\\n<title>Belkin Wireless DSL Router</title>\\r\\n|s p/micro_httpd/ i/Belkin Wireless ADSL http config/ d/broadband router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>VPAD01 V([\\d.]+) *</TITLE>| p/E-Tech VPAD01 http config/ v/$1/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Quick 'n Easy Web Server\\r\\n|s p/Quick 'n Easy Web Server httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: SentinelProtectionServer/([\\d.]+)\\r\\n| p/SafeNet Sentinel Protection Server/ v/$1/ o/Windows/ cpe:/a:safenet-inc:sentinel_protection_installer:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: WatchGuard Firewall\\r\\nwww-authenticate: Digest realm=\\\"WatchGuard Firebox Local User\\\"| p/WatchGuard Firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: InterNiche Technologies WebServer ([\\d.]+)\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\nConnection: Close\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>CAN@Net II| p/InterNiche CAN@net II ethernet bridge http config/ v/$1/ d/bridge/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: InterNiche Technologies WebServer ([\\w._-]+)\\r\\n.*<title>Welcome to Canopy</title>\\r\\n</head>\\r\\n\\r\\n<body>\\r\\n<p>\\r\\nPress <a href=\\\"http:index\\.htm\\?mac_esn=(\\w+)\\\">Here</a>|s p/InterNiche Technologies WebServer/ v/$1/ i/Motorola Canopy WAP http config; MAC: $2/ d/WAP/\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\nServer: InterNiche Technologies WebServer ([\\w._-]+)\\r\\n| p/InterNiche Technologies WebServer/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate:.*<title>Welcome to VMware ESX Server ([\\d.]+)</title>\\n\\n|s p/VMware ESX Server httpd/ v/$1/ cpe:/o:vmware:esx:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*document\\.write\\(\\\"<title>\\\" \\+ ID_EE?SX_Welcome \\+ \\\"</title>|s p/VMware ESXi Server httpd/ cpe:/o:vmware:esxi/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html.*\\n<meta name=robots content=\\\"none\\\">\\n<title>Secure&#32;Access&#32;SSL&#32;VPN</title>\\n\\n|s p/Juniper Networks Secure Access SSL VPN http config/ d/security-misc/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html.*\\n<meta name=robots content=\\\"none\\\">\\n<title>Sign&#32;in&#32;to&#32;begin&#32;\\xf92\\0\\0\\xa8o\\xee\\\"\\xa8o\\xee\\\"sion&#46;</title>\\n\\n|s p/Juniper Networks Secure Access SSL VPN http config/ d/security-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML>\\n<HEAD>\\n  <TITLE>WireSpeed Dual Connect</TITLE>\\n\\n| p/RapidLogic httpd/ v/$1/ i/Westell WireSpeed Dual Connect ADSL router http config/ d/router/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n.* This is a WebSEAL error message template file\\.|s p/Tivoli Access Manager WebSEAL httpd/ cpe:/a:ibm:tivoli_access_manager_for_e-business/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Frameset//EN\\\">\\n<html>\\n\\n<head>\\n<title>Web Smart Switch</title>| p/3Com Baseline 2816 switch http config/ d/switch/ cpe:/h:3com:baseline_2816/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: SimpleHTTP/([\\d.]+) Python/([\\d.]+)\\r\\nDate:.*<title>AmaroK playlist</title>\\n\\n|s p/AmaroK media player http interface/ i/SimpleHTTP $1; Python $2/ cpe:/a:python:python:$2/ cpe:/a:python:simplehttpserver:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: LANDesk Management Agent/([\\d.]+)\\r\\n| p|LANDesk/Intel Management Agent http config| v/$1/ cpe:/a:landesk:landesk_management_suite:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: PowerSchool\\r\\n| p/PowerSchool student information system httpd/\nmatch http m|^HTTP/1\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: NetWare GroupWise POA ([\\d.]+)\\r\\n|s p/NetWare GroupWise POA httpd/ v/$1/ o/NetWare/ cpe:/a:novell:groupwise:$1/ cpe:/o:novell:netware/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Webserver\\r\\n.*\\n\\tXerox Corporation \\(R\\)\\n\\t\\(c\\) Xerox Corporation 2002 - 2004\\.\\n|s p/Xerox WorkCentre Pro httpd/ d/printer/ cpe:/h:xerox:workcentre_pro/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Webserver\\r\\n.*\\tCopyright \\(c\\) 2002-2006 Xerox Corporation\\. All Rights Reserved\\. \\n\\n|s p/Xerox WorkCentre Pro httpd/ d/printer/ cpe:/h:xerox:workcentre_pro/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Intrinsyc deviceWEB v([\\d.]+)\\r\\n| p/Intermec CK31 http config/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Hitachi Web Server ([-\\d.]+)\\r\\n| p/Hitachi Web Server httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Hitachi Web Server\\r\\n|s p/Hitachi Web Server httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<address>MLDonkey/([\\w._-]+) at|s p/MLDonkey http interface/ v/$1/\nmatch http m|^HTTP/1\\.1 401 \\r\\nServer: PrintSir WEBPORT ([\\d.]+)\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Default password:1234\\\"\\r\\n\\r\\n401 Unauthorized - User authentication is required\\.| p/PrintSir WEBPORT/ v/$1/ i/Hawking HP1SU Printserver http config; default password \"1234\"/ d/print server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"(GN-\\w+)\\\"\\r\\n| p/GoAhead WebServer/ i/Gigabyte $1 WAP http config/ d/WAP/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\"(GN-\\w+)\"|s p/Gigabyte $1 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\nCONTENT-LENGTH: \\d+\\r\\n\\r\\n.*\\r\\n<meta http-equiv=\\\"refresh\\\" content=\\\"1; URL=secure/ltx_conf\\.htm\\\">|s p/Lantronix XPort embedded ethernet http config/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: FreeBrowser/([\\d.]+) \\(Win32\\)\\r\\n| p/FreeBox FreeBrowser http interface/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: GG/([\\d.]+) \\(Unix\\) Debian GNU/Linux\\r\\nWWW-Authenticate: Basic realm=\\\"gg zone\\\"\\r\\n| p/Ruchomy Terminal Gadu-Gadu http interface/ v/$1/ i/Debian/ o/Linux/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSet-Cookie: SESSIONID=-1 \\r\\nServer: Easy File Sharing Web Server v([\\w.]+)\\r\\n| p/Easy File Sharing Web Server httpd/ v/$1/ o/Windows/ cpe:/a:efssoft:easy_file_sharing_web_server:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<title>Welcome to the Galty client depl</title>\\r\\n|s p/Galty Technologies GaltyExplorer httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Adaptec ASM ([\\d.]+)\\r\\n| p|Adaptec/IBM ServeRAID Management http config| v/$1/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: darkstat/([\\d.]+)\\r\\n| p/darkstat network analyzer httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Rumpus\\r\\n| p/Rumpus httpd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: HTTPD\\r\\n.*\\r\\n<title>([\\w-]+) Network Camera</title>|s p/Panasonic $1 webcam http config/ d/webcam/ cpe:/h:panasonic:$1/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Medusa/([\\w.]+)\\r\\n.*\\n<head>\\n<meta name=\\\"Author\\\" content=\\\"DeStar, made by Holger Schurig\\\"|s p/Medusa httpd/ v/$1/ i/Destar Asterisk PBX http config/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Medusa/([\\w.]+)\\r\\n.*<title>Sophos Anti-Virus - Home</title>\\n\\n|s p/Medusa httpd/ v/$1/ i/Sophos Anti-Virus Home http config/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Expires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Medusa/([\\w._-]+)\\r\\n.*<title>Supervisor Status</title>\\n  <link href=\\\"stylesheets/supervisor\\.css\\\" rel=\\\"stylesheet\\\" type=\\\"text/css\\\" />|s p/Medusa httpd/ v/$1/ i/Supervisor process manager/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Medusa/([\\w._-]+)\\r\\n|s p/Medusa httpd/ v/$1/ i/Supervisor process manager/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Nortel p-Class GbE2 Switch@[\\d.]+\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Nortel p-Class GbE2 switch http config/ d/switch/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Keep-Alive\\r\\nAccept-Ranges: bytes\\r\\nKeep-Alive: timeout=15, max=100\\r\\nContent-Type: text/html\\r\\nExpires: 0\\r\\n\\r\\n\\n<html>\\n<title>Apt-cacher version ([\\d.]+)\\n| p|apt-cache/apt-proxy httpd| v/$1/ o/Linux/ cpe:/a:debian:apt-cacher:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 200 Ok\\nDate: .*\\nContent-type: text/html\\n\\n<font size=\\\"-4\\\">\\nIf you can read this, you are sitting too close to the monitor\\.\\n</font>\\n| p/Unknown trojan/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"0; URL=/cgi-bin/status\\.sh\\\" />\\n\\t\\t<title>La Fonera</title>|s p/La Fonera WAP http config/ d/WAP/\nmatch http m|^<html>\\n<title>DES-(\\w+) +(?:Login)?</title>\\n| p/D-Link DES-$1 switch http config/ d/switch/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\n.*<title>Broadaband Voice Telephone Adapter</title>\\r\\n|s p/RapidLogic httpd/ v/$1/ i/VG112-D51 VoIP CPE http config/ d/VoIP adapter/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Browser\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Protected Object</TITLE>\\n</HEAD>\\n<BODY>\\n<H1>Protected Object</H1>\\n<br>This page requires a login to access\\.<br><br>You have <b>failed to login properly</b>\\.  Try again\\.<P>\\n\\n</BODY>\\n</HTML>\\n| p/Allegro RomPager/ v/$1/ i/Kronos 4500 Clock http config/ o/VxWorks/ cpe:/a:allegro:rompager:$1/ cpe:/o:windriver:vxworks/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWww-Authenticate: Basic REALM=\\\"snom\\\"\\r\\nContent-Type: text/plain\\r\\nContent-Length: 22\\r\\n\\r\\nUnauthorized request\\r\\n| p/Snom 300 VoIP phone http config/ d/VoIP phone/ cpe:/h:snom:300/a\nmatch http m|^HTTP/1\\.1 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Reactivity Gateway\\r\\n|s p/Reactivity XML Security Gateway/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: httpd\\r\\nDate: .*\\n<title>WL700g Web Manager</title>|s p/Asus WL700gE Wireless Storage router http config/ d/WAP/\nmatch http m|^<html>\\n<title>24-Port 10/100Mbps \\+ 2 Combo Copper/SFP PoE Management Switch</title>\\n| p/D-Link DES-1526 switch http config/ d/switch/ cpe:/h:dlink:des-1526/a\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: Embeded_httpd\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\r\\n\\r\\n<head>\\r\\n<META NAME=\\\"GENERATOR\\\" Content=\\\"Multi-Functional Broadband NAT Router \\(R([\\d.]+)\\)\\\">| p/Ambit DOCSIS router http config/ i/R$1/ d/router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*\\n<META NAME=\\\"GENERATOR\\\" Content=\\\"Multi-Functional Broadband NAT Router \\(R([\\d.]+)\\)\\\">\\n|s p|NTL/Ambit DOCSIS router http config| i/R$1/ d/router/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: qHTTPs\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\nLast-modified: .*\\r\\nContent-length: \\d+\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>JUPSMON</title>| p/qHTTPs/ i/Generex JAVA UPSMON http config/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: qHTTPs\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\nLast-modified: .*\\r\\nContent-length: \\d+\\r\\n\\r\\n<head>\\r\\n<meta http-equiv='refresh' content='0; URL=\\./cgi-bin/ups_view\\.exe\\?-ups_view'>\\r\\n</head>\\r\\n<body>\\r\\n</body>\\r\\n</html>\\r\\n$| p/qHTTPs/ i/APC UPSMan http interface/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\">\\r\\n<title>8 Port Gigabit Switch</title>\\r\\n| p/Longshine LCS-GS8208-A switch http config/ d/switch/\nmatch http m|^<html>\\r\\n<head>\\r\\n<meta http-equiv=\\\"Content-Language\\\" content=\\\"it\\\">\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=windows-1252\\\">\\r\\n<meta http-equiv=\\\"Refresh\\\" content=\\\"10\\\">\\r\\n<title>UPS web page</title>\\r\\n| p/Netman UPS monitor http config/ d/power-device/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: NAE Server\\r\\nContent-Length: 73\\r\\nConnection: close\\r\\n\\r\\n<html><center><h1>NAE Server Health Check Succeeded\\.</h1></center></html>| p/Ingrian i3xx health monitor httpd/ d/security-misc/\nmatch http m|^HTTP/1\\.1 302 Tempor\\xe4r verschoben\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nServer: Indy/([\\d.]+)\\r\\nLocation: /Wikipedia/\\r\\n\\r\\n| p/Indy httpd/ v/$1/ i/German Wikipedia DVD browser/ cpe:/a:indy:httpd:$1:::de/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: httpd\\r\\n.*\\n<title>HP Media Vault: [^<]*</title>|s p/HP Media Vault http config/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nServer: WindWeb/([\\d.]+)\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<title>(\\w+) System Control Center</title>\\n| p/WindWeb/ v/$1/ i/Hughes $2 satellite modem http config/ cpe:/a:windriver:windweb:$1/\n# auther??\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Camera Web Server/([\\d.]+)\\r\\nAuther: Steven Wu\\r\\n| p|D-Link/Airlink IP webcam http config| v/$1/ d/webcam/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Web Server/([\\d.]+)\\r\\nAuther: Steven Wu\\r\\n| p/D-Link print server http config/ v/$1/ d/print server/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nconnection: Close\\r\\ncontent-type: text/html\\r\\nserver: NEWS/([\\w._-]+ \\(Funk\\)) \\(Windows 2000\\)\\r\\n| p/NEWS httpd/ v/$1/ i/Juniper Steel-Belted Radius http config/ o/Windows 2000/ cpe:/o:microsoft:windows_2000/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .*\\r\\nWWW-Authenticate: basic realm=IRC Services\\r\\nContent-Type: text/html\\r\\nContent-Length: 14\\r\\n\\r\\nAccess denied\\.| p/ircservices httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSet-Cookie: Ipswitch={| p/Ipswitch WhatsUp Professional httpd/ o/Windows/ cpe:/a:ipswitch:whatsup::professional/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK.*\\r\\n\\tThis machine cannot be used for administration\\.\\r\\n|s p/Cisco Secure ACS httpd/ i/administration disabled/ d/router/ cpe:/a:cisco:secure_access_control_server/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Wusage\\\"\\r\\n| p/Wusage httpd/\nmatch http m|^HTTP/1\\.1 401 \\r\\nServer: PrintSir WEBPORT ([\\d.]+)\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Default password:sitecom\\\"\\r\\n\\r\\n| p/PrintSir WEBPORT httpd/ v/$1/ i/Sitecom print server http config; default password \"sitecom\"/ d/print server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Sphere V([^\\r\\n]+)\\r\\n| p/Ultima online sphere httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: BlueDragon Server ([\\d.]+)\\r\\n| p/New Atlanta BlueDragon httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WSTL CPE ([\\d.]+)\\r\\n| p/Westell cable modem http config/ v/$1/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*\\r\\n<title>Welcome to VMware VirtualCenter ([\\d.]+)</title>|s p/VMware VirtualCenter httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: vdradmind/([-\\w_.]+)\\r\\n| p/vdradmin http config/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<TITLE>Actiontec MegaControl Panel</TITLE>|s p/Actiontec router http config/ d/router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nWWW-Authenticate: Basic realm=\\\"Sony Network Camera (SNC-\\w+)\\\"\\r\\nContent-Type: text/html\\r\\nServer: NetEVI/([\\d.]+)\\r\\n| p/Sony webcam $1 http config/ v/NetEVI httpd $2/ d/webcam/ cpe:/h:sony:webcam_$1/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: TiVo Calypso for Mac OS X\\r\\n| p/TiVo Calypso Desktop/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 0 \\(null\\)\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Simpserver MSN encryption or DAAP from Rhythmbox httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Java/([-\\w_.]+) javax\\.wbem\\.client\\.adapter\\.http\\.transport\\.HttpServerConnection\\r\\n|s p/Java $1 http.transport.HttpServerConnection httpd/ cpe:/a:oracle:jre:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\n.*\\nExtend-sharp-setting-status: 0\\r\\n\\r\\n<HTML>\\r\\n<HEAD><META HTTP-EQUIV=\\\"Content-Type\\\" CONTENT=\\\"text/html; charset=iso-8859-1\\\">\\r\\n<TITLE>TOP PAGE</TITLE>\\r\\n|s p/RapidLogic httpd/ v/$1/ i/Sharp Imagistics printer http config/ d/printer/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Mon, 1 Jan 2001 12:00:00 GMT\\nExtend-sharp-setting-status: 0\\r\\n\\r\\n.*<title>(AR-\\w+)</title>|s p/RapidLogic httpd/ v/$1/ i/Sharp $2 printer http config/ d/printer/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:sharp:$2/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\n.*\\nExtend-sharp-setting-status: 0\\r\\n.*<title>([A-Z][A-Z0-9-]+)</title>\\n|s p/RapidLogic httpd/ v/$1/ i/Sharp $2 printer http config/ d/printer/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:sharp:$2/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Mon, 1 Jan 2001 12:00:00 GMT\\nExtend-sharp-setting-status: 0\\r\\n.*<meta http-equiv=\\\"Expires\\\" content=\\\"Thu, 01 Dec 1994 16:00:00 GMT\\\">.*<title>(\\w+)</title>|s p/RapidLogic httpd/ v/$1/ i/Sharp $2 Imagistics printer/ d/printer/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Agranat-EmWeb/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"HP p-Class GbE2 Switch|s p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP p-Class GbE2 switch http config/ d/switch/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: HttpServer\\r\\nDate: .*\\r\\nContent-type: text/plain\\r\\nContent-length: \\d+\\r\\nWWW-Authenticate: Basic realm=\\\"Pylon Anywhere Secure Gateway\\\"\\r\\n\\r\\nUnauthorized| p/Pylon Anywhere Secure Gateway http config/ d/security-misc/\nmatch http m=^HTTP/1\\.1 \\d\\d\\d .*\\t\\t\\t<TITLE> (?:KONICA MINOLTA|MINOLTA-QMS) magicolor (\\w+ DL) </TITLE>\\r\\n=s p/Konica Minolta Magicolor $1 printer http config/ d/printer/ cpe:/h:konicaminolta:magicolor_$1/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Authentication\\\"\\r\\n\\r\\n<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not authentication-capable or authentication failed\\.</BODY>\\n\\n|s p/Cisco Adaptive Security Appliance http config/ d/firewall/ cpe:/h:cisco:asa/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\n.*\\n\\n  <title>HP LaserJet (\\w+) Series|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet $2 Series http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:laserjet_$2/\n\nmatch http m|^HTTP/1\\.0 200 Data follows\\r\\nDate: .*\\r\\nServer: Radia Integration Server([^\\r\\n]+)\\r\\n| p/HP Radia Integration Server httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 Data follows\\r\\nDate: .*\\r\\nServer: HP Client Automation \\(httpd-managementportal\\) \\r\\n| p/HP Client Automation httpd/ i/management portal/\nmatch http m|^HTTP/1\\.0 200 Data follows\\r\\nDate: .*\\r\\nServer: HP Client Automation \\(httpd-patchmanager\\) \\r\\n| p/HP Client Automation httpd/ i/patch manager/\nmatch http m|^HTTP/1\\.0 200 Data follows\\r\\nDate: .*\\r\\nServer: HP Client Automation \\(httpd-rps\\) \\r\\n| p/HP Client Automation httpd/ i/rps/\nmatch http m|^HTTP/1\\.0 200 Data follows\\r\\nDate: .*\\r\\nServer: HP Client Automation \\(httpd-pm\\) \\r\\n| p/HP Client Automation httpd/ i/policy server/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nServer: HP Client Automation Messaging Service ([\\w._-]+)\\r\\n| p/HP Client Automation httpd/ v/$1/ i/messaging service/\n\nmatch http m|^HTTP/1\\.1 302 Document Follows\\r\\nLocation: /hag/pages/home\\.ssi\\r\\n\\r\\nHTTP/1\\.1 302 Document Follows\\r\\nLocation: /hag/pages/home\\.ssi\\r\\n\\r\\nConnection: close\\r\\n\\r\\n| p/D-Link DSL-504G ADSL router http config/ d/router/ cpe:/h:dlink:dsl-504g/a\nmatch http m|^HTTP/1\\.0 302 Redirection\\r\\nDate: .*\\r\\nServer: iGuard Embedded Web Server/([-\\w_.]+) \\(\\w+\\) SN:([-\\w]+)\\r\\nPragma: no-cache\\r\\nLocation: /Admins/index\\.html\\r\\n\\r\\n| p/iGuard access control system http config/ v/$1/ i/Serial $2/ d/security-misc/\n# Not sure if this will match all:\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: [A-Z]{3}.*</head>\\n<body>\\n<p>You will automatically be redirected to a secure connection in 2 seconds\\.</p>\\n</body>\\n</html>\\n|s p/HP 9000 http service/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: LiteSpeed\\r\\n|s p/LiteSpeed httpd/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: LiteSpeed/([\\w. ]+)\\r\\n|s p/LiteSpeed httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*Powered By <a href='http://www\\.litespeedtech\\.com'>LiteSpeed Web Server</a>|s p/LiteSpeed httpd/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: httpd\\r\\n.*<script type=\\\"text/javascript\\\" src=\\\"lang_pack/language\\.js\\\"></script>\\n\\t\\t<link type=\\\"text/css\\\" rel=\\\"stylesheet\\\" href=\\\"style/[-\\w_.]+/style\\.css\\\" />\\n\\t\\t<!--\\[if IE\\]>|s p/DD-WRT milli_httpd/ i/Linksys WRT54G http config/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch http m|^HTTP/1\\.1 401 N/A\\r\\nServer: TP-LINK Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Web Smart Switch\\\"| p/TP-LINK Web Smart Switch http config/ d/switch/\nmatch http m%^HTTP/1\\.1 (?:401 (?:|N/A|Unauthorized)|200 OK)\\r\\nServer: (?:Router|Router Webserver|TP-LINK Router)\\r\\nConnection: close\\r\\n(?:Content-Type: text/html\\r\\n)?WWW-Authenticate: Basic realm=\\\"TP-LINK (?:Portable |AC\\d+ )?(?:Wireless|WiFi) (?:(?:Lite )?(?:N|G) (?:3G(?:/4G)? )?)?(?:Dual Band |Nano )?(?:Gigabit )?(?:AP|Router|Access Point|Range Extender) ([\\w /+-]+)\\\"\\r\\n% p/TP-LINK $1 WAP http config/ d/WAP/ cpe:/h:tp-link:$1/a\nmatch http m|^HTTP/1\\.1 401 N/A\\r\\nServer: Router Webserver\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\"TP-LINK Wireless Entertainment Adapter ([^\"]+)\"| p/TP-LINK $1 wireless adapter http config/ cpe:/h:tp-link:$1/\nmatch http m|^HTTP/1\\.1 401 N/A\\r\\nServer: TP-LINK Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"TP-LINK Router ([\\w+-]+)\\\"\\r\\n| p/TP-LINK $1 router httpd/ d/broadband router/ cpe:/h:tp-link:$1/a\nmatch http m|^HTTP/1\\.1 401 N/A\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"TP-LINK SOHO Router (R[\\w/]+)\\\"| p/TP-LINK $1 WAP http config/ d/WAP/ cpe:/h:tp-link:$1/\nmatch http m|^HTTP/1\\.1 401 N/A\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"(TL-\\w+) SOHO Router \\w+ Series\\\"\\r\\n| p/TP-LINK $1 router http config/ d/router/ cpe:/h:tp-link:$1/\nmatch http m|^HTTP/1\\.1 401 N/A\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"(TL-\\w+)\\xcf\\xb5\\xc1\\xd0 SOHO\\xbf\\xed\\xb4\\xf8\\xc2\\xb7\\xd3\\xc9\\xc6\\xf7\\\"\\r\\nContent-Type: text/html\\r\\n\\r\\nWeb Server Error Report:<HR>\\n<H1>Server Error: 401 N/A</H1>\\r\\nOperating System Error Nr:3997698: /userRpm/index\\.htm <P><HR><H2>Access denied / wrong user name or password</H2><P><P><HR><H1>/userRpm/index\\.htm</H1><P><HR>$| p/TP-LINK $1 router http config/ d/router/ cpe:/h:tp-link:$1/\nmatch http m|^HTTP/1\\.1 401 N/A\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"DYNEX (DX-E402)\\\"| p/DYNEX $1 router http config/ i/manufacturer TP-LINK/ d/broadband router/ cpe:/h:dynex:$1/\nmatch http m|^HTTP/1\\.1 401 N/A\\r\\nServer: Router Webserver\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"\\d+Mbps Wireless \\w+ Router (RNX-\\w+)\\\"\\r\\n| p/Rosewill $1 WAP http config/ i/manufacturer TP-LINK/ d/WAP/ cpe:/h:rosewill:$1/\nmatch http m|^HTTP/1\\.1 401 N/A\\r\\nServer: Router Webserver\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Wireless \\w+ Router (WRN\\w+)\\\"\\r\\n| p/Intelbras $1 WAP http config/ i/manufacturer TP-LINK/ d/WAP/ cpe:/h:intelbras:$1/\nmatch http m%^HTTP/1\\.1 401 N/A\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"\\d+Mbps AV\\d+(?: WiFi| Wireless(?: N)?) Powerline Extender (WPA[\\w._-]+)\\\"\\r\\n% p/TP-LINK $1 powerline extender http config/ d/WAP/ cpe:/h:tp-link:$1/\nmatch http m%^HTTP/1\\.1 401 N/A\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"\\d+Mbps AV\\d+(?: Nano| Gigabit)? Powerline Extender (PA[\\w._-]+)\\\"\\r\\n% p/TP-LINK $1 powerline extender http config/ d/switch/ cpe:/h:tp-link:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Router Webserver\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\"TP-LINK AV\\d+(?: Gigabit)? Powerline(?: ac)? WiFi Extender (TL-\\w+)\"\\r\\n| p/TP-LINK $1 powerline WiFi extender http config/ d/WAP/ cpe:/h:tp-link:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\"\\d+Mbps Wireless \\w+ Router (TL-\\w+)\"\\r\\n| p/TP-LINK $1 WAP http config/ d/WAP/ cpe:/h:tp-link:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Terayon/([\\d.]+)\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>Cable Modem Information Center</title>| p/Terayon cable modem http config/ v/$1/ d/broadband router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Tornado/([-\\w_.]+)\\r\\n| p/Puakma Tornado httpd/ v/$1/\nmatch http m|^<html><head><title>Cannot find server</title></head><body>\\n<br>Access to this web page is currently unavailable\\.<P><HR></BODY></HTML>\\n$| p/Arris cm450 cable modem http config/ d/broadband router/ cpe:/h:arris:cm450/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"RV082\\\"\\r\\n| p/Linksys RV082 VPN router http config/ d/router/ cpe:/h:linksys:rv082/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Linksys WAG54GS|s p/Linksys WAG54GS broadband router http config/ d/broadband router/ cpe:/h:linksys:wag54gs/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*href=\\\"images/favicon\\.ico\\\">\\n<title>NETGEAR ProSafe\\x99 - Welcome to Configuration Manager Login</title>\\n<!--\\nCopyright \\(c\\) 2005-2006 TeamF1|s p/Netgear ProSafe FVS338 VPN firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<link rel=\\\"icon\\\" type=\\\"image/ico\\\" href=\\\"images/favicon\\.ico\\\">\\n<title>NETGEAR ProSafe&#8482; - Welcome to Configuration Manager Login</title>\\n<!--\\nCopyright \\(c\\) 2005-2007 TeamF1, Inc\\. \\(www\\.TeamF1\\.com\\)\\nAll rights reserved\\.\\n-->|s p/Netgear ProSafe VPN firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>NETGEAR ProSafe&#8482; - Welcome to Configuration Manager Login</title>\\n<!--\\nCopyright \\(c\\) 2005-2009 TeamF1, Inc\\. \\(www\\.TeamF1\\.com\\)\\nAll rights reserved\\.\\n-->\\n|s p/Netgear ProSafe FVX538 VPN firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nMime-Version: 1\\.0\\r\\nServer: Web Transaction Server For ClearPath MCP ([\\d.]+)\\r\\n| p/Unisys ClearPath MCP http config/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Access Denied\\r\\nWWW-Authenticate: NTLM\\r\\nContent-Length: 24\\r\\nContent-Type: text/html\\r\\n\\r\\nError: Access is Denied\\.| p/Microsoft IIS httpd/ v/3.X/ o/Windows/ cpe:/a:microsoft:internet_information_services:3/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: AnomicHTTPD \\(www\\.anomic\\.de\\)\\r\\n|s p/Anomic YaCy P2P Search Engine httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: SnapStream\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nContent-Type:text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>\\r\\nBeyond TV - Web Admin Redirector\\r\\n| p/SnapStream Media Beyond TV PVR http config/ d/media device/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: thttpd-alphanetworks/([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(DI-\\w+)\\\"\\r\\n|s p/thttpd-alphanetworks/ v/$1/ i/D-Link $2 router http config/ d/router/ cpe:/a:alphanetworks:thttpd:$1/ cpe:/h:dlink:$2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: thttpd-alphanetworks/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?.*\\r\\nWWW-Authenticate: Basic realm=\\\"BRL-04UR\\\"\\r\\n\\r\\n|s p/thttpd-alphanetworks/ v/$1/ i/Planex BRL-04UR router http config/ d/router/ cpe:/a:alphanetworks:thttpd:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: M900\\w*-HTTP-Server/([\\d.]+)\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>(M900\\w*) AP</title>| p/Trango $2 AP http config/ v/$1/ d/broadband router/\nmatch http m|^HTTP/1\\.1 401 Unauthorised\\r\\nServer: ATR-HTTP-Server/([\\d.]+)\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Allied Telesyn AT-(AR\\w+)\\\"\\r\\n| p/Allied Telesyn $2 router http config/ v/$1/ d/router/ cpe:/h:alliedtelesyn:$2/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: Yaws/([-\\w_.]+) Yet Another Web Server\\r\\n| p/Yaws httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: Yaws ([\\w._-]+)\\r\\n| p/Yaws httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Web Server\\r\\n.*<IMG SRC = \\\"/base/images/netgear_(\\w+)_banner\\.gif\\\"|s p/Netgear $1 gigabit switch http config/ d/switch/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Centile Embedded HTTPSd server/([\\d.]+)\\r\\n| p/Centile VoIP adapter http config/ v/$1/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nConnection: close\\r\\nWWW-Authenticate: Digest realm=\\\"DUALCOM-\\d+.USER\\\",| p/CyberSwitching Dualcom power device http config/ i/rabbit 2000 embedded/ d/power-device/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: PWLib-HTTP-Server/([\\d.]+) PWLib/([\\d.]+)\\r\\n.*<HTML>\\r\\n\\r\\n<HEAD>\\r\\n<TITLE>Welcome to OpenMCU</TITLE>|s p/PWLib httpd/ v/$1/ i/OpenMCU http interface; PWLib $2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: PWLib-HTTP-Server/([\\w._-]+) PWLib/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: Tue, 01 Jan 1980 00:00:00 GMT\\r\\n.*<title>SOPHO (\\w+) In-System Gateway</title>|s p/PWLib http/ v/$1/ i/Philips Sopho $3 PBX http config; PWLib $2/ d/PBX/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: micro_httpd\\r\\n.*<title>3Com - OfficeConnect ADSL Wireless 108Mbps 11g Firewall Router</title>|s p/micro_httpd/ i/3Com OfficeConnect ADSL WAP http config/ d/WAP/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.1 404 Not found\\n\\0$| p/nohttpd 404 responding httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: ICONAG web server \\(Ver\\.: ([-\\w_.]+)\\)\\r\\n| p/ICONAG building control http config/ v/$1/ d/specialized/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Environmental Monitoring Unit\\\"\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n| p/Allegro RomPager/ v/$1/ i/APC Environmental Monitoring Unit http config/ d/specialized/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: RapidLogic/([\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>Westell VersaLink Wireless Gateway</TITLE>| p/RapidLogic httpd/ v/$1/ i/Westell VersaLink WAP http config/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d\\r\\nContent-Length:\\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"/viawarp\\.css\\\" />| p/Nova viaWARP httpd/ o/Windows/ cpe:/o:microsoft:windows/a\n# Looks more general than a media device\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\nContent-Type: text/html\\r\\nServer: wizd ([^\\r\\n]+)\\r\\n| p/wizd media viewer httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nServer: XES WindWeb/([\\d.]+)\\r\\n| p/WindWeb/ v/$1/ i/XES Synergix printer http config/ d/printer/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma:no-cache\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<title>INTERMEC ([\\d+/]+); IP| p/Intermec $1 print server http config/ d/print server/ cpe:/h:intermec:$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: GoAhead-Webs\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"CameraServer\\\"\\r\\n| p/GoAhead WebServer/ i/AirLink 101 SkyIPCam http config/ d/webcam/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\n.*<title>BVA8055 Web Configuration Pages</title>|s p/Leadtek BVA8055 VoIP adapter http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: KTorrent/(\\d[-\\w_.]+)\\r\\n|s p/Ktorrent web interface/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Wildcat/v([-\\w_.]+)\\r\\n|s p/Wildcat Interactive Net Server httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>NRG (\\w+) .*Network Printer D Model-Network Administration</TITLE>.*<FONT SIZE=\\+2>Unit Serial Number (\\w+)</FONT>|s p/Allegro RomPager/ v/$1/ i/NRG $2 printer http config; serial $3/ d/printer/ cpe:/a:allegro:rompager:$1/ cpe:/h:nrg:$2/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Ethernut ([^\\r\\n]+)\\r\\n| p/Ethernut demo httpd/ v/$1/ o|Nut/OS| cpe:/o:ethernut:nut_os/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mongrel ([\\d.]+)\\r\\n|s p/Mongrel httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Micro-Web\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<FORM ACTION=/LoginPostData\\.fn METHOD=POST>\\r\\n<INPUT TYPE=HIDDEN NAME=BrowserId VALUE=\\w+>\\r\\n<TABLE ALIGN=CENTER BORDER=3 CELLPADDING=8 CELLSPACING=1 WIDTH=600 BGCOLOR=\\\"#C0C0C0\\\">\\r\\n<TR><TH COLSPAN=1><BIG><BIG>Login to the Remote Management Interface</BIG></BIG>| p/Micro-Web/ i/HP MSL5000 storage http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WindWeb/([\\d.]+)\\r\\n.*\\\"/js/branding_utils\\.js\\\"></script>\\r\\n<script language=\\\"JavaScript\\\"><!--\\nvar iPortIndex = 0; \\nvar iProtocol = 0; \\nvar serialPort = 1|s p/WindWeb/ v/$1/ i/HP MSL5000 storage config/ d/storage-misc/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WindWeb/([\\d.]+)\\r\\n.*\\\"/js/branding_utils\\.js\\\"></script>\\r\\n\\r\\n<script language=\\\"JavaScript\\\"><!--\\nvar ConfigDirty = 1\\nvar routerMode = 1\\nvar modularRouter = 0\\nvar szFCHostName = \\\"none\\\"\\n|s p/WindWeb/ v/$1/ i/HP E1200 storage config/ d/storage-misc/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"read@\\\"\\r\\n\\r\\n<META HTTP-EQUIV=refresh CONTENT=0;URL=/util/401\\.html>| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/3com Corebuilder switch http config/ d/switch/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\nDATE: .*\\nWWW-Authenticate: Basic realm=\\\"Delta UPS Web\\\"\\nServer: Delta UPSentry\\n| p/Belkin Bulldog UPS Monitor http config/ d/power-device/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<h3>BitTorrent download info</h3>\\n<ul>\\n<li><strong>tracker version:</strong> ([-\\w_.]+) \\(BitTornado\\)</li>|s p/BitTornado tracker/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: ChatSpace/([\\d.]+)\\r\\n| p/Akiva ChatSpace httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n<title>EMC Connectrix Management</title>|s p/EMC Connectrix http config/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nConnection: close\\r\\nContent-type: text/html\\r\\n\\r\\n<html>404 Not Found \\(Error 3\\)<BR></html>$| p/ESET NOD32 windows anti-virus http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 Document follows\\nContent-Type: text/html\\nContent-length: \\d+\\n\\n<html>\\n<head>\\n<title>BeanShell Remote Session</title>\\n| p/BeanShell java scripting http console/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: IntellipoolHTTPD/([\\d.]+)\\r\\n|s p/Intellipool Network Monitor http config/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MX4J-HTTPD/([\\d.]+)\\r\\n.*<title>CruiseControl - Agent View</title>|s p/MX4J/ v/$1/ i/JMX CruiseControl http config/\nmatch http m|^HTTP/1\\.0 401 Authentication requested\\r\\nWWW-Authenticate: Basic realm=\\\"MX4J\\\"\\r\\nServer: MX4J-HTTPD/([\\w._-]+)\\r\\n\\r\\n$| p/MX4J/ v/$1/ i/OpenNMS http admin/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*/cgi-bin/prodhelp\\?prod=axis_540\\+/542\\+&ver=([\\d.]+)&|s p|AXIS 540+/542+ print server http config| v/$1/ d/print server/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nRIPT-Server: iTunesLib/([-\\w_.]+) \\(Mac OS X\\)\\r\\n| p/Apple TV http config/ i/iTunesLib $1/ d/media device/ cpe:/a:apple:apple_tv/ cpe:/o:apple:mac_os_x/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Vistabox\\r\\n| p/Convision Vistabox security camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\nServer: ISOCOR web500gw ([\\d.]+)\\r\\n| p/Eudora Worldmail http config/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 Reply from server\\r\\nServer: MERCUR Messaging 2005\\r\\n| p/Mercur Webmail httpd/ o/Windows/ cpe:/a:atrium:mercur/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\nDate: .*\\r\\nServer: Proofpoint/([\\d.]+)\\r\\n| p/Proofpoint email security http config/ v/$1/ d/security-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html><head><title>IVM Answering Attendant</title>| p/IVM Answering Attendant httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nContent-Length: 0\\r\\nConnection: Close\\r\\nContent-Type: text/html\\r\\nLocation: /search\\?site=[-\\w_.]+&client=[-\\w_.]+&| p/GoogleMini Search Appliance httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nX-Powered-By: PHP/([-\\w_.]+)\\r\\n.*\\n<title>(N\\d+ - N\\d+)</title>\\n.*// Share Explorer\\n|s p/Hammer $2 myshare http config/ i/PHP $1/ d/storage-misc/ cpe:/a:php:php:$1/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: httpd\\r\\n.*<!--- Vendor:LINKSYS\\nModelName:DD-WRT\\n.*\\nRF SSID:([^\\r\\n]+)\\n|s p/DD-WRT milli_httpd/ i/Linksys WAP http config; SSID $1/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK \\r\\n.*<title>: innovaphone (\\w+)</title>|s p/Innovaphone $1 VoIP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 200 OK \\r\\n.*<title>NAT: innovaphone (\\w+)</title>|s p/Innovaphone $1 VoIP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nDate: .*\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nSet-Cookie: SSLX_SSESHID=\\w+;Path=/;Secure\\r\\nLocation: https://[\\d.]+/showHome\\.do\\r\\n| p/SSL Explorer browser-based VPN httpd/ i/halfd Half-Life server management/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nExpires: .*\\r\\nSet-Cookie: SSLX_SSESHID=| p/SSL Explorer browser-based VPN httpd/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nDate: .*\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nSet-Cookie: SSLX_SSESHID=| p/SSL Explorer browser-based VPN httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Gigabit Web Smart Switch\\\"\\r\\n\\r\\n| p/micro_httpd/ i/Justec gigabit ethernet switch http config/ d/switch/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Rex/([-\\w_.]+)\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nPragma: client-id=| p/Rex media encoder http config/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: alevtd/([\\d.]+)\\r\\n| p/alevtd for videotext pages httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 200 OK\\r\\nCache-control: max-age=300\\r\\nServer: Ubicom/([\\d.]+)\\r\\n.*<title>Wireless Bridge : Login</title>|s p/Ubicom httpd/ v/$1/ i/Senao WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nConnection: Close\\r\\nServer: Synchronet BBS for Win32  Version ([-\\w_.]+)\\r\\n.*<h1 id=\\\"siteName\\\">([^<]+)</h1>|s p/Synchronet BBS httpd/ v/$1/ i/BBS name $2/ o/Windows/ cpe:/a:rob_swindell:synchronet:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: (DCS-\\w+)\\r\\n|s p/D-Link $1 webcam http config/ d/webcam/ cpe:/h:dlink:$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"(DCS-\\w+)\\\"\\r\\n| p/D-Link $1 webcam http config/ d/webcam/ cpe:/h:dlink:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Slinger/([-\\w_.]+)\\r\\n| p/Panasonic DVR slinger http config/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nDate: .*Server: lighttpd/([\\d.]+)\\r\\n\\r\\n\\n<html>\\n<head>\\n<title>Shared Storage Manager</title>\\n\\n|s p/lighttpd/ v/$1/ i/Western Digital My Book http config/ d/storage-misc/ o/Linux/ cpe:/a:lighttpd:lighttpd:$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: mini_httpd/([-\\w_.]+)/astlinux (\\w+)\\r\\nDate: .*\\r\\nCache-Control: no-cache,no-store\\r\\nWWW-Authenticate: Basic realm=\\\"\\.\\\"\\r\\n| p/mini_httpd/ v/$1/ i/Pointca PBX http config; astlinux $2/ d/PBX/ o/Linux/ cpe:/a:acme:mini_httpd:$1/ cpe:/o:linux:linux_kernel:$2/\nmatch http m|^HTTP/1\\.1  200 OK\\r\\n.*<p:DeviceName>D-Link (DIR-[-\\w_.+]+)</p:DeviceName>.*<p:FirmwareVersion>([^<]+)</p:FirmwareVersion>|s p/D-Link $1 WAP http config/ i/FW $2/ d/WAP/ cpe:/h:dlink:$1/a\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nDate: .*\\r\\nServer: RoamAbout Switch Manager Services ([^\\r\\n]+)\\r\\nContent-length: 0\\r\\n\\r\\n| p/Enterasys RoamAbout Switch Manager http config/ v/$1/\nmatch http m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([-\\w_.]+)\\r\\n.*<title>NBX NetSet</title>\\n<META NAME=\\\"robots\\\" CONTENT=\\\"noindex,noarchive,nofollow\\\">\\n<!-- \\(c\\) Copyright, 3Com Corporation or its subsidiaries|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/3Com NBX NetSet VoIP adapter http config/ d/VoIP adapter/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([-\\w_.]+)\\r\\n.*<title> HP Color LaserJet ([-\\w_.]+)|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet $2 http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:laserjet_$2/\nmatch http m|^<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML//EN\\\">\\n<html>\\n  <head>\\n    <title>404 Entity Not Found</title>\\n.*The requested file or stream was not found on this server\\.|s p/Icecast streaming media server/ cpe:/a:xiph:icecast/\nmatch http m|^HTTP/1\\.0 403 too few slashes in URI /\\r\\nContent-[tT]ype: text/html\\r\\n\\r\\n| p|apt-cache/apt-proxy httpd| o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CosminexusComponentContainer\\r\\n|s p/Cosminexus httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: GoAhead-Webs\\r\\n.*<!-- response_code_begin ERIC_RESPONSE_OK|s p/GoAhead WebServer/ i|Supermicro IPMI/Paradox Alarm http config| d/remote management/ cpe:/a:goahead:goahead_webserver/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>GC-100 Network Adapter</title>| p/Global Cache GC-100 http config/ d/media device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: JAGeX/([-\\w_.]+)\\r\\n|s p/JAGeX Java gaming httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"BSkyB (\\w+) \\\"\\r\\n| p/BSkyB $1 http config/ d/broadband router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"WBR-(\\w+)\\\"\\r\\n| p/LevelOne WBR-$1 http config/ d/broadband router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: \\r\\n.*<meta name=\\\"description\\\" content=\\\"DG(\\w+) \\d+\\\">\\n|s p/Netgear DG$1 http config/ d/broadband router/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?\\r\\nconnection: Keep-Alive\\r\\ncontent-length:.*<script src=\\\"all/kernel/public/lib/rc/js/system/currentVersion\\.xjs\\?command=WSTGetVersion\\\" type=\\\"text/javascript\\\"></script>|s p/Samsung SyncThru http config/ d/printer/ cpe:/a:samsung:syncthru_web_service/\n# Samsung CLX-3175FW\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<title>SyncThru Web Service</title>\\r\\n\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\">\\r\\n\\r\\n<script src=\\\"js/cookieCode\\.js\\\">|s p/Samsung SyncThru http config/ d/printer/ cpe:/a:samsung:syncthru_web_service/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>LaCie EdMini NAS</title>|s p/Lacie BigDisk NAS http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\n.*<title>HP Color LaserJet (\\w+)|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet $2 http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:laserjet_$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: BarracudaHTTP ([\\d.]+)\\r\\n| p/BarracudaHTTP/ v/$1/ i/Barracuda Networks Load Balancer http config/ d/load balancer/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: BarracudaHTTP ([\\d.]+)\\r\\n| p/BarracudaHTTP/ v/$1/ i/Barracuda Networks Spam & Virus Firewall http config/ d/firewall/ cpe:/h:barracudanetworks:spam_%26_virus_firewall_600:-/\n# Looks like Apache. --Ed.\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: BarracudaHTTP ([\\w._-]+)/([\\w._-]+) \\(Unix\\) ([^\\r]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https?://([\\w._-]+)|s p/Apache/ v/$2/ i/Barracuda firewall http config; BarracudaHTTP $1; $3/ d/firewall/ o/Unix/ h/$4/ cpe:/a:apache:http_server:$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WindWeb/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"i\\.LON\\\"\\r\\n|s p/WindWeb/ v/$1/ i/i.LON 100e2 Internet Server http config/ d/remote management/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: BASIC realm=\\\"Administrator or User\\\"\\r\\n\\r\\nPassword Error\\. $| p/D-Link DCS-900 webcam http config/ d/webcam/ cpe:/h:dlink:dcs-900/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Yaws/([-\\w_.]+) Yet Another Web Server\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: SMSESSION=logout; .*Set-Cookie: nortelxnetid=logout;|s p/YAWS httpd/ v/$1/ i/Nortel VPN Gateway http config/ d/security-misc/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: SAP Internet Graphics Server\\r\\n|s p/SAP Internet Graphics Server httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?server: SAP Message Server, release (\\d+)|s p/SAP Message Server httpd/ v/release $1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d(?:[^\\r\\n]+\\r\\n)*?\\r\\n<html>\\n<script language=JavaScript>\\nfunction show\\(\\)\\n{\\n\\tform1\\.submit\\(\\);\\n}\\n</script>\\n<body onload=\\\"show\\(\\);\\\">\\n<form name=form1 action=\\\"/cgi-bin/webconfig\\?page=first&action=check\\\">\\n</form>\\n</body>\\n</html>\\n|s p/D-Link DHP-540 VoIP Phone http config/ d/VoIP phone/ cpe:/h:dlink:dhp-540/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: ScanAlert\\r\\n| p/ScanAlert Hacker Safe scanner httpd/ d/security-misc/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: ATR-HTTP-Server/([\\d.]+)\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Allied Telesyn AT-8748XL\\\"\\r\\n| p/ATR httpd/ v/$1/ i/Allied Telesyn AT-8748XL switch http config/ d/switch/ cpe:/h:alliedtelesyn:at-8748xl/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?WWW-Authenticate: Basic realm=\\\"Linksys WAP51AB\\\"\\r\\n|s p/Linksys WAP51AB http config/ d/WAP/ cpe:/h:linksys:wap51ab/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\nLocation: http://ns5gt/redirect\\.html\\r\\n|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Netscreen NS5GT firewall http config/ d/firewall/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\nLocation: http://[\\d.]+/redirect\\.html\\r\\n|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Juniper SSG5 or SSG140 firewall http config/ d/firewall/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Cisco Systems, Inc\\.</TITLE>.*Cisco Systems, Inc\\. IP Phone CP-7940G \\(|s p/Allegro RomPager/ v/$1/ i/Cisco CP-7940G VoIP phone http config/ d/VoIP phone/ cpe:/a:allegro:rompager:$1/ cpe:/h:cisco:cp-7940g/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: SysMaster Web Server/([\\d.]+)\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nContent-type: text/html;\\r\\n\\r\\n<script>\\nif\\(document\\.all\\)\\n\\tlocation=\\\"app_ie\\.htm\\\";\\nelse\\n\\tlocation=\\\"app_mz\\.htm\\\";\\n</script>| p/SysMaster httpd/ v/$1/ i/Tornado M10 media center http config/ d/media device/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys-CIT400\\\"\\r\\n| p/Linksys CIT400 VoIP phone http config/ d/VoIP phone/ cpe:/h:linksys:cit400/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nAllow: GET, POST, OPTIONS\\r\\nServer: EDA HTTP LISTENER/([\\d.]+)\\r\\n.*<form name=\\\"form\\\" action=\\\"webconsole\\\" method=\\\"POST\\\" >|s p/EDA httpd/ v/$1/ i/WebFOCUS http console/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nAllow: GET, POST, OPTIONS\\r\\nServer: EDA HTTP LISTENER/([\\d.]+)\\r\\n.*<FORM NAME=\\\"form\\\" ACTION=\\\"/cgiatt\\.exe\\\" METHOD=\\\"POST\\\" >|s p/EDA httpd/ v/$1/ i/WebFOCUS http console/\n# Netgear WG302v1 or Linksys WRT54G v8\nmatch http m|^HTTP/1\\.0 301 Moved Premanently\\r\\nLocation: https://[\\d.]+/\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>Access Denied</title></head><body><h1>You must use SSL based http\\(HTTPS\\) server\\.</h1></body></html>$| p/Netgear or Linksys WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nLocation: https:///\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>Access Denied</title></head><body><h1>You must use SSL based http\\(HTTPS\\) server\\.</h1></body></html>$| p/ZyXEL ZyWALL SSL 10 SSL-VPN appliance http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: ARGUS/([\\d.]+)\\r\\n.*\\r\\n<TITLE>Intel Wireless Gateway</TITLE>|s p/ARGUS httpd/ v/$1/ i/Intel Wireless Gateway http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Conceptronic C54APRA2\\+\\\"\\r\\n\\r\\n|s p/Conceptronic C54APRA2+ WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\n.*\\r\\nWWW-Authenticate: Basic realm=\\\"AirStation\\\"\\r\\n|s p/Buffalo AirStation http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Indy/([\\d.]+)\\r\\n.*<img src=\\\"Webimages/RaidenMAILD\\.jpg\\\" border=\\\"0\\\" id=\\\"raidenLogo\\\">|s p/Indy httpd/ v/$1/ i/RaidenMAIL http config/ cpe:/a:indy:httpd:$1/\nmatch http m|^HTTP/1\\.1 200 Document follows\\r\\nServer: ELOG HTTP ([-\\w_.]+)\\r\\n| p/ELOG blog httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"iRMC@.*<title>RemoteView&reg; iRMC Web Server</title>|s p/iRMC RemoteView httpd/ d/remote management/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*:: Welcome to ZyXEL (P-\\w+) \\(([-\\w_.]+)\\) ::\\.|s p/ZyXEL $1 broadband router http config/ d/broadband router/ h/$2/ cpe:/h:zyxel:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Web Server\\r\\n.*<title>Dell OpenManage Switch Administrator</title>|s p/Dell OpenManage switch http config/ d/switch/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<SCRIPT language=JavaScript>\\r\\n\\tvar PIN_change_attempted = false;\\r\\n\\tvar Login_failed = false;\\r\\n\\tvar password_label = \\\"\\\";\\r\\n</SCRIPT>\\r\\n<!--\\r?\\nNote: the opening and closing HTML tags are deliberately omitted from\\r?\\nthis file\\.|s p/Citrix Access Gateway httpd/ o/Windows/ cpe:/a:citrix:access_gateway/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Micro Focus DSD ([-\\w_.]+)\\r\\n| p/Micro Focus Directory Server httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nServer: SCO I2O Dialogue Daemon ([-\\w_.]+) \\n|s p/SCO I2O Dialogue Daemon httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 404 OK\\r\\nServer: Lotus Expeditor Web Container/([-\\w_.]+)\\r\\n| p/Lotus Notes Expeditor httpd/ v/$1/ cpe:/a:ibm:lotus_expeditor:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Cpanel::Httpd like Apache\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"cPanel WebDisk\\\"\\r\\n\\r\\n|s p/cPanel WebDisk httpd/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch http m|^HTTP/1\\.0 302 FOUND\\r\\nServer: PasteWSGIServer/([-\\w_.]+) Python/([-\\w_.]+)\\r\\nDate: .*location: /login/login\\r\\npragma: no-cache\\r\\ncache-control: no-cache\\r\\nset-cookie:  hellahella=|s p/PasteWSGIServer/ v/$1/ i/HellaHella httpd; Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: PasteWSGIServer/([-\\w_.]+) Python/([-\\w_.]+)\\r\\n.*<title>Welcome to Pylons!</title>|s p/PasteWSGIServer/ v/$1/ i/Pylons web framework; Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: PasteWSGIServer/([-\\w_.]+) Python/([-\\w_.]+)\\r\\n.*<div id=\\\"loggerheadCont\\\">|s p/PasteWSGIServer/ v/$1/ i/Bazaar loggerhead httpd; Python $2/ cpe:/a:python:python:$2/\n\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: NessusWWW\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 6518\\r\\n.*<!-- saved from url=\\(0016\\)http://localhost -->\\n<html lang=\\\"en\\\">\\n\\n<!-- \\nSmart developers always View Source\\. \\n\\nThis application was built using Adobe Flex.*<title>Nessus</title>|s p/NessusWWW/ v/4.2.2 - 4.49RC1/ i/Nessus vulnerability scanner http UI/ cpe:/a:tenable:nessus:4/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: NessusWWW\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html\\r\\n.*<!-- saved from url=\\(0016\\)http://localhost -->\\n<html lang=\\\"en\\\">\\n\\n<!-- \\nSmart developers always View Source\\. \\n\\nThis application was built using Adobe Flex.*<title>Nessus</title>|s p/NessusWWW/ v/4/ i/Nessus vulnerability scanner http UI/ cpe:/a:tenable:nessus:4/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: NessusWWW\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html\\r\\n.*<title>Restart needed!</title>.*<body bgcolor=\\\"#2b4e67\\\">.*<link type=\\\"text/css\\\" href=\\\"jqueryui18\\.css\\\" rel=\\\"stylesheet\\\" />|s p/NessusWWW/ v/5.0.2/ i/Nessus vulnerability scanner http UI/ cpe:/a:tenable:nessus:5.0.2/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: NessusWWW\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://[\\w:._-]+/loading/\\r\\nCache-Control: \\r\\nExpires: 0\\r\\nPragma : \\r\\n\\r\\n|s p/NessusWWW/ v/4.2.2 - 4.49RC1/ i/Nessus vulnerability scanner http UI/ cpe:/a:tenable:nessus:4/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: NessusWWW\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://[\\w:._-]+/html5\\.html\\r\\nCache-Control: \\r\\nExpires: 0\\r\\nPragma : \\r\\n\\r\\n|s p/NessusWWW/ v/5.0.3/ i/Nessus vulnerability scanner http UI/ cpe:/a:tenable:nessus:5.0.3/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: NessusWWW\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https:///html5\\.html\\r\\nCache-Control: \\r\\nExpires: 0\\r\\nPragma: \\r\\n\\r\\n|s p/NessusWWW/ v/5.2.6/ i/Nessus vulnerability scanner http UI/ cpe:/a:tenable:nessus:5.2.6/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nServer: NessusWWW\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: application/json\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://[\\w:._-]+/nessus6\\.html\\r\\nCache-Control: \\r\\nExpires: 0\\r\\nPragma: \\r\\n\\r\\n|s p/NessusWWW/ v/6/ i/Nessus vulnerability scanner http UI/ cpe:/a:tenable:nessus:6/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nServer: NessusWWW\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://[\\w:._-]+/nessus6\\.html\\r\\n|s p/NessusWWW/ v/6/ i/Nessus vulnerability scanner http UI/ cpe:/a:tenable:nessus:6/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: NessusWWW\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<!doctype html>\\n<html lang=\"en\">\\n    <head>\\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge,chrome=1\" />\\n        <meta charset=\"utf-8\" />\\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\\.0, maximum-scale=1\\.0, user-scalable=0\" />\\n        <meta name=\"apple-mobile-web-app-capable\" content=\"yes\" />\\n        <link rel=\"apple-touch-icon\" href=\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAJgAAACYCAIAAACXoLd2AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyNpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8\\+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6e|s p/NessusWWW/ v/6.4/ i/Nessus vulnerability scanner http UI/ cpe:/a:tenable:nessus:6.4/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nCache-Control: \\r\\nX-Frame-Options: DENY\\r\\n(?:Etag: [a-z0-9]{32}\\r\\n)?Content-Type: .*\\r\\nDate: : .*\\r\\nConnection: close\\r\\nServer: NessusWWW\\r\\n| p/NessusWWW/ v/6.7 - 6.9/ cpe:/a:tenable:nessus:6/\nmatch ssl/http m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 349\\r\\nServer: NessusWWW\\r\\nDate: : | p/Nessus vulnerability scanner http UI/ cpe:/a:tenable:nessus/\n\n\n# CAMEO-httpd\nmatch http m=^HTTP/1\\.0 200 Ok\\r\\nServer: CAMEO-httpd\\r\\n.*<title>D-LINK CORPORATION \\| WIRELESS AP \\| LOGIN</title>=s p/CAMEO httpd/ i/D-Link DAP-1150 WAP http config/ d/WAP/ cpe:/h:dlink:dap-1150/\nmatch http m=^HTTP/1\\.0 200 Ok\\r\\nServer: CAMEO-httpd\\r\\n.*<title>D-LINK SYSTEMS, INC \\| WIRELESS AP \\| LOGIN</title>=s p/CAMEO httpd/ i/D-Link DAP-1160 WAP http config/ d/WAP/ cpe:/h:dlink:dap-1160/\nmatch http m=^HTTP/1\\.0 200 Ok\\r\\nServer: CAMEO-httpd\\r\\n.*<title>D-LINK SYSTEMS, INC\\. \\| WIRELESS AP : LOGIN</title>=s p/CAMEO httpd/ i/D-Link DAP-1360 WAP http config/ d/WAP/ cpe:/h:dlink:dap-1360/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CAMEO-httpd\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"DWL-G700AP Login\\\"\\r\\n|s p/CAMEO httpd/ i/D-Link DWL-G700AP http config/ d/WAP/ cpe:/h:dlink:dwl-g700ap/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: CAMEO-httpd\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"802\\.11g WLAN Login\\\"\\r\\n| p/CAMEO httpd/ i/TRENDnet WAP http config/ d/WAP/\n\n\nmatch http m=^HTTP/1\\.0 302 (?:Temporary|Object) [Mm]oved\\r\\nServer: Cisco AWARE ([-\\w_.]+)\\r\\n= p/Cisco ASA firewall http config/ i/Cisco AWARE $1/ d/firewall/ o/IOS/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<title>Remote Buddy by IOSPIRIT</title>|s p/IOSPIRIT Remote Buddy http config/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nServer: Asterisk/[\\w_+]+-([-\\w_.+]+) \\(| p/Asterisk http config/ v/$1/ cpe:/a:digium:asterisk:$1/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nCIMError: Only POST and M-POST are implemented\\r\\n\\r\\n$| p/OpenPegasus CIMServer/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: \\r\\n.*ACTION=\\\"/cgi-bin/cgi_authenticate\\\">\\n<P ALIGN=\\\"left\\\"><B><FONT SIZE=\\\"5\\\" face=\\\"Tahoma\\\">User Firewall Authentication|s p/WatchGuard Firebox http config/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<TITLE>Divar Web Client</TITLE>|s p/Bosch Divar Security Systems http config/ d/security-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([-\\w_.]+)\\r\\nMIME-version: 1\\.0\\r\\nPragma: no-cache\\r\\nContent-type: text/html\\r\\n\\r\\n<script language=\\\"javascript\\\">\\n<!--\\ntop\\.location\\.href=\\\"duplicate\\.htm\\\";//-->\\n</script>\\n\\r\\n$| p/3Com OfficeConnect WAP http config/ v/$1/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\w._-]+)\\r\\nMIME-version: 1\\.0\\r\\n.*<title>802\\.11g AP setup page</title>.*function doLogin\\(\\)\\n{\\nvar f=document\\.submit_form ;\\t\\nf\\.submit_login_password\\.value;|s p/RapidLogic httpd/ v/$1/ i/3Com OfficeConnect WAP http config/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 200 Ok\\rServer: httpd\\r.*\\t\\r\\r<TITLE>3Com - OfficeConnect Wireless Cable/DSL Router</TITLE>|s p/3Com OfficeConnect WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\n\\n<html>\\n<head>\\n<meta name=\\\"description\\\" content=\\\"Belkin ([-\\w_.+]+)\\\">\\n| p/Belkin $1 WAP http config/ d/WAP/ cpe:/h:belkin:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nServer: Ubicom/([\\w._-]+)\\r\\n.*<title>D-Link Print Server - Server Information</title>|s p/Ubicom httpd/ v/$1/ i/D-Link print server http config/ d/print server/ cpe:/a:ubicom:httpd:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nServer: Ubicom/([\\w._-]+)\\r\\n.*href=\\\"/substyle_DIR-(6\\d+)\\.css\\\"|s p/Ubicom httpd/ v/$1/ i/D-Link DIR-$2 WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/\nmatch http m|^HTTP/1\\.0 200 200 OK\\r\\nServer: Ubicom/([\\w._-]+)\\r\\n.*<!--@TEMPLATE:build/cooker/webgen/cooker_nonav_template\\.html@-->|s p/Ubicom httpd/ v/$1/ i/D-Link DIR-625 WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/ cpe:/h:dlink:dir-625/a\nmatch http m|^HTTP/1\\.0 200 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Ubicom/([\\w._-]+)\\r\\n.*<link rel=\\\"stylesheet\\\" rev=\\\"stylesheet\\\" href=\\\"/substyle_DIR-625\\.css\\\"|s p/Ubicom httpd/ v/$1/ i/D-Link DIR-625 WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/ cpe:/h:dlink:dir-625/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: ActiveGrid/([-\\w_.]+)\\r\\n| p/ActiveGrid httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: ISS-HttpMod/([-\\w_.]+)\\r\\n| p/Intelligent Security Systems webcam httpd/ v/$1/ d/webcam/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys RVS4000\\n \\\"| p/Linksys RVS4000 security router http config/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: httpdevil/([-\\w_.]+)\\r\\n| p/httpdevil/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: ADSM_HTTP/([-\\w_.]+)\\r\\nContent-type: text/html\\n\\n<HEAD>\\n<TITLE>\\nServer Administration\\n</TITLE>.*<META NAME=\\\"IBMproductVersion\\\" CONTENT=\\\"([\\d.]+)\\\">|s p/IBM AIX Storage Management $2 http config/ v/$1/ d/storage-misc/ o/AIX/ cpe:/o:ibm:aix/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Conexant-EmWeb/R([\\d_]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Connecting to router\\\".*\\(C\\) Copyright \\w+ Allied Telesis|s p/Conexant-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Allied Telesis broadband router http config/ d/broadband router/ cpe:/a:conexant:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\nServer: TIB/Rendezvous ([-\\w_.]+)\\n|s p/TIB Rendezvous http config/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Snug/([-\\w_.]+)\\r\\n|s p/Snug httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: NetPort Software ([\\d.]+)\\r\\n.*\\n<title>([-\\w_.]+) - VSX 8000</title>|s p/NetPort httpd/ v/$1/ i/Polycom VSX 8000 http config/ d/webcam/ h/$2/ cpe:/h:polycom:vsx_8000/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Grandstream GXP2000 ([-\\w_.]+)\\r\\n\\r\\n|s p/Grandstream GXP2000 http config/ v/$1/ d/VoIP adapter/ cpe:/h:grandstream:gxp2000/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: D-Link Internet Camera\\r\\n.*<title>(DCS-\\w+)</title>|s p/D-Link $1 webcam http config/ d/webcam/ cpe:/h:dlink:$1/a\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: micro_httpd\\r\\n.*var isRouter\\t='1' \\? '1' : '0';\\r\\nvar\\tisPS\\t\\t='' \\? '' : '0';\\r\\nvar isAPmode\\r\\nif\\('vlan1' =='' .. '1'=='0'\\)\\r\\n\\tisAPmode='1';\\r\\nelse\\tisAPmode='0';\\r\\nvar bssid = '([\\w:]+)';|s p/micro_httpd/ i/Belkin WAP http config; BSSID $1/ d/WAP/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\n.*Server: SWILL/([-\\w_.]+)\\n|s p/SWILL httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 .*<p:Type>GatewayWithWiFi</p:Type><p:DeviceName>D-Link DGL-4300</p:DeviceName>|s p/D-Link DGL-4300 WAP http config/ d/WAP/ cpe:/h:dlink:dgl-4300/a\nmatch http m|^HTTP/1\\.1 200 OK.*\\r\\nServer: IPL T S2/([-\\w_.]+)\\r\\n|s p/Extron IPL T S2 http config/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: \\r\\n.*<title>RWO-CPE-PLUS-G Login Page</title>|s p/mini_httpd/ i/Demarc RWO WAP http config/ d/WAP/ cpe:/a:acme:mini_httpd/\nmatch http m|^HTTP/1\\.1 200 OK.*\\r\\nServer: Web Server\\r\\n.*<TITLE>Netgear System Login</TITLE>.*<IMG SRC = \\\"/base/images/Netgear_fsm(\\w+)_banner\\.gif\\\"|s p/Netgear FSM$1 switch http config/ d/switch/\nmatch http m|^HTTP/1\\.1 200 OK.*\\r\\nServer: Web Server\\r\\n.*<TITLE>NetGear FSM7352S</TITLE>|s p/Netgear FSM7352S switch http config/ d/switch/ cpe:/h:netgear:fsm7352s/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FM Web Publishing\\r\\n|s p/FileMaker Web Publishing httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d Snakelet output follows\\r\\nServer: Snakelets/([-\\w_.]+) Python/([-\\w_.]+)\\r\\n| p/Snakelets httpd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDocuCentre Color (\\d+) -|s p/Fuji Xerox DocuCentre Color $1 http config/ d/printer/ cpe:/h:fuji:xerox_docucentre_color_$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*Fuji Xerox Co\\..*\\r\\n<TITLE>B6300 -|s p/Fuji Xerox B6300 printer http config/ d/printer/ cpe:/h:fuji:xerox_b6300/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Boa/([-\\w_.]+) \\(with Intersil Extensions\\)\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"CONNECT2AIR AP-600RP-USB LOGIN Enter Password \\(default is connect\\)\\\"\\r\\n|s p/Boa/ v/$1/ i/Fujitsu Siemens CONNECT2AIR AP-600RP-USB WAP http config; default password \"connect\"/ d/WAP/ cpe:/a:boa:boa:$1/ cpe:/h:fujitsu:siemens_connect2air_ap-600rp-usb/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nServer: NetworkScanner WebServer Ver([\\w._-]+)\\r\\nCache-Control: no-cache\\r\\nContent-Type: TEXT/HTML\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>([\\w._-]+)</TITLE>| p/Kyocera $2 printer http config/ v/$1/ d/printer/ cpe:/h:kyocera:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>Colloquy</title>|s p/Colloquy IRC web gateway/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*content=\\\"VMware Server is virtual infrastructure software.*\\n\\n<title>VMware Server ([-\\w_.]+)</title>|s p/VMware Server http config/ v/$1/ cpe:/a:vmware:server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([-\\w_.]+)\\r\\n.*<font color=\\\"#FFFFFF\\\" size=\\\"4\\\">Cisco Systems, Inc\\. IP Phone CP-7960 \\(|s p/Allegro RomPager/ v/$1/ i/Cisco CP-7960 VoIP phone http config/ d/VoIP phone/ cpe:/a:allegro:rompager:$1/ cpe:/h:cisco:cp-7960/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: InterMapper/([-\\w_.]+)\\r\\n|s p/Dartware InterMapper httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Authenticate\\nWWW-Authenticate: Basic realm=\\\"P4Web\\\"\\n| p/Perforce P4Web httpd/\nmatch http m|^HTTP/1\\.1 200\\r\\n.*<!--SELECTserver Full Page Header-->\\r\\n<html>\\r\\n\\r\\n<head>\\r\\n<title>\\r\\nSELECTserver: License Manager\\r\\n</title>|s p/SELECTserver license manager httpd/\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\nDate: .*\\r\\nServer: WebminServer\\r\\n| p/WebminServer httpd/\nmatch http m|^HTTP/1\\.1 200 OK.*\\* Zimbra Collaboration Suite Web Client\\n|s p/Zimbra http config/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://[\\d.:]+/zimbraAdmin\\r\\n|s p/Zimbra admin http config/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?WWW-Authenticate: Basic realm=\\\"CANOPY ([-\\w]+)\\\"\\r\\n|s p/Motorola Canopy WAP http config/ i/MAC $1/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 Document follows\\nMIME-Version: 1\\.0\\nServer: Java Cell Server\\n.*<title>dCache service</title>|s p/dCache httpd/ i/Distributed Storage Node/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate:.*\\r\\nServer: HighPoint Raidman WebServer/([-.\\w\\d]+)\\r\\nAccept-Ranges: bytes\\r\\n| p/HighPoint Raidman web config http/ v/$1/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nconnection: close\\r\\ncontent-type: text/html\\r\\ndate: .*\\r\\nserver: Ruckus/([\\d.]+)\\r\\n\\r\\n| p/Ruckus Media Player/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\n#Novell Groupwise HTTP services\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n(?:Date: .*\\r\\n)?Server: GroupWise MTA ([-_.\\d\\w\\(\\) ]+)\\r\\n| p/Novell GroupWise MTA httpd/ v/$1/ o/Unix/ cpe:/a:novell:groupwise:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n(?:Date: .*\\r\\n)?Server: GroupWise POA ([-_.\\d\\w\\(\\) ]+)\\r\\n| p/Novell GroupWise POA httpd/ v/$1/ i/Post Office Agent/ o/Unix/ cpe:/a:novell:groupwise:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n(?:Date: .*\\r\\n)?Server: GroupWise GWIA ([-_.\\d\\w\\(\\) ]+)\\r\\n| p/Novell GroupWise GWIA httpd/ v/$1/ i/GroupWise Internet Agent/ o/Unix/ cpe:/a:novell:groupwise:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n(?:Date: .*\\r\\n)?Server: Messenger-MA ([-_.\\d\\w\\(\\) ]+)\\r\\n| p/Novell Messenger httpd/ v/$1/ i/Messenger Agent/ o/Unix/\nmatch http m|^HTTP/1\\.0 200 .*\\r\\nDate: .*\\r\\nContent-Length: .*\\r\\nContent-Type: .*\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>Novell Messenger Download</title>| p/Novell Messenger download httpd/ o/Unix/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Hunchentoot ([\\w._-]+)\\r\\n|s p/Hunchentoot httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: AllegroServe/([\\w._-]+)\\r\\n|s p/Franz Allegroserve httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Hop\\r\\n|s p/HOP httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: minituner\\r\\n| p|BMC/Marimba Management http config|\nmatch http m|^HTTP/1\\.1 200 Channel Listing\\r\\nServer: Marimba-Transmitter/([\\d.]+)\\r\\n| p|BMC/Marimba Transmitter| v/$1/\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nContent-type: text/html; charset=UTF-8\\r\\n\\r\\n<html><META HTTP-EQUIV=\\\"Content-Type\\\" CONTENT=\\\"text/html; charset=UTF-8\\\"><body>\\r\\nInternal Server Error</body>\\r\\n</html>\\r\\n| p|BMC/Marimba Management http config| i/Error Condition/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"tuner\\\"\\r\\n| p|BMC/Marimba Management http config|\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Henry/\\d\\.\\d\\r\\n|s p/NEC Electra Elite IPK II WebPro/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: WebZerver/V([\\w._-]+)\\r\\n.*<title>\\nAxonix\\nSuperCD - cdserver\\n  </title>|s p/Axonix SuperCD http config/ i/WebZerver $1/ d/media device/\nmatch http m|^<html>\\n<title>DES-2108 +</title>| p/D-Link DES-2108 switch http config/ d/switch/ cpe:/h:dlink:des-2108/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<title>MD Evol Web</title>|s p/Ericsson MD Evolution PBX http config/ d/PBX/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: NetPort Software ([\\w._-]+)\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>On Board Remote Management</title>| p/NetPort httpd/ v/$1/ i/Dell PowerVault 124T http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\nServer: AV-TECH (AV\\w+) Video Web Server\\n| p|Gadspot/Avtech $1 webcam http config| d/webcam/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Minix httpd ([\\w._-]+)\\r\\n| p/Minix httpd/ v/$1/ o/Minix/ cpe:/a:minix:httpd:$1/ cpe:/o:minix:minix/a\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: micro_httpd\\r\\n.*<title>ADSL Router</title>\\r\\n\\r\\n\\r\\n<script language=\\\"javascript\\\">\\r\\n<!--\\r\\nvar ModemVer='(DSL-[\\w._+-]+)';|s p/D-Link $1 http config/ d/broadband router/ cpe:/a:acme:micro_httpd/ cpe:/h:dlink:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<TITLE>HTML-Konfiguration</TITLE>\\n<SCRIPT language=\\\"JavaScript\\\" src=\\\"/cgi-bin/webcm\\?getpage=\\.\\./html/js_top\\.txt\\\"|s p/T-Com Speedport W 501V http config/ i/German/ d/broadband router/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Mime-Version: 1\\.0\\r\\n.*<TITLE>HTML-Konfiguration</TITLE>\\n<SCRIPT type=\\\"text/javascript\\\" src=\\\"/html/dom\\.js\\\">|s p/T-Com Speedport W 101V http config/ i/German/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Apache\\r\\n.*<TITLE>HTML-Konfiguration</TITLE>.*prodname=\\\"Speedport_W_(\\w+)_Typ_B\\\";|s p/T-Com Speedport W $1 http config/ i/German/ d/broadband router/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Apache\\r\\n.*<title>HTML-Konfiguration</title>.*<style type=\\\"text/css\\\">\\r\\n#startseite|s p/T-Com Speedport W 700 http config/ i/German/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: must-revalidate, no-store\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<style>\\ntable\\.stat th, table\\.stat td {\\n  font-family:\\tVerdana, Geneva, sans-serif;\\n  font-size : 11px;\\n  color: blue;\\n  border: 0px solid;\\n  white-space: nowrap;\\n}\\n| p/Linksys SPA942 VoIP phone http config/ d/VoIP phone/ cpe:/h:linksys:spa942/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: must-revalidate, no-store\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<style>\\ntable\\.menu1 td \\{\\n  font-family:\\tVerdana, Geneva, sans-serif;\\n  font-size : 13px;\\n  border: 0px solid;\\n  color: blue;\\n  white-space: nowrap;\\n\\}\\ntable\\.menu1 td a| p/Linksys SPA2102 VoIP phone http config/ d/VoIP phone/ cpe:/h:linksys:spa2102/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nMIME-Version: 1\\.0\\r\\nServer: OKIDATA-HTTPD/([\\w._-]+)\\r\\n.*<title>([^<]+)</title>|s p/OKIDATA httpd/ v/$1/ i/Oki $2 printer http config/ d/printer/ cpe:/h:oki:$2/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: NetPort Software ([\\w._-]+)\\r\\n.*<title>([^-<\\r\\n]+) - VSX 8000</title>\\n<link rel=\\\"stylesheet\\\" href=\\\"sabrestyle\\.css\\\"|s p/NetPort httpd/ v/$1/ i/Polycom VSX 8000 http config $2/ d/webcam/ cpe:/h:polycom:vsx_8000/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: NetPort Software ([\\w._-]+)\\r\\n.*<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\">\\n    <meta http-equiv=\\\"no-cache\\\">\\n    <link rel=\\\"stylesheet\\\" href=\\\"sabre\\.css\\\"|s p/NetPort httpd/ v/$1/ i/Polycom VSX 8000 http config/ d/webcam/ cpe:/h:polycom:vsx_8000/a\nmatch http m|^HTTP/1\\.0 303 Redirecting\\r\\nServer: httpd/[\\d.]+ Python/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Cache-Control: no-store,no-cache,must-revalidate,max-age=0,post-check=0,pre-check=0\\r\\n.*<title>: Redirecting\\n</title>\\n<meta http-equiv=\\\"Refresh\\\" content=\\\"0; URL=http://([\\w._-]+):\\d+/login\\\"|s p/IronPort Mailflow http config/ i/Python $1/ d/specialized/ h/$2/ cpe:/a:python:python:$1/\nmatch http m|^<html><head><title>Task Manager Server Report</title></head>| p/Dolbey Fusion Focus Task Manager httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: XGATE-Webs\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"NB(\\w+) Wireless Router\\\"\\r\\n| p/NetComm NB$1 WAP http config/ i/XGATE-Webs/ d/WAP/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: XGATE-Webs\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"XG6546p2 Wireless Router\\\"\\r\\n| p/XAVi XG6546p Wireless Gateway/ i/XGATE-Webs/ d/WAP/\nmatch http m%^HTTP/1\\.0 200 Ok\\r\\nServer: micro_httpd\\r\\n.*\\r\\nvar isRouter\\t='1' \\? '1' : '0';\\r\\nvar\\tisPS\\t\\t='' \\? '' : '0';\\r\\nvar isAPmode\\r\\nif\\('[\\w-]*' =='' \\|\\| '1'=='0'\\)\\r\\n\\tisAPmode='1';\\r\\nelse\\tisAPmode='0';\\r\\nvar bssid = '([\\w:]+)';%s p/micro_httpd/ i/Belkin WAP http config; BSSID $1/ d/WAP/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: Close\\r\\nDate: .*\\r\\nServer: Eye-Fi Agent/([\\w._-]+) \\(Windows| p/Eye-Fi Manager httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: micro_httpd\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"U\\.S\\. Robotics ADSL Gateway\\\"\\r\\n| p/micro_httpd/ i/USRobotics ADSL router http config/ d/broadband router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\n.*\\r\\nWWW-Authenticate: Basic realm=\\\"3Com AirProtect Sentry\\\"\\r\\n|s p/3Com AirProtect Sentry http config/ d/security-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WindWeb/([\\w._-]+)\\r\\n.*<SCRIPT LANGUAGE=\\\"JavaScript\\\">\\r\\n<!--\\r\\n  function change_Time\\(\\) {\\r\\n    window\\.location = '\\./cgi/mts_login\\.cgi'\\r\\n|s p/WindWeb/ v/$1/ i/Iwatsu ADIX PBX http config/ d/PBX/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nServer: WindWeb/([\\w._-]+)\\r\\n.*<title>TrueTime - NTS-200 Web Interface -|s p/WindWeb/ v/$1/ i/TrueTime NTS-200 http config/ d/specialized/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nConnection: Keep-Alive\\r\\nServer: \\r\\n.*<!-- this page must have 520 bytes or more, ie is a wonderfull program -->.*<html>\\r\\n<head>\\r\\n<title>302-Found</title>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\">\\r\\n</head>\\r\\n<body>\\r\\n<h1>302-Found</h1>\\r\\n<a href='/login\\.html\\?id=\\d+'>/login\\.html</a>|s p|Siemens Gigaset PBX/TARGA DIP VoIP phone http config|\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nConnection: Close\\r\\nServer: \\r\\n.*<!-- this page must have 520 bytes or more, ie is a wonderfull program -->.*<html>\\r\\n<head>\\r\\n<title>302-Found</title>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\">\\r\\n</head>\\r\\n<body>\\r\\n<h1>302-Found</h1>\\r\\n<a href='/login\\.html\\?id=\\d+'>/login\\.html</a>|s p/Siemens Gigaset A580, DX800A, or S450 VoIP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: SimpleHTTP/([\\d.]+) Python/([\\d.]+)\\r\\n.*<HTML>\\n<TITLE>WifiZoo v([\\w._-]+) - Control Panel</TITLE>|s p/WifiZoo http control panel/ v/$3/ i/SimpleHTTP $1; Python $2/ cpe:/a:python:python:$2/ cpe:/a:python:simplehttpserver:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*\\n\\n\\t\\t<title>PGP Universal - Page Not Found</title>\\n|s p/PGP Universal httpd/ cpe:/a:pgp:universal_server/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: PWS/([\\w._-]+)\\r\\n| p/PWS httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: micro_httpd\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Wireless ADSL2\\+ Router\\\"\\r\\n| p/micro_httpd/ i/Dynalink RTA1025W WAP http config/ d/WAP/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.1 401 \\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"AirMagnet SmartEdge Sensor\\\"\\r\\n| p/GoAhead WebServer/ i/AirMagnet SmartEdge Sensor http config/ d/specialized/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: http\\r\\n(?:[^\\r\\n]+\\r\\n)*?Connection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Login to Vigor 3300\\\"\\r\\n\\r\\n|s p/DrayTek Vigor 3300 router http config/ d/router/ cpe:/h:draytek:vigor_3300/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"/musicpal_ie6\\.css\\\" />\\r\\n<!\\[endif\\]-->\\r\\n<title>Freecom MusicPal</title>|s p/Freedom MusicPal/ d/media device/\nmatch http m|^HTTP/1\\.1 200 Document follows\\r\\nConnection: Close\\r\\nServer: Micro-Web\\r\\n.*<title>Oasis Semiconductor, Inc\\.</title>.*<b>Welcome to a live demo of the TCP/IP network stack running Micro-Web!</b>.*\\r\\nSystem Up Time:  ([^\\r\\n<]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?MAC Address:\\r\\n([\\w:]+)\\r\\n|s p/Oasis Micro-Web/ i/Uptime $1; MAC $2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>VDR Channel Listing</title>| p/VDR Streamdev plugin httpd/ d/media device/\nmatch http m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Agranat-EmWeb/R([\\d_]+)\\r\\n.*<SCRIPT LANGUAGE=JavaScript>\\nvar helpUrl = \\\"\\\";\\n//Ip we are coming from\\nvar ip=document\\.domain;\\n\\n|s p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Avaya G350 Media Gateway http config/ d/media device/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\w._-]+)\\r\\nMIME-version: [\\d.]+\\r\\n.*md5\\(document\\.logonForm\\.username\\.value \\+ \\\":\\\" \\+ document\\.logonForm\\.password\\.value \\+ \\\":\\\" \\+ \\\"\\w+\\\"\\);  // sets the hidden field value to whatever md5 returns\\.\\r\\n|s p/RapidLogic httpd/ v/$1/ i/Thomson ST2030 VoIP phone http config/ d/VoIP phone/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:thomson:st2030/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: BCReport/([\\w._-]+)\\r\\n| p/Blue Coat Reporter httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Blue Coat Reporter\\r\\n.*<title>Blue Coat Reporter ([\\d.]+)</title>|s p/Blue Coat Reporter httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Authentication Required\\r\\nConnection: close\\r\\n\\r\\n$| p/Blue Coat Reporter httpd/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nX-Powered-By: ASP\\.NET\\r\\n| p/Microsoft IIS httpd/ o/Windows/ cpe:/a:microsoft:internet_information_services/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WYM/([\\w._-]+)\\r\\n.*<META NAME=\\\"Author\\\" CONTENT=\\\"ChenXiaohui\\\">\\r\\n<meta http-equiv='Relfresh' content='5' />|s p/WYM httpd/ v/$1/ i/Gadspot NC1000-L10 webcam http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WYM/([\\w._-]+)\\r\\n.*<TITLE>Video Server \\(V([\\w._-]+)\\)</TITLE>\\n<META NAME=\\\"Author\\\" CONTENT=\\\"ChenXiaohui\\\">\\n<!-- Get Server or DVR-->|s p/WYM httpd/ v/$1/ i/Gadspot Video Server $2 http config/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>TallyGenicom Intelliprint (\\w+)</TITLE>\\r\\n| p/TallyGenicom Intelliprint $1 http config/ d/printer/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n<META HTTP-EQUIV=\\\"Content-Style-Type\\\" content=\\\"text/css\\\">\\r\\n<TITLE>[^\\r\\n<]+ WJ-HD220 [^\\r\\n<]+</TITLE>|s p/Panasonic WJ-HD220 http config/ d/media device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<title>([\\w-]+) Network Camera</title>|s p/Panasonic $1 webcam http config/ d/webcam/ cpe:/h:panasonic:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<TITLE>Network Camera</TITLE>.*<META HTTP-EQUIV=\\\"Refresh\\\" CONTENT=\\\"1;URL=CgiStart\\\">|s p/Panasonic BB-HCM331 Network Camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.1 302 Object Moved\\r\\nServer: NS_([\\w._-]+)\\r\\nLocation: http://([\\w._-]+)/wts\\r\\n| p/NS httpd/ v/$1/ i/Windows Terminal Server/ o/Windows/ h/$2/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\w._-]+)\\r\\n.*<TITLE>ProLine</TITLE>.*setTimeout\\( \\\"window\\.location\\.href = 'homeSumBS\\.htm'\\\", 100 \\) ;   // 0\\.1 second delay\\r\\n</script>|s p/RapidLogic httpd/ v/$1/ i/ProLine ADSL router http config/ d/broadband router/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found\\.</BODY></HTML>\\0$| p/Panasonic DP-1820E printer http config/ d/printer/ cpe:/h:panasonic:dp-1820e/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Contiki/([\\w._-]+) http://www\\.sics\\.se/(?:~adam/)?contiki/\\r\\n| p/Contiki httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: GoAhead-Webs\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Wireless Router \\(username: admin\\)\\\"\\r\\n.*<body background=/menu-images/config_bg\\.gif>|s p/GoAhead WebServer/ i/ZyXEL P-330W WAP http config/ d/WAP/ cpe:/a:goahead:goahead_webserver/ cpe:/h:zyxel:p-330w/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n.*<title>Canopy Home Page</title>\\r\\n.*<frame name=\\\"leftFrame\\\" noresize src=\\\"smleft\\.html\\\">\\r\\n|s p/Motorola Canopy WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: micro_httpd\\r\\n.*cfeVersion = '1\\.0\\.37-0\\.7';\\nif \\(cfeVersion\\.charAt\\(9\\) == '7'\\)\\n   document\\.writeln\\(\\\"<title>Tecom AH4222</title>\\\"\\);\\nelse\\n   document\\.writeln\\(\\\"<title>Tecom AH4021</title>|s p/micro_httpd/ i/Tecom AH4222 router http config/ d/broadband router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: micro_httpd\\r\\n.*cfeVersion = '1\\.0\\.37-0\\..';\\nif \\(cfeVersion\\.charAt\\(9\\) == '7'\\)\\n   document\\.writeln\\(\\\"<title>Tecom AH4222</title>\\\"\\);\\nelse\\n   document\\.writeln\\(\\\"<title>Tecom AH4021</title>|s p/micro_httpd/ i/Tecom AH4021 router http config/ d/broadband router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Please enter your user name and password on C54APRA\\\"\\r\\n|s p/Conceptronic C54APRA WAP http config/ d/WAP/ cpe:/h:conceptronic:c54apra/a\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nSet-Cookie: SessId=.*HREF=\\\"/theme/main\\.css\\\".*TD\\.calMonth SPAN\\n|s p/Floosietek FTgate webmail httpd/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: FTGate ([\\w._-]+)\\r\\nDate: \\d\\d\\d\\d/\\d\\d/\\d\\d \\d\\d:\\d\\d:\\d\\d  GMT\\r\\n| p/Floosietek FTgate webmail httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html;\\r\\n.*<TITLE>Aastra ([\\w._+-]+)</TITLE>|s p/Aastra $1 VoIP phone http config/ d/VoIP phone/ cpe:/h:aastra:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<img src=\\\"images/chumby_logo\\.png\\\">.*<font size=10>Welcome to Chumby</font>|s p/Chumby chumbhttpd/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\n.*<resolved count='\\d+' ommitted='\\d+' chumbhowld_ver='([\\w._-]+)'>|s p/Chumby chumbhowld/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r \\nContent-type: text/xml\\r\\n.*<resolved count='\\d+' ommitted='\\d+' chumbhowld_ver='([\\w._-]+)'>\\n</resolved>\\r\\n|s p/Chumby One chumbhowld/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r \\nContent-type: text/xml\\r\\n.*<resolved count='\\d+' ommitted='\\d+' chumbhowld_ver='([\\w._-]+)'>\\n<resolve interface='\\d+' name='([\\w._-]+)' type='_http\\._tcp\\.'|s p/Chumby One chumbhowld/ v/$1/ d/media device/ h/$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n<html>\\r\\n.*if \\(window != top\\) {\\r\\n\\t\\t\\t\\t\\t\\t// Load page in the top frame\\.\\r\\n\\t|s p/Dell OpenManage httpd/ d/remote management/ cpe:/a:dell:openmanage/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys BEFSR41v3\\\"\\r\\n| p/Linksys BEFSR41v3 http config/ d/broadband router/ cpe:/h:linksys:befsr41v3/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>ZyWALL ([\\w._+-]+)</title>|s p/ZyXEL ZyWALL $1 http config/ d/security-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: [^\\r\\n]+\\r\\n(?:Server:  \\r\\n)?Cache-Control: no-cache, private\\r\\nPragma: no-cache\\r\\nExpires: Mon, 16 Apr 1973 13:10:00 GMT\\r\\n.*<title>ZyWALL ([ \\w._+-]+)</title>|s p/ZyXEL ZyWALL $1 http config/ d/security-misc/ cpe:/h:zyxel:zywall_$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: [^\\r\\n]+\\r\\n(?:Server:  \\r\\n)?Cache-Control: no-cache, private\\r\\nPragma: no-cache\\r\\nExpires: Mon, 16 Apr 1973 13:10:00 GMT\\r\\n.*<title>(U[\\w._+-]+)</title>|s p/ZyXEL ZyWALL $1 http config/ d/security-misc/ cpe:/h:zyxel:zywall_$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: [^\\r\\n]+\\r\\n(?:Server:  \\r\\n)?Cache-Control: no-cache, private\\r\\nPragma: no-cache\\r\\nExpires: Mon, 16 Apr 1973 13:10:00 GMT\\r\\n|s p/ZyXEL ZyWALL http config/ d/security-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-length: \\d+\\r\\nExpires: -1\\r\\nContent-type: application/sxp\\r\\nPragma: no-cache\\r\\nCache-control: no-cache\\r\\n\\r\\n\\(ls \\)| p/Xen http config/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\\\"NB5580\\\"\\r\\n| p/Netcomm NB5580 http config/ d/broadband router/ cpe:/h:netcomm:nb5580/a\nmatch http m|^HTTP/1\\.0 302 Found\\nServer: Alpha_webserv\\nDate: .*\\r\\nContent-Type: text/html\\nAccept-Ranges: bytes\\nLocation: /public/login\\.htm\\nX-Pad: avoid browser bug\\n\\n| p/D-Link DIR-100 http config/ d/broadband router/ cpe:/h:dlink:dir-100/a\nmatch http m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\w._-]+)\\r\\n.*<font color=\\\"#FFFFFF\\\" size=\\\"4\\\">Cisco Systems, Inc\\. IP Phone (CP-\\w+) \\( (\\w+) \\)|s p/Allegro RomPager/ v/$1/ i/Cisco $2 VoIP phone http config; serial $3/ d/VoIP phone/ cpe:/a:allegro:rompager:$1/ cpe:/h:cisco:$2/a\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\w._-]+)\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>NetBotz Network Monitoring Appliance -  </TITLE>|s p/Allegro RomPager/ v/$1/ i/NetBotz network monitor http config/ d/security-misc/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http://Device/config/log_off_page\\.htm\\r\\n|s p/GoAhead WebServer/ i/LinkSys SLM2024 or SRW2008 - SRW2016 switch http config/ d/switch/ cpe:/a:goahead:goahead_webserver/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: WebtoB/([\\w._-]+)\\r\\n| p/TmaxSoft WebtoB httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 .*<head><meta http-equiv=\\\"refresh\\\" content=\\\"0; URL=cgi-bin/webif/info\\.awx\\\" /><title>Webif&sup2; Administration Console</title>|s p/X-WRT Webif WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<TITLE>\\r\\nWorkCentre (\\d+) - [\\d.]+\\r\\n</TITLE>|s p/Fuji-Xerox WorkCentre $1 printer http config/ d/printer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<title>VoIP ATA400 \\(4FXS\\) Web Configuration Pages</title>|s p/4FXS ATA400 VoIP adapter http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys (WAG\\w+)\\n\\\"\\r\\n| p/Linksys $1 WAP http config/ d/WAP/ cpe:/h:linksys:$1/a\nmatch http m|^HTTP/1\\.[01] 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: iPhone lighttpd\\r\\n|s p/iPhone lighttpd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\w._-]+)\\r\\n.*<A HREF=\\\"/nic/printerstat\\\"><IMG SRC=\\\"/nic/Images/but3\\.jpg\\\"|s p/Allegro RomPager/ v/$1/ i/Kyocera 7035 printer http config/ d/printer/ cpe:/a:allegro:rompager:$1/ cpe:/h:kyocera:7035/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nSet-Cookie: ALEX_.*\\r\\nServer: Alexandrie\\d+ \\(by GBConcept\\)\\r\\n|s p/GBConcept Alexandrie httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: XmskSvr\\r\\nContent-Type: text/plain\\r\\nContent-Length: \\d+\\r\\n\\r\\nX-MSK http Server ([\\w._-]+) | p/Xensoft X-MSK httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\w._-]+)\\r\\n.*<TITLE>RICOH FAX (\\w+) / RICOH Network Printer|s p/Allegro RomPager/ v/$1/ i/Richoh $2 printer http config/ d/printer/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.[01] 401 Unauthorized.*\\r\\nWWW-Authenticate: Basic [rR]ealm=\\\"DSL-(\\w+)\\\"|s p/D-Link $1 DSL router http config/ d/broadband router/ cpe:/h:dlink:$1/a\nmatch http m|^HTTP/1\\.1 200 .*<title>Apt-cacher version ([\\w._-]+): Daemon mode</title>|s p/Apt-cacher httpd/ v/$1/ cpe:/a:debian:apt-cacher:$1/\nmatch http m|^HTTP/1\\.1 404 .*<title>Not Found, APT Reconfiguration required</title>|s p/Apt-cacher-ng httpd/ i/misconfigured/ cpe:/a:debian:apt-cacher/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: inets/develop\\r\\n.*{\\\"couchdb\\\": \\\"Welcome\\\", \\\"version\\\": \\\"([\\w._-]+)\\\"}\\n|s p/CouchDB REST httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: MochiWeb/1\\.0 \\(.*?\\)\\r\\nDate: .*\\r\\nContent-Type: text/plain;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nCache-Control: must-revalidate\\r\\n\\r\\n{\\\"couchdb\\\":\\\"Welcome\\\",\\\"version\\\":\\\"([^\"]+)\\\",\\\"couchbase\\\":\\\"([^\"]+)\\\"}\\n| p/CouchDB REST httpd/ v/$1/ i/couchbase $2/ cpe:/a:mochiweb_project:mochiweb/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: micro_httpd\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"DSL Router\\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H4>401 Unauthorized</H4>\\nAuthorization required\\.\\n| p/micro_httpd/ d/broadband router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 200(?:[^\\r\\n]+\\r\\n)*?\\r\\n\\r\\n<HTML><HEAD><TITLE>Lankacom RouterOS Managing Webpage</TITLE>|s p/Lankacom router http config/ d/router/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Comanche/([\\w._-]+) \\(unix\\) \\r\\n|s p/Comanche smalltalk httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\n\\r\\n.*<br>Ability FTP Server ([\\w._-]+) by Code-Crafters<br>|s p/Code-Crafters Ability FTP Server http interface/ v/$1/ o/Windows/ cpe:/a:code-crafters:ability_ftp_server:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: WYM/([\\w._-]+)\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Welcome to IPCam !\\\"\\r\\n| p/WYM httpd/ v/$1/ i/Grandtec wifi webcam http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 404 Error 404 : Domain Not Found.*\\r\\nServer: MMM BosServer/([\\w._-]+)\\r\\n|s p/MMM BosServer httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 CREATED\\r\\nDate: .*\\r\\nExpires: .*\\r\\nServer: WhatsUp_Gold/([\\w._-]+)\\r\\n| p/WhatsUp Gold httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: SNARE/([\\w._-]+)\\r\\nMIME-version: [\\d.]+\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><head><title>InterSect Alliance - Information Technology Security</title>| p/InterSect Alliance SNARE httpd/ v/$1/ cpe:/a:intersectalliance:system_intrusion_analysis_and_reporting_environment:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: SimpleHTTP/([\\w._-]+) Python/([\\w._-]+)\\r\\n.*<title>NPAD Diagnostics|s p/NPAD Diagnostics httpd/ i/SimpleHTTP $1; Python $2/ cpe:/a:python:python:$2/ cpe:/a:python:simplehttpserver:$1/\nmatch http m|^HTTP/1\\.1 401 Unathorized\\r\\nWWW-Authenticate: BASIC realm=\\\"PY Software Active WebCam\\\"\\r\\n| p/PY Software Active webcam httpd/ d/webcam/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Linksys WAG200G \\\"\\r\\n| p/Linksys WAG200G http config/ d/WAP/ cpe:/h:linksys:wag200g/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"Thomson_cwmp_([\\w._-]+)\\\", nonce=| p/Thomson TR-069 remote access/ v/$1/ d/broadband router/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Thomson\\\"\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\n\\r\\n<html><head><title>HTTP 401 - Unauthorized</title></head><body><h4>HTTP 401 - Unauthorized</h4><p>Authorization is required to access the configuration server\\.<p>You must enter the correct username and/or password\\.</body></html>\\r\\n$| p/Thomson TWG850 router http config/ d/router/ cpe:/h:thomson:twg850/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: sks_www/([\\w._-]+)\\r\\n| p/SKS OpenPGP Key Server httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nCOMMERCE-SERVER-SOFTWARE: Microsoft Commerce Server 2002, Enterprise Edition\\r\\n| p/Microsoft Commerce Server 2002 httpd/ o/Windows/ cpe:/a:microsoft:commerce_server:2002/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n<title>EpsonNet WebManager</title>|s p/EpsonNet WebManager httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nServer: SilverStream Server/([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Novell exteNd Application Server\\\"\\r\\n| p/SilverStream httpd/ v/$1/ i/Novell exteNd Application Server/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<title>EvoCam</title>\\n</head>\\n\\n<body bgcolor=\\\"e3e3e3\\\">\\n<center>\\n<applet archive=\\\"evocam\\.jar\\\" code=\\\"com\\.evological\\.evocam\\.class\\\"|s p/Evological Evocam http config/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.0 200\\r\\n.*<font size=\\\"1\\\" face=\\\"Verdana\\\" color=\\\"#FF3300\\\">UDS10/100/IAP\\r\\nVersion ([\\w._-]+)&nbsp;|s p/Lantronix UDS10 ethernet-serial http config/ v/$1/ d/specialized/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: TriActive MicroAgent \\(([\\w._-]+)\\)\\r\\n| p/TriActive MicroAgent httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: /login\\.app\\r\\nContent-Lenght: 0\\r\\n\\r\\n$| p/NetXMS httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONTENT-LANGUAGE:\\r\\nCONTENT-LENGTH: 0\\r\\nCONTENT-TPYE: text/xml\\r\\nDATE: .*\\n\\r\\n\\r\\n\\(null\\)| p/Syabas Popcorn Hour media player http config/ d/media device/ cpe:/h:syabas:popcorn_hour/\nmatch http m|^HTTP/1\\.0 404 Not Found\\nContent-Type: text/html\\n\\n<HTML><BODY>\\n<TITLE>404 Not Found</TITLE><H1>Requested file not exist! \\(404 Not Found\\)</H1>\\n<BR>\\n</BODY></HTML>\\n$| p/Syabas Popcorn Hour media player BitTorrent interface/ d/media device/ cpe:/h:syabas:popcorn_hour/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nServer: RadiaMessagingService/([\\w._-]+)\\r\\n| p/HP SIM NVDKIT.exe http config/ i/RadiaMessagingService $1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\n.*<hr noshade size=\\\"3\\\" width=\\\"100%\\\">\\n<p class=\\\"alert\\\">\\nYou need to supply a valid user name and password\\.\\n|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Allied Data CopperJet http config/ d/broadband router/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nDate: .*\\r\\nServer: SMSSMTPHTTP\\r\\n| p/Symantec smtp mail security http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MediabolicMWEB/([\\w._-]+)\\r\\n|s p/Mediabolic http config/ v/$1/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MediabolicMWEB/\\r\\nConnection: close\\r\\n\\r\\n<h1>Error</h1>Page not found!\\r\\n$|s p/Mediabolic http config/ i/Thecus N5200 NAS/ d/storage-misc/ cpe:/h:thecus:n5200/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Ubicom/([\\w._-]+)\\r\\n.*<title>SMC StreamEngine Router : Login</title>|s p/Ubicom httpd/ v/$1/ i/SMC StreamEngine router http config/ d/router/ cpe:/a:ubicom:httpd:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: d-Box network\\r\\n\\r\\n| p/Dreambox streaming audio httpd/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nServer: jtvchat\\r\\n\\r\\n<html>\\n<head><title>Justin\\.tv chat servers</title>| p/justin.tv chat server httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*\\r\\n<TITLE>bric_web_gui</TITLE>\\r\\n</HEAD>\\r\\n<BODY bgcolor=\\\"#555577\\\">\\r\\n<!-- URL's used in the movie-->\\r\\n<!-- text used in the movie-->|s p/Comrex Access BRIC http config/ d/telecom-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\w._-]+)\\r\\n.*<!-- saved from url=\\(\\d+\\)http://internet\\.e-mail -->.* \\r\\n<link href=\\\"miniAP\\.css\\\"|s p/RapidLogic httpd/ v/$1/ i/3Com 7760 WAP http config/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:3com:7760/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: I\\.T\\. Watchdogs, Inc\\. Embedded Web Server \\(v([\\w._-]+)\\)\\r\\n| p/I.T. Watchdogs Embedded httpd/ v/$1/ d/specialized/\nmatch http m|^HTTP/1\\.0 200 (?:OK)?\\r\\nServer: A-B WWW/([\\w._-]+)\\r\\n.*<title>1763-|s p/Allen-Bradley 1763 MicroLogix 1100 logic controller http config/ i/A-B WWW $1/ d/specialized/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma:no-cache\\r\\n.*<title>IBM NPS 540\\+/542\\+; IP address:|s p|IBM NPS 540+/542+ print server http config| d/print server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: UltiDev Cassini/([\\w._-]+)\\r\\n| p/UltiDev Cassini httpd/ v/$1/ o/Windows/ cpe:/a:ultidev:cassini:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Swiftbase Ltd\\. Embedded Web Server \\(v([\\w._-]+)\\)\\r\\n.*<TITLE>Swift-CM2</TITLE>|s p/Swiftbase Ltd. Climate Monitor http config/ v/$1/ d/specialized/\nmatch http m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\w._-]+)\\r\\n.*<title>\\nLexmark C500</title>|s p/Allegro RomPager/ v/$1/ i/Lexmark C500 printer http config/ d/printer/ cpe:/a:allegro:rompager:$1/ cpe:/h:lexmark:c500/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: micro_httpd\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Siemens ADSL SL2-141\\\"\\r\\n|s p/micro_httpd/ i/Siemens SL2-141 ADSL router http config/ d/broadband router/ cpe:/a:acme:micro_httpd/ cpe:/h:siemens:sl2-141/a\nmatch http m|^HTTP/1\\.0 401 Not Authorized\\r\\nServer: RapidLogic/([\\w._-]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Modem Secure\\\"\\r\\n| p/RapidLogic httpd/ v/$1/ i/Westell Wirespeed DSL modem http config/ d/broadband router/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: NT40\\r\\n.*<title>NT([\\w._-]+) - Multiprotocol chat tool</title></head><body><BR><BR><center><b>NT4\\.0 Network</b><br><br>Server: (\\S+) - \\(([\\w._-]+)\\)<br>Local users connected: (\\d+) // Connected to \\d+ servers</center><br>Service uptime: ([\\d:]+)<br>|s p/NT4.0 Multiprotocol Chat httpd/ v/$1/ i/Name $2; Users $4; Uptime $5/ h/$3/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: http server\\r\\nDate: .*\\r\\nCache-Control: no-cache,no-store\\r\\nWWW-Authenticate: Basic realm=\\\"Citadel\\\"\\r\\n| p/Atera Networks Citadel firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: IST OIS\\r\\n.*<title>Phone&nbsp;Station&nbsp;Information</title>|s p/AllWorx 9212 VoIP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Agranat-EmWeb/R([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"GbE2c Ethernet Blade Switch for HP c-Class BladeSystem\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP GbE2c Ethernet Blade Switch http config/ d/switch/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Agranat-EmWeb/R([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"(GbE2c) L2/L3 Ethernet Blade Switch(?: \\(TACACS server enabled\\))?\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP $2 Ethernet Blade Switch http config/ d/switch/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 200 Okay\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: PLT Scheme\\r\\n|s p/PLT Scheme httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Swazoo ([\\w._-]+) Smalltalk Web Server\\r\\n| p/Swazoo Smalltalk httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 OK\\r\\nContent-Length: 0\\r\\nConnection: Keep-Alive\\r\\nWWW-Authenticate: Basic realm=\\\"/\\\"\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nEXT: UCoS, UPnP/1\\.0, UDI/1\\.0\\r\\n| p/Universal Devices Insteon home automation http config/ d/specialized/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: AUTHKEY=\\r\\n.*<TITLE>Welcome to Mailtraq WebMail</TITLE>|s p/Mailtraq WebMail httpd/ o/Windows/ cpe:/a:mailtraq:mailtraq/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: TopLayer/([\\w._-]+)\\r\\n.*ALT=\\\"Welcome to the AppSwitch\\\"|s p|Top Layer Networks AppSafe/AppSwitch IDS http config| v/$1/\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mbedthis-AppWeb/([\\w._-]+)\\r\\n.*<title>BT Home Hub manager - Home</title>|s p/Mbedthis-Appweb/ v/$1/ i/BT Home Hub http config/ d/broadband router/ cpe:/a:mbedthis:appweb:$1/\nmatch http m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MoxaHttp/([\\w._-]+)\\r\\n.*<TITLE>NPort Web Console</TITLE>|s p/MoxaHttp/ v/$1/ i/Moxa NPort serial to IP http config/ d/specialized/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MoxaHttp/([\\w._-]+)\\r\\n|s p/MoxaHttp/ v/$1/ d/specialized/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: Wed, 19 Feb 2003 09:00:00 GMT\\r\\nServer: Http/1\\.0\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-type: text/html\\r\\nContent-length: 22016\\r\\nSet-Cookie: ChallID=\\d+\\r\\n\\r\\n| p/MoxaHttp/ d/specialized/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-store\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<style>a{text-decoration:none}</style>\\n<body vlink=black bgcolor=\\\"#99ccff\\\">\\n<center>\\n<h1>Invalid Access</h1>\\n</center>\\n</p></body>\\n</html>\\n\\n\\n| p/Cisco ATA186 VoIP adapter http config/ d/VoIP adapter/ cpe:/h:cisco:ata186/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: http server ([\\w._-]+)\\r\\nContent-type: text/html; charset=\\(null\\)\\r\\n.*<script>location\\.href=\\\"http://\\\"\\+location\\.hostname\\+\\\":\\\"\\+8080\\+\\\"/\\\";</script></head></html>\\n$|s p/QNAP TS-109 NAS http config/ v/$1/ d/storage-misc/ cpe:/h:qnap:ts-109/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: http server ([\\w._-]+)\\r\\n.*<title>NAS</title>\\n<script language=\\\"JavaScript\\\">\\n\\nfunction setCookie\\(name, value, expires\\)\\n|s p/QNAP TS-109-II NAS http config/ v/$1/ d/storage-misc/ cpe:/h:qnap:ts-109-ii/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: http server ([\\w._-]+)\\r\\n.*<script>\\npr=\\(document\\.location\\.protocol == 'https:'\\) \\? 'https' : 'http';\\npt=\\(location\\.port == ''\\) \\? '' : ':' \\+ location\\.port;\\nredirect_suffix = \\\"/redirect\\.html\\?count=\\\"\\+Math\\.random\\(\\);|s p/QNAP TS-219, TS-239, or TS-509 NAS http config/ v/$1/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: http server ([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-length: 553\\r\\n.*{\\nlocation\\.href=pr\\+\\\"://\\\"\\+location\\.hostname\\+pt\\+redirect_suffix;\\n}\\nelse\\t//could be ipv6 addr\\n|s p/QNAP HS-210 or TS-219P NAS http config/ v/$1/ d/storage-misc/ cpe:/h:qnap:ts-219p/\n# TS-659 or TS-859U-RP+\n# QNAP NAS TS-809U, QNAP HS-210\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: http server ([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-length: 291\\r\\n.*if\\(location\\.hostname\\.indexOf\\(':'\\) == -1\\){location\\.href='http://'\\+location\\.hostname\\+':'\\+8080\\+'/';\\n}|s p/QNAP HS-210, TS-659, TS-809U, or TS-859U NAS http config/ v/$1/ d/storage-misc/ o/Linux/ cpe:/o:linux:linux_kernel:2.6/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: http server 1\\.0\\r\\n| p/QNAP NAS http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nServer: http server ([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://\\r\\n<HTML><HEAD><TITLE>302 Found</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H2>302 Found</H2>\\nThe actual URL is '/'\\.\\n$|s p/QNAP TS-419P+ NAS http config/ v/$1/ d/storage-misc/ cpe:/h:qnap:ts-419p%2b/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nServer: http server ([\\w._-]+)\\r\\nContent-type: text/html\\r\\n.*<script type=\\\"text/javascript\\\" src=\\\"/ajax_obj/extjs/adapter/ext/ext-base\\.js\\\"></script>\\n<script> IEI_NAS_BUTTON_BACK=\\\"Back\\\";</script>|s p/QNAP Turbo or TS-459 Pro+ NAS http config/ v/$1/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 404 no application for: /\\r\\nServer: HttpServer\\r\\n\\r\\n$| p/Galleon TiVo Application Port http config/ d/media device/\nmatch http m|^HTTP/1\\.0 404 File not found\\r\\nServer: HttpServer\\r\\n\\r\\n$| p/Galleon TiVo Publishing Port http config/ d/media device/\nmatch http m|^HTTP/1\\.1 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http://\\(null\\)/config/log_off_page\\.htm\\r\\n\\r\\n| p/GoAhead WebServer/ i/Dell PowerConnect Gigabit switch http config/ d/switch/ cpe:/a:goahead:goahead_webserver/a\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nLocation: /main/main\\.html\\r\\nServer: debut/([\\w._-]+)\\r\\n\\r\\n| p/debut httpd/ v/$1/ i/Brother MFC-8860DN printer http config/ d/printer/ cpe:/h:brother:mfc-8860dn/a\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nDate: .*\\r\\nServer: Avocent DSView ([\\w._/-]+)\\r\\nLocation: https://([\\w._-]+)/dsview/\\r\\nConnection: close\\r\\n\\r\\n| p/Avocent DSView remote management httpd/ v/$1/ h/$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: RAID HTTPServer/([\\w._-]+)\\r\\n| p/Sun StorEdge 3511 http config/ v/$1/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\n.*<title>Samsung Printer Status</title>.*var contentURI = \\\"/general/printerDetails\\.htm\\\"|s p/Samsung printer http config/ d/printer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nServer: Ubicom/([\\w._-]+)\\r\\n.*<title>NETGEAR WNHDE111 |s p/Ubicom httpd/ v/$1/ i/Netgear WNHDE111 WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/ cpe:/h:netgear:wnhde111/a\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Server\\r\\n.*<title>[nN]euf ?box -&nbsp;Accueil</title>|s p/SFR Neuf Box DSL modem http config/ d/broadband router/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Axigen-Webmail\\r\\n|s p/Axigen webmail httpd/ cpe:/a:gecad:axigen_mail_server/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Axigen-Webadmin\\r\\n|s p/Axigen webadmin httpd/ cpe:/a:gecad:axigen_mail_server/\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\w._-]+)\\r\\n\\r\\n<HTML><HEAD>\\n<META NAME=\\\"GENERATOR\\\" CONTENT=\\\"Microsoft FrontPage 3\\.0\\\">\\n<TITLE></TITLE>.*<frame NAME=\\\"fInfo\\\" scrolling=\\\"no\\\" noresize src=\\\"/html/Hlogin\\.html\\\"|s p/Allegro RomPager/ v/$1/ i/Amer.com SSR22i switch http config/ d/switch/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nDate: .*\\r\\nServer: eSoft\\r\\nX-Powered-By: PHP/([\\w._-]+)\\r\\nLocation: https://ThreatWall/\\r\\n| p/eSoft ThreatWall IPS http config/ i/PHP $1/ d/security-misc/ cpe:/a:php:php:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: NetPort Software ([\\w._-]+)\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<title>(.*) - VSX 7000A</title>| p/NetPort httpd/ v/$1/ i/Polycom VSX 7000A http config; name $2/ d/webcam/ cpe:/h:polycom:vsx_7000a/a\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nServer: Virata-EmWeb/R([\\w._-]+)\\r\\nLocation: https://[\\w._-]+/\\+webvpn\\+/index\\.html\\r\\n| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Cisco WebVPN http config/ d/security-misc/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: dtHTTPd/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\"><HTML><HEAD><TITLE>(UX-\\w+)</TITLE>| p/dtHTTPd/ v/$1/ i/Sharp Broadband $2 Fax http config/ d/printer/ cpe:/h:sharp:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: dtHTTPd/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\"><HTML><HEAD><TITLE>(FO-\\w+)</TITLE>| p/dtHTTPd/ v/$1/ i/Sharp $2 printer http config/ d/printer/ cpe:/h:sharp:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Conexant-EmWeb/R([\\w._-]+) SIPGT/([\\w._-]+)\\r\\n.*<title>Login page</title>.*<img src=\\\"images/ixlogga\\.gif\\\"|s p/Conexant-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Intertex IX68 WAP http config; SIPGT $2/ d/WAP/ cpe:/a:conexant:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:intertex:ix68/a\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<title>NOTE: The requested URL could not be retrieved</title>.*background-image: url\\(/html/de/images/bg_ramp\\.jpg\\);\\r\\n|s p/AVM FRITZ!Box WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<title>Note: The requested URL could not be retrieved\\.</title>.*background-image: url\\(\\.\\./\\.\\./de/images/bg_ramp\\.jpg\\);\\n|s p/AVM FRITZ!Box WLAN 7270 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html.*\\r\\nPragma: no-cache\\r\\nServer: Webserver\\r\\nWWW-Authenticate: Basic realm=\\\"HTTPS Access\\\"\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized \\(ERR_ACCESS_DENIED\\)</TITLE></HEAD><BODY><H1>401 Unauthorized</H1><BR>ERR_ACCESS_DENIED<HR><B>Webserver</B>| p/AVM FRITZ!Box WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: lighttpd[/ ]([\\d.]+) \\(([^)]+)\\)\\r\\n|si p/lighttpd/ v/$1/ i/$2/ cpe:/a:lighttpd:lighttpd:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: lighttpd[/ ]([\\d.]+)\\r\\n|si p/lighttpd/ v/$1/ cpe:/a:lighttpd:lighttpd:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: lighttpd|si p/lighttpd/ cpe:/a:lighttpd:lighttpd/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: micro_httpd\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"U\\.S\\. Robotics ADSL Router\\\"\\r\\n| p/micro_httpd/ i/USRobotics USR9107A ADSL http config/ d/broadband router/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: httpd\\r\\nDate: .*<SCRIPT language=Javascript src=\\\"language_us\\.js\\\"></SCRIPT>\\n<SCRIPT>assign_var\\(\\);</SCRIPT>\\n<SCRIPT language=JavaScript src=\\\"showMenu\\.js\\\"></SCRIPT>\\n<SCRIPT>\\n\\tvar helpItem \\t='indexa';|s p/Belkin N1 F5D8231-4 WAP http config/ d/WAP/ cpe:/h:belkin:n1_f5d8231-4/a\nmatch http m|^<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/1999/REC-html401-19991224/loose\\.dtd\\\">\\n<HTML>\\n<HEAD>\\n<TITLE>Mac OS X Personal Web Sharing</TITLE>.*<H1>Your website here\\.</H1>|s p/REALbasic 2008 example httpd/\nmatch http m|^HTTP/1\\.1 200\\r\\n.*<TITLE>ProjectorView Control System</TITLE>.*CODE=com\\.mitsubishi\\.x500u\\.X500UApplet\\.class\\r\\n|s p/Mitsubishi Projector XD1000 http config/ d/media device/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: micro_httpd\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Wireless Router\\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H4>401 Unauthorized</H4>\\nAuthorization required\\.\\n| p/Asus wl-600g WAP http config/ d/WAP/ cpe:/a:acme:micro_httpd/ cpe:/h:asus:wl-600g/a\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nLocation: /TopAccess/default\\.htm\\r\\nServer: TOSHIBA TEC CORPORATION\\r\\n| p/Toshiba Tec printer http config/ d/printer/\nmatch http m|^HTTP/1\\.0 303 See Other\\r\\nLocation: http://[\\w._-]+:8080\\r\\n\\0 .*\\rContent-Length: 0\\r\\n\\r\\n| p|Toshiba e-STUDIO 233 copier/printer/fax http config| d/printer/\nmatch http m|^HTTP/1\\.1 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http://[\\w._-]+/index\\.asp\\r\\n\\r\\n<html><head></head><body>\\r\\n\\t\\tThis document has moved to a new| p/GoAhead WebServer/ i/Dell PowerConnect 3024 switch http config/ d/switch/ cpe:/a:goahead:goahead_webserver/ cpe:/h:dell:powerconnect_3024/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nConnection: Close\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http://\\xee{64}/index\\.html\\r\\n\\r\\n<html><head></head><body>\\r\\n\\t\\tThis document has moved to a new| p/GoAhead WebServer/ i/Allen-Bradley ControlLogix 1769-L35E automation controller http config/ d/specialized/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.1 200 OK\\n\\n<html>\\n<head>\\n<title>Touchstone Status</title>| p/Arris Touchstone cable modem http config/ d/broadband router/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: micro_httpd\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"ROTAL Wireless ADSL2\\+ Router\\\"\\r\\n| p/micro_httpd/ i|ROTAL/Dynalink WAP http config| d/WAP/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Oversee Webserver v([\\w._-]+)\\r\\n| p/Oversee httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: GlobalSCAPE-Secure Server/([\\w._-]+)\\r\\n| p/GlobalSCAPE Secure Server httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: GlobalSCAPE-EFTServer/([\\w._-]+)\\r\\n| p/GlobalSCAPE EFT Server httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .* GMT\\r\\nWWW-Authenticate: Basic realm=\\\"\\\"\\r\\nContent-Length: .*\\r\\nCache-control: private\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nX-Content-Type-Options: nosniff\\r\\nX-XSS-Protection: 1; mode=block\\r\\n\\r\\n| p/GlobalSCAPE EFT Server httpd/\nmatch http m|^<html>\\n\\n<head>\\n<title>HTML-Konfiguration</title>\\n\\n<SCRIPT language=\\\"JavaScript\\\">\\n<!--\\n\\n\\nfunction rahmen\\(but,high\\)| p|Targa WR500/Speedport WV500V WAP http config| i/Bitswitcher firmware/ d/WAP/\nmatch http m|^\\[ menu  \\]   - Control packet filtering\\r\\n5 - Logs            \\[ menu  \\]   - Alarm and log control\\r\\n6HTTP/1\\.0 200 OK\\r\\n.*<font color=\\\"#ffffff\\\">Aironet BR500E V([\\w._-]+)</td>|s p/Cisco Aironet BR500E WAP http config/ v/$1/ d/WAP/ cpe:/h:cisco:aironet_br500e/a\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nDate: .*\\r\\nServer: mini-http/([\\w._-]+) \\(unix\\)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=user\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">| p/Kemp 2500 load balancer http config/ i/mini-http $1/ d/load balancer/ o/Unix/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: \\\"Pi3Web/([\\w._-]+)\\\"\\r\\n|s p/Pi3Web httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\\\"VoIP841\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: simple httpd ([\\w._-]+)\\r\\n|s p/simple httpd/ v/$1/ i/Philips DECT VoIP841 http config/ d/VoIP phone/ cpe:/h:philips:dect_voip841/a\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\\\"SPH200D\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: simple httpd ([\\w._-]+)\\r\\n|s p/simple httpd/ v/$1/ i/Netgear SPH200D http config/ d/VoIP phone/ cpe:/h:netgear:sph200d/a\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nServer: Mediasite Web Server/([\\w._-]+)\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nHttpConnection: Close\\r\\n| p/SonicFoundry MediaSite httpd/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mbedthis-Appweb/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Powered-By: PHP/([\\w._-]+)\\r\\n.*<title>([\\w._-]+) : Log In - Juniper Networks Web Management</title>|s p/Mbedthis-Appweb/ v/$1/ i/Juniper router http config; PHP $2; name $3/ d/router/ cpe:/a:mbedthis:appweb:$1/ cpe:/a:php:php:$2/\nmatch http m|^HTTP/1\\.1 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://Device/config/log_off_page\\.htm\\r\\n|s p/GoAhead WebServer/ i/Linksys SRW2024 switch http config/ d/switch/ cpe:/a:goahead:goahead_webserver/ cpe:/h:linksys:srw2024/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n(?:Pragma: no-cache\\r\\n)?WWW-Authenticate: Basic realm=\\\"Netcam\\\"\\r\\nContent-Length: 17\\r\\n\\r\\n401 Unauthorized\\n$| p/Airlink 101 or TRENDnet TVIP-422w webcam http config/ d/webcam/ cpe:/h:trendnet:tvip-422w/a\nmatch http m|^HTTP/1\\.1 503 Service Unavailable\\r\\nServer: NS([\\w._-]+)\\r\\nContent-Length:\\d+\\r\\n| p/Citrix NetScaler httpd/ v/$1/ d/load balancer/\nmatch http m|^HTTP/1\\.1 [45]\\d\\d (.*)\\r\\nContent-Length: ?\\d+\\r\\nConnection: close\\r\\nCache-Control: no-cache,no-store\\r\\nPragma: no-cache\\r\\n\\r\\n<html><body>(?:<b>)?Http/1\\.1 \\1| p/Citrix NetScaler httpd/ d/load balancer/\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nContent-Length:71\\r\\nConnection: close\\r\\nCache-Control: no-cache,no-store\\r\\nPragma: no-cache\\r\\n\\r\\n<html><body><b>Http/1\\.1 Internal Server Error 31    </b></body> </html>$| p/Citrix NetScaler httpd/ d/load balancer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nContent-Language: en\\r\\nContent-Length: \\d+\\r\\nServer: Wireless Network Camera\\r\\n\\r\\n<html>\\r\\n<frameset rows=\\\"2000,0\\\" border=\\\"0\\\" frameborder=\\\"no\\\" framespacing=\\\"0\\\">| p/LevelOne WCS-2030 webcam http config/ d/webcam/ cpe:/h:levelone:wcs-2030/a\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: wg_httpd/([\\w._-]+)\\(based Boa/([\\w._-]+)\\)\\r\\n.*<title>WebEye Index Page</title>\\n<meta name=\\\"generator\\\" content=\\\"WebGateInc\\\">|s p/wg_httpd/ v/$1/ i/WebGateInc WebEye webcam http config; based on Boa $2/ d/webcam/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Nano HTTPD library\\r\\n|s p/Ferhat Ayaz's Nano httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Transmission\\r\\nWWW-Authenticate: Basic realm=\\\"Transmission\\\"\\r\\n| p/Transmission BitTorrent management httpd/ i/unauthorized/ cpe:/a:transmissionbt:transmission/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Transmission\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n| p/Transmission BitTorrent management httpd/ i/unauthorized/ cpe:/a:transmissionbt:transmission/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nServer: Transmission\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n| p/Transmission BitTorrent management httpd/ i/unauthorized/ cpe:/a:transmissionbt:transmission/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nServer: Transmission\\r\\nLocation: .*?/web/\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n\\r\\n| p/Transmission BitTorrent management httpd/ cpe:/a:transmissionbt:transmission/\nmatch http m|^HTTP/1\\.0 409 Conflict\\r\\nServer: Transmission\\r\\n| p/Transmission BitTorrent management httpd/ cpe:/a:transmissionbt:transmission/\nmatch http m|^HTTP/1\\.1 200 .*<meta http-equiv=\\\"Refresh\\\" content=\\\"2; url=/transmission/web/\\\">\\r\\n.*<p>redirecting to <a href=\\\"/transmission/web\\\">/transmission/web/</a></p>|s p/Transmission BitTorrent management httpd/ cpe:/a:transmissionbt:transmission/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"WebAdmin\\\"\\r\\n.*<p>Access to this document requires a User ID</p>|s p/GoAhead WebServer/ i/TeleWell TW-EA510 ADSL router http config/ d/broadband router/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Enigma2 WebInterface Server ([\\w._-]+) \\r\\n|s p/Enigma2 Dreambox http config/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: DPH-140\\r\\nWWW-Authenticate: Digest realm=\\\"DPH-140\\\"| p/D-Link DPH-140 VoIP phone http config/ d/VoIP phone/ cpe:/h:dlink:dph-140/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Topfield PVR Web Server\\\"\\r\\n\\r\\n| p/Topfield HDPVR satellite decoder http config/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nAccept-Ranges: bytes\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<font size=\\+3>WAGO-Ethernet TCP/IP PFC</font>.*<td>Firmware revision</td>\\n\\n<td>([^<]+)</td>.*<td>Hardware address</td>\\n\\n<td>(\\w+)</td>|s p/Wago ethernet controller http config/ v/$1/ i/MAC $2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: vxTri's Versatile Smart Server \\(TVSS\\) V ([\\w._-]+)\\r\\nSet-Cookie: Intoto=.*<title> Login Screen </title>|s p/vxTri's Versatile Smart Server httpd/ v/$1/ i/Adtran Netvanta 2100 VPN Gateway http config/ d/security-misc/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Hauppauge's DVB EPG Webserver v([\\w._-]+)\\r\\n| p/Hauppauge DVB EPG http config/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: HCW_DVB_EPG_SERVER_([\\w._-]+)\\r\\n.*<title>Hauppauge EPG</title>\\r\\n|s p/Hauppauge DVB EPG http config/ v/$SUBST(1,\"_\",\".\")/ d/media device/\nmatch http m|^HTTP/1\\.0 200 Ok.*<IMG SRC=\\\"compaq\\.gif\\\" ALT=\\\"COMPAQ\\\"><BR>\\r\\n<H3>Remote Insight Lights-Out Edition<BR></H3>|s p|HP/Compaq Integrated Lights-Out http config| d/remote management/ cpe:/h:hp:integrated_lights-out/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nCache-Control: no-cache\\r\\n\\r\\n<html>\\n<head>\\n<title> Home </title>\\n<script src=\\\"script/cookieCode\\.js\\\"></script>\\n<script language=\\\"JavaScript\\\">\\n<!--\\nfunction SetDefLanguage\\(\\)\\n| p/Xerox Phaser 3500 http config/ d/printer/ cpe:/h:xerox:phaser_3500/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nServer: Ubicom/([\\w._-]+)\\r\\n.*<title>WGA600N Wireless Gaming Adapter  :\\r\\n\\t\\t Login\\r\\n\\t</title>|s p/Ubicom httpd/ v/$1/ i/Linksys WGA600N WAP http config/ d/WAP/ cpe:/a:ubicom:httpd:$1/ cpe:/h:linksys:wga600n/a\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Expires: -1\\r\\n.*<title>NetGear GS(\\w+)</title>|s p/NetGear GS$1 switch http config/ d/switch/\nmatch http m|^HTTP/1\\.1 400 Error in MIME message\\r\\n$| p/Wyse Winterm 1200 LE terminal http config/ d/terminal/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Web Server\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"WebAdmin\\\"\\r\\n.*<p class=\\\"alert\\\">Web configuration is protected\\.</p>\\n\\n<p><a href=\\\"Javascript:history\\.go\\(-1\\)\\\">|s p/D-Link DSL2-300G http config/ d/broadband router/ cpe:/h:dlink:dsl2-300g/a\nmatch http m|^HTTP/1\\.0 200 .*<title>BPA430 Web Configuration Pages</title></head><script LANGUAGE=\\\"JavaScript\\\" src=\\\"menu\\.js\\\">|s p/Packet8 BPA430 VoIP phone http config/ d/VoIP phone/ cpe:/h:packet8:bpa430/a\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\nServer: ADH-Web\\r\\n.*<meta name=\\\"author\\\" content=\\\"Dedicated Micros \\(info@dmicros\\.com\\)\\\">|s p/ADH-Web httpd/ i/Dedicated Micros Digital Sprite 2 DVR http config/ d/media device/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"FR114W\\\"\\r\\nContent-type: text/html\\r\\n\\r\\n401 Unauthorized| p/NetGear FR114W WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mbedthis-Appweb/([\\w._-]+)\\r\\n.*<title>Openstage IP Phone User</title>.*<meta name='author' content='Siemens AG,|s p/Mbedthis-Appweb/ v/$1/ i/Siemens Openstage VoIP phone http config/ d/VoIP phone/ cpe:/a:mbedthis:appweb:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Splunkd\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<response>\\n  <messages>\\n    <msg type=\\\"WARN\\\">Remote login disabled because you are using a free license which does not provide authentication\\.|s p/Splunkd httpd/ i/free license; remote login disabled/ cpe:/a:splunk:splunk/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Splunkd\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<!--This is to override browser formatting; see server\\.conf\\[httpServer\\] to disable\\.|s p/Splunkd httpd/ cpe:/a:splunk:splunk/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<!-- General javascripts -->.*var path='http://www\\.axis\\.com/cgi-bin/prodhelp\\?prod=axis_([\\w._-]+)&ver=([\\w._-]+)&|s p/AXIS $1 print server http config/ v/$2/ d/print server/ cpe:/h:axis:$1/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nServer: Indy/([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"KutinSoft Reboot Service\\\"\\r\\n| p/Indy httpd/ v/$1/ i/KutinSoft reboot service http config/ o/Windows/ cpe:/a:indy:httpd:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*VMware Server provides a virtual machine platform, which can be managed by VMware VirtualCenter Server\\.\\\">\\r\\n\\r\\n<title>VMware Server 2</title>|s p/VMware Server http config/ v/2/ cpe:/a:vmware:server:2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*document\\.write\\(\\\"<title>\\\" \\+ ID_VC_Welcome \\+ \\\"</title>\\\"\\);.*<meta name=\\\"description\\\" content=\\\"VMware VirtualCenter|s p/VMware Server http config/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: UI-WebServer V([\\w._-]+)\\r\\n| p/UI-View Automatic Packet Reporting System httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Pragma: no-cache\\r\\n.*<!--- Page\\(\\d+\\)=\\[Login\\] --->.*<TITLE>Verizon</TITLE>|s p/Verizon FIOS Actiontec http config/ d/broadband router/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n.*<!--- Page\\(\\d+\\)=\\[\\] --->.*<TITLE>Management Console</TITLE>|s p/USRobotics USR8200 firewall http config/ d/firewall/ cpe:/h:usrobotics:usr8200/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Synacast Media Server/([\\w._-]+)\\r\\nConnection: close\\r\\n\\r\\n| p/Synacast Media Server http config/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: DCLK-HttpSvr\\r\\n| p/DoubleClick advertising httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-type: text/html\\r\\nServer: Mono-HTTPAPI/([\\w._-]+)\\r\\n.*<H1>Ooops!</H1><P>The page you requested has been obsconded with by knomes\\. Find hippos quick!</P>|s p/Mono-HTTPAPI/ v/$1/ i/OpenSimulator http config/ cpe:/a:mono:mono:$1/\nmatch http m|^HTTP/1\\.0 404 NotFound\\r\\nContent-type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Tiny WebServer\\r\\n.*<H1>Ooops!</H1><P>The page you requested has been obsconded with by knomes\\. Find hippos quick!</P><P>If you are trying to log-in, your link parameters should have: &quot;-loginpage http:///\\?method=login -loginuri http:///&quot; in your link </P></BODY></HTML>|s p/C# Webserver/ i/OpenSimulator http config/ cpe:/a:gauffin_telecom:c%23_webserver/\n# Based on Gauffin C# Webserver\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nlocation: /login\\.html\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\nContent-Type: \\r\\nServer: Tiny WebServer\\r\\nConnection: close\\r\\nSet-Cookie: xsrf-token=| p/Duplicati httpserver/ cpe:/a:duplicati:httpserver/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: NetGate \\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n| p/AT&T NetGate VPN http config/ d/security-misc/\n# Version 6.0.74\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: Gateway \\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n| p/AT&T NetGate VPN http config/ d/security-misc/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nServer: Indy/([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Atis Web-Server Autentica| p/Indy httpd/ v/$1/ i/Atis Surveillance camera http config/ d/webcam/ cpe:/a:indy:httpd:$1/\nmatch http m|^HTTP/1\\.0 200 KDH1_STC_OK\\r\\nServer: KDH/([\\w_.-]+) \\(([\\w:]+)\\)\\r\\n.*<title>IBM Tivoli Monitoring Service Index</title>|s p/KDH httpd/ v/$1 $2/ i/IBM Tivoli Monitoring http config/ d/remote management/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nMIME-Version: [\\d.]+\\r\\nServer: SNMP Research DR-Web Agent/([\\w._-]+)\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"DR-Web\\\"\\r\\n| p/SNMP Research DR-Web http config/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Winstone Servlet Engine v([\\w._-]+)\\r\\nX-Hudson: ([\\w._-]+)\\r\\nX-Hudson-CLI-Port: (\\d+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Powered-By: Servlet/([\\w._-]+) \\(Winstone/[\\w._-]+\\)\\r\\n|s p/Winstone Servlet Engine/ v/$1/ i/Hudson $2; Servlet $4; CLI port $3/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Winstone Servlet Engine v([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Powered-By: Servlet/([\\w._-]+) \\(Winstone/[\\w._-]+\\)\\r\\n|s p/Winstone Servlet Engine/ v/$1/ i/Servlet $2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Winstone Servlet Engine v([\\w._-]+)\\r\\n| p/Winstone Servlet Engine/ v/$1/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nServer: Winstone Servlet Engine v([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Powered-By: Servlet/([\\w._-]+) \\(Winstone/[\\w._-]+\\)\\r\\n|s p/Winstone Servlet Engine/ v/$1/ i/Servlet $2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nServer: SilverStream Server/([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"SilverStream\\\"\\r\\n| p/Silverstream web application management httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/([\\w._-]+)\\r\\n.*<TITLE>SONY NSP-100 Main Page</TITLE>|s p/Allegro RomPager/ v/$1/ i/Sony NSP-100 network player http config/ d/media device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 302 Not Found\\r\\nConnection: close\\r\\nLocation: /user/login\\r\\nAccept-Ranges: none\\r\\nServer: Sockso\\r\\n\\r\\n$| p/Sockso personal music player httpd/\nmatch http m|^HTTP/1\\.1 302 Not Found\\r\\nConnection: close\\r\\nLocation: /user/login\\r\\nServer: Sockso\\r\\n\\r\\n| p/Sockso personal music player httpd/\nmatch http m|^HTTP/1\\.1 303 See Other\\r\\nContent-Type: text/html\\r\\nContent-Length: 0\\r\\nLocation: https://[\\d.]+:443/webvpn\\.html\\r\\nSet-Cookie: webvpncontext=| p/Cisco WebVPN http config/\n# This one must come after the one above to avoid matching IP address as hostname\nmatch http m|^HTTP/1\\.1 303 See Other\\r\\nContent-Type: text/html\\r\\nContent-Length: 0\\r\\nLocation: https://([\\w.-]+):\\d+/webvpn\\.html\\r\\nSet-Cookie: webvpncontext=| p/Cisco WebVPN http config/ h/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nExpires: -1\\r\\n Cache-Control: no-cache\\r\\n.*<title>Contivity VPN Client</title>|s p/Contivity VPN Client httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n.*<title>RemoteView</title>.*<frame name=\\\"menu\\\" src=\\\"Menu_main\\.htm\\\" target=\\\"parent\\.work\\\"|s p/Kguard Security DVR http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<title>LaCie Network Space NAS</title>.*<meta http-equiv=\\\"refresh\\\" content=\\\"0;url=/cgi-bin/public/login\\\">|s p/LaCie Network Space NAS http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Development/([\\w._-]+) Python/([\\w._-]+)\\r\\n| p/Google App Engine httpd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Development/([\\w._-]+)\\r\\n| p/Google App Engine httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>APC Back-UPS HS 500\\(BackUPS500\\0\\)</title>| p/APC Back-UPS HS 500 http config/ d/power-device/\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\nContent-Length: 16\\r\\n\\r\\nEAccessViolation$| p/TiVo Desktop Server http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 401 Not Authorized\\r\\nServer: RapidLogic/([\\w._-]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Secure Realm\\\"\\r\\n\\r\\n\\r\\nAuthorization Required\\r\\n\\r\\n$| p/RapidLogic httpd/ v/$1/ i/3Com OfficeConnect WAP http config/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 401 Not Authorized\\r\\nServer: RapidLogic/([\\w._-]+)\\r\\nMIME-version: 1\\.0\\r\\nPragma: no-cache\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Secure Realm\\\"\\r\\n\\r\\n\\r\\nAuthorization Required\\r\\n\\r\\n$| p/RapidLogic httpd/ v/$1/ i/Linksys WAP55AG WAP http config/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:linksys:wap55ag/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\n\\r\\n.*<br>Ability Mail Server ([\\w._-]+) by Code-Crafters<br>|s p/Code-Crafters Ability Mail Server http config/ v/$1/ o/Windows/ cpe:/a:code-crafters:ability_mail_server:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html><head><title>Available Databases - Banshee DAAP Browser</title>| p/Banshee DAAP browser httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: FlashCom/([\\w._-]+)\\r\\n.*<html><head><title>Wowza Media Server ([^<]*)</title></head>|s p/Adobe Flash Media Server/ v/$1/ i/Wowza Media Server $2/ cpe:/a:adobe:flash_media_server:$1/ cpe:/a:wowza:wowza_media_server:$SUBST(2,\" \",\"_\")/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: FlashCom/([\\w._-]+)\\r\\n.*<html><head><title>Wowza Streaming Engine ([^<]*)</title></head>|s p/Adobe Flash Media Server/ v/$1/ i/Wowza Streaming Engine $2/ cpe:/a:adobe:flash_media_server:$1/ cpe:/a:wowza:wowza_media_server:$SUBST(2,\" \",\"_\")/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: FlashCom/([\\w._-]+)\\r\\n.*<html><head><title>Wowza ([^<]*)</title></head>|s p/Adobe Flash Media Server/ v/$1/ i/Wowza $2/ cpe:/a:adobe:flash_media_server:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: FlashCom/([\\w._-]+)\\r\\n.*<\\?xml version=\\\"1\\.0\\\" encoding=\\\"utf-8\\\"\\?>\\n<result>\\n\\t<level>error</level>\\n\\t<code>NetConnection\\.Connect\\.Rejected</code>|s p/Adobe Flash Media Server/ v/$1/ cpe:/a:adobe:flash_media_server:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Length: \\d+(?:\\r\\n)?Content-Type: text/html\\r\\n\\r\\n\\r\\n<html><body>This site is running <a href='http://www\\.TeamViewer\\.com'>TeamViewer</a>\\.| p/TeamViewer httpd/ cpe:/a:teamviewer:teamviewer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body>This site is running <a href='http://www\\.TeamViewer\\.com'>TeamViewer</a>\\.| p/TeamViewer httpd/ cpe:/a:teamviewer:teamviewer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><body>This site is running <a href='http://www\\.TeamViewer\\.com'>TeamViewer</a>\\.| p/TeamViewer httpd/ cpe:/a:teamviewer:teamviewer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nContent-Type: application/octet-stream\\r\\nConnection: close\\r\\nHTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Length: 181\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body>This site is running <a href='http://www\\.TeamViewer\\.com'>TeamViewer</a>\\.| p/TeamViewer httpd/ cpe:/a:teamviewer:teamviewer/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Type: text/html\\r\\n\\r\\n.*<p>Not a recognized search path\\.</p>\\n<hr />\\n<p><i>MWSearch on localhost</i></p>\\n</body>\\n</html>\\r\\n|s p/MediaWiki Lucene powered search httpd/\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nDate: \\r\\nServer: \\r\\nContent-Length: \\d+ \\r\\nContent-Type: text/html\\r\\n\\r\\n.*<title>Error Page 500</title>|s p/ESET NOD32 anti-virus update httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nDate: .*\\r\\nAccept-Ranges: none\\r\\nContent-Length: \\d+ \\r\\nContent-Type: text/html\\r\\n\\r\\n.*<title>Error Page 500</title>|s p/ESET NOD32 anti-virus update httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/xml; charset=utf-8: \\r\\n.*<VendorName>D-Link Systems</VendorName><ModelDescription>Xtreme N GIGABIT Router</ModelDescription><ModelName>DIR-([^<]+)</ModelName><FirmwareVersion>([^<]+)</FirmwareVersion>|s p/D-Link Xtreme $1 WAP http config/ i/Firmware $2/ d/WAP/ cpe:/h:dlink:xtreme_$1/a\nmatch http m%^HTTP/1\\.0 200 OK\\r\\n.*<meta http-equiv=\"refresh\" content=\"0; URL=/(?:cgi-bin/luci|404)\" />\\n</head>.*href=\"/cgi-bin/luci\">%s p/LuCI Lua http config/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: LuCIttpd/([\\d.]+)\\r\\n| p/LuCIttpd/ v/$1/ d/WAP/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: LuCId-HTTPd/([\\d.]+)\\r\\n| p/LuCId-HTTPd/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Not Authorised\\r\\nServer: Majestic-12 WebServer v([\\w._-]+)\\r\\n| p/Majestic-12 httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 405 Method not allowed: Method not allowed by server: GET\\r\\nDate: .*\\r\\nCache-Control: no-cache\\r\\nServer: openwbem/([\\w._-]+) \\(CIMOM\\)\\r\\n| p/Openwbem CIMOM httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Network Monitor\\\"\\r\\nConnection: close\\r\\n\\r\\n<html><body><font size=\\\"2\\\"><b>You could not be authenticated by the GFI N\\.S\\.M\\. web server\\.| p/GFI Network Service Monitor http config/\n\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\n.*X-Powered-By: Servlet/([\\w._-]+)\\r\\nServer: GlassFish[ /]v([\\w._ -]+)\\r\\n| p/Sun GlassFish/ v/$2/ i/Servlet $1/ cpe:/a:sun:glassfish_server:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\w._-]+)\\r\\nServer: GlassFish Server Open Source Edition ([\\w._ -]+)\\r\\n|s p/Sun GlassFish Open Source Edition/ v/$2/ i/Servlet $1/ cpe:/a:sun:glassfish_server:$2::open_source/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\n.*X-Powered-By: Servlet/([\\w._-]+) JSP/([\\w._-]+) \\(GlassFish Server Open Source Edition ([\\w._ -]+) Java/Sun Microsystems Inc\\./([\\w._-]+)\\)\\r\\n| p/Sun GlassFish Open Source Edition/ v/$3/ i/JSP $2; Servlet $1; Java $4/ cpe:/a:oracle:jsp:$2/ cpe:/a:sun:glassfish_server:$3::open_source/ cpe:/a:sun:jre:$4/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: GlassFish Server Open Source Edition ([\\w._-]+)\\r\\nX-Powered-By: Servlet/([\\w._ -]+)\\r\\n|s p/Sun GlassFish Open Source Edition/ v/$1/ i/Servlet $2/ cpe:/a:sun:glassfish_server:$1::open_source/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\d.]+)\\r\\nServer: Sun GlassFish Enterprise Server v([\\w._ -]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Powered-By: JSF/([\\d.]+)\\r\\n|s p/Sun GlassFish/ v/$2/ i/Servlet $1; JSF $3/ cpe:/a:sun:glassfish_server:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\d.]+)\\r\\nServer: Sun GlassFish Enterprise Server v([\\w._ -]+)\\r\\n|s p/Sun GlassFish/ v/$2/ i/Servlet $1/ cpe:/a:sun:glassfish_server:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\d.]+)\\r\\nServer: Sun GlassFish Communications Server ([\\w._ -]+)\\r\\n|s p/Sun GlassFish Communications Server/ v/$2/ i/Servlet $1/ cpe:/a:sun:glassfish_server:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Sun GlassFish Enterprise Server v([\\d.]+)\\r\\nX-Powered-By: Servlet/([\\d.]+)\\r\\n|s p/Sun GlassFish/ v/$1/ i/Servlet $2/ cpe:/a:sun:glassfish_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Sun GlassFish Enterprise Server v([\\d.]+)\\r\\n|s p/Sun GlassFish/ v/$1/ cpe:/a:sun:glassfish_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\w._-]+) JSP/([\\w._-]+) \\(Oracle GlassFish Server ([\\w._-]+) Java/Sun Microsystems Inc\\./([\\w._-]+)\\)\\r\\n|s p/Oracle GlassFish/ v/$3/ i/Servlet $1; JSP $2; Java $4/ cpe:/a:oracle:glassfish_server:$3/ cpe:/a:oracle:jsp:$2/ cpe:/a:sun:jre:$4/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\w._-]+) JSP/([\\w._-]+) \\(Oracle GlassFish Server ([\\w._-]+) Java/Oracle Corporation/([\\w._-]+)\\)\\r\\n|s p/Oracle GlassFish/ v/$3/ i/Servlet $1; JSP $2; Java $4/ cpe:/a:oracle:glassfish_server:$3/ cpe:/a:oracle:jre:$4/ cpe:/a:oracle:jsp:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\w._-]+) JSP/([\\w._-]+) \\(GlassFish Server Open Source Edition +([\\w._-]+) +Java/Oracle Corporation/([\\w._-]+)\\)\\r\\n|s p/Oracle GlassFish/ v/$3/ i/Servlet $1; JSP $2; Java $4/ cpe:/a:oracle:glassfish_server:$3::open_source/ cpe:/a:oracle:jre:$4/ cpe:/a:oracle:jsp:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: GlassFish Server Open Source Edition ([\\w._ -]+)\\r\\n|s p/Sun GlassFish Open Source Edition/ v/$1/ cpe:/a:sun:glassfish_server:$1::open_source/\n\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: IndigoWebServer/([\\w_.-]+)\\r\\n|s p/Perceptive Automation Indigo http config/ v/$1/ d/specialized/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: llink-daemon/([\\w._-]+) \\(build (\\d+)\\)\\r\\n| p/llink media streamer httpd/ v/$1 build $2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<html xmlns:o=\\\"urn:schemas-microsoft-com:office:office\\\"\\r\\n.*<title>Now SMS</title>|s p/Now SMS http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\n.*<title>\\r\\nData Frame - Browser not HTTP 1\\.1 compatible\\r\\n</title>.*Your browser must support HTTP 1\\.1 to view iLO web pages\\.|s p/HP Integrated Lights-Out http config/ d/remote management/ cpe:/h:hp:integrated_lights-out/\nmatch http m|^HTTP/1\\.0 200 Okay\\r\\nServer: Optenet CCOTTA ([\\w._-]+)\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Optenet CCOTTA Status</title>| p/Optenet Mailsecure CCOTTA http config/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html><head><title>Axon</title>| p/Axon VoIP Exchange virtual PBX httpd/ o/Windows/ cpe:/o:microsoft:windows/a\n# Version 2.21\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html><head><title>Axon - Login</title>| p/Axon VoIP Exchange virtual PBX httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: OctoWebSvr/COM\\r\\n|s p/SLWebMail Supervisor http config/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<meta name=\\\"COPYRIGHT\\\" content=\\\"&copy; \\d+ Cisco Systems\\. All Rights Reserved\\.\\\">.*<title>ACE 4710 DM - Login</title>|s p/Cisco Application Control Engine 4710 DM http config/ d/load balancer/ cpe:/a:cisco:application_control_engine_software/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: ODS/([\\w._-]+)\\r\\n| p|Apple ODS DVD/CD Sharing Agent httpd| v/$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: ODS/([\\w._-]+)\\r\\n| p|Apple ODS DVD/CD Sharing Agent httpd| v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: CompaqHTTPServer/([\\w._-]+) HPE? System Management Homepage/([\\d.]+) httpd/([\\w.+]+)\\r\\n| p/CompaqHTTPServer/ v/$1/ i/HP System Management $2; httpd $3/ cpe:/a:hp:compaqhttpserver:$1/ cpe:/a:hp:system_management_homepage:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: CompaqHTTPServer/([\\w._-]+) HPE? System Management Homepage/([\\d.]+)\\r\\n| p/CompaqHTTPServer/ v/$1/ i/HP System Management $2/ cpe:/a:hp:compaqhttpserver:$1/ cpe:/a:hp:system_management_homepage:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: CompaqHTTPServer/([\\w._-]+) HPE? System Management Homepage\\r\\n| p/CompaqHTTPServer/ v/$1/ i/HP System Management/ cpe:/a:hp:compaqhttpserver:$1/ cpe:/a:hp:system_management_homepage/\nmatch http m|^HTTP/1\\.1 401 N/A\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"PENTAGRAM Cerberus ([^\"]*)\\\"\\r\\n| p/Pentagram Cerberus $1 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 302 Document Follows\\r\\nLocation: http:///index\\.html\\r\\nConnection: close\\r\\n\\r\\n| p/Crestron PRO2 automation system httpd/ d/specialized/ o/2-Series/ cpe:/o:crestron:2-series/\nmatch http m|^HTTP/1\\.1 200 Document Follows\\r\\n.*<META content=\\\"text/html; charset=windows-1252\\\" http-equiv=Content-Type>\\n<meta NAME=\\\"AUTHOR\\\" CONTENT=\\\"TANDBERG ASA \\(http://www\\.tandberg\\.net\\)\\\">\\n|s p/Tandberg 2500 video conferencing http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nPragma: no-cache\\r\\nWWW-Authenticate: Digest realm=\\\"[^\"]*\\\", domain=\\\"/\\\", nonce=\\\"[0-9a-f]{10}\\\", algorithm=\\\"MD5\\\", qop=\\\"auth\\\"\\r\\nWWW-Authenticate: Basic realm=\\\"rut-nort-vc02\\\"\\r\\nContent-Type: text/html\\r\\nContent-Length: 236\\r\\n\\r\\n| p/Tandberg 3000 MXP video conferencing http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nContent-Type: text/html\\r\\nServer: httpd\\r\\n.*<title>Router - Info</title>\\n\\n|s p/DD-WRT milli_httpd/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>BitTorrent Download Manager</title>\\r\\n|s p/BitTorrent Download Manager httpd/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https?://vxtarget/esm_loginMain\\.htm\\r\\n\\r\\n|s p/GoAhead WebServer/ i/Mitel 3300 PBX controller/ d/PBX/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.1 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https?://3100icp/esm_loginMain\\.asp\\r\\n\\r\\n|s p/GoAhead WebServer/ i/Mitel 3100 PBX controller/ d/PBX/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Grandstream (\\w+) ([\\d.]+)\\r\\n|s p/Grandstream $1 http config/ v/$2/\nmatch http m|^HTTP/1\\.0 401 Login failed!\\r\\nServer: micro_httpd\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"WRT54GX4\\\"\\r\\n|s p/micro_httpd/ i/WRT54GX4 WAP config/ d/WAP/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: SAP J2EE Engine/([\\d.]+)\\r\\n|s p/SAP J2EE Engine httpd/ v/$1/ i/SAP NetWeaver/ cpe:/a:sap:j2ee_engine:$1/ cpe:/a:sap:netweaver/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nconnection: close\\r\\nlocation: http://([\\w._-]+):\\d+/index\\.html\\r\\nserver: SAP J2EE Engine/([\\w._-]+)\\r\\ndate: .*\\r\\n\\r\\n$| p/SAP J2EE Engine httpd/ v/$2/ i/SAP NetWeaver/ h/$1/ cpe:/a:sap:j2ee_engine:$2/ cpe:/a:sap:netweaver/\nmatch http m|^HTTP/1\\.0 404 Not found\\r\\nSet-Cookie: ARPT=\\w+web-disp2-\\w+; path=/\\r\\ncontent-type: text/html; charset=utf-8\\r\\ncontent-length: \\d+\\r\\nserver: SAP NetWeaver Application Server / ABAP ([\\w._-]+)\\r\\n| p/SAP J2EE Engine httpd/ i/SAP NetWeaver Application Server; ABAP $1/ cpe:/a:sap:j2ee_engine/ cpe:/a:sap:netweaver/\nmatch http m|^HTTP/1\\.0 404 Not found\\r\\ncontent-type: text/html; charset=utf-8\\r\\ncontent-length: \\d+\\r\\nserver: SAP NetWeaver Application Server / ABAP ([\\w._-]+)\\r\\n| p/SAP J2EE Engine httpd/ i/SAP NetWeaver Application Server; ABAP $1/ cpe:/a:sap:j2ee_engine/ cpe:/a:sap:netweaver/\nmatch http m|^HTTP/1\\.[01] 404 Not found\\r\\ncontent-type: text/html; charset=utf-8\\r\\ncontent-length: \\d+\\r\\n\\r\\n<!DOCTYPE html PUBLIC\"-//W3C//DTD HTML 4\\.01Transitional//EN\"><html><head><title>Logon Error Message</title>| p/SAP J2EE Engine httpd/ cpe:/a:sap:j2ee_engine/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\n.*<TITLE>Versalink</TITLE>.*\\\"window\\.location\\.href = 'homeSumBS\\.htm'\\\"|s p/RapidLogic httpd/ v/$1/ i/Westell Versalink model C90-327W30-06 WAP http config/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:westell:versalink_model_c90-327w30-06/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\n.*<TITLE>VBrick Integrated Web Server \\(IWS\\) Login</TITLE>|s p/RapidLogic httpd/ v/$1/ i/VBrick 4300 video encoder http config/ d/media device/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nPragma: no-cache\\r\\nContent-type: text/html\\r\\n\\r\\n<script language=\\\"javascript\\\">\\n<!--\\ntop\\.location\\.href=\\\"default\\.htm\\\";//-->\\n</script>\\n\\r\\n$| p/RapidLogic httpd/ v/$1/ i/3Com 3CRWE454G75 WAP http config/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:3com:3crwe454g75/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><meta http-equiv='Content-Type' content='text/html; charset=iso8859-1'><META http-equiv=Refresh content=\\\"0; URL=https://[\\d.]+/\\\"></head><body bgcolor=#FFFFFF></body></html>\\r\\n$| p/RapidLogic httpd/ v/$1/ i/Netgear WAG102 WAP http config/ d/WAP/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:netgear:wag102/a\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nServer: RapidLogic/([\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html; charset=UTF-8\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nLocation: /main\\.html\\r\\n\\r\\n\\r\\n$| p/RapidLogic httpd/ v/$1/ i/Sharp MX-2700N printer/ d/printer/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:sharp:mx-2700n/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nServer: ZING-(\\d+/[\\d.]+) \\([0-9a-f]{32}; [\\w-]+\\) ([^\\r\\n]*)\\r\\n\\r\\n$| p/ZING httpd/ v/$1/ i/SanDisk Sansa Connect MP3 player; $2/ d/media device/\nmatch http m|^HTTP/1\\.0 503 Service Unavailable\\r\\nContent-Type: text/html\\r\\nContent-Length: 169\\r\\n\\r\\n<html><head><title>503 Service Unavailable</title></head><body><h1>503 Service Unavailable</h1><p>The service is not available\\. Please try again later\\.</p></body></html>$| p/Alcatel-Lucent OmniPCX PBX httpd/ d/PBX/ cpe:/a:alcatel-lucent:omnipcx/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .* GMT\\r\\nWWW-Authenticate: Basic realm=\\\"\\.\\\"\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H4>401 Unauthorized</H4>\\nAuthorization required\\.\\n<HR>\\n</BODY></HTML>\\n$| p/Alcatel-Lucent OmniPCX PBX httpd/ d/PBX/ cpe:/a:alcatel-lucent:omnipcx/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently \\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nLocation: /fusionreactor/\\r\\n\\r\\nRedirecting, please wait\\.$| p/FusionReactor web server monitor/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nServer: wgt_http ([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Anlage\\\"\\r\\nConnection: close\\r\\n$| p/wgt_http/ v/$1/ i/Eumex 704PC ADSL router/ d/broadband router/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Alvarion-Webs\\r\\nDate: THU JAN 01 01:04:22 1970\\r\\nWWW-Authenticate: Basic realm=\\\"Alvarion\\\"\\r\\n.*<html><head><title>Document Error: Unauthorized</title></head>\\r\\n\\t\\t<body><h2>Access Error: Unauthorized</h2>\\r\\n\\t\\t<p>Access to this document requires a User ID</p></body></html>\\r\\n\\r\\n$|s p/Alvarion-Webs/ i/Alvarion BreezeMAX WiMAX WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nPragma: no-cache\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\n  <head>\\n  <title>400 Bad Request !!!</title>| p/DrayTek Vigor ADSL router httpd/ d/broadband router/\nmatch http m|^HTTP/1\\.0 200 ;OK\\r\\nServer: \\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\r\\nContent-Type: text/html\\r\\nConnection: Close\\r\\n\\r\\n<HTML>\\n<TITLE>Jacarta interSeptor\\n</TITLE>| p/Jacarta interSeptor environmental monitor http/ d/specialized/\nmatch http m|^HTTP/1\\.0 302 Document Follows\\r\\nLocation: http:///index\\.htm\\r\\nConnection: close\\r\\n\\r\\n| p/Dell PowerVault TL4000 http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: -1\\r\\nLocation: https?://[\\d.]+/login\\.htm\\r\\n\\r\\n.*Click <a href=\\\"https?://[\\d.]+/login\\.htm\\\">Here</a> to proceed\\.\\n|s p/3Com Baseline Switch 2948-SFP Plus web config/ d/switch/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\.\\r\\nWWW-Authenticate: Basic realm=\\\"GAI-Tronics\\\"\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized\\.</TITLE>\\r\\n</HEAD><BODY>\\r\\n<H1>401 Unauthorized</H1>The requested URL / requires authorization\\.<P>\\r\\n<HR>\\r\\n</BODY></HTML>\\r\\n$| p/GAI-Tronics Commander VoIP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0\\r\\nServer: HBHTTP POGOPLUG - ([\\d.]+) - Linux\\r\\nDate: .*\\r\\n\\r\\n$| p/HBHTTP/ v/$1/ i/Pogoplug NAS device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 500 Server Error\\r\\nContent-Length: 0\\r\\nServer: HBHTTP POGOPRO - ([\\w._-]+) - Linux\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n$| p/HBHTTP/ v/$1/ i/Pogoplug Pro NAS device/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 500 Server Error\\r\\nContent-Length: 0\\r\\nServer: HBHTTP DISCOVERY - (\\d[\\w._-]+) - Linux\\r\\n| p/HBHTTP/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nExpires: Thu, 26 Oct 1995 00:00:00 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/([\\d.]+)\\r\\n.*<title>Emerson Network Power IntelliSlot Web/(\\d+) Card</title>|s p/Allegro RomPager/ v/$1/ i|Emerson Network Power IntelliSlot Web/$2 card| d/power-device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nDate: .*\\r\\nLocation: https://([\\w.]+)/?\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n|s p/VMware Server 2 http config/ h/$1/ cpe:/a:vmware:server:2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nServer: WindWeb/([\\d.]+)\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"HP\\\"\\r\\n.*<script language=\\\"JavaScript\\\" src=\\\"/js/module_utils\\.js\\\"></script>\\r\\n<script language=\\\"JavaScript\\\" src=\\\"/js/branding_utils\\.js\\\">|s p/WindWeb/ v/$1/ i/HP E1200 storage http config/ d/storage-misc/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\nServer: Dave Solin's Web Daemon v\\. ([\\d.]+)\\n.*window\\.location = '/servlets/com\\.marimba\\.servlets\\.TunerAdmin';\\r\\n|s p/Dave Solin's Web Daemon/ v/$1/ i/BMC HTTP service/\n# Date in fingerprint was \"\\xd0\\xa4\\xaf\\*\\$\\x99@\".\nmatch http m|^HTTP/1\\.0 200 Output Follows\\nServer: Apache Embedded Server\\nDate: .......\\n.*<title>NewCS Management Console\\.\\.</title>|s p/NewCS satellite card sharing system http config/ d/media device/\nmatch http m|^HTTP/1\\.0 200 Output Follows\\nServer: Apache Embedded Server\\nDate: \\nConnection: close\\nContent-Type: text/html\\n\\n<html>\\r\\n<head>\\r\\n<title>NewCS Management Console\\.\\.</title>|s p/NewCS satellite card sharing system http config/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<TITLE>CCcam info pages</TITLE><BODY><H2>Welcome to CCcam ([\\d.]+) server </H2>|s p/CCcam card sharing system http config/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\\\"CCcam Server\\\"\\r\\n.*<TITLE>CCcam info pages</TITLE>|s p/CCcam card sharing system http config/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: MacHTTP/([\\d.]+)\\r\\n|s p/MacHTTP/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Wub ([\\d.]+)\\r\\ncontent-type: text/html; charset=utf-8\\r\\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\\r\\nexpires: Sun, 01 Jul 2005 00:00:00 GMT\\r\\n| p/Wub/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n.*<TITLE></TITLE>\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"0; URL=/wcd/js_error\\.xml\\\">\\r\\n|s p/Konica Minolta PageScope Web Connection httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: sw-cp-server/([\\d.]+)\\r\\n.*<script language=\\\"javascript\\\" type=\\\"text/javascript\\\" src=\\\"/javascript/common\\.js\\?plesk_version=([\\w.-]+)\\\"/>|s p/sw-cp-server httpd/ v/$1/ i/Parallels Plesk WebAdmin version $2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: sw-cp-server\\r\\n.*<script language=\\\"javascript\\\" type=\\\"text/javascript\\\" src=\\\"/javascript/common\\.js\\?plesk_version=([\\w._-]+)\\\"/>|s p/sw-cp-server httpd/ i/Parallels Plesk WebAdmin version $1/\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nConnection: close\\r\\nX-UA-Compatible: IE=EmulateIE7\\r\\n(?:[^\\r\\n]+\\r\\n)*?P3P: CP=\\\"NON COR CURa ADMa OUR NOR UNI COM NAV STA\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: sw-cp-server\\r\\n|s p/sw-cp-server httpd/ i/Parallels Plesk WebAdmin/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Web Server\\r\\n X-UA-Compatible: IE=EmulateIE7\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n.*<title>Switch</title>|s p/Cisco SG200 switch http admin/ d/switch/ cpe:/h:cisco:sg200/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<title>Web-Thermograph</title>\\r\\n|s p/W&T Web-Thermograph http config/ i|firmware 1.50/1.30| d/specialized/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<title>Web-Thermograph NTC, 10/100BT, 12-24V</title>\\r\\n|s p/W&T Web-Thermograph NTC http config/ i/firmware 1.53/ d/specialized/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nStatus:200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: RMC Webserver ([\\d.]+)\\r\\n.*<TITLE>VTM</TITLE>|s p/RMC Webserver/ v/$1/ i/Stratus ftServer VTM/ d/remote management/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"ActiontecBHR\\\"| p/Actiontec TR069 remote access/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: RemoteSupportManager/([\\d.]+)\\r\\n.*<title>Remote Support Manager</title>|s p/RemoteSupportManager/ v/$1/ i/n-able remote management/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*location\\.href=\\\"DE1100u\\.html\\\";\\r\\n|s p/Ricoh Aficio MP C4000 http config/ d/printer/ cpe:/h:ricoh:aficio_mp_c4000/a\nmatch http m|^HTTP/1\\.1 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Vernier/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://[\\d.]+:447/\\r\\n|s p/Vernier Networks Access Manager http config/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\n\\n<html>\\r\\n<head>\\r\\n<title></title>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=windows-1252\\\">\\r\\n<style type=\\\"text/css\\\">\\r\\n<!--\\r\\n\\.leftLink {|s p/Belkin F5D76324 WAP http config/ d/WAP/ cpe:/h:belkin:f5d76324/a\nmatch http m|^HTTP/1\\.1  200 OK\\r\\nConnection: close\\r\\nContent-Type: text/xml; charset=utf-8\\r\\n\\r\\n.*<p:ModelDescription>SMC ([\\w-]+)</p:ModelDescription>.*<p:FirmwareVersion>([\\d., ]+)</p:FirmwareVersion>| p/SMC $1 WAP http config/ i/firmware version $2/ cpe:/h:smc:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r?\\nContent-type: text/html; charset=utf-8\\r\\nServer: WebCit ([\\d.]+) / Citadel ([\\d.]+)\\n| p/WebCit/ v/$1/ i/Citadel $2/ cpe:/a:citadel:ux:$2/ cpe:/a:citadel:webcit:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\nContent-type: text/html; charset=utf-8\\r\\nServer: WebCit v([\\d.]+) / \\n| p/WebCit/ v/$1/ i/Citadel/ cpe:/a:citadel:ux/ cpe:/a:citadel:webcit:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\nDate: .*\\r\\nServer: HTTP/1\\.1 compliant\\r\\n.*<!--\\n \\*\\n \\* File: index\\.html\\n \\*\\n \\* Rajat Hingad rhingad@cisco\\.com\\n \\*\\n \\* Copyright \\(c\\) 2001, 2002, 2003, 2004 by Cisco Systems, Inc\\.\\n \\* All rights reserved\\.\\n \\*\\n \\* This file calls the idm\\.jnlp of the PDM\\.\\n \\*\\n \\*-->\\n\\n<html>\\n<head>\\n <meta http-equiv=\\\"Refresh\\\" content=\\\"1; URL=idm/index\\.html\\\">\\n</head>\\n$|s p/Cisco IPS Device Manager (IDM)/ d/security-misc/\nmatch http m|^HTTP/1\\.0  401 Unauthorized \\r\\nContent-type: text/html \\r\\nWWW-Authenticate: Basic realm=\\\"ULTAMUS RAID manager\\\"\\r\\n\\r\\n| p/Overland Storage Ultamus RAID manager/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html(?:; charset=UTF-8)?\\r\\n\\r\\n.*background:url\\(data:image/gif;base64,R0lGODdhAQAeAIQeAJub/5yc/6Cf/6Oj/6am/6qq/66u/7Gx/7S0/7i4/7u8/7\\+//8LD/8bG/8nK/83N/9HQ/9TU/9fX/9va/97e/\\+Lh/\\+Xl/\\+no/\\+3t//Dw//Pz//b3//v7//7\\+/////////ywAAAAAAQAeAAAFGCAQCANRGAeSKAvTOA8USRNVWReWaRvXhQA7\\)|s p/streamdev VDR plugin/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Tntnet/([\\w._-]+)\\r\\n.*<title>VDR-Live - Anmelden</title>|s p/Tntnet/ v/$1/ i/LIVE VDR http config/ cpe:/a:tntnet:tntnet:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Conexant-EmWeb/R([\\d_]+)\\r\\n| p/Conexant-EmWeb/ v/$SUBST(1,\"_\",\".\")/ cpe:/a:conexant:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nExpires: 0\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<title>Login</title>\\n.*<font class=tdBigTitle>Connect to 192\\.168\\.0\\.200</font>\\n|s p/D-Link DGS-1224T switch http config/ d/switch/ cpe:/h:dlink:dgs-1224t/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<meta name=\\\"Author\\\" content=\\\"FireBrick Ltd\\\">\\n<meta name=\\\"Description\\\" content=\\\"FireBrick (\\d+) Control pages\\\">|s p/FireBrick $1 firewall http config/ d/firewall/ cpe:/h:firebrick:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Date: Wed, 31 Dec 1969 15:00:00 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Wed, 31 Dec 1969 15:00:00 GMT\\r\\n.*<title>PROJECTOR NETWORK SETTINGS</title>.*<!--\\nvar mac=\\\"([0-9A-F]{12})\\\";\\n.*var vMdl=\\\"(\\w+)_Series\\\";\\nvar vVer=\\\"([\\d.]+)\\\";|s p/NEC $2 series projector http config/ i/firmware version $3; MAC $1/ d/media device/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: EdgePrism/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Connection: close\\r\\n\\r\\n\\n\\n|s p/EdgePrism/ v/$1/ i/Limelight Networks Content Delivery Network/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: micro_httpd\\r\\n.*<TITLE>DSL-(\\w+)</TITLE>.*var hostname = \\\"([\\w_.-]+)\\\";\\r\\nvar FWTmp = \\\"(V[\\w.]+)\\\"\\.split\\(\\\"_\\\"\\);|s p/micro_httpd/ i/D-Link DSL-$1 ADSL router http config; firmware $3/ d/broadband router/ h/$2/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\ndate: .*\\r\\ncontent-type: text/html\\r\\nconnection: close\\r\\nserver: Lenel Embedded Web Server/([\\d.]+)\\r\\n\\r\\n| p/Lenel Embedded Web Server/ v/$1/ i/OnGuard 2008 security system management/ d/security-misc/ cpe:/a:lenel:embedded_web_server:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\ncontent-type: text/html\\r\\nconnection: close\\r\\nserver: Lenel Embedded Web Server/([\\d.]+)\\r\\ndate: .*\\r\\n\\r\\n| p/Lenel Embedded Web Server/ v/$1/ cpe:/a:lenel:embedded_web_server:$1/\nmatch http m|^HTTP/1\\.1 200 Document follows\\r\\nConnection: Close\\r\\nServer: Micro-Web\\r\\nContent-type: text/html\\r\\nLast-modified: .*\\r\\nContent-length: 476\\r\\n\\r\\n$| p/Micro-Web/ i|Symantec Firewall/VPN 200| d/firewall/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: \\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"System\\\"\\r\\n.*<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY><H1>401 Unauthorized</H1>\\nYour client does not have permission to get URL / from this server\\.\\n</BODY></HTML>\\n$|s p/Edgewater Networks Edgemarc 4562 VoIP gateway web config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"server\\r\\n.*<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY><H1>401 Unauthorized</H1>\\nYour client does not have permission to get URL / from this server\\.\\n</BODY></HTML>\\n$|s p/DVR Systems webcam http interface/ d/webcam/\nmatch http m|^HTTP/1\\.1 204 No Content\\nServer: PRS\\nDate: .*\\n\\n$| p/Alcatel-Lucent OmniTouch Unified Communication VoIP gateway/ d/PBX/\nmatch http m|^<html>\\n<title>USRobotics 10/100/1000 Mbps 48-Port Smart Switch Login</title>.*<td>&nbsp; System Name\\n<td>&nbsp; ([\\w-]+)\\n.*<td>&nbsp; Location Name\\n<td>&nbsp; ([\\w -]+)\\n|s p/USRobotics USR997748 switch http config/ i/location: $2/ h/$1/ cpe:/h:usrobotics:usr997748/a\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"AddPac\\\"\\nContent-Length: 72\\n\\n<HTML><BODY>You must be authenticated to use this service</BODY></HTML>\\n$| p/AddPac AP200B VoIP gateway http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: NAShttpd\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Default ([\\w._-]+:[\\w._-]+)\\\"\\r\\n|s p/NAShttpd/ i/default login: $1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*if \\(needToConfirm\\) {\\r\\n return \\\"Leaving this page will end the remote help session\\\";\\r\\n} else {\\r\\nneedToConfirm = true;\\r\\n}\\r\\n}\\r\\n</script>|s p/SimpleHelp remote desktop httpd/\nmatch http m|^HTTP/1\\.0 302 Object Moved\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: /\\+CSCOE\\+/logon\\.html\\r\\nSet-Cookie: tg=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure\\r\\n|s p/Cisco ASA firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: tg=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure\\r\\nSet-Cookie: webvpn=;.*/\\+CSCOE\\+/logon\\.html|s p/Cisco ASA firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Mbedthis-Appweb/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: _appwebSessionId_=|s p/Mbedthis-Appweb/ v/$1/ i/Iomega StorCenter ix2 NAS device/ d/storage-misc/ cpe:/a:mbedthis:appweb:$1/ cpe:/h:iomega:storcenter_ix2/a\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nContent-Type: text/html\\r\\nLocation: /EnterpriseController\\r\\n| p/GoogleMini search appliance httpd/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: micro_httpd\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Huawei SmartAX (\\w+)\\\"\\r\\n|s p/micro_httpd/ i/Huawei SmartAX $1 ADSL router http config/ d/broadband router/ cpe:/a:acme:micro_httpd/ cpe:/h:huawei:smartax_$1/a\nmatch http m|^HTTP/1\\.0 200 OK Content-type: text/html\\r\\n\\r\\n.*<H2>57066 Minolta Network Configuration Sheet 1 of 2\\n\\n</H2>.*Serial Number: *(\\d+)\\n.*Ethernet Address: *([0-9A-F.]+).*F/W Version: *([\\w.]+ \\(\\w+\\)).*Print Server Name: *([\\w_.-]+)|s p/Minolta PagePro 20 printer http config/ i/serial number: $1, MAC: $2, firmware $3/ d/printer/ h/$4/ cpe:/h:minolta:pagepro_20/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"(DCS-\\w+)\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: WIC-2300\\r\\n|s p/D-Link $1 webcam http config/ d/webcam/ cpe:/h:dlink:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"(DCS-\\w+)\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: DCS-\\w+\\r\\n|s p/D-Link $1 webcam http config/ d/webcam/ cpe:/h:dlink:$1/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: BASIC realm=(DCS-\\w+)\\r\\n\\r\\nPassword Error\\. $| p/D-Link $1 webcam http config/ d/webcam/ cpe:/h:dlink:$1/\nmatch http m|^HTTP/1\\.0 400 bad url /\\r\\nServer: TinyHTTPProxy/([\\d.]+) ([^\\r\\n]+)\\r\\n| p/TinyHTTPProxy/ v/$1/ i/$2/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html; charset=utf-8\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nCache-Control: no-store\\r\\nExpires: -1\\r\\n.*<script src=\\\"/dana-na/css/ds\\.js\\\"></script>|s p/Juniper SA2000 or SA4000 VPN gateway http config/ d/security-misc/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html; charset=utf-8\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nCache-Control: no-store\\r\\nExpires: -1\\r\\n.*by Pulse Secure, LLC\\..*<script src=\\\"/dana-na/css/ds_[a-f0-9]+\\.js\\\"></script>|s p/Pulse Secure VPN gateway http config/ d/security-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n<html xml:lang=\\\"en\\\" xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\">\\r\\n<head>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\" />\\r\\n<title>FMS : Freenet Message System</title>| p/Freenet Message System web client/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Profense\\r\\n|s p/Profense web application firewall/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: NET-DK/([\\d.]+)\\r\\n.*<title>Touchstone Status</title>|s p/NET-DK/ v/$1/ i/Arris Touchstone TM702B VoIP modem/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: MediaBox HTTPd Server/([\\d.]+) \\(Unix\\)\\r\\n|s p/MediaBox HTTPd Server/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: cab/([\\d.]+) \\(([^)]+)\\)\\r\\n.*<TITLE>cab AdminApplet</TITLE>|s p/cab/ v/$1/ i/AdminApplet $2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<head><meta http-equiv=\\\"content-type\\\" content=\\\"text/html; charset=utf-8\\\" /><title>Everything</title>| p/voidtools Everything search engine httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: sessionId=.*<HTML>\\n<HEAD>\\n\\n<TITLE>Cisco Systems Login</TITLE>\\n|s p/Cisco 4400 wireless LAN controller httpd/ d/remote management/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<title>:: ThinStation ::</title>.*<h2>Thinstation ([\\w._-]+) on ([\\w._-]+) :: Main page</h2>|s p/ThinStation http admin/ v/$1/ o/Linux/ h/$2/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"ADSL Router \\(ANNEX B\\)\\\"\\r\\n.*<meta HTTP-EQUIV=\\\"Expires\\\" CONTENT=\\\"Mon, 06 Jan 1990 00:00:01 GMT\\\">.*<meta name=\\\"description\\\" content=\\\"806GA M 2073\\\">|s p/Allnet ALL0277DSL ADSL router http config/ d/broadband router/ cpe:/h:allnet:all0277dsl/a\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nDate: .*\\r\\nLocation: https://([\\w._-]+)/\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 56\\r\\n\\r\\n<HTML><BODY><H1>301 Moved Permanently</H1></BODY></HTML>$| p/VMware ESXi Server httpd/ h/$1/ cpe:/o:vmware:esxi/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"PCS-1 Web Control\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/([\\d.]+)\\r\\n|s p/Allegro RomPager/ v/$1/ i/Sony PCS-1 video conferencing http config/ d/webcam/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Ubicom/([\\d.]+)\\r\\n.*<title>D-Link Gaming Router :\\r\\n\\t\\t Login\\r\\n\\t</title>|s p/Ubicom/ v/$1/ i/D-Link DGL-4500 WAP http config/ d/WAP/ cpe:/h:dlink:dgl-4500/a\nmatch http m|^HTTP/1\\.1 307 Temporary Redirect\\r\\nConnection: keep-alive,close\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: http://([\\w._-]+)/servlet/StartServlet\\r\\nServer: PEWG/([\\d.]+)\\r\\n|s p/PEWG/ v/$2/ i/OCE print server/ d/print server/ h/$1/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\n.*www-authenticate:Basic realm=\\\"(\\w+)v(\\d+)POE \\(([0-9A-F]{12})\\)\\\"\\r\\n|s p/InterTel $1 VoIP phone http config/ i/firmware $2; MAC $3/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\n.*www-authenticate:Basic realm=\\\"(\\d+)i \\(([0-9A-F]{12})\\)\\\"\\r\\n|s p/InterTel $1 VoIP phone http config/ i/MAC $2/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\n.*www-authenticate:Basic realm=\\\"IP Resource Card \\(IPRC\\)\\(id=[0-9A-F]+\\)\\\"\\r\\n|s p/InterTel IPRC VoIP management card/ d/PBX/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>Ethernetov\\xfd teplom\\xecr TME od Papouch s\\.r\\.o\\.</title>|s p/Papouch TME Ethernet thermometer http interface/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: SMC Internet Update Manager\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text\\r\\nDate: .*\\r\\nContent-Length: 61\\r\\n\\r\\n<HTML>Avira Internet Update Manager ist betriebsbereit</HTML>$| p/Avira SMC Internet Update Manager/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Avira Update Manager\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text\\r\\nDate: .*\\r\\nContent-Length: 52\\r\\n\\r\\n<HTML>Avira Update Manager ist betriebsbereit</HTML>| p/Avira Update Manager/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nDate: .*\\r\\nLocation: https://([\\w._-]+)/\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/VMware ESX 3.5 Server httpd/ h/$1/ cpe:/o:vmware:esx:3.5/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: httpd\\r\\n.*<SCRIPT language=Javascript src=\\\"language_us\\.js\\\"></SCRIPT>.*<SCRIPT>assign_var\\(\\);</SCRIPT>.*<SCRIPT language=JavaScript src=\\\"showMenu\\.js\\\"></SCRIPT>.*<SCRIPT>|s p/DD-WRT milli_httpd/ i/Belkin F5D8235-4 WAP http config/ d/WAP/ cpe:/h:belkin:f5d8235-4/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>MiFi(\\d+) Mobile Hotspot</title><meta name=description content=Sprint020>|s p/Novatel MiFi $1 WAP http config/ d/WAP/ cpe:/h:novatel:mifi_$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Connection: keep-Alive\\r\\n.*<meta name=description content=VZ018>|s p/Verizon MiFi 2200 E7C5 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Connection: close\\r\\n.*<meta name=description content=VZ025>|s p/Verizon MiFi 4510L WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: fec/([\\w._-]+) \\(([^)]+)\\)\\r\\n.*<TITLE>Funkwerk (\\w+)-TTextil - Home Page</TITLE>|s p/fec/ v/$1/ i/Funkwerk bintec $3 router; $2/ d/router/ cpe:/h:funkwerk:bintec_$3/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: fec/([\\w._-]+) \\(([^)]+)\\)\\r\\n.*<title> Configuration </title>\\n</head>\\n<body onload=\\\"location\\.href='/esi/795104/esi\\.cgi\\?page=status-index\\.xml';\\\">|s p/fec/ v/$1/ i/Funkwerk bintec RS230a router; $2/ d/router/ cpe:/h:funkwerk:bintec_rs230a/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nServer: fec/([\\w._-]+) \\(([^)]+)\\)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 162\\r\\n.*<title> Configuration </title>\\n</head>\\n<body onload=\\\"location\\.href='/esi/787100/esi\\.cgi\\?page=status-index\\.xml';\\\">|s p/fec/ v/$1/ i/Funkwerk bintec R232B router; $2/ d/router/ cpe:/h:funkwerk:bintec_r232b/a\nmatch http m|^HTTP/1\\.1 200 OK\\n.*<TITLE>IOGEAR MF Print Server</TITLE>|s p/IOGear GMFPSU22W6 print server http config/ d/print server/ cpe:/h:iogear:gmfpsu22w6/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: httpd\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"DD-WRT\\\"\\r\\n|s p/DD-WRT milli_httpd/\nmatch http m|^HTTP/1\\.0 401 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: httpd\\r\\n.*<H4>401 Bad Request</H4>\\nCan't use wireless interface to access GUI\\.\\n</BODY></HTML>\\n$|s p/DD-WRT milli_httpd/\nmatch http m|^HTTP/1\\.0 302 Look here\\r\\nLocation: /rom/default\\.html\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Intermec P4i label printer http config/ d/printer/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nDate: .*\\d\\r\\nServer: quark-([\\w._-]+)\\r\\n| p/quark/ v/$1/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: GoAhead-Webs\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: http://([\\w._-]+)/login\\.asp\\r\\n|s p/GoAhead WebServer/ i/Sonitrol building access control system http config/ h/$1/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\n.*<P>Your request can't be recognized by Tvants Broadcast Server\\. Please visit <A href=\\\"http://www\\.tvants\\.com/\\\">www\\.tvants\\.com</A> for more information\\.</P>|s p/Tvants Broadcast Server httpd/ d/media device/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nSERVER: corega ([\\w-]+)\\r\\nCONTENT-LENGTH: 48\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n<html><body><h1>404 Not Found</h1></body></html>$| p/Corega $1 router http config/ d/router/\nmatch http m|^HTTP/1\\.0 200 Failed to find service name in request URI and no default service available\\r\\n.*x-trapeze-fault-response: y\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Trapeze-Srv/([\\d.]+)\\r\\n.*<SOAP-ENV:Fault rowsetMode=\\\"struct\\\" xmlns=\\\"http://www\\.trapezegroup\\.com/\\\"><faultcode tcftype='10'>SOAP-ENV:Client</faultcode><faultstring tcftype='10'>Failed to find service name in request URI and no default service available</faultstring><detail tcftype='10'></detail></SOAP-ENV:Fault>|s p/Trapeze-Srv/ v/$1/ i/Trapeze Mobile Data Terminal SOAP over HTTP/\nmatch http m|^HTTP/1\\.0 401 Default login not authorized to perform this action\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"/INOVAS/NovusDFM-trunk-[\\w-]+/Config/([\\w_.-]+)\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Trapeze-Srv/([\\d.]+)\\r\\n|s p/Trapeze-Srv/ v/$2/ i/Trapeze NOVUS http config/ h/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Trapeze-Srv/([\\d.]+)\\r\\n.*<TITLE>Trapeze Service Shell response</TITLE>|s p/Trapeze-Srv/ v/$1/ i/Trapeze Service Shell/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Trapeze-Srv/([\\d.]+)\\r\\n|s p/Trapeze-Srv/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?server: httpd\\.js\\r\\n.*<title>Songbird WebRemote</title>|s p/httpd.js/ i/Songbird WebRemote/\nmatch http m|^HTTP/1\\.0 302 Temporary moved\\r\\nContent-Length: 0\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nConnection: Close\\r\\nDate: .*\\r\\n(?:X-Frame-Options: SAMEORIGIN\\r\\n)?Location: https:///\\r\\n\\r\\n| p/Cisco ASA firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Baby Web Server\\r\\n| p/Baby Web Server/ o/Windows/ cpe:/o:microsoft:windows/a\n# BAIDA by Yandex (yandex.ru).\nmatch http m|^HTTP/1\\.1 \\d\\d\\d [^\\r\\n]*\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: BAIDA/([\\w._-]+)\\r\\n|s p/BAIDA/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: httpd\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"([^\"]+)\\\"\\r\\n|s p/DD-WRT milli_httpd/ h/$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: httpd\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"\\\"\\r\\n|s p/DD-WRT milli_httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<!--- Page\\(\\d+\\)=\\[Line Settings\\] --->.*<TITLE>Console Alice Access Gateway</TITLE>|s p/Alice Gate 2 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: alice_cookie_session_id=\\d+; path=/;\\r\\n.*<!--- Page\\(\\d+\\)=\\[Modem Alice\\] --->.*<TITLE>Alice Gate VOIP 2 plus Wi-Fi - Modem Alice</TITLE>|s p/Alice Gate VoIP 2 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: alice_cookie_session_id=\\d+; path=/;\\r\\n.*<!--- Page\\(9001\\)=\\[Stato Modem\\] --->.*<TITLE>Alice Gate VOIP 2 plus Wi-Fi - Stato Modem</TITLE>|s p/Alice Gate VoIP 2 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: cookie_session_id_0=\\d+; path=/;\\r\\n.*<!--- Page\\(\\d+\\)=\\[\\] --->.*<TITLE>Alice Gate 2 [Pp]lus - Stato [Mm]odem</TITLE>|s p/Alice Gate 2 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nPragma: no-cache\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Demo9\\\"\\r\\nContent-Type: text/html\\r\\nContent-Length: 236\\r\\n\\r\\n|s p/Tandberg codec T150 http config/ d/VoIP phone/ cpe:/h:tandberg:codec_t150/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: OTDAV/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Www-Authenticate: Digest realm=\\\"Olive Toast WebDAVServer\\\"|s p/Olive Toast WebDAVServer/ v/$1/ i/OTDAV; iPhone/ d/phone/\nmatch http m|^HTTP/1\\.0 302 Moved\\r\\nServer: HASP LM/([\\w._-]+)\\r\\nDate: .*\\r\\nLocation: /_int_/index\\.html\\r\\nContent-[Tt]ype: text/html\\r\\nContent-[Ll]ength: 106\\r\\n| p|Aladdin/SafeNet HASP license manager| v/$1/ o/Windows/ cpe:/a:safenet-inc:hasp_license_manager:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nServer: HASP LM/([\\w._-]+)\\r\\nDate: .*\\r\\nContent-[Tt]ype: text/html\\r\\nContent-[Ll]ength: 137\\r\\n\\r\\n<title>403 Forbidden</title>\\n<h1>403 Forbidden</h1>\\nAccess to this resource has been denied to you\\.\\n<p>Please contact the administrator\\.\\n$| p|Aladdin/SafeNet HASP license manager| v/$1/ o/Windows/ cpe:/a:safenet-inc:hasp_license_manager:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTT/1\\.0 401 Not Authorized\\r\\nServer: HASP LM/([\\w._-]+)\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"HASP License Manager\\\"\\r\\nContent-type: text/html\\r\\nContent-length: 151\\r\\n\\r\\n<title>401 Not Authorized</title>\\n<h1>401 Not Authorized</h1>\\nYou need proper authorization to use this resource\\.\\n<p>Please contact the administrator\\.\\n$| p/Sentinel HASP license manager/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\nDate: .*\\nServer: HASP Server/([\\d.]+) \\(MSWin32\\)\\nContent-Length: 95\\nConnection: close\\nContent-Type: text/html\\n\\n<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H2>400 - Bad Request</H2></BODY></HTML>$| p/Aladdin HASP license manager/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Mbedthis-Appweb/([\\d.]+)\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-length: 130\\r\\n\\r\\n<HTML><HEAD><TITLE>Document Error: Bad Request</TITLE></HEAD>\\r\\n<BODY><H2>Access Error: 400 -- Bad Request</H2>\\r\\n</BODY></HTML>\\r\\n\\r\\n$| p/Mbedthis-Appweb/ v/$1/ i/Dell iDRAC6 http config/ d/remote management/ cpe:/a:mbedthis:appweb:$1/ cpe:/h:dell:idrac6/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: httpd\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-length: 130\\r\\n\\r\\n<HTML><HEAD><TITLE>Document Error: Bad Request</TITLE></HEAD>\\r\\n<BODY><H2>Access Error: 400 -- Bad Request</H2>\\r\\n</BODY></HTML>\\r\\n\\r\\n$| p/Mbedthis-Appweb/ i/Dell iDRAC6 http config/ d/remote management/ cpe:/a:mbedthis:appweb/ cpe:/h:dell:idrac6/\nmatch http m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: \\r\\nDate: .*\\r\\nConnection: keep-alive\\r\\nKeep-Alive: timeout=60, max=2000\\r\\nContent-Type: text/html\\r\\nContent-length: 130\\r\\n\\r\\n<HTML><HEAD><TITLE>Document Error: Bad Request</TITLE></HEAD>\\r\\n<BODY><H2>Access Error: 400 -- Bad Request</H2>\\r\\n</BODY></HTML>\\r\\n\\r\\n$| p/Mbedthis-Appweb/ i/Thomson Technicolor broadband router http admin/ d/broadband router/ cpe:/a:mbedthis:appweb/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Mbedthis-Appweb/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://:443/start\\.html\\r\\n\\r\\n$|s p/Mbedthis-Appweb/ v/$1/ i/Dell iDRAC6 http config/ d/remote management/ cpe:/a:mbedthis:appweb:$1/ cpe:/h:dell:idrac6/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: micro_httpd\\r\\n.*<TITLE>Verizon</TITLE>.*<SCRIPT>\\nfunction fnGo\\(\\)|s p/micro_httpd/ i/Actiontec GT704-WGB ADSL WAP http config/ d/WAP/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: micro_httpd\\r\\n.*<title>Linksys Cable Modem : Status : Modem</title>|s p/micro_httpd/ i/Linksys BEFCMU10 cable modem http config/ d/broadband router/ cpe:/a:acme:micro_httpd/ cpe:/h:linksys:befcmu10/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Netgear\\\"\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\n\\r\\n<html><head><title>401 Unauthorized</title>.*<form name=\\\"RgAuthentication\\\" action=\\\"/goform/RgAuthentication\\\" method=\\\"POST\\\">|s p/Netgear CVG834G cable modem http config/ d/broadband router/ cpe:/h:netgear:cvg834g/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n.*<title>Hollis</title>.*<td id=b>Indoor</td><td id=c bgcolor=green>([\\d.]+)</td><td id=b>&deg;F</td></tr><tr><td id=b>Indoor Set Temp\\.</td><td id=c><input type=text name=setTemp size=10 maxlength=10 value=([\\d.]+)></td><td id=b>&deg;F&nbsp;<input type=submit name=7 value=\\\"Apply\\\"></td></tr><tr><td id=b>Outdoor temp</td><td id=c bgcolor=green>([\\d.]+)</td><td id=b>&deg;F</td></tr></table></form></body></html>$| p/ControlByWeb httpd/ i/Temperature (F): indoor $1 (set to $2), outdoor $3/ d/specialized/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: Thu, 26 Oct 1995 00:00:00 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: IPC@CHIP\\r\\n.*<TITLE>IPC@CHIP&reg; Main Page</TITLE>|s p/Beck IPC@CHIP embedded httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: IPC@CHIP\\r\\n.*<title>Start</title>|s p/Beck IPC@CHIP embedded httpd/ i/SolarLog 200 power monitor httpd/ d/power-misc/ cpe:/h:solarlog:200/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Z-World Rabbit\\r\\n.*<TITLE>EC3 332 \\(Rev\\. (\\d+)\\) Web Configuration and Monitoring</TITLE>|s p/Z-World Rabbit microcontroller httpd/ i/Emerson EC3 332 coldroom controller rev. $1/ d/specialized/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Z-World Rabbit\\r\\n.*<title>(CPON-[\\w._-]+)</title>|s p/Z-World Rabbit microcontroller httpd/ i/Advanced Media Technologies $1 optical TV node/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: http server/everfocus\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"0;url=/login\\.html\\?1600&1\\\">|s p/Everfocus webcam http config/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Netwave IP Camera\\r\\n| p/Netwave IP camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<TITLE>&nbsp; &nbsp; &nbsp; ETHM-1 &nbsp; &nbsp; &nbsp; </TITLE>|s p/Satel ETHM-1 alarm control unit/ d/specialized/\n\nmatch http m|^HTTP/1\\.1 [25]00 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: KM-MFP-http/V([\\d.]+)\\r\\n|s p/Kyocera MFP httpd/ v/$1/ d/printer/\n\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: dcs-lig-httpd\\r\\n|s p/D-Link DCS-2121 webcam http config/ d/webcam/ cpe:/h:dlink:dcs-2121/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Date: \\d\\d\\d\\d-\\d\\d-\\d\\d [^\\r\\n]*\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: IWeb/([\\d.]+)\\r\\n.*<title>VisionWEB</title>.*<meta name=\\\"AUTHOR\\\" content=\\\"Insignis Technologies\\\" />.*<meta name=\\\"DESCRIPTION\\\" content=\\\"Linearis VisionWEB\\. Cieffe srl, manufactures and markets CCTV digital video recorders and Remote Surveillance products for the security market\\\" />|s p/IWeb/ v/$1/ i/March Networks VisionWEB webcam http config/ d/webcam/\nmatch http m|^HTTP/1\\.1 401 Not Authorized\\r\\nWWW-Authenticate: Basic realm=\\\"Communicator Jablotron (\\w+)\\\"\\r\\n\\r\\n| p/Jablotron $1 alarm http control/ d/security-misc/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"(ES-\\w+) at [^\"]*\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/([\\w.]+)\\r\\n|s p/Allegro RomPager/ v/$2/ i/ZyXEL $1 switch http config/ d/switch/ cpe:/a:allegro:rompager:$2/ cpe:/h:zyxel:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: uhttpd/([\\w._-]+)\\r\\n.*<title>NETGEAR Router ([\\w._-]+) </title>|s p/uhttpd/ v/$1/ i/Netgear $2 WAP http config/ d/WAP/ cpe:/h:netgear:$2/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: uhttpd/([\\w._-]+).*WWW-Authenticate: Basic realm=\\\"NETGEAR ([\\w-]+)\\\"\\r\\n|s p/uhttpd/ v/$1/ i/Netgear $2 WAP http config/ d/WAP/ cpe:/h:netgear:$2/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Serv-U/([\\w._-]+)\\r\\n| p/Rhinosoft Serv-U httpd/ v/$1/ cpe:/a:serv-u:serv-u:$1/\nmatch http m|^HTTP/1\\.1 302 Redirection\\r\\nServer: BlueIris-HTTP/([\\d.]+)\\r\\n| p/BlueIris/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: basic realm=\\\"Protected area\\\"\\r\\n.*<title>401 Unauthorized</title>\\n.*<!-- Padding: \\n        #############################################\\n|s p/Breach ModSecurity Apache monitor httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: CSPSESSIONID=\\d+; path=/;\\r\\nCACHE-CONTROL: no-cache\\r\\nCONNECTION: Close\\r\\n.*<!-- Copyright \\(c\\) 2002 InterSystems Inc\\. ALL RIGHTS RESERVED\\. -->.*<b>CSP Error</b>|s p/InterSystems Cache Objects httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: application/octet-stream\\r\\nCache-Control: no-cache\\r\\n\\r\\nOggS| p/VLC media streaming httpd/ i/Ogg/ cpe:/a:videolan:vlc_media_player/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: 334\\r\\n\\r\\n<\\?xml version='1\\.0'\\?>\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" xml:lang=\\\"en\\\" lang=\\\"en\\\"><head><meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\"/></head><body><h1>404 Not Found</h1></body></html>$| p/ejabberd http admin/ cpe:/a:process-one:ejabberd/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: 330\\r\\n\\r\\n<\\?xml version='1\\.0'\\?>\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\n<html xmlns='http://www\\.w3\\.org/1999/xhtml' xml:lang='en' lang='en'><head><meta http-equiv='Content-Type' content='text/html; charset=utf-8'/></head><body><h1>Not found</h1></body></html>$| p/ejabberd http admin/ cpe:/a:process-one:ejabberd/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Asterisk/([\\w._+-]+)\\r\\n| p/Asterisk/ v/$1/ d/PBX/ cpe:/a:digium:asterisk:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: SMART Web Server\\r\\n.*<title>SMART Technologies Connected SMART Interactive Products</title>.*SMART Room: ([\\w_.-]+)</H2>|s p/SMART Web Server/ i/SMART Board whiteboard http config/ h/$1/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Firefly Media Server/([^\\r\\n]+)\\r\\n|s p/Firefly Media Server http config/ v/$1/ cpe:/a:fireflymediaserver:firefly_media_server:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AvatronHTTP \\(com\\.avatron\\.AirSharing,([\\d.]+)\\)\\r\\n|s p/AvatronHTTP/ v/$1/ i/Air Sharing app/ d/phone/ o/iOS/ cpe:/o:apple:iphone_os/a\n# https://git.torproject.org/checkout/tor/master/doc/spec/dir-spec.txt\nmatch http m|^HTTP/1\\.0 503 Directory unavailable\\r\\n\\r\\n| p/Tor directory/ cpe:/a:torproject:tor/\n# DirPortFrontPage set in torrc.\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: (?:[^\\r\\n]*r\\n(?!\\r\\n))*?Content-Type: text/html\\r\\nContent-Encoding: identity\\r\\nContent-Length: \\d+\\r\\nExpires: .*\\r\\n\\r\\n| p/Tor directory/ cpe:/a:torproject:tor/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Zarafa iCal Gateway ([^\\r\\n]+)\\r\\n|s p/Zarafa iCal Gateway httpd/ v/$1/ cpe:/a:zarafa:zarafa:$1/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nLocation: https?://([\\w._-]+):(\\d+)/symantec\\.html\\r\\nContent-Length: 0\\r\\n| p/Symantec Endpoint Protection Manager httpd/ i/redirect to port $2/ h/$1/ cpe:/a:symantec:endpoint_protection_manager/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nSet-Cookie: JSESSIONID=\\w+; Path=/; Secure; HttpOnly\\r\\n.*<title>Symantec Endpoint Protection Manager</title>|s p/Symantec Endpoint Protection Manager httpd/ cpe:/a:symantec:endpoint_protection_manager/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: UOS\\r\\n.*<title>3Com Log On</title>|s p/3Com X5 Unified Security Platform IPS http config/ d/security-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: UOS\\r\\n.*<title>TippingPoint Log On</title>\\r\\n<meta http-equiv=\\\"Cache-Control\\\" content=\\\"no-store\\\" />.*<!--\\r\\n////////////////////////////////////////////\\r\\n// Copyright TippingPoint 2002, 2003, 2004 and 2005\\r\\n|s p/HP TippingPoint 110 or 1200E IPS http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: UOS\\r\\n.*<title>TippingPoint Log On</title>\\n<meta http-equiv=\\\"Cache-Control\\\" content=\\\"no-store\\\" />.*<!--\\n////////////////////////////////////////////\\n// Copyright TippingPoint 2002, 2003, 2004 and 2005\\n|s p/HP TippingPoint 1200E or 5000E IPS http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: UOS\\r\\n.*<title>TippingPoint Log On \\x7c LSM - Device \\(tp\\)</title>\\r\\n\\r\\n<meta http-equiv=\\\"Cache-Control\\\" content=\\\"no-store\\\" />.*<!--\\r\\n////////////////////////////////////////////\\r\\n// Copyright TippingPoint 2002, 2003, 2004 and 2005\\r\\n|s p/HP TippingPoint 10 IPS http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: SpaceMon/([\\d.]+)\\r\\n.*<TITLE>SpaceMon</TITLE>.*SpaceMon Administrator: ([^<]*)<BR>|s p/IPWorx SpaceMon storage monitor httpd/ v/$1/ i/administrator: $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.[01] 400 Bad Request\\r\\nServer: CloudFront\\r\\n| p/Amazon CloudFront httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Freetz \\(([\\w._-]+):([\\w._-]+)\\)\\\"\\r\\n.*<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY><H1>401 Unauthorized</H1>\\n\\n</BODY></HTML>\\n|s p/BusyBox httpd/ i/Freetz firmware for AVM FRITZ!Box; login $1:$2/ d/WAP/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-type: text/html\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"GeneralUser/Administrator\\\"\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H2>401 Unauthorized</H2>\\n<HR>\\nAuthorization required for the URL '/'\\.\\n</BODY></HTML>\\n$| p/thttpd/ i/Panasonic BB-HCM511A Network camera http config/ d/webcam/ cpe:/a:acme:thttpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"router\\\"\\r\\n.*<h2>401 Unauthorized<h2>\\n  <p>\\n  Authorization required for the URL\\.\\n</body>\\n</html>\\n|s p/thttpd/ i/Linksys RV082 WAP http config/ d/WAP/ cpe:/a:acme:thttpd/ cpe:/h:linksys:rv082/\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Unknown\\r\\n.*<TITLE> Guardian Digital WebTool Login </TITLE>|s p/EnGuarde Linux Guardian Digital Webtool http admin/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Apache\\r\\nContent-Type: text/html\\r\\nContent-Length: 3587\\r\\nConnection: close\\r\\n\\r\\n\\n<html>\\n<head>\\n<!-- \\n     Copyright \\(C\\) 2005-2006 Aviv Raff \\(with minor modifications by HDM for the MSF module\\)\\n     From: http://aviv\\.raffon\\.net/2005/12/11/MozillaUnderestimateVulnerabilityYetAgainPlusOldVulnerabilityNewExploit\\.aspx\\n     Greets: SkyLined, The Insider and shutdown \\n-->| p|Metasploit multi/browser/mozilla_compareto exploit|\nmatch http m|^HTTP1\\.1 200 OK\\r\\nServer: WIBU-SYSTEMS HTTP Server/ Version ([^\\r\\n]*)\\r\\n| p/WIBU-SYSTEMS HTTP Server/ v/$1/ i/CodeMeter copy prevention dongle http config/ d/specialized/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AppleIDiskServer-([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"([\\w._-]+)\\\"\\r\\n|s p/Apple iDisk Server/ v/$1/ i/online storage access/ h/$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ASSP/([^\\r\\n]+)\\n|s p/ASSP Anti-Spam Proxy httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://([\\w._-]+)/[^\\r\\n]*\\r\\n.*<TITLE>Novell iChain</TITLE>|s p/Novell iChain http admin/ o/NetWare/ h/$1/ cpe:/a:novell:ichain/ cpe:/o:novell:netware/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Connection: Keep-Alive\\r\\nKeep-Alive: timeout=5, max=100\\r\\n.*<HTML>\\r\\n<HEAD>\\r\\n<TITLE></TITLE>\\r\\n<SCRIPT ID=clientEventHandlersJS LANGUAGE=javascript>\\r\\n<!--\\r\\nfunction loadpasswd\\(\\)\\r\\n{\\r\\n\\ttop\\.location = \\\"index\\.htm\\\"\\r\\n}\\r\\nsetTimeout\\(\\\"loadpasswd\\(\\)\\\",1\\);\\r\\n//-->\\r\\n</SCRIPT>\\r\\n</HEAD>\\r\\n<BODY>\\r\\n</BODY>\\r\\n</HTML>\\r\\n$|s p/GoldStar iPECS 50B PBX http config/ d/PBX/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nSet-Cookie: JSESSIONID=[0-9A-F]+; Path=/; Secure\\r\\n.*<title>VMware View Portal</title>|s p/VMware View Manager httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nSet-Cookie: JSESSIONID=[0-9A-F]+; Path=/; Secure; HttpOnly\\r\\n.*<title>VMwareView Portal</title>|s p/VMware View Manager httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\ncache-control: no-cache\\r\\nContent-Length: \\d+\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nSet-Cookie: JSESSIONID=[0-9A-F]+; Path=/; Secure.*<title>VMware View Portal</title>|s p/VMware View Manager httpd/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .* GMT\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>VMware View</title>| p/VMware View Manager httpd/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nServer: Norman Security/([\\d.]+)\\r\\nContent-Type: text/html\\r\\nConnection: Close\\r\\nContent-Length: 90\\r\\n\\r\\n<html><title>Norman Security Error</title><body><br><h2>403 - Forbidden</h2></body></html>$| p/Norman Security Endpoint Protection httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Norman Security/([\\d.]+)\\r\\n.*<html><title>Norman Security Error</title><body><br><h2>401 - Unauthorized</h2></body></html>$|s p/Norman Security Endpoint Protection httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<!-- \\$Header: index\\.html 115\\.2 2003/03/18 21:32:39 hfux ship \\$ -->.*<TITLE>Oracle Applications Rapid Install</TITLE>|s p/Oracle Rapid Install httpd/\n\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: [^\\r\\n]+\\r\\n(?:Connection: \\S+)?\\r\\nContent-Type: text/html\\r\\n(?:X-Frame-Options: DENY\\r\\n)?Content-Length: \\d+\\r\\n\\r\\n.*<meta name=\"description\" content=\"VMware Converter\">|s p/VMware vCenter Converter httpd/ v/4/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: [^\\r\\n]+\\r\\n(?:Connection: \\S+)?\\r\\nContent-Type: text/html\\r\\n(?:X-Frame-Options: DENY\\r\\n)?Content-Length: \\d+\\r\\n\\r\\n.*<meta name=\"description\" content=\"VMware vSphere|s p/VMware vSphere http config/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: [^\\r\\n]+\\r\\n(?:Connection: \\S+)?\\r\\nContent-Type: text/html\\r\\n(?:X-Frame-Options: DENY\\r\\n)?Content-Length: \\d+\\r\\n\\r\\n.*<meta name=\"description\" content=\"VMware vCenter Converter Standalone\">|s p/VMware vCenter Converter httpd/ v/4.3/\n\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: 273\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>Root Index</TITLE></HEAD><BODY><UL><LI><A HREF=\\\"/ccm-notify\\\">/ccm-notify</A></LI>\\r\\n<LI><A HREF=\\\"/ccm-proxy\\\">/ccm-proxy</A></LI>\\r\\n<LI><A HREF=\\\"/ccm-update\\\">/ccm-update</A></LI>\\r\\n<LI><A HREF=\\\"/config_public/\\\">/config_public/</A></LI>\\r\\n</UL></BODY></HTML>\\r\\n$| p/RSA SecurID 2.0 RADIUS http config/ d/security-misc/ cpe:/h:rsa:securid:2.0/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: LapLink ([\\d.]+)\\r\\n|s p/Laplink file transfer httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\n\\n<HTML>\\n<HEAD>\\n<TITLE>[\\w._-]+ - Hallo!</TITLE>| p/Xrelayd SSL engine httpd/ i/OpenWrt/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: jToolkitHTTP/([\\w._-]+) Python/([\\d.]+)\\r\\n| p/jToolkit web framework httpd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: PureMessage Web Server\\r\\n|s p/Sophos PureMessage spam filter http interface/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: iCanWebServer/([\\d.]+)\\r\\n.*<TITLE>Network Camera Viewer</TITLE>|s p/iCanWebServer/ v/$1/ d/webcam/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://([\\w._-]+):(\\d+)/zimbra/\\r\\n|s p/Zimbra http config/ i/redirect to https on port $2/ h/$1/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\n(?:Date: .*\\r\\n)?Expires: .*\\r\\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\\r\\nPragma: no-cache\\r\\n(?:X-Frame-Options: SAMEORIGIN\\r\\n)?Content-Type: text/html; charset=[Uu][Tt][Ff]-8\\r\\nContent-Language: en-US\\r\\nLocation: https://[^/]+/[^?]*\\?zinitmode=http\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Zimbra http config/ i/redirect to https/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch http m|^HTTP/1\\.0 400 String index out of range: -1\\r\\nContent-Type: text/html\\r\\n\\r\\n$| p/Bluecat Networks Proteus IPAM or Enterasys Dragon IDS http config/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 302 Found\\r\\ncontent-type: text/html;charset=utf8\\r\\ncache-control: no-cache\\r\\ncontent-length: 0\\r\\nlast-modified: .*\\r\\ndate: .*\\r\\nconnection: close\\r\\nlocation: /login\\?continue=%2f\\r\\n\\r\\n$| p/Alterator remote management httpd/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Alfred/([\\d.]+)\\r\\n|s p/Alfred RenderMan control httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AXIS ThinWizard/v([\\d.]+)\\r\\n|s p/AXIS ThinWizard printer management httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: <xxxx>\\r\\nContent-Length: 1057\\r\\n.*<TITLE>Bad Browser</TITLE>|s p/Siemens HG 1500 router http config/ cpe:/h:siemens:hg_1500/a\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/([\\d.]+)\\r\\n.*Correct authorization is required for this area\\. Either your browser does not perform authorization, or your authorization has failed\\. RomPager server by Digest Access Authentication, which is not supported by your browser\\.<P>\\nReturn to <A HREF=\\\"\\\">last page</A><P>\\n\\n</BODY>\\n</HTML>\\n$|s p/AudioCodes Mediant 200 VoIP gateway http config/ d/VoIP adapter/ cpe:/a:allegro:rompager:$1/ cpe:/h:audiocodes:mediant_200/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WHC chatroom\\r\\n| p/Fifi chat server http interface/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Xunlei Http Server/([\\d.]+)\\r\\n| p/Xunlei BitTorrent http interface/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<\\?xml version=\\\"1\\.0\\\" encoding=\\\"utf-8\\\"\\?>\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" xmlns:v=\\\"urn:schemas-microsoft-com:vml\\\" xml:lang=\\\"en\\\" lang=\\\"en\\\">\\n  <head>\\n    <!--\\n    ShellInABox - Make command line applications available as AJAX web applications\\n|s p/ShellInABox httpd/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: Java/([-\\d_.]+) javax\\.wbem\\.client\\.adapter\\.http\\.transport\\.HttpServerConnection\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Solaris WBEM web management httpd/ i/Java $1/ o/Solaris/ cpe:/a:sun:jre:$1/ cpe:/o:sun:sunos/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<TITLE>MGI ZOOM Image Server</TITLE>.*Version: ([^\\n]*)\\n\\t\\tBuild: (\\d+)<build/><BR>\\n|s p/Zoom Image Server httpd/ v/$1 build $2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: upshttpd/([\\d.]+)\\r\\n| p/upshttpd/ v/$1/ i/Effekta UPS http config/ d/power-device/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: ZNC ZNC ([\\d.]+) - by prozac@rottenboy\\.com\\r\\n| p/ZNC IRC bouncer http config/ v/$1/ cpe:/a:znc:znc:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: (?:ZNC )?ZNC ([-\\w_.+]+) (?:by prozac )?- http://znc\\.sourceforge\\.net\\r\\n| p/ZNC IRC bouncer http config/ v/$1/ cpe:/a:znc:znc:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: ZNC ([\\w_.+-]+) - http://znc\\.sourceforge\\.net\\r\\n| p/ZNC IRC bouncer httpd/ v/$1/ cpe:/a:znc:znc:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: ZNC - http://znc\\.sourceforge\\.net\\r\\n| p/ZNC IRC bouncer httpd/ v/0.090 - 0.096/ cpe:/a:znc:znc/\n# https://github.com/znc/znc/commit/087f01e99b9a1523a2962e05e4e878de0a41a367 - configure.ac.\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ZNC - http://znc\\.in\\r\\n|s p/ZNC IRC bouncer http config/ v/0.097 or later/ cpe:/a:znc:znc/\nmatch http m|^HTTP/1\\.0 403 Access Denied\\r\\n\\r\\nWeb Access is not enabled\\.\\r\\n$| p/ZNC IRC bouncer http config/ i/not enabled/ cpe:/a:znc:znc/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .* GMT\\r\\nServer: ZNC (?:- )?([\\w._-]+) - http://znc\\.in\\r\\n| p/ZNC IRC bouncer web ui/ v/$1/ cpe:/a:znc:znc:$1/\nmatch http m|^HTTP/1\\.0 404 <no description>\\r\\nDate: .*\\r\\nServer: XMLD HTTPServer/([\\d.]+)\\r\\n\\r\\n$| p/XMLD HTTPServer/ v/$1/ i/Citrix XML Service/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Mono\\.WebServer2/([\\w._-]+) Unix\\r\\nX-AspNet-Version: ([\\d.]+)\\r\\n|s p/Mono.WebServer2/ v/$1/ i/MonoDoc httpd; ASP.NET $2/ o/Unix/ cpe:/a:microsoft:asp.net:$2/ cpe:/a:mono:xsp:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n.*WWW-Authenticate: Basic realm=\\\"Cayman-([\\w]+)\\\"\\r\\n.*Server: Allegro-Software-RomPager/([\\d.]+)\\r\\n| p/Allegro RomPager/ v/$2/ i/Cayman $1 DSL router/ d/broadband router/ cpe:/a:allegro:rompager:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: Thu, 26 Oct 1995 00:00:00 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/([\\w._-]+)\\r\\n.*<PRE>\\*{60}<BR>\\* WARNING ALERT: AUTHORIZED USERS ONLY! +\\*<BR>\\* +\\*<BR>\\* All activities conducted on this system may be monitored \\*<BR>|s p/Allegro RomPager/ v/$1/ i/NetIron XMR 4000 router http config/ d/router/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: 2NAS_LIGHT\\r\\n|s p/2NAS_LIGHT/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: sfcHttpd\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/sfcHttpd/ i/VMware Studio VAMI CIM broker/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: BLOBJ\\.httpd\\r\\n.*<meta name='generator' content='BLOBJ WE ([\\d.]+)'>|s p/BLOBJ.httpd/ i/BLOBJ Web Edition $1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: THEO\\+Server/([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"THEOS Web-based Maintenance\\\"\\r\\n|s p/THEO+Server/ v/$1/ i/THEOS Corona http config/ o/THEOS/ cpe:/o:theos:theos/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: CouchDB/([\\w._-]+) \\(Erlang ([^)]*)\\)\\r\\n| p/CouchDB httpd/ v/$1/ i/Erlang $2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"[\\w._-]+\\\"\\r\\nServer: CouchDB/([\\w._-]+) \\(Erlang ([^)]*)\\)\\r\\n| p/CouchDB httpd/ v/$1/ i/Erlang $2; unauthorized/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Httpd-Webs\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Linksys (WR[\\w+]+) ver\\. (\\d+)\\\"\\r\\n|s p/Linksys $1v$2 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 204 No Content\\r\\nConnection: close\\r\\nServer: AChat\\r\\n\\r\\n| p/AChat chat system httpd/\nmatch http m|^HTTP/1\\.0 200\\r\\n.*<title>AVTECH Software, Inc\\. - TemPageR (\\w+) - Real-Time Temperature Monitor For IT &amp; Facilities Environment Monitoring</title>|s p/Avtech TemPageR $1 temperature monitor httpd/\nmatch http m|^HTTP/1\\.0 403 Access denied\\.  Please consult the http-access directive in the User's Guide for more information\\.\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body>Access denied\\.  Please consult the http-access directive in the User's Guide for more information\\.</body></html>\\r\\n$| p/Port25 PowerMTA mail gateway http admin/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: https?:///logon\\.htm\\r\\nContent-Length: 0\\r\\nServer: Intel\\(R\\) Active Management Technology ([\\w._-]+)\\r\\n\\r\\n$| p/Intel Active Management Technology User Notification Service http admin/ v/$1/ cpe:/h:intel:active_management_technology:$1/\nmatch http m|^HTTP/1\\.1 303 See Other\\r\\nLocation: /logon\\.htm\\r\\nContent-Length: 0\\r\\nServer: Intel\\(R\\) Active Management Technology ([\\w._-]+)\\r\\n\\r\\n| p/Intel Active Management Technology User Notification Service httpd/ v/$1/ cpe:/h:intel:active_management_technology:$1/\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nContent-type: text/HTML\\r\\nAllow: POST\\r\\nContent-Length: 43\\r\\nServer: ChapuraSyncMgrServer/([\\w._-]+)\\r\\nDate: .*\\r\\n\\r\\n<html><h1>Invalid Method</h1><hr>GET</html>$| p/Chapura SyncManager httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\n\\r\\n<html>\\n<head>\\n<meta http-equiv=\\\"Content-type\\\" content=\\\"text/html; charset=iso-8859-1\\\">\\n<title>Client Authentication</title>| p|Check Point VPN-1/UTM NGX firewall http admin| v/R70/ d/firewall/ cpe:/a:checkpoint:connectra_ngx:r70/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 82\\r\\n\\r\\n<HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY>unknown uri in pks request</BODY>\\r\\n$| p/Seahorse http keyserver/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/xml; charset=utf-8: \\r\\nConnection: close\\r\\n\\r\\n.*<ModelName>([^<]*)</ModelName><FirmwareVersion>([^>]*)</FirmwareVersion>|s p/D-Link $1 WAP Home Network Administration Protocol (SOAP over HTTP)/ v/$2/ cpe:/h:dlink:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: KM_HTTP-Server/([\\d.]+)\\r\\n.*<title>Kyocera Command Center</title>|s p/KM_HTTP-Server/ v/$1/ i/Kyocera 4050 printer http config/ cpe:/h:kyocera:4050/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Apache/0\\.6\\.5\\r\\n.*<title>Web Server . Gigaset (\\S+) WLAN dsl</title>|s p/Siemens Gigaset $1 WAP http config/ d/WAP/ cpe:/h:siemens:gigaset_$1/a\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nServer: Apache/0\\.6\\.5\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: /relink_web\\.stm|s p/Siemens Gigaset WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Apache/0\\.6\\.5\\r\\n.*src=\"top\\.stm\\?pn1=ho3\\.gif&pn2=ad1\\.gif\"|s p/Philips SNB5600 WAP http config/ d/WAP/ cpe:/h:philips:snb5600/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Apache/0\\.6\\.5\\r\\n.*var PM=\"BBR-4MG\";\\n|s p/SMC7908VoWBRA ADSL router http config/ d/broadband router/\nmatch http m=^HTTP/1\\.[01] 302 .+(Location|LOCATION): .+/UE/welcome_login\\.html=s p/Allegro RomPager/ i/Siemens Gigaset SX762 WAP http config/ d/WAP/ cpe:/a:allegro:rompager:$1/ cpe:/h:siemens:gigaset_sx762/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*<title>Welcome to eDR400--login</title>|s p/EverFocus PowerPlex eDR400 security camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.[01] 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\"NETGEAR (WNR\\w+)\"\\r\\n| p/Netgear $1 WAP http config/ d/WAP/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.[01] 302 Redirect\\r\\nSet-Cookie: CrushAuth=| p/CrushFTP httpd/ cpe:/a:crushftp:crushftp/\nmatch http m|^HTTP/1\\.[01] 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\"(WGR\\w+)\"\\r\\n| p/Netgear $1 WAP http config/ d/WAP/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n.*Server: NetIXServer \\(([\\d\\.]+)\\)\\r\\n| p/NetIXServer http admin/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\nWWW-Authenticate: Digest realm=\"i3micro VRG\", nonce=\"\\d+\", qop=\"auth\", algorithm=MD5| p/i3micro VRG VoIP adapter http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: /control/userimage.html\\r\\n| p/Mobotix Camera http config/ d/webcam/\nmatch http m|^HTTP/1.0 401 Unauthorized\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Microsoft-WinCE/5.0\\r\\nSet-Cookie: .*\\r\\nWWW-Authenticate: Basic Realm=\"Kesseltronics\"| p/Kesseltronics car wash tunnel http config/ d/specialized/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1.0 200\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\r\\n<head><title>BARIX Instreamer| p/Barix Instreamer audio encoder http config/ d/media device/\nmatch http m|^HTTP/1.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\"PortServer (TS \\w+)\"| p/Digi Portserver $1 terminal server http config/ d/terminal server/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Mbedthis-Appweb/([\\w.-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n\\n<HTML>\\n<HEAD>\\n  <META HTTP-EQUIV=\\\"Refresh\\\" CONTENT=\\\"0; URL=/esp/login\\.esp\\\">\\n</HEAD>\\n<BODY>\\n</BODY>\\n</HTML>\\n\\n$|s p/Mbedthis-Appweb/ v/$1/ i/PA-4050 firewall http config/ d/firewall/ cpe:/a:mbedthis:appweb:$1/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><h3>Error: Bad HTTP Request</h3></BODY></HTML>$| p/ZoneAlarm Z100G firewall http config/ d/firewall/ cpe:/h:zonealarm:z100g/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server:  \\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<html>\\n<head>\\n<title>ZyWALL ([\\w -]+)</title>\\n|s p/ZyXEL ZyWALL $1 firewall http config/ d/firewall/ cpe:/h:zyxel:zywall_$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: ALPHA-WebServer/([\\w.]+)\\r\\n| p/ALPHA-WebServer/ v/$1/\n# EqualLogic PeerStorage PS100E iSCSI storage array running firmware v4.1.4.\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\w.]+)\\r\\n.*<title>vmgrp1 Group Manager</title>\\n|s p/RapidLogic httpd/ v/$1/ i/EqualLogic PeerStorage PS100E NAS device/ d/storage-misc/ cpe:/a:rapidlogic:httpd:$1/\n# EqualLogic PeerStorage PS100E iSCSI storage array running firmware 2.3.6.\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\w.]+)\\r\\n.*<title>nwkgrp2 Group Manager</title>\\n|s p/RapidLogic httpd/ v/$1/ i/EqualLogic PeerStorage PS100E NAS device/ d/storage-misc/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: rg_cookie_session_id=\\d+; path=/; expires=Fri, 01 Jan 2038 00:00:00 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: http://[\\w._-]+:(\\d+)/index\\.cgi\\?active%5fpage=9069&req%5fmode=0&strip%5fpage%5ftop=0\\r\\n|s p/Pirelli DRG A125G WAP http config/ i/redirect to port $1/ d/WAP/ cpe:/h:pirelli:drg_a125g/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nServer: jDownloader HTTP Server\\r\\nContent-Type: text/html\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/jDownloader httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nServer: jDownloader HTTP Server\\r\\nContent-Type: text/html\\r\\nContent-Length: 46\\r\\n\\r\\nJDRemoteControl - Malformed Request\\. use /help$| p/jDownloader httpd/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"JDownloader\\\"\\r\\n\\r\\n$| p/jDownloader httpd/ i/unauthorized/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: lwIP/([\\w._-]+) \\(http://www\\.sics\\.se/~adam/lwip/\\)\\r\\n.*<title>Stellaris&reg; ([\\w._-]+) Evaluation Kit</title>|s p/lwIP/ v/$1/ i/Stellaris $2 microcontroller/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: .*\\r\\nDate: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\n\\r\\n<!--- Page\\(\\d+\\)=\\[Ouverture de session\\] ---><HTML><HEAD><SCRIPT language=\\\"Javascript\\\"><!--\\n/\\*\\n \\* A JavaScript implementation of the RSA Data Security, Inc\\. MD5 Message\\n \\* Digest Algorithm, as defined in RFC 1321\\.\\n \\* Version 2\\.1 Copyright \\(C\\) Paul Johnston 1999 - 2002\\.\\n \\* Other contributors: Greg Holt, Andrew Kepert, Ydnar, Lostinet\\n \\* Distributed under the BSD License\\n \\* See http://pajhome\\.org\\.uk/crypt/md5 for more info\\.\\n \\*/\\n\\n| p/Sagem Livebox WAP http config/ d/WAP/\nmatch http m%^HTTP/1\\.0 200 OK\\r\\n.*<title>(?:Livebox|HNM)</title>\\n\\t\\t<meta http-equiv=\\\"content-type\\\" content=\\\"text/html; charset=UTF-8\\\">\\n\\t\\t<meta http-equiv=\\\"Content-language\\\" content=\\\"fr\\\">\\n\\t\\t<meta name=\\\"author\\\" content=\\\"Nicolas VIVIEN\\\">\\n\\t\\t<meta name=\\\"Copyright\\\" content=\\\"SAGEM COMMUNICATIONS\\\">%s p/Sagem Livebox WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nDate: .*\\r\\nConnection: close\\r\\nLocation: index\\.htm\\r\\nServer: WMI (V[\\w._-]+)\\r\\n\\r\\n$| p/WMI/ v/$1/ i/3Com 5500G-EI switch http config/ d/switch/ cpe:/h:3com:5500g-ei/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: W3MFC/([\\w._-]+)\\r\\nAllow: GET, POST, HEAD\\r\\n.*<TITLE>Lan2net Statistics</TITLE>|s p/W3Mfc/ v/$1/ i/Lan2net firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html;charset=utf-8\\r\\n(?:[^\\r\\n]+\\r\\n)*?Mime-Version: 1\\.0\\r\\n.*<title>FRITZ!WLAN Repeater</title>|s p|FRITZ!WLAN Repeater N/G http config| d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; Charset=UTF-8;\\r\\n\\r\\n<html><title>Installed templates</title>.*<a href=\\\"/foobar2000controller/index\\.html\\\">foobar2000controller</a>| p/foobar2000 media player http config/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html; Charset=UTF-8\\r\\nConnection: close\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\">\\r\\n<html><head><title>(.*) - foobar2000</title>|s p/foobar2000 media player httpd/ i/now playing: $1/\nmatch http m|^HTTP/1\\.1 301 Redirection\\r\\nServer: Cegid-WEB-Access-Server/([\\w._-]+)\\r\\n| p/Cegid-WEB-Access-Server/ v/$1/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: micro_httpd\\r\\n.*<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" xml:lang=\\\"it\\\" lang=\\\"it\\\">\\n<head>\\n\\t<title>Vodafone</title>|s p/micro_httpd/ i/Vodafone Station WAP http config/ cpe:/a:acme:micro_httpd/\nmatch http m=^<html>\\n<head>\\n<title>TRENDnet \\| (TEG-\\w+) \\| Login</title>= p/TRENDnet $1 switch http config/ d/switch/ cpe:/h:trendnet:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Web Server\\r\\n.*top\\.location\\.href = \\\"/hp_login\\.html\\\";\\r\\n</script>\\r\\n\\r\\n\\r\\n<BODY style=\\\"text-align: center\\\" onload=\\\"document\\.forms\\[0\\]\\.login\\.focus\\(\\);CheckError\\(\\)\\\">\\r\\n<FORM METHOD=\\\"POST\\\" ACTION=\\\"/hp_login\\.html\\\">|s p/HP Procurve 1810G switch http config/ d/switch/ cpe:/h:hp:procurve_switch_1810g/ cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.0 302\\r\\nLocation: /Portal0000\\.htm\\r\\n.*<HTML><HEAD><TITLE>Error</TITLE></HEAD>\\r\\n<BODY><CENTER><H2>/<BR><BR>302 : MOVED TEMPORARILY</H2></CENTER></BODY></HTML>$|s p/Siemens Simatic S7-300 PLC httpd/ d/specialized/\nmatch http m|^HTTP/1\\.0 302 Object Moved\\r\\nContent-Type:text/html\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nLocation: /Default\\.mwsl\\r\\n\\r\\n$| p/Siemens Simatic S7-1200 PLC httpd/ d/specialized/\nmatch http m|^HTTP/1\\.0 302 Object Moved\\r\\nContent-Type:text/html\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nLocation: /Default\\.html\\r\\n\\r\\n$| p/Siemens Simatic HMI MiniWeb httpd/ d/specialized/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Web Management\\\"\\r\\n\\r\\n<html><title>401 Unauthorized</title><body>401 Unauthorized</body></html>$| p/Foundry EdgeIron switch http config/ d/switch/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: Close\\r\\nContent-Type: text/html\\r\\n\\r\\nThe specified URL cannot be found<!--(?:0123456789){50}01234-->\\r\\n| p/Barracuda Web Application Firewall/ d/firewall/\nmatch http m|^HTTP/1\\.1 403 Directory Listing Denied\\r\\nContent-Type: text/plain\\r\\nContent-Length: 12\\r\\n\\r\\nError: 403\\r\\n$| p/HP Dream Screen media player http config/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nX-Powered-By: PHP/([\\w._-]+)\\r\\n.*<title>Seagate NAS - ([\\w._-]+)</title>\\n<link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"/admin/layout_design\\.css\\\" />\\n|s p/Seagate Black Armor 440 NAS http config/ i/PHP $1/ h/$2/ cpe:/a:php:php:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nX-Powered-By: PHP/([\\w._-]+)\\r\\n.*<title>My Book World Edition - ([\\w._-]+)</title>\\n.*<!-- Framework CSS -->\\n<link rel=\\\"stylesheet\\\" href=\\\"/blueprint/screen\\.css\\\" type=\\\"text/css\\\" media=\\\"screen, projection\\\">|s p/Western Digital My Book http config/ i/PHP $1/ d/storage-misc/ h/$2/ cpe:/a:php:php:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://([\\w._-]+)/site-web/home\\.seam\\r\\n|s p/Seam web framework/ h/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<TITLE>Print server homepage</TITLE></HEAD>\\n<FRAMESET COLS=\\\"200,\\*\\\" BORDER=0 FRAMEBORDER=0>\\n<FRAME SRC=\\\"/links_en\\.html\\\">\\n|s p/Citizen CLP-521 or Kyocera Mita KM-1530 printer http config/ d/printer/ cpe:/h:kyocera:mita_km-1530/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 19\\r\\nContent-Type: text/html\\r\\n\\r\\n 404 Page Not Found$| p/Kyocera Mita FS-1350DN printer http config/ d/printer/ cpe:/h:kyocera:mita_fs-1350dn/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"GeneralUser/Administrator\\\"\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H2>401 Unauthorized</H2>\\n<HR>\\nAuthorization required for the requested URL\\.\\n</BODY></HTML>\\n|s p/thttpd/ i/Panasonic BB-HCM511 IP camera http config/ cpe:/a:acme:thttpd/\nmatch http m|^HTTP/1\\.1 307 Redirect\\r\\nLocation: https?://[^\\r\\n]*\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Apache httpd/ v/2.0.X/ cpe:/a:apache:http_server:2.0/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\w._-]+)\\r\\n.*<title>OneAccess WCF</title>|s p/RapidLogic httpd/ v/$1/ i/OneAccess ONE100A router http config/ d/router/ o/OneOS/ cpe:/a:rapidlogic:httpd:$1/ cpe:/h:oneaccess:one100a/a cpe:/o:oneaccess:oneos/\nmatch http m|^HTTP/1\\.1 200\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"10;url=\\\"><link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"/viawarp\\.css\\\" />|s p/Nova viaWARP httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Apache ([\\w._-]+) in ([^\\r\\n]+)\\r\\n|s p/Apache Tomcat $1/ i/in $2/ cpe:/a:apache:tomcat/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-type: text/html\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"PLC Adaptor\\\"\\r\\n\\r\\n| p/Panasonic PLC Adaptor Ethernet-to-mains bridge http config/ d/bridge/\nmatch http m|^<html><head>\\n<title>501 Method Not Implemented</title>\\n</head><body>\\n<h1>Method Not Implemented</h1>\\n</body></html>\\n$| p/kissdx media player control httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: yawcam/([\\w._-]+)\\r\\nContent-Length:\\d+\\r\\n| p/Yawcam webcam viewer httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: (?:Cisco )?ACS ([\\w._-]+)\\r\\n|s p/Cisco ACS httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: WYM/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Rovio\\\"\\r\\n|s p/WYM httpd/ v/$1/ i/Wowwee Rovio webcam/ d/webcam/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Kerio Connect ([^\\r\\n]+)\\r\\n|s p/Kerio Connect webmail httpd/ v/$1/ cpe:/a:kerio:connect:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nConnection: Close\\r\\nContent-Length: 0\\r\\nContent-type: text/html\\r\\nDate: .*\\r\\nlocation: https://([^/:]+)(?::\\d+)?/webmail/login/\\r\\nX-UA-Compatible: IE=8\\r\\n\\r\\n| p/Kerio Connect webmail httpd/ h/$1/ cpe:/a:kerio:connect/\nmatch http m|^HTTP/1\\.0 500 Internal server error\\nServer: M3 Business Engine ([^\\r\\n]+)\\nConnection: close\\nContent-Type: text/html; charset=UTF-8\\nCache-Control: no-cache\\nPragma: no-cache\\nExpires: 0\\nContent-Type: text/html\\n\\n<HTML><HEAD>\\n<TITLE>500 Internal server error</TITLE>\\n</HEAD><BODY>\\n<H2>500 Internal server error</H2>\\n<HR>\\n<ADDRESS><A HREF=\\\"http://null/\\\">M3 Business Engine ServerView</A></ADDRESS>\\n</BODY></HTML>\\n$| p/M3 Business Engine ServerView httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 ok\\r\\nContent-type: text/plain\\r\\n\\r\\nError accessing ''\\r\\n$| p/OpenSSL s_server -WWW httpd/ cpe:/a:openssl:openssl/\n# TODO: hunt down line number/version number correlations\nmatch http m|^HTTP/1\\.0 200 ok\\r\\nContent-type: text/plain\\r\\n\\r\\nError opening ''\\r\\n\\d+:error:[A-F\\d]+:system library:fopen:No such file or directory:bss_file\\.c:169:fopen\\('','r'\\)\\n\\d+:error:[A-F\\d]+:BIO routines:BIO_new_file:no such file:bss_file\\.c:172:\\n| p/OpenSSL s_server -WWW httpd/ cpe:/a:openssl:openssl/\nmatch http m|^HTTP/1\\.0 200 ok\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><BODY BGCOLOR=\\\"#ffffff\\\">\\n<pre>\\n\\n(.*) (?:\\nSecure Renegotiation IS(?: NOT)? supported)?\\nCiphers supported in s_server binary\\n| p/OpenSSL s_server -www httpd/ i/command line: $1/ cpe:/a:openssl:openssl/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: go1984\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: http://([\\w._-]+)(?::\\d+)?/([\\w._-]+)/Default/index\\.htm\\r\\n\\r\\n|s p/go1984 httpd/ i/session ID $2/ d/webcam/ h/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nAccept-Ranges: none\\r\\n.*<SCRIPT language=JavaScript>\\r\\n\\tvar PIN_change_attempted = false;\\r\\n\\tvar Login_failed = false;\\r\\n\\tvar password_label = \\\"\\\";\\r\\n</SCRIPT>\\r\\n<!--\\rNote: the opening and closing HTML tags are deliberately omitted from\\rthis file\\.|s p/Citrix Access Gateway http login/ cpe:/a:citrix:access_gateway/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONTENT-ENCODING: gzip\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: Linux/([\\w._-]+) Motorola/([\\w._-]+)\\r\\n|s p/Moto Phone Portal/ v/$2/ i/Linux $1/ d/phone/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDATE: .*\\r\\nCONTENT-TYPE: httpd/unix-directory\\r\\nCONTENT-LENGTH: 0\\r\\nALLOW: GET, POST, HEAD, OPTIONS\\r\\nSERVER: Linux/([\\w._-]+) Motorola/([\\w._-]+)\\r\\n\\r\\n$| p/Moto Phone Portal/ v/$2/ i/Linux $1/ d/phone/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-type: text/html\\r\\nCache-Control: no-cache\\r\\n\\r\\n.*<b>Welcome to PLANET ([\\w-]+) Web Management</b>|s p/Planet $1 switch http config/ d/switch/ cpe:/h:planet:$1/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: GoAhead-Webs\\r\\n.*Basic realm=\\\"(P-[\\w -]+) \\(username: ([\\w._-]+)\\)\\\"\\r\\n|s p/GoAhead WebServer/ i/ZyXEL $1 WAP http config; username: $2/ d/WAP/ cpe:/a:goahead:goahead_webserver/ cpe:/h:zyxel:$1/a\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nServer: Mbedthis-Appweb/([\\w._-]+)\\r\\n.*<H2>Access Error: 403 -- Forbidden</H2>|s p/Mbedthis-Appweb/ v/$1/ i/J-Web http config/ d/router/ o/JUNOS/ cpe:/a:mbedthis:appweb:$1/ cpe:/o:juniper:junos/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WindRiver-WebServer/([\\w._-]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<!-- \\(c\\) Copyrighted Materials, 2006\\. -->.*<script language=\\\"JavaScript\\\" src=\\\"js_utility_JW410R19_____________\\.js\\\"></script>|s p/Wind River Web Server/ v/$1/ i/Fujitsu-Siemens FibreCAT SX80 NAS device http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WindRiver-WebServer/([\\w._-]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n.*<!-- \\(c\\) Copyrighted Materials, 2006\\. -->.*<script language=\\\"JavaScript\\\" src=\\\"js_utility_JW420R45_____________\\.js\\\"></script>.*<title>HP StorageWorks MSA Storage Management Utility</title>|s p/Wind River Web Server/ v/$1/ i/HP StorageWorks MSA http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: MarratechPortal/([\\w._-]+) \\(Java ([\\w._-]+); Windows ([^)]+)\\) build/(\\d+)\\r\\n|s p/Marratech Portal/ v/$1 build $4/ i/Java $2; Windows $3/ o/Windows/ cpe:/a:sun:jre:$2/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: BBVS\\r\\nContent-type: text/plain\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"SecuritySpy Web Server\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n$|s p/SecuritySpy webcam viewer httpd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: BBVS/([\\w._-]+)\\r\\nKeep-Alive: timeout=20, max=100\\r\\nConnection: Keep-Alive\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 6258\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<title>SecuritySpy Web Server</title>\\n| p/SecuritySpy webcam viewer httpd/ v/$1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nExpires:0\\r\\npragma:no-cache\\r\\n\\r\\n<meta http-equiv=\\\"refresh\\\" content=\\\"0;url=Footprints\\.html\\\">\\r\\n\\r\\n\\r\\n\\r\\n$| p/TED 5000 power use monitor/ d/power-device/\n# http://java423.vicp.net:8652/infoserver.central/data/syshbk/collections/TECHNICALINSTRUCTION/1-61-208775-1.html\nmatch http m|^HTTP/1\\.0 400 Malformed Header in \\r\\nContent-Type: text/html\\r\\n\\r\\n$| p/Sun ScApp bytecode transfer httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n\\r\\n<html><head><title>File Share</title></head><body><a href=\\\"/folder/0\\\">Public</a><br/></body></html>$| p/File Share httpd/ i/Android mobile phone/ d/phone/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\n.*<title>VoIP Gateway</title>.*<frame name=\\\"contents\\\" target=\\\"main\\\" src=\\\"otgw\\.cgi\\?PAGE=USER\\\" scrolling=\\\"auto\\\" noresize>|s p/D-Link DVS-4088S, DVS-5088S, or DVG-7062S VoIP gateway http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: BEJY V([\\w._-]+)  HTTP ([\\w._-]+) \\r\\n| p/BEJY httpd/ v/$2/ i/BEJY $1/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: Xfire\\r\\nConnection: close\\r\\n\\r\\n\\r\\n$| p/Xfire httpd/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: http://guide(?:test)?\\.[\\w._-]*opendns\\.com/\\?url=\\r\\nContent-type: text/html\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: OpenDNS Guide\\r\\n\\r\\n$| p/OpenDNS Guide/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: http://guide(?:test)?\\.[\\w._-]*opendns\\.com/\\?url=\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: OpenDNS Guide\\r\\n\\r\\n$| p/OpenDNS Guide/\nmatch http m|^HTTP/1\\.0 303 See Other\\r\\nLocation: http://guide(?:test)?\\.[\\w._-]*opendns\\.com/\\?url=\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: OpenDNS Guide\\r\\n\\r\\n$| p/OpenDNS Guide/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Frameset//EN\\\">\\r\\n<!-- Copyright \\(c\\) 2000-2002, Fuji Xerox Co\\., Ltd\\. All Rights Reserved\\. -->\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<META HTTP-EQUIV=\\\"Content-Type\\\" CONTENT=\\\"text/html; charset=ISO-8859-1\\\">\\r\\n<TITLE>\\r\\n(DocuPrint [\\w._-]+) - ([\\w._-]+)\\r\\n</TITLE>| p/Fuji Xerox $1 printer http config/ d/printer/ h/$2/ cpe:/h:fuji:xerox_$1/a\nmatch http m|^HTTP/1\\.1 502 Bad Gateway\\r\\nContent-Type: text/html\\r\\nContent-Length: 487\\r\\n\\r\\n<html>\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\">\\n<title>\\nContent Server Message\\n</title>\\n</head>\\n<body>\\nNetwork message format error\\. Unable to parse browser environment or content item\\. Unable to parse properties\\. Name-value pairs are missing an '='\\.\\n<!---\\nStatusCode=-1\\nStatusMessage=Network message format error\\. Unable to parse browser environment or content item\\. Unable to parse properties\\. Name-value pairs are missing an '='\\.\\n---!>\\n</body></html>$| p/Oracle Universal Content Management httpd/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/IDentifier NameTracer Pro httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: 155\\r\\nConnection: close\\r\\n.*<title><FortiClient Download Portal</title>|s p/FortiClient firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n<HTML> \\n<HEAD>\\n<TITLE> [\\w._-]+  \\n</TITLE>\\n\\n<SCRIPT TYPE = \\\"text/javascript\\\">\\n netscapeVersion = navigator\\.appVersion\\.substring\\(0,4\\);\\n ieVersion = navigator\\.appVersion\\.substring\\(17,25\\);\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP Designjet 800ps printer http config/ d/printer/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:designjet_800ps/a\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nCache-Control: no-cache\\r\\nConnection: Close\\r\\nContent-Length: 0\\r\\nContent-Type: application/octet-stream\\r\\nDate: .*\\r\\nLocation: /main\\.php\\r\\nPragma: no-cache\\r\\nServer: Kerio WinRoute Firewall Embedded Web Server\\r\\n| p/Kerio WinRoute firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: MicroWeb/([\\w._-]+)\\r\\n.*<html>\\n<head><title>WebAlert Login Page</title></head>\\n<script LANGUAGE=\\\"JavaScript\\\">\\n<!--\\nfunction check\\(\\)\\n{\\n\\t  if\\(\\(document\\.frmLogin\\.txtUserName\\.value\\.length<3\\)|s p/MicroWeb/ v/$1/ i/Walchem WebAlert remote monitoring/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: NSMXwui \\(Juniper\\)\\r\\n.*<title>Network and Security Manager - Download UI Client</title>|s p/NSMXwui/ i/Juniper Network and Security Manager http config/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r \\nContent-type: text/html\\r\\n.*<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" xml:lang=\\\"en\\\" lang=\\\"en\\\">\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\" />\\n<title>Chumby FM Radio</title>|s p/Chumby One FM radio http interface/ d/media device/\nmatch http m|^HTTP/1\\.0 301 File moved Permanently\\nLocation: /cgi-bin/menu/TCP/IP Settings/\\r\\nDate: Mon, 23 Sep 1996 16:00:00 GMT\\r\\nExpires: Thu, 01 Dec 1994 16:00:00 GMT\\r\\nPragma: no-cache\\r\\nSet-Cookie: Login=DELETED; path=/;\\r\\n\\r\\n| p/Intermac scanner http config/ d/specialized/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache, must-revalidate\\r\\n.*<TITLE>MusicMagic Server</TITLE>.*<td>Total songs</td><td align=right>([\\d,]+)</td>|s p/MusicMagic Mixer http control/ i/$1 total songs/\nmatch http m|^HTTP/1\\.1 401 BAD\\r\\nWWW-Authenticate: Basic realm=\\\"Vuze - Vuze Web Remote\\\"\\r\\n\\r\\nAccess Denied\\r\\n$| p/Vuze BitTorrent remote http admin/ cpe:/a:azureus:vuze/\nmatch http m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nContent-Type: text/html\\r\\nCache-Control: public\\r\\nPragma: cache\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\n|s p/ActionTec TR-069 remote access/\nmatch http m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nContent-Type: text/html\\r\\nCache-Control: public\\r\\nPragma: cache\\r\\n.*<html>\\n<head>\\n  <title>405 Method Not Allowed</title>\\n</head>\\n<body bgcolor=\\\"ffffff\\\">\\n  <h2>405 Method Not Allowed<h2>\\n  <p>\\n  \\n</body>\\n</html>\\n$|s p/ActionTec TR-069 remote access/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/TR-069 remote access/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"\\\", qop=\\\"auth\\\", nonce=\\\"[0-9a-f]{32}:[0-9a-f]{8}:[0-9a-f]{7,8}\\\", opaque=\\\"0\\\"\\r\\nContent-Type: text/html\\r\\nCache-Control: public\\r\\nPragma: cache\\r\\nExpires: .*\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n  <title>401 Unauthorized</title>\\n</head>\\n<body bgcolor=\\\"#?ffffff\\\">\\n  <h2>401 Unauthorized</?h2>\\n  <p>(?:</p>)?(?:\\n  )?\\n</body>\\n</html>\\n$| p/TR-069 remote access/\n\nmatch http m|^HTTP/1\\.1 202 Accepted\\r\\nContent-Type: text/html;charset=UTF-8\\r\\n.*<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\r\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" xml:lang=\\\"en\\\" lang=\\\"en\\\">\\r\\n<head>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\" />\\r\\n<title>GlassFish Administration Console - Installation in Progress\\.\\.\\.</title>|s p/Sun GlassFish Administration Console/ i/installation in progress/ cpe:/a:sun:glassfish_server/\nmatch http m|^<html>\\r\\n<META HTTP-EQUIV=\\\"Refresh\\\" CONTENT=\\\"10\\\">\\r\\n<head>\\r\\n<title>([\\w\\d.-]+) LanSafe: ([\\w\\d\\s]+)</title>\\r\\n| p/LanSafe Status@aGlance/ i/Server: $1, Status: $2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*Server: IdeaWebServer/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Powered-By: ([^\\r\\n]+)\\r\\n|s p/IdeaWebServer httpd/ v/$1/ i/$2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*Server: IdeaWebServer/([\\w._-]+)\\r\\n|s p/IdeaWebServer httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: \\w\\w\\w \\d\\d, \\d\\d:\\d\\d:\\d\\d\\.\\d\\d\\d\\r\\nServer: TreeNeWS/([\\w._-]+)\\r\\nMime-Version: 1\\.0\\r\\nContent-Length: 1419\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\n\\r\\n.*<title>Webview</title>|s p/TreeNeWS httpd/ v/$1/ i/Enterasys RBT-8200 switch http config/ d/switch/ cpe:/h:enterasys:rbt-8200/\nmatch http m|^HTTP/1\\.1 302 OK\\r\\nDate: \\w\\w\\w \\d\\d, \\d\\d:\\d\\d:\\d\\d\\.\\d\\d\\d\\r\\nServer: TreeNeWS/([\\w._-]+)\\r\\nMime-Version: 1\\.0\\r\\nLocation: https://index\\.html\\r\\nContent-Length: 67\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>Redirect</TITLE></HEAD>\\n<BODY></BODY></HTML>\\r\\r\\n\\n$| p/TreeNeWS httpd/ v/$1/ i/Enterasys RBT-8200 switch http config/ d/switch/ cpe:/h:enterasys:rbt-8200/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: \\w\\w\\w \\d\\d, \\d\\d:\\d\\d:\\d\\d\\.\\d\\d\\d\\r\\nServer: TreeNeWS/([\\w._-]+)\\r\\nMime-Version: 1\\.0\\r\\nContent-Length: 173\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>Not Found</TITLE></HEAD>\\n<BODY><H1>Not Found</H1>\\n<br>&nbsp;&nbsp;The requested URL was not found on this server\\.\\n<br><H2>Error 404</H2></BODY></HTML>\\r\\r\\n\\n$| p/TreeNeWS httpd/ v/$1/ i/3Com WX2200 WAP http config/ d/WAP/ cpe:/h:3com:wx2200/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: CANON HTTP Server\\r\\nContent-Type: text/html\\r\\n| p/Canon printer web interface/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nDate: Sat, 01 Jan 2000 00:37:25 GMT\\r\\nLast-Modified: Sat, 01 Jan 2000 00:01:28 GMT\\r\\nContent-Type: text/html\\r\\nContent-Length: 635\\r\\n.*<title>VoIP Gateway</title>|s p/D-Link DVG-2032S VoIP gateway http config/ d/VoIP adapter/ cpe:/h:dlink:dvg-2032s/a\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: httpd\\r\\nContent-type: text/html\\r\\nETag: \\\"232c8e4-74d-0\\\"\\r\\nContent-length: 0\\r\\nConnection: close\\r\\nLocation: https://:443/start\\.html\\r\\n\\r\\n|s p/Dell Remote Access Controller 6 http interface/ d/remote management/ cpe:/h:dell:remote_access_card:6/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nCache-Control: no-cache\\r\\nConnection: Close\\r\\nContent-Length: 0\\r\\nContent-Type: application/octet-stream\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: /nonauth/login\\.php\\r\\nPragma: no-cache\\r\\nServer: Kerio Clientless SSL-VPN\\r\\n\\r\\n|s p/Kerio Clientless SSL-VPN/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Tue, 31 Jan 2012 01:17:22 GMT\\r\\nETag: \\\"413_83_4f274122\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 131\\r\\n.*location=\\\"/remote/login\\\";\\n</script></html>\\n|s p/Fortinet FortiGate SSL VPN remote http login/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Tue, 03 Oct 2006 19:21:12 GMT\\r\\nETag: \\\"85f_52_4522b828\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 82\\r\\n.*location=\\\"/remote/index\\\";\\n\\n</script>\\n</html>\\n\\0{605}$|s p/Fortinet FortiGate-5001 SSL VPN remote http login/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Wed, 11 Jan 2012 03:34:20 GMT\\r\\nETag: \\\"610_4f_4f0d033c\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 79\\r\\n.*location=\\\"/login\\\";\\n\\n</script>\\n</html>\\n|s p/Fortinet FortiGate firewall http proxy admin/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Fri, 21 Apr 2000 00:53:33 GMT\\r\\nETag: W/\\\"685_4f_4d082ec4\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 79\\r\\n.*location=\\\"/login\\\";\\n\\n</script>\\n</html>\\n|s p/Fortinet FortiGate firewall http proxy admin/ d/firewall/\nmatch http m|^HTTP/1\\.1 303 See Other\\r\\nLocation: https?://([\\d.]+:\\d+)/fgtauth\\?[0-9a-fA-F]+\\r\\n.*<title>Firewall Authentication</title></head>|s p/FortiGate Application filtering/ i/Auth server $1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"View Home & Status Web Pages\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Allegro-Software-RomPager/([\\w._-]+)\\r\\n|s p/Allegro RomPager/ v/$1/ i/Xerox Phaser 8560DN printer http config/ d/printer/ cpe:/a:allegro:rompager:$1/ cpe:/h:xerox:phaser_8560dn/a\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: https://[\\d.]+/home\\.html\\r\\nContent-Length: 0\\r\\nServer: Allegro-Software-RomPager/([\\w._-]+)\\r\\n\\r\\n$| p/Allegro RomPager/ v/$1/ i/Xerox Phaser 8560DN printer http config/ d/printer/ cpe:/a:allegro:rompager:$1/ cpe:/h:xerox:phaser_8560dn/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>XenServer ([\\w._-]+)</title>|s p/Citrix Xen Simple HTTP Server/ i/XenServer $1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?ETag: \\\"-127477461\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: none\\r\\n.*<title>Fireware XTM User Authentication</title>|s p/WatchGuard FireBox XTM firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"uTorrent\\\"\\r\\n\\r\\n| p/uTorrent WebUI/ o/Windows/ cpe:/a:utorrent:utorrent/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 300 ERROR\\r\\nConnection: keep-alive\\r\\nContent-Length: 15\\r\\nContent-Type: text/html\\r\\n\\r\\ninvalid request$| p/uTorrent WebUI/ o/Windows/ cpe:/a:utorrent:utorrent/ cpe:/o:microsoft:windows/a\n# uTorrent 2.0.2\nmatch http m|^HTTP/1\\.1 400 ERROR\\r\\nConnection: keep-alive\\r\\nContent-Length: 15\\r\\nContent-Type: text/html\\r\\n\\r\\ninvalid request$| p/uTorrent WebUI/ o/Windows/ cpe:/a:utorrent:utorrent/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 400 ERROR\\r\\nConnection: keep-alive\\r\\nContent-Length: 17\\r\\nContent-Type: text/html\\r\\n\\r\\n\\r\\ninvalid request$| p/uTorrent WebUI/ o/Windows/ cpe:/a:utorrent:utorrent/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: WYM/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 1029\\r\\nLast-Modified: Tue, 19 May 2009 02:17:02 GMT\\r\\n\\r\\n\\xef\\xbb\\xbf<html>\\r\\n<head>\\r\\n<title>NVS</title>|s p/WYM httpd/ v/$1/ i/A+V Link NVS-4000 surveillance system http config/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nLast-Modified: Mon, 07 Apr  2009  04:00:00 GMT\\r\\nContent-Type: TEXT/HTML\\r\\nDate: \\w\\w\\w, \\d\\d \\w\\w\\w  \\d\\d\\d\\d  \\d\\d:\\d\\d:\\d\\d GMT00:00 GMT\\r\\nServer: ICOM ([\\w._-]+)    from SBS\\r\\nMIME-Version: 1\\.0\\r\\nServer: ICOM [\\w._-]+    from SBS\\r\\nConnection: close\\r\\nContent-Length:             861\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>UltraQuest Index HTML</TITLE>| p/ICOM httpd/ v/$1/ i/UltraQuest mainframe reporting/ o|OS/390| cpe:/o:ibm:os_390/a\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-type: text/html\\r\\nDate: Sat, 31 Dec 2005 23:02:28 GMT\\r\\nConnection: close\\r\\n\\r\\n<HEAD><TITLE>404 Not Found</TITLE></HEAD>\\n<BODY><H1>404 Not Found</H1>\\nThe requested URL was not found on this server\\.\\n</BODY>\\n$| p/BusyBox httpd/ i/Sphairon Turbolink IAD ADSL modem http config/ o/Linux/ cpe:/a:busybox:busybox/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 302\\r\\nLocation: /login\\.vibe\\r\\n\\r\\n$| p/VibeStreamer streaming media httpd/\nmatch http m|^\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"ISO-8859-1\\\"\\?>\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\"\\r\\n  \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\r\\n\\r\\n\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>RealSecure SiteProtector</title>.*<meta name=\\\"copyright\\\"\\r\\n\\t\\tcontent=\\\"This web site, its design, copy, scripts and artwork,\\r\\n\\t\\tare copyright 2006 by Internet Security Systems, Inc\\.\\r\\n|s p/Apache httpd/ v/2.0.63/ i/ISS SiteProtector 2.0/ cpe:/a:apache:http_server:2.0.63/\nmatch http m|^<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<html><head>\\n<title>302 Found</title>\\n</head><body>\\n<h1>Found</h1>\\n<p>The document has moved <a href=\\\"/red2301\\.html\\?RedirectUrl=/\\\">here</a>\\.</p>\\n<p>Additionally, a 302 Found\\nerror was encountered while trying to use an ErrorDocument to handle the request\\.</p>\\n</body></html>\\n$| p/HP System Management httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\r\\n.*<title>DVR WebViewer</title>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=euc-kr\\\">\\r\\n.*<OBJECT\\r\\n\\t  classid=\\\"clsid:EE479A40-C128-40DD-93DA-000556AF9607\\\"\\r\\n\\t  codebase=\\\"CtrWeb\\.cab#version=1,1,1,1\\\"\\r\\n\\t  width=(\\d+)\\r\\n\\t  height=(\\d+)\\r\\n\\t  align=center\\r\\n\\t  hspace=0\\r\\n\\t  vspace=0\\r\\n>\\r\\n<param name=\\\"CmdPort\\\" value=\\\"(\\d+)\\\">\\r\\n<param name=\\\"StreamPort\\\" value=\\\"(\\d+)\\\">|s p/MicroDigital MDR-4600 DVR httpd/ i/Resolution $1x$2; CmdPort $3; StreamPort $4/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Senturion/([\\w._-]+)\\r\\n.*<title>Sensatronics: Senturion ([\\w._-]+)</title><script language=\\\"javascript\\\" src=\\\"/gen\\.js\\\">|s p/Sensatronics Senturion $2 environmental sensor httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<!-- saved from url=\\(0022\\)http://internet\\.e-mail -->\\r\\n<html>\\r\\n<head>\\r\\n<title>WebCam</title>\\r\\n</head>\\r\\n<body link=\\\"#505050\\\" bgcolor=\\\"#505050\\\" vlink=\\\"#505050\\\" alink=\\\"#505050\\\" topmargin=\\\"3\\\">|s p/AverMedia WebCamX httpd/ d/webcam/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"User\\\"\\r\\nContent-length: 192\\r\\n\\r\\n<HTML><HEAD>\\n<TITLE>Authentication Error: Access Denied, Authorization required\\.</TITLE>\\n</HEAD>\\r\\n<BODY><H2>Authentication Error: Access Denied, Authorization required\\.</H2></BODY>\\n</HTML>\\r\\n\\r\\n| p/Yello Strom Sparzaehler electricity meter httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nCache-Control: no-cache\\r\\nContent-type: text/html\\r\\nETag: \\\"19c-a4-4ab218f6\\\"\\r\\nContent-length: 164\\r\\n| p/Yello Strom Sparzaehler electricity meter httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=Shift_JIS\\\">\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>Network</title>\\r\\n</head>\\r\\n<noscript>Make sure JavaScript is ON\\.</noscript>.*<frame src=\\\"dmy\\.htm\\\" name=\\\"m\\\">|s p/Sanyo PLC-XU300 projector http config/ d/media device/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nPragma: no-cache\\r\\nLocation: https://[\\w._-]+/\\r\\n.*<TITLE>Redirect Notification</TITLE>.*<P>Please click <a href=\\\"https://[\\w._-]+/\\\">here</a> to go to the correct location\\.|s p/Tandberg Border Controller VoIP proxy/ d/proxy server/ o/Linux 2.6/ cpe:/o:linux:linux_kernel:2.6/\nmatch http m|^HTTP/1\\.1 200 Document follows\\r\\n(?:[^\\r\\n]+\\r\\n)*?Connection: Close\\r\\nServer: Micro-Web\\r\\n.*<!-- \\*\\* THIS FILE CONTAINS NO REALTIME DATA \\*\\* -->.*<title>   LocalSite - ARC Plus Web Interface</title>|s p/Micro-Web/ i/Burk ARC Plus remote management http interface/ d/remote management/\nmatch http m|^HTTP/1\\.1 302 \\(Found\\)\\r\\nConnection: close\\r\\nLocation: .*\\r\\nServer: Oversee Turing v([\\w._-]+)\\r\\n|s p/Oversee Turing httpd/ v/$1/ i/domain parking/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Java PseudoHttpd/([\\w._-]+)\\r\\n.*<title>CSP Status</title>|s p/Java PseudoHttpd/ v/$1/ i/Card Server Proxy (CSP) http config/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>XBMC</title> \\n<link type=\\\"text/css\\\" rel=\\\"stylesheet\\\" href=\\\"basic\\.css\\\">\\n</head>\\n<body>\\n<h1>XBMC Webinterface</h1>|s p/XBMC http interface/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>XBMC</title>\\r\\n\\t\\t<meta http-equiv=\\\"Content-Language\\\" content=\\\"EN\\\" />.*<!-- <link rel=\\\"search\\\" href=\\\"/provider\\.xml\\\" type=\\\"application/opensearchdescription\\+xml\\\" title=\\\"XBMC Library\\\" /> -->|s p/XBMC http interface/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\n.*<title>XBMC</title>\\s*<meta http-equiv=\\\"Content-Language\\\" content=\\\"EN\\\" />.*<!-- <link rel=\\\"search\\\" href=\\\"/?provider\\.xml\\\" type=\\\"application/opensearchdescription\\+xml\\\" title=\\\"XBMC Library\\\" /> -->|s p/XBMC http interface/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: 134\\r\\nExpires: .*\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n<html>\\n<head>\\n<title>XBMC Web Media Manager</title> \\n<meta HTTP-EQUIV=\\\"REFRESH\\\" content=\\\"0; url=\\./movies/index\\.html\\\">\\n</head>\\n</html>\\n$| p/XBMC Web Media Manager/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Length: 0\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=XBMC\\r\\n|s p/XBMC Web Media Manager/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nExpires: .*\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>.*<title>XBMC \\x7c Web interface</title>|s p/XBMC http interface/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nLocation:http://([\\w._-]+)/index\\.htm\\r\\nContent-Type: text/plain\\r\\nContent-Length:2.\\r\\n\\r\\nhttp://[\\w._-]+/index\\.htm$| p/Lanier IS100e image scanner httpd config/ h/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n.*<TITLE>Start</TITLE>\\n</HEAD>\\n<FRAMESET border=0 frameSpacing=0 rows=30,8,\\* frameBorder=0>\\n<FRAME name=bar src=\\\"CgiTagMenu\\?page=Top&Language=0\\\" scrolling=no NORESIZE>\\n<FRAME name=hrbar src=\\\"BarFoot\\.html\\\" scrolling=no NORESIZE>|s p/thttpd/ i/Panasonic Network Camera http config/ cpe:/a:acme:thttpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT\\r\\n.*\\xef\\xbb\\xbf<html>\\r\\n<head>\\r\\n.*<META NAME=\\\"Expired\\\" CONTENT=\\\"01-jan-1900 00:00:00\\\" />\\r\\n.*<title>NAS</title>.*<title></title>|s p/BusyBox httpd/ i/Hitachi SimpleNET NAS http config/ d/storage-misc/ o/Linux/ cpe:/a:busybox:busybox/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<TITLE>(PA168S) V([\\w._-]+) +</TITLE>.*<script>function sf\\(\\){document\\.f\\.auth\\.focus\\(\\);}</script>.*<FONT size=5>Willkommen zur Administration des Telefons</FONT>|s p/Atcom AT-320 VoIP phone http config/ v/$2/ i/PalmMicro $1 chipset/ cpe:/h:atcom:at-320/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\n.*<TITLE>Dashboard</TITLE>.*<META name='copyright' content='Copyright 2003-2010, Red Condor, Inc\\.'>|s p/Red Condor antispam appliance http config/ d/proxy server/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"[\\d.]+\\\",  qop=\\\"auth\\\", nonce=\\\"[0-9a-f]+\\\"\\r\\n.*<title>BMC HTTP Server</title>\\r\\n.*<img src=\\\"ilo2_rgb2\\.jpg\\\" class=\\\"mainlogo\\\" alt=\\\"\\\">|s p/HP Integrated Lights-Out http config/ d/remote management/ cpe:/h:hp:integrated_lights-out/\nmatch http m|^HTTP/1\\.0 300 Multiple Choices\\r\\nServer: Rockpile Web Server\\r\\nDate: Sun, 00 Jan 1900 00:00:00 GMT\\r\\nConnection: close\\r\\nLocation: http://[\\w._-]+/localmenus\\.cgi\\?func=604\\r\\nContent-type: text/html\\r\\n\\r\\n.*HTTP/1\\.0 404 Not Found\\r\\nServer: Rockpile Web Server\\r\\nDate: Sun, 00 Jan 1900 00:00:00 GMT\\r\\n|s p/Rockpile httpd/ i/Cisco 7937 VoIP phone http config/ d/VoIP phone/ cpe:/h:cisco:7937/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"CentreWare Internet Services\\\"\\r\\n.*<!-- Copyright \\(c\\) 2000-2003, Fuji Xerox Co\\., Ltd\\. All Rights Reserved\\. -->\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>FAILED</TITLE>\\r\\n<META http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=windows-1252\\\">|s p/FujiXerox ApeosPort-IV C4470 http config/ d/printer/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: iTP Secure WebServer/([\\w._() -]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n<TITLE>Not Found</TITLE><H1>Not Found</H1>\\n The requested object was not found on this server\\.$|s p/iTP Secure WebServer/ v/$1/ i/HP Tandem NonStop/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: iTP Secure WebServer/([\\w._() -]+)\\r\\n.*<TITLE>Index of /</TITLE>|s p/iTP Secure WebServer/ v/$1/ i/HP Tandem NonStop/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: iTP WebServer with NSJSP/([\\w._() -]+) \\(HTTP/1\\.1 Connector\\)\\r\\nLocation: http://([\\w._-]+):\\d+/index\\.html\\r\\n|s p/iTP WebServer with NSJSP/ v/$1/ i/HP Tandem NonStop/ h/$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Indy/([\\w._-]+)\\r\\n.*<title>GregHSRWLib - RemObjects SDK for \\.NET v([\\w._-]+)</title>|s p/Indy httpd/ v/$1/ i/.NET $2; Acer Registration Service; greghsrw.exe/ cpe:/a:indy:httpd:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nETag: W/\\\"[\\d-]+\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: null\\r\\n.*<title>HP - Data Center Fabric Manager</title>|s p/HP Data Center Fabric Manager http config/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nETag: W/\\\"[\\d-]+\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: censhare hyena/([\\w._-]+)\\r\\n|s p/censhare hyena httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?ETag: W/\\\"[\\d-]+\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Undefined\\r\\n.*<META HTTP-EQUIV=\\\"refresh\\\" CONTENT=\\\"0;URL=/core/orionSplashScreen\\.do\\\">|s p/McAfee ePolicy Orchestrator http interface/ cpe:/a:mcafee:epolicy_orchestrator/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?ETag: (?:W/)?\\\"[\\d-]+\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Undefined\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"0;URL=/core/orionSplashScreen\\.do\\\" />|s p/McAfee ePolicy Orchestrator http interface/ cpe:/a:mcafee:epolicy_orchestrator/\nmatch http m|^HTTP/1\\.1 401 \\r\\nDate: Sat, 21 Dec 1996 12:00:00 GMT\\r\\nWWW-Authenticate: Basic realm=\\\"Default password:1234\\\"\\r\\n\\r\\n401 Unauthorized - User authentication is required\\.$| p/Edimax PS-1206P print server/ d/print server/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Noelios-Restlet-Engine/([\\w._-]+)\\r\\nLocation: http://([\\w._-]+)/index\\.html\\r\\nVary: Accept-Charset,Accept-Encoding,Accept-Language,Accept,User-Agent\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\n\\r\\n$|s p/Noelios Restlet Framework/ v/$1/ i/Sonatype Nexus Maven Repository Manager/ h/$2/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nServer: SimpleHTTP/([\\w._-]+) Python/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<head>\\n<title>Error response</title>\\n</head>\\n<body>\\n<h1>Error response</h1>\\n<p>Error code 501\\.\\n<p>Message: Not Implemented\\.\\n<p>Error code explanation: 501 = Server does not support this operation\\.\\n</body>\\n$|s p/SimpleHTTPServer/ v/$1/ i/rPath Appliance Platform Agent; Python $2/ cpe:/a:python:python:$2/ cpe:/a:python:simplehttpserver:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: CMSHTTPD/([\\w._-]+) z_VM/([\\w._-]+) ([^\\r\\n]+)\\r\\n|s p/CMSHTTPD/ v/$1/ i|z/VM $2; $3| o|z/VM| cpe:/o:ibm:z%2fvm:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\nServer: Cardax Embedded Interface\\n.*<H1>CardaxFT Controller #  (\\d+)  \\(ETS\\)</H1>.*<br>Version: v([\\w._/-]+) BootMon-([\\w._-]+)</body>\\n$|s p/Cardax FT security system http interface/ v/$2/ i/Controller #$1; BootMon $3/ d/security-misc/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nAllow: GET,POST,HEAD\\r\\nMIME-Version: 1\\.0\\r\\nServer: (MA\\w+) Server ([\\w._-]+)\\r\\nLocation: http://0\\.0\\.0\\.0\\r\\n\\r\\n$| p/Huawei $1 WAP http config/ v/$2/ cpe:/h:huawei:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: ZyXEL SSLVPN Server v([\\w._-]+)\\r\\n.*<title>ZyWALL SSL(\\d+)</title>|s p/ZyXEL ZyWALL SSL $2 SSL-VPN applicance http config/ v/$1/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server:  \\r\\n.*<title>ZyWALL ([^<]+)</title>|s p/ZyXEL ZyWALL $1 firewall http config/ d/firewall/ cpe:/h:zyxel:zywall_$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nExpires: 0\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<title>Login</title>\\n<link rel=stylesheet href=\\\"login\\.css\\\" type=\\\"text/css\\\" />\\n<script src=\\\"form\\.js\\\" type=\\\"text/javascript\\\"></script>| p/D-Link DGS-1200T-series switch http config/ d/switch/\nmatch http m|^HTTP/1\\.1 505 HTTP Version not supported\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nAccept-Ranges: bytes\\r\\n\\r\\n$| p/Virtual Mic http synchronization/ d/media device/ o/iOS/ cpe:/o:apple:iphone_os/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Wireless Network Camera with Pan/Tilt\\r\\n|s p/Vivotek Network Camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Network Camera with Pan/Tilt\\r\\n|s p/Vivotek Network Camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Network Camera\\r\\n|s p/Vivotek IP7131 Network Camera http config/ d/webcam/ cpe:/h:vivotek:ip7131/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Remote-Motion CCD Network Camera\\\"\\r\\nContent-Type: text/html\\r\\nServer: Vivotek Network Camera\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Protected Object</TITLE></HEAD><BODY>\\n<H1>Protected Object</H1>This object on the server is protected\\.<P>\\n</BODY></HTML>$| p/Vivotek Network Camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Web Server\\r\\n.*<TITLE>NetGear ([\\w._-]+)</TITLE>|s p/Netgear $1 switch http config/ d/switch/ cpe:/h:netgear:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\n.*<TITLE>Management</TITLE>.*<METArem http_equiv=\\\"Refresh\\\" content=\\\"0; URL=index\\.ssi\\\">\\n\\n</HEAD>\\n<FRAMESET border=0 frameSpacing=0 rows=48,\\* frameBorder=no>|s p/Tandberg MXP video conferencing http config/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: HyNetOS/([\\w._-]+)\\r\\n.*<title>(CS\\d+) SNMP/Web Adapter</title>|s p/Effekta MH 6000 UPS http config/ i|$2 SNMP/Web adapter; HyNetOS $1| d/power-device/ o/HyNetOS/ cpe:/o:hyperstone:hynetos:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-Cocoon-Version: ([\\w._-]+)\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\n.*<title>F-Secure Policy Manager Web Reporting</title>|s p/F-Secure Policy Manager http interface/ i/Apache Cocoon $1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ShellHTTPD/([\\w._-]+)\\r\\n.*<title>Dachstein LEAF Firewall</title>|s p/ShellHTTPD/ v/$1/ i/Dachstein LEAF firewall/ d/firewall/ o/Linux 2.2/ cpe:/o:linux:linux_kernel:2.2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nnServer: avtech/([\\w._-]+)\\.\\.Expires: 0\\r\\nPragma:  no-cache\\r\\nCache-Control:  no-cache\\r\\nConnection: close\\r\\nContent-type: text/html;charset=ISO-8859-1\\r\\nWWW-Authenticate: Basic realm=server\\r\\nContent-Length: 163\\r\\n| p/avtech httpd/ v/$1/ i/Postef-8840 ADSL router/ d/broadband router/\nmatch http m|^HTTP/1\\.0 200 Script output follows\\r\\nServer: shinGETsu/([\\w._-]+) \\(Saku/([\\w._-]+)\\) Python/([\\w._-]+)\\r\\n| p/Saku/ v/$2/ i/client for shinGETsu $1 BBS; Python $3/ cpe:/a:python:python:$3/\nmatch http m|^HTTP/1\\.1 503 HTTP is not licensed\\.<p>To set up this filer, use <a href=/api>/api</a> \\.\\r\\nServer: Data ONTAP/([\\w._-]+)\\r\\n| p/NetApp http vFiler/ o/Data ONTAP $1/ cpe:/a:netapp:data_ontap:$1/\nmatch http m|^HTTP/1\\.1 503 HTTP is not licensed\\.<p>To administer this filer, use <a href=/na_admin/>/na_admin/</a> \\.\\r\\nServer: NetApp//([\\w._-]+)\\r\\n| p/NetApp http vFiler/ v/$1/ o/Data ONTAP/ cpe:/a:netapp:data_ontap/ cpe:/o:netapp:data_ontap/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nCache-Control: no-cache,no-store\\r\\nWWW-Authenticate: Basic realm=\\\"\\.\\\"\\r\\nContent-Type: text/html; charset=%s\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head><title>401 Unauthorized</title></head>\\n<body>\\n<h3>401 Unauthorized</h3>\\nAuthorization required\\.\\n</body>\\n</html>\\n| p/m0n0wall FreeBSD firewall web interface/ d/firewall/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nCache-Control: no-cache,no-store\\r\\nWWW-Authenticate: Basic realm=\\\"\\.\\\"\\r\\nContent-Type: text/html; charset=%s\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head><title>401 Unauthorized</title></head>\\n<body>\\n<h3>401 Unauthorized</h3>\\nAuthorization required\\. HuaCheng Technologies\\n</body>\\n</html>\\n| p/HuaCheng firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nDate: .*\\r\\nCache-Control: no-cache,no-store\\r\\nContent-Type: text/html; charset=%s\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head><title>501 Not Implemented</title></head>\\n<body>\\n<h3>501 Not Implemented</h3>\\nThat method is not implemented\\.\\n</body>\\n</html>\\n$| p/Western Digital My Book http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Axeda Agent Web Server/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: 1200004200\\r\\n.*<title>IM_v8_Data </title>\\r\\n</head>\\r\\n<body bgcolor=\\\"ffffff\\\">\\r\\n<center>\\r\\n<DIV style=\\\"position:absolute; top:6; left:6; width:(\\d+); height:(\\d+); z-layer:1;\\\" >\\r\\n<applet codebase=\\\"/aagweb/classes\\\" code=aglance\\.jag\\.AAGApplet|s p/Axeda remote management http interface/ v/$1/ i/Resolution $2x$3/ d/remote management/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Encoding: gzip\\r\\nCache-Control: max-age=600\\r\\n\\r\\n\\x1f\\x8b\\x08\\0\\0\\0\\0\\0| p/BenQ projector/ i/Crestron RoomView/ d/media device/ cpe:/h:crestron/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nLocation: https://([\\w._-]+):\\d+/symantec\\.jsp\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Hidden\\r\\n\\r\\n$| p/Symantec Endpoint Protection Manager http config/ d/firewall/ h/$1/ cpe:/a:symantec:endpoint_protection_manager/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nServer:  \\r\\nLocation: https://[\\d.]+:(\\d+)/redirect\\.cgi\\?arip=\\r\\n.*<address>  Server at ([\\w._-]+) Port \\d+</address>|s p/ZyXEL ZyWALL USG 200 firewall http config/ i/redirect to port $1/ d/firewall/ h/$2/ cpe:/h:zyxel:zywall_usg_200/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n.*<script src=\\\"\\./message/message\\.js\\\"></script>\\n\\t<script src=\\\"\\./buffalo\\.js\\\"></script>\\n\\t\\n\\t<script src=\\\"\\./btsdk\\.js\\\"></script>\\n\\t<script src=\\\"\\./btuicommon\\.js\\\"></script>|s p/Buffalo NAS BitTorrent download manager http interface/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nContent-Encoding: gzip\\r\\nCache-Control: max-age=600, must-revalidate\\r\\n\\r\\n\\x1f\\x8b\\x08\\0\\0\\0\\0\\0\\0\\0| p/Modtronix SBC65EC Web Server/\nmatch http m|^HTTP/1\\.0 301\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: OKWS/([\\w._-]+)\\r\\n|s p/OKWS httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n.*<TITLE>PowerDownTop</TITLE>\\n<SCRIPT Language=\\\"JavaScript\\\">\\n<!--\\ntop\\.location = \\\"CgiPowerDownReset\\?Language=0\\\";\\n// -->\\n</SCRIPT>\\n</HEAD>\\n<BODY></BODY></HTML>$|s p/thttpd/ i/Panasonic IP camera http viewer/ d/webcam/ cpe:/a:acme:thttpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: ZK Web Server\\r\\nPragma: no-cache\\r\\nCache-control: no-cache\\r\\n.*<script language=JavaScript type='text/javascript'>self\\.location\\.href='/csl/login'</script>|s p/ZK Web Server/ i/ZKSoftware ZEM500 fingerprint reader; MIPS/ d/security-misc/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Length: 69\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nServer: TornadoServer/([\\w._-]+)\\r\\n\\r\\n<html><title>404: Not Found</title><body>404: Not Found</body></html>$| p/Tornado httpd/ v/$1/ cpe:/a:tornadoweb:tornado:$1/a\nmatch http m|^HTTP/1\\.1 301 0\\w\\w\\w, \\d\\d \\w\\w\\w \\d\\d\\d\\d \\d\\d:\\d\\d:\\d\\d GMT\\r\\nServer: Agranat-EmWeb/R([\\d_]+)\\r\\nLocation: https://[\\d.]+/web/content/index\\.html\\r\\n| p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Alcatel 7800 switch http config/ d/switch/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:alcatel:7800/a\n# Juniper SRX-240H UTM firewall\n# Juniper EX2200-48T-4G switch\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Mbedthis-Appweb/([\\w._-]+)\\r\\nCache-Control: no-cache, must-revalidate\\r\\nContent-type: text/html\\r\\nETag: \\\"[0-9a-f-]+\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Powered-By: PHP/([\\w._-]+)\\r\\nExpires: Mon, 26 Jul 1997 05:00:00 GMT\\r\\n.*<title>Log In - Juniper Web Device Manager</title>|s p/Mbedthis-Appweb/ v/$1/ i/PHP $2/ d/firewall/ o/JUNOS/ cpe:/a:mbedthis:appweb:$1/ cpe:/a:php:php:$2/ cpe:/o:juniper:junos/a\nmatch http m|^HTTP/1\\.0 403 Not Authorized\\r\\nContent-Type: text/html\\r\\nContent-Length: 379\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"US-ASCII\\\"\\?>.*<p>Will not send listings for this directory\\.</p>\\r\\n</body>\\r\\n</html>\\r\\n|s p/Ashd httpd/\nmatch http m|^HTTP/1\\.1 200\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\nCONTENT-LENGTH: \\d+\\r\\n.*<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=windows-1252\\\">\\r\\n<meta name=\\\"GENERATOR\\\" content=\\\"Microsoft FrontPage 4\\.0\\\">.*<title>Phoenix PowerAgent GP</title>|s p/Phoenix PowerAgent GP power monitor http interface/ d/power-device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nAccept-Ranges: none\\r\\nConnection: close\\r\\nContent-Encoding: identity\\r\\nContent-Length: 4240\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: IST OIS\\r\\n.*<title>Allworx Hosted Web Site</title>|s p/Allworx 6x VoIP phone http config/ d/VoIP phone/ cpe:/h:allworx:6x/a\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nAccept-Ranges: none\\r\\nConnection: close\\r\\nContent-Encoding: identity\\r\\nContent-Length: 0\\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\nServer: IST OIS\\r\\n\\r\\n$| p/Allworx VoIP network server http admin/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"ACEswitch@[\\d.]+\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n$| p/Alteon 2424-SSL load balancer http config/ d/load balancer/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nConnection: Close\\r\\nLocation: /search\\?site=default_collection&client=default_frontend&output=xml_no_dtd&proxystylesheet=default_frontend&proxycustom=<HOME/>\\r\\nContent-Type: text/html\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Google Mini search appliance httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Apache/x\\.x\\.x \\(Unix\\) mod_ssl/x\\.x\\.x OpenSSL/([\\w._-]+)\\r\\n.*<title> FASTORA Filer Storage Manager </title>.*classid=\\\"clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11\\\">|s p/Apache httpd/ i/Fastora NAS T2 NAS device; OpenSSL $1/ d/storage-misc/ o/FreeBSD/ cpe:/a:apache:http_server/ cpe:/a:openssl:openssl:$1/ cpe:/o:freebsd:freebsd/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nCache-Control: private\\r\\nServer: IPOffice/([\\w._()-]+)\\r\\nContent-Type: text/plain\\r\\nContent-Length: 13\\r\\n\\r\\nParsing error$| p/Avaya IP Office VoIP PBX httpd/ v/$1/ d/PBX/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nDate: .*\\r\\n(?:Expires: .*\\r\\n)?Cache-Control: private(?:,max-age=\\d+)?\\r\\nLocation: /index\\.html\\r\\nServer: IPOffice/([\\w._()-]+)\\r\\nContent-Type: text/plain\\r\\nContent-Length: 22\\r\\n\\r\\nRedirect to index\\.html$| p/Avaya IP Office VoIP PBX httpd/ v/$1/ d/PBX/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nDate: .*\\r\\n(?:Expires: .*\\r\\n)?Cache-Control: private(?:,max-age=\\d+)?\\r\\nLocation: /index\\.html\\r\\nServer: IPOffice/\\r\\nContent-Type: text/plain\\r\\nContent-Length: 22\\r\\n\\r\\nRedirect to index\\.html$| p/Avaya IP Office VoIP PBX httpd/ d/PBX/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nConnection: close\\r\\nServer: SimpleHTTPtutorial v([\\w._-]+)\\r\\n\\r\\n$| p/SimpleHTTPtutorial httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\n.*Server: uClinux-httpd ([\\w._-]+)\\nExpires: 0\\n\\n.*<title>DxClient NetViewer</title>.*<OBJECT\\r\\n\\tclassid=\\\"clsid:EF34051A-402A-4ABE-AA20-04E1B4422BD9\\\"\\r\\n\\tcodebase=\\\"DxClient_NetViewer\\.cab#version=([\\d,]+)\\\"\\r\\n|s p/uClinux-httpd/ v/$1/ i/DxClient NetViewer DVR viewer $SUBST(2,\",\",\".\")/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nDate: .*\\r\\nServer: Mbedthis-Appweb/([\\w._-]+)\\r\\nContent-length: 0\\r\\nConnection: close\\r\\nLocation: http://http/tohttps\\.jsp\\r\\n\\r\\n$| p/Mbedthis-Appweb/ v/$1/ i/Ruckus WAP http config/ d/WAP/ cpe:/a:mbedthis:appweb:$1/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nDate: .*\\r\\nServer: Mbedthis-Appweb/([\\w._-]+)\\r\\nCache-Control: no-cache\\r\\nETag: \\\"1b8056-34-531868\\\"\\r\\nContent-length: 0\\r\\nConnection: close\\r\\nLocation: https://https/admin/login\\.jsp\\r\\n\\r\\n$| p/Mbedthis-Appweb/ v/$1/ i/Ruckus WAP http config/ d/WAP/ cpe:/a:mbedthis:appweb:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Mon, 13 Mar 2006 11:22:33 \\+1300\\r\\n.*<title>Welcome</title>.*<script language=\\\"JavaScript\\\" type=\\\"text/JavaScript\\\">\\r<!--\\rfunction MM_preloadImages\\(\\) { //v3\\.0\\r|s p/FirstClass Internet Access Server httpd/ cpe:/a:opentext:firstclass/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\w._-]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\nSet-Cookie: auth=\\w+; path=/\\r\\n\\r\\n\\xef\\xbb\\xbf.*<title>Logon</title>.*if \\(window\\.focus\\) self\\.focus\\(\\);|s p/RapidLogic httpd/ v/$1/ i/Unita VoIP phone http config/ d/VoIP phone/ cpe:/a:rapidlogic:httpd:$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html\\r\\nContent-Length: 2\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nConnection: Close\\r\\n\\r\\n5\\0$| p/Matrix42 remote control httpd/ d/remote management/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nProxy-Connection: close\\r\\nContent-Type: text/html\\r\\nCache-Control: private\\r\\nExpires: 0\\r\\n\\r\\n<html><head><title></title></head><frameset cols=\\\"100%\\\"><frame src=\\\"http://[\\d.]+:\\d+/joikuspot-accept\\\">| p/JoikuSpot 3G tethering http interface/ d/phone/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\nCache-Control: max-age=0\\r\\nExpires: -1\\r\\n\\r\\n<!-- \\n  Copyright \\(c\\) 2004-2006 by Cisco Systems, Inc\\.\\n  All rights reserved\\.\\n -->.*<title>Cisco Systems, Inc\\. Easy VPN Network Access</title>|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/Cisco ASA firewall http config/ d/firewall/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nDate: .*\\r\\nServer: ebHTTPD ([\\w._-]+)\\r\\n| p/ebHTTPD/ v/$1/\nmatch http m|^HTTP/1\\.0 404 not found \\(/\\)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Tntnet/([\\w._-]+)\\r\\n|s p/Tntnet httpd/ v/$1/ cpe:/a:tntnet:tntnet:$1/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: SecureTransport/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"FileDriveWWW\\\"\\r\\n|s p/Axway SecureTransport httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Axway-Copilot/([\\w._-]+)\\r\\n| p/Axway CFT http admin/ v/$1/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Length: 69\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nServer: CycloneServer/([\\w._-]+)\\r\\n\\r\\n<html><title>404: Not Found</title><body>404: Not Found</body></html>$| p/CycloneServer httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 400 Bad request\\n.*<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<html><head>\\n<title>400 Header 'Host' is missing\\.</title>|s p/Kerio MailServer http config/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\n<html>\\n<script language=\\\"JavaScript\\\" type=\\\"text/javascript\\\">\\n  if \\(top\\.location != self\\.location\\).*<title>Authentication Required</title>|s p/D-Link DFL-800 or DFL-860 firewall http config/ d/firewall/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: TSEWS\\r\\n.*<title>TechniSat WebTools</title>.*<meta name='copyright'           content='TechniSat Digital\\(r\\) 2006-2009\\(c\\)'>|s p/TechniSat Digicorder HD S2 satellite receiver http interface/ d/media device/\nmatch http m|^HTTP/1\\.1 505 HTTP Version not supported\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Good\\.iWare WebDAV Server for iPhone\\r\\n.*If you have any questions, please contact <a href=\\\"mailto:support@goodreader\\.net\\\">support@goodreader\\.net</a>|s p/Good.iWare WebDAV Server/ i/GoodReader PDF reader; iPhone/ d/phone/ o/iOS/ cpe:/h:apple:iphone/ cpe:/o:apple:iphone_os/\nmatch http m|^HTTP/1\\.1 505 HTTP Version not supported\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: GoodReader for iPad\\r\\n.*If you have any questions, please contact <a href=\\\"mailto:support@goodreader\\.net\\\">support@goodreader\\.net</a>|s p/Good.iWare WebDAV Server/ i/GoodReader PDF reader; iPad/ d/media device/ o/iOS/ cpe:/h:apple:ipad/ cpe:/o:apple:iphone_os/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Polycom-GAB\\r\\nContent-type: text/html\\r\\nPragma: no-cache\\r\\n\\r\\n$| p/Polycom CMA Global Address Book (GAB) httpd/\nmatch http m|^HTTP/1\\.0 200 \\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AURA\\r\\n.*<TITLE>ServerView RAID Manager</TITLE>|s p/Fujitsu Siemens ServerView RAID Manager http interface/\nmatch http m|^HTTP/1\\.0 200 \\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AURA\\r\\n.*<title>ServerView RAID Manager</title>|s p/Fujitsu Siemens ServerView RAID Manager http interface/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Length: 227\\r\\n\\r\\n<html> <head> <title>D-Link VoIP Router</title>| p/D-Link DVG-5112S VoIP adapter/ d/VoIP adapter/ cpe:/h:dlink:dvg-5112s/a\nmatch http m|^HTTP/1\\.0 501 Method Not Implemented\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Zotero httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Schleifenbauer SPbus gateway\\r\\n.*<!-- seinclude basicpagehead\\.txt -->\\r\\n|s p/Schleifenbauer SPbus gateway http config/ d/power-device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: ExtremeZ-IP/([\\w._-]+)\\r\\n.*<title>ExtremeZ-IP HTTP Service</title>|s p/ExtremeZ-IP httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 302 FOUND\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLocation: http://([\\w._-]+):\\d+/login\\?next=%2F\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Werkzeug/([\\w._-]+) Python/([\\w._-]+)\\r\\n|s p/Werkzeug httpd/ v/$2/ i/Flask web framework; Python $3/ h/$1/ cpe:/a:python:python:$3/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=utf-8\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Werkzeug/([\\w._-]+) Python/([\\w._+-]+)\\r\\n|s p/Werkzeug httpd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 301 MOVED PERMANENTLY\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: \\d+\\r\\nLocation: http://0\\.0\\.0\\.0:\\d+/web/webclient/home\\r\\nServer: Werkzeug/([\\w._-]+) Python/([\\w._+-]+)\\r\\n| p/Werkzeug httpd/ v/$1/ i/OpenERP XML-RPC; Python $2/ o/Unix/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=utf-8\\r\\nVary: Cookie, User-Agent, Accept-Language\\r.*\\nServer: MoinMoin (\\d[\\w._-]+) release Python/(\\d[\\w._~+-]+)\\r\\n|s p/MoinMoin wiki standalone httpd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: MoinMoin ([\\w._-]+) release ThreadPoolServer Python/([\\w._~+-]+)\\r\\n| p/MoinMoin wiki standalone httpd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 77\\r\\nServer: Indy/([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Delta Server Management Interface\\\"\\r\\n| p/Indy httpd/ v/$1/ i/Avaya IP Office Delta Server/ d/PBX/ cpe:/a:indy:httpd:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<!--\\r\\n#\\r\\n# If you have a 'split' directory installation, with configuration\\r\\n# files in ~/\\.i2p \\(Linux\\) or %APPDATA%\\\\I2P \\(Windows\\), be sure to\\r\\n# edit the file in the configuration directory, NOT the install directory\\.\\r\\n#\\r\\n--><title>I2P Anonymous Webserver</title>|s p/I2P anonymous httpd/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Sun-Java-System-Web-Proxy-Server/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-authenticate: basic realm=\\\"Web Proxy Server Administration\\\"\\r\\n|s p/Sun Java System Web Proxy http admin/ v/$1/ cpe:/a:sun:java_system_web_proxy_server:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Admin\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Juniper Steel-Belted Radius http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\r\\n\\r\\n<head>\\r\\n<title>Steel-Belted Radius</tile>\\r\\n| p/Juniper Steel-Belted Radius http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: PageR Enterprise/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache, no-store, must-revalidate \\r\\n\\r\\n| p/Avtech PageR Enterprise http interface/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html><head><link rel=stylesheet type=text/css href=indexStyle\\.css><title>Healy LDS Temperature #1</title>.*Sensor 1</td>.*>([\\w.]*)</td>.*&deg;([CF])</td>.*Sensor 2</td>.*>([\\w.]*)</td>.*&deg;([CF])</td>.*Sensor 3</td>.*>([\\w.]*)</td>.*&deg;([CF])</td>.*Sensor 4</td>.*>([\\w.]*)</td>.*&deg;([CF])</td>| p/Xytronics X-DAQ-2R1-4T-I temperature sensor http interface/ i/temperatures: $1 $2, $3 $4, $5 $6, $7 $8/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: FitNesse-v([\\w._-]+)\\r\\n|s p/FitNesse httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https?://([\\w._-]+)/esa\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Clearwell\\r\\n\\r\\n|s p/Clearwell httpd/ h/$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: http:///logon\\.htm\\r\\nContent-Length: 0\\r\\nServer: Intel\\(R\\) Con\\. Management Engine ([\\w._-]+)\\r\\n\\r\\n$| p/Intel Con. Management Engine httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: mpd web server\\r\\n|s p/mpd web server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: audio/[\\w._-]+\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache, no-store\\r\\n\\r\\n| p/mpd/ i/Music Player Daemon streaming media server/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: BitMeterOS ([\\w._-]+) Web Server\\r\\n|s p/BitMeter OS bandwidth monitor httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nMIME-Version: 1\\.0\\r\\nAccept-Ranges: bytes\\r\\nServer: NaviServer/([\\w._-]+)\\r\\nDate: .*\\r\\nLocation: http://filemaker\\.local:\\d+/login\\r\\n| p/NaviServer httpd/ v/$1/ i/FileMaker Server/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Lightstreamer/([\\w._ -]+) \\(Lightstreamer Push Server - www\\.lightstreamer\\.com\\) Moderato edition\\r\\nContent-Type: text/html\\r\\nExpires: Thu, 1 Jan 1970 00:00:00 GMT\\r\\n| p/Lightstreamer httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\nDate: .*\\r\\n\\r\\n<HTML><HEAD><TITLE>Error 404</TITLE></HEAD><BODY><H1>Error 404</H1><P>Not Found</P></BODY></HTML>$| p/Ingrian Security Encryption http config/ d/security-misc/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: http://([\\w._-]+):\\d+/status/hostgroup\\r\\nContent-Length: 113\\r\\nContent-Type: text/html; charset=utf-8\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nStatus: 302\\r\\n\\r\\n<html><body><p>This item has moved <a href=\\\"http://[\\w._-]+:\\d+/status/hostgroup\\\">here</a>\\.</p></body></html>|s p/OpsView remote management/ h/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: KM-httpd/([\\w._-]+)\\r\\n| p/Kyocera FS-3900DN printer http config/ v/$1/ d/printer/ cpe:/h:kyocera:fs-3900dn/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\nServer: DMRND/([\\w._-]+)\\r\\n\\r\\n| p/DMRND httpd/ v/$1/ i/Samsung TV/ d/media device/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\nServer: DMRND/([\\w._-]+)\\r\\n\\r\\n$| p/DMRND httpd/ v/$1/ i/Samsung HT-C5200 entertainment system/ d/media device/ cpe:/h:samsung:ht-c5200/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\ncontent-length : 90\\r\\ncontent-type : text/html\\r\\n\\r\\n<html>\\n<pre><html><h2>404 Not Found</h2>The server could not locate the resource you requested</html>\\0</pre>\\n</html>$| p/McAfee virus scanner http admin/ d/security-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: iroffer-dinoex/([\\w._-]+)\\r\\n|s p/iroffer-dinoex httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\r\\nContent-type: text/html\\r\\r\\n\\r\\r\\n<h1>BAD REQUEST: HACK DETECT</h1>\\r\\n\\r\\nCHAT\\.PHP\\.SPB\\.RU - Chat software \\(c\\) Dmitry Borodin - http://php\\.spb\\.ru/chat/\\r\\n| p/chat.php.spb.ru chat server httpd/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html; charset=utf-8\\r\\nServer: Mono-HTTPAPI/([\\w._-]+)\\r\\nDate: .*\\r\\nContent-Length: 35\\r\\nConnection: close\\r\\n\\r\\n<h1>Bad Request \\(Invalid host\\)</h1>$| p/Mono-HTTPAPI/ v/$1/ i/Beagle desktop search/ cpe:/a:mono:mono:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Asterisk/\\r\\n| p/Digium Asterisk GUI httpd/ d/PBX/ cpe:/a:digium:asterisk/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Asterisk\\r\\nDate: .*\\r\\nCache-Control: no-cache, no-store\\r\\nContent-type: text/html\\r\\nContent-Length: 240\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2\\.0//EN\">\\r\\n<html><head>\\r\\n<title>404 Not Found</title>\\r\\n</head><body>\\r\\n<h1>Not Found</h1>\\r\\n<p>The requested URL was not found on this server\\.</p>\\r\\n<hr />\\r\\n<address>Asterisk</address>\\r\\n</body></html>\\r\\n| p/Digium Asterisk AJAM/ d/PBX/ cpe:/a:digium:asterisk/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: zope\\.server\\.http \\(zope\\.server\\.http\\)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: http://([\\w._-]+):\\d+/calendar\\r\\n|s p/Zope httpd/ i/SchoolTool calendar/ h/$1/ cpe:/a:zope:zope/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: https://[\\d.]+:\\d+/home\\.html\\r\\nContent-Length: 0\\r\\nServer: Allegro-Software-RomPager/([\\w._-]+)\\r\\n\\r\\n$| p/Allegro RomPager/ v/$1/ i/Xerox Phaser 8560DN printer http config/ d/printer/ cpe:/a:allegro:rompager:$1/ cpe:/h:xerox:phaser_8560dn/a\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\n(?:[^\\r\\n]+\\r\\n)*?content-length: \\d+\\r\\ncontent-type: text/html\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"utf-8\\\"\\?>.*<meta content=\\\"SOGo Web Interface\\\" name=\\\"description\\\" />.*<meta content=\\\"@[\\w._-]+ ([\\w._-]+)\\\" name=\\\"build\\\" />|s p/SOGo groupware httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?ETag: \\\"\\d+\\\"\\r\\nContent-Type: text/html\\r\\nContent-Length: 79\\r\\nAccept-Ranges: bytes\\r\\nCache-Control: private\\r\\n\\r\\n<html><head><META http-equiv=\\\"refresh\\\" content=\\\"0;URL=(\\w\\w-\\w\\w)\\.htm\\\"></head></html>|s p/Milestone XProtect video surveillance http interface/ i/$1/ d/webcam/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nDate: .*\\r\\nServer: Zild/([\\w._-]+)\\r\\nContent-Type: text/plain\\r\\nLocation: https?://([\\w._-]+):\\d+/index\\.csp\\r\\nConnection: close\\r\\n\\r\\n$| p/Zild httpd/ v/$1/ i|M/Monit network monitor| h/$2/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .*\\r\\nServer: Zild/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/Zild httpd/ v/$1/ i|M/Monit network monitor|\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: private\\r\\nCache-Control: no-cache,no-store,max-age=0\\r\\npragma: no-cache\\r\\nContent-Type: application/octet-stream\\r\\nContent-Length: 101376\\r\\nAccept-Ranges: bytes\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nExpires: .*\\r\\nConnection: close\\r\\n\\r\\nMZP\\0\\x02\\0\\0\\0\\x04\\0\\x0f\\0\\xff\\xff\\0\\0\\xb8| p/Neeris worm httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: AdaptiveServerAnywhere/([\\w._-]+)\\r\\n| p/Sybase Adaptive Server Anywhere httpd/ v/$1/ cpe:/a:sybase:adaptive_server_anywhere:$1/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: Simple-DNS-Plus/([\\w._-]+)\\r\\nCa DNS Plus\\\"\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nContent-Length: 36\\r\\n\\r\\n\\*Error 401 Authorization Required\\*\\r\\n$| p/Simple DNS Plus httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: AVGADMINSERVER-\\w+ \\d+ BUILD=(\\d+) LOC=\\d+ LIC=[\\w-]+\\r\\n.*<h1>AVG Admin Server ([\\w._-]+)</h1>|s p/AVG Administration Console httpd/ v/$2 build $1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: AVGADMINSERVER-\\w+ \\d+ BUILD=(\\d+) LOC=\\d+ LIC=[\\w-]+\\r\\n|s p/AVG Administration Console httpd/ v/build $1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?WWW-Authenticate: Basic realm=\\\"AVG (2013) Admin Server\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AVGADMINSERVER64-\\w+ \\d+ BUILD=(\\d+) LOC=\\d+ LIC=[\\w-]+\\r\\n|s p/AVG Administration Console httpd/ v/$1 build $2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: [A-Z]{3}, \\d\\d [A-Z]{3} \\d\\d\\d\\d \\d\\d:\\d\\d:\\d\\d GMT\\r\\n.*<TITLE>HP Web Console on ([\\w._-]+)</TITLE>|s p/HP Guardian Service Processor httpd/ o/HP-UX/ h/$1/ cpe:/o:hp:hp-ux/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: \\w\\w, \\d\\d \\w\\w\\w \\d\\d\\d\\d \\d\\d:\\d\\d:\\d\\d GMT\\r\\nServer: Texis-Monitor/([\\w._-]+)\\r\\n| p/Thunderstone Texis-monitor httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\ndate: .*This is a WebSEAL error message template file\\.|s p/IBM WebSEAL httpd/\n# http://code.google.com/p/mongoose/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .* GMT Standard Time\\r\\nLast-Modified: .* GMT Standard Time\\r\\nEtag: \\\"[0-9a-f.]+\\\"\\r\\nContent-Type: text/html\\r\\nContent-Length: 7\\r\\nConnection: close\\r\\nAccept-Ranges: bytes\\r\\n\\r\\nwelcome$| p/Mongoose httpd/ cpe:/a:cesanta:mongoose/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html><head><title>Index of /</title>| p/Mongoose httpd/ v/3.7/ i/directory listing/ cpe:/a:cesanta:mongoose:3.7/\nmatch http m|^HTTP/1\\.0 200 cyberoam authentication response\\r\\nServer: awarrenhttp/([\\w._-]+)\\r\\n| p/awarrenhttp httpd/ v/$1/ i/Cyberoam CR200 SSL VPN/ d/proxy server/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nDate: .* UTC\\r\\nConnection: close\\r\\nLocation: /admin/public/index\\.html\\r\\n\\r\\n$| p/Cisco ASA 5510 firewall http config/ d/firewall/ cpe:/h:cisco:asa_5510/a\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nDate: .*\\r\\nServer: Mbedthis-Appweb/([\\w._-]+)\\r\\nContent-length: 0\\r\\nConnection: close\\r\\nLocation: http://([\\w._-]+):\\d+/index\\.html\\r\\n\\r\\n$| p/Mbedthis-Appweb/ v/$1/ i/Iomega StorCenter sohoclient/ o/Windows/ h/$2/ cpe:/a:mbedthis:appweb:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/2\\.0 302 Found\\r\\nServer: SmarterTools/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-AspNet-Version: ([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: /Login\\.aspx\\r\\n|s p/SmarterTools httpd/ v/$1/ i/ASP.NET $2/ o/Windows/ cpe:/a:microsoft:asp.net:$2/ cpe:/a:smartertools:smartertools_web:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: _sonar_session=[\\w+%-]+|s p/Sonar code quality management httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: 0\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nServer: OpenEJB/\\?\\?\\? \\(unknown os\\)\\r\\n\\r\\n$| p/OpenEJB httpd/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: /index\\.ds\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: DrWebAV-DeskServer/(REL-500-[\\w._-]+) Linux/i686 Lua/([\\w._-]+) OpenSSL/([\\w._-]+)\\r\\n\\r\\n$|s p/Dr. Web AV-Desk httpd/ v/$1/ i/i686; Lua $2; OpenSSL $3/ o/Linux/ cpe:/a:openssl:openssl:$3/ cpe:/a:puc-rio:lua:$2/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: vdradmind/([\\w._-]+)\\r\\n|s p/VDR-Admin httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nServer: unknown\\r\\nLocation: https?://([\\w._-]+)/workplace/access/home\\r\\n| p/SonicWALL SSL-VPN http proxy auth/ h/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: webserver/([\\w._-]+)\\r\\n.*<TITLE>OSCAM ([\\w._-]+ build #\\d+)</TITLE>|s p/webserver/ v/$1/ i/OSCAM $2 card sharing system/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AvatronHTTP \\(com\\.avatron\\.AirSharingHD,([\\w._-]+)\\)\\r\\n\\r\\n|s p/lighttpd/ i/Avatron Air Sharing HD $1/ d/media device/ o/iOS/ cpe:/a:lighttpd:lighttpd/ cpe:/h:apple:ipad/ cpe:/h:apple:iphone/ cpe:/o:apple:iphone_os/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: http:///home\\.htm\\r\\nContent-Length: 0\\r\\nWebServer:\\r\\n\\r\\n$| p/APC SmartUPS http config/ d/power-device/\nmatch http m|^HTTP/1\\.0 404 Error\\r\\nContent-Length: 138\\r\\nContent-Type:text/html\\r\\nServer: Ipswitch ([\\w._-]+)\\r\\nConnection: close\\r\\nCache-Control: private\\r\\nDate: .*\\r\\n\\r\\n<html><head><title>404 Page Not Found</title></head>\\r\\n<body>404 Page Not Found<br>The system cannot find the file specified\\.</body></html>| p/Ipswitch WS_FTP http config/ v/$1/ cpe:/a:ipswitch:ws_ftp:$1/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nServer: ZenAgent\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Novell ZENworks Configuration Management/ cpe:/a:novell:zenworks_configuration_management/\nmatch http m|^HTTP/1\\.1 200 OK \\n\\n| p/udpxy multicast UDP-to-HTTP/\nmatch http m|^HTTP/1\\.1 400 Unrecognized request\\r\\nServer: udpxy ([\\d.-]+) \\(prod\\) (\\w+) \\[([^]]+) ([\\w_]+)\\]\\r\\nContent-Type:application/octet-stream\\r\\n\\r\\n| p/udpxy multicast UDP-to-HTTP/ v/$1/ i/$2; arch: $4/ o/$3/ cpe:/a:pavel_cherenkov:udpxy:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=utf8\\r\\nX-Pow-Template: welcome\\r\\n| p/Pow Rack server/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 200 OK\\nServer: BOINC client\\n| p/BOINC client httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: zVWS ([\\w._-]+) Velocity Software, Inc\\. on  z/VM  (V\\d+R[\\d.]+)\\r\\n|s p/Velocity Software zVPS httpd/ v/$1/ o|z/VM $2| cpe:/o:ibm:z%2fvm:$2/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nSet-Cookie: PostX_Level=0\\r\\nRefresh: 0;url=/login\\.php\\r\\n\\r\\n| p/PostX IP Reporting alarm system httpd/ d/security-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nX-Your-Address-Is: [][\\w.:]+\\r\\nContent-Encoding: identity\\r\\nContent-Length: \\d+\\r\\nExpires: .*\\r\\n\\r\\n| p/Tor built-in httpd/ i/DirPortFrontPage configured/ cpe:/a:torproject:tor/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: \\r\\nContent-Length: 0\\r\\nConnection: close\\r\\n\\r\\n$| p/Samsung AllShare httpd/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n$| p/Samsung AllShare httpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: ITW Embedded Web Server \\(v([\\w._-]+)\\)\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Administrator, Control, View Only\\\"\\r\\n\\r\\n<h1>Not Authorized</h1>\\r\\n| p/ITW Embedded Web Server/ v/$1/ i/ITW WeatherGoose II environmental monitor http config/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ITW Embedded Web Server \\(v([\\w._-]+)\\)\\r\\nConnection: close\\r\\n.*<h2>Mini/([\\w._-]+) II&trade; v([\\w._-]+)</h2>|s p/ITW Embedded Web Server/ v/$1/ i/ITW MiniGoose XP II environmental monitor http config/ o|Mini/$2 II $3|\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: Cyms-SecS v([\\w._-]+)\\r\\n| p/Citrix Cyms-SecS/ v/$1/\nmatch http m|^HTTP/1\\.1 200 Success\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: LightSpeedServer/([\\w._-]+)  client_version/([\\w._-]+) rest_protocol/([\\w._-]+)\\r\\n|s p/LightSpeedServer/ v/$1/ i/client_version $2; rest_protocol $3/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nSet-Cookie: JSESSIONID=\\w+;Path=/\\r\\nContent-Type: text/html\\r\\nLast-Modified: .*\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 115\\r\\n\\r\\n<html>\\n<head><title></title>\\n<meta http-equiv=\\\"refresh\\\" content=\\\"0;URL=index\\.jsp\\\">\\n</head>\\n<body>\\n</body>\\n</html>\\n\\n| p/Jetty/ i/Openfire chat server http admin/ cpe:/a:igniterealtime:openfire/ cpe:/a:mortbay:jetty/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Linux, HTTP/1\\.1, (DIR-[\\w._+-]+) Ver ([\\w._-]+)\\r\\n| p/D-Link $1 WAP http config/ v/$2/ o/Linux/ cpe:/h:dlink:$1:$2/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Powered-By: Servlet ([\\w._-]+); JBoss-([\\w._-]+) \\(build: SVNTag=JBoss_[\\w._-]+ date=\\d+\\)/Tomcat-([\\w._-]+)\\r\\n|s p/Apache Tomcat/ v/$3/ i/JBoss $2; Servlet $1/ cpe:/a:apache:tomcat:$3/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Prayer/([\\w._-]+)\\r\\n|s p/Prayer webmail httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Nu-OS/([\\w._-]+)\\r\\n.*<title>Pioneer Web Control System</title>|s p/Nu-OS/ v/$1/ i/Pioneer VSX-2020 AV receiver/ d/media device/\nmatch http m|^HTTP/1\\.0 403 Access Denied\\r\\nConnection: close\\r\\n\\r\\n<html>The request you issued is not an authorized Convergence Notary request\\.\\n$| p/Convergence Notary server httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: Wed, 31 Dec 1969 15:00:00 GMT\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n.*<title>MONITOR NETWORK SETTINGS</title>.*<!--\\nvar mac=\\\"(\\w+)\\\";\\nvar ip3=\\d+;\\nvar ip2=\\d+;\\nvar ip1=\\d+;\\nvar ip0=\\d+;\\nvar nm3=\\d+;\\nvar nm2=\\d+;\\nvar nm1=\\d+;\\nvar nm0=\\d+;\\nvar gw3=\\d+;\\nvar gw2=\\d+;\\nvar gw1=\\d+;\\nvar gw0=\\d+;\\nvar dh=\\\"0\\\";\\nvar vDns1_0=(\\d+);\\nvar vDns1_1=(\\d+);\\nvar vDns1_2=(\\d+);\\nvar vDns1_3=(\\d+);\\nvar vDns2_0=\\d+;\\nvar vDns2_1=\\d+;\\nvar vDns2_2=\\d+;\\nvar vDns2_3=\\d+;\\nvar vVer=\\\"([\\w._-]+)\\\";|s p/NEC Multeos M461 TV http config/ v/$6/ i/MAC: $1; nameserver $2.$3.$4.$5/\nmatch http m|^HTTP/1\\.1 303 See Other\\r\\nConnection: close\\r\\nLocation: http://[\\d.]+/login_home\\.html\\r\\n\\r\\n| p/Tandberg Codian 3510 video gateway http config/ d/media device/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nCache-Control: no-store\\r\\nConnection: close\\r\\nAccept-Ranges: none\\r\\nLocation: https?://([\\w._-]+)/CitrixLogonPoint/WICL/\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Citrix Access Gateway/ h/$1/ cpe:/a:citrix:access_gateway/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nAccept-Ranges: none\\r\\nLocation: https?://([\\w._-]+):\\d+/\\r\\n\\r\\n$| p/Citrix Access Gateway/ h/$1/ cpe:/a:citrix:access_gateway/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nAccept-Ranges: none\\r\\nLocation: https?://([\\w._-]+):\\d+/\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Citrix Access Gateway/ h/$1/ cpe:/a:citrix:access_gateway/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Httpd v([\\w._ -]+)\\r\\nContent-Type: text/html\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"0; url=/cgi-bin/videoconfiguration\\.cgi\\\">\\r\\n|s p/ACTi surveillance camera http config/ v/$1/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Httpd v([\\w._ -]+)\\r\\nContent-Type: text/html\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"0; url=/cgi-bin/videoconfiguration\\.cgi\\\">\\r\\n|s p/ACTi ACM-1231 surveillance camera http config/ v/$1/ d/webcam/ cpe:/h:acti:acm-1231/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Httpd v([\\w._-]+) (\\d\\d\\w\\w\\w\\d\\d\\d\\d)\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n\\xef\\xbb\\xbf<html>.*<title>Web Configurator</title>|s p/ACTi E31 surveillance camera http config/ v/$1/ i/$2/ d/webcam/ cpe:/h:acti:e31/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\r\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\">\\r\\n<head>\\r\\n    <title>([\\w._-]+)</title>| p/ACTi $1 surveillance camera http config/ d/webcam/ cpe:/h:acti:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: (4D_v[\\w._-]+)/([\\w._-]+)\\r\\n| p/$1 httpd/ v/$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html><head><link rel=stylesheet type=text/css href=indexStyle\\.css><title>Webrelay Quad</title>| p/ControlByWeb WebRelay-Quad http admin/ d/remote management/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Length: 17\\r\\n\\r\\nNo soap\\. Radio!\\n\\n$| p/Coyote Point Equalizer load balancer http config/ d/load balancer/\n# http://hg.barrelfish.org/file/tip/usr/webserver/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Barrelfish\\r\\n| p/Barrelfish httpd/ o/Barrelfish/ cpe:/o:barrelfish:barrelfish/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nWWW-Authenticate: Basic realm=\\\"netcam\\\"\\r\\nContent-Length: 17\\r\\n\\r\\n401 Unauthorized\\n$| p/TRENDnet TV-IP100 or TV-IP110 webcam display httpd/ d/webcam/ cpe:/h:trendnet:tv-ip100/ cpe:/h:trendnet:tv-ip110/\n# False positives reported for EMC VNX 5200 - SAN device:\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/TRENDnet TV-IP110W webcam display httpd/ d/webcam/ cpe:/h:trendnet:tv-ip110w/\n# Trendnet TV-IP110w\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"netcam\\\"\\r\\nContent-Length: 17\\r\\n\\r\\n401 Unauthorized\\n$| p/TRENDnet TV-IP110w or TV-IP422W webcam display httpd/ d/webcam/ cpe:/h:trendnet:tv-ip110w/ cpe:/h:trendnet:tv-ip422w/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Internet Camera\\\"\\r\\nContent-Type: text/html\\r\\nContent-Length: 16\\r\\nPragma: no-cache\\r\\n\\r\\n401 Unauthorized| p/TRENDnet TV-IP301 webcam display httpd/ d/webcam/ cpe:/h:trendnet:tv-ip301/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: GoAhead-Webs\\r\\nDate: .* \\d\\d\\d\\d\\r\\nWWW-Authenticate: Basic realm=\\\"Internet Camera\\\"\\r\\n.*<CENTER><FONT SIZE=\\\"5\\\" COLOR=\\\"#FF0000\\\" face=\\\"Arial\\\">Access Denied</FONT></CENTER></BODY></HTML> {500}|s p/GoAhead WebServer/ i/LogiLink WC0002B webcam http config/ cpe:/a:goahead:goahead_webserver/a cpe:/h:logilink:wc0002b/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nHTTP/1\\.0 200 OK\\r\\nServer: ap\\r\\nConnection: close\\r\\nCache-Control: must-revalidate = no-cache\\r\\nContent-Type: text/html\\r\\nExpires: 0\\r\\nLast-Modified: 0\\r\\n\\r\\n<html>  \\r\\n<head><title>IEEE802\\.11b Wireless LAN Access Point| p/Blitzz BWA601 WAP http config/ d/WAP/ cpe:/h:blitzz:bwa601/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WindWeb/([\\w._-]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"\\\"\\r\\n\\r\\n<html>\\n<head>\\n<TITLE>(AMS\\w+)</TITLE>\\n\\n| p/WindWeb/ v/$1/ i/Hitachi $2 NAS device http config/ d/storage-misc/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nLocation: http://[\\d.]+:\\d+/apex\\r\\nContent-Type: text/html;charset=ISO-8859-1\\r\\nContent-Language: en-US\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n<html>\\r\\n<head><title>Document moved</title></head>\\r\\n| p/Oracle Application Express (APEX) http admin/ cpe:/a:oracle:apex/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><meta http-equiv=\\\"refresh\\\" content=\\\"0;url=/_top\\.html\\\">\\n<title></title></head><body></body></html>\\0| p/Canon imageRUNNER 2520 printer http config/ d/printer/ cpe:/h:canon:imagerunner_2520/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n\\t<head>\\n\\t\\t<title>XEP Engine: Status</title>\\n\\t</head>\\n\\t<body>\\n\\t\\t<h1>XEP Engine</h1>\\n\\t\\t<dl>\\n\\t\\t\\t <dt>state:</dt>\\n\\t\\t\\t <dd>([^\\n\\t]+)\\n\\t\\t</dl>| p/RenderX XEP httpd/ i/state: $1/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nServer: tksock\\r\\nDate: .*\\r\\nConnection: Close\\r\\nContent-length: 82\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><TITLE>Error</TITLE><BODY><H2>\\r\\nHTTP/1\\.1 403: Forbidden\\r\\n</H2></BODY></HTML>| p/Agfeo TK-Suite PBX httpd/ d/PBX/\n# The .* looks like part of a Date header.\nmatch http m|^HTTP/1\\.0 303 See Other\\r\\nLocation: http://[\\d.]+:\\d+\\r\\n\\0.* GMT\\r\\nSContent-Length: 0\\r\\n\\r\\n$| p/Toshiba e-STUDIO printer http config/ d/printer/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Firefly/([\\w._-]+)\\r\\n|s p/Firefly/ v/$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: libzapid-httpd\\r\\nContent-Type: text/html\\r\\nContent-Length: 86\\r\\nDate: .*\\r\\n\\r\\n<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>Not Found</H1></BODY></HTML>\\n| p/libzapid-httpd/ i/NetApp DFM http config/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nAccept-Ranges: none\\r\\n.*<title>Citrix Access Gateway</title>|s p/Citrix Access Gateway firewall http config/ d/firewall/ o/Windows/ cpe:/a:citrix:access_gateway/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConneccept-Ranges: none\\r\\n.*<title>Citrix Access Portal</title>|s p/Citrix Access Gateway firewall http config/ d/firewall/ o/Windows/ cpe:/a:citrix:access_gateway/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 302 Object Moved\\r\\nLocation: /vpn/index\\.html\\r\\nConnection: close\\r\\n| p/Citrix Access Gateway firewall http config/ d/firewall/ o/Windows/ cpe:/a:citrix:access_gateway/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nExpires: Thu,01 Jan 1970 00:00:00 GMT\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><meta http-equiv=\\\"refresh\\\" content=\\\"0;url=/_top\\.html\\\">\\n<title></title></head><body></body></html>\\0$| p/Canon imageRUNNER 2500-series printer http config/ d/printer/ cpe:/h:canon:imagerunner_2500/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: Hiawatha v([\\w._-]+)\\r\\nConnection: close\\r\\nWWW-Authenticate: Digest realm=\\\"Private page\\\", nonce=\\\"[0-9A-F]+\\\", algorithm=MD5, stale=false\\r\\nContent-Length: 404\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/strict\\.dtd\\\">\\n<html>\\n<head>\\n<title>401 - Unauthorized</title>\\n<style type=\\\"text/css\\\">BODY { color:#ffffff ; background-color:#00000a }\\nDIV { font-family:sans-serif ; font-size:30px ; letter-spacing:20px ; text-align:center ; position:relative ; top:250px }\\n</style>\\n</head>\\n<body>\\n<div>401 - Unauthorized</div>\\n</body>\\n</html>\\n$| p/Hiawatha/ v/$1/ i/Echostar ViP 722k satellite receiver/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: VB\\r\\n.*<TITLE>Network Camera (VB-\\w+)/(VB-\\w+)</TITLE>|s p/Canon $1 or $2 webcam http config/ d/webcam/\n# Note weird date format.\nmatch http m|^HTTP/1\\.1 400 Page not found\\r\\nServer: Schneider-WEB/V([\\w._-]+)\\r\\nDate: [A-Z]+ [A-Z]+ \\d+ \\d+:\\d+:\\d+ \\d+\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-length: 154\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Document Error: Page not found</title></head>\\r\\n\\t\\t<body><h2>Access Error: Page not found</h2>\\r\\n\\t\\t<p>Bad request type</p></body></html>\\r\\n\\r\\n$| p/Schneider-WEB/ v/$1/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: Schneider-WEB/V([\\w._-]+)\\r\\nDate: [A-Z]+ [A-Z]+ \\d+ \\d+:\\d+:\\d+ \\d+\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-length: 249\\r\\nContent-Type: text/html\\r\\nLocation: http://\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xee\\xeeP/index\\.htm\\r\\n| p/Schneider-WEB/ v/$1/\n# http://bitlash.net/wiki/bitlashwebserver\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/plain\\r\\n\\r\\nBitlash web server here! v([\\w._-]+)\\r\\nUptime: (\\w+)\\r\\nPowered by Bitlash\\.\\r\\n| p/Bitlash web server/ v/$1/ i/Arduino; uptime: $2/ cpe:/a:bitlash:bitlash:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Protected\\\"\\r\\nConnection: close\\r\\n\\r\\n401 Unauthorized: Password required\\r\\n$| p/ViewSonic PJD6521 projector http config/ d/media device/ cpe:/h:viewsonic:pjd6521/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nDate: .*\\r\\nServer: Helix Mobile Server/([\\w._-]+) \\(win-x86_64-vc10\\)\\r\\n| p/Helix Mobile Server httpd/ v/$1/ i/x86_64/ o/Windows/ cpe:/o:microsoft:windows/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nExpires: Fri, 01 Jan 1980 00:00:00 GMT\\r\\n.*<title>Gerrit Code Review</title>|s p/Jetty/ i/Gerrit code review/ cpe:/a:mortbay:jetty/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Apache  NetFile/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 177\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD HTML 4\\.01//EN\\\">\\n\\n<html>\\n\\n<head>\\n        <META HTTP-EQUIV=\\\"refresh\\\" CONTENT=\\\"0; URL=/cgi-bin/set_index\\.cgi\\\">\\n</head>\\n\\n<body>\\n\\n</body>\\n\\n</html>\\n$|s p/Ricoh Aficio IS200e scanner http config/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n\\n<html>\\n<head>\\n<meta http-equiv=\\\"Content-Language\\\" content=\\\"en-us\\\">\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\">\\n<link href=\\\"images/style\\.css\\\" rel=\\\"stylesheet\\\" type=\\\"text/css\\\">\\n</head>\\n<body class=\\\"globalNew\\\" onload=\\\"document\\.frmRedirectToTop\\.submit \\(\\)\\\">\\n| p/Cisco RV 120W or RV 180 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: IP-Phone-Web\\r\\nDate: [A-Z]+ [A-Z]+ \\d+ \\d+:\\d+:\\d+ \\d+\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http://dummy/index\\.asp\\r\\n\\r\\n<html><head></head><body>\\r\\n\\t\\tThis document has moved to a new <a href=\\\"http://dummy/index\\.asp\\\">location</a>\\.\\r\\n\\t\\tPlease update your documents to reflect the new location\\.\\r\\n\\t\\t</body></html>\\r\\n\\r\\n$| p/TalkSwitch TS-350i VoIP phone http config/ d/VoIP phone/ cpe:/h:talkswitch:ts-350i/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: IP-Phone-Web\\r\\nDate: [A-Z]+ [A-Z]+ \\d+ \\d+:\\d+:\\d+ \\d+\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http://dummy:\\d+/index\\.asp\\r\\n\\r\\n<html><head></head><body>\\r\\n\\t\\tThis document has moved to a new <a href=\\\"http://dummy:8000/index\\.asp\\\">location</a>\\.\\r\\n\\t\\tPlease update your documents to reflect the new location\\.\\r\\n\\t\\t</body></html>\\r\\n\\r\\n$| p/Vertical Edge 5000i VoIP phone http config/ d/VoIP phone/ cpe:/h:vertical:edge_5000i/\n# Other probes cause things like |^RECONNECT\\x04RECONNECT\\x04|.\nmatch http m|^HTTP/1\\.0 200 OK \\r\\nServer: Mobile Air Mouse Server \\r\\n.*The Mobile Air Mouse server running on \\\"([\\w._-]+)\\\" was able to receive your request\\.</p></BODY></HTML>\\r\\n|s p/Mobile Air Mouse httpd/ h/$1/\nmatch http m|^HTTP/1\\.0 200 OK \\n Server: Mobile Air Mouse Server \\n.*The Mobile Air Mouse server running on \\\"([\\w._-]+)\\\" was able to receive your request\\.</p></BODY></HTML>|s p/Mobile Air Mouse httpd/ h/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: 0\\r\\n\\r\\n$| p|Mercury/32 Mail Transport httpd| o/Windows/ cpe:/o:microsoft:windows/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\"\\r\\n  \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\r\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" xml:lang=\\\"en\\\" lang=\\\"en\\\">\\r\\n<head>\\r\\n<title>Flyport online webserver</title>\\r\\n| p/openPICUS Flyport wi-fi module httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\nServer: SwyxConnect ([\\w._-]+) \\(Annex B\\) ([\\w._ /-]+)\\r\\nCache-Control: no-cache\\r\\nExpires: Thu, 31 Dec 1999 00:00:00 GMT\\r\\n| p/SwyxConnect $1 VoIP phone http config/ v/$2/ d/VoIP phone/\nmatch http m%^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 3\\.2 Final//EN\\\">\\r\\n<HTML>\\r\\n<HEAD><TITLE>ZBR\\w+ - (?:PAUSED|READY)</TITLE><meta http-equiv=\\\"Pragma\\\" content=\\\"no-cache\\\"><meta http-equiv=\\\"Expires\\\" content=\\\"0\\\"></HEAD>\\r\\n<BODY><CENTER>\\r\\n<IMG SRC=\\\"logo\\.png\\\" ALT=\\\"\\[Logo\\]\\\">\\r\\n<H1>Zebra Technologies<BR>\\r\\nZTC ([\\w -]+)</H1>% p/Zebra $1 label printer http config/ d/printer/ cpe:/h:zebra:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Kayak\\r\\nDate: \\d+/\\d+/\\d+ \\d+:\\d+:\\d+ [AP]M\\r\\n|s p/Kayak/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: DOT-TUNES\\r\\n(?:[^\\r\\n]+\\r\\n)*?DOT-TUNES: ([\\w._-]+)\\r\\n|s p/Dot.Tunes iTunes sharing httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Hiawatha v([\\w._-]+)\\r\\n.*<html><head><title>404 - Not Found</title><style type=\\\"text/css\\\">\\n<!--\\nBODY { color:#ffffff ; background-color:#00000a }\\nDIV { font-family:sans-serif ; font-size:30px ; letter-spacing:20px ; text-align:center ; position:relative ; top:250px }\\n--></style></head>\\n<body><div>404 - Not Found</div></body></html>\\n$|s p/Hiawatha/ v/$1/ i/Aerohive HiveAP WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nContent-Length: 415\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html>\\n<head>\\n<title>Login</title>\\n<script>\\nvar exp = new Date\\(\\);\\nexp\\.setTime\\(exp\\.getTime\\(\\)\\+\\(1000\\*6\\)\\);\\n| p/D-Link DGS-1100 switch http config/ d/switch/ cpe:/h:dlink:dgs-1100/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nConnection: closed\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n.*<html><head><title>404 Not Found</title>|s p/PHP built-in httpd/ v/5.4.0 or later/ cpe:/a:php:php/\n# Also \"COMAR SLR-200N - AIS Receiver with LANTRONIX XPort server\".\nmatch http m|^HTTP/1\\.1 404 ERROR\\r\\n\\r\\nERROR 404\\r\\n$| p/Stanley NT500 access control system httpd/ d/security-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: .*\\r\\nDate: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nSet-Cookie: session_id=\\d+; path=/;\\r\\n\\r\\n<!--- Page\\(9055\\)=\\[Login\\] --->| p/AudioCodes MP-202 VoIP adapter http config/ d/VoIP adapter/ cpe:/h:audiocodes:mp-202/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nContent-length: \\d+\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\n\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\">\\n<title> Password Required</title>\\n<link rel=\\\"shortcut icon\\\" href=\\\"favicon\\.ico\\\">\\n<link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"ic\\.css\\\">\\n<script src=\\\"product\\.js\\\"></script>\\n<script src=\\\"script\\.js\\\"></script>\\n<script src=\\\"md5\\.js\\\"></script>\\n| p/Speakerbus iD101 VoIP phone http config/ d/VoIP phone/ cpe:/h:speakerbus:id101/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\nContent-Type: text/html; charset=iso-8859-1\\nExpires: Thu, 01 Dec 1994 23:12:40 GMT\\nServer: ServersCheck_Monitoring_Server/([\\w._-]+)\\n.*<p>Username / Password is still <strong>(\\w+/\\w+)</strong>\\.  Please update\\.</p>|s p/ServersCheck Monitoring Server httpd/ v/$1/ i/credentials: $2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\nContent-Type: text/html\\nExpires: Thu, 01 Dec 1994 23:12:40 GMT\\nServer: ServersCheck_Monitoring_Server/([\\w._-]+)\\n|s p/ServersCheck Monitoring Server httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\n.*<title>VMware View</title>|s p/VMware ESX Server httpd/ cpe:/o:vmware:esx/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: PMSoftware-SWS/([\\w._-]+)\\r\\n| p/PMSoftware Simple Web Server/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\ncontent-type: text/html\\r\\ncontent-length: \\d+\\r\\nlast-modified: .*\\r\\netag: [0-9a-f]+\\r\\nConnection: close\\r\\n\\r\\n| p/Node.js/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: (DPH-\\w+)\\r\\n| p/D-Link $1 VoIP phone http config/ d/VoIP phone/ cpe:/h:dlink:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Mango DSP HTTP Stack\\r\\n.*<title>Mango IP Node Configuration</title>|s p/Mango DSP AVS Raven-M video server http config/ d/media device/\n# Last-Modified has time zone.\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nLast-Modified: .* [-+]\\d+\\r\\nExpires: .*\\r\\n\\r\\n| p/OpenText FirstClass webmail httpd/ cpe:/a:opentext:firstclass/\nmatch ssl/http m|^HTTP/1\\.0 403 Secure Channel Required\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nDate: .*\\r\\nServer: ExpertAssist/([\\w._-]+)\\r\\n| p/ExpertAssist/ v/$1/ i/ScriptLogic Remote Desktop/\nmatch ssl/http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nAccept-Ranges: none\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\nContent-Type: application/octet-stream\\r\\nDate: .*\\r\\nLocation: https://[^/]*/\\r\\nServer: ExpertAssist/([\\w._-]+)\\r\\n| p/ExpertAssist/ v/$1/ i/ScriptLogic Remote Desktop/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ExpertAssist/([\\w._-]+)\\r\\nSet-Cookie: RASID=\\w+; path=/\\r\\n|s p/ExpertAssist/ v/$1/ i/ScriptLogic Remote Desktop/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nSet-Cookie: LOGSSLCHECK=nossl; path=/; expires=.*\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Language: en\\r\\nContent-Length: \\d+\\r\\nContent-Location: /default\\.html\\r\\n.*<title>ExpertAssist</title>|s p/ScriptLogic ExpertAssist remote management httpd/ d/remote management/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nExpires: -1\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">\\r\\n<html>\\r\\n<head>\\r\\n  <title>Thomson Gateway - Startseite</title>| p/Thomson SpeedTouch 536i router http config/ d/router/ cpe:/h:thomson:536i/\nmatch http m|^HTTP/1\\.1 200\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\nCONTENT-LENGTH: 240\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<title>Web-Manager ([\\w._-]+)</title>\\r\\n</HEAD>\\r\\n<BODY bgcolor=\\\"#FFFFFF\\\">\\r\\n<center>\\r\\n<applet code=\\\"container\\.class\\\" archive=web\\.jar width=\\\"743\\\" height=\\\"1250\\\" style=\\\"border: thick ridge\\\" VIEWASTEXT>\\r\\n</applet>\\r\\n</body>\\r\\n</html>\\r\\n\\r\\n$| p/Napco Netlink NL-MOD http config/ v/$1/\nmatch http m|^<HTML><HEAD></HEAD>\\r\\n<BODY bgcolor=0x000080 text=#FFFFFF link=#00FF00 vlink=#00FF00><font face=Arial,Helvetica size=2>\\r\\n<font face=Arial,Helvetica><B>\\r\\n<CENTER>ERF-Gateway Settings & States</B><BR><TABLE BORDER=0>\\r\\n<TR><TD><font face=Arial,Helvetica size=2>Software</TD><TD><font face=Arial,Helvetica size=2>ERF-Gateway V([\\w._-]+)</TD></TR>\\r\\n<TR><TD><font face=Arial,Helvetica size=2>Compilation Date</TD><TD><font face=Arial,Helvetica size=2>(\\d\\d/\\d\\d/\\d\\d)</TD></TR>\\r\\n| p/LaCrosse GW-1000U weather station httpd/ v/$1 $2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: \\$ProjectRevision: ([\\w._-]+) \\$\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n\\n  <head>\\n      <meta http-equiv=\\\"cache-control\\\" content=\\\"no-cache, no-store\\\">\\n| p/Teradici PCoIP remote management http config/ v/$1/ d/remote management/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nLocation: https://\\(null\\)/\\r\\nContent-Length: 2\\r\\n\\r\\n\\r\\n| p/Teradici PCoIP remote management http config/ d/remote management/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nContent-Length: 131\\r\\nContent-Type: text/html\\r\\n\\r\\n\\n\\n<HTML>\\n<HEAD>\\n<meta http-equiv=\\\"Refresh\\\" content=\\\"0;URL=/dynamic/action\\?Page=general&Action=get\\\">\\n</HEAD>\\n<BODY>\\n</BODY>\\n</HTML>\\n$| p/Digital Stream DPS-1000 set-top box http config/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\nConnection: close\\nContent-type: text/html\\nContent-Length: \\d+\\n\\n\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 3\\.2 Final//EN\\\">\\n<HTML>\\n<head>\\n<LINK  REL=\\\"STYLESHEET\\\" TYPE=\\\"TEXT/CSS\\\"  HREF=\\\"/ismserver\\.css\\\">\\n<title>Netcool/ISM Login</title>\\n| p/IBM Netcool Internet Service Monitors httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: Z-World Rabbit\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<title>SafetyNet Series 5</title>| p/Z-World Rabbit microcontroller httpd/ i/SafetyNet Series 5 environmental monitor/ d/specialized/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 48\\r\\nServer: Indy/([\\w._-]+)\\r\\n\\r\\nThe requested URL / was not found on this server$| p/Indy httpd/ v/$1/ i/Avaya VoIP phone upgrade service/ cpe:/a:indy:httpd:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONTENT-ENCODING: gzip\\r\\nEXPIRES: .*\\r\\nCONTENT-LENGTH: \\d+\\r\\nLAST-MODIFIED: .*\\r\\nDATE: .*\\r\\nCONTENT-TYPE: text/html; charset=UTF-8\\r\\nCACHE-CONTROL: max-age=0, no-cache, public\\r\\nSERVER: Linux/([\\w._-]+) Motorola/([\\w._-]+) DAV/2\\r\\n| p/Moto Phone Portal httpd/ i/Linux $1; Motorola Defy $2/ d/phone/ o/Android/ cpe:/o:google:android/ cpe:/o:linux:linux_kernel:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nServer: httpd\\r\\nDate: .*\\r\\nLocation: login\\.html\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: 0\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\nConnection: close\\r\\n\\r\\n$| p/Green Packet DX230 WAP http config/ d/WAP/ cpe:/h:green_packet:dx230/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Radware-web-server\\r\\nWWW-Authenticate: Basic realm=\\\"Radware\\\"\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Document Error: Unauthorized</title>| p/Radware OnDemand switch http config/ d/switch/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\nServer: Gnat-Box/([\\w._-]+)\\n| p/Global Technology Associates Gnat Box firewall http config/ v/$1/ d/firewall/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: Mon, 21 Feb 2011 17:38:00 GMT\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Apple TV httpd/ d/media device/ cpe:/a:apple:apple_tv/\nmatch http m|^HTTP/1\\.1 307 Temporary Redirect\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 0\\r\\nConnection: keep-alive\\r\\nServer: AmazonS3\\r\\n\\r\\n$|s p/Amazon S3 httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\nServer: BO/([\\w._-]+)\\nDate: .*\\nContent-type: text/html\\nPublic: GET, POST\\nConnection: keep-alive\\n\\n| p/BO2K built-in httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/plain\\r\\nConnection: close\\r\\n\\r\\nHello, non-Bayeux request\\. Yet another one$| p/Node.js/ i/Faye Bayeux protocol/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d [^\\r\\n]*\\r\\nCONTENT-TYPE: text/html\\r.*\\nServer: IBM_CICS_Transaction_Server/([\\w._-]+)\\(zOS\\)\\r\\n|s p/IBM CICS Transaction Server/ v/$1/ o|z/OS| cpe:/o:ibm:z%2fos/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: corehttp-([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html><body><pre>| p/CoreHTTP/ v/$1/ i/directory listing/\n# http://code.google.com/p/webfinger/\nmatch http m|^HTTP/1\\.1 400 Bad request\\r\\n\\r\\n$| p/WebFinger httpd/\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nContent-Type: text/plain; charset=UTF-8\\r\\n\\r\\nFailure: 500 Internal Server Error\\r\\nnull\\r\\n\\r\\n$| p/Eucalyptus httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html; charset=utf-8\\r\\nContent-Length: 204\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD HTML 3\\.2 Final//EN\\\"><html>\\n<title>Directory listing for /</title>\\n<body>\\n<h2>Directory listing for /</h2>\\n<hr>\\n<ul>\\n<li><a href=\\\"\\.\\./\\\">\\.\\./</a>\\n</ul>\\n<hr>\\n</body>\\n</html>\\n$| p/Dionaea honeypot httpd/\n# http://www.erlang.org/doc/man/inets.html\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: inets/([\\w._-]+)\\r\\n| p/inets/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Encoding: gzip\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n\\x1f\\x8b\\x08\\0\\0\\0\\0\\0\\x02\\x03\\xa5\\x93Mo| p/HP ProCurve 1800-24G switch http config/ d/switch/ cpe:/h:hp:procurve_switch_1800/ cpe:/o:hp:procurve_switch_software/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: afts/([\\w._-]+)\\r\\n| p/afts/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: OBi(\\w+)\\r\\n| p/Obihai OBi$1 VoIP adapter http config/ d/VoIP adapter/ cpe:/h:obihai:obi$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n1\\.0\\n(?:\\d\\d\\d\\d-\\d\\d-\\d\\d\\n)+| p/OpenStack Nova httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n{\\\"versions\\\": \\[{\\\"status\\\": \\\"CURRENT\\\", \\\"id\\\": \\\"v([\\w._-]+)\\\"}\\]}| p/OpenStack Nova httpd/ v/$1/\n# http://www.fastpath.it/products/palantir/index.php\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: multipart/x-mixed-replace; boundary=--mp-boundary\\r\\nExpires: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-store, no-cache\\r\\nX-Protocol-Version: (\\d+)\\r\\nX-Greeting: Livefeed\\r\\n\\r\\n--mp-boundary\\r\\n| p/Palantir media streaming httpd/ i/protocol $1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nServer: MediaMallServer/([\\w._-]+)\\r\\n| p/PlayOn MediaMallServer httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!---CAS:0003--><HTML><HEAD>\\n<TITLE>I-O DATA Broadband Router ETX-R</TITLE>| p/I-O Data ETX-R router http config/ d/router/\nmatch http m|^HTTP/1\\.0 401 com\\.wm\\.app\\.b2b\\.server\\.AccessException: com\\.wm\\.app\\.b2b\\.server\\.AccessException: \\[ISS\\.0084\\.9004\\] Access Denied\\r\\nWWW-Authenticate: Basic realm=\\\"webMethods\\\"\\r\\n| p/Software AG webMethods httpd/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Secure Area\\\"\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>Error</TITLE><META HTTP-EQUIV=\\\"Content-Type\\\" CONTENT=\\\"text/html; charset=utf-8\\\"></HEAD><BODY>401 Unauthorized</BODY></HTML>$| p/ScriptLogic Image Center remote agent httpd/ d/remote management/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nExpires: .*\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML><HEAD><TITLE>Welcome to (963)</TITLE>| p/Trend $1 building control system httpd/ d/security-misc/ cpe:/h:trend:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWww-Authenticate: Basic REALM=\\\"elmeg\\\"\\r\\nContent-Type: text/plain\\r\\nContent-Length: 22\\r\\n\\r\\nUnauthorized request\\r\\n$| p/Elmeg IP 290 VoIP phone http config/ d/VoIP phone/ cpe:/h:elmeg:ip_290/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\nDate: .* ([-+]\\d+)\\nServer: WebPidginZ \\n([\\w._-]+)\\nWWW-Authenticate: Digest realm=\\\"WebPidginZLoginDigest\\\", nonce=\\\"[0-9a-f]+\\\", opaque=\\\"0000000000000000\\\", stale=false, algorithm=MD5, qop=\\\"auth\\\"\\nConnection: close\\nContent-type: text/html\\n\\n\\n\\n$| p/WebPidgin-Z instant messaging interface/ v/$2/ i/time zone: $1/\n\nmatch http m|^HTTP/1\\.0 \\d\\d\\d [^\\r\\n]+\\r\\n[Cc]ontent-[Tt]ype: application/json; charset=UTF-8\\r\\n[Cc]ontent-[Ll]ength: \\d+\\r\\n\\r\\n{.*?\"name\" : \"([^\"]+)\",\\n  \"cluster_name\" : \"([^\"]+)\",(?:\\n  \"cluster_uuid\" : \"[^\"]*\",)?\\n  \"version\" : {\\n    \"number\" : \"([\\w._-]+)\",.*\"lucene_version\" : \"([^\"]+)\"\\n  },\\n  \"tagline\" : \"You Know, for Search\"\\n}\\n|s p/Elasticsearch REST API/ v/$3/ i/name: $1; cluster: $2; Lucene $4/ cpe:/a:apache:lucene:$4/ cpe:/a:elasticsearch:elasticsearch:$3/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d [^\\r\\n]+\\r\\n[Cc]ontent-[Tt]ype: application/json; charset=UTF-8\\r\\n[Cc]ontent-[Ll]ength: \\d+\\r\\n\\r\\n{.*?\"name\" : \"([^\"]+)\",\\n  \"cluster_name\" : \"([^\"]+)\",(?:\\n  \"cluster_uuid\" : \"[^\"]*\",)?\\n  \"version\" : {\\n    \"number\" : \"([\\w._-]+)\",.*\"lucene_version\" : \"([^\"]+)\"|s p/Elasticsearch REST API/ v/$3/ i/name: $1; cluster: $2; Lucene $4/ cpe:/a:apache:lucene:$4/ cpe:/a:elasticsearch:elasticsearch:$3/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d [\\w ]+\\r\\n[Cc]ontent-[Tt]ype: application/json; charset=UTF-8\\r\\n[Cc]ontent-[Ll]ength: \\d+\\r\\n\\r\\n{.*\"name\" : \"([^\"]+)\",(?:\\r?\\n  \"cluster_uuid\" : \"[^\"]*\",)?\\r?\\n  \"version\" : {\\r?\\n    \"number\" : \"([^\"]+)\",.*\"lucene_version\" : \"([^\"]+)\"}|s p/Elasticsearch REST API/ v/$2/ i/name: $1; Lucene $3/ cpe:/a:apache:lucene:$3/ cpe:/a:elasticsearch:elasticsearch:$2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\"([^\"]+)\"(?:[^\\r\\n]*\\r\\n)*?\\r\\n\\{\"error\":\\{\"root_cause\":\\[\\{\"type\":\"security_exception\",\"reason\":\"missing authentication token for REST request \\[/|s p/Elasticsearch REST API/ i/Shield plugin; realm: $1/ cpe:/a:elasticsearch:elasticsearch/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\"([^\"]+)\",nonce=\"[\\da-f]{32}\"\\r\\nContent-Type: text/plain; charset=UTF-8\\r\\nContent-Length: 19\\r\\n\\r\\nUnauthorized access| p/Elasticsearch REST API/ i/realm: $1/ cpe:/a:elasticsearch:elasticsearch/\n\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"NETWORK\\\"\\r\\nContent-Type: text/html\\r\\nServer: Lancam Server\\r\\n\\r\\n| p/American Dynamics EDVR security recorder/ d/security-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Muratec Server Ver\\.([\\w._-]+)\\r\\n.*<TITLE>Administration tool for IF-300</TITLE>\\r\\n|s p/Muratec IF-300 network module http config/ v/$1/ i/for F-320 printer/ d/printer/ cpe:/h:muratec:f-320/ cpe:/h:muratec:if-300/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Muratec Server Ver\\.([\\w._-]+)\\r\\nWWW-Authenticate: Basic Realm=\\\"Pages for SERVICE PERSON\\\"\\r\\nContent-Type: text/html\\r\\nContent-Length: 51\\r\\n\\r\\n<html><body><h1>401 Unauthorized</h1></body></html>$|s p/Muratec F-320 printer http config/ v/$1/ d/printer/ cpe:/h:muratec:f-320/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: RedTitan-eNterpriseQueue/([\\w._-]+)\\r\\n.*<TITLE>Enterprise Portal</TITLE>\\r\\n|s p/RedTitan-eNterpriseQueue/ v/$1/ i/RedTitan Print2PC parallel-to-USB bridge/ d/bridge/ cpe:/h:redtitan:print2pc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: UPnP/1\\.0\\r\\n.*<title>HDHomeRun</title>\\r\\n.*<div class=\\\"S\\\">Model: ([\\w._-]+)<br/>Device ID: ([\\w._-]+)<br/>Firmware: ([\\w._-]+)</div>|s p/SiliconDust HDHomeRun $1 DVR http config/ v/$3/ i/device ID: $2/ d/media device/ cpe:/h:silicondust:hdhomerun/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?S[eE][rR][vV][eE][rR]: HDHomeRun/1\\.0\\r\\n.*<div class=\\\"S\\\">Model: ([\\w._-]+)\\n?<br/>Device ID: ([\\w._-]+)\\n?<br/>Firmware: ([\\w._-]+)\\n?</div>|s p/SiliconDust HDHomeRun $1 DVR http config/ v/$3/ i/device ID: $2/ d/media device/ cpe:/h:silicondust:hdhomerun/\n# http://www.ibm.com/developerworks/systems/library/es-nweb/index.html\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\r\\n<TITLE>nweb\\r\\n</TITLE>| p/IBM nweb/ cpe:/a:ibm:nweb/\nmatch http m|^HTTP/1\\.0 504 Gateway Timeout\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html><body>Connection to server <b></b> failed \\(Connection actively refused by the server\\.\\)<P></body></html> {600}| p/Kerio WinRoute http proxy/ o/Windows/ cpe:/a:kerio:winroute/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nDate: .*\\r\\nX-Cascade: pass\\r\\nContent-Type: text/html\\r\\nContent-Length: 409\\r\\n\\r\\n<!DOCTYPE html>\\n<html>\\n<head>\\n  <style type=\\\"text/css\\\">\\n  body { text-align:center;font-family:helvetica,arial;font-size:22px;\\n    color:#888;margin:20px}\\n  #c {margin:0 auto;width:500px;text-align:left}\\n  </style>\\n</head>\\n<body>\\n  <h2>Sinatra doesn't know this ditty\\.</h2>\\n  <img src='/__sinatra__/404\\.png'>\\n  <div id=\\\"c\\\">\\n    Try this:\\n    <pre>get '/' do\\n  \\\"Hello World\\\"\\nend</pre>\\n  </div>\\n</body>\\n</html>\\n$| p/Sinatra web framework built-in httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=utf-8\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: webcam 7\\r\\n\\r\\n|s p/webcam 7 httpd/ o/Windows/ cpe:/o:microsoft:windows/\nmatch http m|^HTTP/1\\.1 301 Movprm\\r\\nLocation: https://[\\d.]+/\\r\\nContent-Length: 0\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n$| p/Konica Minolta bizhub 423 printer http config/ d/printer/ cpe:/h:konicaminolta:bizhub_423/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nServer: Catwalk\\r\\nDate: .*\\r\\nLocation: https://null:8443/\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\n\\r\\n$| p/Catwalk/ i/Canon imageRUNNER C5000-series printer http config/ d/printer/ cpe:/h:canon:imagerunner_c5000/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nExpires: .*\\r\\nCache-control: private\\r\\nContent-type: text/html\\r\\n\\r\\n<html><body><table width=\\\"100%\\\" border=\\\"0\\\" cellspacing=\\\"10\\\" cellpadding=\\\"5\\\">  <tr>    <td colspan=\\\"2\\\"  bgcolor=\\\"#00304B\\\"><h1><FONT COLOR=\\\"white\\\">Enistic Smart Energy Controller</FONT></h1>| p/Enistic Smart Energy Controller httpd/ d/power-misc/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\nWWW-Authenticate: Basic realm='unRAID SMU'\\n$| p/Lime Technology unRAID Server httpd/ v/4.X/ d/storage-misc/ cpe:/o:lime_technology:unraid_server:4/\n# http://code.google.com/p/unraid-unmenu/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Close\\r\\nPragma: no-cache\\r\\nCache-Control: private, max-age=0\\r\\nDate: .*\\r\\nExpires: -1\\r\\nContent-Type: text/html\\r\\nTransfer-Encoding: chunked\\r\\nRefresh: 60; URL=\\r\\n\\r\\n[0-9a-f]+\\r\\n<HTML><title>([\\w._-]+) unRAID Server</title>| p/Lime Technology unRAID Server Unmenu http config/ d/storage-misc/ h/$1/ cpe:/o:lime_technology:unraid_server:4/\nmatch http m|^\\0\\0\\0\\0\\x81HTTP/1\\.0 403 Forbidden\\r\\nServer: ServletExecAS/([\\w._-]+)\\r\\nContent-type: text/html\\r\\n\\r\\nRequests from [\\d.]+ are not allowed\\.$| p/New Atlanta ServletExec/ v/$1/ cpe:/a:newatlanta:servletexec:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"\\\"\\r\\n\\r\\n$| p/Z-World Rabbit microcontroller httpd/ i/Redline AN-50 wireless bridge http config/ cpe:/h:redline:an-50/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-type: text/html\\r\\nConnection: Close\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>ZyXEL (ZyAIR [\\w._-]+)</TITLE>| p/ZyXEL $1 WAP http config/ d/WAP/ cpe:/h:zyxel:$1/\nmatch http m|^HTTP/1\\.1 200\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\nCONTENT-LENGTH: 81\\r\\n\\r\\n<head>\\r\\n<meta http-equiv=\\\"refresh\\\" content=\\\"0; URL=get\\.cgi&index\\.cgi\\\">\\r\\n</head>\\r\\n$| p/SolarLog 400e power monitor httpd/ d/power-misc/ cpe:/h:solarlog:400e/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\naccept-ranges: none\\r\\ncache-control: no-cache\\r\\ncontent-type: text/html; charset=utf-8\\r\\ndate: .*\\r\\nexpires: 0\\r\\nserver: Ocsigen\\r\\n\\r\\n| p/Ocsigen/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nSet-Cookie: Netio\\w+=\\w+; path=/\\r\\n\\r\\n<html>\\n<head>\\n<title>(NETIO-\\w+) WebControl</title>\\n| p/Koukaam $1 power controller http config/ d/power-device/ cpe:/h:koukaam:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Omniture DC/([\\w._-]+)\\r\\nxserver: ([\\w._-]+)\\r\\n| p/Omniture DC/ v/$1/ h/$2/\n# ABS Megacam\n# Ubiquity AirCam.v1.1.1 / Airvision v1.1.1\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 47\\r\\n\\r\\n<html><body><p>File not found</p></body></html>$| p/GM Streaming Server httpd/ d/webcam/\nmatch http m|^<html>\\n   <head>\\n      <meta HTTP-EQUIV='Pragma' CONTENT='no-cache'>\\n      <script language=\\\"javascript\\\">\\n</script>\\n   </head>\\n   <body>\\n   \\t<center> \\n<table align=center style=\\\"margin:25px;width:480px\\\" cellspacing=0 cellpadding=0 border=0> \\n \\n    <tr> \\n        <td align=center><span style=\\\"font-size:1\\.2em\\\"> VoIP Router</span> \\n| p/Inteno X5669B broadband router/ d/broadband router/ cpe:/h:inteno:x5669b/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nX-Powered-By: PHP/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: WMI Http Server\\r\\n.*<title>Xtreamer Media Server</title>\\n|s p/WMI HTTP Server/ i/Xtreamer Pro media server; PHP $1/ d/media device/ cpe:/a:php:php:$1/\nmatch http m|^HTTP/1\\.1 400 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Ability Server ([\\w._-]+) by Code-Crafters\\r\\n|s p/Code Crafters Ability httpd/ v/$1/ cpe:/a:code-crafters:ability_server:$1/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: NET-DK/([\\w._-]+)\\r\\n.*<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\">\\n<!-- saved from url=\\(0033\\)http://[\\d.]+/startup\\.html -->\\n<HTML>\\n<HEAD>\\n<META content=\\\"text/html; charset=windows-1252\\\" http-equiv=Content-Type>\\n<META content=\\\"Microsoft FrontPage 4\\.0\\\" name=GENERATOR>|s p/NET-DK/ v/$1/ i/Motorola SB5101 or SB6120 cable modem http config/ d/broadband router/ cpe:/h:motorola:sb5101/ cpe:/h:motorola:sb6120/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\n.*Server: SAINT/([\\w._-]+)\\n.*<HTML>\\n<HEAD>\\n<TITLE>Bad client authentication code</TITLE>\\n<LINK REV=\\\"made\\\" HREF=\\\"mailto:saint@saintcorporation\\.com\\\">\\n</HEAD>\\n<BODY>\\n<H1>Bad client authentication code</H1>\\nThe command: <TT>GET / HTTP/1\\.0\\r\\n</TT> was not properly authenticated\\.\\n</BODY>\\n</HTML>\\n$|s p/SAINTexploit http interface/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\n.*Server: SAINT/([\\w._-]+)\\n.*<title>SAINT Login</title>|s p/SAINTexploit http interface/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-type: text/html\\r\\nCache-Control: no-cache\\r\\n\\r\\n<BODY><CENTER><H2><BR><BR>LevelOne (GSW-\\w+)| p/LevelOne $1 switch http config/ d/switch/ cpe:/h:levelone:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body bgcolor='#FFFFFF' link='#FFFFFF' vlink='#FFFFFF' alink='#FFFFFF' text='#003031'>\\n<table BORDER='1' WIDTH='100%' HEIGHT='100%' CELLSPACING='0' CELLPADDING='0' bordercolor='#003031'>\\n<tr><td ALIGN=CENTER>| p/Cisco 7912G IP Phone/ d/VoIP phone/ cpe:/h:cisco:7912g/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"[\\d.]+\\\",  qop=\\\"auth\\\", nonce=\\\"[0-9a-f]+\\\"\\r\\n.*<title>BMC HTTP Server</title>\\r\\n|s p/BMC HTTP Server/ i/HP Integrated Lights-Out remote management/ d/remote management/ cpe:/h:hp:integrated_lights-out/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nLast-Modified: .*\\r\\nContent-length: \\d+\\r\\n.*<TITLE>RGB VIA Platform Home Page</TITLE>\\r\\n|s p/BusyBox httpd/ i/RGB Modular Media Converter http config/ d/media device/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"Web UI Access\\\", nonce=\\\"[0-9a-f]{32}\\\", opaque=\\\"[0-9a-f]{32}\\\", stale=\\\"false\\\", algorithm=\\\"MD5\\\", qop=\\\"auth\\\"\\r\\n\\r\\n$| p/qBittorrent Web UI/ cpe:/a:qbittorrent:qbittorrent/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\">\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE></TITLE>\\r\\n<META content=\\\"text/html; charset=utf-8\\\" http-equiv=Content-Type><STYLE type=text/css>BODY {BACKGROUND-COLOR: #3300cc; BACKGROUND-REPEAT: repeat}</STYLE>\\r\\n<META name=generator content=\\\"Trellian WebPage\\\"></HEAD><BODY><FONT color=#ffff00 size=7><P align=center>SDR-IP</P><P align=center>by</P><P align=center>RFSPACE</P></FONT>\\r\\n</BODY>\\r\\n</HTML>\\r\\n$| p/RF-Space SDR-IP software radio http config/ d/specialized/ cpe:/h:rf-space:sdr-ip/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-type: text/html\\r\\nServer: Flumotion/([\\w._-]+)\\r\\n| p/Fluendo Flumotion httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 ;OK\\r\\nServer: \\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\r\\nContent-Type: text/html\\r\\nConnection: Close\\r\\n\\r\\n<html>\\n<head>\\n<link rel=\\\"SHORTCUT ICON\\\" href=\\\"favicon\\.ico\\\">\\n<title>EATON</title>\\n| p/Eaton Powerware Environmental Rack Monitor httpd/ d/power-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Frameset//EN\\\" \\r\\n\\\"http://www\\.w3\\.org/TR/html4/frameset\\.dtd\\\">\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\\\"Pragma\\\" content=\\\"no-cache\\\">\\r\\n<meta http-equiv=\\\"Cache-Control\\\" content=\\\"no-cache\\\">\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html;charset=utf-8\\\">\\r\\n<title>Plasma Monitor web control system</title>\\r\\n| p/Pioneer PRO-141 monitor http config/ d/media device/ cpe:/h:pioneer:pro-141/\nmatch http m|^HTTP/1\\.0 200 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Ubicom/([\\w._-]+)\\r\\n.*<title>Microtek WES : Login</title>\\r\\n|s p/Ubicom/ v/$1/ i/Microtek ML-WES WAP http config/ d/WAP/ cpe:/h:microtek:ml-wes/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nContent-Type:text/html\\r\\nContent-Length:  *\\d+\\r\\n\\r\\n\\n<html>\\n<head>\\n<Script language=\\\"javascript\\\">\\n.*<title>VoIP Login</title>\\n|s p/Minitar MVA11A VoIP gateway http config/ d/VoIP adapter/ cpe:/h:minitar:mva11a/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\r\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" xml:lang=\\\"fr\\\" lang=\\\"fr\\\">\\r\\n  <head>\\r\\n    <meta http-equiv=\\\"content-type\\\" content=\\\"text/html; charset=iso-8859-15\\\" />\\r\\n    <meta http-equiv=\\\"content-style-type\\\" content=\\\"text/css\\\" />\\r\\n    <title>Mon syst\\xe8me d'alarme Somfy\\r\\n    </title>\\r\\n|s p/Somfy alarm system http config/ d/security-misc/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nLocation: printer/index\\.html\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 149\\r\\n\\r\\n<BODY><H1>Error 301 Moved Permanently<hr><p>Please use this link instead:</p><p><a href='printer/index\\.html'>printer/index\\.html</a></p></H1></BODY>\\r\\n$| p/Zebra ZTC 105SL label printer http config/ d/printer/ cpe:/h:zebra:ztc_105sl/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Hydra/([\\w._-]+)\\r\\n.*<title>KOZUMI \\[Air Force One 5\\]</title>\\n|s p/Hydra httpd/ v/$1/ i/Kozumi Air Force One 5 WAP http config/ d/WAP/ cpe:/a:nikos_mavroyanopoulos:hydra:$1/ cpe:/h:kozumi:air_force_one_5/\n# \"speedport.ip\" might be an interpolation by the submitter.\nmatch http m|^HTTP/1\\.1 302 \\r\\nContent-Type: text/html\\r\\nConnection: Close\\r\\nLOCATION: https://speedport\\.ip/\\r\\nContent-Length: 155\\r\\n\\r\\n<head><title>302 Document moved</title></head><body><h1>302 Document moved</h1>This document has moved <a href=\\\"https://speedport\\.ip//\\\">here</a>\\.<p></body>$| p/T-Com Speedport W 723V WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCACHE-CONTROL: no-cache\\r\\n.*<META name=\\\"author\\\" content=\\\"J\\.Huber, R\\.Kunz\\\">\\r\\n\\r\\n<TITLE>Speedport (W \\w+) Konfigurationsprogramm</TITLE>\\r\\n|s p/T-Com Speedport $1 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ISS (\\w+) Series/([\\w._-]+)\\r\\n|s p/Extron ISS $1 video switch http config/ v/$2/ cpe:/h:extron:iss_$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Xavante ([\\w._-]+)\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<HTML><HEAD>\\n<TITLE>404 Not Found</TITLE>\\n</HEAD><BODY>\\n<H1>Not Found</H1>\\nThe requested URL http://http:/README was not found on this server\\.<P>\\n</BODY></HTML>$|s p/Xavante/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nSet-Cookie: JSESSIONID=[0-9A-F]{32}; Path=/\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nContent-Length: 96\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Oce Express WebTools\\r\\n\\r\\n\\n\\n\\n\\n<html>\\n\\t<head>\\n\\t\\t\\n\\t\\t<meta http-equiv=\\\"REFRESH\\\" content=\\\"0; URL=/home\\.jsp\\\">\\n\\t</head>\\n</html>\\n$| p/Oce Colorwave 300 printer http config/ d/printer/ cpe:/h:oce:colorwave_300/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\nContent-Type: text/xml\\n\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\" \\?>\\n<syabasCommandServerXml>\\n\\t<returnValue>1</returnValue>\\n\\t<response>\\n\\t</response>\\n</syabasCommandServerXml>\\n$| p/Syabas Popcorn Hour media player XML command server httpd/ d/media device/ cpe:/h:syabas:popcorn_hour/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Web Server\\\"\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<body><h1>401 Unauthorized</h1></body></html>\\r\\n$| p/Aethra V3000 VoIP adapter http config/ d/VoIP adapter/ cpe:/h:aethra:v3000/a\n# There is a parallel array naming the fields: var Ds= new Array\\(\\\"PLC Type\\\",\\\"OS version\\\",\\\"Boot version\\\",\\\"Factory Boot\\\",\\\"BinLib Version\\\",\\\"Running Mode\\\",\\\"PLC Date\\\",\\\"PLC Time\\\"\\);\nmatch http m|^HTTP/1\\.0  200 OK\\r\\n.*<TITLE>Unitronics PLC</TITLE>.*<Script>\\r\\nvar V =new Array\\(\\\"(V\\w+) \\((\\w+)\\) \\\",\\\"([\\w._-]+)\\\",\\\"([\\w._-]+)\\\",\\\"([\\w._-]+)\\\",\\\"[01]+\\\",\\\"Running\\\",\\\"(\\d\\d/\\d\\d/\\d\\d)\\\",\\\"(\\d\\d:\\d\\d:\\d\\d)\\\"\\);|s p/Unitronics $1 ($2) PLC http config/ v/$3 $6 $7/ i/boot version: $4; factory boot: $5/ cpe:/h:unitronics:$1:$3/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\n\\r\\nNot Found$| p/Omron PLC http config/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nDate: .*\\r\\nLocation: https://([\\w._-]+):(\\d+)/\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 56\\r\\n\\r\\n<HTML><BODY><H1>301 Moved Permanently</H1></BODY></HTML>$| p/VMware vCenter Converter httpd/ i|redirect to tcp/$2| h/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nContent-Length: \\d+\\r\\n\\r\\n\\n\\n\\n\\n\\n\\n\\n\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n.*<title>F-Secure Policy Manager Server</title>|s p/Jetty/ i/F-Secure Policy Manager Server/ cpe:/a:mortbay:jetty/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nContent-Language: en-US\\r\\nContent-Type: text/html;charset=ISO-8859-1\\r\\n.*<title>F-Secure Policy Manager Server</title>|s p/F-Secure Policy Manager Server/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\r\\n.*/\\* f\\*cking IE doesn't support web standard \\*/\\n|s p/Encore ENTC-1000 thin client http config/ d/terminal/ cpe:/h:encore:entc-1000/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\n39\\r\\nRejected request from RFC1918 IP to public server address\\r\\n0\\r\\n\\r\\n$| p/OpenWrt uHTTPd/ d/WAP/ o/Linux/ cpe:/a:openwrt:uhttpd/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"FC330A\\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/Airvana cellular network access point http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Apple AirPlay httpd/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nServer: eCos Embedded Web Server\\r\\nConnection: keep-alive\\r\\nContent-Type: text/html\\r\\n\\r\\n\\xef\\xbb\\xbf<html>\\n<head>\\n<title>Danfoss Solar Inverters</title>\\n<meta http-equiv=\\\"refresh\\\" content=\\\"0;url=/cgi-bin/login_page\\.tcl\\\">\\n</head>\\n<body>\\n</body>\\n</html>\\n$| p/eCos Embedded Web Server/ i/IBC SOLAR inverter http config/ d/power-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: 149\\r\\nDate: [^\\r\\n]+\\r\\nServer: eCos Embedded Web Server\\r\\nConnection: keep-alive\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n\\xef\\xbb\\xbf<html>\\r\\n<head>\\r\\n<meta http-equiv=\"refresh\" content=\"0; url=first\\.asp\">\\r\\n<title>D-LINK SYSTEMS, INC\\. \\x7c WIRELESS ROUTER </title>\\r\\n</head>\\r\\n</html>\\r\\n|s p/eCos Embedded Web Server/ i/D-Link WAP/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Aperio ImageServer v([\\w._: -]+)\\r\\nSpectrumPlus: 0\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/plain\\r\\n\\r\\n| p/Aperio ImageServer httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nMime-Version: 1\\.0\\r\\nDate: [^\\r\\n]* (\\w+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Via: 1\\.0 ([\\w._-]+):\\d+ \\(IronPort-WSA/([\\w._-]+)\\)|s p/Cisco IronPort Web Security Appliance http config/ v/$3/ i/time zone: $1/ d/firewall/ h/$2/\nmatch http m|^HTTP/1\\.0 504 Gateway Timeout\\r\\nMime-Version: 1\\.0\\r\\nDate: .*? ([A-Z]+)\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n| p/IronPort WSA firewall http admin/ i/timezone: $1/ d/firewall/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nMime-Version: 1\\.0\\r\\nDate: .* ([A-Z]+)\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n| p/IronPort WSA firewall http admin/ i/timezone: $1/ d/firewall/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Bomgar\\r\\n|s p/Bomgar Remote Access Portal/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: SQLAnywhere/([\\d.]+)\\r\\n| p/Sybase SQLAnywhere httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Etag: ([\\w._ -]+)\\r\\n.*\\xef\\xbb\\xbf<!DOCTYPE html .*<title>AirDroid</title>|s p/AirDroid httpd/ v/$1/ d/phone/ o/Android/ cpe:/a:airdroid:airdroid:$1/ cpe:/o:google:android/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Etag: ([\\w._ -]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AirDroid-g\\r\\n|s p/AirDroid httpd/ v/$1/ d/phone/ o/Android/ cpe:/a:airdroid:airdroid:$1/ cpe:/o:google:android/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AirDroid ([\\w._-]+)\\r\\n|s p/AirDroid httpd/ v/$1/ d/phone/ o/Android/ cpe:/a:airdroid:airdroid:$1/ cpe:/o:google:android/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\nContent-Type: text/html\\r\\nX-Ajenti-Auth: start\\r\\nX-Ajenti-Challenge: | p/Ajenti admin httpd/ v/0.6.1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: DebTorrent/([\\w._-]+)\\r\\n|s p/DebTorrent httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/xml; charset=UTF-8\\r\\nContent-Length: 154\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<ListAllMyBucketsResult xmlns=\\\"http://doc\\.s3\\.amazonaws\\.com/2006-03-01\\\"><Buckets></Buckets></ListAllMyBucketsResult>$| p/Amazon S3 httpd/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nx-amz-error-code: WebsiteRedirect\\r\\nx-amz-error-message: Request does not contain a bucket name\\.\\r\\n| p/Amazon S3 httpd/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\n\\r\\n$| p/ADB P.DG A4001N WAP, Cisco Telepresence MCU 4505, Digifort Enterprise 6.5, or Telekom Speedport W723V httpd/\n# Also  with USB-Printer\n# Digifort port 80.\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"Servidor HTTP Digifort\\\"\\r\\n|s p/Digifort Enterprise 6.5 httpd/ o/Windows/ cpe:/a:digifort:digifort:6.5.0_final/ cpe:/o:microsoft:windows/a\n# Cisco IP Phone 7941 also?\nmatch http m|^HTTP/1\\.1 403 Forbidden\\.\\r\\nContent-Type: application/json.*\\r\\nDate: .* GMT\\r\\nContent-Length: 90\\r\\n\\r\\n{\\\"status\\\": {\\n  \\\"code\\\": 403,\\n  \\\"commandResult\\\": 1,\\n  \\\"msg\\\": \\\"Forbidden\\.\\\",\\n  \\\"query\\\": \\\"/\\\"\\n}}| p/DirecTV satellite receiver http interface/ d/media device/\nmatch http m|^HTTP/1\\.0 401 OK\\r\\nServer: EchoLink/([\\w._-]+)\\r\\n| p/EchoLink radio-over-VoIP http config/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-Powered-By: Express\\r\\nServer: Etherpad-Lite  \\(http://j\\.mp/ep-lite\\)\\r\\n| p/Etherpad lite/\nmatch http m=^HTTP/1\\.1 200 OK\\r\\nX-Powered-By: Express\\r\\nServer: Etherpad-Lite ([0-9a-f]+) \\((?:http://j\\.mp/ep-lite|http://etherpad\\.org)\\)\\r\\n= p/Etherpad lite/ v/$1/\nmatch http m|^HTTP/1\\.1 500 Server Error\\r\\nContent-Length: 0\\r\\nServer: HBHTTP POGOBASIC - ([\\w._-]+) - Linux\\r\\n| p/Pogoplug HBHTTP/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0\\r\\nServer: HBHTTP POGOBASIC - ([\\w._-]+) - Linux\\r\\n| p/Pogoplug HBHTTP/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/\n# VMware vSphere (VMware workstation 8.0.2 build-591240)\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\nContent-Type: text; charset=plain\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/VMware VirtualCenter Web service/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nExpires: 0\\r\\nDate: .* GMT\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\">\\n<html>\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\">\\n<link href=\\\"/manimg/[^/]+/main\\.css| p/ISPManager billing system httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nExpires: 0\\r\\nSet-Cookie: ispmgrses5=; path=/; HttpOnly(?:; expires=.*)?\\r\\nSet-Cookie: ispmgrlang5=[^:]*:(..); path=/; expires=.* ([A-Z0-9+-]+)\\r\\n| p/ISPManager billing system httpd/ v/5/ i/lang: $1; time zone: $2/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"realm\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/PoolServerJ http config/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nServer: Synaccess \\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n  <title>Remote Power Management System By Synaccess</title>\\r\\n| p/Synaccess NP-16 or NP-1601D power management system httpd/ d/power-misc/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .* GMT\\r\\nServer: Unknown\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<HTML><HEAD>\\n<TITLE>404 Not Found</TITLE>\\n</HEAD><BODY>\\n<H1>Not Found</H1>\\nThe requested URL / was not found on this server\\.<P>\\n</BODY></HTML>\\n$| p/Allot NetEnforcer AC-5000 load balancer/ d/load balancer/ cpe:/h:allot:netenforcer_ac-5000/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: mlws ([\\w._-]+)\\r\\n|s p/Mark Lee's Web Server/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"utf-8\\\"\\?>\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\"\\n \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" lang=\\\"en\\\"> \\n<head> \\n <title>BeagleBoard 101</title>| p/BeagleBoard httpd/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: Sat, 30 Dec 0000 00:29:28 GMT\\r\\nServer: RT-Platform/([\\w._-]+) UPnP/([\\w._ -]+)\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache, must revalidate\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Advent AW10P printer http config/ i/RT-Platform $1; UPnP $2/ d/printer/ cpe:/h:advent:aw10p/\nmatch http m|^HTTP/1\\.1 200 OK\\n.*Server: acarsd/([\\w._-]+)\\n|s p/acarsd httpd/ v/$1/ cpe:/a:acarsd:acarsd:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html \\r\\n.*<title>Motorola (PTP \\w+)  - Home \\(IP=[\\d.]+\\)</title>\\n|s p/Motorola $1 WAP http config/ d/WAP/ cpe:/h:motorola:$1/\nmatch http m|^HTTP/1\\.1 404 File not found\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nServer: Rex\\r\\nContent-Length: 141\\r\\n\\r\\n<html><head><title>404 Not Found</title></head><body><h1>Not found</h1>The requested URL / was not found on this server\\.<p><hr></body></html>$| p/Metasploit Rex httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Ubicom/([\\w._-]+)\\r\\n.*<title>InFocus NGProjector</title>\\r\\n|s p/Ubicom httpd/ v/$1/ i/InFocus IN2116 projector/ d/media device/ cpe:/a:ubicom:httpd:$1/ cpe:/h:infocus:in2116/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\" >\\r\\n<html >\\r\\n  <head>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\">\\r\\n<meta name=\\\"description\\\" content=\\\"Cisco (WAP\\w+)\\\">\\r\\n| p/Cisco $1 WAP http admin/ d/WAP/ cpe:/h:cisco:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nExpires: Mon, 1 Jan 2001 12:00:01 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Ubicom/([\\w._-]+)\\r\\n.*<title>\\s*CradlePoint (MBR\\w+) Gateway|s p/Ubicom httpd/ v/$1/ i/CradlePoint $2 broadband router/ d/broadband router/ cpe:/a:ubicom:httpd:$1/ cpe:/h:cradlepoint:$2/\nmatch http m|^<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\r\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\">\\r\\n<head>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=gb2312\\\" />\\r\\n<title></title>\\r\\n<script>\\r\\n\\tfunction index\\(\\){\\r\\n\\t\\tif\\(navigator\\.userAgent\\.indexOf\\(\\\"Safari\\\"\\)>0\\)| p/Swann DVR8-2600 security camera system httpd/ d/webcam/ cpe:/h:swann:dvr8-2600/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html;charset=UTF-8\\r\\npragma: no-cache\\r\\nCache-Control: no-store, no-cache, max-age=0\\r\\nexpires: Thu,01 Jan 1970 00:00:00 GMT\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\r\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\">\\r\\n<head>\\r\\n<meta http-equiv=\\\"content-type\\\" content=\\\"text/html; charset=utf-8\\\" />\\r\\n| p/Canon i-SENSYS MF8040Cn printer http admin/ d/printer/ cpe:/h:canon:i-sensys_mf8040cn/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nExpires: Mon, 01 Jan 1990 01:00:00 GMT\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n</head>\\n<body onload=\\\"top\\.location='/cab/top\\.shtml'\\\">\\n</body>\\n</html>\\n$| p/Canon i-SENSYS LBP5050 printer http admin/ d/printer/ cpe:/h:canon:i-sensys_lbp5050/\n# uname -a: Linux localhost 2.4.17_mvl21-malta-mips_fp_le #1 ІЧ 12тб 1 12:50:59 CST 2009 mips GNU/Linux\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Mini web server ([\\w._-]+) ZTE corp 2005\\.\\r\\n| p/Mini web server/ v/$1/ i/ZTE ZXV10 W300 ADSL router http config/ d/broadband router/ o/Linux 2.4.17/ cpe:/h:zte:zxv10_w300/ cpe:/o:montavista:linux_kernel:2.4.17/\nmatch http m|^HTTP/1\\.1 400 Bad Request \\r\\nConnection: close\\r\\nContent-Length: 15\\r\\nContent-Type: text/plain\\r\\nDate: .* GMT\\r\\nDav: 1, 2\\r\\nMs-Author-Via: DAV\\r\\nServer: Nanoki/([\\w._-]+)\\r\\nVary: accept-encoding\\r\\n\\r\\n400 Bad Request$| p/Nanoki/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: keep-alive\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html><head><title>PlayBook WebInspector</title>| p/BlackBerry PlayBook Web Inspector httpd/ cpe:/h:rim:blackberry_playbook_tablet/ cpe:/o:rim:blackberry_playbook_os:2.0/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: XES WindWeb/([\\w._-]+)\\r\\nConnection: close\\r\\n| p/WindWeb/ v/$1/ i/Xerox FreeFlow Accxes Web Print Management Tool/ d/printer/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nLast-modified: .* GMT\\r\\nExpires: .* GMT\\r\\nCache-Control: no-cache, no-store, must-revalidate\\r\\nCache-Control: post-check=0, pre-check=0\\r\\nPragma: no-cache\\r\\nServer: ESERV-10/([\\w._-]+)\\n| p/ESERV-10/ v/$1/ i/ProfiLux 3 eX aquarium computer/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: KwartzCtl/([\\w._-]+)\\r\\nWWW-authenticate: Basic realm=\\\"KWARTZ~Control\\\"\\r\\nConnection: close\\r\\nContent-type: text/html\\r\\n|s p/KwartzCtl/ v/$1/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Webduino/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\n\\r\\n<h1>EPIC FAIL</h1>$| p/Webduino/ v/$1/ i/SainSmart Ethernet shield for Arduino httpd/\nmatch http m|^HTTP/1\\.1 404  not found here\\. Contact Phluant Mobile \\r\\nContent-Length: 13\\r\\n\\r\\nerror xxxxxxx$| p/Phluant Mobile Duphus httpd/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .* GMT\\r\\nWWW-Authenticate: Basic realm=\\\"(\\w+)\\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H4>401 Unauthorized</H4>\\nAuthorization required\\.\\n</BODY></HTML>\\n$| p/Linksys $1 WAP http config/ d/WAP/ cpe:/h:linksys:$1/\nmatch http m|^HTTP/1\\.0 303 Use Instead\\r\\nLocation: /index\\.html\\r\\nContent-Type: text/html\\r\\n\\r\\n$| p/MikroTik RouterBoard 250GS httpd/ d/router/ cpe:/h:mikrotik:routerboard_250gs/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nDate: .* GMT\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Frameset//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/frameset\\.dtd\\\">\\r\\n<html>\\r\\n\\t<head>\\r\\n\\t\\t<TITLE>Web Application Manager</TITLE>\\r\\n| p/D-Link DIR-300 WAP http admin/ d/WAP/ cpe:/h:dlink:dir-300/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: httpd\\r\\nDate: .* GMT\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n<title>Login Page</title>\\n<!--\\[if lt IE 7\\.\\]>\\n| p/Cisco SPA112 VoIP adapter http config/ d/VoIP adapter/ cpe:/h:cisco:spa112/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nServer: PanWeb Server/ - \\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: Mon, 26 Jul 1997 05:00:00 GMT\\r\\n|s p/Palo Alto PanWeb httpd/ d/firewall/ cpe:/a:paloaltonetworks:panweb/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nDate: .* GMT\\r\\nServer: PanWeb Server/ - \\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\n|s p/Palo Alto PanWeb httpd/ d/firewall/ cpe:/a:paloaltonetworks:panweb/\n# Sony Bravia\n# Sony KDL-46hx720 TV (european model).\n# Sony Bravia kdl-46ex725\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 72\\r\\nDate: .* GMT\\r\\n\\r\\n<html><head><title>not found</title></head><body>not found</body></html>$| p/Sony Bravia TV/ d/media device/\nmatch http m|^HTTP/1\\.0 200 \\(OK\\) \\r\\nPragma: No-Cache\\r\\nCache-Control: no-cache\\r\\nDate: [A-Z]{3} [A-Z]{3} \\d+ \\d+:\\d+:\\d+ \\d\\d\\d\\d\\r\\nServer: HTTP Server\\r\\n.*<title>Nortel VPN Router</title>|s p/WindWeb/ v/1.0/ i/Nortel VPN router http admin/ d/router/ cpe:/a:windriver:windweb:1.0/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 353\\r\\n\\r\\n<HTML><HEAD>\\n<TITLE>ERROR: Access Denied</TITLE>\\n</HEAD><BODY>\\n<H1>ERROR</H1>\\n<H2>Access Denied</H2>\\n<HR>\\n<UL>\\n<LI>\\n<STRONG>\\nAccess Denied by security policy\\n</STRONG>\\n</UL>\\n<P>\\nThe security policy for your network prevents your request from\\nbeing allowed at this time\\.  Please contact your administrator if\\nyou feel this is incorrect\\.\\n</BODY>\\n</HTML>\\n\\n$| p/Secure Computing Sidewinder firewall http admin/ d/firewall/ cpe:/h:securecomputing:sidewinder/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nServer: SpryWare/([\\w._-]+)\\r\\nDate: .* GMT\\r\\nX-Deprecated-Response: Invalid CheckSum Received\\r\\n| p/SpryWare MIS quote server/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nX-Powered-By: PHP/([\\w._-]+)\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<meta http-equiv=\\\"REFRESH\\\" content=\\\"0;url=/nyan/index\\.html\\\">\\n</head>\\n<body>\\n</body>\\n</html>\\n\\n\\n$| p/Wifi Pineapple Jasager httpd/ i/PHP $1/ cpe:/a:php:php:$1/\n# http://www.nazgul.ch/dev_nostromo.html\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .* GMT\\r\\nServer: nostromo ([\\w._-]+)\\r\\n| p/nostromo/ v/$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nConnection: close\\r\\nContent-type: text/html\\r\\nLocation: /index\\.html\\r\\nContent-length: 144\\r\\n\\r\\n<HEAD><TITLE>302 Found</TITLE></HEAD>\\r\\n<BODY><H1>302 Found</H1>\\r\\n<P>Click <A HREF=\\\"/index\\.html\\\">here</A> if you are not redirected\\.</P></BODY>\\r\\n$| p/Macraigor mpDemon JTAG debugger/ d/specialized/\n# Original date was Tue, 18 Aug 2048 22:13:10 PST.\nmatch http m|^HTTP/1\\.1 -1 Bad Request\\r\\nDate: \\w+, \\d+ \\w+ 204\\d \\d+:\\d+:\\d+ PST\\r\\nServer: TargetWeb/([\\w._-]+) \\(TargetOS\\)\\r\\nConnection: close\\r\\n| p/Blunk Microsystems TargetWeb/ v/$1/ i/Lenel LNL-2220 firewall/ d/firewall/ cpe:/a:blunk:targetweb:$1/ cpe:/h:lenel:lnl-2220/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nContent-Length:0\\r\\nLocation: /SSI/index\\.htm\\r\\nServer: Mrvl-R1_0\\r\\nCache-Control: no-cache\\r\\n| p/HP LaserJet CP1205nw or P1606 http config/ d/printer/ cpe:/h:hp:laserjet_cp1205nw/ cpe:/h:hp:laserjet_p1606/\nmatch http m%^HTTP/1\\.1 200 OK\\r\\nContent-Length: +\\d+\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nContent-Type: text/html; charset=utf-8\\r\\nServer: Mrvl-R2_0\\r\\nCache-Control: no-cache\\r\\nConnection: keep-alive\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nX-Content-Type-Options: nosniff\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"UTF-8\"\\?>\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01//EN\" \"http://www\\.w3\\.org/TR/html4/strict\\.dtd\">\\n<html>\\n<head>\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\\n<title>HP LaserJet Pro MFP ([^&]+)&nbsp;&nbsp;&nbsp;((?:192\\.168|172\\.(?:1[6-9]|2\\d|3[01])|10\\.\\d{1,3})\\.\\d{1,3}\\.\\d{1,3})</title>% p/HP LaserJet Pro MFP config httpd/ i/model: $1; private IP: $2/ d/printer/ cpe:/h:hp:laserjet_$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: +\\d+\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nContent-Type: text/html; charset=utf-8\\r\\nServer: Mrvl-R2_0\\r\\nCache-Control: no-cache\\r\\nConnection: keep-alive\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nX-Content-Type-Options: nosniff\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"UTF-8\"\\?>\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01//EN\" \"http://www\\.w3\\.org/TR/html4/strict\\.dtd\">\\n<html>\\n<head>\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\\n<title>HP LaserJet Pro MFP ([^&]+)&nbsp;| p/HP LaserJet Pro MFP config httpd/ i/model: $1/ d/printer/ cpe:/h:hp:laserjet_$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: TAC/Xenta(\\w+) ([\\w._-]+)\\r\\n| p/TAC Xenta $1 programmable logic controller httpd/ v/$2/ cpe:/h:tac:xenta_$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nConnection: Close\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n\\r\\n<script type=\\\"text/javascript\\\" src=\\\"LocalizeString30\\.js\\\"></script>\\r\\n\\r\\n<script type=\\\"text/javascript\\\">\\r\\n| p/Monoprice MS NU62P11 or Sedna print server http config/ d/print server/ cpe:/h:monoprice:ms_nu62p11/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-cache\\nPragma: no-cache\\nContent-Type: text/html\\n\\n<html>\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\">\\n.*<title>(KX-\\w+)</title>|s p/thttpd/ i/Panasonic $1 printer http config/ d/printer/ cpe:/a:acme:thttpd/ cpe:/h:panasonic:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n.*<title>(PowerGrid [\\w._-]+) Web Configuration - Main Page</title>|s p/Comtrend $1 Ethernet adapter http config/ d/bridge/ cpe:/h:comtrend:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: \\\"Mon, 06 Jan 1990 00:00:01 GMT\\\"\\r\\n.*<title>(PowerGrid [\\w._-]+)  Web Configuration - Authentication</title>|s p/Comtrend $1 Ethernet adapter http config/ d/bridge/ cpe:/h:comtrend:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html\\r\\nDate: .* GMT\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\"\\n     \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\">\\n<head>\\n\\t<title>AWX</title>|s p/XBMC AWX http interface/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: pilot_session_test_cookie=; path=/; secure\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\">\\n  <head>\\n    <title>Riverbed Technology :: Cascade Shark</title>|s p/Riverbed Cascade Shark security appliance http interface/ d/security-misc/ cpe:/h:riverbed:cascade_shark/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<meta http-equiv=\\\"content-type\\\" content=\\\"text/css;charset=UTF-8\\\">\\n<meta http-equiv=\\\"Cache-Control\\\" content=\\\"no-cache\\\">\\n<meta http-equiv=\\\"Expires\\\" content=\\\"0\\\">\\n<title>prelogin</title>| p/Belkin Encore 3G router http config/ d/WAP/ cpe:/h:belkin:encore_3g/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: Alphanetworks,Inc\\.\\r\\nDate: .* GMT\\r\\nCache-Control: no-cache,no-store\\r\\nContent-Type: text/html; charset=utf-8\\r\\nConnection: close\\r\\n\\r\\n$| p/Western Digital WD TV Live media player http config/ d/media device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Zervit (\\d[\\w._-]+)\\r\\n| p/Zervit httpd/ v/$1/ cpe:/a:sebastian_fernandez:zervit:$1/\n# http://radiothermostat.com/documents/RTCOAWiFIAPIV1_3.pdf\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nServer: Marvell 8688WM\\r\\nConnection: close\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/plain\\r\\n\\r\\n22\\r\\nHTTP/1\\.0 clients are not supported\\r\\n0\\r\\n\\r\\n$| p/3M Filtrete 3M-50 thermostat http config/ d/specialized/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-control: no-store\\r\\nContent-type: text/html\\r\\n.*<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/strict\\.dtd\\\"><html><head><title>(X-[\\w._-]+)</title>|s p/Control By Web $1 remote management http interface/ d/remote management/ cpe:/h:controlbyweb:$1/\n# http://hackingteam.it/index.php/remote-control-system\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-length: 131\\r\\n\\r\\n<!DOCTYPE HTML>\\n<html>\\n<head>\\n    <meta http-equiv=\\\"refresh\\\" content=\\\"0;url=http://www\\.google\\.com\\\">\\n</head>\\n<body>\\n\\n</body>\\n</html>$| p/Hacking Team Remote Control System command and control httpd/\nmatch http m|^HTTP/1\\.1 404 NotFound\\r\\nConnection: close\\r\\nContent-Type: application/json\\r\\nContent-length: 16\\r\\n\\r\\n\\\"File not found\\\"$| p/Hacking Team Remote Control System Adobe Air command and control httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nPragma: no-cache\\r\\nExpires: -1\\r\\nCache-Control: no-cache\\r\\nContent-Length: 132\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\nServer:  \\r\\n\\r\\n<html><head><meta http-equiv='Refresh' content='0;url=https?://([\\w._-]+):\\d+/director\\.jsp'></head><body></body></html>$| p/RSA enVision httpd/ h/$1/ cpe:/a:rsa:envision/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n.*<TITLE>\\r\\nXerox WorkCentre ([\\w._/-]+) -|s p/Xerox WorkCentre $1 printer http config/ d/printer/ cpe:/h:xerox:workcentre_$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: keep-alive\\r\\n.*<title>XCP ([\\w._-]+)</title>|s p/Xen Cloud Platform httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: HttpSvr/([\\w._-]+)\\r\\nDate: .* GMT\\r\\nContent-type: text/html\\r\\n.*<title>Welcome To Commtech Messenger</title>|s p/Commtech Messenger Service httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\.\\r\\nContent-Type: application/json; charset=UTF-8\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\nContent-Length: 90\\r\\n\\r\\n{\\\"status\\\": {\\n  \\\"code\\\": 403,\\n  \\\"commandResult\\\": 1,\\n  \\\"msg\\\": \\\"Forbidden\\.\\\",\\n  \\\"query\\\": \\\"/\\\"\\n}}$| p/DirecTV JSON RPC/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .* GMT\\r\\nServer: Linux/2\\.x UPnP/([\\w._-]+) Avtech/([\\w._-]+)\\r\\nConnection: close\\r\\n| p/Avtech AVN801 network camera/ v/$2/ i/UPnP $1/ d/webcam/ o/Linux/ cpe:/h:avtech:avn801/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-type: text/html\\r\\nExpires: Thu, 3 Oct 1968 12:00:00 GMT\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\n.*<title>Super Hub \\x7c GUI</title>|s p/Virgin Super Hub media player http config/ d/media device/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: COLIB_ASYNC_HTTP_SERVER/([\\w._-]+)\\r\\n| p/COLIB_ASYNC_HTTP_SERVER/ v/$1/ i/Cotendo content delivery network/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nLocation: https?://([\\w._-]+):\\d+/sabnzbd\\r\\nContent-Length: 0\\r\\nContent-Type: text/plain\\r\\n| p/SABnzbd newsreader http interface/ h/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nSet-Cookie: rg_cookie_session_id=[0-9A-F]+; path=/; expires=Fri, 01 Jan 2038 00:00:00 GMT; HttpOnly\\r\\nCache-Control: no-cache,no-store\\r\\nPragma: no-cache\\r\\n.*<!--- Page\\(page_login\\)=\\[Zaloguj si\\xc4\\x99 \\] --->|s p/Vtech ARX168 WAP/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .* GMT\\r\\nLast-Modified: .* GMT\\r\\nETag: .*\\r\\nAccept-Ranges: bytes\\r\\n| p/Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config/ d/firewall/ o/FortiOS/ cpe:/h:fortinet:fortigate:50b/ cpe:/h:fortinet:fortiwifi:60c/ cpe:/h:fortinet:fortiwifi:80c/\nmatch http m|^HTTP/1\\.0 302 Redirection\\r\\nServer: TCSJH-WebServer\\r\\nDate: .* GMT\\r\\nLocation: http://[\\w._-]+:\\d+/index\\.htm\\r\\n\\r\\n$| p/TCS John Huxley Gaming Floor Live httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\n(?:[^\\r\\n]+\\r\\n)*?Date: [^\\r\\n]* 197\\d \\d+:\\d+:\\d+ GMT\\r\\nExpires: 0\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3c\\.org/TR/1999/REC-html401-19991224/loose\\.dtd\\\">\\r\\n<HTML><HEAD><TITLE>Firepro Wireless</TITLE>|s p/FirePro Router WAP http config/ v/5.4/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nAccess-Control-Allow-Origin:\\*\\r\\nCache-Control:no-cache\\r\\nContent-Type:application/json; charset=utf-8\\r\\nPragma:no-cache\\r\\n\\r\\n{\\\"error\\\": { \\\"type\\\": \\\"4110\\\", \\\"message\\\": \\\"No user logged in\\\" }, \\\"version\\\": 9, \\\"client_version\\\": \\\"([\\w._-]+)\\\", \\\"running\\\": false}$| p/Spotify Web Helper/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCACHE-CONTROL: no-cache\\r\\nDate: .* GMT\\r\\nContent-Type: text/html\\r\\n.*<META http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\">\\n<link rel=\\\"icon\\\" type=\\\"image/icon\\\" href=\\\"/favicon\\.ico\\\"/>\\n<title>Login</title>|s p/Huawei HG532c ADSL router http config/ d/broadband router/ cpe:/h:huawei:hg532c/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Mon, 28 Nov 2011 10:20:48 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: fs\\r\\n\\r\\n<!--\\n  Licensed to the Apache Software Foundation \\(ASF\\) under one or more\\n  contributor license agreements\\.|s p/Apache Tomcat/ v/6.0.35/ cpe:/a:apache:tomcat:6.0.35/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Last-Modified: Wed, 09 Mar 2011 18:57:19 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Apache\\r\\n\\r\\n<!--\\n  Licensed to the Apache Software Foundation \\(ASF\\) under one or more\\n  contributor license agreements\\.|s p/Apache Tomcat/ v/6.0.29/ cpe:/a:apache:tomcat:6.0.29/\nmatch http m|^HTTP/1\\.0 307 Temporary Redirect\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nContent-Length: 0\\r\\nContent-Type: text/html\\r\\nLocation: en/index\\.html\\r\\nConnection: close\\r\\nDate: .* 197\\d \\d+:\\d+:\\d+ GMT\\r\\nServer: gen5th/([\\w._-]+)\\r\\n\\r\\n$| p/Sony SNC-CH120 webcam http config/ v/$1/ d/webcam/ cpe:/h:sony:snc-ch120/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\n.*<link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"/dude/style\\.css\\\" />|s p/Miktotik Dude network monitor/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\+00:00\\r\\nServer: DC-MPSERVER/([\\w._-]+)\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/plain; charset=UTF-8\\r\\n\\r\\n{\\\"error\\\":\\\"\\\",\\\"result\\\":106}$| p/DC-MPSERVER/ v/$1/ i/Lenovo K91 TV/ d/media device/ cpe:/h:lenovo:k91/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nDate: .* GMT\\r\\nServer: Linux/([\\w._-]+) Sony-BDP/([\\w._-]+)\\r\\n\\r\\n$| p/Sony BDP-BX58 TV http config/ v/$2/ d/media device/ o/Linux $1/ cpe:/h:sony:bdp-bx58/ cpe:/o:linux:linux_kernel:$1/a\nmatch http m|^HTTP/1\\.0 302 Redirection\\r\\nServer: Intellex-Http Server ([\\w._-]+)\\r\\nDate: .* GMT\\r\\nLocation: http://([\\w._-]+)/default\\.html\\r\\n\\r\\n$| p/American Dynamics Intellex Digital Video Management System httpd/ v/$1/ h/$2/\nmatch http m|^HTTP/1\\.1 300 Multiple Choices\\r\\nContent-Type: application/json\\r\\nVary: X-Auth-Token\\r\\n.*{\\\"versions\\\": {\\\"values\\\": \\[{\\\"status\\\": \\\"beta\\\", \\\"updated\\\": \\\"(\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ)\\\", \\\"media-types\\\": \\[{\\\"base\\\": \\\"application/json\\\", \\\"type\\\": \\\"application/vnd\\.openstack\\.identity-v2\\.0\\+json\\\"},|s p/OpenStack Keystone identity service/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer:CBA8/([\\w._-]+)\\r\\n.*<title>LANDesk\\(R\\) Management Agent</title>|s p/LANDesk Management Agent/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\n\\r\\n<!-----!GS-1124C!-->\\n| p/Black Box LGB2008A switch http config/ d/switch/ cpe:/h:blackbox:lgb2008a/\nmatch http m|^HTTP/1\\.1 401 \\r\\nServer: MyWeb ([\\w._-]+)\\r\\nDate: .* GMT\\r\\nWWW-Authenticate: Basic realm=\\\"index\\.htm\\\"\\r\\n\\r\\n$| p/Black Box 8-port Ethernet switch http config/ i/MyWeb $1/ d/switch/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .* GMT\\r\\nLast-Modified: Sun, 15 Nov 1970 02:20:56 GMT\\r\\nETag: \\\"\\d+\\\"\\r\\nContent-Type: text/html\\r\\nContent-Length: 87\\r\\nAccept-Ranges: bytes\\r\\nCache-Control: private\\r\\n\\r\\n<html><head><META http-equiv=\\\"refresh\\\" content=\\\"0;URL=default-ru-RU\\.htm\\\"></head></html>$| p/Milestone IP video management http interface/\nmatch http m|^HTTP/1\\.0 307 OK\\r\\ncontent-type: text/html\\r\\nconnection: close\\r\\nlocation: /rp/\\?id=0\\r\\nserver: ArgogroupMonitorMaster/([\\w._-]+)\\r\\n| p/Ascom Monitor Master/ v/$1/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nDate: .* GMT\\r\\nContent-Length: 13\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\n\\r\\n403 Forbidden$| p/Neubot/\n# https://www.eso.org/projects/dfs/dfs-shared/web/ngas/; HTTPOptions reveals BaseHTTPServer 0.3.\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: NGAMS/v([\\w._-]+)/(\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d)\\r\\n.*<!DOCTYPE NgamsStatus SYSTEM \\\"http://([\\w._-]+):\\d+/RETRIEVE\\?internal=ngamsStatus\\.dtd\\\">\\n|s p/BaseHTTPServer/ v/0.3/ i/NGAS $1 http interface; date: $2/ h/$3/ cpe:/a:python:basehttpserver:0.3/a\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .* GMT\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: 52\\r\\nConnection: close\\r\\n\\r\\n404 Not Found\\n\\nThe resource could not be found\\.\\n\\n   $| p/Nicira bridge http admin/ d/bridge/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-Powered-By: Express\\r\\nContent-Type: text/html; charset=utf-8\\r\\n| p/Node.js/ i/Express middleware/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-Hue-Jframe-Path: /\\r\\nVary: Accept-Language, Cookie\\r\\nContent-Type: text/html; charset=utf-8\\r\\n.*<meta http-equiv=\\\"refresh\\\" content=\\\"0; url=/beeswax\\\">|s p/Hue Thrift plugin for Apache Hadoop/ cpe:/a:apache:hadoop/\nmatch http m|^HTTP/1\\.1 400 Bad Request \\(missing Host: header\\)\\r\\nConnection: close\\r\\nDate: .* \\+0000\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\n0\\r\\n\\r\\n$| p/oVirt/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nConnection: close\\r\\nDate: .* GMT\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLocation: http://:/login\\?back_url=http%3A%2F%2F%3A%2F\\r\\nX-Runtime: 7\\r\\n| p/Redmine http interface/ v/1.3.1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nContent-Type: text/plain\\r\\nServer: monocle/([\\w._-]+)\\r\\n\\r\\nOK,ondemand alive| p/monocle/ v/$1/ i/Sauce OnDemand Selenium server/\nmatch http m|^HTTP/1\\.1 401 ERROR\\r\\nWWW-Authenticate: Digest qop=\\\"auth\\\", realm=\\\"Modem@AirLink\\.com\\\", nonce=\\\"[0-9a-f]+\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Sierra Wireless ALEOS WAP http admin/ d/WAP/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Sierra Wireless Inc, Embedded Server\\r\\n| p/Sierra Wireless ALEOS WAP httpd/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length:165\\r\\nContent-Type:text/html\\r\\n\\r\\n<HTML><TITLE>NetTalk, Inc\\.</TITLE><FRAMESET COLS=\\\"100%\\\" ROWS=\\\"140,\\*\\\" frameborder=0><FRAME NAME=\\\"t\\\" SRC=\\\"t\\.htm\\\"><FRAME NAME=\\\"login\\\" SRC=\\\"login\\.cgi\\\"></FRAMESET></HTML>$| p/netTALK Duo http config/ d/phone/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"(TEW-\\w+)\\(ANNEX A\\)\\\"\\r\\n|s p/TRENDnet $1 WAP http config/ d/WAP/ cpe:/h:trendnet:$1/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nContent-type: text/html; charset=\\\"UTF-8\\\"\\r\\nConnection: close\\r\\nAccept-Ranges: none\\r\\nServer: Sockso\\r\\nCache-Control: private\\r\\n| p/Sockso music server/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nCache-Control: no-cache\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>Error 403</TITLE></HEAD><BODY><H1>Error 403</H1><P>Forbidden</P></BODY></HTML>$| p/Sonos Play:5 streaming media server/ cpe:/h:sonos:play%3a5/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"home\\\", \\r\\nContent-Type: text/html\\r\\nCache-Control: public\\r\\nPragma: cache\\r\\n.*<html>\\n<head>\\n  <title>401 Unauthorized</title>\\n</head>\\n<body bgcolor=\\\"ffffff\\\">\\n  <h2>401 Unauthorized<h2>\\n  <p>\\n  \\n</body>\\n</html>\\n|s p/Sagem F@st 2764 WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nServer: Lotus Mobile Connect\\r\\nWWW-Authenticate: Basic realm=\\\"Lotus Mobile Connect\\\"\\r\\nConnection: close\\r\\nSet-Cookie: WgSessionKey=; expires=Wed, 31 Dec 1969 23:00:00 GMT; Path=/; Domain=([\\w._-]+); HttpOnly\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n| i/Lotus Mobile Connect/ h/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nPragma: No-cache\\r\\nCache-Control: no-cache\\r\\nExpires: Thu, 01 Jan 19\\d\\d [^\\r\\n]* (\\w+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: CS-MARS\\r\\n|s p/Cisco MARS firewall http config/ i/time zone: $1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Synchronet BBS for Win32  Version ([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Allow: GET, HEAD, POST, OPTIONS\\r\\n.*<title>(.*) Home Page</title>|s p/Synchronet BBS httpd/ v/$1/ i/site name: $2/ cpe:/a:rob_swindell:synchronet:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: SouthRiver/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-AspNet-Version: ([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: /Content\\.aspx\\r\\n|s p/SouthRiver Titan httpd/ v/$1/ i/ASP.NET $2/ cpe:/a:microsoft:asp.net:$2/ cpe:/a:southrivertech:titan_ftp_server:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: TMeter\\r\\n.*<Copyright>Copyright \\(c\\) \\d+-\\d+ Alexey Kazakovsky</Copyright>.*<Version>([\\w._ -]+)</Version>|s p/TMeter traffic meter httpd/ v/$1/ o/Windows/ cpe:/a:trafficreg:tmeter:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: TMeter\\r\\n.*<Version>([\\w._-]+) Unicode</Version>\\r\\n\\t<CaptureStatus>In capture</CaptureStatus>\\r\\n\\t<XmlTrafficReport>([^<]*)</XmlTrafficReport>\\r\\n|s p/TMeter/ v/$1/ i/report dir: $2/ o/Windows/ cpe:/a:trafficreg:tmeter:$1/ cpe:/o:microsoft:windows/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent type: text/xml; charset=utf-8\\r\\n.*<Name>TMeter</Name>\\r\\n\\t<Copyright>Copyright \\(c\\) \\d\\d\\d\\d Trafficreg Software</Copyright>\\r\\n\\t<Version>([\\d.]+) Unicode</Version>\\r\\n|s p/TMeter/ v/$1/ o/Windows/ cpe:/a:trafficreg:tmeter:$1/ cpe:/o:microsoft:windows/\nmatch http m|^HTTP/1\\.0 200 OK\\nServer: Integrity\\nContent-type: text/html\\n\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<html>\\n<head>\\n<title>Welcome to INTEGRITY</title>| p/Hay Systems HSL 2.75G Femtocell http config/ d/WAP/ cpe:/o:hay_systems:hsl_2.75g_femtocell/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: application/octet-stream\\r\\nCache-Control: no-cache\\r\\n\\r\\n$| p/Samsung UE55D7000 TV http config/ d/media device/ cpe:/h:samsung:ue55d7000/\nmatch http m|^HTTP/1\\.0 200 OK \\r\\nContent-Type: text/html\\r\\nDate: .* GMT\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" lang=\\\"en\\\">\\n<head>\\n<title>Wuala  - Secure Online Storage</title>| p/Wuala cloud storage client http status/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: X10 Control ([\\w._-]+)\\r\\n| p/X10 ActivePhone remote control httpd/ v/$1/ d/phone/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: 79\\r\\n\\r\\n<html><head><title>Page Not Found</title></head><body>Not here :\\(</body></html>$| p/Prosody XMPP BOSH/ cpe:/a:prosody:prosody/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<title>Endpoint Security Required</title>\\n.*div\\.header { background: url\\(/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH\\) 0 0 repeat-x; height: 82px; }\\n|s p/FortiGate Endpoint Control httpd/\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r\\n.*<title>Web Filter Block Override</title>\\n.*div\\.header { background: url\\(https?://:\\d{1,5}/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH\\) 0 0 repeat-x; height: 82px; }\\n|s p/FortiGate Web Filtering Service/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=utf-8\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: TornadoServer/([\\w._-]+)\\r\\n.*<link rel=\\\"stylesheet\\\" href=\\\"/api/[\\da-f]{32}/file\\.cache/minified_front\\.css\\?\\d+\\\"|s p/Tornado httpd/ v/$1/ i/CouchPotato downloader/ cpe:/a:tornadoweb:tornado:$1/a\nmatch http m|^HTTP/1\\.1 401 UNAUTHORIZED\\r\\nWWW-Authenticate: Basic realm=\\\"CouchPotato Login\\\"\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: 54\\r\\nServer: TornadoServer/([\\w._-]+)\\r\\n\\r\\nThis is not the page you are looking for\\. \\*waves hand\\*$| p/Tornado httpd/ v/$1/ i/CouchPotato downloader/ cpe:/a:tornadoweb:tornado:$1/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Access-Control-Allow-Origin: \\*\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: xmpp-share-server/([\\w._-]+)\\r\\n|s p/xmpp-share-server httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .* ([\\w._-]+) \\d+\\r\\nServer: EasyAntiCheat/v([\\w._-]+)\\r\\n| p/EasyAntiCheat httpd/ v/$2/ i/time zone: $1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Embedthis-Appweb/([\\w._-]+)\\r\\n| p/Embedthis-Appweb/ v/$1/ cpe:/a:embedthis:appweb:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Google Search Appliance\\r\\n\\r\\n$| p/Google Search Appliance httpd/ d/specialized/ cpe:/a:google:search_appliance_software/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: JavaHttpServer/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Pragma: /obligation\\r\\n|s p/JavaHttpServer/ v/$1/ i/HP Web-Based Enterprise Services obligation server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Apache\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Orion-Version: ([\\w._-]+)\\r\\n|s p/Apache httpd/ i/Western Digital web management; Orion $1/ d/storage-misc/ cpe:/a:apache:http_server/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nContent-Length: 0\\r\\nLocation: /fhem\\r\\n\\r\\n$| p/FHEM home automation http admin/ d/remote management/ cpe:/a:rudolf_koenig:fhem/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<title>IBM Tivoli Composite Application Manager for Response Time Tracking ([\\w._-]+) SoapConnectorServer</title></head>.*SoapConnectorServer is Alive\\. <pre>\\nBuild ID   \\[([\\w._-]+)\\]\\nBuild Date \\[([^]]+)\\]\\n|s p/IBM Tivoli Application Manager httpd/ v/$1/ i/build ID: $2; build date: $3/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nServer: alphapd\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"(DCS-[\\w._-]+)\\\"\\r\\n|s p/D-Link $1 webcam http interface/ d/webcam/ cpe:/h:dlink:$1/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nConnection: Close\\r\\nServer: Day-Servlet-Engine/([\\w._-]+) \\r\\nDate: .*\\r\\nLocation: http://[\\d.]+:\\d+/welcome\\.html\\r\\n\\r\\n$| p/Day CRX httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: SONY LocationFreeTV/([\\w._-]+) HTTPD/([\\w._-]+)\\r\\n| p/Sony $1 LocationFree TV http interface/ v/$2/ d/media device/ cpe:/h:sony:$1/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: DivaWebConfig\\r\\n.*<title>Dialogic&reg; Diva&reg; Configuration</title>|s p/Dialogic Diva media board http config/ d/specialized/ cpe:/h:dialogic:diva/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: MiniWeb\\r\\nConnection: Keep-Alive\\r\\nContent-length: 125\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL has no content\\.</p></body></html>$| p/MediaCoder media converter http interface/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache, must-revalidate\\r\\nContent-type: text/html\\r\\nExpires: Tue, 02 Jan 2000 01:00:00 GMT\\r\\n.*<title>(DIR-[\\w._-]+)</title>.*<meta name=\\\"copyright\\\" content=\\\"Copyright \\(C\\) 2008 D-Link Russia\\\" />|s p/D-Link $1 WAP http admin/ i/Russian/ d/WAP/ cpe:/h:dlink:$1/\nmatch http m|^HTTP/1\\.0 \\xff\\xfbAllow: GET \\r\\nAccept-Ranges: bytes\\r\\nCache-Control: no-cache\\r\\nCache-Control: no-store\\r\\nConnection: Keep-Alive\\r\\nServer: GoPro Web Server v([\\w._-]+)\\r\\nContent-Type: text/plain\\r\\nContent-Length: 2\\r\\n\\r\\n$| p/GoPro HERO3 camera http interface/ v/$1/ d/webcam/ cpe:/h:gopro:hero3/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: BQTWWW/([\\w._-]+) \\(RSX\\) \\(RSX-11M-PLUS V([\\w._-]+)\\)\\r\\n| p/BQTWWW/ v/$1/ o/RSX-11M-PLUS $2/ cpe:/o:dec:rsx_11m_plus:$2/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\n(?:[^\\r\\n]+\\r\\n)*?Www-Authenticate: Basic realm=\\\"SickBeard\\\"\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: CherryPy/([\\w._-]+)\\r\\n|s p/CherryPy httpd/ v/$1/ i/Sick Beard PVR/ cpe:/a:cherrypy:cherrypy:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nContent-Length: 128\\r\\nConnection: close\\r\\nLocation: http://127\\.0\\.0\\.1:\\d+/api/index\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n<HTML>\\n <HEAD>\\n  <TITLE>Found</TITLE>\\n </HEAD>\\n <BODY>\\n  You should go to <A HREF=\\\"/api/index\\\">/api/index</A>\\.\\n </BODY>\\n</HTML>\\n$| p/Neubot httpd/\n# Should be able to know version based on added headers and/or copyright date.\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nSet-Cookie: JSESSIONID=\\w+; Path=/; HttpOnly\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: SEPM\\r\\n.*<title>Symantec Endpoint Protection Manager</title>|s p/Symantec Endpoint Protection Manager http config/ d/firewall/ cpe:/a:symantec:endpoint_protection_manager/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-XSS-Protection: 1; mode=block\\r\\nX-Content-Type-Options: nosniff\\r\\nSet-Cookie: JSESSIONID=[A-F\\d]{32}; Path=/; Secure; HttpOnly\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: SEPM\\r\\n\\r\\n\\r\\n<!--\\r\\nSYMANTEC:     Copyright \\(c\\) 2010-2015 Symantec Corporation\\.| p/Symantec Endpoint Protection Manager http config/ d/firewall/ cpe:/a:symantec:endpoint_protection_manager/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-XSS-Protection: 1; mode=block\\r\\nX-Content-Type-Options: nosniff\\r\\nSet-Cookie: JSESSIONID=[A-F\\d]{32}; Path=/; Secure; HttpOnly\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nTransfer-Encoding: chunked\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: SEPM\\r\\n\\r\\n\\r\\n<!--\\r\\nSYMANTEC:     Copyright \\(c\\) 2010-2015 Symantec Corporation\\.| p/Symantec Endpoint Protection Manager http config/ d/firewall/ cpe:/a:symantec:endpoint_protection_manager/\n\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Length: 85\\r\\nContent-Type: text/plain\\r\\n\\r\\nThe client sent a plain HTTP request, but this server only speaks HTTPS on this port\\.$| p/SABnzbd+ newsreader httpd/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Frameset//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/frameset\\.dtd\\\">\\r\\n<html>\\r\\n\\t<head>\\r\\n\\t\\t<TITLE>Web Client for DVR</TITLE>| p/Zmodo camera http interface/ d/webcam/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: HTTP Server\\(V([\\w._-]+)\\)\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 47\\r\\nCache-Control: no-cache; no-store;max-age=0\\r\\nConnection: close\\r\\n\\r\\n<HTML><BODY>404 Host Not Found\\.</BODY></HTML>\\r\\n$| p/Aten KN2116v KVM-over-IP switch http interface/ v/$1/ d/remote management/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nAge: 0\\r\\nServer: YTS/([\\w._-]+)\\r\\n| p/Yahoo! Traffic Server/ v/$1/\nmatch http m|^HTTP/1\\.0 503 Service Temporarily Unavailable\\r\\nDate: .*\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nAge: 0\\r\\nServer: YTS/([\\w._-]+)\\r\\n| p/Yahoo! Traffic Server/ v/$1/\nmatch http m|^HTTP/1\\.1 404 File not Found\\r\\nServer: NAE01\\r\\nDate: .*\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: 0\\r\\nConnection: Close\\r\\n\\r\\n$| p/Johnson Metasys building management system http interface/ d/specialized/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 STRICT//EN\\\" \\\"DTD/xhtml1-strict\\.dtd\\\">\\r\\n<html>\\r\\n<head>\\r\\n<title>EDS Ethernet to 1-wire Interface</title>| p/Embedded Data Systems Ethernet-to-1-wire interface http admin/ d/bridge/\nmatch http m|^HTTP/1\\.0 301 OK\\r\\nConnection: close\\r\\nLocation: /AgentManager/get/html/home\\.html\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>redirecting to url</TITLE></HEAD><BODY><H1>redirecting to url</H1><A HREF=\\\"/AgentManager/get/html/home\\.html\\\"></A><p></BODY></HTML>\\r\\n\\r\\n$| p/QAM Launcher Manager/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 3\\.2 Final//EN\\\">\\n\\n<HTML>\\n\\n    <META HTTP-EQUIV=\\\"Refresh\\\" CONTENT=\\\"\\.03; URL=perl/initial\\.pl\\\"></META>\\n    <HEAD><TITLE>OPNET AppSQL Xpert Management Console</TITLE></HEAD>\\n\\n<BODY BGCOLOR=\\\"#A8D5FE\\\">\\n\\n</HTML>\\n$|s p/Riverbed OPNET AppResponse httpd/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: BitLeapHTTP\\r\\nX-Dav-Powered-By: BitLeapWebDAV\\r\\nMS-Author-Via: DAV\\r\\nDAV: 1, 2, version-control\\r\\nContent-Length: 0\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text/xml; charset=\\\"utf-8\\\"\\r\\nDate: .*\\r\\nX-WebDAV-Status: HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=LeapServ\\r\\n\\r\\n$| p/Barracuda Backup 490 appliance http admin/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nPragma: no-cache\\r\\n\\r\\n<html><head><title>ffserver Status</title>\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://dlink\\.ru/favicon\\.ico\\\">\\n| p/D-Link ffserver httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: HTTP Server\\r\\n.*<!--\\n    M Comeau Dec 19, 2011\\n    This page is used to redirect to the URL below\\.  It is necessary to do this\\n    so the http server properly redirects to the CGI\\.\\n-->\\n<head>\\n<title>BSE Redirect</title>|s p/Chrysler wiTECH VCI Pod automotive diagnostic device/ d/specialized/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html><head><title>Welcome to Keter</title></head><body><h1>Welcome to Keter</h1><p>You did not provide a virtual hostname for this request\\.</p></body></html>$| p/Keter httpd/ i/Yesod web framework/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n\\r\\n\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\">\\n  <head>\\n    <meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\" />\\n    <title>Servers Ultimate Pro</title>| p/Ice Cold Apps Servers Ultimate Pro httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nETag: .*\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: wifi-security-server\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\\\"refresh\\\" content=\\\"1; URL=/wifiserver\\\">\\r\\n</head>\\r\\n<body>\\r\\n</body>\\r\\n</html>\\r\\n$| p/Apache Tomcat/ i/AirTight SpectraGuard firewall/ d/firewall/ cpe:/a:apache:tomcat/a\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nX-Powered-By: Express\\r\\nVary: Accept\\r\\nContent-Type: text/plain\\r\\nLocation: /plugin\\r\\nContent-Length: 41\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\nMoved Temporarily\\. Redirecting to /plugin$| p/Ninja Blocks home automation httpd/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nDate: .* ([+-]\\d+)\\r\\nAllow: GET, POST\\r\\nPragma: No-Cache\\r\\nServer: MobiCont ([\\w._-]+)\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Mobicont httpd/ v/$2/ i/time zone: $1/\n# http://www.st.rim.or.jp/~nakata/\nmatch http m|^HTTP/1\\.1 200 Document follows\\r\\nMIME-Version: 1\\.0\\r\\nServer: AnWeb/([\\w._-]+)\\r\\n| p/AN httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Mini web server 1\\.0 ZTE corp 2005\\.\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nCache-Control: no-cache,no-store\\r\\n\\r\\n                                              <HTML>\\n                                              <HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\n                                              <BODY BGCOLOR=\\\"#FFFFFF\\\" TEXT=\\\"#000000\\\" LINK=\\\"#2020ff\\\" VLINK=\\\"#4040cc\\\">\\n                                              <H2>400 Bad Request</H2>\\nYour request has bad syntax or is inherently impossible to satisfy\\.\\n| p/thttpd/ i/Zebra ZTE F660 broadband router/ d/broadband router/ cpe:/a:acme:thttpd/ cpe:/h:zebra:zte_f660/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nPragma: no-cache\\r\\nmax-age: Thu, 01 Jan 1970 00:00:00 GMT\\r\\n.*<title>Error 404 NOT_FOUND</title>|s p/Google Web Toolkit httpd/ cpe:/a:google:web_toolkit/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Miner WEB Server\\r\\n.*<td align='right'>Total MHS:</td><td align='left'>([\\d.]+)</td>.*<td align='right'>Up Time:</td><td align='left'>([\\w,]+)</td>.*Current Server: ([][\\w._:-]+)|s p/Asicminer Block Eruptor Blade bitcoin miner httpd/ i|Mhash/s: $1; uptime: $2; server: $3|\nmatch http m|^HTTP/1\\.1 200 OK\\r\\ncontent-type: text/plain; charset=utf-8\\r\\nCache-Control: no-cache\\r\\nExpires: Fri, 01 Jan 1990 00:00:00 GMT\\r\\nContent-Length: \\d+\\r\\nServer: Development/([\\w._-]+)\\r\\nDate: .*\\r\\n| p/Google App Engine SDK/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\ncontent-length: \\d+\\r\\ncontent-type: text/html; charset=utf-8\\r\\n.*<title>\\n\\t  SOGo\\n\\t</title>.*<meta content=\\\"SKYRIX Software AG/Inverse inc\\.\\\" name=\\\"author\\\" />.*<meta content=\\\"@shiva (\\d+)\\\" name=\\\"build\\\" />|s p/Inverse SOGo SOPE application server httpd/ v/build $1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<html><head><title>WiFi ADSL2/2\\+ Combo IAD</title>| p/Netcomm NP805N WAP http config/ d/WAP/ cpe:/h:netcomm:np805n/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: Http Server\\r\\nDate: .* \\d\\d\\d\\d\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http:///login\\.asp\\r\\n\\r\\n<html><head></head><body>\\r\\n\\t\\tThis document has moved to a new <a href=\\\"http:///login\\.asp\\\">location</a>\\.\\r\\n\\t\\tPlease update your documents to reflect the new location\\.\\r\\n\\t\\t</body></html>\\r\\n\\r\\n$| p/Tenda N60 WAP http admin/ d/WAP/ cpe:/h:tenda:n60/\n# Fallback match:\nmatch http m|^HTTP/1\\.1 400 Page not found\\r\\nServer: Http Server\\r\\nDate: .* \\d\\d\\d\\d\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/Tenda WAP http admin/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: EDICOM-HTTP\\r\\n.*<meta name=\\\"Author\\\" \\r\\ncontent=\\\"Santiago Bellosta\\\">.*<title>EDICOM AS2 \\r\\nSERVER</title>|s p/Edicom AS2 proxy server http config/ d/proxy server/\nmatch http m|^HTTP/1\\.1 417 Expectation Failed\\r\\nServer: AvigilonServer/([\\w._-]+)\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nContent-Length: 19\\r\\n\\r\\nExpectation failed\\.$| p/Avigilon Control Center httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\n\\r\\n<!DOCTYPE html>\\r\\n<html>\\r\\n<head>\\r\\n   <title>CyberStat Configuration</title>| p/CyberStat thermostat http interface/ d/specialized/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nDate: .*\\r\\nServer: \\r\\nContent-length: 0\\r\\nConnection: close\\r\\nLocation: https://:443/login\\.lp\\r\\nSet-Cookie: xAuth_SESSION_ID=.*; path=/; \\r\\nCache-control: no-cache=\\\"set-cookie\\\"\\r\\n\\r\\n$| p/Technicolor TG789vn broadband router/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: IPWEBS/([\\w._-]+)\\r\\n.*\\.noscript_text{\\r\\nwidth: 100%;\\r\\nheight: 100%;\\r\\nfont-size: 24px;\\r\\ntext-align: center;\\r\\npadding-top: 24px;\\r\\n}\\r\\n</style>|s p/IPWEBS/ v/$1/ i/Huawei broadband router http admin/ d/broadband router/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nDate: .*\\r\\nServer: KGet\\r\\nWWW-Authenticate: Basic realm=\\\"KGet Webinterface Authorization\\\"\\r\\n| p/KGet download manager http interface/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nLocation: https?://([\\w._-]+):\\d+/vkd/GetWelcomeScreen\\.event\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">| p/Symantec PGP Verified Directory httpd/ h/$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nLocation: https?://([\\w._-]+):\\d+/b/l\\.e\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">| p/Symantec PGP Web Messenger httpd/ h/$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nLocation: https?://([\\w._-]+):\\d+/omc/GetLoginScreen\\.uevent\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">| p/Symantec PGP Universal Server http admin/ h/$1/ cpe:/a:symantec:pgp_universal_server/\nmatch http m|^HTTP/1\\.1 404 not found\\r\\nContent-Length: 13\\r\\n\\r\\n404 not found$| p/Slingbox 500 httpd/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: ZM_TEST=true;Secure\\r\\n.*\\* Zimbra Collaboration Suite Web Client\\r\\n|s p/Zimbra Collabration Suite httpd/ cpe:/a:zimbra:zimbra_collaboration_suite/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n<html>\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\"> \\n<title>Access Point Configuration Utility</title>| p/Cisco AP541N WAP http admin/ d/WAP/ cpe:/h:cisco:ap541n/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Close\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Talk Talk YouView set-top box http config/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: http server ([\\w._-]+)\\r\\n.*<title>NVR</title>|s p/Qnap VioStor video recorder http admin/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Length: 6\\r\\n\\r\\nERROR\\n$| p/Apple Xsan httpd admin/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nX-DEVICE-VALUE:Not Found\\r\\nServer: Encore/([\\w._-]+)\\r\\nContent-Length: 134\\r\\n\\r\\n<html><head>\\r\\n<META NAME=\\\"DEVICE-VALUE\\\" CONTENT=\\\"Not Found\\\">\\r\\n</head><body>\\r\\n<DIV CLASS=\\\"DEVICE-VALUE\\\">Not Found</DIV>\\r\\n</body></html>$| p/Yamaha M7CL sound board http config/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nLocation:/login/login\\.hchl\\r\\nDate:.*\\r\\nServer:Numara FootPrints Asset Core Agent ([\\w._-]+)\\r\\nConnection:Close\\r\\nContent-Length:0\\r\\n\\r\\n$| p/Numara FootPrints inventory management http admin/ v/$1/\nmatch http m|^HTTP/1\\.1 200 Success\\r\\nServer: Messaging\\r\\ntransfer-encoding: chunked\\r\\n\\r\\n0\\r\\n\\r\\n$| p/Sybase Unwired Server Synchronization httpd/\nmatch http m|^HTTP/1\\.1 302 Object Moved\\r\\nLocation: /vpn/index\\.html\\r\\nSet-Cookie:NSC_AAAC=| p/Citrix NetScaler Access Gateway/ cpe:/h:citrix:netscaler_access_gateway/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: webvpn=;.*document\\.location\\.replace\\(\\\"/\\+CSCOE\\+/logon\\.html\\\"\\)|s p/Cisco ASA SSL VPN/\nmatch http m|^HTTP/1\\.1 303 See Other\\r\\nServer: \\r\\nContent-type: text/plain\\r\\nLocation: /login\\.xml\\?session=false\\r\\n| p/IBM WebSphere DataPower management interface/\nmatch http m|^HTTP/1\\.1 407 MAG Authentication Failed!\\r\\n| p/AirWatch Mobile Access Gateway/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Linux, STUNNEL/1\\.0, (D[\\w-]+) Ver ([\\w._-]+)\\r\\n| p/D-Link router admin httpd/ i/model $1; firmware $2/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\n# version number is not really a version (this was 1.7.0.11)\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Easy-Web Server/1.0\\r\\nAuthor: Easy Ftp Server\\r\\nWWW-Authenticate: BASIC realm=\\\"Ftp User Login\\\"\\r\\n| p/EasyFTP Server httpd/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nServer: wanduck\\r\\nDate: .*\\r\\n| p/Asus wanduck WAN monitor httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer:Cross Web Server\\r\\n| p/Cross DVR httpd/ d/media device/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Aterm\\(HT\\)/([\\d.]+)\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Aterm\\(admin\\)\\\"\\r\\n| p/NEC Aterm admin httpd/ v/$1/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: TAC/Xenta([\\w-]+) ([\\d.]+)\\r\\n| p/TAC Xenta httpd/ v/$2/ i/Xenta $1/\nmatch http m|^HTTP/1\\.1 200 OK\\r.*\\nserver: WebSEAL/([\\d.]+) \\(Build (\\d+)\\)\\r\\n|s p/IBM Tivoli WebSEAL httpd/ v/$1/ i/build $2/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: App-webs/\\r\\n| p/Hikvision IP camera httpd/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 [Oo][Kk]\\r\\nServer: Venky\\r\\n| p/Smartfren EVDO modem httpd/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Aviosys\\r\\nPragma: no-cache\\r\\nWWW-Authenticate: Basic realm=\\\"([^\"]+)\\\"\\r\\n| p/Aviosys $1 httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r.*\\nServer: OwnServer([\\d.]+)\\r\\n|s p/Anteco OwnServer/ v/$1/\n# The \"EWS-NIC4\" server is used in all sorts of printers, but version 8.80 is exclusively Dell 1320c\n# Could probably use Shodan to enumerate other versions\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: EWS-NIC4/8\\.80\\r\\n|s p/Embedded Web Server httpd/ v/8.80/ i/Dell 1320c/ d/printer/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Frameset//EN\\\">\\r\\n<!-- Copyright \\(c\\) 2000-2\\d\\d\\d, Fuji Xerox Co\\., Ltd\\. All Rights Reserved\\. -->\\r\\n<HTML>.*<TITLE>\\r\\n([\\w -]+?) +- [\\d.]+\\r\\n</TITLE>|s p/Fuji-Xerox $1 httpd/ d/printer/ cpe:/h:fuji_xerox:$1/\n# lighttpd started responding with HTTP/1.1 in version 2.0.0, apparently\nmatch http m|^HTTP/1.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: lighttpd/([\\w._-]+)\\r\\n|s p/lighttpd/ v/$1/ cpe:/a:lighttpd:lighttpd:$1/\n# SNC full system info at /command/inquiry.cgi?inqjs=system\nmatch http m|^HTTP/1\\.0 307 Temporary Redirect\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: gen5th/([\\d.]+)\\r\\n|s p/Sony Network Camera httpd/ v/$1/ d/webcam/\n# WEB-Manager 3.2. Looks like later versions are framed.\nmatch http m|^HTTP/1\\.1 200\\r\\n.*<title>WEB-Manager ([\\d.]+)</title>.*<applet code=\\\"container\\.class\\\" archive=web\\.jar width=\\\"743\\\" height=\\\"1250\\\" style=\\\"border: thick ridge\\\">|s p/Lantronix WEB-Manager admin httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 302 Document Follows\\r\\nSet-Cookie: SESSID=[a-f0-9]{32}\\r\\nPragma: no-cache\\r\\nLocation: http:///([\\w.-]+)/testcookie\\.ssi\\?SESSID=[a-f0-9]{32}\\r\\nConnection: close\\r\\n\\r\\n| p/IBM Remote Supervisor Adapter httpd/ h/$1/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: httpd\\r\\nDate: .*\\r\\nLocation: http://belkin\\.range\\r\\nContent-Type: text/plain\\r\\nConnection: close\\r\\n\\r\\n| p/Belkin WiFi range extender httpd/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nSet-Cookie: rg_cookie_session_id=.*\\r\\n\\r\\n<!-- Page\\(9123\\)=\\[Please Reset Your Password\\] -->|s p/BT Home Hub config httpd/ i/password reset page/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nSet-Cookie: rg_cookie_session_id=.*\\r\\n\\r\\n<!-- Page\\(9096\\)=\\[Home\\] -->|s p/BT Home Hub config httpd/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Sierra Wireless Inc, Embedded Server\\r\\n| p/Sierra Wireless embedded httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-store\\r\\nContent-Length: 96\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<body bgcolor=\\\"#99ccff\\\">\\n<center>\\n<h1>Invalid Access</h1>\\n</center>\\n</p></body>\\n</html>\\n\\n\\n| p/Cisco ATA 186 httpd/ d/VoIP adapter/ cpe:/h:cisco:ata_186/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .*\\r\\nServer: RT-Platform/([\\d.]+) (UPnP/[\\d.]+) EBS Mi\\r\\n| p/EBS RTPlatform UPnP httpd/ v/$1/ i/$2/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nServer: Cassini/(4\\.[\\d.]+)\\r\\nDate: .*\\r\\nX-AspNet-Version: ([\\d.]+)\\r\\nLocation: /Login\\.aspx\\r\\n| p/Cassini httpd/ v/$1/ i/SmarterStats 8.2; ASP.NET $2/ o/Windows/ cpe:/a:microsoft:asp.net:$2/ cpe:/a:microsoft:cassini:$1/ cpe:/a:smartertools:smarterstats:8.2/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"Netgear\\\"\\r\\n| p/Netgear admin httpd/ d/broadband router/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\r\\n<!-- release 20120329v1  -->\\r\\n<!-- \\$Id: header\\.php 3167 2010-03-03 18:11:27Z slemoine \\$ -->| p/Cisco DPC3939b or Arris TG862G wireless cable modem httpd/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Close\\r\\nServer: (BC\\d+) WEB SERVER V([\\d.]+)\\r\\nAllow: GET\\r\\nContent type: text/html\\r\\nContent-length: \\d+\\r\\ntitle: BC\\d+\\.htm\\r\\n\\r\\n| p/Beckhoff $1 Bus Terminal Controller/ v/$2/ d/specialized/\nmatch http m|^HTTP/1\\.0 404 \\r\\n(?:[^\\r\\n]+\\r\\n)*?server: CubeCoders-McMyAdmin/IAWS\\r\\n.*<p id=\\\"verinfo\\\">McMyAdmin Personal - Web Backend v([\\d.]+)</p>|s p/CubeCoders McMyAdmin Personal Minecraft control panel/ v/$1/\nmatch http m|^HTTP/1\\.0 404 \\r\\n(?:[^\\r\\n]+\\r\\n)*?server: CubeCoders-McMyAdmin/IAWS\\r\\n.*<p id=\\\"verinfo\\\">McMyAdmin Professional - Web Backend v([\\d.]+)</p>|s p/CubeCoders McMyAdmin Professional Minecraft control panel/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d \\r\\n(?:[^\\r\\n]+\\r\\n)*?server: CubeCoders-McMyAdmin/IAWS\\r\\n|s p/CubeCoders McMyAdmin Enterprise Minecraft control panel/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: cc-web/([\\d.]+)\\r\\n| p/Centova Cast httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r.*\\nServer: WSO2 Carbon Server\\r\\n|s p/WS02 Carbon middleware/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Linux, HTTP/1\\.1, MyNetN(\\d\\d\\d) Ver ([\\d.]+)\\r\\n| p/Western Digital MyNet N$1 admin httpd/ v/$2/ d/WAP/ o/Linux/ cpe:/h:western_digital:n$1/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r.*\\nServer: Monkey\\r\\n|s p/Monkey httpd/ o/Linux/ cpe:/a:monkey-project:monkey_http_daemon/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nConnection: close\\r\\nLocation: http://([\\w.-]+:\\d+)/guest/(?:s/default/)?\\?id=[a-f0-9:]+&ap=([a-f0-9:]+)&t=\\d+&url=http://\\(null\\)/\\r\\n\\r\\n| p/Ubiquiti UniFi guest redirection/ i/portal: $1; MAC: $2/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: M1 WebServer/([\\d.]+)-VxWorks\\r\\n| p/Bachmann M1 PLC httpd/ v/$1/ o/VxWorks/ cpe:/o:windriver:vxworks/a\n# Ferguson Ariva 252 HD satellite receiver\nmatch http m|^HTTP/1\\.0 \\d\\d\\d [A-Z ]+\\r\\nServer: klhttpd/([\\d.]+)\\r\\n| p/klhttpd/ v/$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r.*\\nServer: ProCurve Web Server\\r\\n|s p/HP ProCurve httpd/ d/switch/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n\\xef\\xbb\\xbf<!-- Release v ([\\d.]+) \\d{8} -->.*<title>Bosch Security Systems</title>|s p/Bosch Security DVR httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\ntv2-auth-digest: | p/Microsoft Mediaroom httpd/ i/IPTV tuner/ d/media device/\nmatch http m|^HTTP/1\\.0 404 Not found\\r\\nDate: [\\w., :]+ ([+-]\\d\\d\\d\\d)\\r\\nServer: Monitorix HTTP Server\\r\\n| p/Monitorix httpd/ i/time zone $1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Web Server\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n\\r\\n   <!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.0 Transitional//EN\\\">\\n<HTML>\\n<HEAD>\\n  <TITLE>Login</TITLE>\\n  <link rel=\\\"stylesheet\\\" href=\\\"/50010f00/css/style1\\.css\\\">| p/HP V1810 switch httpd/ d/switch/ cpe:/h:hp:v1810/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: PRINT_SERVER WEB 1\\.0\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"(W\\w+54G\\w*)\\\"\\r\\n\\r\\n401 Unauthorized| p/Linksys $1 wireless print server httpd/ cpe:/h:linksys:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n<!DOCTYPE html>\\nContent-type: text/html\\r\\n\\r\\n<HTML>\\n<TITLE>ConfigServer Security & Firewall</TITLE>| p/ConfigServer Security & Firewall/ d/firewall/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: webserver/1\\.0\\r\\nDate: .*\\r\\nWWW-Authenticate: Digest algorithm=\\\"MD5\\\", realm=\\\"Forbidden\\\", qop=\\\"auth\\\"| p/OSCam softcam httpd/ d/media device/\nmatch http m|^HTTP/1\\.1 302 OK\\r\\nServer: ConfigurationService\\r\\nDate: .*\\r\\nConnection: close\\r\\nSet-Cookie: VNeXHttpSessionID=| p/Avaya Scopia Pathfinder firewall traversal http config/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/plain; charset=UTF-8\\r\\nDate: .*\\r\\nServer: waitress\\r\\n\\r\\n404 Not Found\\n\\nThe resource could not be found\\.\\n\\n\\ndebug_notfound of url http://[^;]+; .* context: <pyramid\\.traversal\\.DefaultRootFactory instance at| p/Pylons Waitress WSGI server/ i/Pylons Pyramid web framework/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r.*\\nServer: waitress\\r\\n\\r\\n|s p/Pylons Waitress WSGI server/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-type: text/html; charset=UTF-8\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nWWW-Authenticate: Digest realm=\\\"Authorization\\\",nonce=\\\"[a-f\\d]+\\\",opaque=\\\"[a-f\\d]+\\\",qop=\\\"auth\\\"\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H2>401 Unauthorized</H2>\\n<HR>\\nAuthorization required for the requested URL\\.\\n</BODY></HTML>\\n| p/Panasonic KX-TGP500 http interface/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: sw-cp-server\\r\\n.*<meta name=\\\"plesk-build\\\" content=\\\"([\\d.]+)\\\">\\n\\t\\t<title>Parallels Plesk Panel ([\\d.]+)</title>|s p/Parallels Plesk sw-cp-server httpd/ v/$2/ i/build $1/\nmatch http m|^HTTP/1\\.1 200 OK\\r.*\\nServer: NetDNA-cache/([\\d.]+)\\r\\n.*\\r\\nYou are hitting the NetDNA ([^<]+)<br>\\n<img src=netdna\\.gif\\?city=4 >\\n\\n|s p/NetDNA CDN httpd/ v/$1/ i/$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*window\\.location = \\\"rdr\\.cgi\\\";\\r\\n|s p/TRENDnet IP camera httpd/ d/webcam/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: YTS/([\\d.]+)\\r\\n|s p/Yahoo! Traffic Server/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Linux, HTTP/1\\.1, (DSL-[\\w]+) Ver ([A-Z][A-Z])_([\\d.]+)\\r\\n| p/D-Link $1 router httpd config/ v/$3/ i/region: $2/ d/broadband router/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=\\\"\\\"\\r\\n.*var objWin = window\\.open\\(strURL, \\\"WJHD600\\\",|s p/Panasonic WJ-HD600-series DVR http config/ d/media device/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: mwg-ui\\r\\n\\r\\n| p/McAfee Web Gateway httpd/ d/security-misc/ cpe:/a:mcafee:web_gateway/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: https://[\\w.-]+:\\d+/Konfigurator/request\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: mwg-ui\\r\\n\\r\\n| p/McAfee Web Gateway http config/ d/security-misc/ cpe:/a:mcafee:web_gateway/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Camera Web Server\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"Camera Web Server\\\"\\r\\n| p/Belkin NetCam http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nExpires: 0\\r\\nDate: .*\\r\\n\\r\\n<script language='JavaScript'>location='https:///';</script>\\n| p/ISPmanager SSL redirector/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nCache-Control: no-cache\\r\\nContent-type: text/html; charset=utf-8\\r\\nDate: .*\\r\\n\\r\\n<html>\\r\\n<head><title>JointSpace</title>| p/jointSPACE TV application framework/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r.*\\nlibAbsinthe: (r[\\d.]+)\\r\\n|s p/Legify Absinthe/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Web Server\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n   \\r\\n<!DOCTYPE HTML PUBLIC.*<TITLE>NETGEAR ([^<]+)</TITLE>|s p/Netgear $1 http config/ d/switch/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Length: 0\\r\\nWWW-Authenticate: Basic realm=\\\"Domoticz\\.com\\\"\\r\\n\\r\\n|s p/Domoticz home automation httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nLast-Modified: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nAccess-Control-Allow-Origin: \\*\\r\\n\\r\\n<!DOCTYPE html>\\n<html manifest=\"html5\\.appcache\">\\n<head>\\n\\t\\t<meta charset=\"utf-8\">\\n\\t\\t<title>Domoticz</title>| p/Domoticz home automation httpd/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nSet-Cookie: mainServerInstance=; path=/\\r\\nSet-Cookie: CrushAuth=| p/CrushFTP web interface/ cpe:/a:crushftp:crushftp/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nSet-Cookie: mainServerInstance=; path=/\\r\\nSet-Cookie: CrushAuth=| p/CrushFTP web interface/ cpe:/a:crushftp:crushftp/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: pyTivo/([\\d.]+)\\r\\n| p/pyTivo http interface/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.1 302 FOUND\\r\\nX-Hue-Jframe-Path: /\\r\\n| p/Cloudera Hue http Hadoop UI/\nmatch http m=^HTTP/1\\.1 200 OK\\r.*\\nLiferay-Portal: Liferay Portal (Community|Enterprise) Edition ([^(]+) \\([A-Z][a-z]+ / Build (\\d+) / [^)]+\\)\\r.*\\nServer: Apache\\r\\n=s p/Liferay Portal $1 Edition/ v/$2/ i/build $3; Apache Tomcat/ cpe:/a:apache:tomcat/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\nContent-Type: text/html;\\nConnection: close\\nWWW-Authenticate: Basic realm=\\\"Default: admin/admin\\\"\\nContent-Length: <HTML>\\r\\n<HEAD>\\r\\n<TITLE>Sitecom Multi-Functional USB Server ([^<]+)</TITLE>| p/Sitecom $1 http config/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: \\\"[^\"]+\\\"\\r\\nContent-length: \\d+\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<title>ILV701PL Web Configuration - Authentication</title>| p/LEXCOM ILV701PL IPTV receiver http config/ d/media device/\nmatch http m|^HTTP/1\\.0 500 Server Error\\nContent-Type: text/html\\n\\n<html><body><b><font color=#CC0000>haserl CGI Error</font></b><br><pre>\\n\\[string \\\"([^\"]+)\\\"\\]:\\d+:| p/Haserl CGI wrapper/ i/CGI path: \"$1\"/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"yhhtpd\\r\\n| p/Neutrino yhttpd 3.X/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: xLightweb/([\\d.]+)\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nCache-Control: no-cache\\r\\nAccess-Control-Allow-Headers: device-os, device-mo, app-build, device-id, device-no, device-ip, tracker, sub-id, sid\\r\\n\\r\\n| p/xLightweb httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 Document follows\\r\\nServer: XCD WebAdmin\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/Intermec EasyLAN print server http admin/ d/print server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Dump1090\\r\\n| p/Dump1090 Mode S decoder http viewer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nETag: \\\"[^\"]\\\"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nX-Frame-Options: SAMEORIGIN\\r\\n\\r\\n<html><script type=\\\"text/javascript\\\">\\nif \\(window!=top\\) top\\.location=window\\.location;top\\.location=\\\"/remote/login\\\";\\n</script></html>\\n| p/Fortinet FortiGate SSL VPN/ d/security-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: qHTTPs\\r\\n| p/AEG Powersolutions UPS View http viewer/ d/power-device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nSet-Cookie: sid=[^;]+; path=/; httponly\\r\\nSet-Cookie: sid\\.sig=[^;]+; path=/; httponly\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n<!DOCTYPE HTML>.*<h1>Webhook Deployer v([\\w._-]+)|s p/Node.js/ i/Webhook Deployer v$1/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\nContent-Length: \\d+\\r\\nServer: SIMP LIGHT\\r\\n\\r\\n<head><title>SIMP Light web server \\[ver\\. ([\\w._-]+)\\]</title>| p/SIMP Light SCADA httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] 401 Unauthorized\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n(?:Connection: close\\r\\n)?X-Plex-Protocol: 1\\.0\\r\\n| p/Plex Media Server httpd/ cpe:/a:plex:plex_media_server/\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\nContent-Type: text/xml;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nX-Plex-Protocol: 1\\.0\\r\\nCache-Control: no-cache(?:\\r\\nDate: .*)?\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<MediaContainer size=\\\"\\d+\\\" [^>]*friendlyName=\\\"([^\"]*)\\\" [^>]*platform=\\\"Linux\\\" platformVersion=\\\"(((?:2\\.)?\\d\\.\\d+)[^\"]+)\\\" [^>]*version=\\\"([^\"]+)| p/Plex Media Server httpd/ v/$4/ i/friendlyName: $1; OS version $2/ o/Linux $3/ cpe:/a:plex:plex_media_server:$4/ cpe:/o:linux:linux_kernel:$3/\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\nContent-Type: text/xml;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nX-Plex-Protocol: 1\\.0\\r\\nCache-Control: no-cache(?:\\r\\nDate: .*)?\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<MediaContainer size=\\\"\\d+\\\" [^>]*friendlyName=\\\"([^\"]*)\\\" [^>]*platform=\\\"([^\"]+)\\\" platformVersion=\\\"([^\"]+)\\\" [^>]*version=\\\"([^\"]+)| p/Plex Media Server httpd/ v/$4/ i/friendlyName: $1; OS version $3/ o/$2/ cpe:/a:plex:plex_media_server:$4/\n# Sometimes the version is too far down the page :(\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\nContent-Type: text/xml;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nX-Plex-Protocol: 1\\.0\\r\\nCache-Control: no-cache(?:\\r\\nDate: .*)?\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<MediaContainer size=\\\"\\d+\\\" [^>]*friendlyName=\\\"([^\"]*)\\\" [^>]*platform=\\\"Linux\\\" platformVersion=\\\"(((?:2\\.)?\\d\\.\\d+)[^\"]+)\\\"| p/Plex Media Server httpd/ i/friendlyName: $1; OS version $2/ o/Linux $3/ cpe:/a:plex:plex_media_server/ cpe:/o:linux:linux_kernel:$3/\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\nContent-Type: text/xml;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nX-Plex-Protocol: 1\\.0\\r\\nCache-Control: no-cache(?:\\r\\nDate: .*)?\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<MediaContainer size=\\\"\\d+\\\" [^>]*friendlyName=\\\"([^\"]*)\\\" [^>]*platform=\\\"([^\"]+)\\\" platformVersion=\\\"([^\"]+)\\\"| p/Plex Media Server httpd/ i/friendlyName: $1; OS version $3/ o/$2/ cpe:/a:plex:plex_media_server/\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\nContent-Type: text/xml;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nX-Plex-Protocol: 1\\.0\\r\\nCache-Control: no-cache(?:\\r\\nDate: .*)?\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<MediaContainer size=\\\"\\d+\\\" [^>]*friendlyName=\\\"([^\"]*)\\\"| p/Plex Media Server httpd/ i/friendlyName: $1/ cpe:/a:plex:plex_media_server/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nContent-Type: text/html\\r\\nSet-Cookie: cookie_session_id_0=\\d+; path=/;\\r\\nCache-Control: public\\r\\nPragma: cache\\r\\nExpires: .*\\r\\nDate: .*\\r\\nLast-Modified: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nLocation: https?://[\\w._-]+:\\d+/index\\.cgi\\?active%5fpage=9091&req%5fmode=0\\r\\n\\r\\n| p/OpenRT httpd/ o/OpenRT/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"(iRMC S\\d)@iRMC([0-9A-F]{6})\\\", qop=\\\"auth\\\", nonce=\\\"[0-9a-f-]+\\\", opaque=\\\"[0-9a-f]+\\\", stale=\\\"FALSE\\\" \\r\\n(?:Connection: close\\r\\n)?Cache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\n296\\r\\n| p/Fujitsu $1 httpd/ i/Host ID (MAC) $2/ d/remote management/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html; charset=utf-8\\r\\nProxy-Connection: close\\r\\nConnection: close\\r\\nContent-Length: 727\\r\\n\\r\\n<HTML><HEAD>\\r\\n<TITLE>Request Error</TITLE>\\r\\n</HEAD>\\r\\n<BODY>\\r\\n<FONT face=\\\"Helvetica\\\">\\r\\n<big><strong></strong></big><BR>| p/ISPConfig http control panel/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nServer: alphapd\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Digest realm=\\\"(TV-IP\\d\\d\\d\\w*)\\\",qop=\\\"auth\\\", nonce=\\\"[a-f0-9]+\\\"\\r\\n\\r\\n| p/TRENDnet $1 httpd/ d/webcam/ cpe:/h:trendnet:$1/a\n#example $2 = \"MediaCloset\\0\"\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>APC Back-UPS ([^(]+)\\(([^)]+)\\)</title><meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\"></head>| p/APC Back-UPS $1 http admin/ i/$P(2)/\nmatch http m|^HTTP/1\\.1 401 UNAUTHORIZED\\r\\nWWW-Authenticate: Basic realm=\\\"Login Required\\\"\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: 90\\r\\nDate: .*\\r\\nServer: ([\\w._-]+)\\r\\n\\r\\nCould not verify your access level for that URL\\.\\nYou have to login with proper credentials| p/Maraschino XBMC http interface/ h/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nSet-Cookie: session=[0-9a-f]{40}; Path=/; HttpOnly\\r\\nX-Auth-Status: none\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n.* href=\\\"/ajenti:static/|s p/Ajenti http control panel/ cpe:/a:ajenti:ajenti/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Hydra/([\\w._-]+)\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nLast-Modified: .*\\r\\nETag: \\\"[^\"]+\\\"\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<title>Intelligent Switch</title>>\\n| p/Hydra httpd/ v/$1/ i/ZyXEL GS1600 or GS1900 switch/ d/switch/ cpe:/a:nikos_mavroyanopoulos:hydra:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nLast-Modified: .*\\r\\nETag: \\\"[^\"]+\\\"\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<title>Intelligent Switch</title>>\\n| p/Hydra httpd/ i/ZyXEL GS1600 or GS1900 switch/ d/switch/ cpe:/a:nikos_mavroyanopoulos:hydra/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nSet-Cookie: JSESSIONID=[0-9A-F]{32}; Path=/\\r\\nContent-Type: text/html;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer:  \\r\\n\\r\\n<!-- default page when just a URL is entered \\(e\\.g\\. - http://ipaddress\\) -->| p/Cisco Unified Communications Manager httpd/ cpe:/a:cisco:unified_communications_manager/\n# version 8.5.1 reported with SAMEORIGIN, but not in 8.6\n# version 8.6 has Secure; HttpOnly\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:X-Frame-Options: SAMEORIGIN\\r\\n)?Set-Cookie: JSESSIONID=[0-9A-F]{32}; Path=/; Secure; HttpOnly\\r\\nContent-Type: text/html;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer:  \\r\\n\\r\\n<!-- default page when just a URL is entered \\(e\\.g\\. - http://ipaddress\\) -->| p/Cisco Unified Communications Manager httpd/ cpe:/a:cisco:unified_communications_manager/\n# TODO: Which version has HttpOnly and not Secure?\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nSet-Cookie: JSESSIONID=[0-9A-F]{32}; Path=/; HttpOnly\\r\\nContent-Type: text/html;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer:  \\r\\n\\r\\n<!-- default page when just a URL is entered \\(e\\.g\\. - http://ipaddress\\) -->| p/Cisco Unified Communications Manager httpd/ cpe:/a:cisco:unified_communications_manager/\nmatch http m|^HTTP/1\\.0 500 No such header: Host\\r\\nserver: Ag \\[47\\]\\r\\ncontent-type: text/html\\r\\n\\r\\n<html>\\n<head>\\n</head>\\n<body>\\n<h1>500: No such header: Host</h1>\\n</body>\\n</html>\\r\\n| p/ZyXEL Keenetic http admin/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<html><head><title>Basic Status</title></head><frameset rows=\\\"\\*,0\\\" border=0 frameborder=no framespacing=0><frame src=\\\"basic\\.htm\\\" name=\\\"main\\\"><frame src=\\\"hide\\.htm\\\" name=\\\"Hide\\\" marginwidth=0 marginheight=0 border=0></frameset></html>\\n| p/NetComm Wireless ADSL router http admin/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: Easy Chat Server/([\\w._-]+)\\r\\n| p/Easy Chat Server httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 503 Service Unavailable\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nX-Iinfo: ?[\\d-]+ .NNN RT\\(\\d+ \\d+\\) q\\([ 0-9-]+\\) r\\([ 0-9-]+\\)| p/Incapsula CDN httpd/\nmatch http m|^<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4\\.01 Transitional//EN'><html><head><title>Evolis TCP/IP\\r\\n</title>| p/Evolis ID card printer httpd/ d/printer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: pilight\\r\\n| p/pilight home automation webGUI/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nX_Language: .*\\r\\nContent-Type: text/html\\r\\nServer: Embedthis-http\\r\\nLocation: https://([^/]+)/start\\.html\\n\\r\\n| p/Embedthis httpd/ i/Dell iDRAC 7/ d/remote management/ h/$1/ cpe:/h:dell:idrac7/\nmatch http m|^HTTP/1\\.[01] 30[12] Moved .*\\r\\nServer: Mbedthis-Appweb/([\\d.]+)\\r\\nLocation: https://([^/]+)/start\\.html\\n\\r\\n| p/Embedthis Appweb httpd/ v/$1/ i/Dell iDRAC/ d/remote management/ h/$2/ cpe:/a:mbedthis:appweb:$1/\nmatch http m|^HTTP/1\\.[01] 30[12] Moved [^\\r\\n]+\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://([^/]+)/start\\.html\\n\\r.*\\nETag: [^\\r\\n]+ ([A-Z]+)\\r\\n|s p/Dell iDRAC http admin/ i/time zone: $1/ d/remote management/ h/$2/\nmatch http m|^HTTP/1\\.[01] 30[12] Moved [^\\r\\n]+\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https://([^/]+)/start\\.html\\n\\r\\n|s p/Dell iDRAC http admin/ d/remote management/ h/$1/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nContent-Type: text/html\\r\\nContent-Length: 165\\r\\nLocation: http://oishare/DCIM\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\r\\n<HTML><HEAD><TITLE>301 Moved Permanently</TITLE></HEAD>\\r\\n<BODY><H1>301 Moved Permanently</H1>\\r\\n\\r\\n</BODY></HTML>\\r\\n| p/Olympus camera httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer:  \\r\\nCache-Control: no-cache, private\\r\\nPragma: no-cache\\r\\nExpires: .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\"\\r\\n\\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">\\r\\n<html>\\r\\n<head>\\r\\n<title>(NWA[\\w-]+)</title>| p/ZyXEL $1 http config/ d/WAP/ cpe:/h:zyxel:$1/a\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: thttpd/([\\w.]+)-Avtrex/([\\w._-]+)\\r\\n| p/thttpd/ v/$1/ i/Avtrex $2/ d/media device/ cpe:/a:acme:thttpd:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection:close\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\"\\r\\n\\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\r\\n<html>\\r\\n<head>\\r\\n\\t<title>Berryz WebShare</title>| p/Berryz WebShare/\nmatch http m|^HTTP/1\\.1 500 Internal error\\r\\nCache: no-cache\\r\\nContent-Type: text/plain\\r\\nContent-Length: 28\\r\\n\\r\\nCardo Updater Internal error| p/Cardo Updater/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONTENT-TYPE: text/html\\r\\nCONTENT-LENGTH: 260\\r\\n\\r\\n.*<H1>PRESENTATION PAGE</H1>|s p/Pioneer VSX-921, Denon DNP-720AE, or Marantz AV7005 AV receiver http config/ d/media device/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\\\"Fhem: login required\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n| p/FHEMWEB Fhem frontend/ cpe:/a:rudolf_koenig:fhem/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>YouLess energy monitor</title>| p/YouLess energy monitor httpd/ d/power-device/\nmatch http m|^HTTP/1\\.1 500 Server Error\\r\\nContent-Length: 0\\r\\nServer: HBHTTP POGOMVOFFICE - ([\\w._-]+) - Linux\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n| p/Pogoplug Office NAS httpd/ v/$1/ d/storage-misc/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: AmazonS3\\r\\n\\r\\n404|s p/Amazon S3 httpd/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nX-Powered-By: Servlet/([\\d.]+)\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n<H1>SRVE0255E: A WebGroup/Virtual Host to handle / has not been defined\\.</H1><BR><H3>SRVE0255E: A WebGroup/Virtual Host to handle localhost:\\d+ has not been defined\\.</H3><BR><I>IBM WebSphere Application Server</I>| p/IBM Tivoli Enterprise Portal/ i/Servlet $1/ cpe:/a:ibm:websphere_application_server/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nLocation: http://([\\w.-]+)/index\\.do\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: ThinkFree Server\\r\\n\\r\\n| p/ThinkFree Server Integrator/ h/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<center>nginx/([\\d.]+)</center>\\r?\\n</body>\\r?\\n</html>[\\r\\n]+$|s p/nginx/ v/$1/ cpe:/a:igor_sysoev:nginx:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nCache-Control: no-cache\\r\\nX-Runtime: \\d+\\r\\nSet-Cookie: spiceworks_session=[^;]+; path=/; HttpOnly\\r\\nLocation: https?://([\\w.-]+):\\d+/login\\r\\n| p/Spiceworks http admin/ h/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Clearswift\\r\\n| p/Clearswift Secure Web Gateway/ d/security-misc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\nETag: \\\"[^\"]+\\\"\\r\\nLast-Modified: .*\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: dcs-lig-httpd\\r\\n\\r\\n| p/lighttpd/ i/D-Link DCS IP camera/ d/webcam/ cpe:/a:lighttpd:lighttpd/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-type: text/html\\r\\nExpires: .*\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1\\.0 Strict//EN' 'http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd'>\\n<html xmlns='http://www\\.w3\\.org/1999/xhtml' xml:lang='en' lang='en'>\\n<head>\\n    <title>Xfinity</title>| p/Xfinity router http config/ d/broadband router/\n# Panasonic TX-P55VTW60\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: Panasonic AVC Server/([\\w._-]+)\\r\\nConnection: close\\r\\nCache-Control: no-cache,no-store\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Panasonic AVC httpd/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nContent-Length: 15\\r\\nContent-Type: text/html\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\\r\\nAccess-Control-Allow-Methods: POST, GET, OPTIONS\\r\\n\\r\\nInvalid request| p/Amazon MP3 Downloader httpd/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: Hikvision-Webs\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http://([\\w.-]+):\\d+/index\\.[asphtm]+\\r\\n\\r\\n| p/Hikvision DVR httpd/ d/media device/ h/$1/\nmatch http m|^HTTP/1\\.1 400\\r\\nContent-Length: 22\\r\\nContent-Type: text/plain\\r\\n\\r\\nMalformed Request-Line| p/SABnzbd newsreader httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: HP_Compact_Server\\r\\nContent-Length: \\d+\\r\\n-onnection: keep-alive\\r\\nContent-Type: text/html\\r\\n| p/HP LaserJet printer http admin/ d/printer/\n# ntopng <= 1.1 (r7342) had an auth bypass because processing isn't terminated after redirect.\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nSet-Cookie: session=; path=/; expires=Thu, 01-Jan-1970 00:00:01 GMT; max-age=0; HttpOnly\\r\\nLocation: /login\\.html\\r\\n\\r\\nHTTP/1\\.1 200 OK\\r\\nCache-Control: max-age=0, no-cache, no-store\\r\\nPragma: no-cache\\r\\nServer: ntopng ([\\d.]+) \\((r\\d*)\\)\\r\\n| p/ntopng http interface/ v/$1/ i/SVN $2; auth bypass/ cpe:/a:ntop:ntopng:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nSet-Cookie: session=; path=/; expires=Thu, 01-Jan-1970 00:00:01 GMT; max-age=0; HttpOnly\\r\\nLocation: /login\\.html\\r\\n\\r\\n$| p/ntopng http interface/ v/1.2/ cpe:/a:ntop:ntopng:1.2/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nSet-Cookie: session=; path=/; expires=Thu, 01-Jan-1970 00:00:01 GMT; max-age=0; HttpOnly\\r\\nLocation: /lua/login\\.lua\\?referer=/\\r\\n\\r\\n| p/ntopng http interface/ v/2.0 or later/ cpe:/a:ntop:ntopng/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\nServer: owhttpd\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/OWFS httpd/ cpe:/a:owfs:owhttpd/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nPragma: no-cache\\r\\nWWW-Authenticate: Digest realm=\\\"([^\"]+)\\\", domain=\\\"/\\\", nonce=\\\"[\\da-f]+\\\", algorithm=\\\"MD5\\\", qop=\\\"auth\\\"\\r\\nWWW-Authenticate: Basic realm=\\\"\\1\\\"\\r\\nContent-Type: text/html\\r\\n.*<HTML>\\r\\n<HEAD>\\r\\n<TITLE>Error 401</TITLE>|s p/Tandberg videoconference httpd/ i/\"$1\"/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nSet-Cookie: rg_cookie_session_id=.*<!--- Page\\(page_login\\)=\\[Login\\] --->.*<TITLE>(MP\\d\\w+)</TITLE>|s p/Audiocodes $1 gateway http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n<!doctype html>\\n<html>\\n  <head>\\n    <title>rabbit\\.js and Socket\\.IO publish/subscribe example</title>| p/Node.js/ i/rabbit.js messaging example page/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\r\\nDate: .*?\\r\\nConnection: close\\r\\n\\r\\n.*<OBJECT\\s+classid=\\\"clsid:EE479A40-C128-40DD-93DA-000556AF9607\\\"\\r\\n\\t  codebase=\\\"CtrWeb\\.cab#version=([\\d,]+)\\\".*?<param name=\\\"CmdPort\\\" value=\\\"(\\d+)\\\">\\n<param name=\\\"StreamPort\\\" value=\\\"(\\d+)\\\">|s p/DVRWeb viewer/ v/$SUBST(1,\",\",\".\")/ i/CmdPort $2; StreamPort $3/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: KwikNet Web Server\\r\\n| p/Kadak KwikNet httpd/\nmatch http m|^HTTP/1\\.1 406 Not Acceptable\\r\\nContent-Type: text/html\\r\\nServer: MineloadHTTPD\\r\\n\\r\\nInvalid XML password\\.| p/Mineload Bukkit plugin/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .*\\r\\nServer: cPanel\\r\\n| p/cPanel httpd/ i/unauthorized/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nPragma: no-cache\\r\\nCache-control: no-cache\\r\\nDate: .*\\r\\nServer: eXtensible UPnP agent\\r\\nAccept-Ranges: none\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nEXT:\\r\\n\\r\\n.*Uptime: (\\d+ days, [\\d:]+).*Model: <a href=http://xupnpd\\.org>xupnpd-([\\w._-]+)</a>|s p/xupnpd http admin/ v/$2/ i/uptime: $1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: fexsrv\\r\\nLast-Modified: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/F*EX (Frams' Fast File EXchange) server/ cpe:/a:ulli_horlacher:fex/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\nPragma: no-cache\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//en\\\">\\r\\n<html lang=\\\"en\\\">\\r\\n\\r\\n<head>\\r\\n    <meta LAG = \\\"<AG_PROXY_ID>\\\" >| p/Novell Access Gateway/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nContent-Type: text/html\\r\\n(?:X-Frame-Options: SAMEORIGIN\\r\\n)?Set-Cookie: wbm_cookie_session_id=[\\dA-F]+; path=/; HttpOnly\\r\\n(?:Cache-Control: public,max-age=86400\\r\\nPragma: cache\\r\\nExpires: .*\\r\\n)?Date: .*\\r\\n(?:Last-Modified: .*\\r\\n)?Accept-Ranges: bytes\\r\\nConnection: close\\r\\nLocation: /main\\.cgi\\?page=index\\.html\\r\\n\\r\\n| p/Vodafone Station http config/ d/WAP/\n# Also responds to GenericLines (v6.60)\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nConnection: Close\\r\\nContent-Length: \\d+ +\\r\\n\\r\\n.+>Dual DHCP DNS Server Version ([\\w._-]+ Windows Build \\d+)<|s p/Dual DHCP DNS Server http viewer/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nRefresh: 5;url=/\\r\\n\\r\\n.*<td align=right class=title>PowerMTA&trade; ([\\w._-]+)&nbsp;</td>|s p/Port25 Solutions PowerMTA http status/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WebServer\\(IPCamera_Logo\\)\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nLast-Modified: .*\\r\\nCache-Control: max-age=60\\r\\n\\r\\n\\xef\\xbb\\xbf<!--\\r\\nProduct:ipcamera\\r\\nAuthor:xwpcom@gmail\\.com\\r\\n-->| p/Maygion IPCamera http interface/ i/RTSP on same port/\n# Verizon FIOS?\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Length: 0\\r\\nWWW-Authenticate: Digest realm=\\\"IgdAuthentication\\\", domain=\\\"/\\\", nonce=\\\"\\w{35}=\\\", qop=\\\"auth\\\", algorithm=MD5, opaque=\\\"5ccc09c403ebaf9f0171e9517f40e41\\\" \\r\\n\\r\\n| p/TL-069 remote access/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\nWWW-Authenticate: Digest realm=IgdAuthentication, domain=\\\"/\\\", qop=\\\"auth\\\", algorithm=MD5, nonce=\\\"\\w{9}\\\"\\r\\n\\r\\n| p/TL-069 remote access/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Length: 23\\r\\nServer: MySQL Aggregator\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"CTA\\\"\\r\\nContent-Type: text/plain\\r\\n\\r\\nAuthorization required\\n| p/MySQL Enterprise Agent Aggregator/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=utf-8\\r\\nCache-Control: no-cache \\r\\nServer: Bukkit Webby\\r\\nConnection: Close\\r\\n\\r\\n<script type='text/javascript'>var errorMsg = 'none';</script><!DOCTYPE html>| p/Bukkit Webby Minecraft http admin/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nLocation: /console/index\\.html\\r\\nConnection: close\\r\\nDate: .* GMT\\r\\n\\r\\n$| p/JBoss Administrator/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: max-age=0\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nX-UA-Compatible: IE=Edge\\r\\nConnection: close\\r\\nSet-Cookie: web_session_id=\\w+; path=/; HttpOnly; \\r\\n\\r\\n.*<title>PA Server Monitor</title>|s p/Power Admin Server Monitor http admin/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: SentinelKeysServer/([\\w._-]+)\\r\\nMIME-Version: 1\\.1\\r\\nContent-Type: text/html\\r\\n| p/SafeNet Sentinel Keys License Monitor httpd/ v/$1/ i/Java Console/ cpe:/a:safenet-inc:sentinel_keys_server:$1/\n# The version numbers don't line up. Need more info or more fingerprints to figure out.\n# Also, this matches 4 or 5 different services within CloudView. No further info.\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nConnection: Close\\r\\nContent-Length: \\d+\\r\\nContent-Type: .*\\r\\nDate: .*\\r\\nHost: 0\\.0\\.0\\.0\\r\\nServer: NG/6\\.0\\.16943\\r\\n| p/Exalead CloudView/ v/5.1.12.31472/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nEtag: .*\\r\\nServer: ngconvert/6\\.0\\.16943 edoc/1\\.4\\.36592 \\(BUILD=6\\.0\\.16943;EDOC=1\\.4\\.36592;AUTOMIME=1\\.03;CONFEX=0\\.153;XPDFTEXTLIB=3\\.02\\.24\\)\\r\\n\\r\\n| p/Exalead CloudView/ v/5.1.12.31472/\n\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<!-- pageok -->\\n<!-- managed by puppet -->\\n<html>\\n<pre>pageok</pre>\\n</html>\\n$|s p/GoDaddy error/\nmatch http m|^HTTP/1\\.1 400 Bad Request \\(5\\)\\r\\nServer: httpd\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/Cisco small business router VPN/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: HTS/tvheadend\\r\\nCache-Control: no-cache\\r\\nWWW-Authenticate: Basic realm=| p/Tvheadend http config/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nDate: .* ([+-]\\d+)\\r\\nContent-Length: 0\\r\\nServer: com\\.novell\\.zenworks\\.httpserver/([\\w._-]+)\\r\\n\\r\\n| p/Novell ZENworks httpd/ v/$2/ i/time zone: $1/ cpe:/a:novell:zenworks:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/plain\\n\\nTable: Links\\nLocal IP\\tRemote IP\\tHyst\\.\\tLQ\\tNLQ\\tCost\\n| p/olsrd txtinfo plugin/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .*? ([A-Z]+)\\r\\nExpires: .*\\r\\n\\r\\n<HTML>.*<H1>DVR (\\w+) WatchDog \\(([\\w._-]+)\\)</H1>|s p/March Networks $2 DVR http config/ i/time zone: $1/ h/$3/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Speclab WebServer/([\\w._-]+) (Instinct-\\d+ Release \\d+)\\r\\n|s p/Speclab WebServer/ v/$1/ i/Goal $2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nMIME-Version: 1\\.0\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" {332}\\n    \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\"> {332}\\n<html | p/Tektronix oscilloscope http viewer/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\ncontent-length: \\d+\\r\\ncontent-type: text/html; charset=utf-8\\r\\n\\r\\n.*<meta content=\\\"SOGo Web Interface\\\" name=\\\"description\\\" />\\n\\t<meta content=\\\"SKYRIX Software AG/Inverse inc\\.\\\" name=\\\"author\\\" />.*<meta content=\\\"([^\"]+)\\\" name=\\\"build\\\" />|s p/SOGo groupware http interface/ i/build: $1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close \\r\\nContent-Type: text/html\\r\\nCache-control: no-cache\\r\\n\\r\\n.*top\\.location\\.href=\\\"login_page\\.html\\\";</script><title>Paradox IP Module</title>|s p/Paradox security system IP module httpd/ d/security-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WIBU-SYSTEMS HTTP Server/ Version ([\\w._-]+) vom \\d+\\.\\w+\\.\\d+\\r\\n| p/Wibu CodeMeter httpd/ v/$1/ i/German/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WIBU-SYSTEMS HTTP Server/ Version ([\\w._-]+) of \\w+/\\d+/\\d+\\r\\n| p/Wibu CodeMeter httpd/ v/$1/ i/English/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length:\\d+\\r\\nContent-Type:text/html\\r\\nConnection:close\\r\\n\\r\\n<html><body><h2>Mendeley Desktop</h2>| p/Mendeley Desktop httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nLast-Modified: \\d+/\\d+/\\d+ \\d+:\\d+:\\d+ [AP]M\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>HomeWorks Illumination Web Keypad</title>| p/Lutron HomeWorks web keypad/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nContent-Length: \\d+\\r\\nCache-Control: no-cache\\r\\n\\r\\nUnified Protocol version ([\\d.]+)| p/Samsung CLP printer httpd/ i/Unified Protocol $1/ d/printer/\n# BIND 9.5 or later\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/xml\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: libisc\\r\\n.*<statistics version=\\\"([\\w._-]+)\\\">|s p/BIND stats httpd/ i/XML statistics version $1/ cpe:/a:isc:bind/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE html>.*<meta name=\\\"viewport\\\" content=\\\"width=device-width, initial-scale=1\\.0, maximum-scale=1\\.0, minimum-scale=1\\.0, user-scalable=no\\\"/>\\r\\n<html>\\r\\n<head>\\r\\n\\t<meta name=\\\"author\\\" content=\\\"Dave Jensen\\\" />\\r\\n\\t<meta name=\\\"keywords\\\" content=\\\"LANDesk, Remote Control\\\" />|s p/LANDesk html5 remote control/ cpe:/a:landesk:landesk_management_suite/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: 345\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: Swift1\\.0\\r\\n\\r\\n| p/Samsung Swift httpd/ v/1.0/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nSERVER: HDHomeRun/([\\w._-]+)\\r\\n.*<div class=\\\"S\\\">Model: ([\\w._-]+)<br/>Device ID: [\\w._-]+<br/>Firmware: ([\\w._-]+)</div>|s p/Silicondust HDHomeRun set top box http config/ v/$1/ i/model: $2; firmware: $3/ d/media device/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: NSG\\r\\nWWW-Authenticate: Basic Realm=Security\\r\\n| p/Harmonic NSG QAM video delivery httpd/ d/media device/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: Httpd/1\\.0\\r\\nDate: \\w+ \\w+ +\\d+ \\d+:\\d+:\\d+ \\d\\d\\d\\d\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http:///login\\.asp\\r\\n\\r\\n| p/CJ HelloVision DVW-2300N router http redirector/ d/WAP/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nServer: Avaya Push Agent Ver x\\.x\\r\\nDate: [A-Z]+ [A-Z]+ \\d\\d \\d\\d:\\d\\d:\\d\\d \\d\\d\\d\\d\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/Avaya Push Agent/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: GS-Webs\\r\\nDate: .*\\r\\nLocation: http://\\x07/index\\.html\\r\\n\\r\\n|s p/Huacam Cyclops IP camera http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: IP-Phone-Web\\r\\nDate: [A-Z]+ [A-Z]+ \\d+ \\d+:\\d+:\\d+ \\d+\\r\\n| p|TalkSwitch/FortiVoice web manager| d/VoIP phone/\nmatch http m|^HTTP/1\\.1 502 Bad Request\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\r\\n<body>\\r\\nError 502 - Bad Request<br>\\r\\nThe server could not resolve your request for uri: http://[\\d.]+/\\r\\n</body>\\r\\n</html>| p/Blackberry phone httpd/ d/phone/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nDate: [A-Z]+ [A-Z]+ \\d\\d \\d\\d:\\d\\d:\\d\\d \\d\\d\\d\\d\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Document Error: Forbidden</title></head>\\r\\n\\t\\t<body><h2>Access Error: Forbidden</h2>\\r\\n\\t\\t<p>HTTP/1\\.0 403 Forbidden\\n</p></body></html>\\r\\n\\r\\n| p/Avaya 9670 VoIP Phone httpd/ d/VoIP phone/ cpe:/h:avaya:9670/a\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: http://([\\w._-]+)/\\?cfru=aHR0c.*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html; charset=utf-8\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML><HEAD>\\r\\n<TITLE>Redirect</TITLE>\\r\\n</HEAD>\\r\\n<BODY>\\r\\n<FONT face=\\\"Helvetica\\\">\\r\\n<big><strong></strong></big><BR>\\r\\n</FONT>\\r\\n<blockquote>\\r\\n<TABLE border=0 cellPadding=1 width=\\\"80%\\\">\\r\\n<TR><TD>\\r\\n<FONT face=\\\"Helvetica\\\">\\r\\n<big>Redirect \\(authentication_redirect_to_virtual_host\\)</big>| p/Pitney Bowes Business Manager BMDLAService/ h/$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r.*\\nServer: phionEntegraHTTP\\r\\nAllow: GET, HEAD, DELETE\\r\\nWWW-Authenticate: Basic realm=phion Transparent Agent authentication\\r\\n|s p/phion Entegra SSL VPN client/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: 2Wire TR-069\\r\\nContent-Length: 0\\r\\nAllow: GET\\r\\nWWW-Authenticate: d=\\d+ +set_mask=0x[\\da-f]+ +handle_evt=0x[\\da-f]+.+\\r\\n| p/2Wire TR-069 access/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nX-UA-Compatible: IE=edge,chrome=1\\r\\nSet-Cookie: JSESSIONID=[\\dA-F]+; Path=/; Secure; HttpOnly\\r\\nDate: .*\\r\\nLocation: /maintenance-login\\.html\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nContent-Length: 0\\r\\nVary: Accept-Encoding\\r\\nConnection: close\\r\\nServer: NSC/([\\w._-]+) \\(JVM\\)\\r\\n\\r\\n| p/Nexpose Security Console/ v/$1/ i/maintenance mode/ cpe:/a:rapid7:nexpose:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]+\\r\\n(?!\\r\\n))*?Server: NSC/([\\w._-]+) \\(JVM\\)\\r\\n\\r\\n|s p/Nexpose Security Console/ v/$1/ cpe:/a:rapid7:nexpose:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nX-UA-Compatible: IE=edge,chrome=1\\r\\nX-Content-Type-Options: nosniff\\r\\nX-XSS-Protection: 1; mode=block\\r\\nLocation: https://[^/]+/login\\.jsp\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Security Console\\r\\n\\r\\n| p/Nexpose Security Console/ cpe:/a:rapid7:nexpose/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nX-Powered-By: Sinopia/([\\w._-]+)\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: 13\\r\\nVary: Accept-Encoding\\r\\nX-Status-Cat: http://flic\\.kr/p/aV6juR\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\nCannot GET /\\n| p/Sinopia npm proxy/ v/$1/ i/node.js/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.1 300 Multiple Choices\\r\\nVary: X-Auth-Token\\r\\nContent-Type: application/json\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n{\\\"versions\\\": {\\\"values\\\": \\[{.*?\\\"type\\\": \\\"application/vnd\\.openstack\\.identity-v([\\d.]+)\\+| p/OpenStack Identity API/ v/$1/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: ZyXEL Modem\\r\\n.*<title>\\.::Welcome to ZyXEL ([^:<]+?)::\\.</title>|s p/ZyXEL $1 modem http config/ d/broadband router/ cpe:/h:zyxel:$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Oracle-Traffic-Director/([\\w._-]+)\\r\\nDate: .*\\r\\nContent-length: \\d+\\r\\nContent-type: text/html; charset=UTF-8\\r\\nX-powered-by: Servlet/([\\w._-]+) JSP/([\\w._-]+)\\r\\n| p/Oracle Traffic Director/ v/$1/ i/Servlet $2; JSP $3/ cpe:/a:oracle:jsp:$3/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Oracle-Traffic-Director/([\\w._-]+)\\r\\n| p/Oracle Traffic Director/ v/$1/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nServer: Printopia/([\\w._-]+)\\r\\nLocation: http://www\\.ecamm\\.com/mac/printopia/instructions\\.html\\r\\nConnection: close\\r\\n\\r\\n| p/Printopia for Mac/ v/$1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: httpd\\r\\nDate: .* GMT\\r\\nWWW-Authenticate: Basic realm=\\\"(E\\d+)\\\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n\\n| p/Cisco Linksys $1 router config/ d/broadband router/ cpe:/h:cisco:linksys_$1/a\n# Blackberry 10.2.1\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nServer: \\r\\n\\r\\n<html><head><title>404 Not Found</title></head>\\n<body><h1>404 Not Found</h1>\\nindex\\.html: <pre>This item has not been found</pre>\\n| p/Blackberry Universal Device Service/ d/phone/ cpe:/a:blackberry:blackberry_universal_device_service/\nmatch http m|^HTTP/1\\.1 404 Service not found\\r\\nDate: .* GMT\\r\\nServer: ACE XML Gateway\\r\\nContent-Type: text/plain\\r\\nContent-Length: 42\\r\\nConnection: close\\r\\n\\r\\nNo handler was found matching the request\\.| p/Cisco Application Control Engine XML Gateway/ d/load balancer/ cpe:/a:cisco:application_control_engine_software/\n# Post-2.2 development version has longer content\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Length: 17\\r\\nWWW-Authenticate: Basic realm=varnish-agent\\r\\nDate: .*\\r\\n\\r\\nAuthorize, please$| p/Varnish Agent/ v/2.2 or older/ cpe:/a:varnish-cache:varnish_agent/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"NetAV\\\", nonce=\\\"[\\da-f]{32}\\\", algorithm=MD5, domain=\\\"/netav/\\\", qop=\\\"auth\\\",\\r\\nPragma: no-cache\\r\\nCache-control: no-cache, no-store\\r\\n\\r\\n$| p/Sony NetAV/ d/media device/\n# UUID header added in 0.5.6b\nmatch http m|^HTTP/1\\.1 400 Bad request\\r\\nContent-Type: text/html; charset=utf-8\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\nCache-Control: no-store\\r\\nConnection: close\\r\\nX-PageKite-UUID: [\\da-f]{40}\\r\\n\\r\\n<html><body><h1>400 Bad request</h1><p>Invalid request, no Host: found\\.</p></body></html>\\n| p/PageKite localhost tunnel/ v/0.5.6b or later/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .*\\r\\nServer: Genetic Lifeform and Distributed Open Server ([\\w._-]+)\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\nCache-Control: public, max-age=31536000\\r\\nContent-Length: 28\\r\\n\\r\\nAn error has occurred\\. \\(404\\)| p/Hentai@Home P2P downloader/ v/$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request \\(missing Host: header\\)\\r\\nConnection: close\\r\\nDate: .* ([-+]\\d\\d\\d\\d)\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\n0\\r\\n\\r\\n| p/Pandora FMS/ i/timezone: $1/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nContent-Type: text/plain\\r\\nContent-Length: 24\\r\\nLocation: /unsupported_browser\\.htm\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: RStudio\\r\\n\\r\\n/unsupported_browser\\.htm| p/RStudio Server/\nmatch http m|^HTTP/1\\.0 401 unknown \\r\\nServer: ForceLiveTransfer/([\\w ]+)\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic  realm=\\\"[^\"]+\\\"\\r\\n\\r\\n$| p/ForceTech ForceLive Transfer/ v/$1/ d/media device/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-type: text/plain\\r\\nContent-length: 58\\r\\n\\r\\n400 Bad Request\\n'json' or 'msgpack' parameter is required\\n$| p/fluentd data collector/ v/0.10.48 or later/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nLocation: http://null/console/index\\.html\\r\\nConnection: close\\r\\nDate: .*\\r\\n\\r\\n$| p/HornetQ JMS http admin/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nServer: gvs ([\\d.]+)\\r\\n.* <title>Error 404 \\(Not Found\\)!!1</title>|s p/Google Video Server/ v/$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/plain\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: HPE?-iLO-Server/([\\w._-]+)\\r\\nContent-Length: 0\\r\\n\\r\\n| p/HP Integrated Lights-Out web interface/ v/$1/ cpe:/h:hp:integrated_lights-out:$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/plain\\r\\nConnection: close\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\n\\r\\n| p/HP Integrated Lights-Out web interface/ cpe:/h:hp:integrated_lights-out/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nServer: Brazil/([\\d.]+)\\r\\nConnection: close\\r\\nContent-Length: 135\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<title>Error: 404</title>\\n<body>\\nGot the error: <b>Not Found</b><br>\\nwhile trying to obtain <b>/</b><br>\\n\\n</body>\\n</html>| p/Sun Labs Brazil httpd/ v/$1/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nServer: Norman Security/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nConnection: Close\\r\\nContent-Length: 83\\r\\n\\r\\n<html><title>Security Error</title><body><br><h2>403 - Forbidden</h2></body></html>| p/Norman Security Suite http config/ v/$1/ cpe:/a:norman:security_suite:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Tadiran MGCP Phone\\\"\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>| p/Tadiran MGCP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Cosminexus HTTP Server\\r\\n| p/Hitachi Cosminexus httpd/ cpe:/a:hitachi:cosminexus_application_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Intel\\(R\\) Small Business Technology ([\\w._-]+)\\r\\n|s p/Intel Small Business Technology Platform/ v/$1/ d/remote management/ cpe:/a:intel:small_business_technology_platform:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\n.*<meta name=\\\"DC\\.Title\\\" content=\\\"WebSphere Application Server Version V([\\w._-]+) Liberty Profile Welcome\\\" />|s p/IBM WebSphere Application Server/ v/$1/ i/Liberty Profile/ cpe:/a:ibm:websphere_application_server:$1:-:liberty_profile/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: DrWebServer/REL-1000-([\\w._-]+) ([^/]+)/(\\w+) Lua/([\\w._-]+) OpenSSL/([\\w._-]+) zlib/([\\w._-]+) UNICODE/[\\d.]+\\r\\n|s p/Dr.Web Enterprise Security Suite httpd/ v/$1/ i/arch: $3; Lua $4; OpenSSL $5; zlib $6/ o/$SUBST(2,\"_\",\" \")/ cpe:/a:drweb:enterprise_security_suite:$1/ cpe:/a:gnu:zlib:$6/ cpe:/a:openssl:openssl:$5/ cpe:/a:puc-rio:lua:$4/\n# aviosys 9060 webcam\nmatch http m|^HTTP/1\\.0 401 NG \\r\\nWWW-Authenticate: Basic realm=Camera Name : (.*)\\r\\n\\r\\nUnauthorized$| p/Aviosys webcam httpd/ i/camera name: $1/ d/webcam/\nmatch http m|^HTTP/1\\.1 400 Bad request\\r\\nContent-Length: 80\\r\\n\\r\\n<html><head><title>400 Bad request</title></head><body>Bad request</body></html>| p/Cockpit management console/ o/Linux/ cpe:/a:redhat:cockpit/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: CPE-SERVER/([\\w._-]+) Supports only GET\\r\\n\\r\\n| p/CPE Server TR-069 remote access/ v/$1/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: IPCamera HTTP/ONVIF/P2P/RTSP/VOD Multi-Server\\r\\n| p|DB Power IP Camera HTTP/ONVIF/P2P/RTSP/VOD multi-server| d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WebServer\\(ipcamera\\)\\r\\n| p|DB Power IP Camera HTTP/ONVIF/P2P/RTSP/VOD multi-server| d/webcam/\n# Amazon Fire TV\nmatch http m|^HTTP/1\\.1 \\d\\d\\d [\\w ]+ \\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\nConnection: keep-alive\\r\\nContent-Length: \\d+\\r\\n\\r\\nError \\d\\d\\d, [\\w ]+\\.$| p/Amazon Whisperplay DIAL REST service/ d/media device/ cpe:/a:amazon:whisperplay/\nmatch http m|^HTTP/1\\.1 403 HTTP_FORBIDDEN\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nDate: .* \\d\\d:\\d\\d:\\d\\d\\r\\n\\r\\n| p/Folding@Home FAHClient/ cpe:/a:stanford:fahclient/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Length: 0\\r\\nWWW-Authenticate: Digest qop=\\\"auth\\\", realm=\\\"rokudev\\\", nonce=\\\"1412736333\\\"\\r\\n\\r\\n| p/Mongoose httpd/ v/3.7/ i/Roku developer interface, firmware 5.2 or later/ cpe:/a:cesanta:mongoose:3.7/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nServer: httpd\\r\\nDate: .* GMT\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/milli_httpd/ cpe:/a:acme:milli_httpd/\n# Some misconfiguration perhaps?\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/plain\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\n\\r\\nNot implemented$| p/Node.js/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Type: text/html; charset=utf-8\\r\\nCache-Control: no-cache\\r\\nWWW-Authenticate: Digest realm=\\\"Tixati Web Interface\\\", qop=\\\"auth\\\", nonce=\\\"[0-9a-f]{32}\\\", opaque=\\\"[0-9a-f]{32}\\\"\\r\\n\\r\\n| p/Tixati bittorrent client Web interface/ cpe:/a:tixati:tixati/\nmatch http m|^HTTP/1\\.1 401 Not Authorized\\r\\nWWW-Authenticate: Basic realm=\\\"Vuze(?: - Vuze Web Remote)?\\\"\\r\\nContent-Length: 15\\r\\n\\r\\nAccess Denied\\r\\n| p/Vuze remote http admin/ cpe:/a:azureus:vuze/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nDate: .* GMT\\r\\nContent-Length: 1164\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n| p/Oracle WebLogic admin httpd/ cpe:/a:oracle:weblogic_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: Keep-Alive\\r\\nServer: \\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">\\r\\n<!-- this page must have 520 bytes or more, ie is a wonderfull program -->| p/Siemens Gigaset C610 VoIP Phone http admin/ d/VoIP phone/ cpe:/h:siemens:gigaset_c610/a\nmatch http m=^HTTP/1\\.1 400 Bad Request\\r\\nS(?:ERVER|erver): HDHomeRun/([\\w._-]+)\\r\\n= p/SiliconDust HDHomeRun set top box http admin/ v/$1/ d/media device/ cpe:/h:silicondust:hdhomerun/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: HDHomeRun/([\\d.]+)\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n| p/SiliconDust HDHomeRun set top box streaming httpd/ v/$1/ d/media device/ cpe:/h:silicondust:hdhomerun/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\nContent-Length: 97\\r\\nWWW-Authenticate: Digest qop=\\\"auth\\\", stale=false, algorithm=MD5, realm=\\\"(ECOR[\\w_-]+)\\\", nonce=\\\"\\d+\\\"\\r\\nConnection: keep-alive\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY><H1>401 Unauthorized</H1></BODY></HTML>\\n| p/EverFocus $1 DVR http viewer/ d/media device/ cpe:/h:everfocus:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: Raumfeld Renderer\\r\\nConnection: close\\r\\nContent-Type: audio/x-flac\\r\\n| p/Raumfeld Connector audio streaming httpd/ d/media device/ cpe:/h:teufel:raumfeld_connector/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Linux, WEBACCESS/([\\w._-]+), (DIR-\\w+) Ver ([\\w._-]+)\\r\\n| p/D-Link SharePort web access/ v/$1/ i/model $2, version $3/ d/storage-misc/ o/Linux/ cpe:/a:d-link:shareport_web_access:$1/ cpe:/h:d-link:$2/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/T-Home Telekom Media Receiver httpd/ d/media device/\nmatch http m%^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html; charset=\\\"utf-8\\\"\\r\\nServer: Linux/((2\\.[46]\\.\\d+|\\d\\.\\d+)\\S*) DoaHTTP\\r\\nContent-Length: 0\\r\\nDate: .* GMT\\r\\n\\r\\n$% p/com.sec.android.app.FileTransferServer/ i/Linux $1/ o/Android/ cpe:/o:google:android/ cpe:/o:linux:linux_kernel:$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: WebIOPi/([\\w._-]+)/Python(\\d[\\w._-]*)\\r\\n| p/WebIOPi IoT framework/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/ cpe:/a:trouch:webiopi:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title></title>\\n.*\\n<script language=\\\"javascript\\\">\\nvar lanIP=\\\"[\\d.]+\\\";\\nvar wanIP=\\\"([\\d.]+)\\\";|s p/EnGenius ESR600 router http admin/ i/WAN IP: $1/ cpe:/h:engenius:esr600/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nContent-length: \\d+\\r\\nContent-type: text/html\\r\\nConnection: Keep-Alive\\r\\nKeep-Alive: timeout=5, max=100\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE></TITLE>\\r\\n<script id=\\\"clientEventHandlersJS\\\" type=\\\"text/javascript\\\">| p/LG Ericsson iPECS telephone system web interface/ d/telecom-misc/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nContent-Length: 63\\r\\n\\r\\n<html><body><h2>Error: 501 / Not Implemented</h2></body></html>| p/WibuKey license server/ cpe:/a:wibu:wibukey/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nCache-Control: private\\r\\nExpires: .* (\\w+)\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nSet-Cookie: JSESSIONID_\\d+=[0-9A-F]{32}; Path=/; Secure; HttpOnly\\r\\nWWW-Authenticate: Basic realm=\\\"IBM UrbanCode Deploy\\\"\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nContent-Length: \\d+\\r\\nVary: Accept-Encoding\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: SERVER\\r\\n\\r\\n| p/IBM UrbanCode Deploy/ i/time zone: $1/ cpe:/a:ibm:urbancode_deploy/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\n$| p/Liaison Exchange Commerce Suite/ cpe:/a:liaison:exchange_cs/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: ThreadedServers\\.Pacserve/([\\w._-]+)\\r\\n| p/Pacserve package server for Arch Linux/ v/$1/ cpe:/a:xyne:pacserve:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Intel\\(R\\) Standard Manageability ([\\w._-]+)\\r\\n\\r\\n|s p/Intel AMT WebUI/ v/$1/ i/Standard Manageability/ cpe:/a:intel:active_management_technology:$1/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: Keep-Alive\\r\\nWWW-Authenticate: Basic realm=\\\"HuaweiHomeGateway\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Huawei TR-069 remote access/ d/broadband router/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: Keep-Alive\\r\\nWWW-Authenticate: Digest realm=\\\"HuaweiHomeGateway\\\",nonce=\\\"[\\da-f]{32}\\\", qop=\\\"auth\\\", algorithm=\\\"MD5\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Huawei TR-069 remote access/ d/broadband router/\nmatch http m|^HTTP/1\\.1 401\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nExpires: Thu, 01 Dec 1990 12:00:00 GMT\\r\\n\\r\\n<html><head><title>License Server ([\\d.]+)</title></head><body><a href=\\\"/getstatus\\\">Get status of the server</a></body></html>| p/V-Ray License Server/ v/$1/ cpe:/a:chaosgroup:vray_license_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Hikvision-Webs\\r\\nDate: [\\w: ]{19} \\d\\d\\d\\d\\r\\n| p/Hikvision camera httpd/ d/webcam/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nConnection: Keep-Alive\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nDate: .*\\r\\nKeep-Alive: timeout=15; max=19\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\r\\n<HTML><HEAD>\\r\\n<TITLE>403 Forbidden</TITLE>\\r\\n</HEAD><BODY>\\r\\n<H1>Forbidden</H1>\\r\\nYou don't have permission to access /\\r\\non this server\\.<P>\\r\\n<HR>\\r\\n<ADDRESS>HTTP Server at [\\w.-]+ Port \\d+</ADDRESS>\\r\\n</BODY></HTML>\\r\\n| p/SoftEther VPN httpd/ cpe:/a:university_of_tsukuba:softether_vpn/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type:text/html; charset=UTF-8\\r\\nContent-Length:97\\r\\n\\r\\n<html><head><title>403 Access Denied</title></head><body><h1>403 Access Denied</h1></body></html>| p/Spotify/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nLocation: index\\.htm\\r\\nServer: Httpd \\r\\nConnection: Close\\r\\nDate: .*\\r\\n\\r\\n| p/HP MSM Controller or 1920-series switch httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nETag: \\\"[0-9a-f_]+\\\"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 131\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nX-Frame-Options: SAMEORIGIN\\r\\n\\r\\n<html><script type=\\\"text/javascript\\\">\\nif \\(window!=top\\) top\\.location=window\\.location;top\\.location=\\\"/remote/login\\\";\\n</script></html>\\n| p/Fortinet SSL VPN/ d/security-misc/\n# Netasq/Stormshield\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nDate: .*\\r\\nConnection: Close\\r\\nLocation: /auth/\\r\\nCache-Control: no-store,no-cache,must-revalidate\\r\\nPragma: no-cache\\r\\nExpires: -1\\r\\nLast-Modified: Mon, 12 Jan 2000 13:42:42 GMT\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/Stormshield firewall admin httpd/ d/firewall/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\n# Despite the 1.4 server header, this can be anything from 1.4 to 2.0:\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nETag: W/\\\"\\d\\d\\d\\d-\\d+\\\"\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nServer: Sun-Java-System/Web-Services-Pack-1\\.4\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n<title>Java Web Services Developer Pack ([\\d.]+)</title>| p/Java Web Services Developer Pack/ v/$1/ cpe:/a:sun:jwsdp:$1/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nHTTP/1\\.0 400 Bad Request\\r\\n| p/Huawei S5700-series switch httpd/ d/switch/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: switch\\r\\nDate: [a-z,0-9: ]+ GMT\\r\\nContent-Length: \\d\\d?\\r\\nConnection: Close\\r\\n\\r\\n| p/Huawei S5700-series switch httpd/ d/switch/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nServer: alphapd\\r\\nDate: .* \\d\\d\\d\\d\\r\\nCache-Control: no-cache\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"(TV-IP\\w+)\\\"\\r\\n\\r\\n| p/alphapd httpd/ i/TrendNet $1 IP camera/ d/webcam/ cpe:/h:trendnet:$1/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nServer: alphapd\\r\\nDate: .* \\d\\d\\d\\d\\r\\nCache-Control: no-cache\\r\\nContent-type: text/html\\r\\nWWW-Authenticate: Basic realm=\\\"(DCS-\\w+)\\\"\\r\\n\\r\\n| p/alphapd httpd/ i/D-Link $1 IP camera/ d/webcam/ cpe:/h:d-link:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Web Server\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n\\n   <!DOCTYPE HTML PUBLIC| p/Dell N2000-series switch http admin/ d/switch/\nmatch http m|^HTTP/1\\.1 302 Object moved\\r\\nLocation: https://:443/index\\.htm\\r\\nContent-length: 0\\r\\nConnection: close\\r\\n\\r\\n| p/ATEN CN8000 KVM http admin/ cpe:/h:aten:cn8000/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: no-cache\\r\\nContent-length: \\d\\d\\d\\d\\r\\nConnection: close\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">| p/ATEN CN8000 KVM http admin/ cpe:/h:aten:cn8000/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n\\n<!DOCTYPE html>\\n<html>\\n  <head>\\n    <script language=\\\"JavaScript\\\">\\n      var a = navigator\\.userAgent\\x7c\\x7cnavigator\\.vendor\\x7c\\x7cwindow\\.opera;\\n      if\\(/android\\x7cavantgo\\x7cblackberry\\x7cblazer\\x7ccompal\\x7celaine| p/Open Lighting Architecture daemon/ cpe:/a:open_lighting_project:ola/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nLast-Modified: .*\\r\\nContent-length: \\d+\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\">\\n<html>\\n<head>\\n    <title>Aastra IP Phone Webconfiguration</title>| p/Aastra IP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nCache-Control: max-age=600\\r\\n\\r\\n<!DOCTYPE html>.*<link rel=\\\"stylesheet\\\" title=\\\"default\\\" href=\\\"style/mtu(\\w+)\\.css\\\"|s p/The Energy Detective MTU$1 http admin/ d/power-device/ cpe:/h:the_energy_detective:mtu$1/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nDate: .*\\r\\nServer: \\r\\nExpires: 0\\r\\nSet-Cookie: SESSION=; path=/;\\r\\nExpires: 0\\r\\nVary: Accept-Encoding\\r\\nContent-Length: \\d\\d\\d\\d\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\"/>\\n<link rel=\\\"shortcut icon\\\" href=\\\"/images/favicon\\.ico\\\" type=\\\"image/x-icon\\\"/>\\n<title>Login</title>| p/ArubaOS WebUI http admin/ o/ArubaOS/ cpe:/o:arubanetworks:arubaos/\n# Viewer for a rtmp stream, no other info.\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: akstreamer/([\\d.]+)\\r\\nDate: .* GMT\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n| p/akstreamer httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nDate: .* GMT\\r\\nServer: \\r\\nContent-length: 0\\r\\nConnection: close\\r\\nLocation: http://[\\w.-]+:80/login\\.lp\\r\\nSet-Cookie: xAuth_SESSION_ID=[\\w/+]+=; path=/; \\r\\nCache-control: no-cache=\\\"set-cookie\\\"\\r\\n\\r\\n$| p/Technicolor DSL modem http admin/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WebServer\\r\\nDate: .*\\r\\n\\r\\n<html>\\n\\t<head>\\n\\t\\t<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\">\\n\\t\\t<title>D-LINK SYSTEMS, INC\\. \\x7c Web File Access : Login</title>| p/D-Link SharePort Web File Access/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=-1\\r\\nAccept-Ranges: bytes\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE html><html><head><title>D-LINK \\x7c SharePort Web Access</title>| p/D-Link SharePort Web File Access/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 35\\r\\nConnection: close\\r\\n\\r\\nError 404: Not Found\\nFile not found$| p/Nvidia Streamer Service/ o/Windows/ cpe:/a:nvidia:nvidia_streamer_service/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nContent-Type: text/plain\\r\\nContent-Length: \\d+\\r\\n.* at [\\w._]+ (?:\\[as [\\w._]+\\] )?\\(([^:)]*/nodejs/)node_modules/[^:)]+\\.js:\\d+:\\d+\\)\\n|s p/node.js/ i/installation path: $1/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: CloudHub HTTP Server v([\\w._-]+)\\r\\nDate: .* GMT 00:00\\r\\n| p/CloudHub iPaaS httpd/ v/$1/ cpe:/a:mulesoft:cloudhub:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nServer: atvise\\r\\n| p/Certec atvise SCADA control httpd/ cpe:/a:atvise:webmi2ads/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nLocation: /ui/\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<a href=\\\"/ui/\\\">Moved Permanently</a>\\.\\n\\n| p/HashiCorp Consul service discovery httpd/ cpe:/a:hashicorp:consul/\nmatch http m|^HTTP/1\\.0 200 OK\\nServer: Emacs/([\\w._-]+)\\nDate: .*\\n\\nedit-server is running\\.\\n| p/Emacs text editor/ v/$1/ i/Edit with Emacs extension/ cpe:/a:gnu:emacs:$1/\n# Fallback from HTTPOptions, RTSPRequest, and SIPOptions\nmatch http m|^HTTP/1\\.[01] 406 Not Acceptable\\r\\nContent-Length: 51\\r\\nContent-Type: text/html; charset=utf-8\\r\\nDate: .* GMT\\r\\n\\r\\n<html><body>HTTP Method not supported</body></html>$| p/Greenbone Security Assistant/ cpe:/a:greenbone:security_assistant/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html;\\r\\nTransfer-Encoding: chunked\\r\\nCache-Control: no-store\\r\\nConnection: close\\r\\n\\r\\ndb\\r\\n<html><head><title>Success</title></head><body><form name=\\\"REDIRECTFORM\\\" method=\\\"get\\\" action=http://ezshare\\.card/publicdir/welcome\\.htm></form><script language='javascript'>REDIRECTFORM\\.submit\\(\\);</script></body></html>\\r\\n\\r\\n0\\r\\n\\r\\n| p/ez Share Wi-Fi SD card/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nConnection: Close\\r\\nDate: .* GMT\\r\\nContent-Type: text/html\\r\\nLocation: http://null/storage/emulated/0\\r\\nContent-Length: 103\\r\\n\\r\\nYou are being redirected to <a href=\\\"http://null/storage/emulated/0\\\">http://null/storage/emulated/0</a>\\r\\n| p/smarterDroid WiFi File Transfer/ d/phone/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Close\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\">\\r\\n<title> - ([^<]+?) - WiFi File Transfer</title>| p/smarterDroid WiFi File Transfer/ i/$1/ d/phone/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Close\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\">\\r\\n<title> - ([^<]+?) - WiFi File Transfer Pro</title>| p/smarterDroid WiFi File Transfer Pro/ i/$1/ d/phone/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n.*<h2>Sinatra doesn&rsquo;t know this ditty\\.</h2>\\n  <img src='http://[^/]+/__sinatra__/404\\.png'>|s p/Sinatra web framework/ cpe:/a:bmizerany:sinatra/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: [A-Z][a-z]{2}, 1 [A-Z]{3} 2015 18:6:13 GMT\\r\\nServer: Plex\\r\\nKeep-Alive: timeout=60\\r\\nContent-Length: 692\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\n\\r\\n<html>\\n<head>\\n<title>Plex</title>\\n</head>\\n<body>\\n<h1>/</h1>\\n<tt><pre>| p/Plex for Roku/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Unknown\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n\\r\\n\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\"\\n\\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">\\n<html>\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\">\\n<title>LifeSize&reg;</title>| p/LifeSize teleconferencing config httpd/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-control: max-age=300\\r\\nServer: Ubicom/([\\d.]+)\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!-- saved from url=\\(0022\\)http://internet\\.e-mail -->\\n<html>\\n\\t<head>\\n\\t\\t<title>Veo Observer Web Client</title>| p/Ubicom embedded httpd/ v/$1/ i/Veo Observer webcam/ d/webcam/ cpe:/h:veo:observer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: 59\\r\\nContent-Type: text/plain\\r\\n\\r\\nIf you see this page, Seafile HTTP syncing component works\\.| p/Seafile HTTP syncing component/ cpe:/a:seafile:seafile/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: Wed, 17 Jan 2007 22:21:12 GMT\\r\\nServer: Smeagol/([\\w._-]+)\\r\\nAccept-Ranges: bytes\\r\\nConnection: Close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n<head>\\n<title>Blue's IP Buffer Front Page</title>| p/Smeagol httpd/ v/$1/ i/Telcen Blue's IP Buffer/ d/telecom-misc/\n# For fallback (same device as above):\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nFoo: /usr/www/errors/501\\.html\\r\\nConnection: Close\\r\\nContent-Type: text/plain\\r\\n\\r\\n501 Not Implemented\\r\\n\\r\\nThe requested method isn't implemented\\.\\r\\n| p/Smeagol httpd/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d [^\\r\\n]+\\r\\nServer: HTTP server\\r\\nDate: [^\\r\\n]+ \\d\\d\\d\\d\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\n.*</html>\\r\\n\\r\\n<head>|s p/Dell 1355cnw MFC config httpd/ d/printer/ cpe:/h:dell:1355cnw/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .+\\r\\nDate: .+\\r\\nServer: Netgem/1\\.0 \\([Hh][Tt][Tt][Pp]server\\)\\r\\n| p/Netgem netbox set-top box config httpd/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: [^\\r\\n]+ ([A-Z]+) \\d\\d\\d\\d\\r\\nServer: User Agent Web Server\\r\\n.*<title>STB WebServer</title>|s p/Cisco ODN set-top box httpd/ i/time zone: $1/ d/media device/\nmatch http m|^HTTP/1\\.1 302 Movtmp\\r\\nContent-Type: text/html\\r\\nLocation: https://[\\d.]+:443/\\r\\nConnection: close\\r\\nUpgrade: TLS/([\\d.]+)\\r\\n\\r\\n| p/Kyocera TASKalfa printer httpd/ i/redirect to HTTPS, TLS $1/ d/printer/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\nServer: TSEWS\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nExpires: .*\\r\\n| p/Technisat Embedded Web Server/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nLast-Modified: .*\\r\\nContent-length: \\d+\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\">\\n<html>\\n<head>\\n    <title>Aastra IP Phone Configurator</title>\\n    <link rel=\\\"stylesheet\\\" href=\\\"/aamadeus\\.css\\\" type=\\\"text/css\\\">| p/Aastra IP Phone config httpd/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\ncontent-type: text/html\\r\\ncontent-length: \\d+\\r\\nserver: PyCharm ([\\w._-]+)\\r\\ndate: | p/PyCharm/ v/$1/ cpe:/a:jetbrains:pycharm:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Encoding: \\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" lang=\\\"en\\\" xml:lang=\\\"en\\\" dir=\\\"ltr\\\">\\n<head>\\n    <meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\" />\\n    <meta http-equiv=\\\"X-UA-Compatible\\\" content=\\\"IE=8\\\" />\\n    <title>[^<]*qBittorrent| p/qBittorrent Web UI/ cpe:/a:qbittorrent:qbittorrent/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: Cowboy\\r\\nDate: [^\\r\\n]+\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\n.*<title>Heroku \\x7c No such app</title>|s p/Cowboy httpd/ i/Heroku/ cpe:/a:ninenines:cowboy/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nCache-control: no-cache\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<meta HTTP-EQUIV=\\\"Content-Type\\\" CONTENT=\\\"text/html; charset==iso-8859-1\\\">\\r\\n<title>ARCHTTP Configuration</title>| p/Areca RAID Controller HTTP configuration tool/\nmatch http m|^HTTP/1\\.1 200 OK\\nServer: axhttpd/([\\w._-]+)\\nContent-Type: text/html\\nContent-Length: \\d+\\nDate: .*\\nLast-Modified: .*\\n\\n| p/axTLS axhttpd/ v/$1/ cpe:/a:cameron_rich:axtls:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nAccess-Control-Allow-Methods: GET, POST, HEAD, OPTIONS\\r\\nAllow: GET, POST, HEAD, OPTIONS\\r\\nContent-Length: 0\\r\\nServer: PhpStorm ([\\w._-]+)\\r\\nDate: | p/PhpStorm IDE httpd/ v/$1/ cpe:/a:jetbrains:phpstorm:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nSet-Cookie: DLILPC=\\\"\\\"; Version=1; Max-Age=0; Path=/\\r\\n\\r\\n.*<title>Power Controller </title>\\n \\n<script language=\\\"javascript\\\" src=\\\"/md5\\.js\\\"></script>|s p/Digital Loggers Web Power Switch II http config/ d/power-device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nCache[- ]Control: .*\\r\\nExpires: .*\\r\\nPragma: no-cache\\r\\nSet-Cookie: DLILPC=\"\"; Version=1; Max-Age=0; Path=/\\r\\n\\r\\n<html>\\n<head>\\n<META NAME=\"ROBOTS\" CONTENT=\"NOINDEX, NOFOLLOW\">\\n \\n<title>Power Controller </title>| p/Digital Loggers Web Power Switch/ d/power-misc/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Fast Wireless (?:\\w+ )?Router (FW\\w+)\\\"\\r\\nContent-Type: text/html\\r\\n\\r\\n<!--Web Server Error Report:<HR>| p/Fast WAP admin httpd/ i/model: $1/ d/WAP/ cpe:/h:fast:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<!DOCTYPE html>\\n<html ng-app=\\\"ts3soundboard-bot\\\" ng-controller=\\\"base\\\">| p/TS3 Soundboard-Plugin/ cpe:/a:michael_friese:ts3sb/\n# ePO 5.0.0.2620 missing X-FRAME-OPTIONS\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n(?:X-FRAME-OPTIONS: SAMEORIGIN\\r\\n)?Content-Disposition: \\r\\n\\r\\n<!DOCTYPE html>\\r\\n<html>\\r\\n<head>\\r\\n<script src=\\\"js/AgentLog\\.js\\\">| p/McAfee ePolicy Orchestrator Agent Activity Log httpd/ cpe:/a:mcafee:epolicy_orchestrator_agent/\n# Fallback\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\n12\\r\\nMethod Not Allowed\\r\\n0\\r\\n\\r\\n| p/OpenWrt uHTTPd/ d/WAP/ o/Linux/ cpe:/a:openwrt:uhttpd/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: \\d+\\r\\nCache-Control: max-age=0, no-store, no-cache\\r\\nx-enc: Ext1, Basic\\r\\nServer: Samsung ([\\w ]+) Series, sn=([\\dA-Z]+)\\r\\n\\r\\n| p/Samsung SyncThru Web Service/ i/$1 series; SN: $2/ d/printer/ cpe:/a:samsung:syncthru_web_service/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-type: text/html\\r\\nExpires: .*\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nCache-Control: no-store, no-cache, must-revalidate\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n\\n<head>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\">\\n<script>product=\\\"HOTBOX\\\"| p/Hot Hotbox router admin httpd/ d/broadband router/ cpe:/h:hot:hotbox/\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nContent-Type: text/plain\\r\\nContent-Length: 56\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\nTypeError: Object #<ServerResponse> has no method 'send'| p/Tizen Multiscreen SDK httpd/ d/media device/\nmatch http m|^HTTP/1\\.1 401 Authentication Required\\r\\nWWW-Authenticate: Basic realm=\\\"([\\d.]+)\\\"\\r\\nRefresh: 0;URL=\\\"/ui/logout\\.htm\\\"\\r\\nServer: Blue-Coat-CacheFlow-Appliance\\r\\nCache-Control: no-store\\r\\nSet-Cookie: BCSI_MC=| p/Blue Coat CacheFlow appliance web ui/ i/IP $1/\nmatch http m|^HTTP/1\\.1 303 See Other\\r\\nDate: .*\\r\\nSet-Cookie: JSESSIONID=[^;]+;Path=/\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nLocation: http://[^:/]+:9000/sessions/new\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Mode Analytics Connector httpd/\n# node.js?\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-Powered-By: NodeBB\\r\\nX-Frame-Options: SAMEORIGIN\\r\\n| p/NodeBB web forum/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\"><html><head><meta http-equiv=content-type content=\\\"text/html;charset=utf-8\\\"><title>TSD</title>\\n| p/OpenTSDB TSD/ i/http response on TSD port/ cpe:/a:opentsdb:opentsdb/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nExpires: .*\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>\\n<html>\\n  <head>\\n    <title>Kodi</title>\\n| p/libmicrohttpd/ i/Kodi OSMC web control/ cpe:/a:gnu:libmicrohttpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nCache-Control: private, max-age=0, no-cache\\r\\nAccept-Ranges: bytes\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>\\r?\\n<html>\\r?\\n  <head>\\r?\\n    <title>Kodi</title>| p/libmicrohttpd/ i/Kodi OSMC web control/ cpe:/a:gnu:libmicrohttpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nExpires: .*\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\\\"en\\\">\\n  <head>\\n    <meta charset=\\\"utf-8\\\">\\n    <title>Chorus\\.</title>| p|Chorus Web UI for XBMC/Kodi| cpe:/a:jeremy_graham:chorus/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nCache-Control: private, max-age=0, no-cache\\r\\nAccept-Ranges: bytes\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\"en\">\\n  <head>\\n    <meta charset=\"utf-8\">\\n    <title>Chorus\\.</title>| i|Chorus Web UI for XBMC/Kodi| cpe:/a:jeremy_graham:chorus/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nCache-Control: private, max-age=0, no-cache\\r\\nAccept-Ranges: bytes\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\"en\">\\n    <head>\\n        <meta charset=\"utf-8\">\\n        <title>Chorus 2 - Kodi web interface</title>| v/2/ i|Chorus Web UI for XBMC/Kodi| cpe:/a:jeremy_graham:chorus:2/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nDate: .* GMT\\r\\nContent-Type: text/html\\r\\nSet-Cookie: WASID=[\\da-f]{16}; path=/\\r\\nSet-Cookie: WAAK=[\\da-f]{32}; path=/; secure\\r\\nConnection: close\\r\\n\\r\\n| p/Stonesoft StoneGate SSL VPN/ cpe:/a:stonesoft:stonegate/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nServer: Goliath\\r\\n| p/Goliath httpd/ cpe:/a:postrank:goliath/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Close\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\" \"http://www\\.w3\\.org/TR/html4/loose\\.dtd\">\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\\r\\n<title> - ([^<]*?) - WiFi File Transfer</title>| p/SmarterDroid WiFi File Transfer/ i/device: $1/ o/Android/ cpe:/a:smarterdroid:wifi_file_transfer/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: (.*)\\r\\nContent-Length: 0\\r\\nExpires: \\1\\r\\nCache-Control: no-cache\\r\\n(?:Access-Control-Allow-Origin: \\*\\r\\n)?Connection: close\\r\\n\\r\\n$| p/aria2 downloader JSON-RPC/ cpe:/a:tatsuhiro_tsujikawa:aria2/\n# TP-LINK TD-W9980 N600\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: [\\w: ]+ \\d\\d\\d\\d\\r\\nServer: tr069 http server\\r\\nContent-Length: 15\\r\\nConnection: close\\r\\nContent-Type: text/plain; charset=ISO-8859-1\\r\\n\\r\\nFile not found\\n| p/TP-LINK TR-069 remote access/ d/broadband router/\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nServer: DTV HMC-Lite Server\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\nContent-Length: 38\\r\\n\\r\\nInvalid http version 1\\.0, requires 1\\.1| p/DirecTV HMC-Lite/ d/media device/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=login\\r\\nX-Backside-Transport: FAIL FAIL\\r\\nConnection: close\\r\\n\\r\\n\\n\\t\\t\\n\\{\"ClaimNotificationAddRs\":\\{\\n    \"RqUID\":\"\",\\n      \"TransactionResponseDt\":\"\",\\n      \"MsgStatusCd\":0,\\n      \"MsgStatusDesc\":\"Failure\",\\n      \"MsgErrorCd\":\"401\",\\n      \"MsgErrorDesc\":\"Authentication Failure\"\\n\\}\\}\\n\\n\\t| p/IBM WebSphere Appliance Management Center web user interface/ cpe:/a:ibm:websphere_appliance_management_center/\nmatch http m|^HTTP/1\\.1 200 (?:OK)?\\r\\nServer: Dump1090\\r\\nContent-Type: text/html;charset=utf-8\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nCache-Control: no-cache, must-revalidate\\r\\nExpires: Sat, 26 Jul 1997 05:00:00 GMT\\r\\n\\r\\n| p/Dump1090 (MalcomRobb fork) http interface/ cpe:/a:malcomrobb:dump1090/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Dump1090\\r\\nContent-Type: text/html;charset=utf-8\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n| p/Dump1090 http interface/ cpe:/a:antirez:dump1090/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONNECTION: close\\r\\nCONTENT-LENGTH: \\d+\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n\\xef\\xbb\\xbf<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Strict//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\">\\r\\n<html> \\r\\n<head>\\r\\n<title>CPPLUS DVR \\xe2\\x80\\x93Web View</title>\\r\\n| p/CP Plus DVR http interface/ d/media device/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nServer: WASABI/1\\.1\\r\\nContent-Length: 73\\r\\n\\r\\n<html><title>401 Unauthorized</title><body>401 Unauthorized</body></html>| p/Equitrac Office EQCASService.exe/ cpe:/a:equitrac:office/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: 31\\r\\nConnection: Close\\r\\n\\r\\nfastviewer Webconference Server| p/Fastviewer Web Conference Server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3\\.2 Final//EN\">\\r\\n<HTML>\\r\\n<HEAD><TITLE>(ZBR\\d+) - [^<]+</TITLE><meta http-equiv=\"Pragma\" content=\"no-cache\"><meta http-equiv=\"Expires\" content=\"0\"></HEAD>\\r\\n<BODY><CENTER>\\r\\n<IMG SRC=\"logo\\.png\" ALT=\"\\[Logo\\]\">\\r\\n<H1>Zebra Technologies<BR>\\r\\n((?:FDX )?([^<(]+)(?: \\([EZ]PL\\)))?</H1>\\r\\n| p/Zebra $2 printer http config/ i/SN: $1/ d/printer/ cpe:/h:zebra:$3/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: Keep-Alive\\r\\nContent-Length: 0\\r\\nContent-Type: text/html\\r\\n\\r\\n$| p/Pebble Time developer connection/ cpe:/a:pebble:pebble_time/\n#7.4.1\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nDate: .*\\r\\nServer: Gateway\\r\\nConnection: close\\r\\nX-CorrelationID: Id-[a-f0-9]{24} 0\\r\\nContent-Type: text/html\\r\\n\\r\\nAccess Denied| p/Axway API Gateway/ cpe:/a:axway:api_gateway/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\.\\r\\nContent-Type: application/json; charset=UTF-8\\r\\nDate: .*\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nConnection: close\\r\\nContent-Length: 90\\r\\n\\r\\n\\{\"status\": \\{\\n  \"code\": 403,\\n  \"commandResult\": 1,\\n  \"msg\": \"Forbidden\\.\",\\n  \"query\": \"/\"\\n\\}\\}| p/DirecTV Set-top Box HTTP Exported Functionality (SHEF)/ d/media device/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\" \"http://www\\.w3\\.org/TR/html4/loose\\.dtd\">\\r\\n<html><head>\\r\\n<meta http-equiv=\"content-type\"content=\"no-cache, text/html\">\\r\\n<title>&micro;BlueBOLT - Menu</title>.*?<font color=#eaaf0f style=font-size:30px>\\r\\nBlueBOLT-CV1\\r\\n.*?<th align=right>Serial number:</th>\\r\\n<th align=left><input name=r value=\"([\\d-]+)\" disabled></th>\\r\\n</tr>\\r\\n<tr>\\r\\n<th align=right>IP Card Software Version:</th>\\r\\n<th align=left><input name=r value=\"V([\\d.]+)\" disabled>|s p/BlueBOLT-CV1 network interface card/ v/$2/ i/SN: $1/ d/power-device/ cpe:/h:panamax:bluebolt-cv1/\nmatch http m|^X-Content-Type-Options: no-sniff\\r\\nCache-Control: no-cache, no-store, must-revalidate\\r\\nHTTP/1\\.1 \\d\\d\\d .*\\r\\n(?:X-Content-Type-Options: no-sniff\\r\\nCache-Control: no-cache, no-store, must-revalidate\\r\\n)?Server: gSOAP/([\\d.]+)\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\n\\r\\n| p/gSOAP/ v/$1/ i/HP MFP printer/ d/printer/ cpe:/a:genivia:gsoap:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nServer: NetQCheck\\r\\nLocation: /myspeed/.*\\r\\nContent-type: text/html\\r\\nContent-length: \\d+\\r\\n\\r\\n| p/Visualware NetQCheck httpd/ cpe:/a:visualware:netqcheck/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nConnection: Close\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nServer: Gigablast/1\\.0\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\n\\r\\n| p/Gigablast search engine httpd/ cpe:/a:gigablast:open-source-search-engine/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Web Switch\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<script language=JavaScript><!--\\nvar g_Lan=\\d+;\\nvar stitle = \"([^\"]+)\";| p/TP-LINK $1 switch httpd/ d/switch/ cpe:/h:tp-link:$1/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Web Switch\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<script language=JavaScript><!--\\nvar g_Lan=1;\\nvar logonInfo = new Array\\(\\n0,0,0 \\);\\nvar g_year = \\d+;\\n--></script>\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=iso-8859-1\\\">\\n<HTML>\\r\\n\\t<HEAD>\\r\\n\\t\\t<meta http-equiv=\\\"pragma\\\" content=\\\"no-cache\\\">\\r\\n\\t\\t<meta http-equiv=\\\"expires\\\" content=\\\"wed, 26 Feb 1997 08:21:57 GMT\\\">| p/TP-Link TL-SG3210 switch admin httpd/ d/switch/ cpe:/h:tp-link:tl-sg3210/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Web Switch\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<script language=JavaScript><!--\\nvar g_ver = '\\d+';\\nvar g_Lan='(..)';| p/TP-LINK switch httpd/ i/lang: $1/ d/switch/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nCache-Control: no-cache\\r\\nX-Runtime: \\d+\\r\\nSet-Cookie: spiceworks_session=[^;]+; path=/; HttpOnly\\r\\nLocation: http://([^/]+)/portal\\r\\n| p/Spiceworks Help Desk/ h/$1/ cpe:/a:spiceworks:spiceworks_help_desk/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: BASIC realm=\"(DPR?-\\d[^)]+)\"\\r\\n\\r\\nPassword Error\\.| p/D-Link $1 print server httpd/ d/print server/ cpe:/h:dlink:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-type: text/html\\r\\nExpires: Thu, 3 Oct 1968 12:00:00 GMT\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache, must-revalidate\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n| p/Cisco Docsis cable modem http admin/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nSet-Cookie: SiteName64=[^;]+; Expires=Sat, 31 Dec 2050 23:59:59 GMT\\r\\nSet-Cookie: SiteName=([^;]+);.*\\r\\nSet-Cookie: SiteAddress64=.*\\r\\nSet-Cookie: SiteAddress=([^;]+);.*\\r\\nSet-Cookie: Build64=.*\\r\\nSet-Cookie: Build=(\\d+);.*\\r\\nSet-Cookie: Version64=.*\\r\\nSet-Cookie: Version=([^;]+);.*\\r\\nCONTENT-LENGTH: \\d+\\r\\n| p/aPod Access Control system master controller/ v/$SUBST(4,\"%2E\",\".\")/ i/site: $SUBST(1,\"%20\",\" \"); address: $SUBST(2,\"%20\",\" \"); build: $3/ d/security-misc/ cpe:/a:online_security_technologies:apod:$SUBST(4,\"%2E\",\".\")/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html(?:; charset=utf-8)?\\r\\nContent-Length: \\d+\\r\\nCache-Control: max-age=0, no-store, no-cache\\r\\n\\r\\n<html>[\\r\\n]*<head>[\\r\\n]*<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">[\\r\\n]*<link rel=\"shortcut icon\" href=\"/sws/images/fav\\.ico\" type=\"image/x-icon\" />| p/Samsung SyncThru Web Service/ d/printer/ cpe:/a:samsung:syncthru_web_service/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: BBVS/([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\"SecuritySpy Web Server\"\\r\\n| p/BBVS video streaming httpd/ v/$1/ i/SecuritySpy surveillance software/ o/Mac OS X/ cpe:/a:ben_software:bbvs:$1/ cpe:/a:ben_software:securityspy/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCACHE-CONTROL: no-cache\\r\\nDate: .*\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n<head>\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />\\n<title>replace</title>| p/Huawei HG532e ADSL modem http admin/ d/broadband router/ cpe:/h:huawei:hg532e/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: magic iradio\\r\\nCache-Control: max-age=0, no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n| p/AGK WiFi Internet radio http config/ d/media device/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nDate: .*\\r\\nServer: \\r\\nExpires: 0\\r\\nSet-Cookie: SESSION=; path=/; expires=Sat, 01-Jan-1970 00:00:00 GMT;\\r\\nExpires: 0\\r\\nVary: Accept-Encoding\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/Aruba wireless switch http admin/ d/switch/ o/ArubaOS/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Slinger ([\\d.]+)\\r\\nConnection: close \\r\\nLast-modified: .*\\r\\nContent-Type: text/html\\r\\nExpires: 0\\r\\n\\r\\n.*<BR>\\n\\nZebra Technologies<BR>\\nZTC (\\w+)|s p/Zebra $2 printer http admin/ i/Slinger $1 httpd/ d/printer/ cpe:/h:zebra:$2/a\n# Fallback match, GET actually returns something different, but every other HTTP-like probe returns this:\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: esp8266-httpd/([\\w._-]+)\\r\\nContent-Type: text/plain\\r\\n\\r\\nNot Found\\.\\r\\n| p/esphttpd/ v/$1/ cpe:/a:spritesmods:esphttpd:$1/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: \\r\\nDate: .*\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nContent-Length: \\d+\\r\\nLast-Modified: Sat, 01 Jan 2000 00:00:\\d\\d GMT\\r\\nConnection: close\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD XHTML 1\\.0 Transitional//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\">\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\">\\n<head>\\n\\t<meta content=\"text/html; charset=iso-8859-1\" http-equiv=\"Content-Type\"/>\\n    <title>RAP Console</title>| p/Aruba RAP Console/ d/WAP/\n# full hw, sw, version, wifi info at /cgi-bin/check.html\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nExpires: Fri, 01 Jan 1990 00:00:00 GMT\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache, no-store, must-revalidate\\r\\nLast-Modified: Mon, 30 Aug 2010 22:16:44 GMT\\r\\nContent-length: 1350\\r\\n\\r\\n| p/TiVo set-top box network adapter http config/ d/media device/\nmatch http m|^HTTP/1\\.1 505 Client Error\\r\\nServer: AV_Receiver/([\\d.]+) \\(([^)]+)\\)\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\n\\r\\n$| p/Yamaha AV receiver web ui/ v/$1/ i/model: $2/ cpe:/h:yamaha:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<!DOCTYPE html><html><head><title>BroadCam - Information Setup Page</title>| p/BroadCam video streaming httpd/ o/Windows/ cpe:/a:nchsoftware:broadcam/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n.*\\n<FRAME name=hrbar src=\"BarFoot\\.html\"|s p/Panasonic Network Camera http ui/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nContent-length: \\d+\\r\\nContent-type: text/html\\r\\nLast-modified: .*\\r\\nAccept-ranges: bytes\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n<meta http-equiv=\"refresh\"\\n content=\"0;URL=/talisen/cgi-bin/projects\\.cgi\">| p/Talisen Secure Access Gateway/ cpe:/a:talisen:secure_access_gateway/\n# No info on what is listed\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE html>\\n<html><head>\\n<script type=\"text/javascript\">\\nfunction createPageList\\(\\) \\{\\n    var xhr = new XMLHttpRequest;\\n    xhr\\.open\\(\"GET\", \"/pagelist\\.json\"\\);| p/LG television page list httpd/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nExpires: -1\\r\\n\\r\\n.*\\n<link rel=\"stylesheet\" type=\"text/css\" href=\"login\\.css\">\\n<title>Netgear Prosafe Plus Switch</title>|s p/Netgear ProSAFE Plus switch http admin/ d/switch/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLast-Modified: .*\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\"en\">\\n    <head>\\n        <meta charset=\"utf-8\">\\n        <title>Shipyard</title>| p/Shipyard/ cpe:/a:evan_hazlett:shipyard/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n<!DOCTYPE html>\\n<!--\\nThe entry point for client\\. This file is loaded just once when the client is captured\\.\\nIt contains socket\\.io and all the communication logic\\.\\n-->\\n<html>| p/Karma JavaScript test runner/ cpe:/a:google:karma/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\nHello world\\r\\n$| p/LG smart TV http service/\nmatch http m|^HTTP/1\\.1 100 Invalid request type\\r\\n(?:Content-Encoding: \\r\\n)?\\r\\n$| p/qBittorrent tracker httpd/ cpe:/a:qbittorrent:qbittorrent/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nX-Powered-By: restheart\\.org\\r\\n| p/RESTHeart API server/ cpe:/a:softinstigate:restheart/\nmatch http m|^HTTP/1\\.0 501 method 'GET' not available\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: pve-api-daemon/([\\d.]+)\\r\\n|s p/Proxmox Virtual Environment REST API/ v/$1/ cpe:/a:proxmox:proxmox_virtual_environment:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-control:no-cache\\r\\nContent-Type:text/html\\r\\nTransfer-Encoding:chunked\\r\\nConnection:Keep-Alive\\r\\n\\r\\n.*\\r\\nvar ProductName = '(\\w+)'|s p/Huawei $1 modem http admin/ d/broadband router/ cpe:/h:huawei:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n\\t<meta http-equiv=\"Content-Language\" content=\"en-us\" />\\r\\n\\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />\\r\\n\\t<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" />\\r\\n\\t<title>Check Point ([\\w]+) Appliance - Login</title>| p/Check Point $1 SVN foundation login/ cpe:/h:checkpoint:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: snom embedded\\r\\nCache-Control: no-cache\\r\\nCache-Control: no-store\\r\\nContent-Type: text/html\\r\\nContent-Length: 181\\r\\n\\r\\n<HTML><HEAD>\\r\\n<TITLE>snom VoIP phone: Error</TITLE>\\r\\n</HEAD><BODY>\\r\\n<H1>File not found</H1>\\r\\n<P>Please ask your system administrator to check the lcs log file\\.</P>\\r\\n</BODY></HTML>\\r\\n| p/Snom VoIP phone http admin/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nTE: chunked\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html\\r\\n\\r\\n58\\r\\n<html><head><title>Not Found</title></head><body><h1>404 - Not Found</h1></body></html>\\n\\r\\n0\\r\\n\\r\\n| p/Orange Livebox http admin/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Syncthing-Id: ((?:\\w+-){7}\\w+)\\r\\nX-Syncthing-Version: v([\\d.]+)\\r\\n|s p/Syncthing/ v/$2/ i/ID: $1/ cpe:/a:syncthing:syncthing:$2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\"cpe@zte\\.com\", qop=\"auth\", nonce=\"[a-f0-9]{32}\", opaque=\"T3BhcXVlIHN0cmluZyBmb3IgQUNTIEF1dGhlbnRpY2F0aW9u\", Algorithm=\"MD5\"\\r\\n| p/ZTE Auto-Configuration Servers (ACS) http login/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\ncache-control: no-cache\\r\\nContent-Length: 1573\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nSet-Cookie: JSESSIONID=9A69859878EF80D2D98913D0A75EA0CD; Path=/; Secure; HttpOnly\\r\\nContent-Type: text/html;charset=UTF-8\\r\\npragma: no-cache\\r\\n.*\\r\\n<html>\\r\\n<head>\\r\\n<title>VMware&nbsp;Horizon View</title>\\r\\n|s p/VMware Horizon View/ cpe:/a:vmware:horizon_view/\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>VMware Horizon View</title>\\r\\n| p/VMware Horizon View/ cpe:/a:vmware:horizon_view/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nDate: .*\\r\\n\\r\\nMissing route token in request| p/VMware Horizon View/ cpe:/a:vmware:horizon_view/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"UTF-8\"\\?>\\r\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Strict//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\">\\r\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\">\\r\\n<head>\\r\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\\r\\n<meta http-equiv=\"Cache-Control\" content=\"no-cache\"/>\\r\\n<meta name=\"viewport\" content=\"width=device-width; initial-scale=1\\.0; minimum-scale=1\\.0; maximum-scale=2\\.0\"/>\\r\\n<meta name=\"MobileOptimized\" content=\"260\"/>\\r\\n<title>zapya download</title>| p/Zapya file transfer app/ cpe:/a:dewmobile:zapya/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html; charset=\"utf-8\"\\r\\nContent-Encoding: gzip\\r\\nContent-Length: 1039\\r\\nlast-modified: .*\\r\\n\\r\\n\\x1f\\x8b\\x08\\x08....\\0\\x03index\\.html\\0|s p/HP Storage Management Utility/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nServer: \\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nETag: \"\\w+-\\w+-\\w+\"\\r\\nPragma: no-cache\\r\\nLocation: /php/login\\.php\\r\\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\\r\\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\nX-FRAME-OPTIONS: SAMEORIGIN\\r\\nSet-Cookie: PHPSESSID=\\w+; path=/; HttpOnly\\r\\n\\r\\n| p/Palo Alto firewall http admin/ d/security-misc/\nmatch http m|^HTTP/1\\.1 302 \\r\\nContent-Type: text/html\\r\\nConnection: Close\\r\\nLOCATION: http://speedport\\.ip/html/login/index\\.html\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Telekom Speedport http config/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nEtag: \"[a-f\\d]+\\.\\d+\"\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nAccept-Ranges: bytes\\r\\n\\r\\n<!doctype html>\\n<html lang=\"en\">\\n    <head>\\n {8}<meta charset=\"utf-8\">\\n {8}<title>Z-Way UI selection</title>| p/Z-Way home automation controller/ d/specialized/ cpe:/a:z-wave.me:z-way/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Arcadyan httpd 1\\.0\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/Arcadyan broadband router httpd/ d/broadband router/\nmatch http m|^HTTP/1\\.[01] 302 Hotspot redirect\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nExpires: 0\\r\\nLocation: .*\\r\\n\\r\\n| p/MikroTik HotSpot/ o/RouterOS/ cpe:/a:mikrotik:hotspot/ cpe:/o:mikrotik:routeros/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: HDHomeRun/([\\d.]+)\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=\"utf-8\"\\r\\n.*<div class=\"T TE\">HDHomeRun RECORD</div>|s p/SiliconDust HDHomeRun RECORD http config/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<html><head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"><title></title></head><frameset rows=\"0,\\*\" border=0 frameborder=no framespacing=0><frame src=\"space\\.htm\" name=\"space\" scrolling=\"no\" border=0><frame src=\"wanst\\.htm\" name=\"main\" marginwidth=\"30\" marginheight=\"16\" scrolling=\"auto\">| p/D-Link WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Printopia/([\\w._-]+)\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n</head>| p/Printopia AirPrint service/ v/$1/ o/OS X/ cpe:/a:decisive_tactics:printopia:$1/ cpe:/o:apple:mac_os_x/a\n#CIMC 1.5(4e)\nmatch http m|^UnknownMethod 403 Forbidden\\r\\nDate: .*\\r\\nConnection: keep-alive\\r\\nKeep-Alive: timeout=60, max=2000\\r\\nContent-Type: text/html\\r\\nContent-length: \\d+\\r\\n\\r\\n<HTML><HEAD><TITLE>Document Error: Forbidden</TITLE></HEAD>\\r\\n<BODY><H2>Access Error: 403 -- Forbidden</H2>\\r\\n</BODY></HTML>\\r\\n\\r\\nHTTP/1\\.0 400 Bad Request\\r\\nDate:| p/Cisco Integrated Management Controller/ cpe:/h:cisco:unified_computing_system_integrated_management_controller/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: https?://([^/]+)/admin\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer:  \\r\\n\\r\\n| p/Cisco Identity Services Engine/ h/$1/ cpe:/a:cisco:identity_services_engine_software/ cpe:/h:cisco:identity_services_engine:-/\nmatch http m|^HTTP/1\\.1 400 Bad request\\r\\nContent-Type: text/html; charset=utf8\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\n\\d+\\r\\n<!DOCTYPE html>\\n<html>\\n<head>\\n    <title>\\r\\nb\\r\\nBad request\\r\\ncf6\\r\\n</title>\\n    | p/Cockpit web service/ v/161 or earlier/ o/Linux/ cpe:/a:redhat:cockpit/ cpe:/o:linux:linux_kernel/a\n# X-DNS-Prefetch-Control and Referrer-Policy added in 162\nmatch http m|^HTTP/1\\.1 400 Bad request\\r\\nContent-Type: text/html; charset=utf8\\r\\nTransfer-Encoding: chunked\\r\\nX-DNS-Prefetch-Control: off\\r\\nReferrer-Policy: no-referrer\\r\\n\\r\\n\\d+\\r\\n<!DOCTYPE html>\\n<html>\\n<head>\\n    <title>\\r\\nb\\r\\nBad request\\r\\ncf6\\r\\n</title>\\n    | p/Cockpit web service/ v/162 - 188/ o/Linux/ cpe:/a:redhat:cockpit/ cpe:/o:linux:linux_kernel/a\n# X-Content-Type-Options added in 189\nmatch http m|^HTTP/1\\.1 400 Bad request\\r\\nContent-Type: text/html; charset=utf8\\r\\nTransfer-Encoding: chunked\\r\\nX-DNS-Prefetch-Control: off\\r\\nReferrer-Policy: no-referrer\\r\\nX-Content-Type-Options: nosniff\\r\\n\\r\\n\\d+\\r\\n<!DOCTYPE html>\\n<html>\\n<head>\\n    <title>\\r\\nb\\r\\nBad request\\r\\ncf6\\r\\n</title>\\n    | p/Cockpit web service/ v/189 or later/ o/Linux/ cpe:/a:redhat:cockpit/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 401 Not Authorized\\r\\nServer: WSTL CPE 1\\.0\\r\\nMIME-version: 1\\.0\\r\\nDate: [A-Z]{3} [A-Z]{3} \\d\\d \\d\\d:\\d\\d:\\d\\d \\d\\d\\d\\d GMT\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nWWW-Authenticate: Digest realm=\"Westell Secure\",| p/Westell broadband router TR-069/ d/broadband router/\nmatch http m|^HTTP/1\\.1 401 Not Authorized\\r\\nServer: WSTL CPE 1\\.0\\r\\nDate: .* GMT\\r\\nMIME-version: 1\\.0\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nWWW-Authenticate: Digest realm=\"Westell Secure\",| p/Westell broadband router TR-069/ d/broadband router/\n# Glassfish AS 4.0 (build 89)\nmatch http m|^HTTP/1\\.1 202 Accepted\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Strict//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\">\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\" xml:lang=\"en\" lang=\"en\">\\n<head>\\n<!--\\n\\n    DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER\\.\\n\\n    Copyright \\(c\\) [12]\\d\\d\\d Oracle and/or its affiliates\\.| p/Oracle Glassfish Application Server/ cpe:/a:oracle:glassfish_application_server/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: .*?/user/login\\r\\nSet-Cookie: lang=(..)-(..); Path=/[^;]*; Max-Age=2147483647\\r\\nSet-Cookie: i_like_gogits=[a-f\\d]{16}; Path=/[^;]*; HttpOnly\\r\\n| p/Gogs git httpd/ i/lang: $1-$2/ cpe:/a:gogs:gogs::::$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nSet-Cookie: lang=(..)-(..); Path=/[^;]*; Max-Age=2147483647\\r\\nSet-Cookie: i_like_gogits=[a-f\\d]{16}; Path=/[^;]*; HttpOnly\\r\\n| p/Gogs git httpd/ i/lang: $1-$2/ cpe:/a:gogs:gogs::::$1/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: .*?/login\\r\\nSet-Cookie: grafana_sess=[a-f\\d]{16}; Path=/; HttpOnly\\r\\n| p/Grafana/ cpe:/a:xn--torkel_degaard-1pb:grafana/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<!---CAS:0003--><HTML><HEAD>\\n<SCRIPT LANGUAGE=JAVASCRIPT><!--\\nvar a=window\\.open\\(\"/menu\\.htm\", \"Login\", \"width=505,height=250,screenX=200,screenY=300,resizable=1,scrollbars=0,dependent=1\"\\);\\na\\.focus\\(\\);\\n//--></SCRIPT>\\n</HEAD>\\n\\nPlease Login First\\.\\n\\n</HTML>| p/D-Link DI-524 WAP http config/ d/WAP/ cpe:/h:dlink:di-524/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: HTTPD\\r\\nDate: .* GMT\\r\\nWWW-Authenticate: Basic realm=\"USER LOGIN\"\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY BGCOLOR=\"#cc9999\"><H4>401 Unauthorized</H4>\\nAuthorization required\\.\\n</BODY></HTML>\\n| p/LimitlessLED smart lightbulb bridge httpd/ d/specialized/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<script type=\"text/javascript\" src=\"/WebLanguage\\.js\"></script>\\n<script>\\nd=document;\\nd\\.write\\(\"<title>\"\\+Login0104\\+\"</title>\"\\);\\n</script>\\n<link rel=\"icon\" href=\"/dlink\\.ico\" type=\"image/x-icon\" />| p/D-Link DES-1100 switch http config/ d/switch/ cpe:/h:dlink:des-1100/a\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: BASIC realm=\"Admin\"\\r\\n\\r\\nPassword Error\\.| p/D-Link DP-301P+ print server httpd/ d/print server/ cpe:/h:d-link:dp-301p/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: -1\\r\\n\\r\\n<SCRIPT language=\"javascript\">\\r\\nvar logonInfo = new Array\\(\\r\\n\\t\\d,/\\*\\xb4\\xed\\xce\\xf3\\xc0\\xe0\\xd0\\xcd, 0:\\xce\\xde\\xb4\\xed\\xce\\xf3;1:\\xd3\\xc3\\xbb\\xa7\\xc3\\xfb\\xbb\\xf2\\xd5\\xdf\\xc3\\xdc\\xc2\\xeb\\xb4\\xed\\xce\\xf3;2:\\xb8\\xc3\\xd3\\xc3\\xbb\\xa7\\xb2\\xbb\\xd4\\xca\\xd0\\xed\\xb5\\xc7\\xc2\\xbc;3:\\xb8\\xc3\\xd3\\xc3\\xbb\\xa7\\xb5\\xc7\\xc2\\xbc\\xca\\xfd\\xd2\\xd1\\xc2\\xfa\\.;4\\xb5\\xc7\\xc2\\xbc\\xd3\\xc3\\xbb\\xa7\\xca\\xfd\\xd2\\xd1\\xc2\\xfa\\xa3\\xac\\xd7\\xee\\xb6\\xe0\\xd6\\xbb\\xc4\\xdc\\xd4\\xca\\xd0\\xed16\\xb8\\xf6\\xd3\\xc3\\xbb\\xa7\\xcd\\xac\\xca\\xb1\\xb5\\xc7\\xc2\\xbc;5\\xd3\\xc3\\xbb\\xa7\\xbb\\xe1\\xbb\\xb0\\xb3\\xac\\xca\\xb1\\*/\\r\\n\\t0,0\\);| p/TP-LINK Easy Smart switch admin httpd/ d/switch/\n# http://blog.sec-consult.com/2015/05/kcodes-netusb-how-small-taiwanese.html\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nConnection: Close\\r\\n\\r\\n(?:<!-T0004->\\r\\n)?<HTML>\\r\\n<HEAD>\\r\\n<META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"TEXT/HTML\">\\r\\n<TITLE></TITLE>\\r\\n</HEAD>\\r\\n<BODY BGCOLOR=#FFFFFF>\\r\\n<SCRIPT LANGUAGE=JavaScript>\\r\\n\\tdocument\\.location\\.href=\"system30\\.htm\";\\r\\n</script>\\r\\n</BODY>\\r\\n</HTML>| p/KCodes NetUSB http interface/ cpe:/o:kcodes:netusb/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: https:///\\r\\nContent-Type: text/html\\r\\nContent-Length: 136\\r\\n\\r\\n<html><head><title>Redirect</title></head><body><h1>Redirect</h1><p>You should go to <a href=\"https:///\">https:///</a></p></body></html>| p/Aruba AirWave httpd/ cpe:/a:arubanetworks:airwave/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\"FHEM: login required\"\\r\\nContent-Length: 0\\r\\n\\r\\n| p/FHEM home automation httpd/ cpe:/a:rudolf_koenig:fhem/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nLast-Modified: .* GMT\\r\\nContent-Type: text/html\\r\\nCache-Control: private, max-age=0, no-cache\\r\\nAccept-Ranges: bytes\\r\\nDate: .* GMT\\r\\n\\r\\n<!DOCTYPE html>\\n<html ng-app=\"app\" ng-csp  ng-controller=\"AppCtrl\">\\n  <head>\\n    <title>Arch</title>| p/Arch webinterface to Kodi/ cpe:/a:abricot:arch/\nmatch http m|^HTTP/1\\.0 [45]\\d\\d .*\\r\\nDate: .* GMT\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE html>\\n<html>\\n<head><meta charset=\"utf-8\"><style>body\\{margin-top:14%;text-align:center;background-color:#F8F8F8;font-family:sans-serif;\\}h1\\{font-size:xx-large;\\}p\\{font-size:x-large;\\}p\\+p \\{ font-size: large; font-family: courier \\}</style>\\n</head>\\n<body><h1>[45]\\d\\d [^<]*</h1>| p/Prosody XMPP BOSH httpd/ cpe:/a:prosody:prosody/\nmatch http m|^HTTP/1\\.1 302 FOUND\\r\\nLocation:/public/login\\.html\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Triax TSS 400 SATIP server httpd/ d/media device/ cpe:/h:triax:tss_400/\n# seen on webcam, wifi range extender, etc.\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: TP-LINK HTTPD/1\\.0\\r\\nConnection: close\\r\\n| p/TP-LINK embedded httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\ncache-control: no-cache\\r\\ncontent-length: \\d+\\r\\ncontent-type: text/html\\r\\ndate: (.* GMT)\\r\\nlast-modified: \\1\\r\\n\\r\\n| p/EHS embedded httpd/ v/1.4.5 or earlier/ cpe:/a:fritz_elfert:ehs/\nmatch http m%^HTTP/1\\.0 200 OK\\r\\nCache-Control: must-revalidate\\r\\n(?:Set-Cookie: [a-f0-9]{8}/accept-language=; path=/\\r\\n)?ETAG: [a-f0-9]{8}\\r\\n(?:Cache-Control: must-revalidate\\r\\n)?Content-Type: text/html; charset=utf-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n\\n\\n\\n\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Transitional//EN\"\\n        \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\">\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\" dir=\"ltr\" lang=\"en\">\\n<head>\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\"/>\\n<meta name=\"viewport\" content=\"width=1085\"/>\\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\"/>\\n<title>[^<]*</title>\\n<script type=\"text/javascript\">\\n\\tappUrl = '';\\n\\tappConfig = '(\\w\\w)';\\n\\tappUid = (?:'[a-f0-9]*'|getEtag\\(\\));\\n\\tconfig = \\{\\n\\t\\tBUILD_CUSTOMER: '[^']+',\\n\\t\\tBUILD_PROJECT: '[^']+',\\n\\t\\tBUILD_HARDWARE: 'sagem_([\\w_]+)',% p/Orange Livebox config httpd/ i/language: $1; model: Sagem $2/ d/broadband router/ cpe:/h:sagem:$2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\"Ascotel domain\"\\r\\n| p/Aastra Ascotel PBX httpd/ d/PBX/\nmatch http m|^HTTP/1\\.0 401 \\[B2BSERV\\.0084\\.9004\\] Access Denied\\r\\nSet-Cookie: ssnid=[^;]+; path=/; HttpOnly\\r\\nContent-Type: text/html; charset=utf-8\\r\\nWWW-Authenticate: Basic realm=\"sapbc\"\\r\\n| p/SAP Business Connector/ cpe:/a:sap:business_connector/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCACHE-CONTROL: no-cache\\r\\nDate: .* GMT\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n<head>\\n<META http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\">\\r\\n<META http-equiv=\"Pragma\" content=\"no-cache\">\\n<META http-equiv=\"expires\" CONTENT=\"-1\">\\n<link rel=\"icon\" type=\"image/icon\" href=\"/favicon\\.ico\"/>\\n<title>Login</title>\\n| p/Huawei HG532e ADSL router httpd/ d/broadband router/ cpe:/h:huawei:hg532e/a\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nContent-Type: application/x-gzip\\r\\nLocation: https://idrac(?::\\d+)?/start\\.html\\r\\nDate: .* GMT\\r\\nETag: \\w{3} \\w{3} \\d\\d \\d\\d:\\d\\d:\\d\\d \\d\\d\\d\\d ([-A-Z]+)\\r\\n| p/Dell iDRAC 8 admin httpd/ i/time zone: $1/ cpe:/o:dell:idrac8_firmware/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nServer: siyou server\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\n[a-f\\d]+\\r\\n| p/D-LINK siyou httpd/ d/broadband router/\nmatch http m|^HTTP/1\\.1 404 ERROR\\r\\nConnection: close\\r\\nContent-Length: 9\\r\\n\\r\\nNot Found$| p/Spotify spotilocal http API/\nmatch http m|^HTTP/1\\.1 404 ERROR\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Length: 15\\r\\nContent-Type: text/plain; charset=utf-8\\r\\n\\r\\nmissing method\\n$| p/Spotify spotilocal http API/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nServer: httpserver\\r\\nData: (.* GMT)\\r\\nLast Modified: \\1\\r\\n\\r\\n| p/Zmodo webcam http interface/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: CNIX HTTP Server 1\\.0\\r\\nContent-Type: text/html\\r\\nPragma:no-cache\\r\\nExpires:-1\\r\\nCache-Control:no-cache;no-store;must-revalidate\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\n| p/Siemens LOGO! 8 PLC httpd/ d/specialized/ cpe:/h:siemens:logo8/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nExpires: -1\\r\\n\\r\\n<html>\\n<head>\\n<title>Redirect to Login</title>\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=ISO-8859-1\">\\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/style\\.css\">\\n| p/Netgear ProSafe Gigabit Web Managed (Plus) switch httpd/ d/switch/\nmatch http m|^HTTP/1\\.0 200 The request has succeeded\\r\\nContent-Type: text/html\\r\\nExpires: Sun, 03 Jan 2100 12:00:00 GMT\\r\\n\\r\\n $| p/Bosch Logamatic Gateway web KM200 httpd/ d/specialized/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nExpires: .* GMT\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>Velkommen til 963</title>| p/Trend 963 Supervisor building control system/ i/Danish/ d/specialized/ cpe:/a:trend_control_systems:963_supervisor::::da/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nExpires: .* GMT\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>SUPERVISEUR 963</title>| p/Trend 963 Supervisor building control system/ i/French/ d/specialized/ cpe:/a:trend_control_systems:963_supervisor::::fr/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nExpires: .* GMT\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>963 Valvomo</title>| p/Trend 963 Supervisor building control system/ i/Finnish/ d/specialized/ cpe:/a:trend_control_systems:963_supervisor::::fi/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nExpires: .* GMT\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>Witamy w Programie 963</title>| p/Trend 963 Supervisor building control system/ i/Polish/ d/specialized/ cpe:/a:trend_control_systems:963_supervisor::::pl/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nExpires: .* GMT\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>Benvenuti al 963</title>| p/Trend 963 Supervisor building control system/ i/Portuguese/ d/specialized/ cpe:/a:trend_control_systems:963_supervisor::::pt/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nExpires: .* GMT\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>Bienvenido al 963</title>| p/Trend 963 Supervisor building control system/ i/Spanish/ d/specialized/ cpe:/a:trend_control_systems:963_supervisor::::es/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nExpires: .* GMT\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>V\\xc3\\xa4lkommen till 963</title>| p/Trend 963 Supervisor building control system/ i/Swedish/ d/specialized/ cpe:/a:trend_control_systems:963_supervisor::::sv/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: [\\w ,]+ GMT\\r\\nExpires: [\\w ,]+ GMT\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>.*\\r\\n<meta content=\"Trend Control Systems 963\" name=\"GENERATOR\" />| p/Trend 963 Supervisor building control system/ d/specialized/ cpe:/a:trend_control_systems:963_supervisor/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\n\\r\\n<!DOCTYPE html><html>    <head>        <meta charset=\"utf-8\" />        <title>Node\\.js</title>    </head>    <body>       <h1>Welcome to Node\\.js</h1>    </body></html>| p/Node.js/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.0 400 BadRequest\\r\\nContent-Length: 0\\r\\nServer: lwIP/(\\d[\\d.]+)\\r\\n\\n$| p/ESP-12 ESP8266 dev board httpd/ i/lwIP $1/ cpe:/a:lwip_project:lwip:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\ncontent-type: text/html\\r\\ncontent-length: \\d+\\r\\nserver: PhpStorm ([\\d.]+)\\r\\n| p/PhpStorm IDE httpd/ v/$1/ cpe:/a:jetbrains:phpstorm:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: \\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nDate: .* GMT\\r\\nLast-Modified: .* GMT\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"UTF-8\"\\?>\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Transitional//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\">\\n\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\">\\n<!-- __DVLAPP__ -->| p/Devolo dLAN 500 WiFi powerline adapter/ d/WAP/ cpe:/h:devolo:dlan_500/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html\\r\\nDate: .* GMT\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"UTF-8\"\\?>\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Transitional//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\">\\n\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\">\\n<!-- __DVLAPP__ -->| p/Devolo dLAN WiFi powerline adapter/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\ncontent-type: text/html\\r\\nexpires: [\\w, :]+ GMT\\r\\n\\r\\n<!DOCTYPE html>\\n<html>\\n    <head>\\n        <meta charset=\"utf-8\">\\n        <title>RethinkDB Administration Console</title>\\n.*\\.css\\?v=([\\d.]+)\"|s p/RethinkDB Administration Console httpd/ v/$1/ cpe:/a:rethinkdb:rethinkdb:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\nServer: server\\r\\n\\r\\n$| p/Cisco Identity Services Engine admin httpd/ cpe:/a:cisco:identity_services_engine_software/ cpe:/h:cisco:identity_services_engine/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nAccept-Ranges: bytes\\r\\nCache-Control: no-cache\\r\\n\\r\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Strict//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\">\\r\\n<html>\\r\\n<head>\\r\\n  <meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\" />\\r\\n  <style type=\"text/css\">\\r\\n  body, th \\{ font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; \\}\\r\\nbody \\{ margin:0; background-color:#DDF; padding:10px; \\}\\r\\np \\{ margin:0 \\}\\r\\na \\{ text-decoration:none;  background-color:Transparent; color:#05F; \\}\\r\\n| p/HttpFileServer httpd/ cpe:/a:massimo_melina:httpfileserver/\n# This is the TP-LINK model, but may match the Asus one, too.\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nDate: .* GMT\\r\\n\\r\\n<html lang=\"en\"> <head> <meta charset=\"utf-8\"/> <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\"/> <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"/> <title>OnHub</title>| p/Google OnHub WAP/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nDate: .* GMT\\r\\nLast-Modified: .* GMT\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nCache-Control: no-cache\\r\\n\\r\\n<!doctype html>\\n<html lang=\"en\" xmlns:ng=\"http://angularjs\\.org\" id=\"ng-app\" ng-app=\"vzui\">\\n  <head>\\n    <meta charset=\"utf-8\">\\n    <meta http-equiv=\"cache-control\" content=\"no-cache\"/>\\n    <meta http-equiv=\"cache-control\" content=\"max-age=0\" />\\n    <meta http-equiv=\"pragma\" content=\"no-cache\"/>\\n    <meta http-equiv=\"expires\" content=\"0\"/>\\n    <title>Verizon Router</title>\\n    <link rel=\"stylesheet\" href=\"css/app\\.css\\?v=v([\\d.]+)\"/>| p/Verizon router http UI/ v/$1/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\nContent-Type: text/html;charset=windows-1252\\nContent-Length: \\d+\\n\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\" \"http://www\\.w3\\.org/TR/html4/loose\\.dtd\">\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\">\\r\\n<title>TRENDnet MFP Server</title>| p/TRENDnet MFP print server http config/ d/print server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Language: en-US\\r\\nContent-Length: \\d+\\r\\nSet-Cookie: JSESSIONID=[A-F\\d]{32}; Path=/; Secure; HttpOnly\\r\\nContent-Type: text/html;charset=UTF-8\\r\\n(?:Strict-Transport-Security: max-age=31536000\\r\\n)?\\r\\n\\r\\r\\n\\r\\r\\n<!DOCTYPE html>\\r\\r\\n<html lang=\"en\">\\r\\r\\n<head>\\r\\r\\n   <meta charset=\"utf-8\">\\r\\r\\n   <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\\r\\r\\n   <title>VMware Horizon View</title>| p/VMware Horizon View/ cpe:/a:vmware:horizon_view/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Language: en-US\\r\\nContent-Length: \\d+\\r\\nX-FRAME-OPTIONS: SAMEORIGIN\\r\\nSet-Cookie: JSESSIONID=[A-F\\d]{32}; Path=/; Secure; HttpOnly\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nStrict-Transport-Security: max-age=31536000\\r\\n\\r\\n\\r\\n\\r\\n<!DOCTYPE html>\\r\\n<html lang=\"en\">\\r\\n<head>\\r\\n   <meta charset=\"utf-8\">\\r\\n   <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\\r\\n   <title>VMware Horizon</title>| p/VMware Horizon/ cpe:/a:vmware:horizon/\nmatch http m|^HTTP/1\\.1 200 200\\r\\nSet-Cookie: JSESSIONID=[A-F\\d]{32};path=/;Secure;HttpOnly\\r\\nContent-Length: \\d+\\r\\nContent-Language: en-US\\r\\nContent-Type: text/html;charset=UTF-8\\r\\n#status#: HTTP/1\\.1 200 OK\\r\\nStrict-Transport-Security: max-age=31536000\\r\\nX-Content-Type-Options: nosniff\\r\\nX-Frame-Options: deny\\r\\nX-XSS-Protection: 1; mode=block\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n<!DOCTYPE html>\\r\\n<html lang=\"en\">\\r\\n<head>\\r\\n   <meta charset=\"utf-8\">\\r\\n   <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\\r\\n   <title>VMware Horizon</title>| p/VMware Horizon/ cpe:/a:vmware:horizon/\nmatch http m|^HTTP/1\\.1 307 Temporary Redirect\\r\\nLocation: https://([^:]+):443/\\r\\nDate: .*\\r\\nContent-Length: 1994\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>VMware Horizon</title>| p/VMWare Horizon/ h/$1/ cpe:/a:vmware:horizon/\nmatch http m|^HTTP/1\\.1 307 Temporary Redirect\\r\\nLocation: https://[^/]+/\\r\\nDate: .*\\r\\nContent-Length: 1994\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>VMware Horizon</title>| p/VMWare Horizon/ cpe:/a:vmware:horizon/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-control: no-cache\\r\\nConnection: Keep-Alive\\r\\nContent-type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\">\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=big5\">\\r\\n<meta http-equiv=\"refresh\" content=\"0;URL=\\./bscsetting\\.htm\">| p/Ambient Weather ObserverIP http config/ d/specialized/ cpe:/h:ambient_weather:observerip/\n# Hikvision, truVision, Hills/DAS etc.\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nServer: DNVRS-Webs\\r\\nETag: \"[a-f\\d-]+\"\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nLast-Modified: .* GMT\\r\\n\\r\\n| p/Hikvision Network Video Recorder http admin/ d/webcam/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: DVRDVS-Webs\\r\\n| p/Hikvision DVR web UI/ d/media device/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .* GMT\\r\\nServer: DVRDVS-Webs\\r\\n| p/Hikvision DVR web UI/ d/media device/\nmatch http m|^HTTP/1\\.0 302 Redirect\\r\\nServer: Webs\\r\\nDate: [\\w\\d: ]{24}\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nLocation: http://[^/]*/index\\.asp\\r\\n\\r\\n| p/Hikvision DVR web UI/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: no-store\\r\\nContent-Type: text/html\\r\\nContent-length: \\d+\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01//EN\" \"http://www\\.w3\\.org/TR/html4/strict\\.dtd\"><html id=htmlID><head><title>[^<]+</title><style type=\"text/css\">\\*\\{padding:0;margin:0\\}html,body\\{background:url\\(\"dark_carbon\\.png\"\\) repeat;| p/ControlByWeb X-310 controller web interface/ cpe:/h:controlbyweb:x-310/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\nETag: \"-?\\d+\"\\r\\nLast-Modified: .* GMT\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nDate: .* GMT\\r\\nServer: none\\r\\n\\r\\n<!-- saved from url=\\(0014\\)about:internet -->\\n<html lang=\"en\">\\n\\n<!-- \\nSmart developers always View Source\\. \\n\\nThis application was built using Adobe Flex, an open source framework\\nfor building rich Internet applications that get delivered via the\\nFlash Player or to desktops via Adobe AIR\\. \\n\\nLearn more about Flex at http://flex\\.org \\n// -->\\n\\n<head>\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\\n\\n<!--  BEGIN Browser History required section -->\\n<link rel=\"stylesheet\" type=\"text/css\" href=\"history/history\\.css\" />\\n<!--  END Browser History required section -->\\n\\n<title>Fireware XTM WebUI</title>| p/WatchGuard Fireware XTM web UI/ i/CometCatchr Flash Comet client/ cpe:/a:progrium:cometcatchr/ cpe:/a:watchguard:fireware_xtm/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nWWW-Authenticate: Basic realm=\"Protected\"\\r\\nConnection: close\\r\\n\\r\\n401 Unauthorized: Password required\\r\\n$| p/ANEL-Elektronik NET-PwrCtrl HUT httpd/ d/power-misc/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\"(WPN\\d[\\dv]+)\"\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head><title>401 Unauthorized</title></head>\\r\\n<body><h1>401 Unauthorized</h1>\\r\\n<p>Access to this resource is denied; your client has not supplied the correct authentication\\.</p></body>\\r\\n</html>\\r\\n| p/Netgear WAP http admin/ i/model $1/ d/WAP/ cpe:/h:netgear:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLast-Modified: .* GMT\\r\\nDate: .* GMT\\r\\n\\r\\n<!doctype html>\\n<html lang=\"en\">\\n<head>\\n    <meta charset=\"utf-8\">\\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\\n    <meta name=\"description\" content=\"\">\\n    <meta name=\"author\" content=\"\">\\n\\n    <title>InfluxDB - Admin Interface</title>| p/InfluxDB http admin/ cpe:/a:influxdata:influxdb/\nmatch http m|^HTTP/1\\.0 200 OK \\r\\nexpires: Friday, 25-Jul-97 00:00:00 GMT\\r\\nContent-type: text/xml\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"utf-8\"\\?>\\n<\\?xml-stylesheet type=\"text/xsl\" href=\"admin\\.xsl\"\\?>\\n<info product=\"[iI]nnovaphone ([^\"]+)\" manufacturer-url=\"http://www\\.innovaphone\\.com\" name=\"([^\"]+)\"| p/Innovaphone VoIP phone or gateway/ i/model: $1; name: $2/\nmatch http m|^HTTP/1\\.0 200 OK \\r\\nexpires: Friday, 25-Jul-97 00:00:00 GMT\\r\\nContent-type: text/xml\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"utf-8\"\\?>\\n<\\?xml-stylesheet type=\"text/xsl\" href=\"admin\\.xsl\"\\?>\\n<info product=\"[iI]nnovaphone ([^\"]+)\"| p/Innovaphone VoIP phone or gateway/ i/model: $1/\nmatch http m|^HTTP/1\\.0 200 OK \\r\\nexpires: Friday, 25-Jul-97 00:00:00 GMT\\r\\nContent-type: text/xml\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"utf-8\"\\?>\\n<\\?xml-stylesheet type=\"text/xsl\" href=\"admin\\.xsl\"\\?>\\n<info product=\"[aA]scom ([^\"]+)\"| p/Ascom VoIP phone or gateway/ i/model: $1/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nConnection: close\\r\\nLocation: http://[\\w.:-]+/console/index\\.html\\r\\nContent-Length: 0\\r\\nDate: Mon, 18 Apr 2016 11:08:30 GMT\\r\\n\\r\\n| p/JBoss WildFly web console/ cpe:/a:redhat:jboss_wildfly_application_server/\n# version 1.2\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: application/json\\r\\nDate: Mon, 28 Mar 2016 15:58:03 GMT\\r\\nContent-Length: 365\\r\\n\\r\\n\\{\\n  \"paths\": \\[\\n    \"/api\",\\n    \"/api/v1\",\\n    \"/apis\",\\n    \"/apis/autoscaling\",\\n    \"/apis/autoscaling/v1\",\\n    \"/apis/batch\",\\n    \"/apis/batch/v1\",\\n    \"/apis/extensions\",\\n    \"/apis/extensions/v1beta1\",\\n    \"/healthz\",\\n    \"/healthz/ping\",\\n    \"/logs/\",\\n    \"/metrics\",\\n    \"/resetMetrics\",\\n    \"/swagger-ui/\",\\n    \"/swaggerapi/\",\\n    \"/ui/\",\\n    \"/version\"\\n  \\]\\n\\}| p/Kubernetes jsonapi/ cpe:/a:cloud_native_computing_foundation:kubernetes/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nDate: .* GMT\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\"en\" ng-app=\"mesos\">\\n  <head>\\n    <meta charset=\"utf-8\">\\n    <title>Mesos</title>\\n| p/Apache Mesos/ cpe:/a:apache:mesos/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .* GMT\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\"en\" ng-app=\"mesos\">\\n  <head>\\n    <meta charset=\"utf-8\">\\n    <title>Mesos</title>\\n| p/Apache Mesos/ cpe:/a:apache:mesos/\nmatch http m|^\\0\\x18HTTP/1\\.0 404 Not Found\\r\\n\\0\\x18Cache-Control:no-cache\\r\\n\\0\\x18Content-Type:text/html\\r\\n\\0\\x12Connection:close\\r\\n\\0\\x14Content-Length:108\\r\\n\\0\\x04\\r\\n\\r\\n<html>\\n<head>\\n<title>Error: 404</title>\\n<body>\\nGot the error: <b>Not Found</b><br><br>\\nError\\n</body>\\n</html>| p/Oce Print Exec Workgroup/ cpe:/a:oce:print_exec_workgroup/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nServer: PHttp/([\\d.]+) Win32NT\\r\\nX-AspNetMvc-Version: ([\\d.]+)\\r\\nX-AspNet-Version: ([\\d.]+)\\r\\nContent-Length: \\d+\\r\\nCache-Control: private\\r\\nContent-Type: text/html; charset=utf-8\\r\\nSet-Cookie: WorkplaceToken=[a-f\\d]{8}-[a-f\\d]{4}-[a-f\\d]{4}-[a-f\\d]{4}-[a-f\\d]{12}; path=/; expires=.* GMT\\r\\nConnection: close\\r\\n\\r\\n| p/Termika OlimpOKS PHttpd/ v/$1/ i/ASP.NET $3; MVC $2/ o/Windows/ cpe:/a:microsoft:asp.net:$3/ cpe:/a:termika:olimpoks/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nServer: PHttp/([\\d.]+) Unix\\r\\nX-AspNetMvc-Version: ([\\d.]+)\\r\\nX-AspNet-Version: ([\\d.]+)\\r\\nContent-Length: \\d+\\r\\nCache-Control: private\\r\\nContent-Type: text/html; charset=utf-8\\r\\nSet-Cookie: WorkplaceToken=[a-f\\d]{8}-[a-f\\d]{4}-[a-f\\d]{4}-[a-f\\d]{4}-[a-f\\d]{12}; path=/; expires=.* GMT\\r\\nConnection: close\\r\\n\\r\\n| p/Termika OlimpOKS PHttpd/ v/$1/ i/ASP.NET $3; MVC $2/ o/Unix/ cpe:/a:microsoft:asp.net:$3/ cpe:/a:termika:olimpoks/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nDate: .* GMT\\r\\n(?:X-Frame-Options: SAMEORIGIN\\r\\n)?Content-Type: text/html; charset=UTF-8\\r\\nServer: OpenVPN-AS\\r\\nSet-Cookie: openvpn_sess_[a-f\\d]{32}=[a-f\\d]{32};| p/OpenVPN Access Server/ cpe:/a:openvpn:openvpn_access_server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nVary: Accept-Encoding\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nX-Rocket-Chat-Version: ([\\d.]+)\\r\\n.*__meteor_runtime_config__ = JSON\\.parse\\(decodeURIComponent\\(\"%7B%22meteorRelease%22%3A%22METEOR%40([\\d.]+)%22%2C%22PUBLIC_SETTINGS%22%3A%7B%7D%2C%22ROOT_URL%22%3A%22https?%3A%2F%2F([^%]+)%|s p/Rocket.Chat/ v/$1/ i/Meteor $2/ h/$3/ cpe:/a:meteor:meteor:$2/ cpe:/a:rocketchat:rocket.chat:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\ncontent-type: text/html; charset=utf-8\\r\\nvary: Accept-Encoding\\r\\ndate: .*<title>Coral Rapid Application Development Framework - Corrad</title>.*__meteor_runtime_config__ = JSON\\.parse\\(decodeURIComponent\\(\"%7B%22meteorRelease%22%3A%22METEOR%40([\\d.]+)%22|s p/Corrad Development httpd/ i/Meteor $1/ cpe:/a:encoral:corrad/ cpe:/a:meteor:meteor:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nConnection: Keep-Alive\\r\\nServer: \\r\\nContent-Type: text/html\\r\\nContent-Length: 680\\r\\n\\r\\n\\xef\\xbb\\xbf<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\" \"http://www\\.w3\\.org/TR/html4/loose\\.dtd\">\\r\\n<!-- this page must have 520 bytes or more, ie is a wonderfull program -->| p/Gigaset DECT phone/ d/phone/\n# Maybe distinguish language?\nmatch http m%^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\r\\nConnection: Close\\r\\nServer: ([\\d.]+)\\r\\nContent-Type: text/html; charset=utf-8\\r\\nETag: W/\"[a-f\\d]{32}\"\\r\\nTransfer-Encoding: chunked\\r\\nContent-Length: \\d+\\r\\n\\r\\n\\d+\\r\\n<!DOCTYPE html> <html lang=\"en\" ng-app=\"server\" ng-strict-di ng-controller=\"ServerController\"> <head> <script type=\"text/javascript\">window\\.lang = \"en\";</script> <meta charset=\"utf-8\"> <meta http-equiv=\"X-UA-Compatible\" content=\"chrome=1, IE=edge\"> <meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"> <meta name=\"description\" content=\"Repetier-Server (Free|Pro) for 3d printer\">% p/Repetier Server $2 3d printer controller/ v/$1/ cpe:/a:hot-world:repetier_server:$1::$2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nWww-Authenticate: Basic realm=\"Authorization Required\"\\r\\nX-Content-Type-Options: nosniff\\r\\nDate: .* GMT\\r\\nContent-Length: 15\\r\\n\\r\\nNot Authorized\\n$| p/Syncthing WebUI/ cpe:/a:syncthing:syncthing/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nConnection: close\\r\\nContent-Length: 202\\r\\n\\r\\n<\\?xml version='1\\.0' encoding='UTF-8' \\?><teamdrive><httpstatus>403 Forbidden</httpstatus><status>0</status><exception><errorcode>-25012</errorcode><message>Invalid URL: </message></exception></teamdrive>| p/TeamDrive/ cpe:/a:teamdrive:teamdrive/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\"FAST Wireless N Router (FW\\d+R)\"\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/Fastcom $1 WAP http admin/ d/WAP/ cpe:/h:fastcom:$1/\n# port 49152. also Neato Botvac D3 Connected; want more specific matches.\n#match http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nDate: .* GMT\\r\\n\\r\\n$| p/Linksys E8350 WAP or TP-LINK router/ cpe:/h:linksys:e8350/a\nmatch http m|^HTTP/1\\.0 404 not found\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\nX-UA-Compatible: IE=edge\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nCache-control: no-cache\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: 19\\r\\n\\r\\n<h1>Not Found</h1>\\n| p/Fossil SCM httpd/ cpe:/a:d_richard_hipp:fossil/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html> <head> <title>D-Link VoIP Router</title> <meta http-equiv=\"Content-Type\" content=\"text/html\" >| p/D-Link VoIP Router http admin/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\ncontent-type: text/html; charset=utf-8\\r\\nconnection: close\\r\\ncache-control: no-cache, must-revalidate\\r\\ncontent-length: \\d+\\r\\n\\r\\n<!DOCTYPE html>\\n<html>\\n<head>\\n<title>Tomcat - YourKit Java Profiler ([\\d.]+) build (\\d+)</title>| p/YourKit Java Profiler/ v/$1 build $2/ cpe:/a:yourkit:java_profiler:$1:$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-length: \\d+\\r\\nContent-type: text/html\\r\\nCache-Control:no-cache\\r\\nPragma:no-cache\\r\\n\\r\\n<html><head>\\r\\n<META name=\"description\" content=\"(WN\\w+)\">\\n| p/Netgear $1 WAP http admin/ d/WAP/ cpe:/h:netgear:$1/a\nmatch http m|^HTTP/1\\.1 307 Temporary Redirect\\r\\nLocation:/login/login\\.html\\r\\nSet-Cookie:bmc\\.webapp\\.src=/;Path=/;Secure;\\r\\nDate:\\S.*\\r\\nServer:BMC Client Management (\\d[\\w.]+)\\r\\nConnection:Close\\r\\nContent-Length:0\\r\\n\\r\\n| p/BMC Client Management/ v/$1/ cpe:/a:bmc:client_management:$1/\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: Sky\\r\\n\\r\\n| p/BSkyB router http admin/ d/broadband router/\n# The \"1.1\" is meaningless: this was for version 4.0\nmatch http m|^HTTP/1\\.1 [45]01 .*\\r\\nServer: BlueIris-HTTP/1\\.1\\r\\nDate: .*\\r\\nP3P:| p/Blue Iris camera webserver/ d/webcam/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\naccess-control-allow-credentials: .*\\r\\nserver: dglux_server/(\\d+)\\r\\n\\r\\n|s p/DGLux5/ v/$1/ cpe:/a:dglogik:dglux5:$1/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Frameset//EN\" \"http://www\\.w3\\.org/TR/html4/frameset\\.dtd\">\\n<html>\\n\\t<head>\\n\\t\\t<TITLE>Web Application Manager</TITLE>\\n\\t\\t<meta http-equiv=\"Content-Type\" content=\"text/html; charset=gb2312\">\\n| p/NightOwl DVR http viewer/ d/webcam/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: 14\\r\\n\\nPath Not Found| p/8x8 Virtual Office Desktop/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n(?:Location: .*)?\\r\\nDate: .*\\r\\nServer: Ericom Access Server x64\\r\\n| p/Ericom Access Server/ i/arch: x64/ cpe:/a:ericom:access_server/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n(?:Location: .*)?\\r\\nDate: .*\\r\\nServer: Ericom Access Server\\r\\n| p/Ericom Access Server/ cpe:/a:ericom:access_server/\n# 3.2.5.5 and 4.1.3\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: ES Name Response Server\\r\\nContent-Type: text/html\\r\\nContent-Length: 9\\r\\nConnection: close\\r\\n\\r\\nNot found| p/ES File Explorer Name Response httpd/ d/phone/ cpe:/a:estrongs:es_file_explorer/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 85\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Not Found</title></head><body><h1>404 Not Found</h1></body></html>| p/Proficy License Server/ cpe:/a:ge:intelligent_platforms_proficy_license_server/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nServer: xxxxxxxx-xxxxx\\r\\nLast-Modified: .*\\r\\nETag: \"[a-f0-9-]{16}\"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nX-Frame-Options: SAMEORIGIN\\r\\n\\r\\n<html><script type=\"text/javascript\">\\nif \\(window!=top\\) top\\.location=window\\.location;top\\.location=\"/remote/login\";\\n</script></html>\\n| p/Fortinet Fortiguard 900D SSL VPN/ d/firewall/ cpe:/h:fortinet:fortiguard_900d/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: xxxxxxxx-xxxxx\\r\\n| p/Fortinet security device httpd/ d/security-misc/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: https://:8010/\\r\\nConnection: close\\r\\n\\r\\n$| p/Fortinet FortiGuard block page/ d/security-misc/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Length: 13\\r\\nConnection: close\\r\\n\\r\\nBAD REQUEST :>| p/Flightradar24 fr24feed settings httpd/ cpe:/a:flightradar24:fr24feed/\nmatch http m|^HTTP/1\\.0 404\\r\\nServer: Standard ERP ([\\d.]+) \\d{4}-\\d\\d-\\d\\d\\r\\nDate: | p/HansaWorld Standard ERP/ v/$1/ cpe:/a:hansaworld:standard_erp:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-UA-Compatible: IE=edge\\r\\nX-Graylog-Node-ID: [a-f\\d-]{36}\\r\\n(?:Vary: Accept-Encoding\\r\\n)?Content-Type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n| p/Graylog2 web interface/ cpe:/a:graylog:graylog2/\nmatch http m|^HTTP/1\\.0 411 Length Required\\r\\nDate: .*\\r\\nServer: RedBack Application Server ([\\d.]+)\\r\\n| p/IBM RedBack Application Server SOAP/ v/$1/ cpe:/a:ibm:redback_application_server:$1/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<h1>Forbidden</h1>Rejected request from RFC1918 IP to public server address| p/OpenWrt admin httpd/ i/rejected RFC1918 address/\nmatch http m|^HTTP/1\\.1 302 Object Moved\\r\\nLocation: https://.*\\r\\nContent-Type: text/html\\r\\nCache-Control: private\\r\\nConnection: close\\r\\n\\r\\n<head><body> This object may be found <a HREF=\"https://[^\"]*\">here</a> </body>| p/Citrix NetScaler https redirect/ d/load balancer/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\n\\r\\n<HTML>\\n<HEAD><META http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"><TITLE>Cisco .*>Cisco IP Phone CP-(\\d+) \\(|s p/Cisco Unified IP Phone httpd/ i/model: $1/ cpe:/h:cisco:unified_ip_phone_$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\n[A-Z\\d]+\\r\\n<!DOCTYPE html>\\n<html lang=\"en\">\\n<head>\\n  <meta charset=\"utf-8\">\\n  <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\\.0\">\\n  <meta name=\"description\" content=\"ympd - fast and lightweight MPD webclient\">\\n  <meta name=\"author\" content=\"andy@ndyk\\.de\">| p/ympd/ cpe:/a:ndyk.de:ympd/\nmatch http m|^HTTP/1\\.1 303 See Other\\r\\nLocation : /postage/\\r\\n\\r\\n$| p/Workflow Envelope httpd/ cpe:/a:workflow_products:envelope/\nmatch http m|^HTTP/1\\.1 200\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\"en\"><!-- See http://www\\.w3schools\\.com/tags/ref_language_codes\\.asp -->\\n<head>\\n    <meta http-equiv=\"Content-Type\" content=\"text/html\" charset=\"UTF-8\">\\n    <title>XX-Net</title>| p/XX-Net web proxy tool/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nAccept-Ranges: bytes\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\nDate: .*\\r\\nExpires: 0\\r\\nPragma: no-cache\\r\\nServer: 4D/([\\d.]+)\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\">\\n<html>\\n<head>\\n<title>TOPIX8| p/4D RDBMS web server/ v/$1/ i/TOPIX8 CRM/ cpe:/a:4d_sas:4d:$1/ cpe:/a:topix:topix8/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nSet-Cookie: PHPSESSID=\\w+; path=/; secure\\r\\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\\r\\nPragma: no-cache\\r\\nContent-type: text/html\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: Server\\r\\n\\r\\n| p/Ubiquiti Edge router httpd/ d/router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Plack::Handler::Starlet\\r\\nSet-Cookie: RT_SID_ticket\\.([\\w._-]+?)\\.\\d+=| p/Plack Starlet/ i/Request Tracker/ h/$1/ cpe:/a:best_practical:request_tracker/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nX-Content-Type-Options: nosniff\\r\\nDate: .*\\r\\nContent-Length: 19\\r\\n\\r\\n404 page not found\\n| p|Golang net/http server| i/Go-IPFS json-rpc or InfluxDB API/ cpe:/a:golang:go/ cpe:/a:influxdata:influxdb/ cpe:/a:protocol_labs:go-ipfs/\nmatch http m=^HTTP/1\\.0 200 OK\\r.*\\nServer: WildFly/(\\d+)\\r.*\\nLiferay-Portal: Liferay (Community|Enterprise) Edition Portal ([\\d.]+) (?:[A-Z]E )?([A-Z]{1,2}\\d+)=s p/Liferay Portal $2 Edition/ v/$3 $4/ i/JBoss WildFly Application Server $1/ cpe:/a:liferay:liferay_portal:$3:$4:$2/ cpe:/a:redhat:jboss_wildfly_application_server:$1/\n# Samsung SL-C430W\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type:text/html\\r\\nExpires: Thu, 1 Jan 1998 00:00:00 GMT\\r\\nPragma: no-cache\\r\\nServer: LPC Http Server/V1\\.0\\r\\n.*<TITLE>KONICA MINOLTA Page Scope Web Connection for (\\d+)</TITLE>|s p/Konica Minolta $1 printer http admin/ d/printer/ cpe:/h:konicaminolta:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nCache-Control:no-cache\\r\\nPragma:no-cache\\r\\nExpires:[smtwf].*\\r\\n\\r\\n<!DOCTYPE html>\\n<script>\\nvar g_Lan=\\d+,g_level=\\d+,g_year=\\d+,g_title='([^']+)';| p/TP-LINK $1 switch http admin/ d/switch/ cpe:/h:tp-link:$1/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nCache-Control:no-cache\\r\\nPragma:no-cache\\r\\nExpires:[smtwf].*\\r\\n\\r\\n<script>\\nvar logonInfo = new Array\\(\\n\\d+,\\n0,0\\);\\nvar g_Lan = \\d+;\\nvar g_year=\\d\\d\\d\\d;| p/TP-LINK switch http admin/ d/switch/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCACHE-CONTROL: no-cache\\r\\nDate: .*\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n<head>\\n<META http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\">\\r\\n<title>replace</title>\\n| p/Huawei WAP http admin/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCACHE-CONTROL: no-cache\\r\\nDate: .*\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n<head>\\n<META http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\">\\r\\n<link rel=\"icon\" type=\"image/icon\" href=\"/favicon\\.ico\"/>\\n<title>(H\\w+)</title>\\n| p/Huawei $1 WAP http admin/ d/WAP/ cpe:/h:huawei:$1/a\nmatch http m|^HTTP/1\\.1 302 Object Moved\\r\\nLocation: /vpn/index\\.html\\r\\n(?:Set-Cookie: NSC_[^\\r\\n]+\\r\\n)*?Set-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\\r\\n| p/Citrix NetScaler SSL VPN/ d/security-misc/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: PDR-M800/1\\.0\\r\\nDate: .*\\r\\nContent-Type: text/plain\\r\\nCache-Control: no-cache, must-revalidate\\r\\nPragma: no-cache\\r\\nExpires: -1\\r\\nTransfer-Encoding: chunked\\r\\n(?:Set-Cookie: CMSID=[a-f\\d]+\\r\\n)?WWW-Authenticate: Digest realm=\"Control\", domain=\"PDVR M800\"| p/Sanyo M800 DVR http admin/ d/webcam/ cpe:/h:sanyo:m800/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: ENP-PSNA-WEB/([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\"Welcome to PSNA Web/SNMP Agent\\. Please use IE5\\.0 or higher\\. \"\\r\\n| p|Emerson Network Power PSNA Web/SNMP Agent| v/$1/ d/power-misc/ cpe:/h:emersonnetworkpower:psna_web/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nDate: .*\\r\\nContent-Length: 142\\r\\n\\r\\n<html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server\\.</p></body></html>\\n| p/Cisco Meraki firewall httpd/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Length: 3306\\r\\nConnection: close\\r\\n\\r\\n\\xef\\xbb\\xbf<!DOCTYPE html>\\r\\n<!--\\[if lte IE 8\\]><html class=\"ie ie8\" lang=\"ko\"><!\\[endif\\]-->\\r\\n<!--\\[if gte IE 9\\]><html class=\"ie ie9\" lang=\"ko\"><!\\[endif\\]-->\\r\\n<html lang=\"ja\">| p/Humax HG100R router http admin/ d/broadband router/ cpe:/h:humax:hg100r/\nmatch http m|^HTTP/1\\.1 200 OK\\nContent-Type: text/html;charset=windows-1252\\nContent-Length: \\d+\\n\\n<HTML>\\r\\n<HEAD>\\r\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-1252\">\\r\\n<TITLE>DYMO LabelWriter Print Server</TITLE>| p/DYMO LabelWriter http admin/ d/print server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>hue personal wireless lighting</title></head><body><b>Use a modern browser to view this resource\\.</b></body></html>| p/Philips Hue wireless lighting bridge/ cpe:/h:philips:hue_bridge/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: Fri, 18 Jul 1980 22:23:36 GMT\\r\\nLast-Modified: Fri, 18 Jul 1980 22:23:36 GMT\\r\\nExpires: Fri, 18 Jul 1980 22:23:36 GMT\\r\\nServer: Z-World Rabbit\\r\\nConnection: close\\r\\nCache-Control: no-cache no-store\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\"FireEye Bypass Switch\"\\r\\n\\r\\n| p/Z-World Rabbit microcontroller httpd/ i/FireEye AFO Bypass switch/ d/switch/\nmatch http m|^HTTP/1\\.0 200 OK \\r\\nCache-Control: no-cache\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title id=\"titl\">Login</title>| p/Atlona AT-UHD-CLSO-612 video scaler httpd/ d/media device/ cpe:/h:atlona:at-uhd-clso-612/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n<!doctype html>\\n<html dir=\"ltr\" lang=\"en\">\\n\\n<head>\\n    <meta charset=\"utf-8\">\\n    <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\\.0, maximum-scale=1\\.0, user-scalable=no\" />\\n    <title>NGFW Authentication</title>| p/Forcepoint Stonesoft NGFW http admin/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>ACURITE Weather Station</title>| p|Microchip Libraries of Applications TCP/IP Stack httpd| i/ACURITE weather station/ cpe:/a:microchip_technology_inc:mla/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: Linux/([\\d.]+) Sony-BDV/([\\d.]+)\\r\\n\\r\\n| p/Sony BDV media center httpd/ v/$2/ d/media device/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\nDate: .*\\r\\nX-AV-Client-Info\\.sony\\.com: av=([\\d.]+); cn=\"Sony Corporation\"; mn=\"([^\"]+)\"; mv=\"([\\d.]+)\";\\r\\n| p/Sony $2 http media client/ i/av=$1; mv=$3/ d/media device/ cpe:/h:sony:$2/\nmatch http m|^HTTP/1\\.1 200 \\r\\nContent-Type: text/html;charset=UTF-8\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n\\n\\n\\n<!DOCTYPE html>\\n<html lang=\"en\">\\n    <head>\\n {8}<meta charset=\"UTF-8\" />\\n {8}<title>Apache Tomcat/(\\d[\\w._-]+)</title>| p/Apache Tomcat/ v/$1/ cpe:/a:apache:tomcat:$1/a\nmatch http m|^HTTP/1\\.1 200 \\r\\nAccept-Ranges: bytes\\r\\nETag: W/\"[^\"]+\"\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"ISO-8859-1\"\\?>\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Strict//EN\"\\n   \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\">\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\" xml:lang=\"en\" lang=\"en\">\\n<head>\\n    <title>Apache Tomcat</title>| p/Apache Tomcat/ cpe:/a:apache:tomcat/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text/xml\\r\\nContent-Length: \\d+\\r\\nX-Transcend-Version: 1\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"UTF-8\"\\?>\\n<config-auth client=\"vpn\" type=\"auth-request\">\\n<version who=\"sg\">0\\.1\\(1\\)</version>\\n<auth id=\"main\">\\n<message>Please enter your username</message>\\n<form method=\"post\" action=\"/auth\">\\n<input type=\"text\" name=\"username\" label=\"Username:\" />\\n</form></auth>\\n</config-auth>| p/OpenConnect Server httpd/ cpe:/a:infradead:ocserv/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nSet-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure\\r\\nContent-Type: text/xml\\r\\nContent-Length: \\d+\\r\\nX-Transcend-Version: 1\\r\\n\\r\\n| p/OpenConnect Server httpd/ cpe:/a:infradead:ocserv/\nmatch http m|^HTTP/1\\.0 505 HTTP Version not supported\\r\\nDate: .*\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 0\\r\\n\\r\\n| p/iOS Call Recorder httpd/ o/iOS/ cpe:/a:yaniv_danan:ioscallrecorder/ cpe:/o:apple:iphone_os/a\nmatch http m|^HTTP/1\\.1 303 See Other\\r\\nLocation: /logon\\.htm\\r\\nContent-Length: 0\\r\\nServer: Intel\\(R\\) Management & Security Application ([\\d.]+)\\r\\n\\r\\n| p/Intel Management & Security Application httpd/ v/$1/ cpe:/a:intel:management_engine_components:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: application/json; charset=utf-8\\r\\nDate: .*\\r\\nServer: kong/([\\d.]+)\\r\\n| p/Kong http reverse-proxy/ v/$1/ cpe:/a:mashape:kong:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nWww-Authenticate: Basic realm=\"kubernetes-master\"\\r\\nX-Content-Type-Options: nosniff\\r\\nDate: .*\\r\\nContent-Length: 13\\r\\n\\r\\nUnauthorized\\n| p/Kubernetes master node httpd/ cpe:/a:kubernetes:kubernetes/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/json\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n\\{\"tinylr\":\"Welcome\",\"version\":\"([\\d.]+)\"\\}| p/tinylr httpd/ v/$1/ cpe:/a:mickael_daniel:tinylr:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/AppDynamics EUM server or Apache Mesos slave/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nContent-Length: 81\\r\\n\\r\\nThis is a Minecraft server\\. HTTP on this port by JSONAPI\\. JSONAPI by Alec Gorge\\.\\n| p/Minecraft JSONAPI/ cpe:/a:alec_gorge:jsonapi/\n# Trying again with SSL will probably yield server headers with versions.\nmatch ssl m|^<html>\\n<head>\\n<script>\\n\\tvar redirect = \"https://\" \\+ window\\.location\\.host;\\n\\tfunction redirectPage\\(\\) \\{\\n\\t\\twindow\\.location\\.href= redirect;\\n\\t\\}\\n</script>\\n<noscript>\\n\\t<META http-equiv='Refresh' content='0; URL=https://[^']*'>\\n</noscript>\\n</head>\\n\\n<body onLoad=\"redirectPage\\(\\);\">\\nRedirecting to SSL secured connection\\.\\n<p>| p/Plesk Parallels Virtual Automation https redirect/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Powered by Highwinds-Software\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nX-HW:|s p/Highwinds CDN httpd/\nmatch http m|^HTTP/1\\.[01] 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: \\d+\\r\\nCache-Control: max-age=0, no-store, no-cache\\r\\nx-enc: Ext1, Basic\\r\\nServer: Dell (\\w+) Mono MFP, sn=(\\w+)\\r\\n\\r\\n| p/Dell $1 printer httpd/ i/serial: $2/ d/printer/ cpe:/h:dell:$1/a\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nLocation: https?:///hub/\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Qlik Sense httpd/ cpe:/a:qlik:qlik_sense/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Cricut Hyperion v([\\d.]+)\\r\\n.*\"Plugin\" : \\n\\t\\{\\n\\t\\t\"Debug\" : false,\\n\\t\\t\"Version\" : \"([\\d.]+)\"\\n\\t\\},|s p/Cricut Hyperion httpd/ v/$1/ i/Plugin version $2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\n\\r\\n<HTML>\\r\\n<BODY>\\r\\n<center><font size=6>Reports Server 'RK\\d+SRV' \\(PID: \\d+, Version: ([\\d.]+)\\)</font>| p/R-Keeper Reports Server/ v/$1/ cpe:/a:ucs:r-keeper:$1/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: jjhttpd v([\\d.]+)\\r\\n| p/jjhttpd/ v/$1/ i/D-Link or TRENDNet WAP/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: WindRiver-WebServer/([\\d.]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\"[^\"]+\"\\r\\n\\r\\n.*Device Information</FONT></B>\\r\\n<p ALIGN=center><B><font color=\"#FFFFFF\" size=\"4\">Cisco IP Phone CP-(\\d+) \\(|s p/WindRiver WebServer/ v/$1/ i/Cisco IP Phone $2/ d/VoIP phone/ cpe:/h:cisco:unified_ip_phone_$2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html \\r\\nSet-Cookie: P4W\\d+=([^;\\r\\n]+); expires=Fri, 1-Dec-1999 23:59:59 GMT; path=/ \\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.0 Transitional//EN\"\\n\"http://www\\.w3\\.org/TR/REC-html40/loose\\.dtd\">\\n<Html>\\n<Head>\\n<Title>P4Web - Login</Title>| p/Perforce P4Web httpd/ i/name: $1/ cpe:/a:perforce:p4web/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0\\r\\nServer: TR069 client CLI Server\\r\\nConnection: close\\r\\n\\r\\n| p/Alcatel-Lucent I-240W-A WAP TR069/ d/WAP/ cpe:/h:alcatel-lucent:i-240w-a/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nExpires: .*\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"iso-8859-1\"\\?>\\n<!DOCTYPE html PUBLIC\\n    \"-//W3C//DTD XHTML 1\\.0 Transitional//EN\"\\n    \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\">\\n\\n<html style=\"overflow:hidden\" xmlns=\"http://www\\.w3\\.org/1999/xhtml\">\\n\\n<head>\\n<!--\\n\\*{74}\\n\\* \\(C\\) Copyright 2\\d\\d\\d-2\\d\\d\\d Hewlett-Packard Development Company, L\\.P\\.\\n| p/HP Integrated Lights-Out https redirector/ d/remote management/ cpe:/h:hp:integrated_lights-out/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<html><head><title>FlexiServer</title>| p/NCH FlexiServer/ cpe:/a:nchsoftware:flexiserver/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: streamEye/(\\d[\\w._-]*)\\r\\n| p/streamEye MJPEG streaming httpd/ v/$1/ cpe:/a:calin_crisan:streameye:$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nConnection: Keep-Alive\\r\\nServer: (\\w+) IP PRO/([\\d.]+)\\r\\n| p/Siemens Gigaset $1 DECT phone httpd/ v/$2/ d/VoIP phone/ cpe:/h:siemens:gigaset_$1/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nDate: .*\\r\\nServer: RealPlayer Cloud Service/([\\d.]+) \\(win-x86-vc10\\)\\r\\nPragma: no-cache\\r\\nContent-Type: application/json\\r\\n| p/RealPlayer Cloud httpd/ v/$1/ o/Windows/ cpe:/a:real:realplayer_cloud:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .* GMT\\+00:00\\r\\nServer: HttpServer/([\\d.]+)\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE html>\\r\\n<html lang=\"en\">\\r\\n<head>\\r\\n    <meta charset=\"UTF-8\">\\r\\n    <title>CM Transfer</title>| p/CM Transfer HttpServer/ v/$1/ cpe:/a:cheetah_mobile_cloud:cm_transfer:$1/\nmatch http m|^HTTP/1\\.[01] 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nServer: Moonware\\.MiniHttpd/([\\d.]+)\\r\\n| p/Moonware MiniHttpd/ v/$1/ cpe:/a:moonware:netcam_studio:$1/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: sky\\r\\n\\r\\n| p/Sky+HD photo display httpd/ d/media device/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nLocation: https:///\\r\\nContent-length: 0\\r\\n\\r\\n$| p/Compact IP-DECT Base Station/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nExpires: Fri, 01 Jan 1971 00:00:00 GMT\\r\\nCache-Control: no-cache, must-revalidate\\r\\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\\r\\nLocation: https://portal\\.moovmanage\\.com/| p/FleetConnect MoovManage WiFi gateway/ d/WAP/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .* GMT\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 0\\r\\n\\r\\n| p/AgileBits 1Password 3/ cpe:/a:agilebits:1password/\nmatch http m|^HTTP/1\\.1 200 Ok\\r\\nDate: .* GMT\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nLast-Modified: .* GMT\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\n\\r\\n\\xef\\xbb\\xbf<html>\\n<head>\\n<meta http-equiv=\"Content-type\" CONTENT=\"text/html; charset=UTF-8\">\\n<script type=\"text/javascript\" src=\"/js/variable_6\\.js\"></script>| p/AirLive POE-100HD webcam http admin/ d/webcam/ cpe:/h:airlive:poe-100hd/a\nmatch http m|^HTTP/1\\.1 303 See Other\\r\\nLocation: /logon\\.htm\\r\\nContent-Length: 0\\r\\nServer: AMT\\r\\n\\r\\n| p/Intel Active Management Technology http admin/ d/remote management/ cpe:/h:intel:active_management_technology/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nX-Content-Type-Options: nosniff\\r\\nDate: .* GMT\\r\\nContent-Length: 17\\r\\n\\r\\nHost check error\\n| p/Syncthing Web UI/ cpe:/a:syncthing:syncthing/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache, must-revalidate\\r\\nExpires: Thu, 27 Dec 1986 07:30:00 GMT\\r\\nContent-Type: text/html\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2\\.0//EN\"><html><head><title>APE Server</title></head><body><h1>APE Server</h1><p>No command given\\.</p><hr><address>http://www\\.ape-project\\.org/ - Server (\\d[\\w._-]+) \\(Build ([^\\)]+)\\)</address></body></html>| p/APE Comet Server/ v/$1/ i/build: $2/ cpe:/a:ape_project:ape_server:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:Content-Type: text/html\\r\\n)?Server: Virtual Web ([\\d.]+)\\r\\n| p/ZyXEL Virtual Web httpd/ v/$1/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Coturn-([\\d.]+) '[^']+'\\r\\n| p/Coturn TURN server http admin/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: RealTimes Desktop Service/(\\d[\\w._-]+) \\(win-(x[^-]+)-vc\\d+\\)\\r\\n| p/RealPlayer RealTimes Desktop Service/ v/$1/ i/arch: $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Length: 185\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\"en\">\\n<head>\\n<meta charset=\"utf-8\"/>\\n<title>EasyAntiCheat</title></head>\\n<body>\\n<div style=\"text-align:center\"><p>400 - Bad Request</p>\\n</div>\\n</body>\\n</html>| p/EasyAntiCheat/ cpe:/a:easyanticheat:easyanticheat/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: EgdLws ([\\d.]+)\\r\\n|s p/GE Ethernet Global Data Configuration Server/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\" \"http://www\\.w3\\.org/TR/html4/loose\\.dtd\">\\n<html><HEAD><TITLE>get_iplayer Web PVR Manager (\\d[\\w._-]+)</TITLE>| p/get_iplayer web UI/ v/$1/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nVary: Accept-Encoding\\r\\nX-Content-Type-Options: nosniff\\r\\nDate: .*\\r\\nContent-Length: 19\\r\\n\\r\\n404 page not found\\n| p/Gophish httpd/ cpe:/a:jordan_wright:gophish/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: /login\\r\\nSet-Cookie: _gorilla_csrf=[^;]+; HttpOnly; Secure\\r\\nVary: Accept-Encoding\\r\\nVary: Cookie\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<a href=\"/login\">Found</a>| p/Gophish httpd/ cpe:/a:jordan_wright:gophish/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nx-powered-by: Express\\r\\naccept-ranges: bytes\\r\\ncache-control: public, max-age=0\\r\\nlast-modified: .*\\r\\netag: W/\"[-\\da-f]+\"\\r\\ncontent-type: text/html; charset=UTF-8\\r\\ncontent-length: \\d+\\r\\ndate: .*\\r\\nconnection: close\\r\\n\\r\\n<!DOCTYPE html>\\n<html>\\n  <head>\\n    <title>hotel</title>| p/hotel web process manager/ i/Node.js Express framework/ cpe:/a:nodejs:node.js/ cpe:/a:typicode:hotel/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .* GMT\\r\\nServer: darkhttpd/(\\d[\\w._-]+)\\r\\n| p/darkhttpd/ v/$1/ cpe:/a:emil_mikulic:darkhttpd:$1/\nmatch http m%^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Aragorn\\r\\nWWW-Authenticate: Basic realm=\"(Mitel|Aastra) (\\w+(?: CT)?)\"\\r\\n% p/$1 $2 VoIP phone http admin/ d/VoIP phone/ cpe:/h:$1:$2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\"Use 'live' as User Name in order to log in to the respective level\",nonce=\"[a-f0-9]{32}\",opaque=\"\",stale=FALSE,algorithm=MD5,qop=\"auth\"\\r\\n\\r\\n| p/Bosch DINION IP Bullet 5000 webcam http admin/ d/webcam/ cpe:/h:bosch:ip_bullet_5000/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Webbit\\r\\nDate: .* ([A-Z]+)\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Webbit httpd/ i/time zone: $1/ cpe:/a:joewalnes:webbit/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nContent-Type: text/html\\r\\nServer: httpd\\r\\n.*<title>[^<]* \\(build (\\d+)\\) - Info</title>|s p/DD-WRT milli_httpd/ i/build $1/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\n# Estos MetaDirectory, but version is not for MetaDirectory\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: ESTOS WebServer/([\\d.]+)\\r\\n| p/Estos GMBH webserver/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: IP Speaker Web interface\\r\\nContent-type: text/html\\r\\nContent-length: \\d+\\r\\nConnection: close\\r\\n\\r\\n.*<title>IP Speaker ([a-f\\d]{2})([a-f\\d]{2})([a-f\\d]{2})([a-f\\d]{2})([a-f\\d]{2})([a-f\\d]{2}) at |s p/Advanced Network Devices IP Speaker web interface/ i/MAC: $1:$2:$3:$4:$5:$6/ d/media device/ cpe:/a:advanced_network_devices:ip_speaker/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Tableau\\r\\n\\r\\n| p/Tableau API server/ cpe:/a:tableausoftware:tableau_server/\nmatch http m|^HTTP/1\\.1 404 No Encontrado\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Tableau\\r\\n\\r\\n| p/Tableau API server/ i/Spanish/ cpe:/a:tableausoftware:tableau_server::::es/\nmatch http m|^HTTP/1\\.1 404 Introuvable\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Tableau\\r\\n\\r\\n| p/Tableau API server/ i/French/ cpe:/a:tableausoftware:tableau_server::::fr/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLast-Modified: .*\\r\\nDate: .*\\r\\nContent-Length: 83\\r\\n\\r\\n<pre>\\n<a href=\"db/\">db/</a>\\n<a href=\"fingerprint\\.json\">fingerprint\\.json</a>\\n</pre>\\n| p/EliasDB/ cpe:/a:matthias_ladkau:eliasdb/\n# Not sure if this is Wink Hub or just node.js\nmatch http m|^HTTP/1\\.1 401 not authorized\\r\\ncontent-length: 28\\r\\ncontent-type: application/json\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n\\{\"message\":\"not authorized\"\\}| p/Wink Hub 2 API httpd/ d/specialized/ cpe:/h:wink:hub_2/\nmatch http m|^HTTP/1\\.1 401 not authorized\\r\\ncontent-length: 33\\r\\ncontent-type: application/json\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n\\{\"description\":\"not authorized\"\\}\\n| p/Wink Hub 2 API httpd/ d/specialized/ cpe:/h:wink:hub_2/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:X-Frame-Options: SAMEORIGIN\\r\\nX-XSS-Protection: 1\\r\\n)?Content-Type: text/html; charset=utf-8\\r\\nLast-Modified: .*\\r\\nExpires: 0\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\n\\r\\n(?:\\r\\n)?<!DOCTYPE html>(?:\\r\\n)+<html>\\r\\n *<head>\\r\\n *<meta charset=\"UTF-8\"(?: /)?>\\r\\n *<meta name=\"ROBOTS\" content=\"NOINDEX, FOLLOW\" />\\r\\n *(?:<meta name=\"viewport\" content=\"initial-scale=1,user-scalable=no,maximum-scale=1,width=device-width\" />\\r\\n *)?<title>WorldClient</title>\\r\\n\\t *<link rel=\"shortcut icon\" href=\"[^\"]+\\.ico\\?v=([\\d.]+)| p/Alt-N MDaemon webmail/ v/$1/ cpe:/a:altn:mdaemon:$1/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: antid\\r\\nDate: .* \\d\\d\\d\\d\\r\\nWWW-Authenticate: Digest realm=\"KEENETIC LITE\", qop=\"auth\", nonce=\"[0-9a-f]{32}\", opaque=\"[0-9a-f]{32}\", algorithm=\"MD5\", stale=\"FALSE\"\\r\\n| p/antid httpd/ i/ZyXEL Keenetic Lite WAP/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: ZiBASE([\\d.]+)\\r\\n| p/Zodianet ZiBASE home automation httpd/ v/$1/ d/specialized/\nmatch http m|^HTTP/0\\.0 501 Not Implemented\\r\\nServer: ZiBASE([\\d.]+)\\r\\n| p/Zodianet ZiBASE home automation httpd/ v/$1/ d/specialized/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: server\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>404 Not Found</title>\\r\\n</head>\\r\\n<body>\\r\\n<h1>Not Found</h1>\\r\\n</body>\\r\\n</html>\\r\\n| p/Pentax K-1 camera httpd/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-store\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n<script>RT='/(DGS-\\d\\w+(?:-\\d+))_([\\d.]+)/';</script>| p/D-Link $1 switch http admin/ v/$2/ d/switch/ cpe:/h:dlink:$1/a\nmatch http m|^HTTP/1\\.0 4\\d\\d .*\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\nDate: .*\\r\\n\\r\\n\\n\\n<!DOCTYPE html>\\n<html lang=\"en\">\\n    <head>\\n        <title>[^<]+</title>\\n        <link rel=\"shortcut icon\" href=\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAlFJREFUeNqUU8tOFEEUPVVdNV3dPe8xYRBnjGhmBgKjKzCIiQvBoIaNbly5Z\\+PSv3Aj7DSiP2B0rwkLGVdGgxITSCRIJGSMEQWZR3eVt5sEFBgTb| p/Play Framework/ cpe:/a:zenexity:play_framework/\n# Collaborator version is not Burp Suite version\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Burp Collaborator https://burpcollaborator\\.net/\\r\\nX-Collaborator-Version: ([\\d.]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n| p/Burp Collaborator/ v/$1/ cpe:/a:portswigger:burp_suite/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nServer: IP Webcam Server ([\\d.]+)\\r\\nCache-Control: no-store, no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0\\r\\nPragma: no-cache\\r\\nExpires: -1\\r\\n| p/IP Webcam Android app/ v/$1/ d/phone/ cpe:/a:com.pas:webcam:$1/\n\n# version strings show up sometimes, but not reliable and not reflecting actual firmware version.\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONNECTION: close\\r\\nDate: .* GMT\\r\\nLast-Modified: .* GMT\\r\\nEtag: \"\\d+:[a-f\\d]+\"\\r\\nCONTENT-LENGTH: \\d+\\r\\nCACHE-CONTROL: max-age=0\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n<!DOCTYPE html>\\r\\n<html>\\r\\n<head>\\r\\n    <title></title>| p/Amcrest IP camera http interface/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONNECTION: close\\r\\n(?:Date: .*\\r\\nLast-Modified: .*\\r\\nEtag: \"\\d+:[\\da-f]+\"\\r\\n)?CONTENT-LENGTH: \\d+\\r\\n(?:P3P: CP=CAO PSA OUR\\r\\n)?(?:CACHE-CONTROL: max-age=0\\r\\n)?CONTENT-TYPE: text/html\\r\\n\\r\\n\\xef\\xbb\\xbf<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Strict//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\">\\r\\n<html> *\\r\\n *<head>\\r\\n *<title>| p/Dahua webcam httpd/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONNECTION: close\\r\\n(?:Date: .*\\r\\nLast-Modified: .*\\r\\nEtag: \"\\d+:[\\da-f]+\"\\r\\n)?CONTENT-LENGTH: \\d+\\r\\n(?:P3P: CP=CAO PSA OUR\\r\\n)?(?:CACHE-CONTROL: max-age=0\\r\\n)?CONTENT-TYPE: text/html\\r\\n\\r\\n\\xef\\xbb\\xbf<!DOCTYPE html(?: PUBLIC \"-//W3C//DTD XHTML 1\\.0 Strict//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\")?>\\r\\n<html> *\\r\\n *<head>\\r\\n *<title>| p/Dahua webcam httpd/ d/webcam/\n\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONNECTION: close\\r\\nCONTENT-LENGTH: \\d+\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n\\xef\\xbb\\xbf<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\r\\n<html> \\r\\n<head>\\r\\n<title>WEB SERVICE</title>| p/ADT Home Security web management interface/ d/security-misc/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nDate: .*\\r\\nConnection: Close\\r\\nLocation: /admin/\\r\\nCache-Control: no-store,no-cache,must-revalidate\\r\\nPragma: no-cache\\r\\nExpires: -1\\r\\nLast-Modified: Mon, 12 Jan 2000 13:42:42 GMT\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/Netasq firewall http admin/ d/firewall/\nmatch http m|^HTTP/1\\.1 203 Non-Authoritative Information\\r\\nContent-Type: text/html\\r\\nServer: AudioCodes Web Server/ \\r\\n| p/AudioCodes Session Border Controller httpd/ d/security-misc/\n# Version is not nVision version\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Axence nVision WebAccess HTTP Server/(\\d[\\w._-]+)\\r\\n|s p/Axence nVision WebAccess httpd/ v/$1/ o/Windows/ cpe:/a:axence:nvision/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nDate: .*\\r\\nLocation: /home\\.fcgi\\r\\nContent-Type: text/plain\\r\\nContent-Length: 24\\r\\n\\r\\nRedirected to /home\\.fcgi| p/Legrand Nuvo audio player/ d/media device/\n# https://github.com/ael-code/daikin-control\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Length: 30\\r\\nContent-Type: text/plain\\r\\n\\r\\nret=PARAM NG,msg=404 Not Found| p/Daikin air conditioning unit REST API httpd/ d/specialized/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest  realm=\"spa user\", domain=\"/\",nonce=\"[0-9a-f]{40}\",opaque=\"[0-9a-f]{40}\",algorithm=\"MD5\",qop=\"auth\"\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n  <head>\\n    <title>Cisco SPA Configuration</title>| p/Cisco SPA IP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.[01] .*\\r\\nServer: Interlogix-Webs\\r\\n| p/Interlogix TruVision DVR web interface/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: ADB Broadband HTTP Server\\r\\n| p/ADB Broadband embedded httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nEtag: \"[\\da-f]+\\.\\d+\"\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nAccept-Ranges: bytes\\r\\n\\r\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Transitional//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\">\\r\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\"><head>\\r\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\">\\r\\n<title>Gateway</title>\\r\\n<link rel=\"icon\" type=\"image/png\" href=\"assets/favico\\.png\">| p/Abode home security gateway/ d/security-misc/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nLocation: /ide\\.html\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\n\\r\\n| p/Cloud9 IDE/ cpe:/a:cloud9:cloud9_ide/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nCache-Control: private, no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\\r\\nExpires: 0\\r\\nPragma: no-cache\\r\\n\\r\\n<!DOCTYPE html><html><head><title>ZentriOS Web App</title>| p/ZentriOS Web App/ o/ZentriOS/ cpe:/o:zentri:zentrios/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nLocation: HTTP://[^:]+:\\d+/printer/index\\.html\\r\\n| p/Zebra ZTC 105SL printer http admin/ d/printer/ cpe:/h:zebra:ztc_105sl/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Keil-EWEB/(\\d[\\w._-]*)\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n<head><title>DNS8 Web Server Error</title>| p/Keil Embedded Web Server/ v/$1/ i/Cedar Audio DNS 8 noise supressor/ d/media device/ cpe:/a:keil:eweb:$1/ cpe:/a:keil:rl-arm/ cpe:/h:cedar_audio:dns_8/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nSERVER: Parrot\\r\\nCONTENT-TYPE: text/html\\r\\nCONTENT-LENGTH: \\d+\\r\\n\\r\\n<html><head><title>400 Bad Request</title></head><body></body></html>| p/Parrot S.A. embedded httpd/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nX-Powered-By: SoundTouch REST Music Server\\r\\nContent-Type: application/json; charset=utf-8\\r\\n| p/Bose SoundTouch Music Server REST API/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\n(?:Date: .*\\r\\n)?Server: ZTE Web Server/1\\.0\\.0\\r\\n| p/ZTE broadband router admin httpd/ d/broadband router/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: (\\S+)\\r\\nDate: [a-z]{3}, \\d\\d [a-z]{3} \\d\\d\\d\\d \\d\\d:\\d\\d:\\d\\d GMT\\r\\nContent-Length: 0\\r\\nConnection: Close\\r\\n\\r\\n$| p/Huawei switch admin httpd/ d/switch/ h/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html;charset=BIG5\\r\\nContent-Length: 677\\r\\n\\r\\n<html>  <head> <meta http-equiv=\"Content-Type\" content=\"text/html; charset=ISO-8859-1\" > <title>VoIP Gateway</title> </head>\\r\\n <frameset rows=\"110,\\*\" framespacing=\"0\" border=\"0\" frameborder=\"0\" id=\"FRAME_ROWS\" >| p/Octtel SP4220 VoIP Gateway/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:Connection: close\\r\\n)?Server: fec/1\\.0 \\(Funkwerk BOSS\\)\\r\\n| p/Funkwerk embedded httpd/ o/Funkwerk BOSS/ cpe:/o:funkwerk:boss/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:Connection: close\\r\\n)?Server: boss/1\\.0 \\(BOSS\\)\\r\\n| p/Funkwerk embedded httpd/ o/Funkwerk BOSS/ cpe:/o:funkwerk:boss/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Length: \\d+\\r\\nSet-Cookie: HTTP_SESSION_ID=[a-f0-9]{32}; path=/;\\r\\nWWW-Authenticate: Basic realm=\"Modem \\(Administrator, password=WepKey\\)\"\\r\\n\\r\\n<HTML><HEAD><TITLE>HTTP/1\\.0 401 Authorization Required</TITLE></HEAD><BODY>\\r\\n<H1>HTTP/1\\.0 401 Authorization Required</H1>\\r\\n</BODY></HTML>\\r\\n| p/Telmex modem admin httpd/ d/broadand router/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\nContent-Encoding: gzip\\r\\nServer: Sentry360 \\r\\n\\r\\n| p/Sentry360 FS-IP5000 camera httpd/ d/webcam/ cpe:/h:sentry360:fs-ip5000/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\nETag: \"1899773965\"\\r\\nLast-Modified: [^\\r\\n]*\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nDate: [^\\r\\n]*\\r\\nServer: httpd\\r\\n\\r\\n.*<title>Speco IP Camera</title>|s p/Speco IP camera httpd/ d/webcam/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: IQinVision Embedded 1\\.0\\r\\nWWW-Authenticate: Basic realm=\"([^\"]+)\"\\r\\n| p/IQinVision embedded httpd/ i/realm: $1/ d/webcam/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\"VR-8xx\"\\r\\nCache-control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nDate: .*\\r\\nServer: JVC VR-809/816 API Server/1\\.0\\.0\\r\\n| p/JVC VR-800-series DVR admin httpd/ d/storage-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: Sat, 22 Oct 2016 15:45:40 GMT\\r\\nServer: http server 1\\.0\\r\\nContent-type: text/html; charset=UTF-8\\r\\nLast-modified: Thu, 01 Sep 2016 02:17:20 GMT\\r\\nAccept-Ranges: bytes\\r\\nContent-length: 580\\r\\nVary: Accept-Encoding\\r\\nConnection: close\\r\\n\\r\\n<html style=\"background:#007cef\">\\n<head>\\n| p/OwnCloud NAS/ d/storage-misc/ cpe:/a:owncloud:owncloud/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Linux, HTTP/1\\.1, MyNet(N\\d+) Ver ([\\d.]+)\\r\\nDate:| p/Western Digital MyNet $1 NAS httpd/ v/$2/ d/storage-misc/ cpe:/h:wdc:my_net_$1/ cpe:/o:wdc:my_net_firmware:$2/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nDate: .*\\r\\nCache-Control: no-cache,no-store\\r\\nWWW-Authenticate: Basic realm=\"\\.\"\\r\\nContent-Type: text/html; charset=%s\\r\\nConnection: close\\r\\n\\r\\n\\t\\+<html>\\n\\+<head><title>401 Unauthorized</title></head>\\n\\+<body>\\n\\+<h3>401 Unauthorized</h3>\\nAuthorization required\\.\\n </body>\\n </html>\\n| p/mini_httpd/ i/m0n0wall http admin/ cpe:/a:acme:mini_httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nDate: [^\\r\\n]+\\r\\n\\r\\n<!--\\r\\n<!DOCTYPE html PUBLIC.*<META NAME=\"ATEN International Co Ltd\\.\" CONTENT=\"\\(c\\) ATEN International Co Ltd\\. \\d\\d\\d\\d\">|s p|ATEN/Supermicro IPMI web interface| d/remote management/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nContent-Length: \\d\\d?\\r\\nContent-Type: text/plain; charset=utf-8\\r\\n\\r\\nnixy (\\d[\\w._-]*)\\n| p/Nixy/ v/$1/ cpe:/a:benjamin_martensson:nixy:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nAccess-Control-Allow-Methods: GET, POST, PUT\\r\\n\\r\\n\\xef\\xbb\\xbf<!doctype html>\\r\\n<html>\\r\\n    <head>\\r\\n        <meta http-equiv=\"content-type\" content=\"text/html; charset=utf-8\">\\r\\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=0\\.7\" />\\r\\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge,chrome=1\">\\r\\n        <title>Web-Modul</title>| p/Samson TROVIS 5590 web module/ cpe:/h:samson:trovis_5590/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: \\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\n(?:Cache-Control: no-cache,no-store\\r\\n(?:Cache-Control: max-age=86400\\r\\nExpires: .*\\r\\n)?)?WWW-Authenticate: Basic realm=\"restricted (?:devolo )?configuration website\"\\r\\n\\r\\n| p/Devolo access point http admin/ d/WAP/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nLocation: http://[^:]*:9527/\\r\\n\\r\\nHTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Kathrein SAT>IP-Server http admin/ d/specialized/\nmatch http m|^HTTP/1\\.1 401 OK\\nWWW-Authenticate: Basic realm=\"PowerDNS\"\\nConnection: close\\nContent-type: text/html; charset=UTF-8\\n\\nPlease enter a valid password!\\n| p/PowerDNS stats httpd/ cpe:/a:powerdns:powerdns/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: http://[^/]+/solr/\\r\\n\\r\\n| p/Apache Solr/ cpe:/a:apache:solr/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n<head>\\n<META http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" />\\n<link rel=\"icon\" type=\"image/icon\" href=\"/favicon\\.ico\"/>\\n<script language=\"JavaScript\" src=\"\\.\\./js/util\\.js\"></script>\\n<script language=\"JavaScript\" src=\"\\.\\./js/webtoolkit\\.sha256\\.js\"></script>\\n<script language=\"JavaScript\" src=\"/lang/msgerrcode\\.res\"></script>\\n| p/Huawei ADSL modem http admin/ d/broadband router/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nContent-Length: 22\\r\\nConnection: close\\r\\nLocation: /portal/index\\.html\\r\\nContent-Type: text/plain\\r\\nX-Frame-Options: SAMEORIGIN\\r\\n\\r\\n302 Moved Temporarily\\n| p/Barracuda NextGen Firewall SSL VPN/ d/security-misc/\nmatch http m|^HTTP/1\\.1 200 OK \\r\\nCache: no-cache\\r\\nContent-Type: text/plain\\r\\nContent-Length: 4\\r\\n\\r\\nOK\\r\\n| p/NeoRouter SSL VPN/ d/security-misc/\nmatch http m@^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nServer: unknown\\r\\nLocation: https://[^/]+/__extraweb__EPCmicrointerrogatorpage\\?success=%2F__extraweb__EPCmicrointerrogatordata%3Fsuccess%3D%252F__extraweb__realmform%253Fresource%253D((?:[^%]+|%(?!2526))+?)%2526alias%253D([\\w._-]+)%2526r0%253D@ p/SonicWall SSL VPN/ i|resource: $SUBST(1,\"%25252F\",\"/\")| h/$2/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nServer: WatchGuard\\r\\nContent-Length: \\d+\\r\\nExpires: Sun, 28 Jan 2007 00:00:00 GMT\\r\\nVary: Accept-Encoding\\r\\nLocation: https://[^/]+/quarantine\\r\\nPragma: no-cache\\r\\nSet-Cookie: session_id=| p/WatchGuard Quarantine Server/ cpe:/a:watchguard:quarantine_server/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: ZNC (\\d[\\w._-]*)(?:\\+\\S+)? - http://znc\\.in\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\n| p/ZNC IRC webadmin/ v/$1/ cpe:/a:znc:znc:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: [^\\r\\n]*\\r\\nLast-Modified: [^\\r\\n]*\\r\\nEtag: \"[a-f0-9]+\\.[a-f0-9]+\"\\r\\nContent-Type: text/html\\r\\nCache-Control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0\\r\\nExpires: 0\\r\\nPragma: no-cache\\r\\nVary: \\*\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nAccept-Ranges: bytes\\r\\n\\r\\n.*<title>Triax - Setup Service Tool</title>|s p/Triax telecom equipment setup httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: 23\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nConnection: close\\r\\n\\r\\n\\{\"rtn\":108545,\"msg\":\"\"\\}| p/Thunder Xware/\nmatch http m|^HTTP/1\\.1 200 OK\\.\\r\\nDate: .*\\r\\nServer: Reload ([\\d.]+) Web Interface\\r\\nCache-control: no-cache\\r\\nSet-Cookie: GSESSID=[^;]+; path=/\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/GWAVA Reload Server httpd/ v/$1/ cpe:/a:gwava:reload_server:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\n.*\\n\\t<meta name=\"description\" content=\"Gargoyle Firmware Webgui for router management\\.\">|s p/Gargoyle WAP firmware httpd/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: \\d+\\r\\nConnection: close\\r\\nDate: [^\\r\\n]*\\r\\nServer: yealink embed httpd\\r\\n\\r\\n|s p/Yealink VoIP phone httpd/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Network_Module/1\\.0 \\(([A-Z]+-\\w+)\\)\\r\\n| p/Yamaha AV device httpd/ i/model: $1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: OtherWebServer\\r\\n\\r\\n| p/ESET Remote Administrator Web Console/ cpe:/a:eset:eset_remote_administrator/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Encoding: gzip\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nAccess-Control-Allow-Origin: \\*\\r\\n\\r\\n\\x1f\\x8b\\x08\\x08....\\0\\x03index\\.html\\0|s p/nwts Nixie clock sync/ cpe:/h:azevedo:nwts/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-type: text/html; charset=utf-8\\n\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\">\\r\\n\\r\\n<HTML>\\r\\n<HEAD>\\r\\n<TITLE>Handle Proxy</TITLE>| p/Handle System Proxy Server/\nmatch http m|^HTTP/1\\.1 200 OK\\nContent-Length: \\d+\\nContent-Type: text/html\\n\\n<html>\\r\\n<head>\\r\\n\\t\\r\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\\r\\n<meta name=\"GENERATOR\" content=\"iniNet SpiderControl TM\">\\r\\n<title> CoMo Net/View </title>\\r\\n| p|Kistler ControlMonitor CoMo Net/View http ui| d/specialized/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Type: application/json\\r\\nDate: .*\\r\\nContent-Length: 66\\r\\n\\r\\n\\{\\n\\t\"key\": \"noAuthHeader\",\\n\\t\"message\": \"No Authentication header\"\\n\\}| p/Plex Media Server/ i/WD MyCloud/ cpe:/a:plex:plex_media_server/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nLast-Modified: .*\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3\\.2//EN\">\\r\\n<HTML>\\r\\n\\r\\n<HEAD>\\r\\n\\t<link rel=\"SHORTCUT ICON\" href=\"/ras\\.ico\">\\r\\n\\r\\n<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html;CHARSET=iso-8859-1\">\\r\\n<SCRIPT language=\"JavaScript\">\\r\\nvar MainWindow = null;\\r\\n\\r\\nfunction StartWindow\\(\\)\\r\\n\\{\\t\\t\\t\\t\\t\\t\\t\\t \\r\\nvar width \\t= window\\.screen\\.availWidth-10;\\r\\nvar height\\t= window\\.screen\\.availHeight-80;\\r\\nif \\(\\(MainWindow ==null\\) \\x7c\\x7c \\(MainWindow\\.closed==true\\)\\)\\r\\nMainWindow = window\\.open\\(\"/servlet/smt\", \"AASTRA\"| p/Aastra BusinessPhone Management Suite/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nSet-Cookie: JSESSIONID=[\\dA-F]*; Path=/; HttpOnly\\r\\nContent-Type: text/html;charset=UTF-8\\r\\nContent-Length: \\d+\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\nServer: OWS/1\\.0\\r\\n\\r\\n| p/Canon varioPRINT or imagePRESS http ui/ d/printer/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nAccept-Ranges: none\\r\\nConnection: close\\r\\nContent-Encoding: identity\\r\\nContent-Length: 0\\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\nServer: IST OIS\\r\\nWWW-Authenticate: Digest realm=\"users@([^\"]+)\",| p/Allworx VoIP directory server/ h/$1/\nmatch http m|^HTTP/1\\.1 400 \\r\\nContent-Type: application/json\\r\\nContent-Length: 72\\r\\n\\r\\n\\{\"status\": 102, \"statusString\": \"ERROR-BAD-REQUEST\", \"spotifyError\": 0\\}\\n| p/Spotify json/\n# Maybe McAfee Agent instead?\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nContent-Type: text/plain\\r\\nContent-Length: 13\\r\\n\\r\\n403 Forbidden| p/McAfee AntiVirus/ cpe:/a:mcafee:antivirus_engine/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nExpires: .*\\r\\nCache-Control: no-cache\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text/xml; charset=utf-8\\r\\nContent-Length: \\d+\\r\\nX-Frame-Options: SAMEORIGIN\\r\\n\\r\\n<\\?xml version=\"1\\.0\"\\?>\\r\\n<\\?xml-stylesheet type=\"text/xsl\" href=\"/file/xsl/[^/>]*\\.xsl\"\\?>\\r\\n| p/ClearSCADA/ v/2017/ cpe:/a:schneider_electric:scada_expert_clearscada:2017/\nmatch http m|^HTTP/1\\.1 200 \\r\\nX-AREQUESTID: [\\dx]+\\r\\n.*\\n<meta name=\"application-name\" content=\"JIRA\" data-name=\"jira\" data-version=\"([\\d.]+)\">|s p/Atlassian JIRA/ v/$1/ cpe:/a:atlassian:jira:$1/\nmatch http m|^HTTP/1\\.1 302 \\r\\nX-AREQUESTID: [\\dx]+\\r\\n.*Location: [^\\r\\n]*/secure/SetupMode!default.jspa|s p/Atlassian JIRA/ i/setup wizard/ cpe:/a:atlassian:jira/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\n(?:X-Frame-Options: SAMEORIGIN\\r\\n)?Content-Type: text/html; charset=UTF-8\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\nContent-Length: \\d+\\r\\nSet-Cookie: JSESSIONID=[^;]*;Path=.*\\r\\nConnection: close\\r\\n\\r\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n<html>\\n<head>\\n\\n<link href=\"/graycss/common_min\\.css\" rel=\"stylesheet\" type=\"text/css\">\\n\\n\\t<title>Cyberoam SSL VPN Portal</title>| p/Cyberoam SSL VPN/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nAccept-Ranges: bytes\\r\\nCache-Control: max-age=31536000\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLast-Modified: .*\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\"en\" ng-app=\"portainer\">| p/Portainer Docker UI/ v/1.19.1 or earlier/ cpe:/a:portainer:portainer/\n# Security-related headers added in 1.19.2\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nAccept-Ranges: bytes\\r\\nCache-Control: max-age=31536000\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLast-Modified: .*\\r\\nX-Content-Type-Options: nosniff\\r\\nX-Frame-Options: DENY\\r\\nX-Xss-Protection: 1; mode=block\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\"en\" ng-app=\"portainer\">| p/Portainer Docker UI/ v/1.19.2/ cpe:/a:portainer:portainer:1.19.2/\n# X-Frame-Options removed in 1.20.0\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nAccept-Ranges: bytes\\r\\nCache-Control: max-age=31536000\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLast-Modified: .*\\r\\nX-Content-Type-Options: nosniff\\r\\nX-Xss-Protection: 1; mode=block\\r\\nDate: .*\\r\\n\\r\\n<!DOCTYPE html>\\n<html lang=\"en\" ng-app=\"portainer\">| p/Portainer Docker UI/ v/1.20.0 or later/ cpe:/a:portainer:portainer/\n# ESXi 6.5.0\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nX-Frame-Options: DENY\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01//EN\" \"http://www\\.w3\\.org/TR/html4/strict\\.dtd\">\\n\\n<html lang=\"en\">\\n<head>\\n    <meta http-equiv=\"content-type\" content=\"text/html; charset=utf8\">\\n    <meta http-equiv=\"refresh\" content=\"0;URL='/ui'\"/>\\n</head>\\n</html>\\n| p/VMware ESXi Web UI/ cpe:/o:vmware:esxi/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nLocation: http://([\\w.-]+):\\d+/\\r\\nSet-Cookie: grafana_sess=[^;]*; Path=/; HttpOnly\\r\\nDate: | p/Grafana http/ h/$1/ cpe:/a:grafana:grafana/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nDate: .*\\r\\nContent-Length: 12\\r\\nContent-Type: text/plain; charset=utf-8\\r\\n\\r\\nConsul Agent| p/HashiCorp Consul agent/ cpe:/a:hashicorp:consul/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nExpires: 0\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<title>(D\\w\\w-\\d+)  +Login</title>\\n| p/D-Link $1 http admin/ cpe:/h:d-link:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n<html lang=\"en\"> <head> <meta charset=\"utf-8\"/> <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\"/> <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"/> <title>Google Wifi</title>| p/Google WiFi http admin/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nContent-Type:text/html\\r\\nContent-Length: +\\d+\\r\\n\\r\\n.*[eE]>PLANET IP Phone W[eE][bB] Management</[tT]|s p/PLANET IP Phone http admin/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-Cache: MISS\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache, must-revalidate\\r\\nExpires: .*\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n<!doctype html>\\r\\n<html>\\r\\n<head>\\r\\n    <title>Polycom&reg; RealPresence&reg; CloudAXIS&trade;</title>| p/Polycom RealPresence CloudAXIS/ cpe:/a:polycom:realpresence_cloudaxis/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nDate: Thu, 27 Jan 2000 00:00:00 GMT\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nCache-Control: no-store\\r\\nServer: snom/([\\w._-]+)\\r\\n| p/Snom DECT phone http admin/ v/$1/ d/phone/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: http://[^/]+/ord\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Tridium Niagara/ v/4/ cpe:/a:tridium:niagara:4/\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nServer: HIP([\\d.]+)\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n| p/2N Helios IP http admin/ v/$1/ d/security-misc/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: close\\r\\nDate: .*\\r\\nAccept-Ranges: bytes\\r\\nContent-Type: text/html\\r\\nExpires: Mon, 01 Jul 1980 00:00:00 GMT\\r\\nCache-Control: no-cache, no-store, must-revalidate\\r\\nPragma: no-cache\\r\\nWWW-Authenticate: Basic realm=\"(D[A-Z0-9-]+)\"\\r\\nContent-Length: 17\\r\\n\\r\\n401 Unauthorized\\n| p/D-Link $1 camera http admin/ d/webcam/ cpe:/h:d-link:$1/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><link href=c rel=stylesheet></head><body><div class=b><form><br>Wachtwoord:<input type=password name=w><input type=submit value=Login></form></div><!--Content-Type: Content-Type: Content-Type: Content-Type: Content-Type: Content-Type: --></body></html>| p/YouLess LS110 energy monitor http admin/ d/power-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nContent-Length: \\d+\\r\\nCache-Control:no-cache\\r\\nContent-Type:text/html\\r\\nSet-Cookie: PUTCOOKIE=[^;]+; path=/; HttpOnly; \\r\\n\\r\\n<html>\\n\\n<head>\\n    <META HTTP-EQUIV=\"Expires\" CONTENT=\"0\">\\n    <META HTTP-EQUIV=\"Pragma\" CONTENT=\"no-cache\">\\n    <META HTTP-EQUIV=\"Cache-Control\" CONTENT=\"no-cache\">\\n    <title>Teradata Parallel Upgrade Tool 0?(\\d[\\d.]*)<| p/Teradata Parallel Upgrade Tool/ v/$1/ cpe:/a:teradata:tdput:$1/\n# 15.11.00.05-b143\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nCache-Control: public, no-store, max-age=0\\r\\nX-Content-Type-Options: nosniff\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nX-XSS-Protection: 1; mode=block\\r\\nLocation: http://[^/]*/login\\.html\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Teradata-Viewpoint\\r\\n\\r\\n| p/Teradata Viewpoint/ cpe:/a:teradata:viewpoint/\nmatch http m|^HTTP/1\\.1 400 Invalid request\\r\\n| p/ThinLinc VSM xmlrpc/ cpe:/a:cendio:thinlinc/\nmatch http m|^HTTP/1\\.1 404 NOT FOUND\\r\\nServer: InterDialog\\r\\nConnection: close\\r\\nDate: .* India Standard Time\\r\\nCache-Control: private\\r\\nContent-Length: 14\\r\\nContent-type: text\\r\\n\\r\\nPage Not Found| p/Teckinfo InterDialog UCCS/ cpe:/a:teckinfo:interdialog_uccs/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: httpd/2\\.0\\r\\nx-frame-options: SAMEORIGIN\\r\\nx-xss-protection: 1; mode=block\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><script>top\\.location\\.href='/Main_Login\\.asp';</script>\\n</HEAD></HTML>\\n| p/ASUS WRT http admin/ cpe:/o:asus:wrt_firmware/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nSet-Cookie: session=bridgeworks[a-f\\d]+; path=/\\r\\nDate: .*\\r\\nServer: Mordac/([\\d.]+)\\r\\n| p/Bridgeworks iSCSI-to-SAS bridge http ui/ v/$1/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: /login\\r\\nSet-Cookie: wdcpsessionID=[a-f\\d]{32};| p/WDLinux Control Panel/ cpe:/a:wdlinux:wdcp/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d \\r\\nDate:[^ ].*\\r\\nServer:AprisaSR Web Server\\r\\n| p/4RF Aprisa SR smart radio httpd/ d/specialized/ cpe:/h:4rf:aprisa_sr/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: lwIP/([\\d.]+) \\(http://www\\.sics\\.se/~adam/lwip/\\)\\r\\nContent-type: text/html\\r\\n\\r\\n<!-- Copyright \\(c\\) \\d\\d\\d\\d TDSi Ltd\\.  All rights reserved\\. -->\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\"content-type\" content=\"text/html;charset=ISO-8869-1\">\\r\\n<title>TDSi Ethernet to Serial Module</title>| p/TDSi Ethernet to Serial bridge/ i/lwIP $1/ cpe:/a:lwip_project:lwip:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: CJServer/1\\.1\\r\\nSet-Cookie: JSESSIONID=[A-F\\d]+; Path=/; HttpOnly\\r\\nContent-Type: text/html;charset=ISO-8859-1\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n\\r\\n<html>\\r\\n<body>\\r\\n\\r\\n\\r\\n<form action=\"/_common/servlet/wap/login\\?null\" method=\"post\">\\r\\n<p>([^<]+)</p>| p/WebCTRL building automation http ui/ i/site: $1/ cpe:/a:automatedlogic:webctrl/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: CJServer/1\\.1\\r\\nSet-Cookie: JSESSIONID=[A-F\\d]+; Path=/; HttpOnly\\r\\n| p/WebCTRL building automation http ui/ cpe:/a:automatedlogic:webctrl/\n\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nContent-Type: .*\\r\\nServer: ghs\\r\\n| p/Google httpd/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nX-DNS-Prefetch-Control: off\\r\\nX-Frame-Options: SAMEORIGIN\\r\\n(?:Strict-Transport-Security: max-age=\\d+; includeSubDomains\\r\\n)?X-Download-Options: noopen\\r\\nX-Content-Type-Options: nosniff\\r\\nX-XSS-Protection: 1; mode=block\\r\\nLocation: /signin\\r\\nVary: Accept\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nContent-Length: \\d+\\r\\nset-cookie: connect\\.sid=| p/Xen Orchestra/ i/Node.js Express middleware/ cpe:/a:nodejs:node.js/ cpe:/a:vates:xen_orchestra/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: Tektronix/WVR 7100\\r\\nContent-length: \\d+\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n\\r\\n<head>\\r\\n<title>Tektronix (W\\w+) Remote Interface</title>| p/Tektronix $1 waveform monitor http ui/ cpe:/h:tektronix:$1/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nContent-Length: 70\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD></HEAD><BODY>Error detected by Host Server</BODY></HTML>  \\r\\n\\r\\n| p/BMC MainView Explorer/ cpe:/a:bmc:mainview_explorer/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nCONTENT-TYPE: text/html; charset=utf-8\\r\\nCONTENT-LENGTH: 92\\r\\nCONNECTION: CLOSE\\r\\n\\r\\n<html><head><title>Server Error</title></head><body><h1>400 Bad Request\\r\\n</h1></body></html>| p/Bastec BAS2 building automation system http ui/ cpe:/a:bastec:bas2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONTENT-TYPE: text/html; charset=.*\\r\\nDATE: .*\\r\\nCACHE-CONTROL: NO-CACHE\\r\\nTRANSFER-ENCODING: CHUNKED\\r\\nSET-COOKIE: SESSION_ID=[A-F\\d]{16}\\r\\nCONNECTION: CLOSE\\r\\n\\r\\n| p/Bastec BAS2 building automation system http ui/ cpe:/a:bastec:bas2/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: \\(null\\)\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nContent-Length:   \\d\\d\\d\\r\\n| p/D-Link WAP http ui/ d/WAP/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: application/json\\r\\nDate: .*\\r\\nContent-Length: 114\\r\\n\\r\\n\\{\"type\":\"sync\",\"status\":\"Success\",\"status_code\":200,\"operation\":\"\",\"error_code\":0,\"error\":\"\",\"metadata\":\\[\"/1\\.0\"\\]\\}\\n| p/LXD container manager REST API/ cpe:/a:canonical:lxd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=utf-8\\r\\nDate: .*\\r\\n\\r\\n\\n\\n\\n\\n<!DOCTYPE html>\\n<html>\\n<head>\\n    <title>Kafka Manager</title>\\n .* versions: \\{[^}]*\"kafka-manager\":\"([\\d.]+)\"|s p/Kafka Manager/ v/$1/ cpe:/a:yahoo:kafka_manager:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\n\\r\\n<HTML>\\r\\n<BODY>\\r\\n<center><font size=6>Reports Server '([^']+)' \\(PID: \\d+, Version: ([\\d.]+)\\)</font></center><br>\\r\\n<center><font size=4>Uptime: (\\d[^(]+) \\(| p/UCS R-Keeper hospitality system/ v/$2/ i/uptime: $3/ h/$1/ cpe:/a:ucs:r-keeper:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/json\\r\\nContent-Length: 76\\r\\nAccess-Control-Allow-Headers: Content-Type\\r\\nAllow: POST\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n\\{\"jsonrpc\":\"2\\.0\",\"error\":\\{\"code\":-32602,\"message\":\"Unauthorized\"\\},\"id\":null\\}| p/Popcorn Time JSONRPC/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: AquaController ([\\d.]+)\\r\\nWWW-Authenticate: Basic realm=\"\\.\"\\r\\n| p/Neptune Systems AquaController aquarium monitor httpd/ v/$1/ d/specialized/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nDate: .*\\r\\nServer:  \\r\\nContent-Length: 10\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\nForbidden\\.| p/Proofpoint Email Protection/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nContent-Length: 0\\r\\nWWW-Authenticate: Basic realm=\"XBMC\"\\r\\nConnection: close\\r\\nDate: .*\\r\\n\\r\\n| p|Kodi/XBMC http ui|\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<title>(DGS-\\w+)</title>\\n| p/D-Link $1 http admin/ cpe:/h:d-link:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nSet-Cookie: SESSIONID=-1 \\r\\nServer: Easy File Management Web Server (?:SSL )?v([\\d.]+)\\r\\n| p/Easy File Management Web Server/ v/$1/ o/Windows/ cpe:/a:efs:easy_file_management_web_server:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nContent-Type:text/html\\r\\nContent-Length:\\d+ +\\r\\n\\r\\n\\n<html>\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\"> \\n<head>\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF8\" >\\n<title>VoIP</title>\\n<script language=\"JavaScript\" type=\"text/javascript\" src='language/info_(\\w+)\\.js'| p/Crystalmedia VoIP adapter/ i/language: $1/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nAccess-Control-Allow-Headers: Authorization, Content-Type\\r\\nAccess-Control-Allow-Origin: http://.*\\r\\nDate: .*\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<!DOCTYPE html>\\n<html ng-app=\"ts3soundboard-bot\" ng-controller=\"base\">\\n<head>\\n<title>SinusBot</title>| p/SinusBot TS3 bot http ui/\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nDate: .*\\r\\nServer: 2wire Gateway BDC\\r\\n| p/AT&T 2wire Gateway router http admin/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE html> \\r\\n<meta http-equiv=\"X-UA-Compatible\"/>\\r\\n<meta http-equiv=\"content-type\" content=\"text/html; charset=iso-8859-1\" />\\r\\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\\.0, maximum-scale=1\\.0, minimum-scale=1\\.0, user-scalable=no\"/>\\r\\n<html>\\r\\n<head>\\r\\n\\t<meta name=\"author\" content=\"Dave Jensen\" />\\r\\n\\t<meta name=\"keywords\" content=\"LANDESK, Remote Control\" />| p/LANDesk html5 remote management httpd/\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nAllow: OPTIONS\\r\\nContent-Type: application/json\\r\\nContent-Length: 63\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n\\{\"code\":\"MethodNotAllowedError\",\"message\":\"GET is not allowed\"\\}| p/Storj jsonrpc/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: [aA](rgos\\d+?) Server\\r\\nContent-type: text/html; charset=iso-8859-1\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"iso-8859-1\"\\?>\\n| p/Henry A$1 biometric access control/ d/security-misc/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: ATCOM-IP-Phone\\r\\nDate: \\w{3} \\w{3} [ \\d]\\d \\d\\d:\\d\\d:\\d\\d \\d\\d\\d\\d\\r\\n| p/ATCOM VoIP phone web ui/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\\r\\nAccess-Control-Allow-Headers: Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since\\r\\nContent-Type: text/html\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\n\\d+;\\r\\n<html lang=\"en\">\\r\\n<head>\\r\\n  <meta charset=\"utf-8\">\\r\\n  <title>Amazon Dash: Device Info</title>| p/Amazon Dash Button http ui/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: http://0\\.0\\.0\\.0/login_security\\.html\\r\\nContent-Length: 0\\r\\nServer: WebServer/1\\.0 UPnP/1\\.0\\r\\n\\r\\n| p/TP-LINK TD-8901N ADSL modem http admin/ d/broadband router/ cpe:/h:tp-link:td-8901n/a\nmatch http m|^HTTP/1\\.0 307 Temporary Redirect\\r\\nLocation: /containers/\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n<a href=\"/containers/\">Temporary Redirect</a>\\.| p|Golang net/http server| i/Google cAdvisor/ cpe:/a:golang:go/ cpe:/a:google:cadvisor/\n# 4.1.0\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLocation: http://([\\w_.-]+)\\.local/myconnect/\\r\\nX-UA-Compatible: IE=edge\\r\\n\\r\\n| p/AirStash WiFi flash drive http ui/ d/storage-misc/ h/$1/\nmatch http m|^HTTP/1\\.1 401 Authorization Required\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\"[A-F\\d]+\"\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><BODY><H1>Server Requires Authentication</H1></BODY></HTML>\\r\\n| p/EyezOn Envisalink network module httpd/ d/security-misc/ cpe:/a:eyezon:envisalink/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"utf-8\"\\?>\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Transitional//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\">\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\" xmlns:v=\"urn:schemas-microsoft-com:vml\" xml:lang=\"en\" lang=\"en\">\\n  <head>\\n    <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\\n    <!--\\n    ShellInABox| p/ShellInABox/ cpe:/a:shellinabox_project:shellinabox/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Payara Server +([\\d. ]+)(?: #badassfish)?\\r\\nX-Powered-By: Servlet/([\\d.]+) JSP/([\\d.]+) \\(Payara Server.* Java/Oracle Corporation/([\\d.]+)\\)\\r\\n| p/Payara Server httpd/ v/$1/ i/Servlet $2; JSP $3; Java $4/ cpe:/a:oracle:jre:$4/ cpe:/a:payara:payara:$1/\n# Sometimes it's not Oracle Java\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Payara Server +([\\d. ]+)(?: #badassfish)?\\r\\nX-Powered-By: Servlet/([\\d.]+) JSP/([\\d.]+) \\(Payara Server.* Java/([^/]+)(?: Corporation)?/([\\d.]+)\\)\\r\\n| p/Payara Server httpd/ v/$1/ i/Servlet $2; JSP $3; $4 Java $5/ cpe:/a:payara:payara:$1/\nmatch http m|^HTTP/1\\.0 404 Not found\\r\\nServer: IVIDEON\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nAccept-Range: bytes\\r\\nKeep-Alive: timeout=5, max=100\\r\\nContent-Length: 48\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nAccess-Control-Allow-Methods: GET, POST\\r\\nAccess-Control-Allow-Headers: \\*\\r\\n\\r\\n<title>404 Not Found</title>\\n<h1>Not Found</h1>\\0| p/Ivideon Server httpd/ cpe:/a:ivideon:ivideon_server/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/plain;charset=UTF-8\\r\\n\\r\\nJenkins-Agent-Protocols: .*\\r\\nJenkins-Version: (\\d[\\w._-]*)\\r\\n| p/Jenkins httpd/ v/$1/ cpe:/a:jenkins:jenkins:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\ncontent-type: text/html\\r\\ncontent-length: \\d+\\r\\nserver: CLion ([\\d.]+)\\r\\n| p/CLion httpd/ v/$1/ cpe:/a:jetbrains:clion:$1/\nmatch http m|^HTTP/1\\.1 403 Forbidden \\( The page requires a client certificate as part of the authentication process\\. If you are using a smart card, you will need to insert your smart card to select an appropriate certificate\\. Otherwise, contact your server administrator\\.  \\)\\r\\nConnection: close\\r\\n| p/Microsoft Forefront TMG/ i/client certificate required/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nServer: Mastodon\\r\\nX-Frame-Options: DENY\\r\\nX-Content-Type-Options: nosniff\\r\\nX-XSS-Protection: 1; mode=block\\r\\nLocation: | p/Mastodon microblogging httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n\\r\\n<!doctype html>\\r\\n<html>\\r\\n<head>\\r\\n    <meta charset='utf8'>\\r\\n    <meta http-equiv='x-ua-compatible' content='ie=edge'>\\r\\n    <title>Octopus Tentacle</title>| p/Octopus Tentacle/ cpe:/a:octopus:tentacle/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\ncontent-type: text/html; charset=utf-8\\r\\nconnection: close\\r\\ncache-control: no-cache, must-revalidate\\r\\ncontent-length: \\d+\\r\\n\\r\\n<!DOCTYPE html>\\n<html>\\n<head>\\n<title>PhpStorm([\\d.]+) - YourKit Java Profiler (\\d[\\w.-]*)</title>| p/PhpStorm IDE/ v/$1/ i/YourKit Java Profiler $2/ cpe:/a:jetbrains:phpstorm:$1/ cpe:/a:yourkit:java_profiler:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: sw-cp-server\\r\\nDate: .*<title>Plesk Onyx (\\d[\\w._-]+)</title>|s p/sw-cp-server httpd/ i/Plesk Onyx $1/ cpe:/a:parallels:plesk_onyx:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\n\\r\\n<!--\\n  ~ JBoss, Home of Professional Open Source\\.\\n  ~ Copyright \\(c\\) \\d\\d\\d\\d, Red Hat, Inc\\., and individual contributors| p/JBoss Enterprise Application Platform/ cpe:/a:redhat:jboss_enterprise_application_platform/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"UTF-8\"\\?>\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Transitional//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\">\\n\\n<!-- Created on .* -->\\n\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\">\\n  <head>\\n    <title>SSHelper Activity Log</title>\\n| p/SSHelper httpd/ o/Android/ cpe:/a:paul_lutus:sshelper/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\nFile not found$| p/SSBC Patchwork httpd/ cpe:/a:ssbc:patchwork/\nmatch http m|^HTTP/1\\.0 302 Redirected\\r\\nServer: CerberusFTPServer/([\\d.]+)\\r\\n| p/Cerberus FTP Server httpd/ v/$1/ cpe:/a:cerberusftp:ftp_server:$1/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: RapidLogic/([\\d.]+)\\r\\nMIME-version: 1\\.0\\r\\nContent-type: text/html\\r\\n\\r\\n<HEAD><TITLE>404 Not Found</TITLE></HEAD>404 Not Found\\r\\n$| p/RapidLogic httpd/ v/$1/ i/Avaya Core switch/ d/switch/ cpe:/a:rapidlogic:httpd:$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: WatchGuard\\r\\n| p/WatchGuard Fireware httpd/ cpe:/o:watchguard:fireware/\nmatch http m|^HTTP/1\\.1 200 ok\\r\\nServer: CS\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nConnection: Keep-Alive\\r\\nKeep-Alive: timeout=15, max=95\\r\\nContent-Length: \\d+\\r\\n\\r\\n| p/UrBackup httpd/ v/2.0.2 or later/ cpe:/a:martin_raiber:urbackup/\nmatch http m|^HTTP/1\\.1 200 ok\\r\\nServer: CS\\r\\nContent-Type: text/html\\r\\nCache-Control: max-age=3600\\r\\nConnection: Keep-Alive\\r\\nKeep-Alive: timeout=15, max=95\\r\\nContent-Length: \\d+\\r\\n\\r\\n| p/UrBackup httpd/ v/2.0.1 or earlier/ cpe:/a:martin_raiber:urbackup/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nCache-Control: no-store\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nX-Content-Type-Options: nosniff\\r\\nDate: .*\\r\\nContent-Length: 19\\r\\n\\r\\n404 page not found\\n| p/Hashicorp Vault/ cpe:/a:hashicorp:vault/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: ClxWifiServer\\r\\nContent-Type: text/html\\r\\nContent-Length: 32\\r\\n\\r\\nDejaOffice Wi-Fi Synch Available| p/DejaOffice Wi-Fi Sync/ o/Android/ cpe:/a:companionlink:dejaoffice_for_android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\n# Make this a hard match when we get more info\nsoftmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nSERVER: Linux/([\\d.]+),  DSL Forum TR-064, LAN-Side DSL CPE Configuration\\r\\nCONTENT-LENGTH: 48\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n<html><body><h1>404 Not Found</h1></body></html>| p/unknown TR-064/ d/broadband router/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nAccept-Ranges: bytes\\r\\nETag: W/\"[^\"]+\"\\r\\nLast-Modified: .*\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Synametrics Web Server v(\\d+)\\r\\n| p/Synametrics Web Server/ v/$1/ i/Syncrify/ cpe:/a:synametrics:syncrify/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nDate: [^\\r\\n]*\\r\\nServer: \\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nLocation: https://[0-9:.]*:443/\\r\\n\\r\\n<!DOCTYPE html>\\r\\n<html><head><title>Moved Permanently</title></head>\\r\\n.*<address> at 127\\.0\\.0\\.1:\\d+ Port \\d+</address></body>\\r\\n</html>\\r\\n$|s p/Unify OpenStage or OpenScape VoIP phone/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: [^\\r\\n]*\\r\\nContent-Type: text/html;charset=utf-8\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nContent-Language: en\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Strict//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\">\\n\\n\\n\\n\\n\\n\\n<html xmlns=\"http://www\\.w3\\.org/1999/xhtml\" xml:lang=\"en\" lang=\"en\">\\n\\n<!-- determine browser language and generate proper gwt meta locale tag -->| p/NetIQ Sentinel appliance/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: [A-W]{3}, [^\\r\\n]*\\r\\nConnection: \\r\\nServer: HTTP Server 1\\.0\\r\\nContent-Length: \\d+\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nX-Content-Type-Options: nosniff\\r\\nContent-Type: text/html; charset=gb2312\\r\\nSet-Cookie: SESSIONID=[^\\r\\n&]*&[^\\r\\n&]*&HUAWEI Eudemon([^\\r\\n&]+)&| p/Huawei Eudemon $1 firewall httpd/ d/firewall/ cpe:/h:huawei:eudemon_$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n\\{\"header\":\\{\"name\":\"UnsupportedOperationError\",\"payloadVersion\":\"(\\d+)\",\"namespace\":\"Alexa\\.ConnectedHome\\.Control\",| p/FHEM Connector for Amazon Alexa/ i/payloadVersion: $1/ cpe:/a:rudolf_koenig:fhem/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nServer: ArenaSrv/([\\d.]+) Instance/([\\d.]+)\\r\\n| p/ArenaNet ArenaSrv game server/ v/$1/ i/Instance $2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: calibre ([\\d.]+)\\r\\n|s p/Calibre Content Server httpd/ v/$1/ cpe:/a:kovid_goyal:calibre:$1/\nmatch http m|^HTTP/1\\.1 403 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<!doctype html>\\r\\n<html lang=\"en\">\\r\\n<head>\\r\\n\\t<title>Unauthorized Access</title>\\r\\n\\t<meta charset=\"UTF-8\">(?:\\r\\n\\t<script src='https://www\\.google\\.com/recaptcha/api\\.js'></script>)?\\r\\n</head>\\r\\n<body>\\r\\n\\t<img src=\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAJYAAAA8CAYAAACEhkNqAAAABHNCSVQICAgIfAhkiAAAAAlwSFlz\\r\\nAAALEgAACxIB0t1\\+/AAAAB90RVh0U29mdHdhcmUATWFjcm9tZWRpYSBGaXJld29ya3MgOLVo0ngA| p/ConfigServer Security & Firewall httpd/ o/Linux/ cpe:/a:way_to_the_web:configserver_security_and_firewall/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 403 OK\\r\\nContent-type: text/html\\r\\n\\r\\n<head>\\r\\n<title>Unauthorized Access</title>\\r\\n</head>\\r\\n<body>\\r\\n<img src=\"csf[_-]small\\.| p/ConfigServer Security & Firewall httpd/ o/Linux/ cpe:/a:way_to_the_web:configserver_security_and_firewall/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 401 Access Denied\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: cprelogin=| p/cPanel httpd/ o/Unix/\nmatch http m|^HTTP/1\\.0 401 Access Denied\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: webmailrelogin=| p/cPanel Webmail httpd/ o/Unix/\nmatch http m|^HTTP/1\\.0 401 Access Denied\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: whostmgrrelogin=| p/cPanel Web Host Manager httpd/ o/Unix/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nContent-Type: text/html; charset=gbk\\r\\nContent-Length: 106\\r\\nConnection: close\\r\\n\\r\\n<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>| p/TP-Link ADSL+ modem httpd/ d/broadband router/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCONNECTION: close\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nEtag: \"\\d+:[\\da-f]+\"\\r\\nCONTENT-LENGTH: \\d+\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Strict//EN\" \"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\"> <html> <head> <title>Intelbras</title>| p/Intelbras webcam httpd/ d/webcam/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Length: 0\\r\\nWWW-Authenticate: Digest qop=\"auth\", realm=\"IP Webcam\", nonce=\"\\d+\"\\r\\n\\r\\n| p/IP Webcam httpd/ o/Android/ cpe:/a:pavel_khlebovich:ip_webcam/\n\n#(insert http)\n\n# APACHE\n# First match these plaintext responses when SSL was expected\n# Matching ssl/http stops probing. This line has plenty of match info.\nmatch ssl/http m|^<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<html><head>\\n<title>400 Bad Request</title>\\n</head><body>\\n<h1>Bad Request</h1>\\n<p>Your browser sent a request that this server could not understand\\.<br />\\nReason: You're speaking plain HTTP to an SSL-enabled server port\\.<br />\\n.*<address>Apache/([\\w._-]+) (.*) Server at ([\\w._*-]+) Port \\d+</address>|s p/Apache httpd/ v/$1/ i/$2; SSL-only mode/ h/$3/ cpe:/a:apache:http_server:$1/\n# These lines don't have a strong enough match, so we only match ssl and let Nmap start over inside the tunnel.\nmatch ssl m|^<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<html><head>\\n<title>400 Bad Request</title>\\n</head><body>\\n<h1>Bad Request</h1>\\n<p>Your browser sent a request that this server could not understand\\.<br />| p/Apache httpd/ i/SSL-only mode/ cpe:/a:apache:http_server/\n# Too broad to be certain that it's SSL. Matched non-SSL at least once.\n#match ssl m|^HTTP/1\\.1 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Apache[^\\r\\n]*\\r\\n.*<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<html><head>\\n<title>400 Bad Request</title>\\n</head><body>\\n<h1>Bad Request</h1>\\n<p>Your browser sent a request that this server could not understand\\.<br />|s p/Apache httpd/ i/SSL-only mode/ cpe:/a:apache:http_server/\n# Then look for detailed version info in the body which might be better quality than what's in the Server header.\nmatch http m|^.*<address>Apache/([\\d.]+) \\([^)]+\\) ?(.*) Server at ([-\\w_.]+) Port \\d+</address>\\n</body></html>\\n|si p/Apache httpd/ v/$1/ i/$2/ h/$3/ cpe:/a:apache:http_server:$1/\nmatch http m|^.*<address>Apache/([\\d.]+) \\([^)]+\\) Server at ([-\\w_.]+) Port \\d+</address>\\n</body></html>\\n|si p/Apache httpd/ v/$1/ h/$2/ cpe:/a:apache:http_server:$1/\nmatch http m|^.*<address>Apache/([\\d.]+) Server at ([-\\w_.]+) Port \\d+</address>\\n</body></html>\\n|si p/Apache httpd/ v/$1/ h/$2/ cpe:/a:apache:http_server:$1/\n# Finally, look at the Server header.\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache[/ ](\\d[-.\\w]+)\\r.*\\nX-Powered-By: PHP/([\\w._-]+)\\r\\n|s p/Apache httpd/ v/$1/ i/PHP $2/ cpe:/a:apache:http_server:$1/ cpe:/a:php:php:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache\\r.*\\nX-Powered-By: PHP/([\\w._-]+)\\r\\n|s p/Apache httpd/ i/PHP $1/ cpe:/a:apache:http_server/ cpe:/a:php:php:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache[/ ](\\d[-.\\w]+)\\r.*\\nX-Powered-By: ([^\\r\\n]+)\\r\\n|s p/Apache httpd/ v/$1/ i/$2/ cpe:/a:apache:http_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache\\r.*\\nX-Powered-By: ([^\\r\\n]+)\\r\\n|s p/Apache httpd/ i/$1/ cpe:/a:apache:http_server/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache[/ ](\\d[-.\\w]+) ([^\\r\\n]+)|s p/Apache httpd/ v/$1/ i/$2/ cpe:/a:apache:http_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache[/ ](\\d[.\\w-]+)\\s*\\r?\\n|s p/Apache httpd/ v/$1/ cpe:/a:apache:http_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache\\r\\n|s p/Apache httpd/ cpe:/a:apache:http_server/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Apache +\\(([^\\r\\n\\)]+)\\)\\r\\n|s p/Apache httpd/ i/$1/ cpe:/a:apache:http_server/\n\n# Maybe too generic?\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 0 \\r\\n\\r\\n$| p/Arcnet 3001A powerline network adaptor/ d/power-misc/ cpe:/h:arcnet:3001a/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d [^\\r\\n]+\\r\\nContent-Type: text/html\\r\\nDate: [^\\r\\n]+\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n  <title>\\d\\d\\d [^<]+</title>\\n</head>\\n<body bgcolor=\\\"#ffffff\\\">\\n  <h2>\\d\\d\\d [^<]+</h2>\\n  <p></p>\\n</body>\\n</html>\\n| p/Vodafone Station captive portal httpd/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nLocation: https://[\\d.]+/\\r\\nConnection: close\\r\\n\\r\\n$| p/thttpd/ i/StarField KVM over IP/ cpe:/a:acme:thttpd/\nmatch http m|^HTTP/1\\.0 202 Accepted\\r\\nDate: .*\\r\\nConnection: Close\\r\\n\\r\\n$| p/WSO2 Enterprise Service Bus/ cpe:/a:wso2:esb/\nmatch http m|^HTTP/1\\.0 404 Not found\\r\\n\\r\\n$| p/Tor directory server/ cpe:/a:torproject:tor/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-type: text/html\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Brickstream/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: /html/en/index\\.html\\r\\n\\r\\n$| p/peercast.org/\nmatch http m|^HTTP/1\\.0 404 Not found\\r\\n\\r\\n<HEAD><TITLE>File Not Found</TITLE></HEAD>\\n<BODY><H1>File Not Found</H1></BODY>\\n$| p/Bacula http config/\nmatch http m|^HTTP/1\\.[01] 302 Found\\r\\nConnection: Close\\r\\nContent-Length: 0\\r\\nContent-type: text/html\\r\\nDate: .*\\r\\nLocation: .*/login\\.php\\r\\n\\r\\n| p/Kerio MailServer http config/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: BASIC realm=\\\"Admin\\\"\\r\\n\\r\\nPassword Error\\.\\r\\n\\r\\n$| p/D-Link DP-301P+ print server http config/ d/print server/ cpe:/h:d-link:dp-301p%2d/\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\nContent-type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Web Server Authentication\\\"\\r\\n\\r\\n<HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\\n<BODY><H1>401 Unauthorized</H1>\\n\\n</BODY>\\n$| p/Accton VM1188T VoIP phone http config/ d/VoIP phone/\n# Seen for OpenPegasus, VMware ESX CIM server, Microsoft SCX CIM Server.\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\n\\r\\n$| p/Web-Based Enterprise Management CIM serverOpenPegasus WBEM httpd/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: http://[\\d.]+:8080/\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Red Condor antispam appliance http config/ d/proxy server/\nmatch http m|^HTTP/1\\.0 301 Moved Permanently\\r\\nLocation: https:///\\r\\n\\r\\n$| p/Check Point NGX Firewall-1/ cpe:/a:checkpoint:firewall-1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n$| p/Node.js/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.0 302 Redirection\\r\\nLocation: index\\.html\\r\\n\\r\\n$| p/JPS Radio Gateway http config/\nmatch http m|^HTTP/1\\.1 404 \\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n| p/SearchInform DLP/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: httpd\\r\\nDate: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n<title>Login Page</title>\\n<!--\\[if lt IE 7\\.\\]>\\n<script defer type=\\\"text/javascript\\\" src=\\\"/pngfix\\.js\\\"></script>| p/Cisco Services Ready Platform Configuration Utility/\nmatch http m|^HTTP/1\\.0 200 Made by Jonas Gauffin\\r\\n| p/C# WebServer/ cpe:/a:jgauffin:csharp_webserver/\n\n# If these are too general, they can be moved without modification to FourOhFourRequest, HTTPOptions, RTSPRequest, or SIPOptions\nmatch http m|^HTTP/1\\.1 501 \\r\\nContent-Type:\\r\\nContent-Length:0\\r\\n\\r\\n$| p/Google Chromecast httpd/ d/media device/\n# ChromeCast Firmware 17250\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length:0\\r\\nContent-Type:text/html\\r\\n\\r\\n$| p/Google Chromecast httpd/ d/media device/\n\n# This one can cause false results!\n# Found a better one and put it in FourOhFour\n#match http m|^HTTP/1\\.0 404 Not Found\\r\\nConnection: close\\r\\n\\r\\n$| p/apt-proxy httpd/\n\n# Fairly general:\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d.*\\r\\nDate: .*\\r\\nServer: Apache ((?:[\\w_]+/[\\w._-]+ ?)+)\\r\\n| p/Apache httpd/ i/$1/ cpe:/a:apache:http_server/\n# http://svn.dd-wrt.com:8000/dd-wrt/browser/src/router/httpd/httpd.c\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: micro_httpd\\r\\n| p/micro_httpd/ cpe:/a:acme:micro_httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: RapidLogic/([\\d.]+)\\r\\n| p/RapidLogic httpd/ v/$1/ cpe:/a:rapidlogic:httpd:$1/\n# also cisco SRPC utility\n#match http m|^HTTP/1\\.0 200 Ok\\r\\n.*Server: httpd\\r\\n|s p/DD-WRT milli_httpd/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: GoAhead\\r\\n| p/GoAhead WebServer/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: GoAhead-Webs\\r\\n| p/GoAhead WebServer/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: GoAhead/([0-2][\\d.]+)\\r\\n| p/GoAhead WebServer/ v/$1/ cpe:/a:goahead:goahead_webserver:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: GoAhead/([\\d.]+)\\r\\n| p/GoAhead WebServer/ v/$1/ cpe:/a:embedthis:goahead_webserver:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: GoAhead-http\\r\\n| p/GoAhead WebServer/ cpe:/a:embedthis:goahead_webserver/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: SimpleHTTP/([\\d.]+) Python/([\\d.]+)\\r\\n| p/SimpleHTTPServer/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/ cpe:/a:python:simplehttpserver:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mbedthis-App[Ww]eb/([\\d.]+)\\r\\n|s p/Mbedthis-Appweb/ v/$1/ cpe:/a:mbedthis:appweb:$1/\nmatch http m|^UnknownMethod 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Mbedthis-Appweb/([\\w._-]+)\\r\\n|s p/Mbedthis-Appweb/ v/$1/ cpe:/a:mbedthis:appweb:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Tntnet/([\\w._-]+)\\r\\n|s p/Tntnet/ v/$1/ cpe:/a:tntnet:tntnet:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: PasteWSGIServer/([-\\w_+.]+) Python/([-\\w_+.]+)\\r\\n| p/PasteWSGIServer/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Quickserve/([\\w._-]+)\\r\\n| p/Quickserve httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Allegro-Software-RomPager/(\\d[\\w.]+)\\r\\n|s p/Allegro RomPager/ v/$1/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: BaseHTTP/([\\d.]+) Python/([\\w._+-]+)\\r\\n|s p/BaseHTTPServer/ v/$1/ i/Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FlashCom/(1\\.[\\w._-]+)\\r\\n|s p/Macromedia Flash Communication Server httpd/ v/$1/ cpe:/a:macromedia:flash_communication_server:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FlashCom/(2\\.[\\w._-]+)\\r\\n|s p/Macromedia Flash Media Server httpd/ v/$1/ cpe:/a:macromedia:flash_media_server:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FlashCom/([34]\\.[\\w._-]+)\\r\\n|s p/Adobe Flash Media Server httpd/ v/$1/ cpe:/a:adobe:flash_media_server:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FlashCom/([5-9]\\.[\\w._-]+)\\r\\n|s p/Adobe Media Server httpd/ v/$1/ cpe:/a:adobe:media_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: thin ([\\w._-]+) codename ([^\\r\\n]+)\\r\\n|s p/Thin httpd/ v/$1/ i/codename $2/ cpe:/a:macournoyer:thin:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: thin\\r\\n|s p/Thin httpd/ cpe:/a:macournoyer:thin/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WYM/([\\d\\.]+)\\r\\n|s p/WYM httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nServer: NET-DK/([\\d.]+)\\r\\n| p/NET-DK/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Agranat-EmWeb/R([\\w._-]+)\\r\\n|s p/Agranat-EmWeb/ v/$SUBST(1,\"_\",\".\")/ cpe:/a:agranat:emweb:$SUBST(1,\"_\",\".\")/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Conexant-EmWeb/R([\\w._-]+)\\r\\n|s p/Conexant-EmWeb/ v/$SUBST(1,\"_\",\".\")/ cpe:/a:conexant:emweb:$SUBST(1,\"_\",\".\")/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Virata-EmWeb/R([\\d_]+)\\r\\n|s p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\nmatch http m|^HTTP/1\\.0 404 File Not Found\\r\\nContent-Type: text/html\\r\\n\\r\\n<b>The file you requested could not be found</b>\\r\\n$| p/Icecast streaming media server/ cpe:/a:xiph:icecast/\nmatch http m|^HTTP/1\\.0 404 Not Available\\r\\nContent-Type: text/html\\r\\n\\r\\n<b>The file you requested could not be found</b>\\r\\n$| p/Icecast streaming media server/ cpe:/a:xiph:icecast/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mono-HTTPAPI/([\\w._-]+)\\r\\n|s p/Mono-HTTPAPI/ v/$1/ cpe:/a:mono:mono:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<a href=\\\"http://jetty\\.mortbay\\.org/?\\\">Powered by Jetty://</a>|s p/Jetty/ cpe:/a:mortbay:jetty/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<a href=\\\"http://eclipse\\.org/jetty\\\">Powered by Jetty:// ?(\\d[\\w._-]*)</a>|s p/Jetty/ v/$1/ cpe:/a:eclipse:jetty:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<a href=\\\"http://eclipse\\.org/jetty\\\">Powered by Jetty://|s p/Jetty/ cpe:/a:eclipse:jetty/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*<small>Powered by Jetty://</small>|s p/Jetty/ v/9.2.11 or older/ cpe:/a:eclipse:jetty/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CherryPy/([\\w._-]+)\\r\\n|s p/CherryPy httpd/ v/$1/ cpe:/a:cherrypy:cherrypy:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CherryPy/([\\w._-]+) ([^\\r\\n]+)\\r\\n|s p/CherryPy httpd/ v/$1/ i/$2/ cpe:/a:cherrypy:cherrypy:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: NetBox Version ([\\w._-]+ Build \\d+)\\r\\n|s p/NetBox httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: OmikronHTTPOrigin/([\\w._-]+)\\r\\n| p/OmikronHTTPOrigin httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Zope/\\((?:Zope )?([\\d\\w][^\\,\\)]+),?\\s*([^\\)]+)\\)\\S*\\s+([^\\r]+)\\r\\n|s p/Zope httpd/ v/$1/ i/$2; $3/ cpe:/a:zope:zope:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: zope\\.server\\.http \\(zope\\.server\\.http\\)\\r\\n|s p/Zope httpd/ cpe:/a:zope:zope/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: zope\\.server\\.http \\(HTTP\\)\\r\\n|s p/Zope httpd/ cpe:/a:zope:zope/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Zope \\(www\\.zope\\.org\\), Python \\(www\\.python\\.org\\)\\r\\n|s p/Zope httpd/ cpe:/a:python:python/ cpe:/a:zope:zope/\n# src/connections.c\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: lighttpd/([\\w._-]+).*<\\?xml version=\\\"1\\.0\\\" encoding=\\\"iso-8859-1\\\"\\?>\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\"\\n         \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" xml:lang=\\\"en\\\" lang=\\\"en\\\">\\n <head>\\n  <title>\\d\\d\\d - [\\w ]+</title>|s p/lighttpd/ v/$1/ cpe:/a:lighttpd:lighttpd:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*Server: Optenet Web Server\\r\\n| p/Optenet httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: uClinux-httpd ([\\w._-]+)\\n|s p/uClinux-httpd/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: uc-httpd[ /]([\\w._-]+)\\r?\\n|s p/uc-httpd/ v/$1/ cpe:/a:xiongmai_technologies:uc-httpd:$1/\nmatch http m|^HTTP/1\\.1 200 Document follows\\r\\nServer: Micro-Web\\r\\n| p/Micro-Web/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Indy/([\\w._-]+)\\r\\n|s p/Indy httpd/ v/$1/ cpe:/a:indy:httpd:$1/a\nmatch http m|^HTTP/1\\.1 404 File not found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Indy/([\\w._-]+)\\r\\n|s p/Indy httpd/ v/$1/ cpe:/a:indy:httpd:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: WindWeb/([\\w._-]+)\\r\\n| p/WindWeb/ v/$1/ cpe:/a:windriver:windweb:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Perl Dancer ([\\w._-]+)\\r\\n| p/Perl Dancer/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Perl Dancer2 ([\\w._-]+)\\r\\n| p/Perl Dancer2/ v/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-FB-Debug: [\\w+/]{43}=\\r\\n|s p/Facebook httpd/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Hiawatha v([-\\w_.]+)\\r\\n| p/Hiawatha httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: TornadoServer/([\\w._-]+)\\r\\n|s p/Tornado httpd/ v/$1/ cpe:/a:tornadoweb:tornado:$1/a\nmatch http m|^HTTP/1\\.1 200 OK\\r.*\\nServer: Node v([\\d.]+)\\r\\n|s p/Node.js httpd/ v/$1/ cpe:/a:nodejs:node.js:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r.*\\nServer: GHC\\r\\n|s p/Gemius Hit Counter/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Pegasus/Plan9\\r\\n|s p/Pegasus httpd/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d [A-Z ]*\\r.*\\nServer: Werkzeug/([\\w._-]+) Python/([\\w._-]+)\\r\\n|s p/Werkzeug httpd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Webduino/([\\w._-]+)\\r\\n| p/Webduino httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Restlet-Framework/([\\w._-]+)\\r\\n|s p/Restlet Java web framework/ v/$1/ cpe:/a:restlet:restlet:$1/\n# version is always 1.0. QUIP is configurable\n# Default quip:\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: MochiWeb/1\\.0 \\(Any of you quaids got a smint\\?\\)\\r\\n| p/MochiWeb httpd/ cpe:/a:mochiweb_project:mochiweb/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: MochiWeb/1\\.0 \\((.*?)\\)\\r\\n| p/MochiWeb httpd/ i/quip: \"$1\"/ cpe:/a:mochiweb_project:mochiweb/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nserver: node-static/([\\w._-]+)\\r\\n| p/node-static httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: corehttp-([\\w._-]+)\\r\\n| p/CoreHTTP httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ECS \\(([a-z]{3}/[A-F\\d]{4})\\)\\r\\n|s p/Edgecast CDN httpd/ i/$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Embedthis-http\\r\\n|s p/Embedthis HTTP lib httpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Embedthis-http/(\\d[\\w._-]*)\\r\\n|s p/Embedthis HTTP lib httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: GoAhead-Webs/([\\w._-]+)\\r\\n| p/GoAhead WebServer/ v/$1/ cpe:/a:goahead:goahead_webserver:$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: cloudflare-nginx\\r\\n|s p/Cloudflare nginx/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: cloudflare\\r\\n|s p/Cloudflare http proxy/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: GateOne\\r\\n|s p/Gate One http terminal emulator/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Warp/([\\w._-]+)\\r\\n|s p/Warp Haskell httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Vorlon SR ([\\w._-]+)\\r\\n|s p/Hummingbird Vorlon Servlet Runner/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Indy/([\\w._-]+)\\r\\n|s p/Indy httpd/ v/$1/ cpe:/a:indy:httpd:$1/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Rocket ([\\w._-]+) Python/([\\w._-]+)\\r\\n|s p/Rocket httpd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/ cpe:/a:timothy_farrell:rocket:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Debian Apt-Cacher NG/([\\w._-]+)\\r\\n|s p/Debian Apt-Cacher NG httpd/ v/$1/ cpe:/a:debian:apt-cacher:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Boa/([\\w._-]+)\\r\\n|s p/Boa/ v/$1/ cpe:/a:boa:boa:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: mini_httpd/([\\w._ /-]+)\\r\\n| p/mini_httpd/ v/$1/ cpe:/a:acme:mini_httpd:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Mono\\.WebServer2/([\\w._-]+) Unix\\r\\n| p/Mono.WebServer2/ v/$1/ o/Unix/ cpe:/a:mono:xsp:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Splunkd\\r\\n|s p/Splunkd httpd/ cpe:/a:splunk:splunk/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: BarracudaServer\\.com \\(Posix\\)\\r\\n| p/Barracuda Embedded Web Server/ cpe:/a:real_time_logic:barracuda_embedded_web_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nserver: kolibri-([\\w._-]+)\\r\\n| p/Kolibri httpd/ v/$1/ cpe:/a:senkas:kolibri:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nX-Powered-By: Servlet/([\\w._-]+)\\r\\nContent-Type: text/html;charset=[^\\r\\n;]+\\r\\n\\$WSEP: \\r\\nContent-Language: ([^\\r\\n]+)\\r\\n| p/IBM WebSphere Application Server/ i/Servlet $1; language: $2/ cpe:/a:ibm:websphere_application_server/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nX-Powered-By: Servlet/([\\w._-]+)\\r\\nContent-Type: text/html;charset=[^\\r\\n;]+\\r\\n\\$WSEP: \\r\\n| p/IBM WebSphere Application Server/ i/Servlet $1/ cpe:/a:ibm:websphere_application_server/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nExpires: 0\\r\\nSet-Cookie: coreses5=; path=/; HttpOnly\\r\\nSet-Cookie: corelang5=orion:(\\w+); path=/; expires=.*\\r\\nDate: .*\\r\\n\\r\\n| p/ISPsystem COREmanager/ i/language: $1/ cpe:/a:ispsystem:coremanager::::$1/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache,no-store\\r\\n\\r\\n$| p|Sony NSZ-GS7/GS8 multimedia receiver httpd| d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nContent-Length: \\d+\\r\\n\\r\\n.*<!--\\nCopyright 2004-20\\d\\d H2 Group\\.\\n.*Sorry, remote connections \\('webAllowOthers'\\) are disabled on this server\\.|s p/H2 Database console/ i/remote connections disabled/ cpe:/a:h2group:h2database/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nCache-Control: no-cache\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">\\n<!--\\nCopyright 2004-20\\d\\d H2 Group\\.| p/H2 database http console/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Karrigell ([\\w._-]+)\\r\\nDate: |s p/Karrigell web framework httpd/ v/$1/ cpe:/a:karrigell:karrigell:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .* GMT\\r\\nServer: WSGIServer/([\\w._-]+) C?Python/([\\w._+-]+)\\r\\n| p/WSGIServer/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/ cpe:/a:python:wsgiref:$1/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: MX4J-HTTPD/1\\.0\\r\\n\\r\\n|s p/MX4J HTTP Adaptor/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ExtremeWare/([\\d.]+)\\r\\n|s p/Exreme Networks switch admin httpd/ i/ExtremeWare XOS $1/ o/XOS/ cpe:/o:extremenetworks:extremeware_xos:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ngx_openresty/([\\w._-]+)\\r\\n|s p/OpenResty web app server/ v/$1/ cpe:/a:openresty:ngx_openresty:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ngx_openresty\\r\\n|s p/OpenResty web app server/ v/1.9.7.2 or earlier/ cpe:/a:openresty:ngx_openresty/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: openresty/([\\w._-]+)\\r\\n|s p/OpenResty web app server/ v/$1/ cpe:/a:openresty:ngx_openresty:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: openresty\\r\\n|s p/OpenResty web app server/ cpe:/a:openresty:ngx_openresty/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: IntelliJ IDEA (\\d[\\w._-]*)\\r\\n|s p/IntelliJ IDEA/ v/$1/ cpe:/a:jetbrains:intellij_idea:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?server: Cowboy\\r\\n|s p/Cowboy httpd/ cpe:/a:ninenines:cowboy/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Cowboy\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\n\\r\\n| p/Cowboy httpd/ cpe:/a:ninenines:cowboy/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Xavante (\\d[\\w._-]+)\\r\\n|s p/Xavante Lua httpd/ v/$1/ cpe:/a:kepler_project:xavante:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Oracle-iPlanet-Web-Server/([\\w._-]+)\\r\\n| p/Oracle iPlanet Web Server/ v/$1/ cpe:/a:oracle:iplanet_web_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Linux/(([\\d.]+?)(?:\\.x)?) UPnP/([\\d.]+) Avtech/([\\d.]+)\\r\\n|s p/Avtech IP camera httpd/ v/$4/ i/Linux $1; UPnP $3/ o/Linux/ cpe:/o:linux:linux_kernel:$2/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: BBVS/([\\d.]+)\\r\\n| p/BBVS video streaming httpd/ v/$1/ o/Mac OS X/ cpe:/a:ben_software:bbvs:$1/ cpe:/o:apple:mac_os_x/a\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: BBVS\\r\\n| p/BBVS video streaming httpd/ o/Mac OS X/ cpe:/a:ben_software:bbvs/ cpe:/o:apple:mac_os_x/a\n# Server header is usually \"OpenBSD httpd\" but compile-time configurable. CSS however is literal string, but only for abort responses.\nmatch http m|^HTTP/1\\.0 [345]\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Date: [^\\r\\n]*\\r\\nServer: [^\\r\\n]*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n.*\\r\\n<!DOCTYPE html>\\n<html>\\n<head>\\n<title>[^<]*</title>\\n<style type=\"text/css\"><!--\\nbody \\{ background-color: white; color: black; font-family: 'Comic Sans MS', 'Chalkboard SE', 'Comic Neue', sans-serif; \\}|s p/OpenBSD httpd/ cpe:/a:openbsd:httpd/\n# meta content-type added Tue Mar 8 09:33:15 2016 UTC in revision 1.106 of server_httpd.c\nmatch http m|^HTTP/1\\.0 [345]\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Date: [^\\r\\n]*\\r\\nServer: [^\\r\\n]*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n.*\\r\\n<!DOCTYPE html>\\n<html>\\n<head>\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>\\n<title>[^<]*</title>\\n<style type=\"text/css\"><!--\\nbody \\{ background-color: white; color: black; font-family: 'Comic Sans MS', 'Chalkboard SE', 'Comic Neue', sans-serif; \\}|s p/OpenBSD httpd/ cpe:/a:openbsd:httpd/\nmatch http m|^HTTP/1.1 [126-9]\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: OpenBSD httpd\\r\\n|s p/OpenBSD httpd/ cpe:/a:openbsd:httpd/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\n(?:Connection: close\\r\\n)?Server: CE_E\\r\\n| p/Cisco Expressway E/ cpe:/a:cisco:expressway_software/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Play! Framework;([\\d.]+);(\\w+)\\r\\n|s p/Play Framework/ v/$1/ i/$2/ cpe:/a:zenexity:play_framework:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: IBM Mobile Connect\\r\\n|s p/IBM Lotus Mobile Connect/ cpe:/a:ibm:lotus_mobile_connect/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Wave World Wide Web Server \\(W4S\\) v([\\d.]+)\\r\\n| p/Brocade Wave httpd/ v/$1/ i/NOS REST API/ cpe:/a:brocade:wave_world_wide_web_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: MQX HTTPSRV/[\\d.]+ - Freescale Embedded Web Server v([\\d.]+)\\r\\n| p/Freescale MQX embedded httpd/ v/$1/ o/MQX RTOS/ cpe:/o:freescale:mqx/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\nServer: MQX HTTP - Freescale Embedded Web Server\\n| p/Freescale MQX embedded httpd/ o/MQX RTOS/ cpe:/o:freescale:mqx/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Microsoft-WinCE/([\\d.]+)0\\r\\n| p/Microsoft Windows Embedded CE Web Server/ o/Windows CE $1/ cpe:/o:microsoft:windows_ce/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Devline Linia Server\\r\\n|s p/Devline Line surveillance system httpd/ d/security-misc/ cpe:/a:devline:line/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: esp8266-link\\r\\n| p/esp-link ESP8266 firmware httpd/ cpe:/a:thorsten_von_eicken:esp-link/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mojolicious \\(Perl\\)\\r\\n|s p/Mojolicious httpd/ cpe:/a:sebastian_riedel:mojolicious/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Caddy\\r\\n|s p/Caddy httpd/ cpe:/a:matt_holt:caddy/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: embOS/IP\\r\\n|s p|Segger embOS/IP httpd| cpe:/a:segger:embos%2fip/\n\nmatch http m|^HTTP/1\\.1 [45]\\d\\d (?:[^\\r\\n]*\\r\\n)*?\\r\\n(?:<!DOCTYPE html>)?<html><head><title>Apache Tomcat/(\\d[\\w._-]*) - Error report</title>|s p/Apache Tomcat/ v/$1/ cpe:/a:apache:tomcat:$1/a\nmatch http m|^HTTP/1\\.1 [45]\\d\\d (?:[^\\r\\n]*\\r\\n)*?\\r\\n(?:<!DOCTYPE html>)?<html><head><title>Apache Tomcat/(\\d[\\w._-]*) - Informe de Error</title>|s p/Apache Tomcat/ v/$1/ i/Spanish/ cpe:/a:apache:tomcat:$1:::es/\nmatch http m|^HTTP/1\\.1 [45]\\d\\d (?:[^\\r\\n]*\\r\\n)*?\\r\\n(?:<!DOCTYPE html>)?<html><head><title>Apache Tomcat/(\\d[\\w._-]*) - Rapport d'erreur</title>|s p/Apache Tomcat/ v/$1/ i/French/ cpe:/a:apache:tomcat:$1:::fr/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Type: application/x-appweb-(\\w+)\\r\\n|s p/Embedthis-Appweb/ i/extension: $1/ cpe:/a:mbedthis:appweb/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nMIME-Version: 1\\.0\\r\\nServer: KS_HTTP/([\\d.]+)\\r\\n| p/Canon Pixma printer http config/ i/KS_HTTP $1/ d/printer/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Content Gateway Manager ([\\w._-]+)\\r\\n| p/Websense Content Gateway Manager http config/ v/$1/ cpe:/a:websense:websense_content_content_gateway:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: bfe\\r\\n| p/Baidu Front End httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: bfe/([\\d.]+)\\r\\n| p/Baidu Front End httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: bfe/([\\d.]+)-([\\w-]+)\\r\\n| p/Baidu Front End httpd/ v/$1/ i/$2/\n# Also matches Swift?\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*<\\?xml version=\\\"1\\.0\\\" encoding=\\\"iso-8859-1\\\"\\?>\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Transitional//EN\\\"\\n         \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-transitional\\.dtd\\\">\\n<html xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\" xml:lang=\\\"en\\\" lang=\\\"en\\\">\\n <head>\\n  <title>\\d\\d\\d - [\\w ]+</title>|s p/lighttpd/ cpe:/a:lighttpd:lighttpd/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?P3P: CP=\"This is not a P3P policy! See https://www\\.google\\.com/support/accounts/answer/151657\\?hl=.. for more info\\.\"\\r\\nServer: gws\\r\\n|s p/Google Web Server/\nmatch http m|^HTTP/1\\.[01] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: proxygen\\r\\nDate: |s p/Facebook Proxygen httpd/ cpe:/a:facebook:proxygen/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: 360wzws\\r\\nDate: |s p/360 WangZhan httpd/\nmatch http m|^HTTP/1\\.[01] 40[04] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ATLAS Platform\\r\\n|s p/VeriSign Advanced Transaction Look-up Signaling http redirector/\nmatch http m|^HTTP/1\\.[01] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Date: [^\\r\\n]+ GMT\\r\\nServer: ECD \\(\\w+/[0-9A-F]+\\)\\r\\n|s p/Edgecast ECD httpd/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: instart/nginx\\r\\n| p/nginx/ i/Instart Logic/ cpe:/a:igor_sysoev:nginx/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Tengine/([\\w._-]+)\\r\\n|s p/Tengine httpd/ v/$1/ cpe:/a:alibaba:tengine:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Tengine\\r\\n|s p/Tengine httpd/ cpe:/a:alibaba:tengine/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: 0W/(\\d[\\w._-]+)\\r\\n|s p/0W-httpd/ v/$1/ cpe:/a:maxim_zotov:0w-httpd:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: 4D_v(\\d+)/(\\1\\.\\d+)\\r\\n| p/4D RDBMS web server/ v/$2/ cpe:/a:4d_sas:4d:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: 4D/([\\d.]+)\\r\\n|s p/4D RDBMS web server/ v/$1/ cpe:/a:4d_sas:4d:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nConnection: close\\r\\nServer: NetData Embedded HTTP Server\\r\\n| p/NetData embedded httpd/ cpe:/a:firehol:netdata/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d [^\\r\\n]+\\r\\nServer: Digiweb\\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: 26 Jul 1997 05:00:00 GMT\\r\\n|s p/Digitronic Digiweb httpd/ cpe:/a:digitronic:digiweb/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Wakanda/\\d+ build ([.\\d]+) WAF ([\\d.]+) build ([\\d-]+) \\((\\w+)-(\\w+)\\)\\r\\n|s p/Wakanda httpd/ v/$1/ i/Wakanda Application Framework $2 build $3; arch: $5/ o/$4/ cpe:/a:wakanda:wakanda_application_framework:$2/ cpe:/a:wakanda:wakanda_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Wakanda/\\d+ build ([.\\d]+) \\((\\w+)-(\\w+)\\)\\r\\n|s p/Wakanda httpd/ v/$1/ i/arch: $3/ o/$2/ cpe:/a:wakanda:wakanda_server:$1/\nmatch http m|^HTTP/1\\.[01] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: gunicorn/([\\w._-]+)\\r\\n|s p/Gunicorn/ v/$1/ cpe:/a:gunicorn:gunicorn:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\nDate: .*\\r\\nConnection: close\\r\\nServer: Clearswift\\r\\n\\r\\n|s p/Clearswift Secure Web Gateway/ d/security-misc/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Influxdb-Version: ([\\d.]+)\\r\\n|s p/InfluxDB http admin/ v/$1/ cpe:/a:influxdata:influxdb:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: KFWebServer\\r\\n|s p/KF Web Server/ cpe:/a:keyfocus:kf_web_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: KFWebServer/([\\d.]+) (Windows[^\\r\\n]*)\\r\\n|s p/KF Web Server/ v/$1/ o/$2/ cpe:/a:keyfocus:kf_web_server/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Huawei-BMC\\r\\n| p/Huawei BMC httpd/ d/remote management/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Seattle Lab HTTP Server/([\\d.]+)\\r\\n| p/Seattle Lab httpd/ v/$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: WindRiver-WebServer/([\\d.]+)\\r\\n| p/Wind River Web Server/ v/$1/ cpe:/a:windriver:web_server:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Python/([\\d.]+) aiohttp/([\\d.]+)\\r\\n|s p/aiohttp/ v/$2/ i/Python $1/ cpe:/a:aiohttp:aiohttp:$2/ cpe:/a:python:python:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Cassini/([\\d.]+)\\r\\nDate: .*\\r\\nX-AspNet-Version: ([\\d.]+)\\r\\n| p/Microsoft Cassini httpd/ v/$1/ i/ASP.NET $2/ o/Windows/ cpe:/a:microsoft:asp.net:$2/ cpe:/a:microsoft:cassini:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Cassini/([\\d.]+)\\r\\nDate: .*\\r\\n| p/Microsoft Cassini httpd/ v/$1/ o/Windows/ cpe:/a:microsoft:cassini:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: HTTP::Server::PSGI\\r\\n| p/Plack HTTP::Server::PSGI httpd/ cpe:/a:tatsuhiko_miyagawa:plack/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: ZK Web Server\\r\\n| p/ZKTeco embedded web server/ d/specialized/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WildFly/(\\d[\\w._-]*)\\r\\n|s p/JBoss WildFly Application Server/ v/$1/ cpe:/a:redhat:jboss_wildfly_application_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: fasthttp\\r\\nDate:| p/Vertamedia fasthttp/ cpe:/a:vertamedia:fasthttp/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Icinga/[rv](\\d[\\w._-]*)\\r\\n|s p/Icinga/ v/$1/ cpe:/a:icinga:icinga:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Motion-httpd/([\\d.]+)(?:[-+][Gg]it-?\\w+)?\\r\\n|s p/Motion http API/ v/$1/ cpe:/a:motion:motion:$1/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Motion/([\\d.]+)(?:[-+][Gg]it-?\\w+)?\\r\\n|s p/Motion jpeg streaming/ v/$1/ cpe:/a:motion:motion:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Simple-DNS-Plus/([\\d.]+)\\r\\n|s p/Simple DNS Plus HTTP API/ v/$1/ cpe:/a:jh_software:simple_dns_plus:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Vidat V7/(\\d[\\w._-]*) \\(([^)]+)\\)\\r\\n|s p/Vidat V7 httpd/ v/$1/ o/$2/ cpe:/a:vidat_consulting:v7:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: PowerStudio v(\\d[\\w.]*)\\r\\n| p/Circutor PowerStudio/ v/$1/ cpe:/a:circutor:powerstudio:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: servX\\r\\n| p/Hilscher servX httpd/ cpe:/a:hilscher:servx/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?server: WebSEAL/(\\d[\\w.]*)\\r\\n|s p/IBM WebSEAL/ v/$1/ cpe:/a:ibm:webseal:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: JREntServer/1\\.1\\r\\n| p/Jinfonet JReport Enterprise Server/ cpe:/a:jinfonet:jrentserver/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Date: [^\\r\\n]+\\r\\nConnection: close\\r\\nServer: Prime\\r\\n\\r\\n|s p/Cisco Prime Infrastructure httpd/ cpe:/a:cisco:prime_infrastructure/\n\n# Put this at the end because it's not a server, but a backend.\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Servlet/([\\w._-]+) JSP/([\\w._-]+)\\r\\n|s p/Java Servlet/ v/$1/ i/JSP $2/ cpe:/a:oracle:jsp:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: sisRapid Framework\\r\\n|s p/Saman Portal/ cpe:/a:saman_information_structure:sis_rapid_framework/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\"Sling \\(Development\\)\"\\r\\n\\r\\n| p/Adobe Experience Manager/ cpe:/a:adobe:adobe_experience_manager/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nX-App-Name: kibana\\r\\n| p/Elasticsearch Kibana/ cpe:/a:elasticsearch:kibana/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nkbn-name: kibana\\r\\nkbn-version: (\\d[\\w._-]*)\\r\\n| p/Elasticsearch Kibana/ v/$1/ cpe:/a:elasticsearch:kibana:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Express\\r\\n|s p/Node.js Express framework/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Mojolicious \\(Perl\\)\\r\\n|s p/Mojolicious web framework/ cpe:/a:sebastian_riedel:mojolicious/\n# https://support.f5.com/kb/en-us/solutions/public/14000/800/sol14815.html\nmatch http m|^HTTP/1\\.1 200 OK\\r.*\\nSet-Cookie: b{15}=[A-Z]{128}; HttpOnly\\r\\n|s p/F5 BIG-IP load balancer AVR module/ v/11.3.0 or later/ cpe:/a:f5:big-ip_application_visibility_and_reporting/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d.*__meteor_runtime_config__ = JSON\\.parse\\(decodeURIComponent\\(\"%7B%22meteorRelease%22%3A%22METEOR%40([\\d.]+)%22%2C%22PUBLIC_SETTINGS%22%3A%7B%7D%2C%22ROOT_URL%22%3A%22https?%3A%2F%2F([^%]+)%|s p/Meteor/ v/$1/ h/$2/ cpe:/a:meteor:meteor:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-AspNetMvc-Version: ([\\d.]+)\\r\\nX-AspNet-Version: ([\\d.]+)\\r\\n|s p/ASP.NET/ v/$2/ i/MVC $1/ cpe:/a:microsoft:asp.net:$2/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: Sinopia/(\\d[\\w._-]*)\\r\\n|s p/Sinopia npm repository/ v/$1/ cpe:/a:alex_kocharin:sinopia:$1/\nsoftmatch http m|^HTTP/1\\.[01] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Powered-By: PHP/(\\d[\\w._-]+)|s i/PHP $1/ cpe:/a:php:php:$1/\n\n# No more HTTP softmatch because many services that I don't think are\n# best classified 'http' use http-like semantics (for example UPnP,\n# some https servers, etc).  Maybe I should make softmatch allow\n# future services that start with the service name, and relable all of\n# those.  Shrug.  For now it is gone.\n# softmatch http m|^HTTP/1.[01] \\d\\d\\d|\n\n# OCSP malformedRequest response status (1).\nmatch http-ocsp m|^HTTP/1\\.0 200 OK\\r\\nContent-type: application/ocsp-response\\r\\nContent-Transfer-Encoding: Binary\\r\\nContent-Length: 5\\r\\n\\r\\n0\\x03\\n\\x01\\x01$| p/OCSP over HTTP/\n\nmatch http-proxy m|^HTTP/1\\.1 401 Unauthorized\\r\\nConnection: closed\\r\\nContent-Length: \\d+\\r\\nWWW-Authenticate: Basic realm=\\\"WebWasher configuration\\\"\\r\\n| p/WebWasher filtering proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\n.*<html><head><title>WebWasher - Error 400: Bad Request</title>|s p/WebWasher filtering proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request\\r\\n.*<title>Webwasher - Notification</title>\\r\\n|s p/WebWasher filtering proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 400 Ung\\xfcltige Anforderung\\r\\nConnection: Close\\r\\nContent-type: text/html\\r\\nPragma: no-cache\\r\\n\\r\\n<html><head><title>WebWasher - Fehler 400: Ung\\xfcltige Anforderung</title>| p/WebWasher filtering proxy/ i/German/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# MiddleMan filtering proxy server v1.5.2\n# Middleman 1.8.3\nmatch http-proxy m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: 463\\r\\nConnection: close\\r\\nProxy-Connection: close\\r\\n\\r\\n<html><head><title>File not found</title></head><!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\">\\n<body text=\\\"#000000\\\" bgcolor=\\\"#99AABB\\\"| p/Middleman filtering web proxy/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: WWWOFFLE/(\\d[-.\\w]+)\\r\\n| p/WWWOFFLE caching webproxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.[01] 400 Host Not Found.*\\r\\n\\r\\n<html><head><title>The Proxomitron Reveals\\.\\.\\.</title>|s p/Proxomitron universal web filter/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\n\\r\\n<html><body>.*<font color=\\\"#FF0000\\\">Proxy</font><font color=\\\"#0000FF\\\">\\+</font> (\\d[-.\\w]+) \\(Build #(\\d+)\\), Date: |s p/Fortech Proxy+ http admin/ v/$1 Build $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 403 Forbidden\\r\\nDate: .*\\r\\n\\r\\n<html><body>.*</b> Registration key allows only ([\\d]+) simultaneous users\\..*>Proxy</font><font color=\\\"#0000FF\\\">\\+</font> ([\\d.]+) \\(Build #(\\d+)\\),|s p/Fortech Proxy+ http admin/ v/$2 Build $3/ i/$1 concurrent users allowed/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: Jana-Server/(\\d[-.\\w]+)\\r\\n| p/JanaServer http proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\nContent-Type: text/html\\n\\n<HTML><HEAD><TITLE>DansGuardian - | p/DansGuardian HTTP proxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: FreeProxy/(\\d[-.\\w]+)\\r\\n| p/FreeProxy/ v/$1/\n# EZproxy for Linux 2.2d GA (2003-09-01) - http://www.usefulutilities.com\nmatch http-proxy m|HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: EZproxy\\r\\n|s p/EZproxy web proxy/\n# http://bfilter.sourceforge.net/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\">\\r\\n<html>\\r\\n<head>\\r\\n  <title>BFilter Error</title>|s p/Bfilter proxy/\nmatch http-proxy m|^HTTP/1\\.0 501 Not Implemented\\r\\n.*<STRONG>\\nUnsupported Request Protocol\\n</STRONG>\\n</UL>\\n<P>\\nBFilter does not support all request methods for all access protocols\\.\\n|s p/Bfilter proxy/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: tinyproxy/(\\d[-.\\w]+)\\r\\n| p/tinyproxy/ v/$1/ cpe:/a:banu:tinyproxy:$1/\n# Privoxy 3.0.0 Filtering Web Proxy - http://www.privoxy.org\nmatch http-proxy m|^HTTP/1\\.0 400 Invalid header received from browser\\r\\n\\r\\n$| p|Junkbuster/Privoxy webproxy|\nmatch http-proxy m|^HTTP/1\\.0 400 Invalid header received from browser\\n\\n| p/Junkbuster webproxy/\nmatch http-proxy m|^HTTP/1\\.[01] 400 Invalid header received from client\\r\\nProxy-Agent: Privoxy ([\\w._-]+)\\r\\n| p/Privoxy http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad request received from browser\\r\\nConnection: close\\r\\n\\r\\nBad request\\. Privoxy was unable to extract the destination\\.\\r\\n| p/Privoxy http proxy/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad request received from client\\r\\nContent-Type: text/plain\\r\\nConnection: close\\r\\n\\r\\nBad request\\. Privoxy was unable to extract the destination\\.\\r\\n| p/Privoxy http proxy/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: NetCache \\(NetApp/(\\d[-.\\w]+)\\)\\r\\n|s p/NetApp NetCache http proxy/ v/$1/ cpe:/a:netapp:netcache:$1/\n# Not sure if the [-\\w_.]+ is a hostname, it was netcache02\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nServer: NetCache appliance \\(NetApp/([-\\w_.]+)\\)\\r\\n| p/NetApp NetCache http proxy/ v/$1/ cpe:/a:netapp:netcache:$1/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Via: 1\\.1 [-\\w_.]+ \\(NetCache NetApp/(\\d[-.\\w]+)\\)\\r\\n\\r\\n<h1>Bad Request \\(Invalid Hostname\\)</h1>|s p/NetApp NetCache http proxy/ v/$1/ cpe:/a:netapp:netcache:$1/\n# Squid 2.5.STABLE3 on NetBSD 1.6ZA\nmatch http-proxy m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: [sS]quid/([-.\\w+]+)\\r\\n|s p/Squid http proxy/ v/$1/ cpe:/a:squid-cache:squid:$1/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: [sS]quid\\r\\n|s p/Squid http proxy/ cpe:/a:squid-cache:squid/\n# Blue Coat Port 80 Security Appliance  Model: Blue Coat SG400 Software Version: SGOS 2.1.6044 Software Release id: 19480 Service Pack 4\nmatch http-proxy m|^HTTP/1\\.1 504 Gateway Time-out\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Length: 2976\\r\\nContent-Type: text/html\\r\\n\\r\\n<DIV class=Section1> \\n\\t\\t<P class=MsoNormal| p/Blue Coat Security Appliance http proxy/ o/SGOS/ cpe:/o:bluecoat:sgos/a\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: MS-MFC-HttpSvr/([\\w._-]+)\\r\\n| p/Microsoft Foundation Class httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 400 Cache Detected Error\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nVia: 1\\.0 ([-.\\w]+) \\(NetCache NetApp/([-.\\w]+)\\)\\r\\n\\r\\n| p/NetApp NetCache http proxy/ v/$2/ h/$1/ cpe:/a:netapp:netcache:$2/\nmatch http-proxy m|^HTTP/1\\.0 400 Cache Detected Error\\r\\nContent-type: text/html\\r\\n\\r\\n.*Generated by squid/([\\w._-]+)@([\\w._-]+)\\n|s p/Squid http proxy/ v/$1/ h/$2/ cpe:/a:squid-cache:squid:$1/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nMime-Version: 1\\.0\\r\\n.*<!-- \\n /\\*\\n Stylesheet for Squid Error pages\\n|s p/Squid http proxy/ cpe:/a:squid-cache:squid/\n# Novell BorderManager HTTP-Proxy\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Length: \\d+\\r\\n\\r\\n.*<title>BorderManager Information Alert</title>|s p/Novell BorderManager HTTP-Proxy/ cpe:/a:novell:bordermanager/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>InterScan Error</title></head>\\r\\n<body><h2>InterScan Error</h2>\\r\\nInterScan HTTP Version ([-\\w_.]+) \\$Date:| p/InterScan InterScan VirusWall/ v/$1/\n# iPlanet-Web-Proxy-Server 3.6\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: IBM-PROXY-WTE-US/([\\d.]+)\\r\\n| p/IBM-PROXY-WTE-US web proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: IBM-PROXY-FW/([\\d.]+)\\r\\n|s p/IBM-PROXY-FW http proxy/ v/$1/\nmatch http-proxy m|^<HTML><BODY bgColor=#FFFFFF link=#0000CC text=#000000 vLink=#CCCC88><TITLE>An error has occurred\\.\\.\\.</TITLE><CENTER><TABLE width=600 border=0 cellpadding=2 cellspacing=1><TR bgcolor=#FFFFFF vAlign=top><TD width=\\\"90%\\\" colspan=2 bgcolor=#707888>| p/AnalogX web proxy/ i/misconfigured/ cpe:/a:analogx:proxy/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-type: text/html\\r\\nContent-length: \\d+\\r\\nWWW-authenticate: Basic realm=\\\"\\(Password Only\\) NAV for MS Exchange\\\"\\r\\n\\r\\n| p/NAV for MS Exchange/\nmatch http-proxy m|^HTTP/1\\.0 200 \\nServer: VisualPulse \\(tm\\) ([\\w.]+)\\n| p/VisualPulse http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 302 Moved\\r\\nDate: .*\\r\\nServer: DeleGate/([\\d.]+)\\r\\n| p/DeleGate proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 302 Moved\\r\\nDate: .*\\r\\nServer: DeleGate| p/DeleGate proxy/\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\nProxy-agent: Netscape-Proxy/([\\d.]+)\\r\\n| p/Netscape-proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 504 Gateway Timeout\\r\\nContent-Type: text/html\\r\\nPragma: no-cache\\r\\n\\r\\n<H4><font COLOR=\\\"#FF0000\\\">Error parsing http request : </font></H2><p><pre>GET / / HTTP/1\\.0\\r\\n\\r\\n</pre>| p/WinProxy http proxy/ o/Windows/ cpe:/a:bluecoat:winproxy/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nServer: NetCache appliance \\(NetApp/([\\d.]+)\\)\\r\\n\\r\\n| p/NetApp NetCache http proxy/ v/$1/ d/proxy server/ cpe:/a:netapp:netcache:$1/\nmatch http-proxy m|^HTTP/1\\.0  500 \\r\\nProxy-agent: MultiCertify PROXY/([\\d.]+)\\r\\n| p/MultiCertify http proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: HTTP::Proxy/([\\d.]+)\\r\\n| p/Perl HTTP::Proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.1 407 Proxy Authentication Required\\r\\nProxy-Authenticate: NTLM\\r\\nProxy-Authenticate: BASIC realm=\\\"DOMBUD\\\"\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n| p/CacheFlow http proxy/ o/CacheOS/ cpe:/o:bluecoat:cacheos/\n# Might match WinProxy as well? -Doug\nmatch http-proxy m|^HTTP/1\\.1 404 Not found\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: 48\\r\\n\\r\\n<html><body>HTTP/1\\.1 404 Not found</body></html>$| p/HTTHost TCP over HTTP tunneling proxy/\nmatch http-proxy m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: Telkonet Communications\\r\\n| p/Telkonet Communications http proxy/\nmatch http-proxy m|^HTTP/1\\.1 204 No Content\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Squid-Error: ERR_INVALID_|s p/Squid http proxy/ cpe:/a:squid-cache:squid/\nmatch http-proxy m|^HTTP/1\\.[01] 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Squid-Error: ERR_INVALID_|s p/Squid http proxy/ cpe:/a:squid-cache:squid/\nmatch http-proxy m|^HTTP/1\\.0 503 Service Unavailable\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Squid-Error: ERR_CONNECT_FAIL 111\\r\\n|s p/Squid http proxy/ cpe:/a:squid-cache:squid/\nmatch http-proxy m|^HTTP/1\\.1 504 Gateway Time-out\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Squid-Error: ERR_CONNECT_FAIL 111\\r\\n|s p/Squid http proxy/ cpe:/a:squid-cache:squid/\nmatch http-proxy m|^HTTP/1\\.0 403 Access Forbidden\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>407 Proxy Authentication Required</TITLE></HEAD><BODY><H1>Proxy Authentication Required</H1><H4>Unable to complete request<P>Access denied due to authentication failure\\.</H4><HR></BODY></HTML>\\n\\n\\0| p/CA eTrust SCM http proxy/ cpe:/a:ca:etrust_secure_content_manager/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: FreeProxy/([\\d.]+)\\r\\n| p/FreeProxy http proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 403 Forbidden\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nConnection: Close\\r\\n\\r\\n<html><head><meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\"><TITLE>La solution mat\\xc3\\xa9rielle-logicielle WebShield&reg;| p/WebShield http proxy/ i/French/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 403 Forbidden\\r\\nServer: Eplicator/([\\d.]+)\\r\\n| p/Eplicator http proxy/ v/$1/\nmatch http-proxy m|^AdsGone Blocked HTML Ad$| p/AdsGone http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^<font face=verdana size=1>AdsGone (\\d+)  Blocked HTML Ad</font>$| p/AdsGone $1 http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nPragma: no-cache\\r\\n\\r\\n<html>\\n<head>\\n<title>Proxy\\+ WWW Admin interface</title>\\n\\n| p/Fortech Proxy+ http admin/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Cache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html.*\\r\\nProxy-Connection: close\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML><HEAD>\\n<TITLE>Access Denied</TITLE>\\n</HEAD>.*\\n<big>Access Denied \\(policy_denied\\)</big>\\n|s p/BlueCoat SG-400 http proxy/ d/proxy server/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Cache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html.*\\r\\nProxy-Connection: close\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML><HEAD>\\n<TITLE>Request Error</TITLE>\\n</HEAD>.*\\n<big>Request Error \\(invalid_request\\)</big>\\n|s p/BlueCoat http proxy/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: BlueCoat-Security-Appliance\\r\\n|s p/BlueCoat http proxy/ d/proxy server/\nmatch http-proxy m|^HTTP/1\\.1 302 Found\\r\\nServer: BlueCoat-Security-Appliance\\r\\nConnection: close\\r\\nLocation: /proxyclient/\\r\\n\\r\\n$| p/BlueCoat ProxyClient http interface/ d/proxy server/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nProxy-agent: BlueCoat-WinProxy\\r\\n| p/BlueCoat WinProxy http proxy/ d/proxy server/ o/Windows/ cpe:/a:bluecoat:winproxy/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Sawmill/([-\\w_.]+)\\r\\n|s p/BlueCoat Sawmill http proxy config/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nProxy-agent: BlueCoat-ProxyAV\\r\\n| p/BlueCoat ProxyAV appliance http proxy/ d/proxy server/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nPragma: no-cach\\r\\nContent-Type: text/html; charset=windows-1251\\r\\n\\r\\n| p/UserGate http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Simple, Secure Web Server ([\\d.]+)\\r\\n|s p/Symantec firewall http proxy/ i/Simple, Secure Web Server $1/ d/firewall/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Length: \\d+\\r\\n.*<B>KEN! Proxy</B>|s p/AVM KEN! http proxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad request\\r\\nContent-Type: text/html\\r\\nPragma: no-cache\\r\\n\\r\\n<H4><font COLOR=\\\"#FF0000\\\">Error parsing http request : </font></H2><p><pre>GET / / HTTP/1\\.0\\r\\n\\r\\n</pre>| p/Kerio WinRoute Pro http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\n.*This request is not allowed\\n\\n\\n by One1Stream Fastlane Acceleration Server\\.,  Accelerating Server ([\\d.]+)</font></p></body></html>|s p/One1Stream Fastlane accelerating http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 404 Proxy Error\\r\\nContent-type: text/html\\r\\nPragma: no-cache\\r\\nCache-control: no-cache\\r\\nContent-length: \\d+\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\r\\n<html><head><title>Proxy Error</title></head>\\r\\n<body><h1>Proxy Error</h1>\\r\\nThe proxy server could not handle this request\\.\\r\\n<p>\\r\\n<b>bad file or wrong URL</b>\\r\\n</body></html>\\r\\n| p/Software602 602LAN Suite http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nProxy-agent: Ositis-WinProxy\\r\\n| p/Ositis-WinProxy http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^<Html><Body><H1> Unauthorized \\.\\.\\.</H1></Body></Html>$| p/CCProxy http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^<pre>\\r\\nIP Address: [\\d.]+\\r\\nMAC Address: \\r\\nServer Time: .*\\r\\nAuth result: Invalid user\\.\\r\\n</pre>| p/CCProxy http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 401 Unauthorized\\r\\nServer: CCProxy\\r\\nWWW-Authenticate: Basic realm=\\\"CCProxy Authorization\\\"\\r\\n| p/CCProxy http proxy/ i/unauthorized/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 407 Unauthorized\\r\\nServer: CCProxy\\r\\nProxy-Authenticate: Basic realm=\\\"CCProxy Authorization\\\"\\r\\n| p/CCProxy http proxy/ i/unauthorized/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WebMarshal Proxy\\r\\n|s p/WebMarshal http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n.*<br>Protocol:http\\n<br>Host: [N]ULL\\n<br>Path:/\\n<tr>|s p/Oops! http proxy/\nmatch http-proxy m|^HTTP/1\\.0 504 Gateway Timeout\\. Or not in cache\\r\\n\\r\\n| p/Oops! http proxy/\nmatch http-proxy m|^HTTP/1\\.0 407 Proxy Authentication Required\\r\\nProxy-Authenticate: Basic realm=\\\"oops\\\"\\r\\n| p/Oops! http proxy/ i/Authentication Required/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Polipo\\r\\n|s p/Polipo http proxy/\nmatch http-proxy m|^HTTP/1\\.1 503 ERROR\\nConnection: close\\nContent-Type: text/html; charset=iso-8859-1\\n\\n<html>\\n<head>\\n<title>Error: Unable to resolve IP</title>| p/ffproxy http proxy/\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r\\ndate: .*\\r\\nconnection: close\\r\\n\\r\\n<html><body><pre><h1>Index of /</h1>\\n<b>Name {53}Size {6}Last modified</b>\\n\\n| p/HTTP Replicator proxy/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: BestHop ([\\d.]+)\\r\\n|s p/BestHop CacheFly http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 407 Authentication failed\\r\\nConnection: close\\r\\nProxy-Connection: close\\r\\nProxy-Authenticate: Basic realm=\\\"HTTP proxy\\\"\\r\\n| p/Astaro Security http proxy/ cpe:/a:astaro:security_gateway_software/\nmatch http-proxy m|^HTTP/1\\.0 503 Service unavailable\\r\\n\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>Connect server failed</title>\\r\\n</head>\\r\\n<body >\\r\\n<h3>503 Can not connect server</h3>\\r\\nezProxy meets some difficulties to connect this WWW server\\.| p/ezProxy http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 403 Forbidden\\r\\nDate: .*\\r\\nServer: Mystery WebServer\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<HTML><HEAD>\\n<TITLE>403 Forbidden</TITLE>\\n</HEAD><BODY>\\n<H1>Forbidden</H1>\\nYou don't have permission to access /\\non this server\\.<P>\\n<HR>\\n<ADDRESS>Mystery WebServer/([\\d.]+) Server at ([-\\w_.]+) Port \\d+</ADDRESS>\\n| p/Espion Interceptor http proxy/ v/$1/ h/$2/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request .*Server: Traffic inspector HTTP/FTP[/ ]Proxy server \\(([\\w._-]+)\\)\\r\\n|s p/Traffic Inspector http proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-store\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nX-Bypass-Cache: Application and Content Networking System Software ([\\d.]+)\\r\\n| p/Cisco ACNS outbound proxying/ v/$1/ cpe:/a:cisco:application_and_content_networking_system_software:$1/\n\nmatch http-proxy m|^<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">.*ERROR: The requested URL could not be retrieved|s p/Squid http proxy/ cpe:/a:squid-cache:squid/\nmatch http-proxy m|^<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">.*El URL solicitado no se ha podido conseguir|s p/Squid http proxy/ i/Spanish/ cpe:/a:squid-cache:squid::::es/\nmatch http-proxy m|^<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">.*A URL solicitada n&atilde;o pode ser recuperada|s p/Squid http proxy/ i/Portuguese/ cpe:/a:squid-cache:squid::::pt/\nmatch http-proxy m|^<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">.*La URL richiesta non pu&ograve; essere recuperata</TITLE>|s p/Squid http proxy/ i/Italian/ cpe:/a:squid-cache:squid::::it/\nmatch http-proxy m|^<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">.*L'URL demand&eacute;e n'a pu &ecirc;tre charg&eacute;e|s p/Squid http proxy/ i/French/ cpe:/a:squid-cache:squid::::fr/\nmatch http-proxy m|^<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">.*FEHLER: Der angeforderte URL konnte nicht geholt werden|s p/Squid http proxy/ i/German/ cpe:/a:squid-cache:squid::::de/\n\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FSAV4IGW\\r\\n.*<html><head><title>F-Secure Internet Gatekeeper Welcome Page</title>|s p/F-Secure Internet Gatekeeper httpd/\nmatch http-proxy m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: twproxy/([-\\w_.]+)\\r\\n| p/ThunderWeb twproxy/ v/$1/\nmatch http-proxy m=^HTTP/1\\.0 302 Redirect\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nLocation: http://([\\w._-]+):\\d+/(?:nohost|nonauth/nohost\\.php)\\r\\n\\r\\n= p/Kerio WinRoute http proxy/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 407 Proxy Authentication Required.*\\r\\nServer: HandyCache\\r\\n| p/HandyCache http caching proxy/ i/Russian/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CF/v([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Cache: MISS from CacheFORCE\\r\\n|s p/CacheForce http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 302 Found\\r\\nSet-Cookie:.*<TITLE>Novell Proxy</TITLE></HEAD><BODY><b><p>HTTP request is being redirected to HTTPS\\.</b></BODY></HTML>\\r\\n|s p/Novell iChain http proxy/ o/NetWare/ cpe:/a:novell:ichain/ cpe:/o:novell:netware/a\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: micro_proxy\\r\\n.*<ADDRESS><A HREF=\\\"http://www\\.acme\\.com/software/micro_proxy/\\\">micro_proxy</A>|s p/acme.com micro_proxy http proxy/ cpe:/a:acme:micro_proxy/\nmatch http-proxy m|^HTTP/1\\.0 403 Forbidden\\r\\n.*<br><b>Access denied due to Proxy\\+'s Security settings!</b>|s p/Fortech Proxy+ http admin/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\nServer: URL Gateway ([-\\w_.]+)\\r\\n| p/URL Gateway http proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: SonicWALL SSL-VPN Web Server\\.?\\r\\n|s p/SonicWALL SSL-VPN http proxy/\nmatch http-proxy m|^HTTP/1\\.0 504 Web Acceleration Client Error \\(400\\.3\\) - Missing Host Field in Request Header\\r\\nContent-type: text/html\\r\\nContent-length: \\d+\\r\\n\\r\\n| p/HughesNet Web Acceleration http proxy/\nmatch http-proxy m|^HTTP/1\\.0 407 Proxy Authentication Required\\r\\nProxy-Authenticate: Basic realm=.*<h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource|s p/3Proxy http proxy/\nmatch http-proxy m|^HTTP/1\\.1 400 Malformed Request\\r\\nServer: WinGate ([\\d.]+) \\(Build (\\d+)\\)\\r\\n| p/WinGate httpd/ v/$1 build $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m=^HTTP/1\\.1 403 (?:Request|Access) [Dd]enied\\r\\nDate: .*\\r\\nCache-control: no-store, no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nServer: WinGate Engine\\r\\n\\r\\n= p/WinGate http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d.*server: CoralWebPrx/([-\\w_.]+) \\(See http://coralcdn\\.org/\\)\\r\\n|s p/Coral Content Distribution Network http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Type: text/html\\r\\n\\r\\nYou are trying to use a node of the CoDeeN CDN Network\\.| p/CoDeeN Content Distribution Network http proxy/\nmatch http-proxy m|^HTTP/1\\.0 403 Request error by HAVP\\r\\n.*<title>Yoggie - Unknown Request</title>|s p/Yoggie httpd/ i/HAVP anti-virus web proxy/\nmatch http-proxy m|^HTTP/1\\.0 403 Request error by HAVP\\r\\n| p/HAVP anti-virus web proxy/\nmatch http-proxy m|^HTTP/1\\.1 407\\r\\nProxy-Authenticate: Basic realm=\\\"Proxy\\\"\\r\\nContent-Type: text/plain\\r\\n\\r\\nAccess denyed| p/Small HTTP Server http proxy/\nmatch http-proxy m|^HTTP/1\\.0 407 Proxy Authentication required\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nProxy-Authenticate: Basic realm=\\\"Proxy\\+ HTTP Proxy service\\\"\\r\\n| p/Proxy+ http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 503 Freenet is starting up\\r\\n| p/Freenet FProxy/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Cache-Control: max-age=0, must-revalidate, no-cache, no-store, post-check=0, pre-check=0\\r\\n.*<title>Freenet FProxy Homepage|s p/Freenet FProxy/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Security-Policy: default-src 'self'; script-src 'none'; frame-src 'none'; object-src 'none'; style-src 'self' 'unsafe-inline'\\r\\n(?:[^\\r\\n]+\\r\\n)*?Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store, post-check=0, pre-check=0\\r\\n|s p/Freenet FProxy/\nmatch http-proxy m=^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\n.*<title>Browse Freenet \\(Node id\\|([\\w._-]+)\\) - Freenet</title>=s p/Freenet FProxy/ i/node id $1/\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\n.*<title>Freenet Node of Node id\\x7c([\\w._-]+) - Freenet</title>|s p/Freenet FProxy/ i/node id $1/\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\n.*<title>Browse Freenet \\(([\\w._-]+)\\) - Freenet</title>|s p/Freenet FProxy/ i/node id $1/\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\n.*<title>Freenet - Freenet</title>|s p/Freenet FProxy/\nmatch http-proxy m|^HTTP/1\\.[01] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mikrotik HttpProxy\\r\\n|s p/MikroTik http proxy/\nmatch http-proxy m|^HTTP/1\\.0 500 Internal Server Error\\r\\nCache-control: no-cache\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>SpoonProxy V([\\w._-]+) Error</TITLE>| p/Pi-Soft SpoonProxy http proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: approx/([\\w._~+-]+) Ocamlnet/([\\w._-]+)\\r\\n|s p/Approx http proxy/ v/$1/ i/Ocamlnet $2/\nmatch http-proxy m|^HTTP/1\\.1 401 Unauthorized\\nWWW-Authenticate: Basic realm=\\\"Anti-Spam SMTP Proxy \\(ASSP\\) Configuration\\\"\\nContent-type: text/html\\nServer: ASSP/([\\w._-]+)\\(?\\)?\\n| p/Anti-Spam SMTP Proxy http config/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*<b>Bad request format\\.\\n\\t\\t</b><p>Please, check URL\\.<p>\\t\\t<hr>\\t\\tGenerated by <a href=\\\"http://www\\.kingate\\.net\\\"> kingate\\(([\\w._-]+)-win32\\)</a>\\.</body></html>\\0\\0|s p/kingate http proxy/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^\\njava\\.net\\.UnknownHostException: /\\r\\n\\tat java\\.net\\.PlainSocketImpl\\.connect\\(Unknown Source\\)\\r\\n| p/Apache JMeter http proxy/\nmatch http-proxy m|^\\r\\n\\r\\njava\\.net\\.UnknownHostException: /\\n\\tat java\\.net\\.AbstractPlainSocketImpl\\.connect\\(AbstractPlainSocketImpl\\.java:158\\)\\n| p/Apache JMeter http proxy/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<H1>I2P ERROR: NON-HTTP PROTOCOL</H1>The request uses a bad protocol\\. The I2P HTTP Proxy supports http:// requests ONLY\\. Other protocols such as https:// and ftp:// are not allowed\\.<BR>|s p/I2P http proxy/\nmatch http-proxy m|^HTTP/1\\.1 405 Bad Method\\r\\n.*<H1>I2P ERROR: METHOD NOT ALLOWED</H1>The request uses a bad protocol\\. The Connect Proxy supports CONNECT requests ONLY\\. Other methods such as GET are not allowed - Maybe you wanted the HTTP Proxy\\?\\.<BR>|s p/I2P https proxy/\nmatch http-proxy m|^HTTP/1\\.0 502 Bad Gateway\\r\\nProxy-Connection: close\\r\\nContent-type: text/html; charset=us-ascii\\r\\n\\r\\n<html><head><title>502 Bad Gateway</title></head>\\r\\n<body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>\\r\\n| p/3proxy http proxy/\nmatch http-proxy m|^HTTP/1\\.0 407 Proxy Authentication Required\\r\\nProxy-Authenticate: NTLM\\r\\nProxy-Authenticate: basic realm=\\\"proxy\\\"\\r\\nProxy-Connection: close\\r\\n.*<h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3>|s p/3proxy http proxy/ i/authentication required/\nmatch http-proxy m|^HTTP/1\\.0 404 Object not found\\r\\n.*<title>MIMEsweeper for Web :: ACCESS DENIED</title>|s p/Clearswift MIMEsweeper for web http proxy/ d/proxy server/\nmatch http-proxy m|^HTTP/1\\.1 200 .*<title>[\\n ]*Web Filter Block Override[\\n ]*</title>.*/XX/YY/ZZ/|s p/Fortinet FortiGuard http proxy/ d/firewall/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: ziproxy\\r\\n.*\\(ziproxy/([\\w._-]+)\\)</ADDRESS>|s p/ziproxy http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: ziproxy\\r\\n| p/ziproxy http proxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\n\\r\\n\\0{872}$| p/Ncat http proxy/ v/0.2/ i/before Nmap 4.85BETA1/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\n\\r\\n$| p/Ncat http proxy/ i/Nmap 4.85BETA1 or later/\nmatch http-proxy m|^HTTP/1\\.1 404 Not found\\r\\nConnection: close\\r\\n.*<title>Proxy error: 404 Not found\\.</title>\\n.*<hr>Generated .* by Polipo on <em>([\\w_.-]+):\\d+</em>\\.\\n|s p/Polipo/ h/$1/\nmatch http-proxy m|^HTTP/1\\.1 401 Server authentication required\\r\\nConnection: close\\r\\n.*<title>Proxy error: 401 Server authentication required\\.</title>.*<hr>Generated .*? by Polipo on <em>([\\w._-]+):\\d+</em>\\.|s p/Polipo/ h/$1/\nmatch http-proxy m|^HTTP/1\\.0 500 Direct HTTP requests not allowed\\nContent-type: text/html\\n\\n<font face=\\\"Bitstream Vera Sans Mono,Andale Mono,Lucida Console\\\">\\nThe proxy is unable to process your request\\.\\n<h1><font color=red><b>Direct HTTP requests not allowed\\.</b></font></h1>\\n$| p/ratproxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\ncontent-type: text/html\\r\\n\\r\\n<h1>400</h1>\\n<p>koHttpInspector: Could not understand the query: '/'</p>\\n<hr>\\n<address>Komodo Http Inspector, Port \\d+</address>\\n$| p/Komodo HTTP Inspector proxy/\nmatch http-proxy m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nProxy-Connection: close\\r\\n\\r\\n<style type=\\\"text/css\\\">\\nbody{ font-family: Tahoma, Arial, sans-serif, Helvetica, Verdana; font-size: 11px; color: #000000; background-color: #FFFFFF; margin: 2 }\\n| p/SafeSquid http proxy/\nmatch http-proxy m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Length: 0\\r\\nWWW-Authenticate: Basic realm=\\\"proxy1\\\"\\r\\nConnection: keep-alive\\r\\nProxy-Connection: keep-alive\\r\\n\\r\\n$| p/SafeSquid http proxy/\nmatch http-proxy m|^HTTP/1\\.0 302 Found\\r\\nServer: Distributed-Net-Proxy/([\\d.]+)\\r\\nLocation: http://www\\.distributed\\.net/\\r\\n\\r\\n$| p/distributed.net personal key proxy httpd/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\nServer: LastFMProxy/([\\w.]+)\\r\\n| p/LastFMProxy HTTP-to-last.fm proxy/ v/$1/ cpe:/a:last:last.fm/\nmatch http-proxy m|^HTTP/1\\.0 403 Forbidden\\r\\n.*<TITLE>\\r\\nFEHLER: Der Zugriff auf die angeforderte URL war nicht erfolgreich\\r\\n</TITLE>.*<B>KEN! DSL Proxy</B>|s p/AVM KEN! DSL http proxy/\nmatch http-proxy m|^HTTP/1\\.0 404 Not Found\\r\\n.*<title>HINWEIS: Der Zugriff auf die angeforderte URL war nicht erfolgreich</title>|s p/AVM FRITZ!Box Fon WAP http proxy/ d/WAP/\nmatch http-proxy m|^HTTP/1\\.0 404 Not Found\\r\\n.*<title>HINWEIS: Die Internetnutzung ist gesperrt\\.</title>|s p/AVM FRITZ!Box Fon WLAN 7100-series http proxy/ d/WAP/\nmatch http-proxy m|^HTTP/1\\.0 407 Proxy access denied\\r\\nProxy-Authenticate: NTLM\\r\\nProxy-Connection: keep-alive\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/ScanSafe http proxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: BaseHTTP/([\\d.]+) Python/([\\w._-]+)\\r\\n.*<head>\\n<title>Error response</title>\\n</head>\\n<body>\\n<h1>Error response</h1>\\n<p>Error code 400\\.\\n<p>Message: Bad Request\\.\\n<p>Error code explanation: 400 = Bad request syntax or unsupported method\\.\\n</body>\\n$|s p/BaseHTTPServer/ v/$1/ i/GAppProxy Google App Engine proxy; Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\n# Etisalat - United Arab Emirates telecom company.\nmatch http-proxy m|^HTTP/1\\.1 501 Not Implemented\\r\\n.*<title>This site is blocked</title>.*<img border=\\\"0\\\" src=\\\"http://([\\w._-]+)/images-ip/ipblocked\\.jpg\\\" \\nuseMap=#links2 border=0>.*<area title=\\\"\\\" shape=RECT alt=\\\"\\\" coords=\\\"494, 20, 580, 105\\\" href=\\\"http://www\\.etisalat\\.ae\\\">|s p/Etisalat censorship http proxy/ i/site blocked/ h/$1/\nmatch http-proxy m|^HTTP/1\\.1 403 Forbidden\\r\\n.*<title>This site is blocked</title>.*<img border=\\\"0\\\" src=\\\"http://([\\w._-]+)/images-ip/siteblocked\\.jpg\\\" useMap=#links border=0>.*<area title=\\\"\\\" shape=RECT alt=\\\"\\\" coords=\\\"154, 449, 254, 463\\\" href=\\\"http://www\\.etisalat\\.ae/proxy\\\">|s p/Etisalat censorship http proxy/ i/site blocked/ h/$1/\nmatch http-proxy m|^HTTP/1\\.0 404 GlimmerBlocked\\r\\n| p/GlimmerBlocker http proxy/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request \\(Malformed HTTP request\\)\\r\\n.*<HTML><TITLE>Vital Security Proxy Error</TITLE>|s p/Finjan Vital Security http proxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nConnection: Close\\r\\n\\r\\n<HTML><HEAD>\\n<TITLE>ERROR: The requested URL could not be retrieved</TITLE>\\n</HEAD><BODY>\\n<H2>The requested URL could not be retrieved</H2>\\n<HR>\\n<P>\\nWhile trying to retrieve the URL:\\n| p/Websense http proxy/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Via: HTTP/1\\.1 ([\\w._-]+) \\(Websense_Content_Gateway/([\\w._-]+) \\[c s f \\]\\)\\r\\n|s p/Websense Content Gateway http proxy/ v/$2/ h/$1/ cpe:/a:websense:websense_content_content_gateway:$2/\nmatch http-proxy m|^HTTP/1\\.0 504 Gateway Timeout\\r\\nContent-Length: 237\\r\\n.*<p>The proxy server did not receive a timely response\\nfrom the upstream server\\.</p>|s p/Fortinet FortiGate-110c http proxy/ d/firewall/\nmatch http-proxy m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nContent-length: 22\\r\\nConnection: close\\r\\nSet-Cookie: sslvpn-authck-orig-url=/; path=/\\r\\nSet-Cookie: sslvpn-authck-realm-name=Our Users; path=/\\r\\nLocation: /_formauth/login\\.html\\r\\nContent-Type: text/plain\\r\\n\\r\\n302 Moved Temporarily\\n$| p/Phion HTTPS VPN gateway/ d/proxy server/\n\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Statistics Report for HAProxy</title>| p/HAProxy http proxy/ d/load balancer/ cpe:/a:haproxy:haproxy/\n# HAProxy responses are mostly from http_err_msgs, HTTP_401_fmt, and HTTP_407_fmt in\n# http://git.haproxy.org/?p=haproxy.git;a=blob;f=src/proto_http.c\n# Only statuses 200, 403, and 503 are likely to result from from GetRequest;\n# other probes can match via fallbacks.\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>200 OK</h1>\\nHAProxy: service ready\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/before 1.5.0/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad request\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<html><body><h1>400 Bad request</h1>\\nYour browser sent an invalid request\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/before 1.3.1/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 403 Forbidden\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<html><body><h1>403 Forbidden</h1>\\nRequest forbidden by administrative rules\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/before 1.3.1/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 408 Request Time-out\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<html><body><h1>408 Request Time-out</h1>\\nYour browser didn't send a complete request in time\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/before 1.3.1/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 500 Server Error\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<html><body><h1>500 Server Error</h1>\\nAn internal server error occured\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/before 1.3.1/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 502 Bad Gateway\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<html><body><h1>502 Bad Gateway</h1>\\nThe server returned an invalid or incomplete response\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/before 1.3.1/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 503 Service Unavailable\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<html><body><h1>503 Service Unavailable</h1>\\nNo server is available to handle this request\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/before 1.3.1/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 504 Gateway Time-out\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\n\\r\\n<html><body><h1>504 Gateway Time-out</h1>\\nThe server didn't respond in time\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/before 1.3.1/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1.0 401 Unauthorized\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\".*\"\\r\\n\\r\\n<html><body><h1>401 Unauthorized</h1>\\nYou need a valid user and password to access this content.\\n</body></html>\\n$| p/HAProxy http proxy/ v/before 1.3.1/ d/load balancer/ cpe:/a:haproxy:haproxy/\n# Statuses 400, 401, 403, 408, 500, 502, 503, and 504 gained \"Content-Type: text/html\" in v1.3.1.\n# http://git.haproxy.org/?p=haproxy.git;a=commitdiff;h=791d66d3634dde12339d4294aff55a1aed7518e3;hp=b9e98b683612b29ef939c10d3d00be27de26534a\nmatch http-proxy m|^HTTP/1\\.0 400 Bad request\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>400 Bad request</h1>\\nYour browser sent an invalid request\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.3.1 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 403 Forbidden\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>403 Forbidden</h1>\\nRequest forbidden by administrative rules\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.3.1 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 408 Request Time-out\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>408 Request Time-out</h1>\\nYour browser didn't send a complete request in time\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.3.1 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 500 Server Error\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>500 Server Error</h1>\\nAn internal server error occured\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.3.1 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 502 Bad Gateway\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>502 Bad Gateway</h1>\\nThe server returned an invalid or incomplete response\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.3.1 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 503 Service Unavailable\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>503 Service Unavailable</h1>\\nNo server is available to handle this request\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.3.1 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 504 Gateway Time-out\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>504 Gateway Time-out</h1>\\nThe server didn't respond in time\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.3.1 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1.0 401 Unauthorized\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Basic realm=\".*\"\\r\\n\\r\\n<html><body><h1>401 Unauthorized</h1>\\nYou need a valid user and password to access this content.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.3.1 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\n# HTTP_407_fmt was added in v1.4-rc1.\n# http://git.haproxy.org/?p=haproxy-1.4.git;a=commitdiff;h=844a7e76d2557364e6d34d00027f2fa514b9d855;hp=8c8bd4593c95f54cbe42bf204b943a159810a74e\nmatch http-proxy m|^HTTP/1.0 407 Unauthorized\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nProxy-Authenticate: Basic realm=\".*\"\\r\\n\\r\\n<html><body><h1>401 Unauthorized</h1>\\nYou need a valid user and password to access this content.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.4.0 - 1.5.10/ d/load balancer/ cpe:/a:haproxy:haproxy/\n# 200 changed in v1.5-dev7.\n# http://git.haproxy.org/?p=haproxy-1.5.git;a=commitdiff;h=027a85bb03c5524e62c50e228412d9be403d7f98;hp=7c51a732f701f7d147e7b79d828f80612a0bfcbc\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>200 OK</h1>\\nService ready\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.5.0 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\n# 405 and 429 were added in v1.6-dev2.\n# http://git.haproxy.org/?p=haproxy-1.6.git;a=commitdiff;h=108b1dd69d4e26312af465237487bdb855b0de60\nmatch http-proxy m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>405 Method Not Allowed</h1>\\nA request was made of a resource using a request method not supported by that resource\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.6.0 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\nmatch http-proxy m|^HTTP/1\\.0 429 Too Many Requests\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><body><h1>429 Too Many Requests</h1>\\nYou have sent too many requests in a given amount of time\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.6.0 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\n# HTTP_407_fmt changed in v1.5.10.\n# http://git.haproxy.org/?p=haproxy-1.5.git;a=commitdiff;h=b301654e237c358e892db32c4ac449b42550d79b;hp=211c2e901d0b83b6792d5ebdf207f8e70a299361\nmatch http-proxy m|^HTTP/1\\.0 407 Unauthorized\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nProxy-Authenticate: Basic realm=\".*\"\\r\\n\\r\\n<html><body><h1>407 Unauthorized</h1>\\nYou need a valid user and password to access this content\\.\\n</body></html>\\n$| p/HAProxy http proxy/ v/1.5.10 or later/ d/load balancer/ cpe:/a:haproxy:haproxy/\n\nmatch http-proxy m|^HTTP/1\\.0 400\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Error</title></head><body>\\r\\n<h2>ERROR: 400</h2>\\r\\n<br>\\r\\n</body></html>\\r\\n$| p/Citrix Application Firewall/ d/firewall/\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: 3366\\r\\nPragma: no-cache\\r\\n\\r\\n.*<style>\\r\\n\\r\\nh1, p, a, body {font-family: Arial;}\\r\\n\\r\\nh2\\r\\n{\\r\\n\\ttext-align: center; \\r\\n\\tfont: bold 20px Verdana, sans-serif; \\r\\n\\tcolor: #00F; \\r\\n}|s p/Integard filtering http proxy management interface/ d/proxy server/\nmatch http-proxy m|^HTTP/1\\.0 502 Bad gateway\\r\\n\\r\\nBurp proxy error: invalid client request received: first line of request did not contain an absolute URL - try enabling invisible proxy support\\r\\n$| p/Burp Suite Pro http proxy/\nmatch http-proxy m|^HTTP/1\\.0 502 Bad gateway\\r\\n\\r\\nBurp proxy error: Invalid client request received: First line of request did not contain an absolute URL - try enabling invisible proxy support\\r\\n$| p/Burp Suite Pro http proxy/ v/1.5/\nmatch http-proxy m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: RabbIT proxy version ([\\w._-]+)\\r\\nContent-type: text/html; charset=utf-8\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nDate: .*\\r\\nWWW-Authenticate: Basic realm=\\\"([\\w._-]+):\\d+\\\"\\r\\n| p/RabbIT http proxy/ v/$1/ h/$2/\nmatch http-proxy m|^HTTP/1\\.1 403 Forbidden\\r\\nServer: Lusca/([\\w._-]+)\\r\\n| p/Lusca http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 403 Access Denied\\r\\nConnection: close\\r\\n\\r\\n<html>The request you issued is not authorized for GoogleSharing\\.\\n| p/GoogleSharing http proxy/\nmatch http-proxy m|^HTTP/1\\.0 503\\r\\nServer: Charles\\r\\n| p/Charles http proxy/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Via: http/1\\.[01] ([\\w._-]+) \\(ApacheTrafficServer[^)]*\\)\\r\\nServer: ATS/([\\w._-]+)\\r\\n|s p/Apache Traffic Server/ v/$2/ h/$1/ cpe:/a:apache:traffic_server:$2/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Via: http/1\\.[01] ([\\w._-]+) \\(ApacheTrafficServer[^)]*\\)\\r\\nServer: ATS\\r\\n|s p/Apache Traffic Server/ h/$1/ cpe:/a:apache:traffic_server/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ATS/([\\w._-]+)\\r\\n|s p/Apache Traffic Server/ v/$1/ cpe:/a:apache:traffic_server:$1/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ATS\\r\\n|s p/Apache Traffic Server/ cpe:/a:apache:traffic_server/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Via: http/1\\.1 ([\\w._-]+) \\([^\\)]+ \\[c[M ]s[S ]f \\]\\)\\r\\nServer: [^/]+/([\\d.]+)\\r\\n|s p/Apache Traffic Server/ v/$2/ h/$1/ cpe:/a:apache:traffic_server:$2/\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\nACCEPT-RANGES: none\\r\\n\\r\\n<html><head><Title>SecTitan&#153; Reverse Proxy</title></head><body><center><h1>Error 107</h1>Invalid Request!<br><b>SecTitan&#153; Reverse Proxy ([\\w._-]+)</b><br>Copyright &copy; \\d+ Bestellen Software, LLC All rights reserved\\.</center></body></html>| p/Bestellen SecTitan reverse http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Varnish\\r\\n| p/Varnish/ cpe:/a:varnish-cache:varnish/\nmatch http-proxy m|^HTTP/1\\.0 503 Internal Error\\r\\nServer: awarrenhttp/([\\w._-]+)\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD>\\n<TITLE>ERROR: The requested URL could not be retrieved</TITLE>\\n</HEAD><BODY>\\n<H1>ERROR</H1>\\n<H2>The requested URL could not be retrieved</H2>| p/awarrenhttp http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 404 No service found\\r\\nDate: .*\\r\\nServer: ACE XML Gateway\\r\\nContent-Type: text/plain\\r\\nConnection: close\\r\\nContent-Length: 30\\r\\n\\r\\nNo service matched the request| p/Cisco Application Control Engine XML gateway/ d/load balancer/ cpe:/a:cisco:application_control_engine_software/\nmatch http-proxy m|^HTTP/1\\.0 403 Request error by HTTP PROXY\\r\\nContent-Type: text/html\\r\\nProxy-Connection: close\\r\\nConnection: close\\r\\n\\r\\n<html><head><meta http-equiv=\\\"Content-Language\\\" content=\\\"en-us\\\"><title>Cisco ([\\w._-]+)</title>| p/Cisco $1 http proxy/ d/firewall/\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: PAW Server ([\\w._-]+-android) \\(Brazil/2\\.0\\)\\r\\n|s p/PAW http proxy/ v/$1/ d/phone/ o/Android/ cpe:/o:google:android/\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r\\nServer: NETLAB/([\\w._-]+)\\r\\n| p/Cisco NETLab http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html; charset=utf-8\\r\\nProxy-Connection: close\\r\\nConnection: close\\r\\n.*<TITLE>P\\xc3\\xa1gina de Error invalid_request</TITLE>|s p/Blue Coat ProxySG firewall/ i/Spanish/ d/firewall/ cpe:/h:bluecoat:proxysg::::es/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nCache-control: no-cache\\r\\nConnection: close\\r\\nProxy-Connection: close\\r\\n.*<title>I2P Warning: Non-HTTP Protocol</title>|s p/I2P http proxy/\nmatch http-proxy m|^HTTP/1\\.0 301 Moved Permanently\\r\\nLocation: http:/index\\.html\\r\\nWWW-Authenticate: Basic realm=\\\"([\\w._-]+)\\\" \\r\\nServer: Repro Proxy Repro ([\\w._-]+)/000000@SC-VPRABHU\\r\\n| p/Repro http proxy/ v/$2/ h/$1/\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nAllow: GET, HEAD\\r\\nServer: Oracle-Web-Cache/11g \\(([\\w._-]+)\\)\\r\\n| p/Oracle Web Cache http proxy/ v/$1/ cpe:/a:oracle:application_server_web_cache:$1/\nmatch http-proxy m|^HTTP/1\\.1 200 I'm sorry, Dave\\. I'm afraid I can't work without a host header\\.\\r.*\\nServer: Haste\\r\\n|s p/Haste http proxy/ v/2.0/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: smartcds/([\\w.]+)\\r\\n| p/SmartCDS http proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad request: request-line invalid\\r\\nContent-type: text/html; charset=\\\"utf-8\\\"\\r\\n\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\r\\n<html lang=\\\"en\\\" xml:lang=\\\"en\\\" xmlns=\\\"http://www\\.w3\\.org/1999/xhtml\\\">\\r\\n  <head>\\r\\n    <title>Request denied by WatchGuard HTTP Proxy</title>| p/WatchGuard http proxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad request: request-line invalid\\r\\nContent-type: text/html; charset=\"iso-8859-1\"\\r\\n\\r\\n<html>\\r\\n<body>\\r\\n<h3> Request denied by WatchGuard HTTP proxy\\. </h3>| p/WatchGuard http proxy/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?X-Varnish: \\d+\\r.*\\nVia: 1\\.1 varnish\\r\\n|s p/Varnish http accelerator/ cpe:/a:varnish-cache:varnish/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Varnish\\r.*\\nX-Varnish: \\d+\\r\\n|s p/Varnish http accelerator/ cpe:/a:varnish-cache:varnish/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Via: 1\\.1 varnish-v(\\d)\\r\\n|s p/Varnish http accelerator/ v/$1/ cpe:/a:varnish-cache:varnish:$1/\nmatch http-proxy m|^HTTP/1\\.0 403 Forbidden\\r\\nDate: .*\\r\\nServer: Microdasys-SCIP\\r\\nContent-Type: text/html\\r\\nContent-Length: 240\\r\\nConnection: close\\r\\n\\r\\n<HTML>.*<ADDRESS><A HREF=\\\"http://www\\.websense\\.com/\\\">Websense Content Gateway Proxy v([\\w._-]+)</A>| p/Websense Content Gateway http proxy/ v/$1/ i/Microdasys SCIP ssl proxy/ cpe:/a:websense:websense_content_content_gateway:$1/\nmatch http-proxy m|^HTTP/1\\.0 403 Forbidden\\r\\nDate: .*\\r\\nServer: Microdasys-SCIP\\r\\n| p/Microdasys SCIP ssl proxy/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: mitmproxy ([\\w._-]+)\\r\\nContent-type: text/html\\r\\nContent-Length: \\d+\\r\\n| p/mitmproxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nServer: xxxx\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nStrict-Transport-Security: max-age=31536000\\r\\nLocation: https:///webconsole/webpages/login\\.jsp\\r\\n|\nmatch http-proxy m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nServer: xxxx\\r\\n(?:X-Frame-Options: SAMEORIGIN\\r\\n(?:Strict-Transport-Security: max-age=\\d+\\r\\n)?)?Location: https?://[^\\r\\n]+?/webpages/(?:myaccount/)?login\\.jsp\\r\\nCache-Control: max-age=2592000\\r\\nExpires: .*\\r\\n(?:Vary: Accept-Encoding\\r\\n)?Content-Length: \\d+\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n| p/Cyberoam captive portal/\nmatch http-proxy m=^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-control: no-cache\\r\\nPragma: no-cache\\r\\nCache-control: no-store\\r\\n(?:X-Frame-Options: DENY\\r\\n)?\\r\\n<html><head><title>Burp Suite (Professional|Free Edition)</title>= p/Burp Suite $1 http proxy/ cpe:/a:portswigger:burp_suite:::$1/\nmatch http-proxy m%^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-control: no-cache, no-store\\r\\nPragma: no-cache\\r\\nX-Frame-Options: DENY\\r\\nContent-Type: text/html; charset=utf-8\\r\\nX-Content-Type-Options: nosniff\\r\\n\\r\\n<html><head><title>Burp Suite (Professional|Free Edition)% p/Burp Suite $1 http proxy/ cpe:/a:portswigger:burp_suite:::$1/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad request received from client\\r\\nProxy-Agent: Seeks proxy ([\\w._-]+)\\r\\nContent-Type: text/plain\\r\\nConnection: close\\r\\n\\r\\nBad request\\. Seeks proxy was unable to extract the destination\\.\\r\\n| p/Seeks websearch proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.1 500\\r\\nAlternate-Protocol: 443:quic\\r\\nVary: Accept-Encoding\\r\\nServer: Google Frontend\\r\\nCache-Control: private\\r\\nDate: Thu, 06 Feb 2014 14:10:57 GMT\\r\\nContent-Type: text/html\\r\\n\\r\\n\\n    <html><head>\\n    <meta http-equiv=\\\"content-type\\\" content=\\\"text/html;charset=utf-8\\\">\\n    <title>502 Urlfetch Error</title>| p/GoAgent http proxy/ i/Google App Engine/\nmatch http-proxy m|^HTTP/1\\.1 200 Document follows\\r\\nServer: IBM-PROXY-WTE/([\\w._-]+)\\r\\n| p/IBM WebSphere Edge caching proxy/ v/$1/\nmatch http-proxy m|^HTTP/1\\.0 407 Proxy Authentication Required\\r\\nConnection: close\\r\\nProxy-Connection: close\\r\\nProxy-Authenticate: NTLM\\r\\nContent-Length: \\d+\\r\\nContent-type: text/html\\r\\n\\r\\n<html><head><title>NTLM Authentication Failed</title></head><body><center><table border=0 cellpadding=5 width=65%><tr><td align=middle><!-- \\.{525}--><table border=2 cellpadding=20 bgcolor=#C0C0C0><tr><td>NTLM Authentica| p/Smoothwall proxy/ i/NTLM authentication/\nmatch http-proxy m|^HTTP/1\\.1 400 Received invalid request from Client\\r\\nDate: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html; charset=\\\"UTF-8\\\"\\r\\nContent-Length: \\d+\\r\\nAccept-Ranges: none\\r\\nProxy-Connection: close\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01 Transitional//EN\\\" \\\"http://www\\.w3\\.org/TR/html4/loose\\.dtd\\\">\\n<html>\\n  <head>\\n    <meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\" />\\n    <title>The requested URL could not be retrieved</title>| p|Sophos/Astaro UTM gateway| d/security-misc/ cpe:/a:astaro:security_gateway_software/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Type: application/json; charset=UTF-8\\r\\nContent-Length: 84\\r\\n\\r\\n{\\\"fault\\\":{\\\"faultstring\\\":\\\"\\\\\\\"Missing Host header\\\\\\\"\\\",\\\"detail\\\":{\\\"code\\\":\\\"MISSING_HOST\\\"}}}| p/Apigee API proxy/\nmatch http-proxy m|^HTTP/1\\.0 400 badrequest\\r\\nVia: 1\\.0 ([\\w.-]+) \\(McAfee Web Gateway ([\\w._-]+)\\)\\r\\nConnection: Close\\r\\n| p/McAfee Web Gateway/ v/$2/ i/Via $1/ cpe:/a:mcafee:web_gateway:$2/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Length: 113\\r\\nDate: .*\\r\\nExpires: 0\\r\\n\\r\\n<html>\\n<head><title>Error 400: Bad Request</title></head>\\n<body>\\n<h1>Error 400: Bad Request</h1>\\n</body>\\n</html>\\n| p/Mikrotik HotSpot http proxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Host Required In Request\\r\\nDate: .*\\r\\nConnection: close\\r\\nCache-Control: no-store\\r\\nContent-Type: text/html\\r\\nContent-Language: en\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HTML>\\n<HEAD>\\n<TITLE>Host Header Required</TITLE>\\n</HEAD>\\n\\n<BODY BGCOLOR=\\\"white\\\" FGCOLOR=\\\"black\\\">\\n<H1>Host Header Required</H1>\\n<HR>\\n\\n<FONT FACE=\\\"Helvetica,Arial\\\">| p/Cyberoam UTM http proxy/\nmatch http-proxy m|^HTTP/1\\.1 504 Gateway Timeout\\r\\nContent-Length: 15\\r\\nContent-Type: text/plain;\\r\\n\\r\\nZAP Error: null| p/OWASP Zed Attack Proxy/\nmatch http-proxy m|^HTTP/1\\.1 502 Bad Gateway\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/plain; charset=UTF-8\\r\\n\\r\\nZAP Error \\[java\\.net\\.UnknownHostException\\]: null| p/OWASP Zed Attack Proxy/\nmatch http-proxy m|^HTTP/1\\.0 502\\r\\nContent-type: text/html\\r\\nContent-length: \\d+\\r\\nproxy-Connection: close\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n\\t<title>Spybot - Connection refused</title>\\r\\n| p/Spybot Search & Destroy/ o/Windows/ cpe:/a:safer-networking:spybot_search_and_destroy/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 407 Proxy Authentication Required\\r\\nContent-Length: 36\\r\\nContent-Type: text/html; charset=UTF-8\\r\\naw-error-code: 1\\r\\n\\r\\nMissing \\[Proxy-Authorization\\] header| p/AirWatch Mobile Access Gateway/ d/proxy server/ cpe:/a:airwatch:mobile_access_gateway/\nmatch http-proxy m|^HTTP/1\\.1 407 Proxy Authentication Required\\r\\naw-error-code: 1\\r\\n\\r\\n$| p/AirWatch Mobile Access Gateway/ d/proxy server/ cpe:/a:airwatch:mobile_access_gateway/\nmatch http-proxy m|^HTTP/1\\.0 404 Not Found\\r\\nServer: Traffic Manager ([\\w._-]+)\\r\\nDate: .*\\r\\nCache-Control: no-store\\r\\nPragma: no-cache\\r\\nContent-type: application/x-ns-proxy-autoconfig\\r\\n| p/Apache Traffic Server/ v/$1/ d/proxy server/ cpe:/a:apache:traffic_server:$1/\n# version 10.2.4\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>Request Rejected</title></head><body>The requested URL was rejected\\. Please consult with your administrator\\.<br><br>Your support ID is: \\d+</body></html>| p/F5 BIG-IP Application Security Module/ d/load balancer/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nMime-Version: 1\\.0\\r\\nDate: .*\\r\\nVia: 1\\.0 ([\\w.-]+):\\d+ \\(Cisco-WSA/([\\w._-]+)\\)\\r\\n| p/Cisco Web Security Appliance/ i/Gateway Timeout/ o/AsyncOS $2/ h/$1/ cpe:/o:cisco:asyncos:$2/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d [^\\r\\n]+\\r\\nDate: [^\\r\\n]+\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html; charset=\"UTF-8\"\\r\\nContent-Length: \\d+\\r\\nAccept-Ranges: none\\r\\nConnection: close\\r\\n\\r\\n.*href=\"http://passthrough\\.fw-notify\\.net/|s p/Sophos UTM http proxy/ d/security-misc/ cpe:/a:sophos:unified_threat_management/\nmatch http-proxy m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nServer: xxxx\\r\\nLocation: http:///httpclient\\.html\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=iso-8859-1\\r\\n\\r\\n| p/Cyberoam captive portal/\nmatch http-proxy m|^HTTP/1\\.1 403 No Protocol\\r\\nX-Hola-Error: No Protocol\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n$| p/Hola VPN http-proxy/ cpe:/a:hola:hola/\nmatch http-proxy m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Traffic Inspector HTTP/FTP/Proxy server \\(([\\d.]+)\\)\\r\\n|s p/Traffic Inspector http proxy/ v/$1/ o/Windows/ cpe:/a:smart-soft:traffic_inspector:$1/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Sucuri/Cloudproxy\\r\\nDate: .* GMT\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\nETag: \"[a-f\\d-]+\"\\r\\n\\r\\n<!DOCTYPE html>\\n\\n<html lang=\"en\">\\n\\n| p/Sucuri CloudProxy/\nmatch http-proxy m|^HTTP/1\\.0 30[12] .*\\r\\nLocation: https?:///[^\\r\\n]*\\r\\nServer: LBaaS\\r\\n| p/OpenStack Neutron LBaaS load balancer/ cpe:/a:openstack:neutron-lbaas/\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\nEtag: \"[a-f\\d]{40}\"\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nServer: Protegrity Cloud Gateway ([\\d.]+)\\r\\n\\r\\nProtegrity Cloud Gateway ([\\w._-]+)<BR>| p/Protegrity Cloud Gateway/ v/$1/ h/$2/ cpe:/a:protegrity:cloud_gateway:$1/\nmatch http-proxy m|^HTTP/1\\.1 502 Bad Gateway\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2\\.0//EN\">\\r\\n<html>\\r\\n<head><title>502 Bad Gateway</title></head>\\r\\n<body bgcolor=\"white\">\\r\\n<h1>502 Bad Gateway</h1>\\r\\n<p>The proxy server received an invalid response from an upstream server\\. Sorry for the inconvenience\\.<br/>\\r\\nPlease report this message and include the following information to us\\.<br/>\\r\\nThank you very much!</p>\\r\\n<table>\\r\\n<tr>\\r\\n<td>URL:</td>\\r\\n<td>[^<]*</td>\\r\\n</tr>\\r\\n<tr>\\r\\n<td>Server:</td>\\r\\n<td>([^<]+)</td>\\r\\n</tr>\\r\\n<tr>\\r\\n<td>Date:</td>\\r\\n<td>[^<]+</td>\\r\\n</tr>\\r\\n</table>\\r\\n<hr/>Powered by Tengine</body>\\r\\n</html>\\r\\n$|s p/Tengine http proxy/ h/$1/ cpe:/a:alibaba:tengine/\nmatch http-proxy m|^HTTP/1\\.0 404 Not Found\\r\\nServer: BigIP\\r\\nConnection: close\\r\\n| p/F5 BIG-IP load balancer/ d/load balancer/\nmatch http-proxy m|^HTTP/1\\.0 503 Service Unavailable\\r\\nContent-Type: text/html\\r\\nContent-Length: 5\\d\\r\\nExpires: now\\r\\nPragma: no-cache\\r\\nCache-control: no-cache,no-store\\r\\n\\r\\nThe service is not available\\. Please try again later\\.| p/Pound http reverse proxy/ cpe:/a:apsis:pound/\nmatch http-proxy m|^HTTP/1\\.0 302 Found\\r\\nLocation: .*\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html><head><title>Redirect</title></head><body><h1>Redirect</h1><p>You should go to <a href=\"[^\"]+\">here</a></p></body></html>| p/Pound http reverse proxy/ cpe:/a:apsis:pound/\nmatch http-proxy m|^HTTP/1\\.0 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nContent-Length: 2\\d\\r\\nExpires: now\\r\\nPragma: no-cache\\r\\nCache-control: no-cache,no-store\\r\\n\\r\\nThis method may not be used\\.| p/Pound http reverse proxy/ cpe:/a:apsis:pound/\nmatch http-proxy m|^HTTP/1\\.0 403 Forbidden\\r\\nConnection: close\\r\\nContent-Length: 51\\r\\nContent-type: text/html\\r\\n\\r\\nAccess denied: authentication configuration missing| p/Smoothwall http proxy/ d/firewall/ cpe:/o:smoothwall:smoothwall/\nmatch http-proxy m|^HTTP/1\\.1 407 Proxy Authentication Required\\r\\nProxy-Authenticate: Basic realm=\"Hola Unblocker\"\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n| p/Hola Unblocker http proxy/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Length: 21\\r\\nContent-Type: text/html; charset=utf-8\\r\\nVia: 1\\.1 ([\\w.-]+)\\r\\nDate: .*\\r\\n\\r\\nBad Request to URI: /| p/LittleProxy http proxy/ h/$1/ cpe:/a:adamfisk:littleproxy/\n\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\n\\r\\n$| p/sslstrip/\n\n# No info on what this is yet\nsoftmatch http-proxy m|^HTTP/1\\.1 400 Bad request\\r\\nContent-Length: 53\\r\\nContent-Type: text/html\\r\\n\\r\\nCan't do transparent proxying without a Host: header\\.|\n\nsoftmatch http-proxy m|^HTTP/1.[01] 407 | i/proxy authentication required/\nsoftmatch http-proxy m|^HTTP/1.[01] 502 | i/bad gateway/\n\nmatch hnap m|^HTTP/1\\.[01] *200 OK.*\\r\\n\\r\\n<\\?xml.*<soap:Envelope.*<(?:\\w+:)?Type>([^<]+)</(?:\\w+:)?Type>.*<(?:\\w+:)?VendorName>([^<]+)</(?:\\w+:)?VendorName>.*<(?:\\w+:)?ModelName>([^<]+)</(?:\\w+:)?ModelName>.*<(?:\\w+:)?FirmwareVersion>([^<]+)</(?:\\w+:)?FirmwareVersion>|s p/$2 HNAP/ v/$4/ i/device: $1; model: $3/\n\n# http://www.everyhue.com/vanilla/discussion/112/other-open-ports-on-the-bridge/p1\nmatch hue-link m|^GET  HTTP1\\.0\\n\\n$| p|Philips Hue link/debug|\n\n# http://foolscap.lothar.com/\nmatch foolscap m|^HTTP/1\\.1 500 Internal Server Error: internal server error, see logs\\r\\n\\r\\n| p/foolscap RPC/\n\nmatch icontrolav2 m|^E04\\r\\n$| p/Pioneer iControlAV2 control port/ d/media device/\n\n# Also \"Zimbra Network edition 6.0 IMAP server.\"\nmatch imap-proxy m|^\\* OK IMAP4 ready\\r\\nGET BAD invalid command\\r\\n| p/nginx imap proxy/\nmatch imap-proxy m|^\\* OK IMAP4rev1 proxy server ready\\r\\nGET BAD invalid command\\r\\n| p/Zimbra imapd/\n\nmatch magent m|^Agent Ready\\.\\.\\.\\r\\n| p/MicroWorld mwagent.exe/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch magent m|^Agent Ready\\.\\.\\.\\r\\nGET / HTTP/1\\.0\\r\\n\\r\\nGET 501 command not implemented ERROR\\r\\n| p/MicroWorld mwagent.exe/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch magent m|^Agent Ready v([\\w._]+)+\\.\\.\\.(?:\\[[\\w._-]+\\])\\r\\nGET / HTTP/1\\.0 501 command not implemented ERROR\\r\\n 501 command not implemented ERROR\\r\\n| p/MicroWorld mwagent.exe/ v/$1/ i/eScan antivirus management console/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch mapreduce m|name:\\x20mapreduce\\r\\nversion:\\x20(.+)\\r\\n\\r\\n| p/Hadoop MapReduce/ v/$1/ cpe:/a:hadoop:mapreduce:$1/\nmatch mas-financial m|^409 Invalid Protocol PVXAS/1\\.0\\r\\n| p/MAS200 Financial System/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch mas-financial m|^The Host cannot run the specified program\\.$| p/MAS200 Financial System/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch mep m|^\\x10\\0\\0\\0\\xa5\\xa5\\0\\0.\\0${backquote}\\x01\\0\\0\\0\\0|s p/Citrix NetScaler Metric Exchange Protocol/ d/load balancer/\n\n# Expect MassTransit will also match with some variation.\nmatch mtap m|^WATSON!WATSON!\\x13Tx\\xa3\\xfee\\xc0\\x9b\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0v\\0\\0\\0\\0\\x84\\x84\\0\\x02\\0\\x13\\0\\xd9\\0\\0\\0\\x16\\x13Virtual Network ([\\d.]+)\\0| p/Adobe Virtual Network/ v/$1/ cpe:/a:adobe:virtual_network:$1/\n\n# Another implementation (Bukkit?) with the same matchline doesn't respond to GetRequest.\nmatch minecraft m|^\\xff\\0\\x0e\\0P\\0r\\0o\\0t\\0o\\0c\\0o\\0l\\0 \\0e\\0r\\0r\\0o\\0r$| p/Spigot Minecraft game server/\n\n# http://www.mobilemouse.com/\nmatch mobilemouse m|^HTTP/1\\.0 200 OK \\r\\nServer: Mobile Air Mouse Server\\r\\n.*>The Mobile Air Mouse server running on \\\"([\\w._-]+)\\\"|s p/Mobile Air Mouse server/ h/$1/\n\n# https://en.wikipedia.org/wiki/Modbus\nmatch modbus m|^GET [\\0/]\\x03H\\xd4[\\x01-\\x03]| p/Modbus TCP/\nmatch modbus m|^GET [\\0/]\\x03H\\xd4[\\x0a-\\x0b]| p/Modbus TCP/ i/gateway/\nmatch modbus m|^GE\\0\\0\\0\\x03H\\xd4[\\x01-\\x03]| p/Modbus TCP/\nmatch modbus m|^GE\\0\\0\\0\\x03H\\xd4[\\x0a-\\x0b]| p/Modbus TCP/ i/gateway/\n\n# In 2.5.1, the HTTP server was disabled by default\nsoftmatch mongodb m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\nContent-Length: 116\\r\\n\\r\\nYou are trying to access MongoDB on the native driver port\\. For http diagnostic access, add 1000 to the port number\\n| p/MongoDB/ v/2.5.0 or earlier/ cpe:/a:mongodb:mongodb/\nsoftmatch mongodb m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\nContent-Length: 84\\r\\n\\r\\nIt looks like you are trying to access MongoDB over HTTP on the native driver port\\.\\n| p/MongoDB/ v/2.5.1 or later/ cpe:/a:mongodb:mongodb/\n\nmatch motorola-devmgr m|^GET / HT\\xff\\xff\\xff\\xff$| p/Motorola Device Manager/ cpe:/a:motorola:device_manager/\n\nmatch mrtgext-nlm m|^-1\\n-1\\n-1\\n$| p/Novell NetWare MRTGEXT NLM Statistics/ o/NetWare/ cpe:/o:novell:netware/a\n\nmatch msn m|^{?Syntax Error : GET / HTTP/1\\.0}? error\\r\\n$| p/amsn/\nmatch msn m|^{?Erreur de syntaxe : GET / HTTP/1\\.0}? error\\r\\n$| p/amsn/ i/French/\nmatch msn m|^{? ?Erro de sintaxe : GET / HTTP/1\\.0}? error\\r\\n$| p/amsn/ i/Portugese/\nmatch msn m|^{?Errore di sintassi : GET / HTTP/1\\.0}? error\\r\\n$| p/amsn/ i/Italian/\n\n# http://www.icbevr.com/ibank/ibank2/\n# byte 8 is a counter, so \\x18 in byte 7 may also increment?\nmatch ibank2 m|^\\x02\\0\\0\\x01E\\(\\x18.{25}$|\n\nmatch icap m|^ICAP/1\\.0 501 Method not implemented.*\\r\\nServer: IronNet/([\\d.]+)\\r\\n\\r\\n|s p/IronNet Compliance Application/ v/$1/\nmatch icap m|^ICAP/1\\.0 501 Method not implemented.*\\r\\nService: ProxyAV AV scanner ([^\\r\\n]+)\\r\\n|s p/Blue Coat ProxyAV/ v/$1/\nmatch icap m|^ICAP/1\\.0 501 Other\\r\\nServer: Traffic Spicer ([\\d.]+)\\r\\n| p/Traffic Spicer icapd/ v/$1/\nmatch icap m|^ICAP/1\\.0 501 Method not implemented\\r\\nConnection: close\\r\\n\\r\\n$| p/Symantec DLP Web Prevent icapd/\nmatch icap m|^ICAP/1\\.0 400 Bad request\\r\\nServer: C-ICAP/([\\w._-]+)\\r\\nConnection: close\\r\\n\\r\\n$| p/C-ICAP/ v/$1/\nsoftmatch icap m|^ICAP/1\\.0 \\d\\d\\d |\n\n# gidentd 0.4.5 on Linux 2.4.X\nmatch ident m|^0, 0 : ERROR : INVALID-PORT\\r\\n$| p/gidentd/\nmatch ident m|^GET / HTTP/1\\.0 : USERID : UNIX : ([-.\\w]+)\\r\\n : USERID : UNIX : [-.\\w]+\\r\\n| p/Nullidentd/ i/Claimed user: $1/\nmatch ident m|^GET / HTTP/1\\.0 : USERID : UNIX : ([-.\\w]+)\\r\\n$| p/Liedentd/ i/Claimed user: $1/\n# pidentd 2.81\nmatch ident m|^0 , 0 : ERROR : X-INVALID-REQUEST\\r\\n$| p/pidentd/\n# pidentd 3.1a25 on Linux 2.4.20 (SuSE 8.2)\nmatch ident m|^GET : ERROR : UNKNOWN-ERROR\\r\\n$| p/pidentd/\nmatch ident m|^0, 0 : ERROR : INVALID-AUTH-REQ-INFO : CAPABILITY=USER-INTERACTION : AUTH-MECH=KEBEROS_V4\\r\\n$| p/Stanford PC-leland identd/\n# fair-identd-20000201\n# pidentd-2.8.5-3\nmatch ident m|^0 , 0 : ERROR : UNKNOWN-ERROR\\r\\n$| p/pidentd/ i/could be fair-identd/\n# identd 1.1 on Linux 2.4.21\n# linux-identd 1.2 - http://www.fukt.bth.se/~per/identd\nmatch ident m|^GET / HTTP/1\\.0 : ERROR : INVALID-PORT\\r\\n : ERROR : INVALID-PORT\\r\\n$| p/Linux-identd/ o/Linux/ cpe:/o:linux:linux_kernel/a\n# HP-UX ident\nmatch ident m|^0 , 0 : ERROR : INVALID-PORT\\r\\n| p/HP-UX identd/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch ident m|^GET / HTTP/1\\.0 : USERID : UNIX : [^\\r\\n]+\\r\\n| p/KVIrc fake identd/\n\n# uw-imap 2003debian0.0304182231-1\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4REV1 X-NETSCAPE LOGIN-REFERRALS STARTTLS LOGINDISABLED\\] \\[[-.\\w]+\\] IMAP4rev1 200[-.\\w]+ at .*\\r\\nGET BAD Command unrecognized/login please: /\\r\\n\\* BAD Null command\\r\\n| p/UW imapd/ cpe:/a:uw:imap_toolkit/\nmatch imap m|^\\* OK \\[[-.+\\w]+\\] IMAP4rev1 v1(\\d[-.\\w]+) server ready\\r\\n| p/UW imapd/ v/1$1/ cpe:/a:uw:imap_toolkit:1$1/\nmatch imap m|^\\* OK ([-.+\\w]+) IMAP4rev1 v1(\\d[-.\\w]+) server ready\\r\\n| p/UW imapd/ v/1$2/ h/$1/ cpe:/a:uw:imap_toolkit:1$2/\n# gnu/mailutils imap4d 0.3.2 on Linux\nmatch imap m|^\\* OK IMAP4rev1\\r\\nGET BAD  Invalid command\\r\\n\\* BAD  Null command\\r\\n$| p/GNU Mailutils imapd/ cpe:/a:gnu:mailutils/\n# Cyrus IMAP 2.1.14\nmatch ssl/imap m|^\\* BYE Fatal error: tls_start_servertls\\(\\) failed\\r\\n$| p/Cyrus imapd/ cpe:/a:cmu:cyrus_imap_server/\nmatch imap m|^\\* OK ([-\\w_.]+)\\r\\nGET BAD Error in IMAP command received by server\\.\\r\\n\\* BAD Error in IMAP command received by server\\.\\r\\n| p/Dovecot imapd/ h/$1/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK .*\\r\\nGET BAD Error in IMAP command received by server\\.\\r\\n\\* BAD Error in IMAP command received by server\\.\\r\\n| p/Dovecot imapd/ cpe:/a:dovecot:dovecot/\n# Too general -- also matches Cyrus imapd 2.3.9.\n# match imap m|^\\* OK .*\\r\\nGET BAD Please login first\\r\\n| p/Dovecot imapd/ i/auth required/ cpe:/a:dovecot:dovecot/\nmatch imap m|^\\* OK IMAP4 IMAP4rev1 Server\\r\\nGET BAD Unrecognised Command\\r\\n| p/Floosietek FTgate imapd/\nmatch imap m|^\\* OK IMAP4r1 server \\[([-\\w_.]+)\\] ready\\r\\nGET BAD Protocol Error: \\\"Unidentifiable command specified\\\"\\.\\r\\n\\* BAD Protocol Error: \\\"Tag not found in command\\\"\\.\\r\\n| p/Microsoft Exchange imapd/ i/Version masked/ o/Windows/ h/$1/ cpe:/a:microsoft:exchange_server/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK IMAP4rev1 server ready at \\d\\d/\\d\\d/\\d\\d \\d?\\d:\\d\\d:\\d\\d\\r\\nGET BAD UNKNOWN Command\\r\\n\\r\\n BAD UNKNOWN Command\\r\\n| p/MailEnable imapd/ o/Windows/ cpe:/a:mailenable:mailenable/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK IMAP4rev1 server ready\\r\\nGET BAD Unknown command '/'\\r\\n BAD Unknown command ''\\r\\n| p/Kerio imapd/\nmatch imap m|^\\* OK Gimap ready for requests from [\\d\\.]+ ([\\w\\d]+)| p/Google Gmail imapd/ i/$1/\nmatch imap m|^\\* OK .*IMAP4rev1 Server Completed\\r\\nGET BAD Protocol Error: Invalid IMAP command specified\\r\\n| p/Cisco imapd/\n# embyte\nmatch imap m|^\\* OK  MailSite IMAP4 Server ([-.\\w]+) ready| p/MailSite imapd/ v/$1/\nmatch imap m|^\\* OK ([\\w._-]+) Welcome \\(cimap\\)\\r\\nGET BAD Invalid command \\(/\\)\\r\\n\\* BAD - command line Insufficient tokens \\(\\)\\r\\n| p/SurgeMail imapd/ h/$1/ cpe:/a:netwin:surgemail/\nmatch imap m|^GET NO Error in IMAP command received by server\\.\\r\\n| p/cPanel Courier imapd/\nmatch imap m|^\\* OK .*\\r\\nGET BAD Unknown or NULL command\\r\\n BAD NULL COMMAND\\r\\n| p/hMailServer imapd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK ([\\w._-]+)\\r\\nGET BAD Unknown or NULL command\\r\\n BAD NULL COMMAND\\r\\n| p/hMailServer imapd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 [^]]*\\]\\r\\nGET NO Error in IMAP command received by server\\.\\r\\n\\* NO Error in IMAP command received by server\\.\\r\\n| p/Plesk Courier imapd/\nmatch imap m|^\\* OK \\[CAPABILITY IMAP4rev1 [^]]*\\] ([\\w.-]+) server ready\\r\\nGET BAD Please login first\\r\\n\\* BAD Invalid tag\\r\\n| p/Cyrus imapd/ h/$1/ cpe:/a:cmu:cyrus_imap_server/\n\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/xml; charset=utf-8\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?><services xmlns:xsi=\\\"http://www\\.w3\\.org/2001/XMLSchema-instance\\\" xsi:noNamespaceSchemaLocation=\\\"http://www\\.intersystems\\.com/services/schema/2009\\.2\\\"/>$| p/InterSystems Cache httpd/\nmatch intermec-bri m|^ERR UNAVAILABLE\\r\\nOK>\\r\\nOK>\\r\\n| p/Intermec Basic Reader Interface/\n\n# Server: CUPS/1.1\nmatch ipp m|^HTTP/1\\.0 \\d\\d\\d .*<TITLE>Home - CUPS ([\\d.]+)</TITLE>.*SUMMARY=\\\"Common UNIX Printing System|s p/CUPS/ v/$1/ cpe:/a:apple:cups:$1/\nmatch ipp m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CUPS/([-\\w_.]+)|s p/CUPS/ v/$1/ cpe:/a:apple:cups:$1/\nmatch ipp m|^lpd \\[@[-.\\w]+\\]: Host name for your address \\([:.\\d]+\\) is not known\\n$| p/CUPS/ cpe:/a:apple:cups/\nmatch ipp m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: EPSON-IPP/([\\d.]+)\\r\\nContent-Type: application/ipp\\r\\nContent-Length: \\d+\\r\\n\\r\\n| p/Epson ippd/ v/$1/ d/print server/\nmatch ipp m|^HTTP/1\\.1 411 Length Required\\r\\nSERVER: EpsonNet IPP-SERVER/([\\w._-]+)\\r\\nCONTENT-LENGTH: 0\\r\\n\\r\\n| p/Epson ippd/ v/$1/ i/AL-C2800 printer/ d/printer/\nmatch ipp m|^HTTP/1\\.0 404 Not Found\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nContent-Type: text/html\\r\\nContent-Length: 91\\r\\nServer: Web-Server/([\\d.]+)\\r\\n\\r\\n<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD>\\n<BODY><H1>404 Not Found</H1></BODY></HTML>\\0| p/Web-Server httpd/ v/$1/ i/NRG copier or Ricoh Aficio printer http config/ d/printer/\nmatch ipp m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 89\\r\\nServer: Web-Server/([\\d.]+)\\r\\n\\r\\n<html><head><title>404 Not Found</title></head><body><h1>404 Not Found</h1></body></html>$| p/Web-Server httpd/ v/$1/ i/NRG copier or Ricoh Aficio printer http config/ d/printer/\nmatch ipp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: CANON HTTP Server Ver(\\d[-.\\w ]+)\\r\\n| p/Canon printer http config/ v/$1/\nmatch ipp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Canon Http Server (\\d[-.\\w ]+)\\r\\n| p/Canon printer http config/ v/$1/\nmatch ipp m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><META HTTP-EQUIV=\\\"Content-type\\\" CONTENT=\\\"text/html; charset=iso-8859-1\\\">\\r\\n<TITLE>IBM Infoprint Color (\\d+)</TITLE>| p/IBM Infoprint Color $1 ippd/ d/printer/ cpe:/h:ibm:infoprint_color_$1/\nmatch ipp m|^HTTP/1\\.1 301 Moved Permanently\\r\\nServer: Virata-EmWeb/R([\\w_]+)\\r\\nLocation: https://[\\d.]+/\\r\\nContent-Type: text/html\\r\\nContent-Length: 90\\r\\n\\r\\nMoved\\r\\n| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP Laserjet 4200TN http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:laserjet_4200tn/a\nmatch ipp m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><META HTTP-EQUIV=\\\"Content-type\\\" CONTENT=\\\"text/html; charset=iso-8859-1\\\">\\r\\n<TITLE>Dell Laser Printer 1700n</TITLE>| p/Dell Laser Printer 1700n ippd/ d/printer/ cpe:/h:dell:1700n/\nmatch ipp m|^HTTP/1\\.0 \\d\\d\\d .*<TITLE>Common UNIX Printing System</TITLE>.*HREF=\\\"http://www\\.easysw\\.com\\\" ALT=\\\"Easy Software Products Home Page\\\">\\n|s p/Easy Software Products CUPS/\nmatch ipp m|^<HEAD><TITLE>Not Found</TITLE></HEAD><BODY><H1><B>Not Found</B></H1><P>The requested URL \\\"\\\"was not found on this server\\.</BODY>\\r\\n| p/Epson 980N Printer/ d/printer/ cpe:/h:epson:980n/a\nmatch ipp m|^HTTP/1\\.0 400 Bad Request\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n(?:; charset=utf-8)?\\r\\nContent-Length: \\d+\\r\\nCache-Control: (?:max-age=0, no-store, )?no-cache\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3\\.2//EN\">\\n<HTML>\\n<HEAD>\\n<TITLE>Invalid Request</TITLE>\\n</HEAD>\\n\\n<BODY BGCOLOR=\"#FFFFFF\" TEXT=\"#000000\">\\n<CENTER>\\n<FONT SIZE=\"\\+2\" COLOR=\"#FFFFFF\" ALIGN=\"Center\">\\n</FONT>\\n<B>Invalid Request\\. Some Error</B>\\n</BODY>\\n\\n</HTML>\\n\\n| p/Xerox or Samsung ipp/ d/printer/\nmatch ipp m|^HTTP/1\\.0 404 Not found\\r\\n\\r\\n404 Not found$| p/Xerox WorkCentre IPP/ d/printer/\nmatch ipp m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nContent-Language: C\\r\\nUpgrade: TLS/1\\.0,HTTP/1\\.1\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 138\\r\\n\\r\\n<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>Not Found</H1>The requested resource was not found on this server\\.</BODY></HTML>\\n| p/Thecus N5200 IPP/ d/storage-misc/ cpe:/h:thecus:n5200_nas_server/\nmatch ipp m|^HTTP/1\\.1 200 OK\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><META HTTP-EQUIV=\\\"REFRESH\\\" CONTENT=\\\"0; URL=http://[\\d.]+/\\\"></HEAD><BODY><P>For more printserver info please open the <A HREF=\\\"http://[\\d.]+/\\\">[\\d.]+</A> home page</BODY></HTML>$| p/Kyocera Mita KM-1530 IPP/ d/printer/ cpe:/h:kyocera:mita_km-1530/\nmatch ipp m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nContent-Type: text/html\\r\\nCache-Control: public,max-age=86400\\r\\nPragma: cache\\r\\nExpires: .*\\r\\nDate: .*\\r\\nLast-Modified: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\n\\r\\n| p/Netia Spot ipp/ d/broadband router/\nmatch ipp m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/plain; charset=UTF-8\\r\\n\\r\\nreturn_code=FCS9015\\?error_text=This server does not support this API\\.| p/PrinterOn Print Delivery Gateway ipp/ cpe:/a:printeron:print_delivery_gateway/\n# Fuji Xerox DocuCentre-V C4475 T2\nmatch ipp m|^HTTP/1\\.0 301 Moved Permanently\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nLocation: http:///\\r\\nContent-Length: 109\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>301 Moved Permanently</title></head>\\t\\t<body><h1>301 Moved Permanently</h1></body></html>\\r\\n| p/Fuji Xerox DocuCentre-V ipp/ d/printer/\nmatch ipp m|^HTTP/1\\.1 403 Forbidden\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 89\\r\\nServer: Web-Server/3\\.0\\r\\n\\r\\n<html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1></body></html>| p/Ricoh Aficio printer ipp/ d/printer/\nmatch ipp m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Length: 29\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n 400 Bad Request from Browser| p/Konica Minolta BizHub C224e printer ipp/ d/printer/ cpe:/h:konicaminolta:bizhub_c224e/a\n\nmatch irc m|^:Default-Chat-Community 421 \\* GET :Unknown command\\r\\n| p/Microsoft Exchange 2000 Server Chat Service/ o/Windows/ cpe:/a:microsoft:exchange_server:2000/ cpe:/o:microsoft:windows/a\nmatch irc m|^:([-\\w_.]+) 451  :You have not registered your connection\\r\\n$| p/Wircsrv/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch irc m|^ERROR :Closing Link: \\[[^]]*\\] \\(HTTP command from IRC connection \\(ATTACK\\?\\)\\)\\r\\n| p/UnrealIRCd/ cpe:/a:unrealircd:unrealircd/\nmatch irc m|^HTTP/1\\.0 400 Wrong Port\\r\\nServer: ConferenceRoom/IRC (\\d[\\w._-]+)\\r\\n| p/WebMaster ConferenceRoom ircd/ v/$1/ cpe:/a:webmaster:conferenceroom:$1/\n\nmatch ingrian-xml m|^<GenericError><Success>false</Success><FatalError>101</FatalError><ErrorString>Could not parse client request</ErrorString></GenericError>| p/Ingrian NAE XML daemon/ d/security-misc/\n\n# Jabber 1.4.2\nmatch jabber m|^<stream:stream xmlns:stream='http://etherx\\.jabber\\.org/streams' version='([\\d.]+)'>| p/Jabber instant messaging server/ i/Protocol $1/ cpe:/a:jabberd:jabberd/\nmatch jabber m|^<stream:stream version='([\\d.]+)' from='[\\w._-]+' xmlns:stream='http://etherx\\.jabber\\.org/streams'>| p/Jabber instant messaging server/ i/Protocol $1/ cpe:/a:jabberd:jabberd/\n\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns='jabber:client' xmlns:stream='http://etherx\\.jabber\\.org/streams' id='none' from='([\\w._-]+)' version='([\\d.]+)'>| p/ejabberd/ i/Protocol $2/ h/$1/ cpe:/a:process-one:ejabberd/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns='jabber:client' xmlns:stream='http://etherx\\.jabber\\.org/streams' id='\\d+' from='([\\w._-]+)' version='([\\d.]+)'>| p/ejabberd/ i/Protocol $2/ h/$1/ cpe:/a:process-one:ejabberd/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns:stream='http://etherx\\.jabber\\.org/streams' xmlns='jabber:server' xmlns:db='jabber:server:dialback'| p/ejabberd/ cpe:/a:process-one:ejabberd/\n# ejabberd 16.12\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream id='\\d+' version='1\\.0' xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx\\.jabber\\.org/streams' xmlns='jabber:server'>| p/ejabberd/ cpe:/a:process-one:ejabberd/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns:stream='http://etherx\\.jabber\\.org/streams' xmlns='jabber:component:accept' id='none' from='([-\\w_.]+)'><stream:error><xml-not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>| p/jit-transport jabber-ICQ transport/ h/$1/\nmatch jabber m|^<stream:error>Invalid XML</stream:error>$| p/Jabber instant messaging server/ cpe:/a:jabberd:jabberd/\nmatch jabber m|^<stream:error>Invalid XML</stream:error></stream:stream>$| p/Jabber instant messaging server/ cpe:/a:jabberd:jabberd/\nmatch jabber m|^<stream:error><invalid-xml xmlns='urn:ietf:params:xml:ns:xmpp-streams'/><text xmlns='urn:ietf:params:xml:ns:xmpp-streams' xml:lang='en'>Invalid XML</text></stream:error>| p/jabberd instant messaging server/ cpe:/a:jabberd:jabberd/\nmatch jabber m|^<\\?xml version=\\\"1\\.0\\\"\\?><stream:stream id=\\\"none\\\" from=\\\"([\\w._-]+)\\\" xmlns=\\\"jabber:client\\\" xmlns:stream=\\\"http://etherx\\.jabber\\.org/streams\\\" version=\\\"1\\.0\\\"><stream:error><xml-not-well-formed xmlns=\\\"urn:ietf:params:xml:ns:xmpp-streams\\\"/></stream:error></stream:stream>$| p/Facebook Chat XMPP/ h/$1/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream id='' xmlns:stream='http://etherx\\.jabber\\.org/streams' version='1\\.0' xmlns='jabber:server'><stream:error><xml-not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>$| p/Prosody Jabber server/ v/0.7.0 or older/ cpe:/a:prosody:prosody/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream id='' xmlns:stream='http://etherx\\.jabber\\.org/streams' version='1\\.0' xmlns='jabber:client'><stream:error><xml-not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>$| p/Prosody Jabber client/ v/0.7.0 or older/ cpe:/a:prosody:prosody/\n# 0.8.0 changed \"xml-not-well-formed\" to \"not-well-formed\"\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream id='' xmlns:stream='http://etherx\\.jabber\\.org/streams' version='1\\.0' xmlns='jabber:server'><stream:error><not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>$| p/Prosody Jabber server/ v/0.8.0 or newer/ cpe:/a:prosody:prosody/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream id='' xmlns:stream='http://etherx\\.jabber\\.org/streams' version='1\\.0' xmlns='jabber:client'><stream:error><not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>$| p/Prosody Jabber client/ v/0.8.0 or newer/ cpe:/a:prosody:prosody/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns:stream='http://etherx\\.jabber\\.org/streams' xmlns='jabber:client' version='1\\.0' id=''><stream:error><not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>$| p/Prosody Jabber client/ v/0.8.0 or newer/ cpe:/a:prosody:prosody/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns:stream='http://etherx\\.jabber\\.org/streams' xmlns='jabber:server' version='1\\.0' id=''><stream:error><not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>$| p/Prosody Jabber server/ v/0.8.0 or newer/ cpe:/a:prosody:prosody/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns:stream='http://etherx\\.jabber\\.org/streams' xml:lang='en' xmlns:db='jabber:server:dialback' xmlns='jabber:server'><stream:error><not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>| p/Prosody Jabber server/ cpe:/a:prosody:prosody/\n# 0.10\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx\\.jabber\\.org/streams' xml:lang='en' id='' xmlns='jabber:server'><stream:error><not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>| p/Prosody Jabber server/ cpe:/a:prosody:prosody/\n# empty id removed\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns:stream='http://etherx\\.jabber\\.org/streams' xml:lang='en' xmlns='jabber:client'><stream:error><not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>| p/Prosody Jabber client/ cpe:/a:prosody:prosody/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns:stream='http://etherx\\.jabber\\.org/streams' xml:lang='en' xmlns='jabber:server'><stream:error><not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>| p/Prosody Jabber server/ cpe:/a:prosody:prosody/\n# empty from and to attributes added\n# 0.9.8\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns:stream='http://etherx\\.jabber\\.org/streams' xml:lang='en' from='' xmlns:db='jabber:server:dialback' to='' xmlns='jabber:server'><stream:error><not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>| p/Prosody Jabber server/ i/dialback/ cpe:/a:prosody:prosody/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx\\.jabber\\.org/streams' xml:lang='en' from='' to='' xmlns='jabber:server'><stream:error><not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>| p/Prosody Jabber server/ i/dialback/ cpe:/a:prosody:prosody/\n\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns='jabber:client' xmlns:stream='http://etherx\\.jabber\\.org/streams' id='error-id'><stream:error><invalid-xml xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>| p/Isode M-Link Jabber client/ cpe:/a:isode:m-link/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns='jabber:server' xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx\\.jabber\\.org/streams' id='error-id'><stream:error><invalid-xml xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>| p/Isode M-Link Jabber server/ cpe:/a:isode:m-link/\n\nmatch jabber m|^<\\?xml version='1\\.0' encoding='UTF-8'\\?>\\n<stream:stream xmlns='jabber:client' xmlns:stream='http://etherx\\.jabber\\.org/streams' from=\\\"\\\" version=\\\"1\\.0\\\">\\n<stream:features/>$| p/Empathy Jabber client/\nmatch jabber m|^<\\?xml version='1\\.0'\\?><stream:stream xmlns='jabber:client' xmlns:stream='http://etherx\\.jabber\\.org/streams' id='[0-9A-F]{16}' from='[^']*' version='1\\.0'><stream:error><xml-not-well-formed xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>| p/MongooseIM/ cpe:/a:erlang-solutions:mongooseim/\n\nmatch james-admin m|^JAMES Remote Administration Tool ([\\d.]+)\\nPlease enter your login and password\\nLogin id:\\n| p/JAMES Remote Admin/ v/$1/\n\nmatch jicp m|^d\\x08\\x1c\\0\\0\\0Uncorrect JICP data type: 71$| p/Jade Inter Container Protocol/\n\nmatch olsrd-jsoninfo m|^{\\n\\\"links\\\": \\[[^]]*\\]\\n,\\n\\t\\\"neighbors\\\": \\[[^]]*\\]\\n,\\n\\t| p/olsrd jsoninfo plugin/\n\nmatch jxta m|^JXTAHELLO tcp://[\\d.]+:\\d+ tcp://[\\d.]+:\\d+ | p/JXTA P2P Collaboration daemon/\n\nmatch kazaa-http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: giFT-FastTrack ([\\d.]+)\\r\\nX-Kazaa-Username: giFTed\\r\\nX-Kazaa-Network: ([-.\\w]+)\\r\\n| p/giFTed FastTrack P2P client/ v/$1/ i/network: $2/\nmatch kazaa-http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: giFT-FastTrack ([\\d.]+)\\r\\nX-Kazaa-Username: www\\.k-lite\\.com\\.br\\r\\nX-Kazaa-Network: ([-.\\w]+)\\r\\n| p/K-Lite FastTrack P2P client/ v/$1/ i/network: $2/\n\nmatch kazaa-http m|^HTTP/1\\.0 404 Not Found\\r?\\nX-Kazaa-Username: (\\S+)\\r\\nX-Kazaa-Network: ([-.\\w]+)\\r\\n| p/KaZaA P2P client/ i/username: $1; network: $2/\nmatch kazaa-http m|^HTTP/1\\.[01] 404 Not Found\\r?\\nServer: giFT-FastTrack ([\\d.]+)\\r\\nX-Kazaa-Username: (\\S+)\\r\\nX-Kazaa-Network: ([-.\\w]+)\\r\\n| p/KaZaA P2P client/ v/$1/ i/username: $2; network: $3/\n\nmatch kazaa-peerpoint m|^HTTP/1\\.0 404 Not Found\\n\\r\\n$| p/KaZaA P2P client Peer Point Manager/\n\nmatch kdb m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 107\\r\\n\\r\\n<html><head><title></title><frameset cols=\",\\*\"><frame src=\\?><frame name=v src=\"\\?\"></frameset></head></html>| p/kdb+ http interface/ cpe:/a:kx_systems:kdb%2b/\n\nmatch kerberos-sec m|^\\0\\0\\0.~\\x81.0\\x81..\\x03\\x02\\x01\\x05.\\x03\\x02\\x01\\x1e.\\x11\\x18\\x0f|s p/Mac OS X kerberos-sec/ o/Mac OS X/ cpe:/a:apple:kerberos:5/ cpe:/o:apple:mac_os_x/a\n\nmatch lcdproc m|^huh\\? Invalid command \\\"GET\\\"\\n| p/LCDProc screen interface daemon/\n\nmatch listserv m|^The file name you specified is invalid\\. LISTSERV files have names like\\r\\n\\\"BOARD\\.MINUTES\\\" or \\\"XYZ-L LOG9303\\\" \\(without the quotes\\)\\.\\r\\n| p/LISTSERV Administration service/ cpe:/a:lsoft:listserv/\n\nmatch loadrunner-vts m|^\\x02\\0\\0\\0\\x84\\0\\$\\0\\x03\\0\\x08 \\0\\0\\x06\\0\\x05\\0\\x15Wrong version: 71\\x02\\0\\0\\0\\x81\\0\\x07| p/HP LoadRunner Virtual Table Server/ cpe:/a:hp:loadrunner/\n\nsoftmatch lscp m|^ERR:0:syntax error, unexpected '/' \\(line:1,column:5\\)\\.|\n\nmatch megafillers m|^400 Unknown command\\.\\.\\. Are you surprised\\?\\r\\n$| p/MegaFillers game server/\n\nmatch mogilefs m|^ERR unknown_command Unknown\\+server\\+command\\r\\n| p/MogileFS distributed filesystem/\n\nmatch moneyworks m|^This is MoneyWorks; Server is on Windows\\n$| p/MoneyWorks accounting software/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch mosmig m|^GET \\0\\0\\0\\0TP/1\\.0\\r\\n$| p/OpenMosix Process Migration Service/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\n# MLDonkey 2.5\nmatch napster m|^1INVALID REQUEST$| p/MLDonkey multi-network P2P client/\nmatch napster m|^1$| p/WinMX or Lopster Napster P2P client/\nmatch bittorrent-tracker m|^HTTP/1\\.1 404 Not Found\\r\\nServer: MLdonkey\\r\\nConnection: close\\r\\nContent-Type: application/x-bittorrent\\r\\nContentlength: 0\\r\\n\\r\\n| p/MLDonkey multi-network P2P client/\nmatch bittorrent-tracker m|^HTTP/1\\.1 200 OK\\r\\nServer: MLdonkey/([\\w._-]+)\\r\\nConnection: close\\r\\nContent-length: 53\\r\\n\\r\\nd14:failure reason31:Failure\\(\\\"Incorrect filename 1\\\"\\)e| p/MLDonkey multi-network P2P client/ v/$1/\nmatch bittorrent-tracker m|^HTTP/1\\.1 200 OK\\r\\nServer: MLdonkey\\r\\n| p/MLDonkey P2P client http config/\n# Don't know the server name for this one. It's the same as the \"your file may\n# exist elsewhere in the universe\\nbut alas, not here\" under FourOhFourRequest.\nmatch bittorrent-tracker m|^HTTP/1\\.0 200 OK\\r\\n.*<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.1//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml11/DTD/xhtml11\\.dtd\\\">\\n<html><head><title>BitTorrent download info</title>\\n<link rel=\\\"shortcut icon\\\" href=\\\"/favicon\\.ico\\\">\\n.*<strong>tracker version:</strong> ([\\w._-]+)|s p/BitTornado tracker httpd/ v/$1/\n\nmatch ndb_mgmd m|^result: Unknown command, 'GET / HTTP/1\\.0'\\n\\n| p/MySQL cluster management server/ v/5.1/ cpe:/a:mysql:mysql:5.1/\n\n# Original path was \"/opt/openerp/server/bin/service/netrpc_server\\.py\\\"\nmatch net-rpc m|^     4041\\(lp1\\ncexceptions\\nValueError\\np2\\n\\(S\\\"invalid literal for int\\(\\) with base 10: 'GET / HT'\\\"\\np3\\ntp4\\nRp5\\naS'Traceback \\(most recent call last\\):\\\\n  File \\\"([\\w._/-]+)/netrpc_server\\.py\\\", line 69, in run\\\\n| p/OpenERP NET-RPC/ i/path: $1/ o/Unix/\nmatch net-rpc m|^     5051\\(lp1\\ncexceptions\\nException\\np2\\n\\(Vinvalid literal for int\\(\\) with base 10: 'GET / HT'\\np3\\ntp4\\nRp5\\naS'Traceback \\(most recent call last\\):\\\\n  File \\\"([\\w._/-]+)/netrpc_server\\.py\\\", line 63, in run\\\\n| p/OpenERP NET-RPC/ i/path: $1/ o/Unix/\n\nmatch netbios-ssn m|^\\x83\\0\\0\\x01\\x82\\x7c\\x8f$|\nmatch netwareip m|^\\xfb\\xff\\xfe\\xff\\xfb\\xff\\xfe\\xff\\xfb\\xff\\xfe\\xff$| p|Novell NetWare/IP| o/NetWare/ cpe:/o:novell:netware/a\n\nmatch nimbud-netmon m|^nimbus/([\\d.]+) \\d+ \\d+\\r\\nmtype| p/Nimsoft Nimbus network monitor/ v/$1/\n\nmatch ntrip m|^SOURCETABLE 200 OK\\r\\nServer: NTRIP Caster ([\\w._-]+)/([\\w._-]+)\\r\\nContent-Type: text/plain\\r\\n| p/Ntrip Caster/ v/$1/ i/protocol $2/\n\nmatch giop m|^GIOP\\x01\\0\\x01\\x06\\0\\0\\0\\0$| p/omniORB omniNames/ i/Corba naming service/\n\nmatch obiee m|^\\x0c\\x01\\0\\0\\x03\\0\\0\\0\\x84\\0\\0\\0\\[\\0n\\0Q\\0S\\0E\\0r\\0r\\0o\\0r\\0:\\0 \\x001\\x002\\x000\\x003\\x003\\0\\]\\0 \\0A\\0 \\0c\\0l\\0i\\0e\\0n\\0t\\0 \\0t\\0r\\0i\\0e\\0d\\0 \\0t\\0o\\0 \\0c\\0o\\0n\\0n\\0e\\0c\\0t\\0 \\0t\\0o\\0 \\0a\\0 \\0s\\0e\\0r\\0v\\0e\\0r\\0 \\0t\\0h\\0a\\0t\\0 \\0i\\0s\\0 \\0n\\0o\\0t\\0 \\0o\\0f\\0 \\0t\\0h\\0e\\0 \\0r\\0i\\0g\\0h\\0t\\0 \\0t\\0y\\0p\\0e\\0\\.\\0\\n\\0\\[\\0n\\0Q\\0S\\0E\\0r\\0r\\0o\\0r\\0:\\0 \\x004\\x003\\x001\\x001\\x003\\0\\]\\0 \\0M\\0e\\0s\\0s\\0a\\0g\\0e\\0 \\0r\\0e\\0t\\0u\\0r\\0n\\0e\\0d\\0 \\0f\\0r\\0o\\0m\\0 \\0O\\0B\\0I\\0S\\0\\.\\0| p/Oracle BI Server/\n\nmatch oem-agent m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Connection: Close\\r\\nX-ORCL-EMSV: ([\\d.]+)\\r\\n|s p/Oracle Enterprise Manager Agent httpd/ v/$1/ cpe:/a:oracle:enterprise_manager:$1/\n\nmatch openerp m|^[ \\d]{8}1\\(lp1\\ncexceptions\\nException\\np2\\n\\(Vinvalid literal for int\\(\\) with base 10: 'GET / HT'\\np3\\ntp4\\nRp5\\naS'Traceback \\(most recent call last\\):\\\\n  File \\\"(.*?)/openerp/service/netrpc_server\\.py\\\", line 63, in run\\\\n    msg = ts\\.myreceive\\(\\)\\\\n  File \\\".*?/openerp/tiny_socket\\.py\\\", line 76, in myreceive\\\\n    size = int\\(buf\\)\\\\nValueError: invalid literal for int\\(\\) with base 10: \\\\'GET / HT\\\\'\\\\n'\\np6\\na\\.| p/OpenERP/ v/6.1/ i/install path: $1/\nmatch opinionsquare m|^HTTP/1\\.0 505 HTTP Version not supported\\r\\n\\r\\n$| p/OpinionSquare application/\n\n# http://documents.opto22.com/1465_OptoMMP_Protocol_Guide.pdf\nmatch optommp m|^GET / P\\0\\0\\0\\0\\0| p/OptoMMP/\n\n# Oracle MTS Recovery Service 9.2.0.1 on Windows 2000 Professional\nmatch oracle-mts m|^HTTP/1\\.0 200 OK\\r\\nContent-length: 7\\r\\n\\r\\nunknown$| p/Oracle MTS Recovery Service/\n# Windows 2003\nmatch oracle-mts m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-length: 15\\r\\nContent-type: text/html\\r\\n\\r\\n400 Bad Request$| p/Oracle MTS Recovery Service/\n\nmatch oracle-nm m|^-ERR Invalid command name 'GET'\\r\\n-ERR Invalid command name ''\\r\\n| p/Oracle WebLogic Server Node Manager/ cpe:/a:oracle:weblogic_server/\n\nmatch oracle-vs m|^\\(err \\(type xen\\.xend\\.XendError\\.XendError\\) \\(value 'Invalid operation: GET'\\)\\)\\n$| p/Oracle Virtual Service Agent/ i/Xen/\nmatch oracle-vs m|^\\(err \\(type \\\"<class 'xen\\.xend\\.XendError\\.XendError'>\\\"\\) \\(value 'Invalid operation: GET'\\)\\)\\n$| p/Oracle Virtual Service Agent/ i/Xen/\n\nmatch ormi m|^\\xe3\\r\\n\\r\\n\\0\\x01\\0.\\0vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol|s p/Oracle Remote Method Invocation/\nmatch ormi m|^\\xe3\\r\\n\\r\\n\\0\\x01\\0\\x03\\x0b\\0vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol| p/Oracle Remote Method Invocation/\n\nmatch pcs-partner m|^notAuthenticated\\n| p/SpliceCom PCS Partner Protocol/ d/VoIP phone/\n\nmatch ssl/pop3 m|^-ERR \\[SYS/PERM\\] Fatal error: tls_start_servertls\\(\\) failed\\r\\n$| p/Cyrus pop3sd/ cpe:/a:cmu:cyrus_imap_server/\nmatch ssl/pop3 m|^-ERR Fatal error: pop3s: required OpenSSL options not present\\r\\n| p/Cyrus pop3sd/ cpe:/a:cmu:cyrus_imap_server/\n# Postgresql-server-7.3.2-3\nmatch postgresql m|^EFATAL:  invalid length of startup packet\\n\\0$| p/PostgreSQL DB/ cpe:/a:postgresql:postgresql/\n# Doesn't look like this line number has changed, but the file name may have.\nmatch pgpool m|^E\\0\\0\\0.S[^\\0]+\\0CXX000\\0M[^\\0]*\\0D[^\\0]*\\0Fpcp_worker\\.c\\0L176\\0\\0| p/pgpool-II/ cpe:/a:pgpool:pgpool-ii/\nmatch postgrey m|^action=dunno\\n\\n$| p/Postfix Greylist Daemon/\nmatch powerchute m|^server=&type=0&id=&count=1&oid=[\\d.]+&value=&error=4\\n| p/APC Powerchute/ d/power-device/\n\nmatch niprint m|^NIPrint received command: ET / HTTP/1\\.0\\r\\.\\r\\nThis command is not in LPD specification, ignored\\r\\nNIPrint received command: \\.\\r\\nThis command is not in LPD specification, ignored\\r\\n| p/Network Instruments NIPrint network analyzer/\n\nmatch ratnj m|^0\\0$| p/RatNJ C2 server/ i/malware/\nmatch raop m|^RTSP/1\\.0 401 Unauthorized\\r\\nServer: AirTunes/([\\w._-]+)\\r\\nWWW-Authenticate: Digest realm=\\\"raop\\\" nonce=\\\"\\w+\\\"\\r\\n\\r\\n$| p/Apple AirTunes RAOP/ v/$1/ i/Apple AirPort Express/ d/WAP/ cpe:/h:apple:airport_express/\n\nmatch redis m|^-ERR wrong number of arguments for 'get' command\\r\\n$| p/Redis key-value store/\n\n# Later EMC Retrospect, then Roxio Retrospect, then Retrospect, Inc. Retrospect\nmatch retrospect m|^\\0\\xca\\0\\0\\0\\0\\0\\x04\\0\\0\\0\\0$| p/Dantz Retrospect/ v/6.0/ cpe:/a:dantz:retrospect:6.0/\n\n# http://www.librelp.com/relp.html\nmatch relp m|^0 serverclose 0\\n$| p/Reliable Event Logging Protocol/\n\nmatch rfidquery m|^Error 0 parse error\\n\\nError 0 parse error\\n\\nError 0 parse error\\n\\nError 0 parse error\\n\\nError 0 parse error\\n\\nError 0 parse error\\n\\nError 0 parse error\\n\\n$| p/Mercury3 RFID Query protocol/\n\nsoftmatch rotctld m|^RPRT -1\\n| p/Hamlib rotctld/\n\nmatch rtsp m|^RTSP/1.0 400 Bad Request\\r\\nServer: DSS/([-.\\w]+) \\[(v\\d+)]-(\\w+)\\r\\n| p/DarwinStreamingServer/ v/$1/ i/$2 on $3/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: QTSS/([\\d.]+ \\[v\\d+\\]-Win32)\\r\\nCseq: \\r\\n| p/Apple QuickTime Streaming Server/ v/$1/ o/Windows/ cpe:/a:apple:quicktime_streaming_server:$1/ cpe:/o:microsoft:windows/a\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: QTSS/([\\d.]+ \\[\\d+\\]-Linux)\\r\\nCseq: \\r\\n| p/Apple QuickTime Streaming Server/ v/$1/ o/Linux/ cpe:/a:apple:quicktime_streaming_server:$1/ cpe:/o:linux:linux_kernel/a\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: QTSS/([\\d.]+) \\(Build/([\\d.]+); Platform/MacOSX; ([^)]*); \\)\\r\\n| p/Apple QuickTime Streaming Server/ v/$1 build $2/ i/$3/ o/Mac OS X/ cpe:/a:apple:quicktime_streaming_server:$1/ cpe:/o:apple:mac_os_x/a\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: QTSS/([\\d.]+) \\(Build/([\\d.]+); Platform/MacOSX\\)\\r\\n| p/Apple QuickTime Streaming Server/ v/$1 build $2/ o/Mac OS X/ cpe:/a:apple:quicktime_streaming_server:$1/ cpe:/o:apple:mac_os_x/a\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: QTSS/v([\\d.]+)\\r\\nCseq: \\r\\nConnection: Close\\r\\n\\r\\n| p/Apple QuickTime Streaming Server/ v/$1/ cpe:/a:apple:quicktime_streaming_server:$1/\n\nmatch rtsp m|^RTSP/1\\.0 505 Protocol Version Not Supported\\r\\nDate: .*\\r\\nServer: WMServer/([\\w._-]+)\\r\\n\\r\\n$| p/Microsoft Windows Media Services/ v/$1/ o/Windows/ cpe:/a:microsoft:windows_media_services:$1/a cpe:/o:microsoft:windows/a\nmatch rtsp m|^RTSP/1\\.0 505 Vers\\xc3\\xa3o do Protocolo sem Suporte\\r\\nDate: .*\\r\\nServer: WMServer/([\\w._-]+)\\r\\n\\r\\n$| p/Microsoft Windows Media Services/ v/$1/ i/Portuguese/ o/Windows/ cpe:/a:microsoft:windows_media_services:$1:::pt/ cpe:/o:microsoft:windows/a\nmatch rtsp m|^RTSP/1\\.0 505 Vers\\xc3\\xa3o de protocolo n\\xc3\\xa3o suportada\\r\\nDate: .*\\r\\nServer: WMServer/([\\w._-]+)\\r\\n\\r\\n$| p/Microsoft Windows Media Services/ v/$1/ i/Portuguese/ o/Windows/ cpe:/a:microsoft:windows_media_services:$1:::pt/ cpe:/o:microsoft:windows/a\nmatch rtsp m|^RTSP/1\\.0 505 Versi\\xc3\\xb3n del protocolo no compatible\\r\\nDate: .*\\r\\nServer: WMServer/([\\w._-]+)\\r\\n\\r\\n$| p/Microsoft Windows Media Services/ v/$1/ i/Spanish/ o/Windows/ cpe:/a:microsoft:windows_media_services:$1:::es/ cpe:/o:microsoft:windows/a\n\nmatch rtsp m|^RTSP/1\\.0 505 RTSP Version not supported\\r\\nCseq: \\d+\\r\\nServer: fbxrtspd/([\\d.]+) Freebox minimal RTSP server\\r\\n\\r\\n| p/Freebox minimal rtspd/ v/$1/ d/media device/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nCseq: \\d+\\r\\nServer: fbxrtspd/([\\w._-]+) Freebox RTSP server\\r\\n| p/Freebox rtspd/ v/$1/ d/media device/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\nAllow: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, STATS\\r\\n\\r\\n| p/MediaPortal TV-Server rtspd/ d/media device/\nmatch rtsp m|^HTTP/1\\.0 401 Unauthorized\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\nWWW-Authenticate: Basic realm=\\\"server\\r\\nContent-Length: 166\\r\\n| p/Avtech MPEG4 DVR control rtspd/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\nallow: OPTIONS, DESCRIBE, SETUP, PLAY, TEARDOWN, SET_PARAMETER\\r\\n\\r\\n$| p/ACTi E32 webcam rtspd/ d/webcam/ cpe:/h:acti:e32/\nmatch rtsp m|^HTTP/1\\.0 503 Service Unavailable\\r\\nServer: GStreamer RTSP Server\\r\\nConnection: close\\r\\nCache-Control: no-store\\r\\nPragma: no-cache\\r\\nDate: .*\\r\\n\\r\\n$| p/GStreamer rtspd/\n# Example i/Win32; Windows NT 6.1/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: Microsoft Application Virtualization Server/([\\w._-]+) \\[([^]]+)\\]\\r\\nDate: .*\\r\\n\\r\\n| p/Microsoft Application Virtualization Server rtspd/ v/$1/ i/$2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch rtsp m|^RTSP/1\\.0 405 Method Not Allowed\\r\\nServer: Dahua Rtsp Server\\r\\nContent-Length: 0\\r\\nCSeq: 0\\r\\n\\r\\n| p/Dahua IP camera rtspd/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nSERVER: HDHomeRun/1\\.0\\r\\nCSeq: 0\\r\\n\\r\\n| p/SiliconDust HDHomeRun set top box rtspd/ d/media device/ cpe:/h:silicondust:hdhomerun/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nContent-length: 0\\r\\n\\r\\n| p/Weatherbug camera rtspd/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nCSeq: 1\\r\\nServer: Hipcam RealServer/V([\\d.]+)\\r\\n\\r\\nRTSP/1\\.0 400 Bad Request\\r\\n| p/Hipcam IP camera rtspd/ v/$1/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 505 RTSP Version Not Supported\\r\\nServer: HIP([\\d.]+)\\r\\n\\r\\n| p/2N Helios IP intercom rtspd/ v/$1/ cpe:/h:2n:helios_ip/\nmatch rtsp m|^RTSP/1\\.0 505 RTSP Version Not Supported\\r\\nConnection: Keep-Alive\\r\\n\\r\\n$| p/Panasonic AW-HE50 camera rtspd/ d/webcam/ cpe:/h:panasonic:aw-he50/\nmatch rtsp m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nDate: .*\\r\\n\\r\\n\\r\\n$| p/DoorBird video doorbell rtspd/ d/webcam/\nmatch rtsp m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/x-rtsp-tunnelled\\r\\nServer: H264DVR ([\\d.]+)\\r\\nConnection: close\\r\\nCache-Control: private\\r\\n\\r\\n| p/H264DVR rtspd/ v/$1/ d/storage-misc/\nmatch rtsp m|^RTSP/1\\.0 505 RTSP Version Not Supported\\r\\nServer: ALi feng/([\\w._-]+)\\r\\nDate: Week \\d+, .* GMT\\r\\n\\r\\n| p/feng rtspd/ v/$1/ cpe:/a:lscube:feng:$1/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nCSeq: 0\\r\\nServer: Hipcam RealServer/V([\\d.]+)\\r\\n\\r\\n| p/Hipcam RealServer rtspd/ v/$1/ d/webcam/\n# draft-gentric-avt-rtsp-http-00\nsoftmatch rtsp m|^HTTP/1\\.[01] \\d\\d\\d(?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Type: application/x-rtsp-tunnelled|s\n\nmatch sassafras m|^/0 0 ([-\\w_.]+)\\r\\n/0 0 HUH\\r\\n| p/Sassafras Key Server/ h/$1/\n\nmatch seti-proxy m|^HTTP/1\\.0 200 OK\\r\\nServer: SetiQueue/(\\d+)\\r\\n| p/SetiQueue SETI@Home proxy/ v/$1/\nmatch shell m|^\\x01INTERnet ACP Error  Status = %SYSTEM-F-TOOMUCHDATA\\r\\n\\0$| p/OpenVMS shelld/ o/OpenVMS/ cpe:/o:hp:openvms/a\n\n# SHOUTcast Distributed Network Audio: www.shoutcast.com\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/posix\\(linux x[86][64]\\) v([\\w._-]+)<BR>\\r\\n.*icy-name:([^\\r\\n]*)\\r\\n.*icy-genre:([^\\r\\n]*)\\r\\n.*icy-url:([^\\r\\n]*)\\r\\n.*icy-br:(\\d+)\\r\\n|s p/SHOUTcast server/ v/$1/ i/stream name: $2; genre: $3; URL: $4; bitrate: $5/ o/Linux/ cpe:/a:shoutcast:dnas:$1/a cpe:/o:linux:linux_kernel/a\n\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/Linux.v([\\d.]+).*icy-name:(.*?)\\r\\n|s p/SHOUTcast server/ v/$1/ i/Name: $2/ o/Linux/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:linux:linux_kernel/a\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/win[36][24].v([\\d.]+).*icy-name:(.*?)\\r\\n|s p/SHOUTcast server/ v/$1/ i/Name: $2/ o/Windows/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:microsoft:windows/a\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/SolarisSparc.v([\\d.]+).*icy-name:(.*?)\\r\\n|s p/SHOUTcast server/ v/$1/ i/Name: $2/ o/Solaris/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:sun:sunos/a\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/FreeBSD.v([\\d.]+).*icy-name:(.*?)\\r\\n|s p/SHOUTcast server/ v/$1/ i/Name: $2/ o/FreeBSD/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:freebsd:freebsd/a\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/posix.v([\\d.]+).*icy-name:(.*?)\\r\\n|s p/SHOUTcast server/ v/$1/ i/Name: $2/ o/Unix/ cpe:/a:shoutcast:dnas:$1/\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/MacOS_X.v([\\d.]+).*icy-name:(.*?)\\r\\n|s p/SHOUTcast server/ v/$1/ i/Name: $2/ o/Mac OS X/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:apple:mac_os_x/a\nmatch icy m|^ICY 401 Service Unavailable\\r\\n.*SHOUTcast Distributed Network Audio Server/UNIX OS-3 v([\\d.]+)| p/SHOUTcast server/ v/$1/ o/Unix/ cpe:/a:shoutcast:dnas:$1/\n\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/Linux.v([\\d.]+)|s p/SHOUTcast server/ v/$1/ o/Linux/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:linux:linux_kernel/a\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/win[36][24].v([\\d.]+)|s p/SHOUTcast server/ v/$1/ o/Windows/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:microsoft:windows/a\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/SolarisSparc.v([\\d.]+)|s p/SHOUTcast server/ v/$1/ o/Solaris/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:sun:sunos/a\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/FreeBSD.v([\\d.]+)|s p/SHOUTcast server/ v/$1/ o/FreeBSD/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:freebsd:freebsd/a\nmatch icy m|^ICY 200 OK\\r\\n.*SHOUTcast Distributed Network Audio Server/posix.v([\\d.]+)|s p/SHOUTcast server/ v/$1/ o/Unix/ cpe:/a:shoutcast:dnas:$1/\n\nmatch icy m|^ICY \\d\\d\\d .*SHOUTcast Distributed Network Audio Server/Linux.v([\\d.]+)|s p/SHOUTcast server/ v/$1/ o/Linux/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:linux:linux_kernel/a\nmatch icy m|^ICY \\d\\d\\d .*SHOUTcast Distributed Network Audio Server/win[36][24].v([\\d.]+)|s p/SHOUTcast server/ v/$1/ o/Windows/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:microsoft:windows/a\nmatch icy m|^ICY \\d\\d\\d .*SHOUTcast Distributed Network Audio Server/SolarisSparc.v([\\d.]+)|s p/SHOUTcast server/ v/$1/ o/Solaris/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:sun:sunos/a\nmatch icy m|^ICY \\d\\d\\d .*SHOUTcast Distributed Network Audio Server/FreeBSD.v([\\d.]+)|s p/SHOUTcast server/ v/$1/ o/FreeBSD/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:freebsd:freebsd/a\nmatch icy m|^ICY \\d\\d\\d .*SHOUTcast Distributed Network Audio Server/posix.v([\\d.]+)|s p/SHOUTcast server/ v/$1/ o/Unix/ cpe:/a:shoutcast:dnas:$1/\n\nmatch icy m=^(?:HTTP/1\\.0|ICY) \\d\\d\\d .*\\r\\nicy-notice2:SHOUTcast DNAS/win[36][24] v([\\d.]+)<BR>\\r\\n.*icy-name:(.*?)=s p/SHOUTcast Distributed Network Audio Server/ v/$1/ i/Name: $2/ o/Windows/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:microsoft:windows/a\nmatch icy m=^(?:HTTP/1\\.0|ICY) \\d\\d\\d .*\\r\\nicy-notice2:SHOUTcast DNAS/posix\\(linux x[86][64]\\) v([\\d.]+)<BR>\\r\\n.*icy-name:(.*?)=s p/SHOUTcast Distributed Network Audio Server/ v/$1/ i/Name: $2/ o/Linux/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:linux:linux_kernel/a\nmatch icy m=^(?:HTTP/1\\.0|ICY) \\d\\d\\d .*\\r\\nicy-notice2:SHOUTcast DNAS/posix\\(bsd\\) v([\\d.]+)<BR>\\r\\n.*icy-name:(.*?)=s p/SHOUTcast Distributed Network Audio Server/ v/$1/ i/Name: $2/ o/BSD/ cpe:/a:shoutcast:dnas:$1/\nmatch icy m=^(?:HTTP/1\\.0|ICY) \\d\\d\\d .*\\r\\nicy-notice2:SHOUTcast DNAS/armv6\\(rpi\\) v([\\d.]+)<BR>\\r\\n.*icy-name:(.*?)=s p/SHOUTcast Distributed Network Audio Server/ v/$1/ i/Raspberry Pi; Name: $2/ cpe:/a:shoutcast:dnas:$1/\n\nmatch icy m=^(?:HTTP/1\\.0|ICY) \\d\\d\\d .*\\r\\nicy-notice1:<BR>SHOUTcast DNAS/win[36][24] v([\\d.]+)<BR>\\r\\n=s p/SHOUTcast Distributed Network Audio Server/ v/$1/ o/Windows/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:microsoft:windows/a\nmatch icy m=^(?:HTTP/1\\.0|ICY) \\d\\d\\d .*\\r\\nicy-notice1:<BR>SHOUTcast DNAS/posix\\(linux x[86][64]\\) v([\\d.]+)<BR>\\r\\n=s p/SHOUTcast Distributed Network Audio Server/ v/$1/ o/Linux/ cpe:/a:shoutcast:dnas:$1/ cpe:/o:linux:linux_kernel/a\nmatch icy m=^(?:HTTP/1\\.0|ICY) \\d\\d\\d .*\\r\\nicy-notice1:<BR>SHOUTcast DNAS/posix\\(bsd\\) v([\\d.]+)<BR>\\r\\n=s p/SHOUTcast Distributed Network Audio Server/ v/$1/ o/BSD/ cpe:/a:shoutcast:dnas:$1/\nmatch icy m=^(?:HTTP/1\\.0|ICY) \\d\\d\\d .*\\r\\nicy-notice1:<BR>SHOUTcast DNAS/armv6\\(rpi\\) v([\\d.]+)<BR>\\r\\n=s p/SHOUTcast Distributed Network Audio Server/ v/$1/ i/Raspberry Pi/ cpe:/a:shoutcast:dnas:$1/\n\nmatch icy m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: audio/mpeg\\r\\nicy-br:([\\d.]+)\\r\\n.*icy-name:([^\\r\\n]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Icecast ([\\d.]+)\\r\\n\\r\\n|s p/Icecast streaming media server/ v/$3/ i/Name $2; Bitrate $1/ cpe:/a:xiph:icecast:$3/\nmatch icy m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: audio/mpeg\\r\\nicy-br:([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Icecast ([\\d.]+)\\r\\n|s p/Icecast streaming media server/ v/$2/ i/Bitrate $1/ cpe:/a:xiph:icecast:$2/\n\nmatch shoutcast m|^invalid password\\r\\n$| p/SHOUTcast server/ cpe:/a:shoutcast:dnas/a\n\nmatch shoutirc m|^HTTP/1\\.0 200 OK\\r\\nConnection: close\\r\\n\\r\\n<h1>ShoutIRC Bot ([\\w._-]+)</h1>This is not a web server port, it is for use only by clients supporting the <a href=\\\"http://wiki\\.shoutirc\\.com/index\\.php/Remote_Commands\\\">Remote Protocol</a>!| p/ShoutIRC Bot/ v/$1/\n\nmatch sip m|^SIP/2\\.0 400 Illegal request line\\r\\nFrom: <sip:missing>\\r\\nTo: <sip:missing>;tag=badrequest\\r\\nUser-Agent: AVM FRITZ!Box Fon WLAN ([\\d.]+) ([^\\r\\n]+)\\r\\n| p/AVM FRITZ!Box WLAN $1/ v/$2/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 400 Illegal request line\\r\\nFrom: <sip:missing>\\r\\nTo: <sip:missing>;tag=badrequest\\r\\nUser-Agent: AVM FRITZ!Box Fon (\\w+) \\(UI\\) ([^\\r\\n]+)\\r\\n| p/AVM FRITZ!Box $1/ v/$2/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 400 Illegal request line\\r\\nFrom: <sip:missing>\\r\\nTo: <sip:missing>;tag=badrequest\\r\\nUser-Agent: AVM FRITZ!Box Fon ([^\\r\\n]+)\\r\\n|s p/AVM FRITZ!Box/ v/$1/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 400 Illegal request line\\r\\nFrom: <sip:missing>\\r\\nTo: <sip:missing>;tag=badrequest\\r\\nUser-Agent: AVM FRITZ!Box WLAN ([\\d.]+) ([^\\r\\n]+)\\r\\n| p/AVM FRITZ!Box WLAN $1/ v/$2/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 400 Illegal request line\\r\\nFrom: <sip:missing>\\r\\nTo: <sip:missing>;tag=badrequest\\r\\nUser-Agent: AVM FRITZ!Fon ([\\w_-]+) ([^\\r\\n]+)\\r\\n| p/AVM FRITZ!Fon $1/ v/$2/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 400 Illegal request line\\r\\nFrom: <sip:missing>\\r\\nTo: <sip:missing>;tag=badrequest\\r\\nUser-Agent: FRITZ!OS\\r\\nContent-Length: 0\\r\\n\\r\\n| p/AVM FRITZ!OS SIP/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 400 Illegal request line\\r\\nFrom: <sip:missing>\\r\\nTo: <sip:missing>;tag=badrequest\\r\\nUser-Agent: AVM Speedport (W \\w+) ([^\\r\\n]+)\\r\\n| p/Speedport $1/ v/$2/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 400 Illegal request line\\r\\nFrom: <sip:missing>\\r\\nTo: <sip:missing>;tag=badrequest\\r\\nUser-Agent: AVM Sinus (W \\w+) ([^\\r\\n]+)\\r\\n| p/AVM Sinus $1/ v/$2/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 400 Illegal request line\\r\\nFrom: <sip:missing>\\r\\nTo: <sip:missing>;tag=badrequest\\r\\nUser-Agent: Speedport (W \\w+) ([^\\r\\n]+)\\r\\n| p/T-Com Speedport $1/ v/$2/ d/VoIP adapter/\n\nmatch slimp3 m|^GET %2[Ff] HTTP%2[Ff]1\\.0\\n$| p/SliMP3 MP3 player/ i|http://www.slimdevices.com|\n\nmatch soap m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"gSOAP_Web_Service\\\",.*Server: gSOAP/([\\d.]+)\\r\\n.*<SOAP-ENV:Fault><faultcode>Client</faultcode><faultstring>HTTP Error: 401 Unauthorized</faultstring></SOAP-ENV:Fault>|s p/gSOAP/ v/$1/ i/Sagem F@st 3464 WAP soap/ d/WAP/ cpe:/a:genivia:gsoap:$1/\nmatch soap m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"realtek\\.com\\.tw\\\", qop=\\\"auth\\\", nonce=\\\"[0-9a-f]+\\\", opaque=\\\"[0-9a-f]+\\\"\\r\\nServer: gSOAP/([\\w._-]+)\\r\\n| p/gSOAP/ v/$1/ cpe:/a:genivia:gsoap:$1/\nmatch soap m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: gSOAP/([\\d.]+)\\r\\n|s p/gSOAP/ v/$1/ cpe:/a:genivia:gsoap:$1/\nmatch soap m|^HTTP/1\\.1 200 OK\\r\\nServer: SCS\\r\\nContent-Type: text/html; charset=utf-8\\r\\n.*<h2 style=\\\"color:darkcyan\\\">ServerView Remote Connector - Provider V([\\w._-]+)</h2>|s p/Fujitsu ServerView Remote Connector soap/ v/$1/ cpe:/a:fujitsu:serverview_operations_manager:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: SCS\\r\\nContent-Type: text/html; charset=utf-8\\r\\n.*<h2 style=\\\"color:darkcyan\\\">ServerView Remote Connector Service V([\\w._-]+)</h2>|s p/Fujitsu ServerView Remote Connector soap/ v/$1/ cpe:/a:fujitsu:serverview_operations_manager:$1/\nmatch soap m|^HTTP/1\\.0 500 Internal Server Error\\r\\nServer: gSOAP/([\\w._-]+)\\r\\n.* xmlns:gmmiws=\\\"https://([\\w._-]+):\\d+/glsinternal\\.wsdl\\\" .*<faultstring>HTTP GET method not implemented</faultstring>|s p/gSOAP/ v/$1/ i/Good Messaging Server gddomsyncsrv/ h/$2/ cpe:/a:genivia:gsoap:$1/\nmatch soap m|^HTTP/1\\.0 500 Internal Server Error\\r\\nServer: gSOAP/([\\w._-]+)\\r\\n.* xmlns:pushws=\\\"https://([\\w._-]+):\\d+/pushws\\\">.*<faultstring>HTTP GET method not implemented</faultstring>|s p/gSOAP/ v/$1/ i/Good Messaging Server gdpushproc/ h/$2/ cpe:/a:genivia:gsoap:$1/\nmatch soap m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nDate:\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d\\r\\nContent-Type: application/soap\\+xml; charset=\\\"utf-8\\\"\\r\\n\\r\\n$| p/Dell 1130n printer soap/ d/printer/ cpe:/h:dell:1130n/\nmatch soap m|^HTTP/1\\.1  200 OK\\r\\nContent-Type: text/xml; charset=utf-8: \\r\\nConnection: close\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\" standalone=\\\"yes\\\"\\?>.*<ModelDescription>Xtreme N GIGABIT Router</ModelDescription><ModelName>(DIR-655) \\w+</ModelName><FirmwareVersion>([^<]+)</FirmwareVersion>|s p/D-Link $1 soap/ v/$2/ d/WAP/ cpe:/h:dlink:$1/\nmatch soap m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/xml; charset=utf-8\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"utf-8\\\"\\?>.*<ModelName>(SMC\\w+)</ModelName>\\n<FirmwareVersion>V([\\w._-]+)</FirmwareVersion>|s p/SMC $1 Barricade WAP soap/ v/$2/ d/WAP/ cpe:/h:smc:$1:$2/\nmatch soap m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: gSOAP\\r\\n| p/gSOAP/ cpe:/a:genivia:gsoap/\n\nmatch smtp m|^220 ([\\w._-]+)\\r\\n500 5\\.5\\.1 Unrecognized command\\r\\n| p/SoftStack Free SMTP Server/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/\nmatch smtp m|^220[ -]([\\w._-]+) ESMTP\\r.*\\n521 5\\.7\\.0 Error: I can break rules, too\\. Goodbye\\.\\r\\n|s p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\n\n# spamd 2.20-1woody\nmatch spamassassin m|^SPAMD/1\\.0 76 Bad header line: GET / HTTP/1\\.0\\r\\r?\\n| p/SpamAssassin spamd/ cpe:/a:apache:spamassassin/\n\n# TLS 1.0 Alert (0x21), Fatal (0x02), Unexpected message (0x0a)\nmatch ssl m|^\\x15\\x03\\x01\\0\\x02\\x02\\x0a$| p/TLS/ v/1.0/\n\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nDate:0000-01-01T18:54:43\\r\\nContent-Type: application/soap\\+xml; charset=\\\"utf-8\\\"\\r\\n\\r\\n$| p/Samsung CLX-3175FW printer SOAP over HTTP/ d/printer/ cpe:/h:samsung:clx-3175fw/a\n\nmatch speech m|^ER\\nLP\\n#<SUBR\\(6\\) />\\nft_StUfF_keyOK\\nER\\n$| p/Festival Speech Synthesis System/\n\nmatch sphinx-search m|^\\x01\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0 \\0\\0\\0\\x1cunknown command \\(code=\\d+\\)| p/Sphinx Search daemon/\n\n# No idea if this is general enough\nmatch sopcast m|^HTTP/1\\.0 200 OK\\r\\n\\r\\n0&\\xb2u\\x8ef\\xcf\\x11\\xa6\\xd9\\0| p/SopCast P2P/\n\nmatch syncplay-json m|^\\{\"Error\": \\{\"message\": \"Not a json encoded string GET / HTTP/1\\.0\"\\}\\}\\r\\n| p/Syncplay JSON server/ cpe:/a:syncplay:syncplay/\n\nmatch tcpmux m|^-Service not available\\r\\n$|\n\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfe\\\"\\n\\r\\tNetDSL Copyright by ARESCOM 2003\\n\\r\\n\\r\\n\\rUsername:GET / HTTP/1\\.0\\r\\n\\n\\rPassword:\\r\\n\\n\\rUsername:| p/ARESCOM NetDSL 1000 router/ d/router/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\xff\\xfbi\\r\\n\\tWelcome to Magicunix's TCP Server\\.\\r\\n\\r\\n\\r\\nLogin: P/1\\.0\\r\\nPassword: \\r\\nLogin incorrect\\r\\nLogin: | p/MagicUnix telnetd/\nmatch telnet m|^\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\n\\x07HP ([\\w+]+) AdvanceStack 10BT Switching Hub Management Module\\r\\n| p/HP $1 switch telnetd/ d/switch/ cpe:/h:hp:$1/a\nmatch telnet m|^\\xff\\xfb\\x01\\r\\n-> GET / HTTP/1\\.0\\r\\nGET / HTTP/1\\.0\\r\\nundefined symbol: GET\\r\\n-> \\r\\n-> | p/Konica Minolta Magicolor 2300 DL printer telnetd/ d/printer/\nmatch telnet m|^\\xff\\xfe\\x01Login to server\\. \\r\\nUsername: ET / HTTP/1\\.0\\r\\nPassword: \\r\\nLogin to server\\. \\r\\nUsername:| p/EFCMService telnetd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch telnet m|^\\xff\\xfc\\\"\\xff\\xfb\\x03\\xff\\xfb\\x01\\r\\n\\r\\nWelcome to  C A N O P Y  CMM Micro\\.\\r\\n\\r\\nPress Enter to Continue\\.\\.\\.\\r\\n\\r\\nLogin: \\r\\nPassword: | p/Motorola Canopy cluster management module telnetd/ o/eCos/ cpe:/o:ecos:ecos/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03telnet@CER(\\w+)>GET / HTTP/1\\.0\\r\\nInvalid input -> GET / HTTP/1\\.0\\r\\nType \\? for a list\\r\\n| p/NetIron CER $1 switch telnetd/ d/switch/\nmatch telnet m|^BAD_COMMAND\\n| p/Lotus Domino Console/ cpe:/a:ibm:lotus_domino/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03$| p/Pocket CMD telnetd/\nmatch telnet m|^\\xff\\xfe\\x01\\r\\n\\r\\n\\+============================================================================\\+\\r\\n\\x7c             \\[ Rack Monitor Configuration Utility Main Menu \\]               \\x7c\\r\\n\\+============================================================================\\+\\r\\n\\r\\nEnter Password: | p/Eaton Powerware Environmental Rack Monitor telnetd/ d/power-misc/\nmatch telnet m|^\\xff\\xfb\\x01\\r\\nMGI Login: GET / HTTP/1\\.0\\r\\n\\r\\nPassword: \\r\\nLogin incorrect\\r\\n\\r\\nMGI Login: | p/Samsung PBX telnetd/ d/PBX/\nmatch telnet m|^\\xff\\xfb\\0\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\*\\r\\n\\r\\nD-Link Access Point login: | p/D-Link DWL-3200AP WAP telnetd/ d/WAP/ cpe:/h:dlink:dwl-3200ap/\nmatch telnet m|^\\r\\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\nUser:GET / HTTP/1\\.0\\r\\nPassword:\\r\\nUser:| p/Dell OpenManage telnetd/ cpe:/a:dell:openmanage_baseboard_management_controller_utilities/\nmatch telnet m|^\\n\\rError 0xf802: Command not recognized\\.\\r\\n| p/Quatech Airborne CLI server/ d/bridge/\nmatch telnet m|^Please enter password:\\r\\nPassword incorrect, please enter password:\\r\\nPassword incorrect, please enter password:\\r\\n| p/7 Days to Die game Telnet config/ cpe:/a:the_fun_pimps:7_days_to_die/\n# Probably BusyBox\nmatch telnet m|^\\xff\\xfd\\x01\\xff\\xfd\\x1f\\xff\\xfb\\x01\\xff\\xfb\\x03\\r\\r\\nGET / HTTP/1\\.0\\r\\n\\r\\nSICUNET login: | p/Sicunet access control system telnetd/ d/security-misc/\n\n# https://www.reddit.com/r/telnet/comments/4i3w20/found_vizio_m55c3_telnet_access/\nmatch textui m|^cannot find method GET\\n\\n$| p/Vizio television textui/ d/media device/\n\n# The Onion Router\nmatch tor-socks m|^HTTP/1\\.0 501 Tor is not an HTTP Proxy\\r\\n| p/Tor SOCKS proxy/ cpe:/a:torproject:tor/\nmatch tor-info m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-Encoding: identity\\r\\n.*signed-directory\\npublished .*\\nrecommended-software|s p/Tor nodes info httpd/ cpe:/a:torproject:tor/\nmatch tor-info m|^HTTP/1\\.0 503 Directory busy, try again later\\r\\n\\r\\n$| p/Tor nodes info httpd/ cpe:/a:torproject:tor/\nmatch tor-info m|^HTTP/1\\.0 404 Not found\\r\\nDate: \\w\\w\\w, \\d\\d? \\w\\w\\w \\d\\d\\d\\d \\d\\d:\\d\\d:\\d\\d GMT\\r\\n\\r\\n$| p/Tor nodes info httpd/ cpe:/a:torproject:tor/\n\nsoftmatch uptime-agent m|ERR - Command 'GET' not found\\n$| p/Idera Uptime Infrastructure Monitor/ cpe:/a:idera:uptime_infrastructure_monitor/\n\nmatch utsessiond m|^ERR/InvalidCommand\\n$| p/Sun Ray utsessiond/ cpe:/a:sun:ray_server_software/\nmatch utsvc m|^protocolErrorInf error=Missing\\\\040hw\\\\040string\\\\040from\\\\040:\\\\040null\\.\\\\040Check\\\\040hardware state=disconnected\\n| p/Sun Ray utsvcd/ cpe:/a:sun:ray_server_software/\nmatch utsvc m|^protocolErrorInf error=invalid\\\\040command\\\\040or\\\\040parameter state=disconnected\\n| p/Sun Ray utsvcd/ cpe:/a:sun:ray_server_software/\n\nmatch upnp m|^HTTP/1\\.1 403 Forbidden\\r\\n.*SERVER: LG-BDP DLNADOC/([\\w._-]+)\\r\\n| p/LG BP730 Blu-ray player upnp/ i/DLNADOC $1/ d/media device/ cpe:/h:lg:bp730/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: (UPnP/[\\d.]+ DLNADOC/[\\d.]+) Platinum/([\\d.]+)\\r\\n\\r\\n|s p/Platinum UPnP/ v/$2/ i/$1/\nmatch upnp m|^HTTP/1\\.[01] 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Linux-amd64-([\\w._-]+), UPnP/([\\d.]+), PMS/(.*?)\\r\\n|s p/PS3 Media Server UPnP/ v/$3/ i/Linux $1; UPnP $2/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.[01] 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Linux-([\\w_.-]+), UPnP/([\\d.]+), PMS/(.*?)\\r\\n|s p/PS3 Media Server UPnP/ v/$3/ i/Linux $1; UPnP $2/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.[01] 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Windows_XP-([\\w_.-]+), UPnP/([\\d.]+), PMS/(.*?)\\r\\n|s p/PS3 Media Server UPnP/ v/$3/ i/Windows XP $1; UPnP $2/ d/media device/ o/Windows XP/ cpe:/o:microsoft:windows_xp:$1/\nmatch upnp m|^HTTP/1\\.[01] 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Windows_Vista-x86-([\\w._-]+), UPnP/([\\d.]+), PMS/(.*?)\\r\\n|s p/PS3 Media Server UPnP/ v/$3/ i/Windows Vista $1; UPnP $2/ d/media device/ o/Windows Vista/ cpe:/o:microsoft:windows_vista:$1::x32/\nmatch upnp m|^HTTP/1\\.[01] 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Windows_Vista-x86_64-([\\w._-]+), UPnP/([\\d.]+), PMS/(.*?)\\r\\n|s p/PS3 Media Server UPnP/ v/$3/ i/Windows Vista $1; UPnP $2/ d/media device/ o/Windows Vista/ cpe:/o:microsoft:windows_vista:$1::x64/\nmatch upnp m|^HTTP/1\\.[01] 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Windows_7-x86-([\\w._-]+), UPnP/([\\d.]+), PMS/(.*?)\\r\\n|s p/PS3 Media Server UPnP/ v/$3/ i/Windows 7 $1; UPnP $2/ d/media device/ o/Windows 7/ cpe:/o:microsoft:windows_7:$1::x32/\nmatch upnp m|^HTTP/1\\.[01] 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Windows_7-x86_64-([\\w._-]+), UPnP/([\\d.]+), PMS/(.*?)\\r\\n|s p/PS3 Media Server UPnP/ v/$3/ i/Windows 7 $1; UPnP $2/ d/media device/ o/Windows 7/ cpe:/o:microsoft:windows_7:$1::x64/\nmatch upnp m|^HTTP/1\\.[01] 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Mac_OS_X-x86_64-([\\w_.-]+), UPnP/([\\d.]+), PMS/(.*?)\\r\\n|s p/PS3 Media Server UPnP/ v/$3/ i/Mac OS X $1; UPnP $2/ d/media device/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\n\nmatch upnp m|^HTTP/1\\.0 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Linux/([\\w_.-]+), UPnP/([\\w_.-]+), Free UPnP Entertainment Service/ReadyNAS\\r\\n|s p/FUPPES UPnP media server/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Linux/([\\w_.-]+), UPnP/([\\w_.-]+), Free UPnP Entertainment Service/([^\\r\\n]+)\\r\\n|s p/FUPPES UPnP media server/ v/$3/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: FreeBSD/([\\w_.-]+), UPnP/([\\w_.-]+), Free UPnP Entertainment Service/([^\\r\\n]+)\\r\\n|s p/FUPPES UPnP media server/ v/$3/ i/FreeBSD $1; UPnP $2/ o/FreeBSD/ cpe:/o:freebsd:freebsd:$1/\n\nmatch upnp m|^HTTP/1\\.1 500 Internal Server Error\\r\\nSERVER: ipOS/([\\d.]+) UPnP/([\\d.]+) ipUPnP/([\\d.]+)\\r\\n| p/ipOS upnpd/ i/D-Link WAP dynamic DNS; UPnP $2; ipUPnP $3/ d/WAP/ o/ipOS $1/ cpe:/o:ubicom:ipos:$1/\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nSERVER: ipOS/([\\d.]+) UPnP/([\\d.]+) ipGENADevice/([\\d.]+)\\r\\n| p/ipOS upnpd/ i/D-Link DGL-4300 gaming router; UPnP $2; ipGENADevice $3/ d/broadband router/ o/ipOS $1/ cpe:/h:d-link:dgl-4300/ cpe:/o:ubicom:ipos:$1/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSERVER: ipos/([\\w._-]+) +UPnP/([\\d.]+) (?:ADSL2\\+ (?:Modem )?Router )?(T[DL]-\\w+)/([\\w._/-]+)\\r\\n| p/ipOS upnpd/ i/TP-LINK $3 WAP $4; UPnP $2/ d/WAP/ o/ipOS $1/ cpe:/h:tp-link:$3/ cpe:/o:ubicom:ipos:$1/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSERVER: ipos/([\\w._-]+) +UPnP/([\\d.]+) (RNX-\\w+)/([\\w._/-]+)\\r\\n| p/ipOS upnpd/ i/Rosewill $3 WAP $4; UPnP $2/ d/WAP/ o/ipOS $1/ cpe:/h:rosewill:$3/ cpe:/o:ubicom:ipos:$1/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSERVER: ipos/([\\w._-]+) UPnP/([\\d.]+) Archer[ _]([^/]+)/([\\w._/-]+)\\r\\n| p/ipOS upnpd/ i/TP-Link Archer $3 WAP $4; UPnP $2/ d/WAP/ o/ipOS $1/ cpe:/h:tp-link:a$3/ cpe:/o:ubicom:ipos:$1/\n\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nSERVER: Linux/([\\w._+-]+), UPnP/([\\d.]+), Portable SDK for UPnP devices/([\\w._~-]+)\\r\\n| p/Portable SDK for UPnP devices/ v/$3/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nSERVER: Linux, UPnP/([\\d.]+), Portable SDK for UPnP devices/([\\w._~-]+)\\r\\n| p/Portable SDK for UPnP devices/ v/$2/ i/UPnP $1/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nSERVER: Linux/([\\w._+-]+) UPnP/([\\d.]+) DLNADOC/([\\d.]+) Portable SDK for UPnP devices/([\\w._~-]+)\\r\\n| p/Portable SDK for UPnP devices/ v/$4/ i/Linux $1; DLNADOC $3; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Linux/([\\w._+-]+) DLNADOC/([\\d.]+) UPnP/([\\d.]+) MiniDLNA/([\\w._-]+)\\r\\n|s p/MiniDLNA/ v/$4/ i/Linux $1; DLNADOC $2; UPnP $3/ o/Linux/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.0 500 Internal Server Error\\r\\nSERVER: ([\\w._-]+\\.7601) 2/Service Pack (\\d+), UPnP/([\\w._-]+), Portable SDK for UPnP devices/([\\w._~-]+)\\r\\n| p/Portable SDK for UPnP devices/ v/$4/ i/UPnP $3/ o/Windows 7 SP$2 build $1/ cpe:/o:microsoft:windows_7/a\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSERVER: ([56]\\.[\\d. ]+)/, UPnP/([\\d.]+), Portable SDK for UPnP devices/([\\w._~-]+)\\r\\n| p/Portable SDK for UPnP devices/ v/$3/ i/Windows $1; UPnP $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSERVER: ([56]\\.[\\d. ]+)/Service Pack (\\d+), UPnP/([\\d.]+), Portable SDK for UPnP devices/([\\w._~-]+)\\r\\n| p/Portable SDK for UPnP devices/ v/$4/ i/Windows $1 (SP$2); UPnP $3/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?SERVER: Linux/([-+\\w_.]+), UPnP/([\\d.]+), Intel SDK for UPnP devices ?/([\\w._~-]+)\\r\\n|s p/Intel UPnP reference SDK/ v/$3/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?SERVER: Linux/([-+\\w_.]+) UPnP/([\\d.]+) DLNADOC/([\\w._-]+) Intel_SDK_for_UPnP_devices/([\\w._~-]+)\\r\\n|s p/Intel UPnP reference SDK/ v/$4/ i/Linux $1; UPnP $2; DLNADOC $3/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nSERVER: Linux, UPnP/([\\d.]+), Intel SDK for UPnP devices ?/([\\w._~-]+)\\r\\n| p/Intel UPnP reference SDK/ v/$2/ i/UPnP $1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nSERVER: Darwin/([\\w._+-]+), UPnP/([\\w._-]+), Portable SDK for UPnP devices/([\\w._~-]+)\\r\\n| p/Intel UPnP reference SDK/ v/$3/ i/Mac OS X $1; UPnP $2/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nSERVER: Windows2000/0\\.0 UPnP/([\\w._+-]+) PhilipsIntelSDK/([\\w._-]+) DLNADOC/([\\w._-]+)\\r\\n| p/Philips Intel UPnP SDK/ v/$2/ i/Philips Smart TV; UPnP $1; DLNADOC $3/ d/media device/\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nSERVER: Linux([\\d.]+)/0\\.0 UPnP/([\\w._+-]+) PhilipsIntelSDK/([\\w._-]+) DLNADOC/([\\w._-]+)\\r\\n| p/Philips Intel UPnP SDK/ v/$3/ i/Philips Smart TV; UPnP $2; DLNADOC $4/ d/media device/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/a\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nSERVER: Windows2000/0\\.0 UPnP/([\\w._+-]+) PhilipsIntelSDK/([\\w._-]+) \\r\\n| p/Philips Intel UPnP SDK/ v/$2/ i/Philips Smart TV; UPnP $1/ d/media device/\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nSERVER: Linux([\\d.]+)/0\\.0 UPnP/([\\w._+-]+) PhilipsIntelSDK/([\\w._-]+) \\r\\n| p/Philips Intel UPnP SDK/ v/$3/ i/Philips Smart TV; UPnP $2/ d/media device/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/a\n\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?CONTENT-TYPE: text/xml\\r\\nContent-Length: .*<modelName>Xbox 360</modelName>.*<serialNumber>(\\w+)</serialNumber>|s p/Xbox 360 XML UPnP/ i/Serial number $1/ d/game console/ o/Xbox 360/ cpe:/h:microsoft:xbox_360_kernel/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Microsoft-Windows-NT/(\\d[-.\\w]+) UPnP/(\\d[-.\\w]+) UPnP-Device-Host/(\\d[-.\\w]+)\\r\\n| p/Microsoft Windows UPnP/ v/$2/ i/UPnP Device Host: $3/ o/Windows NT $1/ cpe:/o:microsoft:windows_nt:$1/\nmatch upnp m=^HTTP/1\\.1 200 .*\\r\\nSERVER: Linux/((2\\.[46]\\.\\d+|\\d\\.\\d+)\\S*), UPnP/([\\d.]+), MediaTomb/([\\w._-]+)\\r\\n=s p/MediaTomb UPnP/ v/$4/ i/Linux $1; UPnP $3/ o/Linux/ cpe:/o:linux:linux_kernel:$2/\nmatch upnp m|^HTTP/1\\.1 200 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?SERVER: Darwin/([\\w._-]+), UPnP/([\\d.]+), MediaTomb/([\\w._-]+)\\r\\n|s p/MediaTomb UPnP/ v/$3/ i/Darwin $1; UPnP $2/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: FreeBSD/([\\w._-]+), UPnP/([\\d.]+), MediaTomb/([\\w._-]+)\\r\\n|s p/MediaTomb UPnP/ v/$3/ i/FreeBSD $1; UPnP $2/ o/FreeBSD/ cpe:/o:freebsd:freebsd:$1/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: OpenBSD/([\\w._-]+), UPnP/([\\d.]+), MediaTomb/([\\w._-]+)\\r\\n|s p/MediaTomb UPnP/ v/$3/ i/OpenBSD $1; UPnP $2/ o/OpenBSD/ cpe:/o:openbsd:openbsd:$1/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: SunOS/([\\w._-]+), UPnP/([\\d.]+), MediaTomb/([\\w._-]+)\\r\\n|s p/MediaTomb UPnP/ v/$3/ i/SunOS $1; UPnP $2/ o/Solaris/ cpe:/o:sun:sunos:$1/\n#TODO make sure the * version doesn't come after \\r\\n\n\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: UPnP/([\\w._-]+), pvConnect UPnP SDK/([\\w._-]+),  Twonky UPnP SDK/([\\w._-]+)\\r\\n|s p/TwonkyMedia UPnP/ i/UPnP $1; pvConnect SDK $2; SDK $3/ cpe:/a:packetvideo:twonky/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: UPnP/([\\w._-]+), pvConnect UPnP SDK/([\\w._-]+),  TwonkyMedia UPnP SDK/([\\w._-]+)\\r\\n|s p/TwonkyMedia UPnP/ i/UPnP $1; pvConnect SDK $2; SDK $3/ cpe:/a:packetvideo:twonky/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: *Linux/([\\w._-]+), UPnP/([\\w._-]+), TwonkyVision UPnP SDK/([\\w._-]+)\\r\\n|s p/TwonkyMedia UPnP/ i/Linux $1; UPnP $2; SDK $3/ o/Linux/ cpe:/a:packetvideo:twonky/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: *Linux/2\\.x\\.x, UPnP/([\\w._-]+), pvConnect UPnP SDK/([\\w._-]+), Twonky UPnP SDK/([\\w._-]+)\\r\\n|s p/TwonkyMedia UPnP/ i/UPnP $1; pvConnect SDK $2; Twonky SDK $3/ o/Linux/ cpe:/a:packetvideo:twonky/ cpe:/o:linux:linux_kernel:2/\nmatch upnp m=^HTTP/1\\.1 \\d\\d\\d .*Server: *Linux/([\\w._-]+), UPnP/([\\w._-]+), pvConnect UPnP SDK/([\\w._-]+)\\r\\n.*<title>(?:TwonkyMedia|TwonkyMedia server media browser|TwonkyVision Configuration)</title>=s p/TwonkyMedia UPnP/ i/Linux $1; UPnP $2; pvConnect SDK $3/ o/Linux/ cpe:/a:packetvideo:twonky/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: *Linux/([\\w._-]+), UPnP/([\\w._-]+), pvConnect UPnP SDK/([\\w._-]+)\\r\\n.*<title>MediaServer Restriced Access</title>|s p/TwonkyMedia UPnP/ i/Iomega Home Media NAS device; Linux $1; UPnP $2; pvConnect SDK $3/ o/Linux/ cpe:/a:packetvideo:twonky/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: *Linux/2\\.x\\.x, UPnP/([\\w._-]+), pvConnect UPnP SDK/([\\w._-]+), TwonkyMedia UPnP SDK/([\\w._-]+)\\r\\n\\r\\n|s p/TwonkyMedia UPnP/ i/Linux 2.X.X; UPnP $1; pvConnect SDK $2; SDK $3/ o/Linux/ cpe:/a:packetvideo:twonky/ cpe:/o:linux:linux_kernel:2/\nmatch upnp m|^HTTP/1\\.1 401 Unauthorised\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Digest realm=\\\"([\\w._-]+)\\\", nonce=\\\"\\w+\\\", algorigthm=MD5, qop=\\\"auth\\\" \\n.*Server: *Linux/2\\.x\\.x, UPnP/([\\d.]+), pvConnect UPnP SDK/([\\w._-]+), Twonky UPnP SDK/([\\w._-]+)\\r\\n|s p/TwonkyMedia UPnP/ i/Linux; UPnP $2; pvConnect SDK $3; SDK $4/ o/Linux/ h/$1/ cpe:/a:packetvideo:twonky/ cpe:/o:linux:linux_kernel:2/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: *Linux/2\\.x\\.x, UPnP/([\\w._-]+), pvConnect UPnP SDK/([\\w._-]+)\\r\\n\\r\\n|s p/TwonkyMedia UPnP/ i/Linux 2.X.X; UPnP $1; pvConnect SDK $2/ o/Linux/ cpe:/a:packetvideo:twonky/ cpe:/o:linux:linux_kernel:2/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Windows NT/[\\w._-]+, UPnP/([\\w._-]+), pvConnect UPnP SDK/([\\w._-]+),  TwonkyMedia UPnP SDK/([\\w._-]+)\\r\\n|s p/TwonkyMedia UPnP/ i/UPnP $1; pvConnect SDK $2; SDK $3/ o/Windows NT/ cpe:/a:packetvideo:twonky/ cpe:/o:microsoft:windows_nt/\nmatch upnp m|^HTTP/1\\.1 401 Unauthorised\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"([\\w._-]+)\\\"\\n.*Server: *Linux/2\\.x\\.x, UPnP/([\\w._-]+), pvConnect UPnP SDK/([\\w._-]+), Twonky UPnP SDK/([\\w._-]+)\\r\\n|s p/TwonkyMedia UPnP/ i/Linux 2.X; UPnP $2; pvConnect SDK $3; SDK $4/ o/Linux/ h/$1/ cpe:/a:packetvideo:twonky/ cpe:/o:linux:linux_kernel:2/\nmatch upnp m|^HTTP/1\\.1 401 Unauthorised\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"([\\w._-]+)\\\"\\n.*Server: *Linux/([\\w._-]+), UPnP/([\\w._-]+), pvConnect UPnP SDK/([\\w._-]+)\\r\\n|s p/TwonkyMedia UPnP/ i/Linux $2; UPnP $3; pvConnect SDK $4/ o/Linux/ h/$1/ cpe:/a:packetvideo:twonky/ cpe:/o:linux:linux_kernel:$2/a\n\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nContent-Type:  text/xml; charset=\\\"UTF-8\\\"\\r\\nServer: Orb Media Server, WINDOWS, UPnP/([\\w._-]+), Intel MicroStack/([\\w._-]+)\\r\\n| p/Orb Media Server UPnP/ i/UPnP $1; Intel MicroStack $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nCONTENT-TYPE:  text/xml;charset=\"utf-8\"\\r\\nServer: WINDOWS, UPnP/([\\d.]+), Intel MicroStack/([\\w._-]+)\\r\\n| p/Intel MicroStack upnpd/ v/$2/ i/UPnP $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: OpenWRT/kamikaze UPnP/([\\w._-]+) miniupnpd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/OpenWrt Kamikaze; UPnP $1/ d/broadband router/ o/Linux/ cpe:/a:miniupnp_project:miniupnpd:$2/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: neufbox UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/Neuf Box router; UPnP $1/ d/router/ cpe:/a:miniupnp_project:miniupnpd:$2/a\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: DrayTek/Vigor(\\w+) UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$3/ i/DrayTek Vigor $1 router; UPnP $2/ d/router/ cpe:/a:miniupnp_project:miniupnpd:$3/a cpe:/h:draytek:vigor_$1/a\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: OpenWRT/OpenWrt UPnP/([\\w._-]+) MiniUPnPd/([\\w._-]+)\\r\\n|s p/MiniUPnP/ v/$2/ i/OpenWrt; UPnP $1/ d/broadband router/ cpe:/a:miniupnp_project:miniupnpd:$2/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nServer: Roku UPnP/([\\d.]+) MiniUPnPd/([\\d.]+)\\r\\n| p/MiniUPnP/ v/$2/ i/Roku; UPnP $1/ d/media device/ cpe:/a:miniupnp_project:miniupnpd:$2/a\nmatch upnp m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Linux,([\\w._-]+),UPnP/([\\w._-]+),Coherence UPnP framework,([\\w._-]+)\\r\\n|s p/Coherence UPnP framework/ v/$3/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/a\nmatch upnp m|^HTTP/1\\.[01] 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Netgem/([\\d.]+) \\(NeufboxTV UPnPServer\\)\\r\\n|s p/Netgem UPnP/ v/$1/ i/Neuf Box TV/ d/media device/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: WINDOWS, UPnP/([\\d.]+), Intel MicroStack/([\\d.]+)\\r\\n.*<dlna:X_DLNADOC xmlns:dlna=\\\"urn:schemas-dlna-org:device-1-0\\\">(DMS-[\\d.]+)</dlna:X_DLNADOC>.*<friendlyName>([\\w._-]+): MediaServer</friendlyName>.*<manufacturer>Wistron</manufacturer>.*<modelDescription>WiDMS</modelDescription>|s p/Intel MicroStack UPnP/ v/$2/ i/Wistron Digital Media Server $3; UPnP $1/ o/Windows/ h/$4/ cpe:/o:microsoft:windows/a\nmatch upnp m|^HTTP/1\\.1 40[04] .*\\r\\nServer: Linux, UPnP/([\\d.]+), (DIR-[\\w+]+) Ver ([\\w._-]+)\\r\\n| p/D-Link $2 WAP UPnP/ v/$3/ i/UPnP $1/ d/WAP/ o/Linux/ cpe:/h:d-link:$2/ cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\nSERVER: FAST Router (\\w+) Router, UPnP/([\\w.]+)\\r\\n| p/FAST $1 router UPnP $2/ d/router/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?SERVER: Linux/([\\w._-]+) UPnP/([\\w._-]+) myigd/([\\w._-]+)\\r\\n|s p/myigd/ v/$3/ i/Linksys WAG354G router; Linux $1; UPnP $2/ d/WAP/ o/Linux/ cpe:/h:linksys:wag354g/a cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?SERVER: Linux/([\\w._-]+), UPnP/([\\w._-]+), Everest/([\\w._-]+)\\r\\n|s p/Everest/ v/$3/ i/Pelco Spectra Mini IP webcam; Linux $1; UPnP $2/ d/webcam/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 404 Bad Request\\r\\nCONTENT-LENGTH: 0\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n$| p/SuperMicro IPMI UPnP/ cpe:/o:supermicro:intelligent_platform_management_firmware/\nmatch upnp m|^HTTP/1\\.1 404 Not Found\\r\\nDate: .*\\r\\nServer: Unknown/0\\.0 UPnP/([\\d.]+) Virata-EmWeb/([-.\\w]+)\\r\\n| p/Virata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/ReplayTV UPnP; UPnP $1/ cpe:/a:virata:emweb:$SUBST(2,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: RomPager/([\\w.]+) UPnP/([\\w.]+)\\r\\n\\r\\n\\n<html><head>.*<title>ZyXEL Prestige Router</title>|s p/Allegro RomPager/ v/$1/ i/ZyXEL Prestige router UPnP; UPnP $2/ d/router/ cpe:/a:allegro:rompager:$1/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: NT/([\\d.]+) UPnP/([\\d.]+)\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>HotBrick Load Balancer ([-\\w_.]+)</title>\\r\\n| p/NT httpd/ v/$1/ i/HotBrick Load Balancer $3 UPnP; UPnP $2/ d/load balancer/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: NT/([\\d.]+) UPnP/([\\d.]+)\\r\\nDate: .*\\r\\nContent-type: text/html\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>HotBrick Firewall VPN ([-\\w_./]+)</title>| p/NT httpd/ v/$1/ i/HotBrick Firewall VPN $3 UPnP; UPnP $2/ d/firewall/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nServer: Unknown/[\\d.]+ UPnP/([\\d.]+) Virata-EmWeb/R([\\d_]+)\\r\\nContent-Length: .*\\r\\n\\r\\n<HTML><HEAD><TITLE>Actiontec</TITLE>\\n|s p/Virata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/ActionTec DSL UPnP; UPnP $1/ d/broadband router/ cpe:/a:virata:emweb:$SUBST(2,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Unknown/[\\d.]+ UPnP/([\\d.]+) GlobespanVirata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\nExpires: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n<html>\\n<head>\\n<title>ADSL VPN Firewall Router</title>| p/Virata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Billion 741GE ADSL router UPnP; UPnP $1/ d/router/ cpe:/a:virata:emweb:$SUBST(2,\"_\",\".\")/a cpe:/h:billion:741ge/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Unknown/[\\d.]+ UPnP/([\\d.]+) Virata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\nExpires: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n\\n<html>\\n<head>\\n<title>ADSL Configuration Page\\n</title>| p/Virata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Telewell 715 DSL router UPnP; UPnP $1/ d/router/ cpe:/a:virata:emweb:$SUBST(2,\"_\",\".\")/a cpe:/h:telewell:715/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDATE: .*\\r\\nConnection: Keep-Alive\\r\\nServer: LINUX/([\\d.]+) UPnP/([\\d.]+) BRCM400/([\\d.]+)\\r\\n| p|Belkin/Linksys wireless router UPnP| i/UPnP $2; BRCM400 $3/ d/router/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Unknown/[\\d.]+ UPnP/([\\d.]+) GlobespanVirata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\n.*<title>CopperJet ([-\\w+/.]+) Router VoATM</title>|s p/Virata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/CopperJet $3 VoATM router UPnP; UPnP $1/ d/router/ cpe:/a:virata:emweb:$SUBST(2,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nServer: Unknown/[\\d.]+ UPnP/([\\d.]+) GlobespanVirata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\n.*<head>\\n<title>Wireless ADSL VPN Firewall Router</title>\\n|s p/GlobespanVirata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Billion BIPAC-743GE V1 ADSL WAP UPnP; UPnP $1/ d/WAP/\nmatch upnp m|^HTTP/1\\.1 301 Moved Permanently\\r\\nServer: Nucleus/([\\d.]+) UPnP/([\\d.]+) Virata-EmWeb/R([\\d_]+)\\r\\nLocation: http://[\\d.]+/hag/pages/home\\.htm\\r\\n| p/Virata-EmWeb/ v/$SUBST(3,\"_\",\".\")/ i|Huawei/Intracom ADSL router UPnP; UPnP $2; Nucleus $1| d/broadband router/ cpe:/a:virata:emweb:$SUBST(3,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Unknown/0\\.0 UPnP/([\\d.]+) GlobespanVirata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\nExpires: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\n\\r\\n<html>\\n<head>\\n<title>ADSL -modem/firewall/switch/WLAN -AP</title>\\n| p/GlobespanVirata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Telewell TW-EA2000 ADSL modem UPnP; UPnP $1/ d/WAP/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d Server: Unknown/0\\.0 UPnP/([\\d.]+) Conexant-EmWeb/R([\\d_]+)\\r\\n.*<TITLE>Siemens ([\\w._ -]+) Router</TITLE>|s p/Conexant-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Siemens $3 router UPnP; UPnP $1/ d/router/ cpe:/a:conexant:emweb:$SUBST(2,\"_\",\".\")/a cpe:/h:siemens:$3/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Unknown/0\\.0 UPnP/([\\d.]+) Conexant-EmWeb/R([\\d_]+)\\r\\n.*<TITLE>Zoom - USB Endpoint</TITLE>.*<TITLE>Zoom DSL Modem Web-Console</TITLE>|s p/Conexant-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Zoom A6 ADSL modem UPnP; UPnP $1/ d/broadband router/ cpe:/a:conexant:emweb:$SUBST(2,\"_\",\".\")/a cpe:/h:zoom:a6/a\nmatch upnp m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Unknown/0\\.0 UPnP/([\\d.]+) GlobespanVirata-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\nExpires: .*\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nWWW-Authenticate: Basic realm=\\\"WebAdmin\\\"\\r\\n\\r\\n\\n\\n<html>\\n<head>\\n\\n<link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"/styles/default\\.css\\\">\\n\\n<title>Authentication failed</title>\\n\\n</head>\\n<body bgcolor=\\\"#ffffff\\\" link=\\\"#3300cc\\\" alink=\\\"#ff0000\\\" vlink=\\\"#990066\\\">\\n\\n| p/GlobespanVirata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Xavi 7768r WAP UPnP; UPnP $1/ d/WAP/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Unknown/0\\.0 UPnP/([\\d.]+) Web Server\\r\\n.*<title>MT882 ADSL Router</title>|s p/Huawei SmartAX MT882 ADSL router UPnP/ i/UPnP $1/ d/broadband router/ cpe:/h:huawei:smartax_mt882/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Nucleus/([-\\w_.]+) UPnP/([\\d.]+) Virata-EmWeb/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"MT882\\\"\\r\\n| p/Virata-EmWeb/ v/$SUBST(3,\"_\",\".\")/ i/Huawei SmartAX MT882 ADSL router UPnP; UPnP $2; Nucleus $1/ d/broadband router/ cpe:/a:virata:emweb:$SUBST(3,\"_\",\".\")/a cpe:/h:huawei:smartax_mt882/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: Nucleus/([\\d.]+) UPnP/([\\d.]+) Virata-EmWeb/R([\\d_]+)\\r\\nWWW-Authenticate: Basic realm=\\\"Viking\\\"\\r\\n\\r\\n401 Unauthorized\\r\\n| p/Virata-EmWeb/ v/$SUBST(3,\"_\",\".\")/ i/Viking router UPnP; UPnP $2; Nucleus $1/ d/router/ cpe:/a:virata:emweb:$SUBST(3,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nServer: Unknown/0\\.0 UPnP/([\\d.]+) Conexant-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\nExpires: .*<title>VoIP/802\\.11g ADSL2\\+ Firewall Router</title>\\n|s p/Conexant-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i|Billion ADSL/WAP/VoIP router UPnP; UPnP $1| d/router/ cpe:/a:conexant:emweb:$SUBST(2,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nServer: Unknown/0\\.0 UPnP/([\\d.]+) Conexant-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\nExpires: .*<head>\\n<title>Huawei xDSL\\r\\n</title>|s p/Conexant-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i|Huawei ADSL/WAP/VoIP router UPnP; UPnP $1| d/router/ cpe:/a:conexant:emweb:$SUBST(2,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Unknown/0\\.0 UPnP/([\\d.]+) Conexant-EmWeb/R([\\d_]+)\\r\\n.*<title>VoIP/802\\.11g ADSL2\\+ Firewall Router</title>|s p/Conexant-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Billion 800VGT ADSL router UPnP; UPnP $1/ d/broadband router/ cpe:/a:conexant:emweb:$SUBST(2,\"_\",\".\")/a cpe:/h:billion:800vgt/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Unknown/0\\.0 UPnP/([\\d.]+) Virata-EmWeb/R([\\d_]+)\\r\\n.*<title>Wireless ADSL Router Control Panel</title>|s p/Virata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Eminent EM4104 WAP UPnP; UPnP $1/ d/WAP/ cpe:/a:virata:emweb:$SUBST(2,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ISOS/([-\\w_.]+) UPnP/([\\d.]+) Conexant-EmWeb/R([\\d_]+)\\r\\n.*<title>Scarlet One</title>|s p/Conexant-EmWeb/ v/$SUBST(3,\"_\",\".\")/ i/Scarlet One UPnP; UPnP $2; ISOS $1/ d/VoIP adapter/ cpe:/a:conexant:emweb:$SUBST(3,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: ISOS/([-\\w_.]+) UPnP/([\\d.]+) Conexant-EmWeb/R([\\d_]+)\\r\\n| p/Conexant-EmWeb/ v/$SUBST(3,\"_\",\".\")/ i/ISOS $1; UPnP $2/ d/broadband router/ cpe:/a:conexant:emweb:$SUBST(3,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 404 Not Found\\r\\nCONTENT-LENGTH: 48\\r\\nDATE: .*\\r\\nSERVER: Linux/6\\.0 UPnP/([\\d.]+) Intel UPnP/([\\d.]+)\\r\\n\\r\\n<html><body><h1>404 Not Found</h1></body></html>$| p/Linksys WVC54GC webcam UPnP/ i/UPnP $1; Intel UPnP $2/ d/webcam/ o/Linux/ cpe:/h:linksys:wvc54gc/ cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nServer: Unknown/0\\.0 UPnP/([\\w._-]+) GlobespanVirata-EmWeb/R([\\w._-]+)\\r\\n.*<title>JetSpeed 500 i</title>|s p/GlobespanVirata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Intracom JetSpeed 500i UPnP; UPnP $1/ d/broadband router/\nmatch upnp m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Nucleus/([\\w._-]+) UPnP/([\\w._-]+) Virata-EmWeb/R([\\w._-]+)\\r\\nWWW-Authenticate: Basic realm=\\\"MT880\\\"\\r\\n\\r\\n\\r\\n| p/Virata-EmWeb/ v/$SUBST(3,\"_\",\".\")/ i/Huawei SmartAX MT880 DSL modem UPnP; UPnP $2; Nucleus $1/ d/broadband router/ cpe:/a:virata:emweb:$SUBST(3,\"_\",\".\")/a cpe:/h:huawei:smartax_mt880/a\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: Linux, UPnP/([\\d.]+), (AR\\w+) Ver ([\\d.]+)\\r\\n| p/Airlink 101 $2 WAP UPnP/ v/$3/ i/UPnP $1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: EPSON_Linux UPnP/([\\d.]+) Epson UPnP SDK/([\\d.]+)\\r\\n.*<title>WorkForce ([\\w+]+)</title>|s p/Epson WorkForce $3 printer UPnP/ i/UPnP $1; Epson UPnP SDK $2/ d/printer/ o/Linux/ cpe:/h:epson:workforce_$3/ cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: EPSON_Linux UPnP/([\\d.]+) Epson UPnP SDK/([\\d.]+)\\r\\n.*<title>Artisan ([\\w+]+)</title>|s p/Epson Artisan $3 printer UPnP/ i/UPnP $1; Epson UPnP SDK $2/ d/printer/ o/Linux/ cpe:/h:epson:artisan_$3/ cpe:/o:linux:linux_kernel/a\nmatch upnp m=^HTTP/1\\.1 200 OK\\r\\n.*SERVER: EPSON_Linux UPnP/([\\d.]+) Epson UPnP SDK/([\\d.]+)\\r\\n.*<title>(?:Epson )?(Stylus (?:Office |Photo )?\\w+)</title>=s p/Epson $3 printer UPnP/ i/UPnP $1; Epson UPnP SDK $2/ d/printer/ o/Linux/ cpe:/h:epson:$3/ cpe:/o:linux:linux_kernel/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: EPSON_Linux UPnP/([\\d.]+) Epson UPnP SDK/([\\d.]+)\\r\\n.*<meta name=\\\"Author\\\" content=\\\"SEIKO EPSON\\\">.*path\\.indexOf\\(\\\"/PRESENTATION/HTML/TOP/INDEX\\.HTML\\\", 0\\);|s p/Epson Stylus NX230 printer UPnP/ i/UPnP $1; Epson UPnP SDK $2/ d/printer/ o/Linux/ cpe:/h:epson:stylus_nx230/ cpe:/o:linux:linux_kernel/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: EPSON_Linux UPnP/([\\d.]+) Epson UPnP SDK/([\\d.]+)\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01//EN \\\"\\r\\n\\\"http://www\\.w3\\.org/TR/html4/strict\\.dtd\\\">\\r\\n<html>\\r\\n<head>\\r\\n<meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\">\\r\\n<meta name=\\\"Author\\\" content=\\\"SEIKO EPSON\\\">|s p/Epson WorkForce WF-2540 printer UPnP/ i/UPnP $1; Epson UPnP SDK $2/ d/printer/ o/Linux/ cpe:/h:epson:wf-2540/ cpe:/o:linux:linux_kernel/\nmatch upnp m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Unknown/0\\.0 UPnP/([\\d.]+) Conexant-EmWeb/R([\\d_]+)\\r\\nContent-Type: text/html\\r\\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\\r\\n(?:[^\\r\\n]+\\r\\n)*?WWW-Authenticate: Basic realm=\\\"WebAdmin\\\"\\r\\n|s p/Conexant-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/Billion 740- or 7400-series ADSL router UPnP; UPnP $1/ d/WAP/ cpe:/a:conexant:emweb:$SUBST(2,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d.*Server: Unknown/0\\.0 UPnP/([\\d.]+) Conexant-EmWeb/R([\\d_]+)\\r\\n|s p/Conexant-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/UPnP $1/ cpe:/a:conexant:emweb:$SUBST(2,\"_\",\".\")/a\nmatch upnp m|^HTTP/1\\.1 511 Not Implemented\\r\\n\\r\\n$| p/Netgear WGU624 WAP UPnP/ d/WAP/ cpe:/h:netgear:wgu624/\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\nSERVER: PRONET (PN-\\w+), UPnP/([\\d.]+)\\r\\nCONTENT-LENGTH: 48\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n<html><body><h1>404 Not Found</h1></body></html>$| p/Pronet $1 WAP UPnP/ i/UPnP $2/ d/WAP/ cpe:/h:pronet:$1/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Linux/2\\.x UPnP/([\\w._-]+) Avtech/([\\w._-]+)\\r\\nConnection: close\\r\\nLast-Modified: .*..\\xbe\\x40..\\xbe..\\x03\\r\\n|s p/Avtech surveillance camera http config/ v/$2/ i/Linux 2.X; UPnP $1/ o/Linux/ cpe:/o:linux:linux_kernel:2/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: Linux/2\\.x UPnP/([\\w._-]+) Avtech/([\\w._-]+)\\r\\nConnection: close\\r\\nLast-Modified: .*\\xb2\\xe8\\xbe\\x1c\\xb2\\xe8\\xbe\\x38\\x62\\x03\\r\\n| p/Avtech CPCAM surveillance camera http config/ v/$2/ i/Linux 2.X; UPnP $1/ o/Linux/ cpe:/o:linux:linux_kernel:2/\nmatch upnp m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nDate: .* GMT\\r\\nServer: RTOS/([\\w._-]+) UPnP/([\\w._]+) ([\\w._-]+)\\s*/([\\w._-]+)\\r\\nX-AV-Server-Info: av=5\\.0; cn=\\\"Sony Corporation\\\"; mn=\\\"BRAVIA | p/Sony Bravia $3 TV DLNA/ v/$4/ i/UPnP $2/ d/media device/ o/RTOS $1/ cpe:/h:sony:bravia_$3:$4/ cpe:/o:greenhills:rtos:$1/\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\nDate: .*\\r\\nX-AV-Client-Info: av=5\\.0; cn=\"Sony Corporation\"; mn=\"BRAVIA (KD-[^\"]+)\";| p/Sony Bravia $1 TV DLNA/ cpe:/h:sony:bravia_$1/\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: \\r\\nContent-Length: 0\\r\\nConnection: close\\r\\n\\r\\n| p/AllShare UPnP/ o/Bada/ cpe:/o:samsung:bada:1.2/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Linux/i686 UPnP/([\\d.]+) DLNADOC/([\\d.]+) LGE_DLNA_SDK/([\\d.]+)\\r\\n| p/LG TV upnp/ i/UPnP $1; DLNADOC $2; LGE_DLNA_SDK $3/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nSERVER: Linux/([\\w._-]+) UPnP/([\\w._-]+) DLNADOC/([\\w._-]+) INTEL_NMPR/([\\w._-]+) LGE_DLNA_SDK/([\\w._-]+)\\r\\n| p/LG LW5700 TV upnp/ i/UPnP $2; DLNADOC $3; INTEL_NMPR $4; LGE_DLNA_SDK $5/ d/media device/ o/Linux $1/ cpe:/h:lg:lw5700/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 500 Internal server error\\r\\nDATE: .* GMT\\r\\nSERVER: OpenRG/([\\w._-]+) UPnP/([\\w._-]+) Actiontec/RG_VERSION\\r\\nCONNECTION: close\\r\\n\\r\\n$| p/Jungo OpenRG upnp/ v/$1/ i/UPnP $2/\n# E303s-2, K4201\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\nSERVER: PACKAGE_VERSION HUAWEI, UPnP, HUAWEI SDK for UPnP devices/  \\r\\nCONTENT-LENGTH: 48\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n<html><body><h1>404 Not Found</h1></body></html>$| p/Huawei broadband router upnp/ d/broadband router/ o/VxWorks/ cpe:/o:huawei:vxworks/\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html; charset=\\\"utf-8\\\"\\r\\nServer: Linux/([\\w._-]+) CyberHTTP/([\\d.]+)\\r\\nContent-Length: 0\\r\\nDate: .*\\r\\n\\r\\n| p/CyberLink upnp/ v/$2/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 404 Not Found\\r\\nDATE: .*\\r\\nConnection: Keep-Alive\\r\\nServer: LINUX/([\\w._-]+) UPnP/([\\d.]+) BRCM400-UPnP/([\\d.]+)\\r\\n| p/Broadcom upnpd/ v/$3/ i/UPnP $2/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 404 Not Found\\r\\nServer: NFLC/([\\w._-]+) UPnP/([\\w._-]+) DLNADOC/([\\w._-]+)\\r\\n| p/NetFront Living Connect upnpd/ v/$1/ i/UPnP $2; DLNADOC $3/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?SERVER: XboxUpnp/([\\w._-]+) UPnP/([\\w._-]+) Xbox/2\\.0\\.(\\d+)\\.0\\r\\n|s p/Microsoft Xbox 360 upnpd/ v/$1/ i/UPnP $2; Xbox Dashboard 2.0.$3.0/ o/Xbox 360/ cpe:/h:microsoft:xbox_360_kernel:$3/\nmatch upnp m|^HTTP/1\\.1 404 Not Found\\r\\nSERVER: Linux/([\\w._-]+) UPnP/([\\w._-]+) Motorola-DLNA-Stack-DLNADOC/([\\w._-]+)\\r\\n| p/Motorola DLNA Stack upnpd/ i/UPnP $2; DLNA $3/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\nSERVER: ipos/([\\w._-]+) UPnP/([\\w._-]+) (RNX-[\\w._-]+)/1\\.0\\r\\n| p/ipOS upnpd/ i/Rosewill $3; UPnP $2/ d/broadband router/ o/ipOS $1/ cpe:/h:rosewill:$3/ cpe:/o:ubicom:ipos:$1/\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\nSERVER: ipos/([\\w._-]+) UPnP/([\\w._-]+) (TL-[\\w._-]+)/1\\.0\\r\\n| p/ipOS upnpd/ i/TP-LINK $3; UPnP $2/ d/broadband router/ o/ipOS $1/ cpe:/h:tp-link:$3/ cpe:/o:ubicom:ipos:$1/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: UPnP/([\\w._-]+) DLNADOC/([\\w._-]+) Allwinnertech/([\\w._-]+)\\r\\n\\r\\n|s p/AllWinner upnpd/ v/$3/ i/UPnP $1; DLNADOC $2/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\nServer: Linux (([234]\\.[\\d.]+)[\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) ReadyDLNA/([\\w._-]+)\\r\\n| p/ReadyDLNA/ v/$5/ i/Linux $1; DLNADOC $3; UPnP $4/ o/Linux/ cpe:/o:linux:linux_kernel:$2/\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\nSERVER: Roteador Wireless (WR\\w+), UPnP/([\\d.]+)\\r\\n| p/Intelbras $1 upnpd/ i/UPnP $2/ d/WAP/\nmatch upnp m|^HTTP/1\\.0 500 Internal Server Error\\r\\nContent-Type: text/xml\\r\\nContent-Language: en\\r\\nServer: WinRoute ([\\w._-]+) UPnP/([\\w._-]+) module\\r\\n| p/Kerio WinRoute UPnP module/ v/$1/ i/UPnP $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch upnp m|^HTTP/1\\.1 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?SERVER: IPI/([\\w._-]+) UPnP/([\\w._-]+) DLNADOC/([\\w._-]+)\\r\\n|s p/IPI Media Renderer upnpd/ v/$1/ i/UPnP $2; DLNADOC $3/ cpe:/a:ip_infusion:media_renderer:$1/\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\nDate: .*\\r\\nX-AV-Client-Info: av=5\\.0; cn=\\\"Sony Ericsson\\\"; mn=\\\"([^\"]+)\\\"; mv=\\\"2\\.0\\\";\\r\\n\\r\\n| p/Sony Ericsson $1 UPnP AV client/ d/phone/\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\nSERVER: Wireless [\\w+] Router ([\\w._-]+), UPnP/1\\.0\\r\\n| p/TP-LINK $1 upnpd/ d/WAP/ cpe:/h:tp-link:$1/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nDate: .* GMT\\r\\nRealTimeInfo\\.dlna\\.org: DLNA\\.ORG_TLAG=\\*\\r\\nSERVER: BH\\r\\n\\r\\n| p|Osmosys BH/DLNA Media Server| d/media device/ cpe:/a:osmosys:bh_dlna_media_server/\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/xml\\r\\nConnection: close\\r\\nContent-Length: 127\\r\\nServer: \\w+ Wireless [\\w/] Router ([\\w-]+), UPnP/1\\.0\\r\\n\\r\\n<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>Not Found</H1>Invalid device or service descriptor !\\r\\n</BODY></HTML>\\r\\n| p/Fast $1 WAP upnpd/ d/WAP/ cpe:/h:fast:$1/\nmatch upnp m=^HTTP/1\\.1 400 Bad Request\\r\\nS(?:ERVER|erver): HDHomeRun/([\\w._-]+) UPnP/([\\w._-]+)\\r\\n= p/SiliconDust HDHomeRun set top box upnpd/ v/$1/ i/UPnP $2/ d/media device/ cpe:/h:silicondust:hdhomerun/\nmatch upnp m|^HTTP/1\\.0 404 Not Found\\r\\nSERVER: Linux/([\\w._-]+) UPnP/([\\d.]+) NDS_MHF DLNADOC/([\\d.]+)\\r\\n\\r\\n| p/Samsung UPC Horizon TV upnpd/ i/Linux $1; UPnP $2; DLNADOC $3/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel:$1/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Content-type: text/html\\r\\nServer: Linux UPnP/([\\d.]+) Sonos/([\\w._-]+) \\(([^)]+)\\)\\r\\nConnection: close\\r\\n\\r\\n|s p/Sonos upnpd/ v/$2/ i/UPnP $1; model $3/ o/Linux/ cpe:/o:linux:linux_kernel/a\n# formerly XBMC\nmatch upnp m|^HTTP/1\\.1 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: UPnP/([\\d.]+) DLNADOC/([\\d.]+) Kodi\\r\\n|s p/Kodi upnpd/ i/UPnP $1; DLNADOC $2/\nmatch upnp m=^HTTP/1\\.1 404 Not Found\\r\\nSERVER: Linux/((2\\.[46]\\.\\d+|\\d\\.\\d+)\\S*) UPnP/([\\d.]+) DiXiM/([\\d.]+)\\r\\n= p/DiXiM upnpd/ v/$4/ i/UPnP $3; Linux $1/ o/Linux/ cpe:/a:digion:dixim_media_player:$4/ cpe:/o:linux:linux_kernel:$2/\nmatch upnp m=HTTP/1\\.0 404 Not Found\\r\\nSERVER: TP-LINK (?:Portable )?Wireless (?:(?:Lite )?(?:N|G) (?:3G(?:/4G)? )?)?(?:Dual Band |Nano )?(?:Gigabit )?(?:AP|Router|Access Point|Range Extender) ([\\w /+-]+), UPnP/([\\d.]+)\\r\\n= p/TP-LINK $1 WAP upnpd/ i/UPnP $2/ d/WAP/ cpe:/h:tp-link:$1/a\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: Linux, UPnP/([\\d.]+), (DAP-\\d+) Ver ([\\d.]+)\\r\\n| p/D-Link $2 WAP upnpd/ v/$3/ i/UPnP $1/ cpe:/h:dlink:$2/a\nmatch upnp m|^HTTP/1\\.1 412 Precondition Failed\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nServer: ([^,]+), UPnP/([\\d.]+) DLNADOC/([\\d.]+), KooRaRoo Media Server/([\\d.]+)\\r\\n\\r\\n| p/KooRaRoo upnpd/ v/$4/ i/UPnP $2; DLNADOC $3/ o/$1/ cpe:/a:shv-tal:kooraroo:$4/\n# Unsure of device type, have seen this one on P6 phone.\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nSERVER: Linux/([\\d.]+)-\\w+-\\w+ UPnP/([\\d.]+) HUAWEI_iCOS/iCOS V1R1C00\\r\\nCONNECTION: close\\r\\nCONTENT-LENGTH: 50\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n<html><body><h1>400 Bad Request</h1></body></html>| p/Huawei iCOS upnpd/ i/UPnP $2/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/a\nmatch upnp m|^HTTP/1\\.0 400 Bad Request \\r\\nCONTENT-TYPE: text/xml; charset=\"utf-8\" \\r\\nSERVER: UPnP/([\\d.]+) Samsung AllShare Server/([\\d.]+) \\r\\nCONTENT-LENGTH: \\d+ \\r\\n\\r\\n| p/Samsung AllShare upnpd/ v/$2/ i/UPnP $1/ cpe:/a:samsung:allshare_server:$2/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nCONTENT-TYPE: text/xml; charset=\"utf-8\"\\r\\nDATE: .*\\r\\nEXT: \\r\\nSERVER: UPnP/([\\d.]+) AwoX/([\\d.]+)\\r\\nCONTENT-LENGTH: 0\\r\\n| p/AwoX upnpd/ v/$2/ i/UPnP $1/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSERVER: TP-LINK SMB (TL-[\\w]+), UPnP/([\\d.]+)\\r\\nCONTENT-LENGTH: \\d+\\r\\nCONTENT-TYPE: text/html\\r\\n\\r\\n| p/TP-LINK upnpd/ i/model: $1; UPnP $2/ cpe:/h:tp-link:$1/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSERVER: AIT Multimedia Network Solution, UPnP/([\\d.]+) devices/([\\d.]+)\\r\\n| p/AIT Multimedia Network Solution/ v/$2/ i/UPnP $1; Polaroid Cube camera/\nmatch upnp m=^HTTP/1\\.1 200 OK\\r.*\\nS(?:erver|ERVER): (Windows_[^-]+)_(R\\d+)-([^-]+)-[\\d.]+, UPnP/([\\d.]+), UMS/([\\d.]+)\\r\\n=s p/Universal Media Server/ v/$5/ i/arch: $3; UPnP $4/ o/$SUBST(1,\"_\",\" \") $2/ cpe:/a:universal_media_server:universal_media_server:$5/ cpe:/o:microsoft:$1:$2/\nmatch upnp m=^HTTP/1\\.1 200 OK\\r.*\\nS(?:erver|ERVER): (Windows_[^-]+)-([^-]+)-[\\d.]+, UPnP/([\\d.]+), UMS/([\\d.]+)\\r\\n=s p/Universal Media Server/ v/$4/ i/arch: $2; UPnP $3/ o/$SUBST(1,\"_\",\" \")/ cpe:/a:universal_media_server:universal_media_server:$4/ cpe:/o:microsoft:$1/\nmatch upnp m=^HTTP/1\\.1 200 OK\\r.*\\nS(?:erver|ERVER): Linux-([^-]+)-(\\d.[\\w._-]+), UPnP/([\\d.]+), UMS/([\\d.]+)\\r\\n=s p/Universal Media Server/ v/$4/ i/arch: $1; UPnP $3/ o/Linux $2/ cpe:/a:universal_media_server:universal_media_server:$4/ cpe:/o:linux:linux_kernel:$2/a\nmatch upnp m=^HTTP/1\\.1 200 OK\\r.*\\nS(?:erver|ERVER): Linux-([^-]+)-(\\d.[\\w._-]+), UPnP/([\\d.]+) DLNADOC/([\\d.]+), UMS/([\\d.]+)\\r\\n=s p/Universal Media Server/ v/$5/ i/arch: $1; UPnP $3; DLNADOC $4/ o/Linux $2/ cpe:/a:universal_media_server:universal_media_server:$4/ cpe:/o:linux:linux_kernel:$2/a\nmatch upnp m=^HTTP/1\\.1 200 OK\\r.*\\nS(?:erver|ERVER): Mac_OS_X-([^-]+)-(\\d.[\\w._-]+), UPnP/([\\d.]+), UMS/([\\d.]+)\\r\\n=s p/Universal Media Server/ v/$4/ i/arch: $1; UPnP $3/ o/Mac OS X $2/ cpe:/a:universal_media_server:universal_media_server:$4/ cpe:/o:apple:mac_os_x:$2/\nmatch upnp m|^HTTP/1\\.1 412 Failed\\r\\nServer: WINDOWS UPnP/([\\d.]+) Intel MicroStack/([\\d.]+)\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Intel Developer Tools for UPnP upnpd/ v/$2/ i/UPnP $1/ o/Windows/ cpe:/a:intel:developer_tools_for_upnp:$2/ cpe:/o:microsoft:windows/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nDate: Sun, 31 Jul 2016 13:02:01 GMT\\r\\nServer: Linux/([ix][\\w_]+) UPnP/([\\d.]+) SST/1\\.0 /\\r\\n| p/LG SST Device upnpd/ i/UPnP $2; arch: $1/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDLNADeviceName\\.lge\\.com: %5bLG%5d%20webOS%20TV%20([\\w-]+)\\r\\nDate: .*\\r\\nServer: Linux/i686 UPnP/([\\d,.]+) DLNADOC/([\\d.]+) LGE WebOS TV/Version ([\\d.]+)\\r\\n| p/LG WebOS TV upnpd/ i/model: $1; WebOS $4; UPnP $SUBST(2,\",\",\".\"); DLNADOC $3/ d/media device/ o/Linux/ cpe:/h:lg:$1/ cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nDate: .*\\r\\nServer: Neptune/([\\d.]+)\\r\\nDLNADeviceName\\.lge\\.com: %5bTV%5d%5bLG%5d([\\w-]+)\\r\\n| p/Platinum upnpd/ i/LG TV model: $2; Neptune $1/ d/media device/ o/Linux/ cpe:/a:plutinosoft:neptune:$1/ cpe:/a:plutinosoft:platinum/ cpe:/h:lg:$2/ cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nCONTENT-TYPE:  text/xml; charset=\"utf-8\"\\r\\nServer: Mac OS X, UPnP/([\\d.]+), Elgato EyeConnect/([\\d.]+)\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"utf-8\"\\?>\\n.*<friendlyName>EyeConnect \\(([\\w._-]+)\\)</friendlyName>|s p/Elgato EyeConnect media server upnpd/ v/$2/ i/UPnP $1/ o/OS X/ h/$3/ cpe:/a:elgato:eyeconnect:$2/ cpe:/o:apple:mac_os_x/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: text/xml\\r\\nDate: [^\\r\\n]*\\r\\nExpires: [^\\r\\n]*\\r\\nLast-Modified: [^\\r\\n]*\\r\\nPragma: no-cache\\r\\nServer: WebServer/1\\.0 UPnP/([\\d.]+)\\r\\n\\r\\n<\\?xml version=\"1\\.0\"\\?>\\n.*<manufacturer>ZTE</manufacturer>\\n.*<modelName>([^<]+)</modelName>|s p/ZTE $2 router upnpd/ i/UPnP $1/ d/broadband router/ cpe:/h:zte:$2/a\nmatch upnp m|^HTTP/1\\.0 500 Internal Server Error\\r\\nSERVER: Unspecified, UPnP/([\\d.]+), SoftAtHome\\r\\n| p/SoftAtHome upnpd/ i/UPnP $1/\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Linux_Android_ARM/4\\.0 UPnP/([\\d.]+) DLNADOC/([\\d.]+) EShare/([\\d.]+)\\r\\n|s p/EShare upnpd/ v/$3/ i/UPnP $1; DLNADOC $2/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nServer: WebOS/([\\d.]+) UPnP/([\\d.]+)\\r\\n.*<manufacturer>LG Electronics</manufacturer>|s p/LG WebOS upnpd/ i/WebOS $1; UPnP $2/ d/media device/\n# Several internet radios\nmatch upnp m|^HTTP/1\\.1 412 Failed\\r\\nServer: FSL DLNADOC/([\\d.]+) UPnP Stack/1\\.0\\r\\nContent-Length: 0\\r\\n\\r\\n| p/FSL upnpd/ i/DLNADOC $1/ d/media device/\nmatch upnp m|^HTTP/1\\.1 412 Precondition Failed\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nServer: Audi-MIB2HIGH-(G\\d+)/([\\d.]+) DLNADOC/([\\d.]+)/1\\r\\n\\r\\n| p/Audi MIB High $1 entertainment system/ v/$2/ i/DLNADOC $3/\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\nCONTENT-TYPE: text/xml\\r\\nContent-Length: \\d+\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"utf-8\"\\?>\\r\\n<root xmlns=\"urn:schemas-upnp-org:device-1-0\">\\r\\n.*<friendlyName>Stream What You Hear \\(([^)]+)\\):|s p/Stream What You Hear unpnd/ o/Windows/ h/$1/ cpe:/a:sebastian_warin:streamwhatyouhear/ cpe:/o:microsoft:windows/a\nmatch upnp m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nDATE: .*\\r\\ncontentFeatures\\.dlna\\.org: \\r\\ntransferMode\\.dlna\\.org: \\r\\nEXT:\\r\\nServer: Linux/(\\d[\\d.]+)SR[\\d_]+, UPnP/([\\d.]+), SmartStor Media Server/([\\d.]+)\\r\\n\\r\\n<\\?xml version=\"1\\.0\" encoding=\"UTF-8\"\\?>\\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1\\.0 Strict//EN\" \\nhttp://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\">\\n<html>\\n<script :language=\"javascript\">\\nthis\\.location = \"http://[^\"]*\"\\n</script>\\n<h1>system information</h1>\\n<p>\\nVersion: [\\d.]+<br />\\nHostname: ([\\w.-]+)<br />\\nOS: Linux [^<]*<br />\\nSQLite: ([\\d.]+)\\n</p>| p/Promise SmartStor Media Server/ v/$3/ i/UPnP $2; SQLite $5/ d/storage-misc/ o/Linux $1/ h/$4/ cpe:/a:promise:smartstor_media_server:$3/ cpe:/a:sqlite:sqlite:$5/ cpe:/o:linux:linux_kernel:$1/a\n\nsoftmatch upnp m|^HTTP/1.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server:[^\\r\\n]*UPnP/1.0|si\n\nmatch upnp m|^HTTP/1\\.1 200 OK\\r\\ncontent-length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n<\\?xml version=\"1\\.0\"\\?>\\n<root xmlns=\"urn:schemas-wink-com:device-1-0\">\\n<specVersion>\\n<major>1</major>\\n<minor>0</minor>\\n</specVersion>\\n<URLBase>https://[^<]+</URLBase>\\n<device>\\n<deviceType>urn:wink-com:device:hub:([^<:]+)</deviceType>\\n| p/Wink Hub $1 API httpd/ d/specialized/ cpe:/h:wink:hub_$1/\nmatch upnp m|^HTTP/1\\.0 200 OK\\nCache-Control: no-cache\\nExpires: -1\\nDate: \\d\\d\\d\\d/\\d\\d/\\d\\d \\d\\d:\\d\\d:\\d\\d\\.\\d+\\n.*<deviceType>urn:domotz:fingbox:([\\d.]+)<|s p/Domotz Fingbox upnpd/ v/$1/ cpe:/a:domotz:fingbox_agent:$1/\nsoftmatch upnp m|^HTTP/1\\.[01].*xmlns=[\"']urn:schemas-upnp-org:device-1-0[\"']|s\n\n# UUCP 1.06.2 on Linux 2.4.X\n# Taylor UUCP 1.06.2 on Slackware\nmatch uucp m|^login: Password:$| p/Taylor uucpd/\n# uucico prompt does not have space after \"Password:\",\n# but Debian-contributed in.uucpd calls pam_authenticate, which does.\nmatch uucp m|^login: Password: $| p/Debian in.uucpd, probably Taylor uucpd/ i/PAM auth/ o/Linux/ cpe:/o:debian:debian_linux/ cpe:/o:linux:linux_kernel/\nmatch uucp m|^login: Login incorrect\\.$| p/Solaris uucpd/ o/Solaris/ cpe:/o:sun:sunos/a\n\n# Veritas Netbackup client v.3.4\n# Veritas Netbackup 4.5 Java listener\nmatch netbackup m|^1000      2\\n43\\nunexpected message received\\n$| p/Veritas Netbackup java listener/ cpe:/a:symantec:veritas_netbackup/\n\n# Veritas Backup Exec 9.0 on Windows\nmatch ndmp m|^\\x80\\0\\0\\$\\0\\0\\0\\x01....\\0\\0\\0\\0\\0\\0\\x05\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x03\\0\\0\\0\\0|s p/Veritas Backup Exec ndmp/ v/9.0/ cpe:/a:symantec:veritas_backup_exec:9.0/\n# Possibly a different version? -Doug\nmatch ndmp m|^\\x80\\0\\0\\$\\0\\0\\0\\x01....\\0\\0\\0\\0\\0\\0\\x05\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\0\\0\\0|s p/Veritas Backup Exec ndmp/ cpe:/a:symantec:veritas_backup_exec/\n\n# DAZ Studio 4.5, port 27997\nmatch valentinadb m|^dddd\\0\\0\\0\\0\\0\\0\\0\\x0b\\xf2\\xf2\\xf2\\xf2\\0\\0\\0_\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0F\\0\\0\\0\\x02\\0\\0\\0=\\0\\x08%\\x15\\0\\0\\0\\x1a\\0R\\0e\\0c\\0e\\0i\\0v\\0e\\0d\\0 \\0p\\0a\\0c\\0k\\0e\\0t\\0 \\0i\\0s\\0 \\0b\\0r\\0o\\0k\\0e\\0n\\0\\.\\0\\xf4\\xf4\\xf4\\xf4| p/Valentina DB/\n\nmatch vnc-http m|^HTTP/1\\.1 200 OK\\r\\nServer: RealVNC/([-.\\w]+)\\r\\n.*<APPLET CODE=\"?vncviewer/VNCViewer\\.class\"? ARCHIVE=\"?vncviewer\\.jar\"?\\r?\\n *WIDTH=\"?(\\d+)\"? HEIGHT=\"?(\\d+)\"?>\\r?\\n<PARAM name=\\\"port\\\" value=\\\"(\\d+)\\\">\\r?\\n</APPLET>|si p/RealVNC/ v/$1/ i/resolution: $2x$3; VNC TCP port: $4/ cpe:/a:realvnc:realvnc:$1/\n# Sometimes extra HTTP crap pushes the extra info out of the header we capture:\nmatch vnc-http m|^HTTP/1\\.1 200 OK\\r\\nServer: RealVNC/([-.\\w]+)\\r\\n| p/RealVNC/ v/$1/ cpe:/a:realvnc:realvnc:$1/\nmatch vnc-http m|^HTTP/1\\.1 200 OK\\r\\nServer: RealVNC-x0vncserver/([\\w._ ()-]+)\\r\\n.*<applet code=\\\"vncviewer/VNCViewer\\.class\\\" archive=\\\"vncviewer\\.jar\\\"\\n        width=\\\"(\\d+)\\\" height=\\\"(\\d+)\\\">\\n<param name=\\\"port\\\" value=\\\"(\\d+)\\\">|s p/RealVNC x0vncserver/ v/$1/ i/resolution: $2x$3; VNC TCP port $4/ cpe:/a:realvnc:realvnc:$1/\n\nmatch vnc-http m|^HTTP/1\\.1 200 OK\\r\\nServer: VNC Server Enterprise Edition/E([\\w._-]+) \\(r(\\d+)\\)\\r\\n.*<applet code=\\\"vncviewer/VNCViewer\\.class\\\" archive=\\\"vncviewer\\.jar\\\"\\r\\n        width=\\\"(\\d+)\\\" height=\\\"(\\d+)\\\">\\r\\n<param name=\\\"port\\\" value=\\\"(\\d+)\\\">|s p/VNC Server Enterprise Edition httpd/ v/$1 r$2/ i/resolution: $3x$4; VNC port $5/ cpe:/a:realvnc:realvnc:$1::enterprise/\nmatch vnc-http m|^HTTP/1\\.1 200 OK\\r\\nServer: VNC Server Personal Edition/P([\\w._-]+) \\(r(\\d+)\\)\\r\\n.*<applet code=\\\"vncviewer/VNCViewer\\.class\\\" archive=\\\"vncviewer\\.jar\\\"\\r\\n        width=\\\"(\\d+)\\\" height=\\\"(\\d+)\\\">\\r\\n<param name=\\\"port\\\" value=\\\"(\\d+)\\\">|s p/VNC Server Personal Edition httpd/ v/$1 r$2/ i/resolution: $3x$4; VNC port $5/ cpe:/a:realvnc:realvnc:$1::personal/\n\n# RealVNC Unknown Version\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n<HTML><TITLE>VNC desktop</TITLE>\\n<APPLET CODE=vncviewer\\.class ARCHIVE=vncviewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\n<param name=PORT value=(\\d+)></APPLET></HTML>\\n| p/RealVNC/ i/resolution: $1x$2; VNC TCP port: $3/ cpe:/a:realvnc:realvnc/\n\n# TightVNC Server version 1.2.2 HTTP on Windows 2000 SP2\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n<HTML><TITLE>TightVNC desktop \\[([-.\\w]+)\\]</TITLE>\\n<APPLET CODE=vncviewer\\.class ARCHIVE=vncviewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\n<param name=PORT value=(\\d+)>| p/TightVNC/ v/1.2.2/ i/resolution: $2x$3; VNC TCP port: $4/ h/$1/ cpe:/a:tightvnc:tightvnc:1.2.2/a\n# Tightvnc-1.2.3\nmatch vnc-http m|^HTTP/1\\.0 404 Not found\\n\\n<HEAD><TITLE>File Not Found</TITLE></HEAD>\\n<BODY><H1>File Not Found</H1></BODY>\\n$| p/TightVNC/ cpe:/a:tightvnc:tightvnc/a\n# Tightvnc 1.2.3\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n<HTML><TITLE>TightVNC desktop \\[([-.\\w]+)\\]</TITLE>\\n<APPLET CODE=VncViewer\\.class ARCHIVE=VncViewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\n<param name=PORT value=(\\d+)>| p/TightVNC/ v/1.2.3/ i/user: $1; resolution: $2x$3; VNC TCP port: $4/ cpe:/a:tightvnc:tightvnc:1.2.3/a\n# TightVNC 1.2.6\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n<HTML>\\n  <HEAD><TITLE>TightVNC desktop \\[[-.\\w]+\\]| p/TightVNC/ cpe:/a:tightvnc:tightvnc/a\n# TightVNC 1.2.8\nmatch vnc-http m|^HTTP/1\\.0 200 OK[\\r\\n]*.*<!-- \\n     index\\.vnc - default HTML page for TightVNC Java viewer applet, to be\\n     used with Xvnc\\. On any file ending in \\.vnc, the HTTP server embedded in\\n     Xvnc will substitute the following variables when preceded by a dollar:\\n     USER, DESKTOP, DISPLAY, APPLETWIDTH, APPLETHEIGHT, WIDTH, HEIGHT, PORT,\\n.*<TITLE>\\n(\\w+)'s X desktop.*<APPLET CODE=VncViewer\\.class ARCHIVE=VncViewer\\.jar\\n        WIDTH=(\\d+) HEIGHT=(\\d+)>\\n<param name=PORT value=(\\d+)>\\n\\n</APPLET>|s p/TightVNC/ v/1.2.8/ i/user: $1; resolution: $2x$3; VNC TCP port: $4/ cpe:/a:tightvnc:tightvnc:1.2.8/a\n# TightVNC 1.2.8 - I guess it gets cut off sometimes?\nmatch vnc-http m|^HTTP/1\\.0 200 OK[\\r\\n]*.*<!-- \\n     index\\.vnc - default HTML page for TightVNC Java viewer applet, to be\\n     used with Xvnc\\. On any file ending in \\.vnc, the HTTP server embedded in\\n     Xvnc will substitute the following variables when preceded by a dollar:\\n     USER, DESKTOP, DISPLAY, APPLETWIDTH, APPLETHEIGHT, WIDTH, HEIGHT, PORT,\\n|s p/TightVNC/ v/1.2.8/ cpe:/a:tightvnc:tightvnc:1.2.8/a\n# TightVNC 1.2.9\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n.*<HTML><HEAD><TITLE>Remote Desktop</TITLE></HEAD>\\n<BODY>\\n<APPLET CODE=VncViewer\\.class ARCHIVE=VncViewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\n\\t<param name=PORT value=(\\d+)>\\n</APPLET>\\n</BODY></HTML>\\n|s p/TightVNC/ v/1.2.9/ i/resolution: $1x$2; VNC TCP port $3/ cpe:/a:tightvnc:tightvnc:1.2.9/a\n# NetWare VNCServer\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n.*<!-- \\r\\n     index\\.vnc - default HTML page for TightVNC Java viewer applet, to be.*<TITLE>\\r\\n([\\d\\w]+) - NetWare VNCServer desktop.*<APPLET CODE=VncViewer\\.class ARCHIVE=VncViewer\\.jar\\r\\n *WIDTH=(\\d+) HEIGHT=(\\d+)>\\r\\n<param name=PORT value=(\\d+)>|s p/NetWare VNC Desktop/ i/user: $1; resolution: $2x$3; VNC TCP port: $4/\n# WinVNC 3.3.7 Build Mar 5 2003\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\r\\n\\r\\n<HTML><TITLE>VNC desktop \\[([-.\\w]+)\\]</TITLE>\\n<APPLET CODE=vncviewer\\.class ARCHIVE=vncviewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\n<param name=PORT value=(\\d+)| p/WinVNC/ v/3.3.7/ i/Server: $1; resolution: $2x$3; VNC TCP port: $4/\n# WinVNC 3.3.3\n# Tight VNC 1.5.2\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n<HTML><TITLE>VNC desktop \\[([-.\\w]+)\\]</TITLE>\\n<APPLET CODE=vncviewer\\.class ARCHIVE=vncviewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\n<param name=PORT value=(\\d+)></APPLET></HTML>\\n$| p/WinVNC/ i/Server: $1; resolution: $2x$3; VNC TCP port: $4; May be standard or TightVNC/\nmatch vnc-http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\n\\r\\n<HTML>\\r\\n  <HEAD><TITLE>Siemens Sm@rtClient Desktop \\[WinVNC\\]</TITLE></HEAD>\\r\\n  <BODY>\\r\\n<APPLET CODE=VncViewer\\.class ARCHIVE=VncViewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\r\\n           <PARAM NAME=\\\"PORT\\\" VALUE=\\\"(\\d+)\\\">\\r\\n    </APPLET><BR>\\r\\n  </BODY>\\r\\n</HTML>\\r\\n| p/WinVNC/ i/Siemens Sm@rtClient Desktop; resolution $1x$2; VNC TCP port: $3/\n# Ultr@VNC Win32 v1.0.9 - HTTP\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n<HTML>\\n  <HEAD><TITLE>Ultr@VNC Desktop \\[[-. \\w]+\\] ------- Ultr@VNC Home Page is  http://ultravnc\\.sf\\.net -------</TITLE></HEAD>\\n  <BODY>\\n  <SPAN style='position: absolute; top:0px;left:0px'>\\n    <APPLET CODE=VncViewer\\.class ARCHIVE=VncViewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\n      <PARAM NAME=PORT VALUE=(\\d+)>\\n      <PARAM NAME=ENCODING VALUE=Tight>\\n    </APPLET>  </SPAN>\\n  </BODY>\\n| p/Ultr@VNC/ i/resolution: $1x$2; VNC TCP port: $3/ cpe:/a:ultravnc:ultravnc/\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n<HTML>\\n  <HEAD><TITLE> \\[([-. \\w]+)\\] </TITLE></HEAD>\\n  <BODY>\\n  <SPAN style='position: absolute; top:0px;left:0px'>\\n    <APPLET CODE=VncViewer\\.class ARCHIVE=VncViewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\n      <PARAM NAME=PORT VALUE=(\\d+)>\\n      <PARAM NAME=ENCODING VALUE=Tight>\\n    </APPLET>  </SPAN>\\n  </BODY>\\n</HTML>\\n| p/Ultr@VNC/ i/Name $1; resolution: $2x$3; VNC TCP port: $4/ cpe:/a:ultravnc:ultravnc/\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n<HTML>\\n  <HEAD><TITLE> \\[([-. \\w]+)\\] </TITLE></HEAD>\\n  <BODY>\\n  <SPAN style='position: absolute; top:0px;left:0px'>\\n<OBJECT \\n    ID='VncViewer'\\n.*WIDTH = (\\d+) HEIGHT = (\\d+) >.*<PARAM NAME = PORT VALUE=(\\d+)>|s p/Ultr@VNC/ i/Name $1; resolution: $2x$3; VNC TCP port: $4/ cpe:/a:ultravnc:ultravnc/\n# VNC to java display applet over http. Final AT&T release\nmatch vnc-http m|^HTTP/1\\.0 200 .*<!-- index\\.vnc - default html page for Java VNC viewer applet.*<TITLE>\\n([\\w._-]+)'s .*<APPLET CODE=vncviewer\\.class ARCHIVE=vncviewer\\.jar.*WIDTH=(\\d+).*HEIGHT=(\\d+).*name=PORT value=(\\d+)|s p/AT&T VNC/ i/user: $1; resolution: $2x$3; VNC TCP port $4/\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\r\\n.*<!-- index\\.vnc - default html page for Java VNC viewer applet\\..*<TITLE>\\n\\?'s Android desktop \\(([\\w._-]+):1\\)\\n</TITLE>\\n<APPLET CODE=VncViewer\\.class ARCHIVE=VncViewer\\.jar\\n        WIDTH=(\\d+) HEIGHT=(\\d+)>\\n<param name=PORT value=(\\d+)>.*Further help: <BR>\\n<A href=\\\"http://onaips\\.blogspot\\.com/\\\">oNaiPs Blog</A><BR>\\n<A href=\\\"http://www\\.tightvnc\\.com/\\\">www\\.TightVNC\\.com</A>\\n</HTML>\\n$|s p/Android VNC Server/ i/resolution: $2x$3; VNC TCP port $4/ h/$1/\n# KDE Built-in VNC Server\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n.*<HTML><HEAD><TITLE>(.*)'s desktop</TITLE></HEAD>\\n<BODY>\\n<APPLET CODE=(?:vncviewer/)?[vV][nN][cC][vV]iewer\\.class ARCHIVE=[vV]nc[vV]iewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\n\\t<param name=PORT value=(\\d+)>\\n</APPLET>\\n</BODY></HTML>\\n|s p/Synergy VNC/ i/user: $1; resolution: $2x$3; VNC TCP port: $4/\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n.*<TITLE>eSVNC Desktop \\[([\\w._-]+)\\]</TITLE>.*<APPLET CODE=VncViewer\\.class ARCHIVE=VncViewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>.*<PARAM NAME=PORT VALUE=(\\d+)>|s p/eSVNC/ i/resolution: $2x$3; VNC TCP port $4/ h/$1/\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\r\\n.*<TITLE>\\n([\\w._-]+)'s [\\w._:-]+ desktop \\([\\w._:-]+\\)\\n</TITLE>\\n<APPLET CODE=VncViewer\\.class ARCHIVE=VncViewer\\.jar\\n        WIDTH=(\\d+) HEIGHT=(\\d+)>\\n<param name=PORT value=(\\d+)>\\n<param name=\\\"Open New Window\\\" value=yes>\\n</APPLET>\\n<BR>\\n<A href=\\\"http://www\\.tightvnc\\.com/\\\">|s p/X11VNC/ i/user: $1; Resolution $2x$3; VNC TCP port: $4/\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\r\\n.*<TITLE>TightVNC desktop \\[([\\w._-]+)\\]</TITLE>.*<APPLET ARCHIVE=\\\"VncViewer\\.jar\\\" CODE=VncViewer WIDTH=1 HEIGHT=1>\\n      <PARAM NAME=\\\"PORT\\\" VALUE=\\\"(\\d+)\\\">\\n      <PARAM NAME=\\\"Open new window\\\" VALUE=\\\"YES\\\">\\n\\n    </APPLET><BR>\\n    <A HREF=\\\"http://www\\.tightvnc\\.com/\\\">|s p/TightVNC/ i/user: $1; VNC TCP port: $2/ cpe:/a:tightvnc:tightvnc/a\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\r\\n.*<TITLE>TightVNC desktop \\[([\\w._-]+)\\]</TITLE>.*<APPLET ARCHIVE=\\\"tightvnc-jviewer\\.jar\\\" CODE=\\\"com\\.glavsoft\\.viewer\\.Viewer\\\" WIDTH=1 HEIGHT=1>\\n      <PARAM NAME=\\\"PORT\\\" VALUE=\\\"(\\d+)\\\">\\n      <PARAM NAME=\\\"OpenNewWindow\\\" VALUE=\\\"YES\\\">\\n\\n    </APPLET><BR>\\n    <A HREF=\\\"http://www\\.tightvnc\\.com/\\\">|s p/TightVNC/ i/user: $1; VNC TCP port: $2/ cpe:/a:tightvnc:tightvnc/a\n# match vnc-http m|^HTTP/1\\.0 200 OK\\r\\n.*<TITLE>TightVNC desktop \\[([\\w._-]+)\\]</TITLE>.*<APPLET ARCHIVE=\\\"tightvnc-jviewer\\.jar\\\" CODE=\\\"com\\.glavsoft\\.viewer\\.Viewer\\\" WIDTH=1 HEIGHT=1>\\n      <PARAM NAME=\\\"PORT\\\" VALUE=\\\"(\\d+)\\\">\\n      <PARAM NAME=\\\"OpenNewWindow\\\" VALUE=\\\"YES\\\">\\n\\n    </APPLET><BR>\\n    <A HREF=\\\"http://www\\.tightvnc\\.com/\\\">www\\.TightVNC\\.com</A>\\n  </BODY>\\n</HTML>\\n| p/xxx/\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\r\\n.*<TITLE>GeekBuddyRSP desktop \\[([^]]+)\\]</TITLE>.*<APPLET ARCHIVE=\\\"tightvnc-jviewer\\.jar\\\" CODE=\\\"com\\.glavsoft\\.viewer\\.Viewer\\\" WIDTH=1 HEIGHT=1>\\n      <PARAM NAME=\\\"PORT\\\" VALUE=\\\"(\\d+)\\\">\\n|s p/TightVNC/ i/Comodo GeekBuddy; user: $1; VNC TCP port: $2/ cpe:/a:tightvnc:tightvnc/a\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n<HTML>\\n<TITLE>VNC desktop \\[[\\d.]+\\]</TITLE>\\n<APPLET CODE=vncviewer\\.class ARCHIVE=vncviewer\\.jar WIDTH=(\\d+) HEIGHT=(\\d+)>\\n<param name=PORT value=(\\d+)>\\n</APPLET>\\n</HTML>\\n| p/Wyse Winterm 1200 LE terminal/ i/resolution: $1x$2; VNC TCP port $3/ d/terminal/\nmatch vnc-http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: TigerVNC/([\\w._-]+)\\r\\n| p/TigerVNC/ v/$1/ cpe:/a:tigervnc:tigervnc:$1/\nmatch vnc-http m|^HTTP/1\\.0 404 Not found\\r\\n\\r\\n<html><head><title>File Not Found</title></head>\\n<body><h1>File Not Found</h1></body></html\\n$| p/x11vnc/\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\n\\n<HTML>\\n  <HEAD><TITLE> \\[[\\w._-]+\\] </TITLE></HEAD>\\n  <BODY>\\n  <SPAN style='position: absolute; top:0px;left:0px'>\\n<OBJECT \\n    ID='AxedaDesktopViewer'\\n    classid = 'clsid:8AD9C840-044E-11D1-B3E9-00805F499D93'\\n    codebase = 'http://java\\.sun\\.com/update/1\\.4\\.2/jinstall-1_4-windows-i586\\.cab#Version=1,4,0,0'\\n    WIDTH = (\\d+) HEIGHT = (\\d+) >\\n| p/Axeda Desktop Viewer/ i/Resolution $1x$2/\n# looks like rebranded TightVNC\nmatch vnc-http m|^HTTP/1\\.0 200 OK.*<!-- index\\.vnc - default html page for Java VNC viewer applet\\.  On any file\\n     ending in \\.vnc, the HTTP server embedded in Xvnc will substitute the\\n     following variables when preceded by a dollar: USER, DESKTOP, DISPLAY,.*<TITLE>\\n(\\w+)'s Android desktop.*<APPLET CODE=VncViewer\\.class ARCHIVE=java-applet/VncViewer\\.jar\\n        WIDTH=(\\d+) HEIGHT=(\\d+)>\\n<param name=PORT value=(\\d+)>|s p/Droid VNC Server/ v/1.1RC0/ i/user: $1; resolution: $2x$3; VNC TCP port: $4/\nmatch vnc-http m|^HTTP/1\\.0 200 OK\\nContent-Type: text/html\\nContent-Length: \\d+\\nConnection: close\\n\\n\\n<HTML><HEAD><TITLE>Remote Desktop</TITLE></HEAD>\\n<BODY>\\n<APPLET CODE=\"com\\.tigervnc\\.vncviewer\\.VncViewer\" ARCHIVE=\"VncViewer\\.jar\"| p/TigerVNC/ cpe:/a:tigervnc:tigervnc/\n\nmatch vzagent m|^<packet xmlns:xsi=\\\"http://www\\.w3\\.org/2001/XMLSchema-instance\\\" id=\\\"0\\\" priority=\\\"0\\\" version=\\\"([\\d.]+)\\\">\\n<origin>[\\w._-]+</origin>\\n<target>agent</target>\\n<data>\\n<ok/>\\n<eid>[\\w._-]+</eid>\\n</data>\\n</packet>\\n\\0| p/Parallels Virtuozzo Agent/ i/protocol $1/\n\nmatch ripbot m|^200 Welcome\\r\\n400-Unknown Command\\r\\n400 GET / HTTP/1\\.0\\r\\n$| p/RipBot video encoding server/\n\nmatch xml-rpc m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Apache XML-RPC (\\d[-.\\w ]+)\\r\\n\\r\\nMethod GET not implemented \\(try POST\\)$| p/Apache XML-RPC/ v/$1/\nmatch xml-rpc m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: XMLRPC_ABYSS/Xmlrpc-c ([\\w._-]+)\\r\\n|s p/ABYSS httpd/ i/Xmlrpc-c $1/\nmatch xml-rpc m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: XMLRPC_ABYSS/([\\w._-]+)\\r\\n|s p/ABYSS httpd/ i/Xmlrpc-c $1/\nmatch xml-rpc m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Xmlrpc-c_Abyss/([\\w._-]+)\\r\\n|s p/ABYSS httpd/ i/Xmlrpc-c $1/\nmatch xml-rpc m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Atheme/([\\w._-]+)\\r\\nContent-Type: text/plain\\r\\nContent-Length: 24\\r\\n\\r\\nHTTP/1\\.1 404 Not Found\\r\\n| p/Atheme IRC Services/ v/$1/ cpe:/a:atheme:atheme:$1/\n\n# Kerio MailServer\nmatch http m|^HTTP/1\\.[01] 302 Redirected\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\nLocation: /login\\r\\n\\r\\n$| p/Kerio MailServer Webmail/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nConnection: Close\\r\\nContent-Length: 0\\r\\nContent-type: text/html\\r\\nDate: .*\\r\\nLocation: https?:///webmail/login/\\r\\nX-UA-Compatible: IE=8\\r\\n\\r\\n| p/Kerio MailServer Webmail/\nmatch http m|^HTTP/1\\.[01] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Kerio MailServer ([\\d.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Powered-By: PHP/([\\d.]+)\\r\\n|s p/Kerio MailServer Webmail/ v/$1/ i/PHP $2/ cpe:/a:php:php:$2/\nmatch http m|^HTTP/1\\.[01] (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Kerio MailServer ([\\d.]+)\\r\\n|s p/Kerio MailServer Webmail/ v/$1/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nConnection: Close\\r\\nContent-Length: 0\\r\\n(?:[^\\r\\n]+\\r\\n)*?Location: https?:///([\\w._-]+)/login\\.php\\r\\nServer: Kerio MailServer ([^\\r\\n]+)\\r\\n\\r\\n$|s p/Kerio MailServer Webmail/ v/$2/ h/$1/\nmatch http m|^HTTP/1\\.1 302 Redirected\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\nLocation: /login\\r\\n\\r\\n$| p/Kerio MailServer Webmail/\n\nmatch http m|^HTTP/1\\.0\\x20250\\x20Ok\\r\\n.*<title>PowerMTA monitoring</title>|s p/Port25 PowerMTA web monitor/\n\n# Dell OpenManage Version 3.5.0 on MS Windows 2000 server / PowerEdge 6400/700\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: Close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n<html>\\r\\n    <head>\\r\\n        <script language=\\\"javascript\\\">\\r\\n\\t\\t\\t\\t\\tif| p/Dell PowerEdge OpenManage Server Administrator httpd admin/ o/Windows/ cpe:/a:dell:openmanage_server_administrator/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html; charset=UTF-8\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\n<html>\\n<head>\\n<META http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\">\\n<title>Open Manage&trade;</title>\\n|s p/Dell PowerEdge OpenManage Server Administrator httpd admin/ o/Windows/ cpe:/a:dell:openmanage_server_administrator/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html; charset=UTF-8\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<!DOCTYPE html PUBLIC \\\"-//W3C//DTD XHTML 1\\.0 Strict//EN\\\" \\\"http://www\\.w3\\.org/TR/xhtml1/DTD/xhtml1-strict\\.dtd\\\">\\r\\n<html>\\r\\n<head>\\r\\n<META http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=UTF-8\\\">\\r\\n<title>Open Manage&trade;</title>\\r\\n|s p/Dell PowerEdge OpenManage Server Administrator httpd admin/ o/Windows/ cpe:/a:dell:openmanage_server_administrator/ cpe:/o:microsoft:windows/a\n# OpenManage version 5.2; these have to match on Javascript which kinda sucks...\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n<html>.*QueryString\\.keys\\[QueryString\\.keys\\.length\\] = argname;|s p/Dell PowerEdge OpenManage Server Administrator httpd/ o/Windows/ cpe:/a:dell:openmanage_server_administrator/ cpe:/o:microsoft:windows/a\nmatch http m|HTTP/1\\.0 200 OK\\r\\nConnection: Close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n<html>.*for \\(var i = 0; i < QueryString\\.keys\\.length; i\\+\\+\\) {\\n|s p/Dell PowerEdge OpenManage Server Administrator httpd/ o/Windows/ cpe:/a:dell:openmanage_server_administrator/ cpe:/o:microsoft:windows/a\n\n# ASPI server (www.aspi.cz) on Solaris 6666/tcp\nmatch aspi m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nServer: ByllSoftware Gurda/([\\d.]+)\\r\\n| p/ASPI server/ v/$1/ o/Solaris/ cpe:/o:sun:sunos/a\nmatch sunscreen-adm m|^\\x01\\0\\0\\0\\0\\0\\0\\0T\\x03\\0\\0\\0\\0\\0\\x01\\x1e\\0\\0\\0\\0\\0\\0;\\0\\0\\0\\0\\0\\0\\0\\0Error: incompatible with administration server \\(version (\\d[-.\\w ]*)\\)\\nc\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0$| p/SunScreen Remote Administration server/ v/$1/\n\n# PopChartServer\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: PopChartServer ([\\d.]+)\\r\\n|s p/PopChart Pro/ v/$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: CordaServer \\(PopChartServer compatible\\) ([\\d.]+)\\r\\n|s p/CordaServer/ v/$1/\n\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WebSTAR/([\\d.]+) ID/\\d+\\r\\n|s p/WebSTAR/ v/$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: INEOQUEST/([\\d.]+)\\r\\nConnection: close\\r\\nSet-Cookie:|s p/IneoQuest Video Diagnostic HTTP/ v/$1/\n\nmatch honeypot m|^HTTP/1\\.0 401 Unauthorized\\r\\n\\r\\n<BODY><HTML><H1>401 - Authorization Failed</H1></HTML></BODY>\\0| p/Network Flight Recorder BackOfficer Friendly http honeypot/\nmatch honeypot m|^\\r\\nHTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 36\\r\\nServer: IIS 5\\.0\\r\\n\\r\\nErro\\. URL n\\xe3o encontrada no servidor| p/Valhalla honeypot/\n\n# Maybe too specific?\nmatch ilo-vm m|^#\\0\\x04\\0$| p/HP Integrated Lights-Out Virtual Media/ cpe:/h:hp:integrated_lights-out/\n\n# curl -k -H \"X-Iota-API-Version: 1\" -d '{\"command\":\"getNodeInfo\"}'\nmatch iota-api m|^HTTP/1\\.0 400 Bad Request\\r\\nConnection: close\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nKeep-Alive: timeout=500, max=100\\r\\nContent-Type: application/json\\r\\nContent-Length: 44\\r\\nDate: .*\\r\\n\\r\\n\\{\"error\":\"Invalid API Version\",\"duration\":0\\}| p/IOTA Node API/\n\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0Server encountered an internal error\\. To get more info turn on customErrors in the server's config file\\.\\x05\\0\\0\\0\\0|s p/MS .NET Remoting services/ cpe:/a:microsoft:.net_framework/\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0System\\.Runtime\\.Remoting\\.RemotingException: Tcp channel protocol violation: expecting preamble\\.\\r\\n|s p/MS .NET Remoting services/ cpe:/a:microsoft:.net_framework/\n\n# Version 3.2.0\nmatch wbem m|^HTTP/1\\.0 405 Method not allowed: Method not allowed by server: GET\\r\\nDate: .*\\r\\nCache-Control: no-cache\\r\\nServer: / \\(CIMOM\\)\\r\\nContent-Length: 0\\r\\n\\r\\n| p/OpenWBEM/\n\nmatch webdav m|^HTTP/1\\.0 302 Found\\r\\nConnection: Close\\r\\nDate: .*\\r\\nLocation: /ui/core/index\\.html\\r\\n\\r\\n$| p/Tonido WebDAV/\nmatch webdav m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?nEtag: -?\\d+_-?\\d+\\r\\nContent-Length: \\d+\\r\\nDate: [^\\r\\n]+ GMT\\+00:00\\r\\n\\r\\n<html><head><script type=\\\"text/javascript\\\" language=\\\"javascript1\\.1\\\">\\n    var fNewDoc = false;\\n  </script>\\n  <script LANGUAGE=\\\"VBSCRIPT\\\">\\n|s p/The Olive Tree WebDAV Server/ o/Android/ cpe:/a:theolivetree:webdavserver/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch webdav m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WsgiDAV/(\\d[\\w._-]*) CherryPy/(\\d[\\w._-]+) Python/(\\d[\\w._-]+)\\r\\n|s p/WsgiDAV/ v/$1/ i/CherryPy $2; Python $3/ cpe:/a:cherrypy:cherrypy:$2/ cpe:/a:martin_wendt:wsgidav:$1/ cpe:/a:python:python:$3/\n\nmatch websocket m|^HTTP/1\\.1 200 OK\\r\\n(?:Date: .*\\r\\n)?Connection: close\\r\\n\\r\\nWelcome to socket\\.io\\.| p/socket.io/\nmatch websocket m|^HTTP/1\\.1 200 OK\\r\\ncontent-type: text/plain; charset=UTF-8\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\nWelcome to SockJS!\\n| p/SockJS/\nmatch websocket m|^HTTP/1\\.0 426 Upgrade Required\\r\\nX-Supported-WebSocket-Versions: ([\\d, ]+)\\r\\nServer: OverSIP/([\\w._-]+)\\r\\n\\r\\n| p/OverSIP/ v/$2/ i/WebSocket versions: $1/\n# Version: 10.0.5.7\nmatch websocket m|^HTTP/1\\.1 400 Bad Request\\r\\nUpgrade: WebSocket\\r\\nConnection: Upgrade\\r\\nSec-WebSocket-Version: 8, 13\\r\\n\\r\\n$| p/DeskCenter WorkerService/ i/WebSocket versions: 8, 13/ cpe:/a:deskcenter:deskcenter_management_suite/\nmatch websocket m|^HTTP/1\\.1 426 Upgrade Required\\r\\nContent-Length: 16\\r\\nContent-Type: text/plain\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\n\\r\\nUpgrade Required$| p/Ogar agar.io server/ cpe:/a:devin_ryan:ogar/\nmatch websocket m|^HTTP/1\\.0 404 Not Found\\r\\nserver: libwebsockets\\r\\ncontent-type: text/html\\r\\n\\r\\n<html><body><h1>404</h1></body></html>| p/libwebsockets/ cpe:/a:lws-team:libwebsockets/\nmatch websocket m|^HTTP/1\\.0 200 \\r\\nserver: libwebsockets\\r\\ncontent-type| p/libwebsockets/ cpe:/a:lws-team:libwebsockets/\nmatch websocket m|^HTTP/1\\.1 400 Bad Request\\r\\n\\r\\nnot a WebSocket handshake request: missing upgrade| p/Neo4j Bolt protocol/ cpe:/a:neo4j:neo4j/\nmatch websocket m|^HTTP/1\\.1 [24]00(?: OK)?\\r\\n.* GMT\\r\\nUser-Agent: LOOLWSD WOPI Agent\\r\\n| p/LibreOffice Online WebSocket server/ cpe:/a:libreoffice:libreoffice/\nmatch websocket m|^HTTP/1\\.1 400 HTTP Host header missing in opening handshake request\\r\\n\\r\\n| p/Autobahn WAMP server/ cpe:/a:crossbario:autobahn/\nmatch websocket m|^HTTP/1\\.1 404 WebSocket Upgrade Failure\\r\\nContent-Type: text/html\\nServer: TooTallNate Java-WebSocket\\r\\n| p/Java-WebSocket/ cpe:/a:tootallnate:java-websocket/\nsoftmatch websocket m|^HTTP/1\\.1 101 Web Socket Protocol Handshake\\r\\n|\nsoftmatch websocket m|^HTTP/1\\.1 400 Bad Request\\r\\n(?:[^\\r\\n]+\\r\\n)*?Sec-WebSocket-Version: (\\d+)\\r\\n|s i/WebSocket version: $1/\n\nmatch whois m|^Process query: 'GET  HTTP1\\.0'\\n\\n\\nNo lookup service available for your query 'GET  HTTP1\\.0'\\.\\ngwhois remarks: If this is a valid domainname or handle, please file a bug report\\.\\n\\n\\n\\n\\n-- \\n  To resolve one of the above handles:   OTOH offical handles should be recognised directly\\.\\n  Please report errors or misfits via the debian bug tracking system\\.\\n$| p/gwhois/\nmatch whois m|^\\n\\r\\nJava Whois Server ([\\w._-]+)    \\(c\\) \\d+ - \\d+ Klaus Zerwes zero-sys\\.net\\r\\n\\n| p/Java Whois Server/ v/$1/\nmatch whois m|^This is JWhoisServer serving ccTLD ([\\w._-]+)\\r\\nJava Whois Server ([\\w._-]+)    \\(c\\) \\d+ - \\d+ Klaus Zerwes zero-sys\\.net\\r\\n| p/Java Whois Server/ v/$2/ i/serving ccTLD $1/\n\nmatch winagents-hyperconf m|^ROSC: Invalid connection string$| p/WinAgents HyperConf configuration management/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# Also callbook?\nmatch winbox m|^\\x01\\0\\0\\0\\x02\\0\\0| p/MikroTik WinBox management console/\n\n# Version 2.1.0\nmatch wsman m|^HTTP/1\\.1 501 Method Not Implemented\\r\\n\\r\\n501 Method Not Implemented| p/Openwsman/\nmatch ws-discovery m|^HTTP/1\\.1 400 Bad Request$| p/Ricoh WS Discovery/ d/printer/\n\nmatch xmpp m|^</stream:stream>$| p/Wildfire XMPP Client/\nmatch xmpp m|^Use XMPP$| p/Trixbox HUD xmpp/ cpe:/a:fonality:hud/\n\nmatch printer m|^An lpd test connection was completed successfully\\r\\n|s p/Lexmark lpd service/ d/printer/\nmatch printer m|^Invalid protocol request \\(71\\): GGET / HTTP/1\\.0\\r\\n\\n$| p/Sun Solaris lpd/ o/Solaris/ cpe:/o:sun:sunos/a\n\n# Västgöta-Data, but not sure how to encode those characters for CPE.\nmatch zftp-admin m|^220 \\.\\r\\n500 ' / HTTP/1\\.0': command not understood\\.\\r\\n| p/zFTPServer admin/ o/Windows/ cpe:/a:vaestgoeta-data:zftpserver/ cpe:/o:microsoft:windows/a\nmatch zftp-admin m|^220 \\.\\r\\n500 'GET / HTTP/1\\.0': command not understood\\.\\r\\n| p/zFTPServer admin/ o/Windows/ cpe:/a:vaestgoeta-data:zftpserver/ cpe:/o:microsoft:windows/a\n\n\nmatch mmouse m|^HTTP/1\\.0\\x20200\\x20OK\\x20\\n\\x20Server:\\x20Mobile\\x20Air\\x20Mouse\\x20Server\\x20\\n\\x20Content-Type:\\x20text/html\\x20\\n\\x20Content-Length:\\x20344\\n\\n<HTML><HEAD><TITLE>Success!</TITLE><meta\\x20name=\\\"viewport\\\"\\x20content=\\\"width=device-width,user-scalable=no\\\"\\x20/></HEAD><BODY\\x20BGCOLOR=#000000><br><br><p\\x20style=\\\"font:12pt\\x20arial,geneva,sans-serif;\\x20text-align:center;\\x20color:green;\\x20font-weight:bold;\\\"\\x20>The\\x20Mobile\\x20Air\\x20Mouse\\x20server\\x20running\\x20on\\x20\\\"([^\\\"]*)\\\"\\x20was\\x20able\\x20to\\x20receive\\x20your\\x20request\\.</p></BODY></HTML>$| p/Mobile Air Mouse/ i/server name: $1/\n\nsoftmatch rtsp m|^RTSP/1.0 .*\\r\\n|\n\n# Know the device, but not the service. Port 515.\n# match unknown m|^\\x02| p/Conceptronics CPSERVU print server/ d/print server/\n\n# Alert (Level: Fatal, Description: Protocol Version|Handshake Failure)\nmatch ssl m|^\\x15\\x03[\\x00-\\x04]\\0\\x02\\x02[F\\x28]|\n\n# These are pretty general, so keep at the end.\n# \"bad\" values chosen to avoid matching SSL\nmatch msdtc m|^[^\\x15\\x16][^\\x03].\\0..$|s p/Microsoft Distributed Transaction Coordinator/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch msdtc m|^..\\x0a\\0x\\x01$|s p/Microsoft Distributed Transaction Coordinator/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch msdtc m|^ERROR\\n$|s p/Microsoft Distributed Transaction Coordinator/ i/error/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# Place hard matched Apache banners above this line\n# (?!400) prevents matching 400 error, which can be result of SSL-only listener\nsoftmatch http m|^HTTP/1\\.[01] (?!400)\\d\\d\\d.*\\r\\nDate: .*\\r\\nServer: Apache ([^\\r\\n]+)\\r\\n| p/Apache httpd/ i/$1/ cpe:/a:apache:http_server/\n\nmatch http m|^HTTP/1\\.1 \\d\\d\\d \\w+\\r\\ncontent-type: application/json\\r\\ncontent-length: \\d+\\r\\n\\r\\n{\\n  \\\"ok\\\" : \\w+,\\n  \\\"status\\\" : \\d+,\\n  \\\"name\\\" : \\\"[^\\\"]+\\\",\\n  \\\"cluster_name\\\" : \\\"([^\\\"]+)\\\",\\n  \\\"version\\\" : {\\n    \\\"number\\\" : \\\"([\\d.]+)\\\",\\n    \\\"build_hash\\\" : \\\"[^\\\"]+\\\",\\n    \\\"build_timestamp\\\" : \\\"[^\\\"]+\\\",\\n    \\\"build_snapshot\\\" : \\w+,\\n    \\\"lucene_version\\\" : \\\"([\\d.]+)\\\"\\n  }\\n}\\n$|s p/Crate.io CrateDB/ v/$2/ i/Cluster name: $1, Lucene version: $3/\n\n##############################NEXT PROBE##############################\nProbe TCP HTTPOptions q|OPTIONS / HTTP/1.0\\r\\n\\r\\n|\nrarity 4\nports 80-85,2301,631,641,3128,5232,6000,8080,8888,9999,10000,10031,37435,49400\nsslports 443,4443,8443\nfallback GetRequest\n\nmatch apollo-server m=^0000000001(?:3C|C0)0000$= p/Apollo Server database access/\n\nmatch caldav m|^HTTP/1\\.1 200 OK\\r\\nServer: DavMail Gateway ([\\w._-]+)\\r\\nDAV: 1, calendar-access, calendar-schedule, calendarserver-private-events, addressbook\\r\\n| p/DavMail CalDAV http gateway/ v/$1/ d/proxy server/\n\n# IRIX 6.5.18f Distributed GL Daemon dgld\nmatch dgld m|^OPTI$| p/IRIX Distributed GL Daemon/ o/IRIX/ cpe:/o:sgi:irix/a\n\nmatch docker m|^HTTP/1\\.0 200 OK\\r\\nApi-Version: ([\\d.]+)\\r\\nDocker-Experimental: false\\r\\nOstype: (.+)\\r\\nServer: Docker/(\\d[\\w.-]*) \\(.*\\)\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Docker remote API/ v/$3/ i/API $1/ o/$2/ cpe:/a:docker:docker:$3/\nmatch ets2 m|^\\xff\\xfe\\\\\\0n\\0e\\0w\\0f\\0r\\0e\\0i\\0g\\0h\\0t\\0 \\0E\\0u\\0r\\0o\\0 \\0T\\0r\\0u\\0c\\0k\\0 \\0S\\0i\\0m\\0u\\0l\\0a\\0t\\0o\\0r\\0 \\x002\\0;([^;]+);| p/newfreight Euro Truck Simulator 2/ i/level: $P(1)/ cpe:/a:scs_software:euro_truck_simulator_2/\n# Webmaster Conferenceroom 1.8.9.1 IRC Server\nmatch irc m|(^:[-.\\w]+) 421 \\* OPTIONS :Unknown command\\r\\n| p/Webmaster Conferenceroom IRC server/ h/$1/\n\n# Seems sometimes CUPS doesn't respond to GET\nmatch ipp m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CUPS/([-\\w_.]+)|s p/CUPS/ v/$1/ cpe:/a:apple:cups:$1/\n\n#  cgi-httpd from shttpd-0.53 on FreeBSD\nmatch http m|^HTTP/1\\.0 501 method not implemented\\r\\nServer: cgi-httpd\\r\\n| p/shttpd cgi-httpd/\n\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: WebSphere Application Server/(.+)\\r\\n| p/IBM WebSphere Application Server/ v/$1/ cpe:/a:ibm:websphere_application_server:$1/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Oracle HTTP Server Powered by Apache\\r\\n|s p/Oracle HTTP Server Powered by Apache/ cpe:/a:oracle:http_server/\nmatch http m|^HTTP/1\\.1 \\d\\d\\d .*\\r\\nServer: webfs/(\\d[-.\\w]+)\\r\\n| p/WebFS httpd/ v/$1/\n\nmatch http m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Microsoft-IIS/([\\d.]+)\\r\\n|s p/Microsoft IIS httpd/ v/$1/ o/Windows/ cpe:/a:microsoft:internet_information_services:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 503 Service Unavailable\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Length: 28\\r\\n\\r\\n<h1>Service Unavailable</h1>| p/Microsoft IIS httpd/ o/Windows/ cpe:/a:microsoft:internet_information_services/ cpe:/o:microsoft:windows/a\n\n# A whole bunch of these.. All on win32\nmatch http m|^HTTP/1\\.0 510 Not Extended\\r\\nDate: .*\\r\\nServer: CompaqHTTPServer/([\\d.]+)\\r\\n| p/Compaq Diagnostics httpd/ i/CompaqHTTPServer $1/ cpe:/a:hp:compaqhttpserver:$1/\n# HP Linux System Management, PSP 7.30 on Linux 2.4\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: .*\\r\\nServer: CompaqHTTPServer/([\\d.]+) HP System Management Homepage/([\\d.]+)\\r\\n| p/HP System Management Homepage/ v/$2/ i/CompaqHTTPServer $1/ cpe:/a:hp:compaqhttpserver:$1/ cpe:/a:hp:system_management_homepage:$2/\nmatch http m|^HTTP/1\\.0 400 Ungueltige Anfrage\\r\\nServer: Web Sharing\\r\\n| p/Mac OS Personal Web Sharing/ i/German/ o/Mac OS/ cpe:/o:apple:mac_os/a\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nContent-Type:text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>Remote Insight</TITLE></HEAD><BODY>\\r\\n<H1>Request Error</H1>\\r\\nHTTP/1\\.1 405 Method Not Allowed\\r\\n</BODY></HTML>\\r\\n| p|HP/Compaq Integrated Lights-Out http config| d/remote management/ cpe:/h:hp:integrated_lights-out/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: Web Sharing\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><TITLE>400 Bad Request</TITLE>The URL you requested could not be understood by the server\\.  Do not include double slashes or colon characters in the URL\\.</HTML>\\r\\n\\r\\n| p/Apple Personal Websharing httpd/ o/Mac OS/ cpe:/o:apple:mac_os/a\nmatch http m|^Command Not Reconized\\r\\n$| p/Microsiga httpd/\nmatch http m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nAllow: GET, HEAD, POST, PUT\\r\\n\\r\\n$| p/Lexmark printer http config/ d/printer/\nmatch http m|^HTTP/1\\.0 405-metode ikke tillatt\\r\\nTillatt: GET, HEAD, POST, PUT\\r\\n\\r\\n$| p/Lexmark printer http config/ i/Norwegian/ d/printer/\nmatch http m|^HTTP/1\\.1 500 \\( Die Anforderung wurde vom HTTP-Filter zur\\xc3\\xbcckgewiesen\\. Wenden Sie sich an den ISA Server-Administrator\\.  \\)\\r\\n| p/Microsoft ISA server httpd/ i/German/ o/Windows/ cpe:/a:microsoft:isa_server::::de/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\nServer: GemtekBalticHTTPD/(.*)\\n| p/Gemtek Systems GemtekBalticHTTPD/ v/$1/\nmatch http m|^HTTP/1\\.0 401 Authorization Required\\r\\nWWW-Authenticate: Basic realm=\\\"TiVo-web\\\"\\r\\nConnection: close\\r\\n\\r\\n| p/TiVoWebPlus Project httpd/ d/media device/\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: ELMO Web Server\\r\\n.*<TITLE>HV-([\\w+/-]+)</TITLE>\\r\\n|s p/ELMO $1 Visual Presenter http config/ d/media device/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nServer: HTTPD/[\\d.]+\\r\\n.*<a href=\\\"/\\\">Return to Web Management</a>.*<A HREF=\\\"http://www\\.juniper\\.net/support/\\\">HTTPD release ([-\\w_.]+) built by|s p/Juniper router http config/ i/HTTPD $1/ d/router/\nmatch http m|^HTTP/1\\.1 404 Not found\\r\\nServer: BadBlue/([\\d.]+)\\r\\n| p/BadBlue httpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nServer: httpd/1\\.00\\r\\nCache-Control: no-cache\\r\\nExpires: 0\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>501 Not Implemented</TITLE></HEAD>\\n<BODY><H2>501 Not Implemented</H2>\\nThe requested method 'OPTIONS' is not implemented by this server\\.\\n<HR>\\n<I>httpd/1\\.00</I></BODY></HTML>\\n$| p|Packeteer PacketShaper 4500/ISP httpd|\nmatch http m|^HTTP/1\\.0 \\d\\d\\d .*\\r\\nServer: SkyX HTTPS ([^\\r\\n]+)\\r\\n| p/Packeteer SkyX Accellerator/ v/$1/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nDate: .*<H1>501 Not Implemented</H1>\\nPOST to non-script is not supported in Boa\\.\\n</BODY></HTML>\\n|s p/Boa httpd/ cpe:/a:boa:boa/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nDate: .*\\r\\nServer: HTTPsrv\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=ISO-8859-1\\r\\n\\r\\n<HTML><HEAD><TITLE>501 Not Implemented</TITLE></HEAD>\\n<BODY><H1>501 Not Implemented</H1>\\nPOST to non-script is not supported\\.\\n</BODY></HTML>\\n$| p/Boa httpd/ i/Mega System Technologies NetProbe Lite environmental sensor/ d/specialized/ cpe:/a:boa:boa/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Oracle-Application-Server-11g\\r\\nAllow: GET,HEAD,POST,OPTIONS\\r\\nContent-Length: 0\\r\\n|s p/Oracle Application Server 11g httpd/ cpe:/a:oracle:application_server:11g/\n\n# HP JetDirect Card in a LaserJet printer\nmatch http m|^HTTP/1\\.1 501 Unknown or unimplemented http action\\r\\nMIME-Version: 1\\.0\\r\\nServer: HP-ChaiServer/([\\d.]+)\\r\\nContent-length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<TITLE>Request Not Implemented</TITLE><P><B>Cannot process request, not implemented at server\\.</B></P><P>Unknown or unimplemented http action| p/HP JetDirect Card in a LaserJet printer/ i/HP-ChaiServer Embedded VM $1/ d/printer/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nServer: Waveplus HTTPD\\r\\n|s p/Waveplus HTTPD/ i/Thomson TG508 DSL router/ d/broadband router/ cpe:/h:thomson:tg508/a\n\n# Zero One Technology ( http://www.01tech.com/ ) print servers embedded HTTP service\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nDate: .*\\r\\nMIME-version: 1\\.0\\r?\\nServer: ZOT-PS-(\\d+)/([\\w._-]+)\\r?\\n| p/Zero One Technology $1 httpd/ v/$2/ d/print server/ cpe:/h:zero_one_tech:$1/\n\nmatch http m|^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: micro_httpd\\r\\n| p/micro_httpd/ cpe:/a:acme:micro_httpd/\n# github.com/xen-org/xen-api-libs.git\nmatch http m|^HTTP/1\\.0 500 Internal Error\\r\\nConnection: close\\r\\nCache-Control: no-cache, no-store\\r\\n\\r\\n<html><body><h1>Internal Server Error</h1>Failure\\(&quot;No handler table for HTTP method Unknown OPTIONS&quot;\\)</body></html>$| p/Citrix Xen Simple HTTP Server/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nDate: \\w\\w\\w \\w\\w\\w \\d\\d \\d\\d:\\d\\d:\\d\\d \\d\\d\\d\\d\\n GMT\\r\\nServer: VCS-VideoJet-Webserver\\r\\nLocation: http://[\\w._-]+/xampp/\\r\\nKeep-Alive: timeout=5, max=100\\r\\nConnection: Keep-Alive\\r\\n\\r\\n|s p/VCS-VideoJet-Webserver httpd/ i/Bosch VIP X1 video encoder http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nServer: mini_httpd ([^\\r\\n]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Cache-Control: no-cache,no-store\\r\\nContent-Type: text/html; charset=%s\\r\\nConnection: close\\r\\n|s p/mini_httpd/ v/$1/ cpe:/a:acme:mini_httpd:$1/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nServer: mini_httpd/([^\\r\\n]+)\\r\\nDate: .*\\r\\nCache-Control: no-cache,no-store\\r\\nContent-Type: text/html; charset=[\\w_-]+\\r\\nContent-Length: \\d+\\r\\nConnection: close\\r\\n\\r\\n| p/mini_httpd/ v/$1/ cpe:/a:acme:mini_httpd:$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: keyreporter/([\\w._-]+)\\r\\nConnection: Close\\r\\nContent-Type: text/plain\\r\\nContent-Length: 20\\r\\n.*URL is malformatted\\n$|s p/Sassafras KeyReporter http interface/ v/$1/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html;charset=[\\w._-]+\\r\\nContent-Language: ([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Hidden\\r\\n\\r\\n<html><head><title>Apache Tomcat/([\\w._-]+) - Error report</title>|s p/Symantec Endpoint Protection Manager http config/ i/Apache Tomcat $2; $1/ d/firewall/ cpe:/a:apache:tomcat:$2/ cpe:/a:symantec:endpoint_protection_manager/\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html;charset=[\\w._-]+\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Hidden\\r\\n\\r\\n<html><head><title>Apache Tomcat/([\\w._-]+) - Error report</title>|s p/Symantec Endpoint Protection Manager http config/ i/Apache Tomcat $1/ d/firewall/ cpe:/a:apache:tomcat:$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 50\\r\\n\\r\\n<HTML><BODY><H1>400 Bad Request</H1></BODY></HTML>$| p/VMware Server http config/ cpe:/a:vmware:server/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-Runtime: 2\\r\\n.*<title>Metasploit Framework Web Console ([\\w._-]+)</title>\\n|s p/Metasploit Framework web console/ v/$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/plain\\r\\nContent-Length: 59\\r\\nConnection: close\\r\\n\\r\\nError 400: Bad Request\\nCannot parse HTTP request: \\[OPTIONS\\]$| p/Mongoose httpd/ cpe:/a:cesanta:mongoose/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nAllow: GET, POST, HEAD, CONNECT, PUT, DELETE, OPTIONS\\r\\nDAV: 1\\r\\n\\r\\n$| p/Mongoose httpd/ v/3.7/ cpe:/a:cesanta:mongoose:3.7/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nConnection: close\\r\\nServer: Android Webcam Server v([\\w._-]+)\\r\\n| p/IP Webcam/ v/$1/ i/Android phone/ d/phone/ o/Android/ cpe:/o:google:android/\nmatch http m|^HTTP/1\\.1 404 OK\\r\\nContent-Length: 0\\r\\nConnection: Keep-Alive\\r\\nWWW-Authenticate: Basic realm=\\\"/\\\"\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nCache-Control: max-age=3600, must-revalidate\\r\\nEXT: UCoS, UPnP/1\\.0, UDI/1\\.0\\r\\nLast-Modified: .*\\r\\n\\r\\n| p/Universal Devices Insteon home automation http config/ d/specialized/ o/uCOS/ cpe:/o:universal_devices:ucos/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: \\d+\\r\\n\\r\\n\\n\\n<!DOCTYPE html>\\n<html>\\n\\t<head>\\n\\t\\t<title>Action not found</title>\\n\\t\\t<link rel=\\\"shortcut icon\\\" href=\\\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAlFJREFUeNqUU8tOFEEUPVVdNV3dPe8xYRBnjGhmBgKjKzCIiQvBoIaNbly5Z\\+PSv3Aj7DSiP2B0rwkLGVdGgxITSCRIJGSMEQWZR3eVt5sEFBgTb/dN1yvnnHtPNTPG4PqdHgCMXnPRSZrpSuH8vUJu4DE4rYHDGAZDX62BZttHqTiIayM3gGiXQsgYLEvATaqxU\\+| p/Graylog2 httpd/ cpe:/a:graylog:graylog2/\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nServer: NetQoS-HTTPd/1\\r\\nContent-Type: text/plain\\r\\nConnection: close\\r\\n\\r\\n| p/CA NetQoS ReporterAnalyzer/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\n\\r\\nHTTP method/URL unsupported: OPTIONS| p/DirecTV Genie/\n\nmatch kmldonkey m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: KMLDonkey/(\\d\\S+)| p/KMLDonkey/ v/$1/\n\n# webmin version 1.090 on Mandrake 8.2 - not sure why it's not picked up by the getreq probe\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: MiniServ/([\\d.]+)\\r\\n.*\\r\\n<h1>Error - Bad Request</h1>\\n|s p/MiniServ/ v/$1/ i/Webmin httpd/\nmatch http m|^HTTP/1\\.1 400 Page not found\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Document Error: Page not found</title></head>| p/GoAhead WebServer/ i/WAP http config/ d/WAP/ cpe:/a:goahead:goahead_webserver/\n\nmatch http m|^HTTP/1\\.0 200 Ok\\r\\nCseq: 0\\r\\nServer: VLC Server\\r\\nPublic: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE\\r\\nContent-Length: 0\\r\\n\\r\\n| p/VLC HTTP streamer/ cpe:/a:videolan:vlc_media_player/\n\nmatch http m|^ 200 OK\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n.*<B>The request is not Implemented\\.</B>|s p/Dell 1815dn printer http config/ d/printer/ cpe:/h:dell:1815dn/a\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nConnection: close\\r\\n\\r\\n<html><head><title>404 Not Found</title></head>\\r\\n<body><h1>Not Found</h1>The requested URL / was not found on this server\\.<p>\\r\\n</body></html>\\r\\n$| p/Mono XSP httpd/ cpe:/a:mono:xsp/\nmatch http m|^HTTP/1\\.1 302 Found\\r\\nLocation: https?:///home\\.htm\\r\\nContent-Length: 0\\r\\nWebServer:\\r\\n\\r\\n$| p/APC SmartUPS http config/ d/power-device/\nmatch http m|^HTTP/1\\.0 400\\r\\nContent-Type: text/html\\r\\n\\r\\n<hr><pre><font size=\\+2><b>\\nError\\. Unsupported method\\.\\n</b></font>| p/Small Home Server httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request \\(ERR_INVALID_REQ\\)</TITLE></HEAD><BODY><H1>400 Bad Request</H1><BR>ERR_INVALID_REQ<HR><B>AR7 Webserver</B>| p/AR7 embedded httpd/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request \\(ERR_INVALID_REQ\\)</TITLE></HEAD><BODY><H1>400 Bad Request</H1><BR>ERR_INVALID_REQ<HR><B>Webserver</B>| p/AVM FRITZ!Box WLAN 7170 WAP http config/ d/WAP/\nmatch http m|^HTTP/[10]\\.0 200 OK\\nPragma: no-cache\\nContent-Type: text/html; charset=iso-8859-1\\nContent-Length: 63\\n\\n<html><body>ERROR ERR_INVALID_REQ<hr>Bad Request</body></html>\\n| p/AVM FRITZ!Box 7300-series WAP http config/ d/WAP/\n\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Cisco AWARE ([\\w._-]+)\\r\\n| p/Cisco ASA AWARE http config/ v/$1/ d/firewall/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nPragma: no-cache\\r\\nx-responding-server: ([\\w._-]+)\\r\\nX-dmUser: (.*)\\r\\nMS-Author-Via: DAV\\r\\n| p/CrushFTP DAV httpd/ i/User $2/ h/$1/ cpe:/a:crushftp:crushftp/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nLocation: /login\\r\\n\\r\\n$| p/Bizanga IMP Email http config/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\t\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>Not Implemented</TITLE></HEAD><BODY><h3>Error: HTTP Method Not Implemented</h3></BODY></HTML>$| p/Check Point UTM-1 Edge X firewall or Zonealarm Z100G WAP http config/\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nServer: Cassini/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?X-AspNet-Version: ([\\w._-]+)\\r\\n.*<title>Runtime Error</title>\\r\\n        <style>\\r\\n         body {font-family:\\\"Verdana\\\";font-weight:normal;font-size: \\.7em;color:black;}|s p/Cassini httpd/ v/$1/ i/Ateas Security webcam management httpd; ASP.NET $2/ o/Windows/ cpe:/a:microsoft:asp.net:$2/ cpe:/a:microsoft:cassini:$1/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 302 \\r\\nLocation: ,\\r\\n\\r\\n$| p/BlackBox LWU0200-POE-M ethernet-optical bridge http config/ d/bridge/\nmatch http m|^HTTP/1\\.0 400 Bad Request \\r\\nContent-Type: text/plain\\r\\nContent-Length: \\d+\\r\\n\\r\\n400 Bad Request Cannot parse request\\r\\n| p/GotoMeeting httpd/\nmatch http m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nAllow: GET, HEAD, POST\\r\\nContent-Length: 0\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n$| p/Allegro RomPager/ v/$1/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nContent-type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>501 Not Implemented</TITLE></HEAD>\\n<BODY><H1>501 Not Implemented</H1>\\nThe requested method is not recognized\\n</BODY></HTML>\\n$| p/BusyBox httpd/ v/1.13/ o/Linux/ cpe:/a:busybox:busybox:1.13/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nContent-type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n<HEAD><TITLE>501 Not Implemented</TITLE></HEAD>\\n<BODY><H1>501 Not Implemented</H1>\\nThe requested method is not recognized by this server\\.\\n</BODY>\\n$| p/BusyBox httpd/ d/media device/ o/Linux/ cpe:/a:busybox:busybox/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>501 Not Implemented</TITLE></HEAD>\\n<BODY><H1>501 Not Implemented</H1>\\nThe requested method is not recognized\\n</BODY></HTML>\\n$| p/BusyBox httpd/ o/Linux/ cpe:/a:busybox:busybox/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\nContent-type: text/html\\r\\nDate: Wed, 01 Jul 2009 09:22:30 GMT\\r\\nConnection: close\\r\\n\\r\\n<HEAD><TITLE>501 Not Implemented</TITLE></HEAD>\\n<BODY><H1>501 Not Implemented</H1>\\nThe requested method is not recognized by this server\\.\\n</BODY>\\n$| p/BusyBox http/ v/1.01/ o/Linux/ cpe:/a:busybox:busybox:1.01/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\nTransfer-Encoding: chunked\\r\\n\\r\\nB\\r\\nBad Request\\r\\n0\\r\\n\\r\\n$| p/BusyBox http/ v/1.19.4/ o/Linux/ cpe:/a:busybox:busybox:1.19.4/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Octoshape P2P streaming web service/\nmatch http m|^UNKNOWN 501 Not Implemented\\r\\nServer: \\r\\n.*<BODY BGCOLOR=\\\"#cc9999\\\" TEXT=\\\"#000000\\\" LINK=\\\"#2020ff\\\" VLINK=\\\"#4040cc\\\">\\n<H2>501 Not Implemented</H2>\\nThe requested method 'OPTIONS' is not implemented by this server\\.|s p/i3 micro or Linksys SPA400 VoIP gateway http config/ d/VoIP adapter/ cpe:/h:linksys:spa400/a\nmatch http m|^HTTP/1\\.1 501 Method Not Implemented\\r\\nServer: qhttpd\\r\\n| p/qhttpd/\nmatch http m|^HTTP/1\\.0 200 OK \\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\n\\r\\n<html><head><meta http-equiv=\\\"content-type\\\" content=\\\"text/html; charset=ISO-8859-1\\\"><title>DIRECTV HTTP server available options</title>| p/DirecTV satellite receiver http interface/ d/media device/\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\.\\r\\nContent-Type: application/json; charset=ISO-8859-1\\r\\nDate: .* GMT\\r\\nContent-Length: 142\\r\\nReason: Only HTTP GET or POST methods are supported\\.\\r\\n\\r\\n{\\\"status\\\": {\\n  \\\"code\\\": 405,\\n  \\\"commandResult\\\": 1,\\n  \\\"msg\\\": \\\"Method Not Allowed\\.Only HTTP GET or POST methods are supported\\.\\\",\\n  \\\"query\\\": \\\"\\\"\\n}}| p/DirecTV satellite receiver http interface/ d/media device/\nmatch http m|^HTTP/1\\.1 400 Page not found\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html; charset=iso-8859-1;\\r\\n\\r\\n<html><head><title>Document Error: Page not found</title></head>\\r\\n        <body><h2>Access Error: Page not found</h2>\\r\\n        <p>Bad request type</p></body></html>\\r\\n\\r\\n$| p/GoAhead WebServer/ i/Auerswald COMpact 5020 VoIP PBX/ d/PBX/ cpe:/a:goahead:goahead_webserver/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Apache/x\\.x\\.x \\(Unix\\) mod_ssl/x\\.x\\.x OpenSSL/([\\w._-]+)\\r\\nContent-Length: 0\\r\\nAllow: GET, HEAD, POST, OPTIONS, TRACE\\r\\nConnection: close\\r\\n\\r\\n$|s p/Apache httpd/ i/Fastora NAS T2 NAS device; OpenSSL $1/ d/storage-misc/ o/FreeBSD/ cpe:/a:apache:http_server/ cpe:/a:openssl:openssl:$1/ cpe:/o:freebsd:freebsd/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\nContent-Length: 0\\r\\nAllow: HEAD, GET, OPTIONS\\r\\n\\r\\n$| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP LaserJet 2430 printer http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/h:hp:laserjet_2430/a\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Length: 111\\r\\nContent-Type: text/xml\\r\\n.*<error xmlns=\\\"http://www\\.slingbox\\.com\\\"><code>ObjectNotFound</code><message>Resource Not Found</message></error>$|s p/Slingbox remote streaming httpd/\nmatch http m|^HTTP/1\\.1 405 Not Allowed\\r\\nContent-Type: text/html; charset=utf-8\\r\\n.*<head><title>405 Not Allowed</title></head>\\r\\n<body bgcolor=\\\"white\\\">\\r\\n<center><h1>405 Not Allowed</h1></center>\\r\\n<hr><center>nginx</center>\\r\\n</body>\\r\\n</html>\\r\\n|s p/nginx/ cpe:/a:igor_sysoev:nginx/\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\n\\r\\n<html><head><title>Error</title></head><body>Error: 405 METHOD NOT ALLOWED</body></html>$| p/Canon imageRUNNER 1025i printer http config/ d/printer/ cpe:/h:canon:imagerunner_1025i/\nmatch http m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nContent-Length: 87\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nServer: TornadoServer/([\\w._-]+)\\r\\n\\r\\n<html><title>405: Method Not Allowed</title><body>405: Method Not Allowed</body></html>$| p/Tornado httpd/ v/$1/ cpe:/a:tornadoweb:tornado:$1/a\n# http://www.ibm.com/developerworks/systems/library/es-nweb/index.html\nmatch http m|^<HTML><BODY><H1>nweb Web Server Sorry: Only simple GET operation supported OPTIONS / HTTP/1\\.0\\*\\*\\*\\*</H1></BODY></HTML>\\r\\n| p/IBM nweb/ cpe:/a:ibm:nweb/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nServer: httpd_gargoyle/([\\w._ -]+)\\r\\n| p/httpd_gargoyle/ v/$1/ i/Gargoyle WAP firmware/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .* GMT\\r\\nServer:  \\r\\nAllow: GET,HEAD,POST,OPTIONS\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n$| p/Apache httpd/ v/2.2.9/ cpe:/a:apache:http_server:2.2.9/\nmatch http m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nAllow: GET, POST\\r\\nContent-Type: text/html\\r\\n\\r\\n$| p|Siemens 315-2PN/DP programmable logic controller http admin| d/specialized/ cpe:|h:siemens:315-2pn/dp|\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Arecont Vision\\\"\\r\\n\\r\\n| p/Arecont Vision surveillance camera httpd/ d/webcam/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: \\r\\nContent-Type: text/html\\r\\nContent-Length: 57\\r\\n\\r\\nHTTP/1\\.0 400 Bad Request: Invalid or unsupported method\\r\\n\\r\\n\\r\\n$| p|Alcatel/Thomson SpeedTouch ADSL http config| d/broadband router/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 54\\r\\n\\r\\n<HTML><BODY><H1>501 Not Implemented</H1></BODY></HTML>$| p/VMware ESXi 4.1 Server httpd/ cpe:/o:vmware:esxi:4.1/\nmatch http m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nServer: Membase Server ([\\w.-]+)\\r\\nPragma:| p/Membase Admin httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 405 Method Not Allowed\\r\\nServer: Couchbase Server ([\\w.-]+)\\r\\nPragma:| p/Couchbase Admin httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 501 Unsupported method \\('OPTIONS'\\)\\r\\nServer: BaseHTTP/([\\w._-]+) Python/([\\w._+-]+)\\r\\n| p/BaseHTTPServer/ v/$1/ i/Python $2/ cpe:/a:python:basehttpserver:$1/a cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nContent-Length: 148\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\n\\r\\n500 Internal Server Error\\n\\nThe server has either erred or is incapable of performing the requested operation\\. \\n\\n 'NoneType' object is not iterable  $| p/Nicira bridge http admin/ d/bridge/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nServer: \\r\\n\\r\\n<html><head><title>404 Not Found</title></head>\\n<body><h1>404 Not Found</h1>\\n/: <pre>This item has not been found</pre>\\n<hr><address><a href=\\\"http://(BLACKBERRY-[\\w._-]+):\\d+/\\\">[\\w._-]+:\\d+</a></address>\\n</body></html>\\n$| p/BlackBerry PlayBook QConnDoor httpd/ h/$1/ cpe:/h:rim:blackberry_playbook_tablet/ cpe:/o:rim:blackberry_playbook_os:2.0/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: Router\\r\\nConnection: close\\r\\nWWW-Authenticate: Basic realm=\\\"Roteador Intelbras Wireless N 150Mbps\\\"\\r\\n| p/Intelbras router httpd/ d/WAP/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\nAllow: GET, HEAD, OPTIONS\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Hiawatha httpd/\nmatch http m|^HTTP/1\\.1 404 Not Found\\nDate: .*\\nServer: Webserver \\(Windows\\)\\nConnection: close\\nContent-Type: text/html; charset=ISO-8859-1\\nContent-Length: 79\\n\\n<h1>Wrong URL</h1><h3>The webpage your are trying to access does not exist</h3>| p/American Dynamics IP camera httpd/ d/webcam/\n# Responds with this to anything containing \"\\r\\n\"\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"DMP\\\"\\r\\n\\r\\n| p/Cisco Digital Media Player/ d/media device/\n# too general?\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nContent-Type: text/html; charset=utf-8\\r\\nContent-Length: 124\\r\\nConnection: close\\r\\n\\r\\n<html><head><title>405 Method Not Allowed</title></head><body><center><h1>405 Method Not Allowed</h1></center></body></html>| p/TP-LINK TD-W8968 http admin/ d/WAP/ cpe:/h:tp-link:td-w8968/a\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nPragma: No-cache\\r\\nCache-Control: no-cache\\r\\nExpires: .*? ([A-Z]+)\\r\\nContent-Type: text/html;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer:  \\r\\n\\r\\n<html><head><title>Apache Tomcat/([\\w._-]+) - Error report</title>| p/Apache Tomcat httpd/ v/$2/ i/timezone: $1/ cpe:/a:apache:tomcat:$2/\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nDate: .*? UTC\\r\\nContent-type: text/html\\r\\nExpires: Thu, 16 Feb 1989 00:00:00 GMT\\r\\n\\r\\n<H1>501 Not Implemented</H1>\\r\\n\\r\\n\\r\\n| p/Cisco IOS httpd/ o/IOS/ cpe:/o:cisco:ios/a\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\\r\\nAccess-Control-Allow-Origin: \\r\\nAccess-Control-Allow-Credentials: true\\r\\nAccess-Control-Max-Age: 86400\\r\\nAccess-Control-Allow-Headers: Content-Type, Authorization\\r\\nServer: nzbget-([\\w._-]+)\\r\\n\\r\\n| p/NZBGet httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\n\\r\\nHTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"Securesphere Gateway Authentication\\\"\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\nSet-Cookie: session_id=\\d+; Path=/\\r\\n\\r\\n| p/Imperva SecureSphere WAF http admin/\nmatch http m|^HTTP/1\\.0 501 Unsupported method \\('OPTIONS'\\)\\r\\nServer: JiffyServer/([\\w._-]+) Python/([\\w._-]+)\\r\\nDate: .*\\r\\nContent-Type: text/html;charset=utf-8\\r\\nConnection: close\\r\\n\\r\\n| p/Jiffy secure messaging httpd/ v/$1/ i/Python $2/ cpe:/a:python:python:$2/\nmatch http m|^HTTP/1\\.1 405 Method not allowed\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nPragma: no-cache\\r\\nContent-Length: 8\\r\\nContent-Type: text/html\\r\\nAccept-Ranges: bytes\\r\\n\\r\\nERROR=0\\n| p/ACTi NVR3 httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: GateOne\\r\\nX-Ua-Compatible: IE=edge\\r\\nAllow: HEAD,GET,POST,OPTIONS\\r\\nDate: .*\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nContent-Type: application/json; charset=UTF-8\\r\\n\\r\\n{\\\"applications\\\": \\[([^]]+)\\]|s p/Gate One http terminal emulator/ i/apps: $1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\nCannot OPTIONS /$| p/Express.js httpd/\nmatch http m|^HTTP/1\\.0 501 not implemented\\r\\nConnection: close\\r\\nContent-Length: 20\\r\\nAllow: GET,HEAD,POST\\r\\nCache-Control: max-age=0\\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\nExpires: .*\\r\\n\\r\\n501 not implemented\\n| p/Bluesound Node http config/ d/media device/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nServer: WindWeb/([\\w._-]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<H1>Wind Manage Web Server Error Report:</H1>| p/Wind Manage httpd/ v/$1/ cpe:/a:windriver:wind_manage:$1/\nmatch http m%^HTTP/1\\.0 40(?:6 Not Acceptable|5 Method Not Allowed)\\r\\nContent-Length: 51\\r\\nContent-Security-Policy: default-src 'self' 'unsafe-inline'; img-src 'self' blob:; frame-ancestors 'self'\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nContent-Type: text/html; charset=utf-8\\r\\nDate: .*\\r\\n\\r\\n<html><body>HTTP Method not supported</body></html>% p/Greenbone Security Assistant/ cpe:/a:greenbone:greenbone_security_assistant/\nmatch http m|^<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\" \"http://www\\.w3\\.org/TR/html4/loose\\.dtd\">\\r\\n<html>\\r\\n<head>\\r\\n<link rel=\"shortcut icon\" href=\"/images/favicon\\.ico\" type=\"image/x-icon\">\\r\\n<title>WLC_Control - Error - 400</title>\\r\\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\">\\r\\n\\r\\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/login\\.css\">\\r\\n    </head><body  ><div class=\"header\">\\r\\n<a href=\"http://www\\.lancom-systems\\.de\"><img class=\"headerimg\" src=\"/images/productsvg\\.svg\" alt=\"LANCOM Systems Homepage\"></a><p class=\"headerp\">LANCOM WLC-([\\w._+-]+)</p>| p/Lancom WLAN Controller httpd/ i/model: WLC-$1/ cpe:/h:lancom:wlc-$1/\n# ASUS RT-AC66U firmware uses the \"httpd/2.0\" SERVER_NAME\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\nServer: httpd/2\\.0\\r\\nDate: .* GMT\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>501 Not Implemented</TITLE></HEAD>\\n<BODY BGCOLOR=\"#cc9999\"><H4>501 Not Implemented</H4>\\nThat method is not implemented\\.\\n</BODY></HTML>\\n| p/Acme milli_httpd/ v/2.0/ i/ASUS RT-AC-series router/ d/broadband router/ cpe:/a:acme:milli_httpd:2.0/\nmatch http m|^HTTP/1\\.1 501 Not Implemented\\r\\nConnection: close\\r\\n\\r\\n501 Not Implemented: Only GET and POST supported\\r\\n| p|Microchip Libraries of Applications TCP/IP Stack httpd| cpe:/a:microchip_technology_inc:mla/\nmatch http m|^HTTP/1\\.1 400 Page not found\\r\\nServer: Go[aA]head(?:-Webs)?/([\\d.]+) PeerSec-MatrixSSL/(\\d[\\w.]+)-OPEN\\r\\n| p/GoAhead WebServer/ v/$1/ i/PeerSec MatrixSSL $2/ cpe:/a:goahead:goahead_webserver:$1/ cpe:/a:peersec:matrixssl:$2/\n# Also works for GetRequest but may be too general there.\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:connection: .*\\r\\n)?(?:content-length: \\d+\\r\\n)?content-type: text/html(?:; charset=UTF-8)?\\r\\n(?:transfer-encoding: .*\\r\\n)?\\r\\n| p/ocaml-cohttp/ cpe:/a:mirageos:ocaml-cohttp/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nServer: AvigilonOnvifNvt/([\\d.]+)\\r\\n| p/Avigilon webcam ONVIF NVT/ v/$1/ d/webcam/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nHTTP/1\\.1\\r\\nServer: Loxone Miniserver ([\\w._-]+)/([\\d.]+) UPnP/([\\d.]+)\\r\\n| p/Loxone Miniserver home automation httpd/ v/$2/ i/name: $1; UPnP $3/ d/specialized/\nmatch http m|^HTTP/1\\.0 204 \\r\\ncontent-type: text/html\\r\\ncontent-length: 0\\r\\n\\r\\n| p/Tablo Network TV tuner/ d/media device/\nmatch http m|^HTTP/1\\.1 501 Method Not Implemented\\r\\nContent-Type: text/plain\\r\\nContent-Length: 12\\r\\n\\r\\nError: 501\\r\\n| p/Televes CoaxData coax-to-Ethernet bridge/ d/bridge/\n\nmatch http-proxy m|^HTTP/1\\.1 503 Service Unavailable\\r\\ndate: .*\\r\\nconnection: close\\r\\n\\r\\n<html><body><pre><h1>Service unavailable</h1></pre></body></html>\\n| p/HTTP Replicator proxy/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request\\r\\n.*This is a WebSEAL error message template file\\.|s p/IBM WebSEAL reverse http proxy/ d/proxy server/\nmatch http-proxy m|^HTTP/1\\.0 \\d\\d\\d.*\\r\\nServer: B[iI][gG]-?IP\\r\\n|s p/F5 BIG-IP load balancer http proxy/ d/load balancer/\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r.*\\nAllow: GET,HEAD,POST,OPTIONS\\r.*\\nServer: Oracle-Application-Server-(\\w+) Oracle-Web-Cache \\(|s p/Oracle Web Cache http proxy/ v/$1/ cpe:/a:oracle:application_server_web_cache:$1/\nmatch http-proxy m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nContent-Length: 1059\\r\\nContent-Type: text/html; charset=utf-8\\r\\n\\r\\n$| p/XX-Net web proxy tool/\nmatch http-proxy m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=utf-8\\r\\nPragma: no-cache\\r\\nContent-Length: \\d+\\r\\nSet-Cookie: f5[a-z]+=[A-Z]+; HttpOnly; secure\\r\\n\\r\\n<html><head><title>Request Rejected</title>| p/F5 BIG-IP load balancer http-proxy/ d/load balancer/\n\nmatch kerberos-sec m|^\\0\\0\\0[\\x50-\\x90]~[\\x4e-\\x8e]0[\\x4c-\\x8c]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5\\x05\\x02\\x03...\\xa6\\x03\\x02\\x01=\\xa9.\\x1b.([\\w.-]+)\\xaa\\x1d0\\x1b\\xa0\\x03\\x02\\x01\\0\\xa1\\x140\\x12\\x1b\\x06kadmin\\x1b\\x08changepw|s p/MIT Kerberos/ i/server time: $1-$2-$3 $4:$5:$6Z/ h/$7/\n\nmatch monsoon m|^\\0\\x14\\0\\x01\\xff\\xff\\xff\\xfd\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Monsoon HAVA media streaming/ d/media device/\n\nmatch msdtc m|^\\x10\\x1a\\x0b\\x00\\x60\\x4d$| p/Microsoft Distributed Transaction Coordinator/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch policy m|^action=defer_if_permit Policy Rejection: Invalid data\\n\\n$| p/Postfix mail policyd/\n\nmatch pop3 m|^\\+OK Citadel POP3 server <\\d+@([-\\w_.]+)>\\r\\n-ERR Not logged in\\.\\r\\n-ERR Not logged in\\.\\r\\n| p/Citadel pop3d/ h/$1/ cpe:/a:citadel:ux/\n\nmatch rtsp m|^HTTP/1\\.0 501 Not Implemented\\r\\nAllow: DESCRIBE, GET_PARAMETER, PAUSE, PLAY, SETUP, SET_PARAMETER, TEARDOWN\\r\\n| p/Axis M1054 or P3364 Network Camera rtspd/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCSeq: 0\\r\\nPublic: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY\\r\\nBoard: MIPS\\r\\nDevCaps: VideoColor,IRLed,LightMode,\\r\\n\\r\\n| p/Maygion IPCamera rtspd/ d/webcam/\n\nmatch sand-db m|^\\xff\\x02\\x04\\0\\x03\\0r\\n\\x08\\0@L\\x01\\0\\x01\\x01\\0\\0\\0\\0[A-Z]{16}$| p/SAND database/\n\n# www.hermstedtstingray.com/user_guides/stingray_security_white_paper.pdf\nmatch stingray m|^\\x02\\x004ComDU2\\0\\0\\0\\0\\0\\0\\0\\0\\0ON\\0\\x08OPTIONS \\0\\0\\0\\0<\\x9e\\x0e\\x08!\\x8a6@@\\xb2W@\\0\\0\\0\\00\\xd8\\xdd\\xbf\\xbe\\x99\\r9@\\x0c\\xe0\\x0b\\x08\\xb5\\xd6\\x0f@\\xe8\\xdd\\xbf\\xbeh\\xa6>@0O\\x18\\x08\\xd4\\xb4U@| p/StingRay file transfer/\n\nmatch tgcmd m|^\\d+ \\d+ \\d+,Invalid command\\.\\n$| p/tgcmd.exe support daemon/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch upnp m|^HTTP/1\\.1 405 METHOD NOT ALLOWED\\r\\nCache-Control: no-cache\\r\\nLast-Modified: .*\\r\\nX-User-Agent: DVArchive\\r\\nServer: Unknown/0\\.0 UPnP/([\\d.]+) Virata-EmWeb/R([\\d_]+)\\r\\n| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/DVArchive UPnP; UPnP $2/ o/Linux/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.1 501 Not Implemented\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\nContent-Length: 149\\r\\nServer: Debian/([\\w._-]+) DLNADOC/([\\w._-]+) UPnP/([\\w._-]+) MiniDLNA/([\\w._-]+)\\r\\n| p/MiniDLNA/ v/$4/ i/Debian $1; DLNADOC $2; UPnP $3/ o/Linux/ cpe:/a:minidlna:minidlna:$4/a cpe:/o:debian:debian_linux:$1/ cpe:/o:linux:linux_kernel/a\n\nmatch vnc-http m|^HTTP/1\\.1 200\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nSet-Cookie: UBRWID=[A-F0-9]+\\r\\nAccess-Control-Allow-Origin: \\*\\r\\nConnection: Keep-Alive\\r\\n\\r\\n\\xef\\xbb\\xbf<!DOCTYPE html>\\r\\n<html>\\r\\n<head>\\r\\n<title>ThinVNC</title>\\r\\n| p/ThinVNC/\n\nmatch webdav m|^HTTP/1\\.1 200 OK\\r\\nSet-Cookie: mainServerInstance=; path=/(?:; secure)?\\r\\n(?:Set-Cookie: currentAuth=[^;]*; path=/(?:; secure)?\\r\\n)?Set-Cookie: CrushAuth=[^;]+; path=/(?:; secure; HttpOnly)?\\r\\nPragma: no-cache\\r\\nx-responding-server: ([\\w._-]+)\\r\\nX-dmUser: username\\r\\nMS-Author-Via: DAV\\r\\nAllow: | p/CrushFTP httpd/ h/$1/ cpe:/a:crushftp:crushftp/\nmatch webdav m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: cPanel\\r\\nPersistent-Auth: false\\r\\nCache-Control: no-cache[^\\r\\n]*\\r\\nConnection: Keep-Alive\\r\\nVary: Accept-Encoding\\r\\nAllow: [A-Z, ]+\\r\\nContent-Length: 0\\r\\nContent-Type: text/plain\\r\\nExpires: Fri, 01 Jan 1990 00:00:00 GMT\\r\\nDAV: 1, 2\\r\\nKeep-Alive: timeout=15, max=96\\r\\nMS-Author-Via: DAV\\r\\n\\r\\n|s p/cPanel webdav/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nsoftmatch caldav m|^HTTP/1\\.[01] 200 OK\\r\\n.*DAV: [^\\r\\n]*calendar.*\\r\\nAllow:|s\nsoftmatch webdav m|^HTTP/1\\.[01] 200 OK.*\\r\\nDAV: *1.*\\r\\nAllow:[^\\r\\n]* PROPFIND|s\nsoftmatch webdav m|^HTTP/1\\.[01] 200 OK.*\\r\\nAllow:[^\\r\\n]* PROPFIND.*\\r\\nDAV: *1|s\n\n# https://github.com/kanaka/websockify\nmatch websocket m|^HTTP/1\\.0 501 Unsupported method \\('OPTIONS'\\)\\r\\nServer: SimpleHTTP/([\\w._-]+) Python/([\\w._+-]+)\\r\\nDate: .* GMT\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<head>\\n<title>Error response</title>\\n</head>\\n<body>\\n<h1>Error response</h1>\\n<p>Error code 501\\.\\n<p>Message: Unsupported method \\('OPTIONS'\\)\\.\\n<p>Error code explanation: 501 = Server does not support this operation\\.\\n</body>\\n$| p/websockify/ i/SimpleHTTP $1; Python $2/ cpe:/a:python:python:$2/ cpe:/a:python:simplehttpserver:$1/\n\n##############################NEXT PROBE##############################\nProbe TCP RTSPRequest q|OPTIONS / RTSP/1.0\\r\\n\\r\\n|\nrarity 5\nports 80,554,3052,3372,5000,7070,8080,10000\nsslports 322\nfallback GetRequest\n\nmatch raop m|^RTSP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"raop\\\", nonce=\\\"[0-9A-F]{40}\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Remote Audio Output Protocol/ i/Rogue Amoeba Airfoil speakers/ d/media device/\n\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCSeq: 0\\r\\nDate: .*\\r\\nServer: RealServer Version (\\d[-.\\w]+) \\(win32\\)\\r\\n| p/Realserver RTSP/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: RealMedia EncoderServer Version (\\d[-.\\w]+) \\(win32\\)\\r\\n|s p/RealMedia EncoderServer/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: RealServer Version (\\d[-.\\w]+) \\(([-.+\\w]+)\\)\\r\\n|s p/RealOne Server/ v/$1/ i/$2/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Helix [\\w ]*Server Version ([\\d.]+) \\(win32\\)\\r\\n|s p/Helix DNA Server/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Helix [\\w ]*Server Plus Version ([\\d.]+) \\(win32\\)|s p/Helix DNA Server Plus/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch rtsp m|^RTSP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Helix [\\w ]*Server Version ([\\d.]+) \\((linux-[^)\\r\\n]+)\\)|s p/Helix DNA Server/ v/$1/ i/$2/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch rtsp m|^RTSP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Helix [\\w ]*Server Version ([\\d.]+) \\(sunos-([\\d.]+)-sparc-server\\)|s p/Helix DNA Server/ v/$1/ i/SunOS $2 sparc/ o/SunOS/ cpe:/o:sun:sunos:$2/\nmatch rtsp m|^RTSP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Helix Server Version ([\\d.]+) \\(sunos-([\\d.]+)-sparc-server\\)|s p/Helix DNA Server/ v/$1/ i/SunOS $2 sparc/ o/SunOS/ cpe:/o:sun:sunos:$2/\nmatch rtsp m|^RTSP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Helix Server Version ([\\d.]+) \\(win32\\)|s p/Helix DNA Server/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch rtsp m|^RTSP/1\\.0 \\d\\d\\d .*\\r\\nServer: DSS/([\\d.]+) \\(Build/[\\d.]+; Platform/Win32| p/Darwin Streaming Server/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch rtsp m|^RTSP/1\\.0 \\d\\d\\d .*\\r\\nServer: DSS/([\\d.]+) \\(Build/[\\d.]+; Platform/Solaris| p/Darwin Streaming Server/ v/$1/ o/Solaris/ cpe:/o:sun:sunos/a\nmatch rtsp m|^RTSP/1\\.0 \\d\\d\\d .*\\r\\nServer: DSS/([\\d.]+) \\(Build/[\\d.]+; Platform/Linux| p/Darwin Streaming Server/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch rtsp m|^RTSP/1\\.0 \\d\\d\\d .*\\r\\nServer: DSS/([\\d.]+) \\(Build/[\\d.]+; Platform/FreeBSD| p/Darwin Streaming Server/ v/$1/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\nmatch rtsp m|^RTSP/1\\.0 \\d\\d\\d .*\\r\\nPublic: DESCRIBE, GET_PARAMETER, PAUSE, PLAY, SETUP, TEARDOWN\\r\\n\\r\\n| p/Axis 207W Webcam rtspd/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nAudio-Jack-Status: connected; type=digital\\r\\n| p/RogueAmoeba Airfoil rtspd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nServer: AirTunes/([\\w._-]+)\\r\\nAudio-Jack-Status: connected; type=analog\\r\\nPublic: ANNOUNCE, SETUP, RECORD, PAUSE, FLUSH, TEARDOWN, OPTIONS, GET_PARAMETER, SET_PARAMETER, POST, GET\\r\\n\\r\\n| p/RogueAmoeba Airfoil rtspd/ v/$1/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nAudio-Jack-Status: connected; type=analog\\r\\nCSeq: \\r\\nPublic: ANNOUNCE, SETUP, RECORD, PAUSE, FLUSH, TEARDOWN, OPTIONS, GET_PARAMETER, SET_PARAMETER\\r\\n\\r\\n| p/Boxee rtspd/ d/media device/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nServer: vlc ([\\w._-]+)\\r\\n| p/VideoLAN/ v/$1/ cpe:/a:videolan:vlc_media_player:$1/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nPublic: ANNOUNCE, SETUP, RECORD, PAUSE, FLUSH, TEARDOWN, OPTIONS, GET_PARAMETER, SET_PARAMETER, POST, GET\\r\\nServer: AirTunes/([\\w._-]+)\\r\\n\\r\\n| p/Apple AirTunes rtspd/ v/$1/ i/Apple TV/ d/media device/ o/Mac OS X/ cpe:/a:apple:apple_tv/ cpe:/o:apple:mac_os_x/a\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\n\\r\\n$| p/Apple AirTunes rtspd/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: AirTunes/([\\w._-]+)\\r\\n\\r\\n| p/Apple AirTunes rtspd/ v/$1/\nmatch rtsp m|^RTSP/1\\.0 453 Not Enough Bandwidth\\r\\nServer: AirTunes/([\\w._-]+)\\r\\n\\r\\n| p/Apple AirTunes rtspd/ v/$1/ i/bandwidth maxed out/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nServer: VLC/([\\w._-]+)\\r\\nContent-Length: 0\\r\\nPublic: DESCRIBE,SETUP,TEARDOWN,PLAY,PAUSE,GET_PARAMETER\\r\\n\\r\\n| p/VLC rtspd/ v/$1/ cpe:/a:videolan:vlc_media_player:$1/\n\nmatch rtsp m|^RTSP/2\\.0 200 OK\\r\\nCSeq: 0\\r\\nPublic: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE\\r\\n\\r\\n$| p/TwonkyMedia rtspd/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nServer: iCanSystem/([\\w._-]+)\\r\\nCseq: \\r\\nPublic: DESCRIBE, SETUP, PLAY, PAUSE, TEARDOWN, OPTIONS\\r\\n\\r\\n$| p/iCanSystem rtspd/ v/$1/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nPublic: DESCRIBE, GET_PARAMETER, PAUSE, PLAY, SETUP, SET_PARAMETER, TEARDOWN\\r\\n\\r\\n$| p/AXIS 207W or 212 PTZ network camera rtspd/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nPublic: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, SET_PARAMETER\\r\\n\\r\\n$| p/Avtech MPEG4 DVR control rtspd/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nSupported: play\\.basic, con\\.persistent\\r\\nCseq: 0\\r\\nServer: Wowza Media Server ([\\w._-]+) build(\\d+)\\r\\nPublic: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, OPTIONS, ANNOUNCE, RECORD, GET_PARAMETER\\r\\n\\r\\n$| p/Wowza Media Server rtspd/ v/$1 build $2/ cpe:/a:wowza:wowza_media_server:$1/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nSupported: play\\.basic, con\\.persistent\\r\\nCseq: 0\\r\\nServer: Wowza Streaming Engine ([\\w._-]+) build(\\d+)\\r\\nPublic: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, OPTIONS, ANNOUNCE, RECORD, GET_PARAMETER\\r\\nCache-Control: no-cache\\r\\n\\r\\n$| p/Wowza Streaming Engine rtspd/ v/$1 build $2/ cpe:/a:wowza:wowza_streaming_engine:$1/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Helix Mobile Server Version ([\\w._-]+) \\(win32\\) \\(RealServer compatible\\)\\r\\nPublic: OPTIONS, DESCRIBE, PLAY, PAUSE, SETUP, GET_PARAMETER, SET_PARAMETER, TEARDOWN\\r\\nTurboPlay: 1\\r\\nRealChallenge1: [0-9a-f]+\\r\\nStatsMask: 8\\r\\n\\r\\n$|s p/Helix Mobile Server rtspd/ v/$1/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Helix Mobile Server Version ([\\w._-]+) \\(win32\\) \\(RealServer compatible\\)\\r\\nPublic: OPTIONS, DESCRIBE, ANNOUNCE, PLAY, PAUSE, SETUP, GET_PARAMETER, SET_PARAMETER, TEARDOWN\\r\\nTurboPlay: 1\\r\\nRealChallenge1: [0-9a-f]+\\r\\nStatsMask: 8\\r\\n\\r\\n$|s p/Helix Mobile Server rtspd/ v/$1/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCseq: 0\\r\\nPublic: OPTIONS,DESCRIBE,SETUP,PLAY,PING,PAUSE,TEARDOWN\\r\\n\\r\\n$| p/Cisco WVC54GCA webcam rtspd/ d/webcam/ cpe:/h:cisco:wvc54gca/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\nallow: OPTIONS, DESCRIBE, SETUP, PLAY, TEARDOWN\\r\\n\\r\\n$| p/ACTi surveillance camera rtspd/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: Mango DSP RTSP Stack\\r\\n\\r\\n| p/Mango DSP AVS Raven-M video server rtspd/ d/media device/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCSeq: -1\\r\\nDate: .* GMT\\r\\nPublic: OPTIONS, DESCRIBE, PLAY, SETUP, TEARDOWN\\r\\n\\r\\n$| p/Vivotek IP7131 or IP7138 webcam rtspd/ d/webcam/ cpe:/h:vivotek:ip7131/ cpe:/h:vivotek:ip7138/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCSeq: -1\\r\\nDate: .* GMT\\r\\nPublic: OPTIONS, DESCRIBE, PLAY, SETUP, GET_PARAMETER, SET_PARAMETER, TEARDOWN\\r\\n\\r\\n| p/Vivotek FD8134V webcam rtspd/ d/webcam/ cpe:/h:vivotek:fd8134v/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nPublic: OPTIONS, ANNOUNCE, SETUP, RECORD, SET_PARAMETER, GET_PARAMETER, FLUSH, TEARDOWN, POST\\r\\n\\r\\n| p/Freebox rtspd/ d/media device/\nmatch rtsp m|^RTSP/1\\.0 401 Unauthorized\\r\\nCSeq: 0\\r\\nDate: .*\\r\\nExpires: .*\\r\\nCache-Control: must-revalidate\\r\\nWWW-Authenticate: Digest realm=\\\"NET-i\\\", nonce=\\\"000000000000000000000000[0-9A-F]{8}\\\"\\r\\n\\r\\n| p/Samsung SNB-2000 webcam rtspd/ d/webcam/ cpe:/h:samsung:snb-2000/\nmatch rtsp m|^RTSP/1\\.0 200 OK 200\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Amino streamer\\r\\n|s p/Amino AmiNET set-top box rtspd/ d/media device/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nServer: GM Streaming Server v([\\w._-]+)\\r\\nPublic: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE\\r\\n\\r\\n$| p/GM Streaming Server rtspd/ v/$1/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nCSeq: 0\\r\\n\\r\\n| p/Sanyo VCC-HD2300 webcam rtspd/ d/webcam/ cpe:/h:sanyo:vcc-hd2300/\nmatch rtsp m|^RTSP/1\\.0 401 Unauthorized\\r\\nCSeq: 0\\r\\nWWW-Authenticate: Basic realm=\\\"Arecont Vision\\\"\\r\\n\\r\\n| p/Arecont Vision surveillance camera rtspd/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nDate: .* GMT\\r\\nAllow: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, GET_PARAMETER, SET_PARAMETER\\r\\n\\r\\n| p/D-Link DCS-2130 or Pelco IDE10DN webcam rtspd/ d/webcam/ cpe:/h:dlink:dcs-2130/ cpe:/h:pelco:ide10dn/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCSeq: 0\\r\\nDate: .*\\r\\nServer: RealMedia Server Version ([\\d.]+) \\(([^)]+)\\)\\r\\nPublic: OPTIONS, DESCRIBE, ANNOUNCE, SETUP, GET_PARAMETER, SET_PARAMETER, TEARDOWN\\r\\nRealChallenge1: | p/RealMedia Server/ v/$1/ o/$2/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\nAllow: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE\\r\\n\\r\\n| p/NUUO IP Surveillance rtpsd/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\nAllow: OPTIONS, DESCRIBE, SETUP, TEARDOWN, SET_PARAMETER, PLAY\\r\\n\\r\\n| p/Planet ICA-HM132 or TRENDnet TV IP302PI rtspd/ d/webcam/ cpe:/h:planet:ica-hm132/ cpe:/h:trendnet:tv_ip302pi/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\nAllow: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, SET_PARAMETER\\r\\n\\r\\n| p/Live555 Streaming Server rtspd/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nAudio-Jack-Status: .*\\r\\nPublic: ANNOUNCE, SETUP, RECORD, PAUSE, FLUSH, TEARDOWN, OPTIONS, GET_PARAMETER, SET_PARAMETER\\r\\n\\r\\n| p/Shairport rtspd/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: Optelecom-NKF RTSPServer/([\\w._-]+)\\r\\n\\r\\n| p/Optelecom-NKF rtspd/ v/$1/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nServer: HiIpcam/([\\w._-]+) VodServer/([\\w._-]+)\\r\\nPublic: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY,SET_PARAMETER,GET_PARAMETER\\r\\n\\r\\n| p/VODServer rtspd/ v/$2/ i/HiIpcam $1/\nmatch rtsp m|^RTSP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Digest realm=\\\"Hikvision\\\", nonce=\\\"[\\da-f]{32}\\\", stale=\\\"FALSE\\\"\\r\\nWWW-Authenticate: Basic realm=\\\"/\\\"\\r\\n\\r\\n| p/Hikvision DVR rtspd/ d/media device/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nPublic: ANNOUNCE, SETUP, RECORD, PAUSE, FLUSH, TEARDOWN, OPTIONS, GET_PARAMETER, SET_PARAMETER, POST, GET, PUT\\r\\nServer: AirTunes/([\\w._-]+)\\r\\n\\r\\n| p/AirTunes rtspd/ v/$1/ cpe:/a:apple:airtunes:$1/\n# TP-LINK Wireless N Gigabit Router WR1043ND\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCSeq: 0\\r\\nDate: .*\\r\\nPublic: OPTIONS, DESCRIBE, SETUP, PLAY, PAUSE, TEARDOWN, GET_PARAMETER, SET_PARAMETER\\r\\n\\r\\n$| p/TP-LINK WAP rtspd/ d/WAP/\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nDate: \\d\\d\\d\\d/\\d\\d?/\\d\\d?\\r\\nAllow: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, GET_PARAMETER, SET_PARAMETER\\r\\n\\r\\n| p/Monster Digital Villain or Denver AC-5000W MK2 rtspd/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nServer: HiIpcam/(V\\d+R\\d+) VodServer/([\\d.]+)\\r\\nPublic: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY\\r\\n\\r\\n| p/HiLinux IP camera rtspd/ v/$1/ i/VodServer $2/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\"device\"\\r\\nServer: Dahua Rtsp Server\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Dahua IP camera rtspd/\nmatch rtsp m|^RTSP/1\\.0 404 Not Found\\r\\nServer: AvigilonOnvifNvt/([\\d.]+)\\r\\n| p/Avigilon ONVIF camera rtspd/ v/$1/ d/webcam/\n\n# IQinVision IQeye3 RTSP, this is pretty generic, leaving in (Brandon)\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nServer: Gordian Embedded([\\d\\.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Public: OPTIONS, DESCRIBE, SETUP, PLAY, TEARDOWN\\r\\n|s p/Gordian httpd/ v/$1/ i/IQinVision IQeye3 webcam rtspd/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nServer: H264DVR ([\\d.]+)\\r\\nPublic: OPTIONS, DESCRIBE, SETUP, TEARDOWN, GET_PARAMETER,(?: SET_PARAMETER,) PLAY, PAUSE\\r\\n\\r\\n| p/H264DVR rtspd/ v/$1/\nmatch rtsp m|^RTSP/1\\.0 403 Forbidden\\r\\nContent-Length: 0\\r\\nServer: AirTunes/([\\d.]+)\\r\\n\\r\\n| p/AirTunes rtspd/ v/$1/ cpe:/a:apple:airtunes:$1/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nPublic: OPTIONS, DESCRIBE, SETUP, PLAY, TEARDOWN, PAUSE\\r\\n\\r\\n$| p/Hikvision DVR rtspd/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCSeq: 0\\r\\nPublic: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE,GET_PARAMETER\\r\\n\\r\\n$| p/Kodi OSMC rtspd/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCSeq: \\r\\nPublic: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE\\r\\nServer: HomeMonitor HD Pro\\r\\n\\r\\n| p/Y-cam HomeMonitor HD Pro rtspd/ d/webcam/ cpe:/h:y-cam:homemonitor_hd_pro/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nServer: AirTunes/([\\d.]+)\\r\\nPublic: ANNOUNCE, SETUP, RECORD, PAUSE, FLUSH, TEARDOWN, OPTIONS, GET_PARAMETER, SET_PARAMETER\\r\\n\\r\\n| p/Apple AirTunes rtspd/ v/$1/ cpe:/a:apple:airtunes:$1/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCSeq: 0\\r\\nServer: Wowza Streaming Engine ([\\d.]+) build ?(\\d+)\\r\\nCache-Control: no-cache\\r\\nPublic: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, OPTIONS, ANNOUNCE, RECORD, GET_PARAMETER\\r\\n| p/Wowza Streaming Engine rtspd/ v/$1 build $2/ cpe:/a:wowza:wowza_streaming_engine:$1/\n\nmatch http m|^HTTP/1\\.1 403 Forbidden\\r\\nContent-Type: text/html\\r\\nServer: Allegro-Software-RomPager/([\\d.]+).*This object on the APC Management Web Server is protected and requires a secure socket connection\\.|s p/Allegro RomPager/ v/$1/ i/APC http config/ d/power-device/ cpe:/a:allegro:rompager:$1/\nmatch http m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nAllow: GET, HEAD, POST, PUT\\r\\nContent-Length: 0\\r\\nServer: Allegro-Software-RomPager/([\\d.]+)\\r\\n\\r\\n$| p/Allegro RomPager/ v/$1/ cpe:/a:allegro:rompager:$1/\n\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nServer: FineGround Performance Server\\r\\n| p/Fineground performance httpd/\nmatch http m|^RTSP/1\\.0 501 Not Implemented\\r\\nServer: Embedded HTTP Server ([\\d.]+)\\r\\n| p/Embedded HTTP Server/ v/$1/\n\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: Virata-EmWeb/R([\\d_]+)\\r\\nContent-Length: 0\\r\\n\\r\\n400 Bad Request\\r\\n$| p/Virata-EmWeb/ v/$SUBST(1,\"_\",\".\")/ i/HP printer http config/ d/printer/ cpe:/a:virata:emweb:$SUBST(1,\"_\",\".\")/a\n\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nContent-Length: 0\\r\\n\\r\\n| p/EMC Navisphere CIM Object Manager httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nPragma: no-cache\\r\\nCache-Control: no-store\\r\\nContent-Type: text/html\\r\\nContent-Length: 229\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title> Error </title>\\r\\n</head>\\r\\n<body>\\r\\n<!-- user defined strings -->\\r\\nAccess denied due to security policy violation<br><br><!-- reject ID -->\\r\\nReject ID: [0-9a-f-]+\\r\\n<br>\\r\\n<br>\\r\\n</body>\\r\\n</html>$| p/Check Point R65 firewall http config/ d/firewall/ cpe:/h:checkpoint:r65/a\nmatch http m|^HTTP/1\\.1 406 Not Acceptable\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nContent-Type: text/html; charset=utf-8\\r\\nConnection: close\\r\\nContent-Length: 616\\r\\n\\r\\n<HTML><HEAD>\\n<TITLE>Request Error</TITLE>| p/Blue Coat proxy server/ d/proxy server/\nmatch http m|^<html>\\r\\n<head><title>400 Bad Request</title></head>\\r\\n<body bgcolor=\\\"white\\\">\\r\\n<center><h1>400 Bad Request</h1></center>\\r\\n<hr><center>nginx</center>\\r\\n</body>\\r\\n</html>\\r\\n$| p/nginx/ cpe:/a:igor_sysoev:nginx/\nmatch http m|^<html>\\r\\n<head><title>400 Bad Request</title></head>\\r\\n<body bgcolor=\\\"white\\\">\\r\\n<center><h1>400 Bad Request</h1></center>\\r\\n<hr><center>nginx/([\\w._-]+)</center>\\r\\n</body>\\r\\n</html>\\r\\n$| p/nginx/ v/$1/ cpe:/a:igor_sysoev:nginx:$1/\nmatch http m|^<html>\\r\\n<head><title>400 Bad Request</title></head>\\r\\n<body bgcolor=\\\"white\\\">\\r\\n<center><h1>400 Bad Request</h1></center>\\r\\n<hr><center>cloudflare-nginx</center>\\r\\n</body>\\r\\n</html>\\r\\n$| p/cloudflare-nginx/\nmatch http m|^<head><title>400 Bad Request</title></head>\\r\\n<h1>400 Bad Request</h1>\\r\\n\\r\\n| p/nginx/ cpe:/a:igor_sysoev:nginx/\n# Counting on this 404 being unique enough here in RTSPRequest.\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\n\\r\\n$| p/XBT BitTorrent tracker http interface/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\n\\n$| p/Adaptec Storage Manager Agent httpd/\nmatch http m|^HTTP/1\\.1 406 Not Acceptable\\r\\n.*<blockquote>\\n<TABLE border=0 cellPadding=1 width=\\\"80%\\\">\\n<TR><TD>\\n<FONT face=\\\"Helvetica\\\">\\n<big>Request Error \\(unsupported_protocol\\)</big>\\n<BR>\\n<BR>\\n</FONT>|s p/Dreambox httpd/ d/media device/\nmatch http-proxy m|^HTTP/1\\.1 400 Bad Request \\( The data is invalid\\.  \\)\\r\\n| p/Microsoft ISA Server http proxy/ o/Windows/ cpe:/a:microsoft:isa_server/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nPragma: no-cache\\r\\nConnection: close\\r\\nDate: .*\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\r\\n<BODY><H1>400 Bad Request</H1>\\r\\nThe request could not be understood by the server due to malformed syntax\\r\\n</BODY></HTML>$| p/Trend Micro CSC module for Cisco ASA 5510 firewall httpd/ cpe:/h:cisco:asa_5510/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/plain\\r\\nConnection: close\\r\\n\\r\\nError 400: Bad Request\\nCan not parse request: \\[OPTIONS\\]| p/TomTom httpd/\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: Apache\\r\\n\\r\\n| p/Apache Tomcat httpd/ cpe:/a:apache:tomcat/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\n\\r\\n400 Bad Request\\r\\n| p/Cisco Wireless LAN Controller httpd/ d/remote management/ cpe:/o:cisco:wireless_lan_controller_software/\nmatch http m|^HTTP/1\\.1 505 HTTP Version Not Supported\\r\\nContent-Type: text/html\\r\\nContent-Length: 166\\r\\n\\r\\n<html><head><title>505 HTTP Version Not Supported</title></head><body><h1>HTTP Version Not Supported</h1><p>HTTP versions 1\\.0 and 1\\.1 are supported\\.</p></body></html>| p/Mitel SIP DEC VoIP phone http config/ d/VoIP phone/\n#match http m|^<head>\\n<title>Error response</title>\\n</head>\\n<body>\\n<h1>Error response</h1>\\n<p>Error code 400\\.\\n<p>Message: Bad request version \\('RTSP/1\\.0'\\)\\.\\n<p>Error code explanation: 400 = Bad request syntax or unsupported method\\.\\n</body>\\n| p/BaseHTTPServer/ cpe:/a:python:basehttpserver/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/plain\\r\\nContent-Length: 59\\r\\nConnection: close\\r\\n\\r\\nError 400: Bad Request\\nCannot parse HTTP request: \\[OPTIONS\\]$| p/Mongoose httpd/ cpe:/a:cesanta:mongoose/\nmatch http m|^HTTP/1\\.1 505 HTTP Version not supported\\r\\nContent-Length: 0\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\n\\r\\n| p/Konica Minolta bizhub C452 OpenAPI/ d/printer/ cpe:/h:konicaminolta:bizhub_c452/\nmatch http m|^HTTP/1\\.0 500\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nCache-Control: no-cache\\r\\nPragma: no-cache\\r\\nExpires: 0\\r\\nConnection: close\\r\\n\\r\\n<!DOCTYPE html>\\n<html>\\n<head>\\n  <title>Application Firewall Error</title>\\n  <style type=\"text/css\" media=\"screen\">\\n    body \\{ font-family: Arial, Garamond, sans-serif; padding: 40px; background-color: #333333; \\}\\n| p/Imperva WAF/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\r\\n<BODY><H1>400 Bad Request</H1>\\r\\n</BODY></HTML>\\r\\n| p/Trend Micro OfficeScan/ cpe:/a:trend_micro:officescan/\nmatch http m|^<html>\\r\\n<head><title>400 Bad Request</title></head>\\r\\n<body bgcolor=\"white\">\\r\\n<center><h1>400 Bad Request</h1></center>\\r\\n<hr><center></center>\\r\\n</body>\\r\\n</html>\\r\\n| p/Palo Alto GlobalProtect Gateway httpd/ cpe:/a:paloaltonetworks:globalprotect/\n\nmatch http-proxy m|^HTTP/1\\.1 503 Service Unavailable\\r\\ndate: .*\\r\\nconnection: close\\r\\n\\r\\n<html><body><pre><h1>Service unavailable</h1></pre></body></html>\\n| p/HTTP Replicator proxy/\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Length: 103\\r\\nConnection: close\\r\\n\\r\\n<html><body> <h2>Mikrotik HttpProxy</h2>\\n\\r<hr>\\n\\r<h2>\\n\\rError: 400 Bad Request\\r\\n\\r\\n</h2>\\n\\r</body></html>\\n\\r$| p/MikroTik HttpProxy/ d/router/\nmatch http-proxy m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: PanWeb Server/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Keep-Alive: timeout=60, max=2000\\r\\nContent-Type: text/html\\r\\nContent-length: 130\\r\\n\\r\\n<HTML><HEAD><TITLE>Document Error: Bad Request</TITLE>|s p/Palo Alto PanWeb httpd/ v/$1/ d/proxy server/ cpe:/a:paloaltonetworks:panweb:$1/\n\nmatch remote-control m|^\\x01\\0\\0\\0\\0\\0\\0$| p/Alchemy Lab Remote Control PRO remote management/ d/remote management/\n\nmatch rtsp-proxy m|^RTSP/1\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Via: [\\d.]+ ([-\\w_.]+) \\(NetCache NetApp/([\\w.]+)\\)\\r\\n\\r\\n|s p/NetApp NetCache rtsp proxy/ v/$2/ h/$1/ cpe:/a:netapp:netcache:$2/\nmatch rtsp-proxy m|^RTSP/1\\.0 451 Parameter Not Understood\\r\\n\\r\\n$| p/RTSP Proxy Reference Implementation/\nmatch rtsp-proxy m|^RTSP/1\\.0 403 Forbidden: Proxy not licensed\\r\\nSession: \\w+\\r\\n\\r\\n| p/Blue Coat rtsp proxy/ i/Unlicensed/\n\nmatch sonicmq m|^\\x1a\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x08\\xff\\xff\\xff\\xf1\\0\\0\\0O$| p/Novell Sentinel SonicMQ broker/\n\nmatch powerchute m|^RTSP/1\\.0 400 Bad request\\r\\nContent-type: text/html\\r\\n\\r\\n| p/APC PowerChute Agent/ v/6.x|7.x/ d/power-device/\nmatch powerchute m|^RTSP/1\\.0 400 Bad request\\nContent-type: text/html\\n\\n| p/APC PowerChute Agent/ v/7.X/ d/power-device/\nmatch msdtc m|^ERROR\\n$|s p/Microsoft Distributed Transaction Coordinator/ i/error/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nServer: Unknown/0\\.0 UPnP/([\\d.]+) Virata-EmWeb/([-.\\w]+)\\r\\n| p/Virata-EmWeb/ v/$SUBST(2,\"_\",\".\")/ i/ReplayTV UPnP; UPnP $1/ cpe:/a:virata:emweb:$SUBST(2,\"_\",\".\")/a\n# Xbox One UPnP unicast eventing listener or IIS 8.5 on Windows 2012\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Type: text/html; charset=us-ascii\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Length: \\d+\\r\\n\\r\\n<!DOCTYPE HTML PUBLIC \\\"-//W3C//DTD HTML 4\\.01//EN\\\"\\\"http://www\\.w3\\.org/TR/html4/strict\\.dtd\\\">| p/Microsoft IIS httpd/ cpe:/a:microsoft:internet_information_services/\n\n# This probe sends an RPC \"Null command\" to the port for service\n# 100000 (portmapper).\n# Some of these numbers are abitrary (such as ID).  I could consider\n# adding an \\R escape in the string logic to provide a random byte.\n# This would make IDS detection and such a bit harder.  On the other\n# hand, that would make the response a little harder to recognize too.\n##############################NEXT PROBE##############################\nProbe TCP RPCCheck q|\\x80\\0\\0\\x28\\x72\\xFE\\x1D\\x13\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x01\\x86\\xA0\\0\\x01\\x97\\x7C\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|\nrarity 4\nports 81,111,199,514,544,710,711,1433,2049,4045,4999,7000,8307,8333,17007,32750-32810,38978\n\nmatch unicorn-ils m|^\\xb5q\\x83\\x02\\x05\\xe0\\x84\\x03\\x01\\xe1\\x82\\x85\\x03\\x04\\x93\\xe0\\x86\\x03\\x04\\x93\\xe0\\x8c\\x01\\0\\x9fn\\x16Unicorn ([\\w._-]+) Standard\\x9fo\\x11SIRSI Corporation\\x9fp\\x033\\.0\\xab&\\(\\$\\x81\\\"Expected CONSTRUCTED PDU not found$| p/SirsiDynix Unicorn Integrated Library System/ v/$1/\n\nmatch afp m|^\\x01\\x01\\x86\\xa0\\xff\\xff\\xecj\\0\\0\\0\\0\\0\\0\\0\\0| p/Mac OS 9 AFP/ o/Mac OS 9/ cpe:/o:apple:mac_os:9/\n\nmatch consul m|^\\x82\\xa5Error\\xb2Handshake required\\xa3Seq\\0| p/HashiCorp Consul RPC/ cpe:/a:hashicorp:consul/\n\nmatch airmedia-audio m|^AudioPro\\x14\\x10\\x02\\0\\0\\xacD \\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Crestron AirMedia audio data channel/\n\nmatch exportfs m|^(?:p9sk1@[\\w._-]+ )*p9sk1@([\\w._-]+)\\0/bin/exportfs: auth_proxy: auth_proxy rpc write: : invalid argument\\n| p/Plan 9 exportfs/ o/Plan 9/ h/$1/ cpe:/o:belllabs:plan_9/a\n\nmatch goldengate m|^\\0\\+  ERROR\\tMGR did not recognize the command\\.\\0| p/Oracle GoldenGate/ cpe:/a:oracle:goldengate/\n\nmatch honeywell-confd m|^\\0\\0\\0\\0\\0\\0\\+\\xc1$| p/Honeywell confd/\n\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: micro_httpd\\r\\nCache-Control: no-cache\\r\\nDate: .*\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H4>400 Bad Request</H4>\\nNo request found\\.\\n<HR>\\n<ADDRESS><A HREF=\\\"http://www\\.acme\\.com/software/micro_httpd/\\\">micro_httpd</A></ADDRESS>\\n</BODY></HTML>\\n$| p/micro_httpd/ cpe:/a:acme:micro_httpd/\n\n# reported for 3.8.1, 3.9.3\nmatch jabber m|^<stream:error xmlns:stream=\"http://etherx\\.jabber\\.org/streams\"><xml-not-well-formed xmlns=\"urn:ietf:params:xml:ns:xmpp-streams\"/></stream:error>$| p/Ignite Realtime Openfire Jabber server/ v/3.9.3 or earlier/ cpe:/a:igniterealtime:openfire/\n# https://issues.igniterealtime.org/browse/OF-811\nmatch jabber m|^<stream:error xmlns:stream=\"http://etherx\\.jabber\\.org/streams\"><not-well-formed xmlns=\"urn:ietf:params:xml:ns:xmpp-streams\"/></stream:error>$| p/Ignite Realtime Openfire Jabber server/ v/3.10.0 or later/ cpe:/a:igniterealtime:openfire/\nsoftmatch jabber m|^<stream:error |\n\nmatch kdb m|^'char$| p/kdb+/ cpe:/a:kx_systems:kdb%2b/\n\nmatch kerberos m|^\\0\\0\\0Q~O0M\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5\\x05\\x02\\x03...\\xa6\\x03\\x02\\x01=\\xa9\\x15\\x1b\\x13<unspecified realm>\\xaa\\x0b0\\t\\xa0\\x03\\x02\\x01\\0\\xa1\\x020\\0$|s p/Heimdal Kerberos/ i/server time: $1-$2-$3 $4:$5:$6Z/\n\nmatch kapow-robot m|^<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<!DOCTYPE rql PUBLIC \\\"-//Kapow Technologies//DTD RoboSuite Robot Query Language ([\\w._-]+)//EN\\\" \\\"http://www\\.kapowtech\\.com/robosuite/rql/dtd/robot-query-language_[\\w._-]+\\.dtd\\\">\\n<rql>\\n  <server-error>\\n    <message>com\\.kapowtech\\.robosuite\\.api\\.java\\.rql\\.RQLProtocolException: Invalid byte 1 of 1-byte UTF-8 sequence\\.</message>| p/Kapow Robot Query Language/ v/$1/\n\nmatch kvm m|^\\0\\0\\0\\0\\0\\x84\\0\\x10\\x7c\\x9f\\xfb\\0\\0\\0\\0\\0$| p/KVM daemon/\n\nmatch lanrev-agent m|^\\x01\\0\\0\\x03\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01| p/LANrev remote administration/\n\nmatch mxie m|^\\x80\\x00\\x00\\x0c\\x72\\xfe\\x1d\\x13\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x02$| p/Zultys MXIE VoIP presence server/\n\n# tcp/5000: Adaptive Server\n# tcp/5001: Backup Server\n# tcp/5002: Monitor Server\nmatch sybase-adaptive m|^\\0\\x01\\0\\x08\\0\\0\\x00\\0$| p/Sybase Adaptive Server/ o/Windows/ cpe:/a:sybase:adaptive_server/ cpe:/o:microsoft:windows/a\nmatch sybase-backup m|^\\0\\x01\\0\\x08\\0\\0\\x01\\0$| p/Sybase Backup Server/ o/Windows/ cpe:/a:sybase:backup_server/ cpe:/o:microsoft:windows/a\n\nmatch syncsort-cmagent m|^\\x80\\0\\0.\\x0f\\x02\\x02\\x06\\t\\x1d\\x02\\x11m\\x04\\x15\\x17\\x01\\x06c\\x7csww{t\\x1b...On\\x04\\x0f\\x1d\\x19wE\\x0f\\x13\\x15\\x08\\x13g\\x06\\x03\\x15\\x04\\x08\\x0f\\x13e\\x18fm.ug| p/Syncsort Backup Express cmagent/\n\n# port 5566: https://www.synology.com/en-us/knowledgebase/DSM/tutorial/General/What_network_ports_are_used_by_Synology_services\nmatch synobtrfsreplicad m|^\\x80\\0\\0\\(r\\xfe\\x1d\\x13\\0\\0\\0\\x19| p/Synology Snapshot Replication shared folder/ d/storage-misc/\n\nmatch tandem-print m|^\\x01$| p/Sharp printer tandem printing/ d/printer/\n\n# Distributed Relational Database Architecture (DRDA) OS/400 V5R2\n# PRCCNVRM conversational protocol error.\nmatch drda m|^\\0\\x15\\xd0\\x02\\xff\\xff\\0\\x0f\\x12E\\0\\x06\\x11I\\0\\x08\\0\\x05\\x11\\?\\x06$| p/IBM DRDA/\n\n# Microsoft SQLServer 6.5 on WinNT 4.0 SP6a\n# Microsoft SQL Server 6.5 on WinNT 4.0\nmatch ms-sql-s m|^\\x04\\x01\\0C..\\0\\0\\xaa\\0\\0\\0/\\x0f\\xa2\\x01\\x0e.. Login failed\\r\\n\\x14Microsoft SQL Server\\0\\0\\0\\xfd\\0\\xfd\\0\\0\\0\\0\\0\\x02$|s p/Microsoft SQL Server/ v/6.5/ o/Windows/ cpe:/a:microsoft:sql_server:6.5/ cpe:/o:microsoft:windows/a\n\nmatch netman m|^\\0\\0\\0 \\0\\0\\0\\x01\\xd5\\x1f\\x0fK\\0\\0\\0\\0\\x18\\?c\\0\\0\\0\\0\\0\\x01\\0\\0\\x00([\\w._-]+)   $| p/Tivoli Workload Scheduler Netman/ v/$1/\n\nmatch nim m|^\\0$| p/IBM AIX Network Installation Management/ o/AIX/ cpe:/o:ibm:aix/a\n\nmatch ossec-agent m=^\\xdf\\x06\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\x97\\|\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x10\\0\\0\\0$= p/OSSEC Agent/ cpe:/a:ossec:ossec/\n\nmatch riverbed-stats m|^a\\x0f\\x02\\x04fiji\\x02\\x01\\0\\x02\\x01\\0\\x02\\x01\\0$| p/Riverbed Steelhead Mobile caching proxy statistics/ d/proxy server/\n\n#RPC Response, MSG_ACCEPTED, any AUTH type\nmatch rpcbind m|^\\x80\\0\\0.\\x72\\xfe\\x1d\\x13\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0[\\x00-\\x03\\x06]|\n# RPC Response, MSG_DENIED, RPC_MISMATCH\nmatch rpcbind m|^\\x80\\0\\0.\\x72\\xfe\\x1d\\x13\\0\\0\\0\\x01\\0\\0\\0\\x01\\0\\0\\0\\x00\\0\\0\\0[\\x00-\\x02]\\0\\0\\0[\\x00-\\x02]|\n# RPC Response, MSG_DENIED, AUTH_ERROR, any status\nmatch rpcbind m|^\\x80\\0\\0.\\x72\\xfe\\x1d\\x13\\0\\0\\0\\x01\\0\\0\\0\\x01\\0\\0\\0\\x01\\0\\0\\0[\\x00-\\x07]|\n\nmatch rtdscchcch m|^\\x03\\x11\\0\\x02V1\\xec\\xe7\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xdd\\0\\x04\\0\\0| p/SIX Market Data Feed (MDF)/ cpe:/a:six_group:market_data_feed/\n\n# The following matchline commented out as it is actually a match for a TLS\n# negotiation error message (15 03 01 00 02 02 0a) - http://seclists.org/nmap-dev/2010/q2/465\n# match raid-mgt m|^\\x15\\x03\\x01\\0\\x02\\x02\\n$| p/Promise Array Manager RAID management/\nmatch raid-mon m|^\\0 \\0.{5}\\x04\\0\\0\\0\\x02\\\\@|s p/Promise RAID message agent/\nmatch raid-mon m|^\\x02 \\0.{5}\\x04\\0\\0\\0\\x02\\\\@|s p/Promise RAID message agent/\n\nmatch solidworks-remotesolve m|^\\0\\0\\0\\0\\0\\0\\0\\0T\\x01\\x04\\x80| p/SolidWorks Remote Solver for Flow Simulation/ v/2009/\n\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfd\\0Username: data_error\\r\\r\\n\\(rdata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\n\\|= p/Jungo OpenRG telnetd/ i/Actiontec MI424-WR/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfd\\0Username: data_error\\r\\n\\(rdata_error\\r\\ndata_error\\r\\ndata_error\\r\\ndata_error\\r\\ndata_error\\r\\ndata_error\\r\\ndata_error\\r\\ndata_error\\r\\ndata_error\\r\\n\\|= p/Jungo OpenRG telnetd/ i/Linksys RV082 WAP/ d/WAP/ o/Linux 2.4/ cpe:/h:linksys:rv082/a cpe:/o:linux:linux_kernel:2.4/\nmatch telnet m=^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfb\\0\\xff\\xfd\\0Log level 3\\r\\r\\nUsername: data_error\\r\\r\\n\\(rdata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\ndata_error\\r\\r\\n\\|= p/Jungo OpenRG telnetd/ i/Pirelli A125G wireless DSL router/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\n# Version 4.2.4\nmatch tina m|^\\x80\\0\\0\\x0c\\0\\0\\0\\x01\\0\\0\\0\\x11%\\xf5:\\0| p/Atempo Time Navigator/\n\n# Vmware ESX 1.5.x Client Agent for Linux -- WAIT - I think this is erronous and is actually smux\n# HP-UX 11 SNMP Unix Multiplexer (smux)\nmatch smux m|^A\\x01\\x02$| p/HP-UX smux/ i/SNMP Unix Multiplexer/ o/HP-UX/ cpe:/o:hp:hp-ux/a\n# Network Appliance ONTAP 6.3.3 shell\nmatch shell m|^\\x01Permission denied\\.\\n$| p/Netapp ONTAP rshd/ cpe:/a:netapp:data_ontap/\n# HP-UX 11 Kerberized 'rsh' (v5)\nmatch kshell m|^\\x01remshd: connect: Connection refused\\n$| p/HP-UX kerberized rsh/ o/HP-UX/ cpe:/o:hp:hp-ux/a\n# Tumbleweed SecureTransport 4.1.1 Transaction Manager Non-Secure Port on Solaris\nmatch securetransport m|^\\xde\\xad\\xbe\\xef\\x04\\0\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x1fem\\.requestparserparser\\.InvError| p/Tumbleweed SecureTransport Transaction Manager Non-Secure Port/\n# ED2KLink Server v1.12 (Build 1014 or later)\nmatch ed2klink m|^\\x16\\x15\\x16\\x16\\x16\\x12XW\\]$| p/ED2KLink Server/\nmatch sarad m|^NO LOGIN\\0$| p/British National Corpud sarad/\n\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Type: text; charset=plain\\r\\nContent-Length: 16\\r\\n\\r\\ninvalid value 0 $| p/VMware hostd httpd/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request \\(ERR_INVALID_REQ\\)</TITLE></HEAD><BODY><H1>400 Bad Request</H1><BR>ERR_INVALID_REQ<HR><B>Webserver</B>| p/AVM FRITZ!Box WLAN 7170 WAP http config/ d/WAP/\n\nmatch upnp m|^HTTP/0\\.0 400 Bad Request\\r\\nSERVER: Linux/([\\w._+-]+), UPnP/([\\w.]+), Intel SDK for UPnP devices ?/([\\w._~-]+)\\r\\n| p/Intel UPnP reference SDK/ v/$3/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/0\\.0 400 Bad Request\\r\\nSERVER: Linux/([\\w._+-]+), UPnP/([\\w.]+), Portable SDK for UPnP devices ?/([\\w._~-]+)\\r\\n| p/Portable SDK for UPnP/ v/$3/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.1 400 Bad Request\\r\\nSERVER: Linux/([\\w._+-]+), UPnP/([\\w.]+), Portable SDK for UPnP devices ?/([\\w._~-]+)\\r\\n| p/Portable SDK for UPnP/ v/$3/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\n\nmatch virtualgl m|^VGL\\x02\\x01$| p/VirtualGL/\n\n#Fortinet Firewall SSL VPN on port 10433 V5.0,build3608 GA Patch 7\nmatch http m|^<HTML>\\n<HEAD>\\n<META http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\">\\n.*HTTP_NOT_IMPLEMENTED<br>|s p/Fortinet Firewall SSL VPN/\n\n# Alert (Level: Fatal, Description: Unexpected Message|Protocol Version|Handshake Failure)\nmatch ssl m|^\\x15\\x03[\\x00-\\x04]\\0\\x02\\x02[\\nF\\x28]|\n\n# Some HP printer service? Port 9110.\n# match jetdirect m|^\\0\\0\\(r\\xfe\\x1d\\x13\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x01\\x86\\xa0\\0\\x01\\x97\\x7c\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| d/HP printer/\n\n##############################NEXT PROBE##############################\nProbe UDP RPCCheck q|\\x72\\xFE\\x1D\\x13\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x01\\x86\\xA0\\0\\x01\\x97\\x7C\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|\nrarity 1\nports 17,88,111,407,500,517,518,1419,2427,4045,10000,10080,12203,27960,32750-32810,38978\n\nmatch amanda m|^Amanda ([\\d.]+) NAK HANDLE  SEQ 0\\nERROR expected \\\"Amanda\\\", got \\\"r\\xfe\\x1d\\x13\\\"\\n| p/Amanda backup service/ v/$1/ o/Unix/\n\n# http://xbtt.sourceforge.net/udp_tracker_protocol.html (\"scrape output\")\nmatch bittorrent-udp-tracker m|^\\0\\0\\0\\x02....\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$|s p/BitTorrent UDP tracker/\nmatch bittorrent-udp-tracker m|^\\x03\\0\\0\\0\\0\\x01\\x86\\xa0Connection ID missmatch\\.\\0| p/opentracker UDP tracker/ cpe:/a:dirk_engling:opentracker/\n\n# http://bittorrent.org/beps/bep_0029.html\nmatch bittorrent-utp m|^r\\xfe\\x1d\\x13\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\0\\x03....$|s p/uTorrent uTP/ o/Windows/ cpe:/a:utorrent:utorrent/ cpe:/o:microsoft:windows/a\n# Seems to be a bug here, with a time_t timestamp (0x4B......, ca. Dec 2009) instead of a microsecond count.\nmatch bittorrent-utp m|^r\\xfe\\x1d\\x13........\\x7f\\xff\\xff\\xff\\xff\\x02\\x02..\\0\\x01\\0\\x08\\0\\0\\0\\0\\0\\0\\0\\0$|s\n\nmatch brio m|^\\0\\0\\x01\\(\\x16\\x85..$|s p/Brio 8 business intelligence/\n\nmatch dnastar m|^....\\0{7}.,PSH,[\\x21-\\x7e]{55}\\0{800}|s p/Dnastar Lasergene/ cpe:/a:dnastar:lasergene/\n\nmatch slp-srvreg m|^\\x02\\x05\\0\\0\\x12\\0\\0\\0\\0\\0\\0\\x02\\0\\x02en\\0\\x0e$| p/IBM Director SLP Service Registration/ i/slp_srvreg.exe/ cpe:/a:ibm:director/\n\nmatch radius m|^\\x03\\xfe\\0\\x14................$|s p/Juniper Steel-Belted Radius radiusd/\n\nmatch rpcbind m|^\\x72\\xFE\\x1D\\x13\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01|\nmatch rpcbind m|^\\x72\\xFE\\x1D\\x13\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x02|\n# OpenAFS 1.2.10 on Linux 2.4.22\nmatch kerberos-sec m|^\\x04\\n\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x04code = 4: packet version number unknown\\0| p/OpenAFS/ cpe:/a:openafs:openafs/\n# talk-server-0.17 (linux), ports 517-518/udp\nmatch talk m|^\\x01\\xfe\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Talk server/\n# Mandrake Linux 9.2, xinetd 2.3.11 chargen\nmatch chargen m|NOPQRSTUVWXYZ\\[\\\\\\]\\^_${backquote}abcdefghijklm|\nmatch chargen m|^ !\\\"#\\$%&'\\(\\)\\*\\+| p/SunOS chargen/ o/SunOS/ cpe:/o:sun:sunos/a\n\nmatch isakmp m|^r\\xfe\\x1d\\x13\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x01\\x86\\xa0\\x0b\\x10\\x05\\0\\0\\0\\0\\0\\0\\0\\0| p/Openswan ISAKMP/ cpe:/a:openswan:openswan/\nmatch isakmp m|^r\\xfe\\x1d\\x13\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x01\\x86\\xa0\\) % \\0\\0\\0\\0\\0\\0\\0\\$\\0\\0\\0\\x08\\0\\0\\0\\x05| p/StrongSwan ISAKMP/ cpe:/a:strongswan:strongswan/\n\nmatch jetadmin m|^2;http://[\\d.]+:\\d+/;[\\d.]+;\\d+:\\d+;\\w+,[\\d.]+,PLUGIN_LOADED| p/HP Jetadmin/\n\n# http://staff.science.uva.nl/~arnoud/activities/NaoIntro/ConnectLantronix.c\nmatch lantronix-config m|^\\xff$| p/Lantronix DSTni networking chip configuration/\n\n# https://github.com/cobyism/edimax-br-6528n/blob/master/AP/RTL8196C_1200/mp-daemon/UDPserver.c\nmatch mp-automation m|^r\\xfe\\x1d\\x13 ok| p/Realtek MP Automation daemon/ d/WAP/\n\nmatch nameserver m|^help\\r\\n\\r\\n\\xff\\xbf\\xf8\\xb0\\xff7\\0\\x18\\0\\0\\0\\x01\\0\\0\\0\\0| p/Solaris Internet Name Server/ o/Solaris/ cpe:/o:sun:sunos/a\n\nmatch ppp m|^\\x7e\\xff\\x7d\\x23\\xc0!}!#} }8}\\\"}&} } } } }#}\\$\\xc2'}%}&Q\\x93\\xee,}'}\\\"}\\(}\\\"}\\(D~| p/pppd/ v/2.4.5/\n\n# Windows qotd service. Same as the TCP version. It's only in this\n# Probe because this is the first UDP Probe that nmap tries.\nmatch qotd m=^\"(?:My spelling is Wobbly\\.|Man can climb to the highest summits,|In Heaven an angel is nobody in particular\\.|Assassination is the extreme form of censorship\\.|When a stupid man is doing|We have no more right to consume happiness without|We want a few mad people now.|The secret of being miserable is to have leisure to|Here's the rule for bargains:|Oh the nerves, the nerves; the mysteries of this machine called man|A wonderful fact to reflect upon,|It was as true as taxes is\\.)= p/Windows qotd/ i/English/ o/Windows/ cpe:/a:microsoft:qotd::::en/ cpe:/o:microsoft:windows/a\nmatch qotd m=^\"(?:Mi ortograf\\xeda tiembla\\. Es bueno revisarla,|un hombre puede escalar a las m\\xe1s altas cumbre|Algo maravilloso a poner de manifiesto:|Cuando un necio hace algo de lo que se aveg\\xfcenza,|En el cielo, un \\xe1ngel no es nadie en concreto|Traigamos unos cuantos locos ahora\\.|Era tan verdad como los impuestos\\. Y no|Hay libros cortos que, para entenderlos como se merecen,|Quedarse en lo conocido por miedo a lo desconocido,|La prosperidad hace amistades, y la adversidad las|El uso principal de un PC es confirmar la ley de|Quedarse en lo conocido por miedo a lo desconocido,|Cuando las leyes son injustas, no obligan en el fuero|Magia equivale a cualquier avance en la ciencia\\.|Vale mejor consumir vanidades de la vida,)= p/Windows qotd/ i/Spanish/ o/Windows/ cpe:/a:microsoft:qotd::::es/ cpe:/o:microsoft:windows/a\n# Some Italian qotds start with a space instead of a \"\nmatch qotd m=^.(?:Voce dal sen fuggita|Semel in anno licet insanire|Cosa bella e mortal passa e non dura|Quando uno stupido compie qualcosa di cui si vergogna,|Se tu pagare come dici tu,|Fatti non foste a viver come bruti,|Sperare senza far niente e${backquote} come)= p/Windows qotd/ i/Italian/ o/Windows/ cpe:/a:microsoft:qotd::::it/ cpe:/o:microsoft:windows/a\nmatch qotd m=^\"(?:Prazos longos sao f\\xa0ceis de subscrever\\.|Deus, para a felicidade do homem, inventou a f\\x82 e o amor\\.|Ao vencido, \\xa2dio ou compaixao, ao vencedor, as batatas\\.|Quem nao sabe que ao p\\x82 de cada bandeira p\\xa3blica,|Nao te irrites se te pagarem mal um benef\\xa1cio; antes cair|A vida, como a antiga Tebas, tem cem portas\\.)= p/Windows qotd/ i/Portuguese/ cpe:/a:microsoft:qotd::::pt/\n# The German version doesn't start with \"\nmatch qotd m=^(?:Wer wirklich Autorit\\xe4t hat, wird sich nicht scheuen,|Moral ist immer die Zuflucht der Leute,|Beharrlichkeit wird zuweilen mit Eigensinn|Wer den Tag mit Lachen beginnt, hat ihn|Wenn uns keine Ausweg mehr bleibt,|Gesichter sind die Leseb\\xfccher des Lebens|Grosse Ereignisse werfen mitunter ihre Schatten|Dichtung ist verpflichtet, sich nach den|Ohne Freihet geht das Leben|Liebe ist wie ein Verkehrsunfall\\. Man wird angefahren)= p/Windows qotd/ i/German/ cpe:/a:microsoft:qotd::::de/\nmatch qotd m=^\"(?:Clovek ma tri cesty, jak moudre jednat\\. Nejprve premyslenim|Co je vubec hodno toho, aby to bylo vykonano,|Fantazie je dulezitejsi nez vedeni\\.|Potize narustaji, cim vice se clovek blizi|Kdo nezna pristav, do ktereho se chce plavit,|Lidske mysleni ztraci smysl,|Nikdo nevi, co muze vykonat,|Nic neprekvapi lidi vice nez zdravy rozum|Zadny cil neni tak vysoky,)= p/Windows qotd/ i/Czech/ o/Windows/ cpe:/a:microsoft:qotd::::cs/ cpe:/o:microsoft:windows/a\nmatch qotd m=^\"(?:L'art de persuader consiste autant|Le peu que je sais, c'est \\x85 mon ignorance|Certaines \\x83mes vont \\x85 l'absolu comme l'eau|Le m\\x82rite a sa pudeur comme la chastet|Rien de plus futile, de plus faux, de plus|\\xb7 vaincre sans p\\x82ril, on triomphe|Le comble de l'orgueil, c'est de se)= p/Windows qotd/ i/French/ o/Windows/ cpe:/a:microsoft:qotd::::fr/ cpe:/o:microsoft:windows/a\n\nmatch mohaa m|\\xff\\xff\\xff\\xff\\x01disconnect| p/Medal Of Honor Allied Assault game server/\nmatch mohaa-gamespy m|^\\\\final\\\\\\\\queryid\\\\\\d+\\.1| p/Medal Of Honor Allied Assault gamespy query port/\nmatch ericssontimestep m|^.{8}\\0\\0\\0\\0\\0\\0\\0\\0\\x0b\\x10\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\(\\0\\0\\0\\x0c\\0\\0\\0\\0\\x01\\0\\0\\x1e$|s p/Ericsson Timestep Permit VPN/\nmatch rtp m|^501 0 Endpoint is not ready - Unrecognized command verb\\n|\n\nmatch sauerbraten m|^r\\xfe\\x1d\\x13\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x01\\x86\\xa0\\0\\x01\\x97\\x7c\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x05\\x80\\x02\\x01\\0\\0\\x0c\\0\\0([\\w._ -]+)\\0$| p/Sauerbraten game server/ i/server name: $1/\n\nmatch sentinel-lm m|^r\\xfe\\x1d\\x13\\0\\0\\0\\0\\0\\0\\0\\x02,PSH,'A{\\^QOHpe\\]\\)\\]\\\\\\^cRH>%gNQX$| p/SafeNet Sentinel License Manager/\n\nmatch ssdp m|^HTTP/1\\.1 200 OK\\r\\nST:upnp:rootdevice\\r\\nUSN:uuid:11111111-0000-c0a8-0101-efefefef8035::upnp:rootdevice\\r\\nLocation:http://[\\d.]+:\\d+/DeviceDescription\\.xml\\r\\nCache-Control:max-age=480\\r\\nServer:Allegro-Software-RomUpnp/([\\w._-]+) UPnP/([\\w._-]+) IGD/1\\.00\\r\\nExt:\\r\\n\\r\\n|s p/Allegro RomUPnP/ v/$1/ i/UPnP $2/\n\n# Timbuktu 8.7.1\nmatch timbuktu m|^\\0#\\xd1\\x1f$| p/Timbuktu remote desktop/\n\nmatch utorrent-udp m|^\\x72\\xfe\\x1d\\x13\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x03....$|s p/uTorrent UDP listener/ o/Windows/ cpe:/a:utorrent:utorrent/ cpe:/o:microsoft:windows/a\n\n# This protocol is defined by miniserv.pl to let Webmin servers to find each\n# other's HTTP port. The response format is\n# $address:$port:$ssl:$hostname\nmatch webmin m|^0\\.0\\.0\\.0:(\\d+):0:?$| i/http on TCP port $1/\nmatch webmin m|^([^:]*):(\\d+):0:?$| i/http on TCP $1:$2/\nmatch webmin m|^0\\.0\\.0\\.0:(\\d+):0:(.+)$| i/http on TCP port $1 ($2)/\nmatch webmin m|^([^:]*):(\\d+):0:(.+)$| i/http on $1:$2 ($3)/\nmatch webmin m|^0\\.0\\.0\\.0:(\\d+):1:?$| i/https on TCP port $1/\nmatch webmin m|^([^:]*):(\\d+):1:?$| i/https on TCP $1:$2/\nmatch webmin m|^0\\.0\\.0\\.0:(\\d+):1:(.+)$| i/https on TCP port $1 ($2)/\nmatch webmin m|^([^:]*):(\\d+):1:(.+)$| i/https on $1:$2 ($3)/\n\nsoftmatch quake3 m|^\\xff\\xff\\xff\\xffdisconnect$| p/Quake 3 game server/\n\n# Know the device, but not the service. Port 19541.\n# match unknown m|^\\xfer\\0\\0\\0\\0\\0\\x12ERR\\(NOT SUPPORTED\\)$| p/OKI ES3640e GA printer/ d/printer/\n\nmatch apple-sasl m|How was your weekend\\?;[0-9A-F]*\\0| p/Mac OS X Server Password Server/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\n\nmatch nat-pmp m|^\\0\\xfe\\0\\x01\\0\\0..$|s p/natpmp daemon/ d/router/\nmatch nat-pmp m|^\\0\\0\\0\\x01...\\0$|s p/Apple Time Capsule/ d/router/\n\nmatch xdmcp m|^\\0\\x01\\0\\x05..\\0\\0\\0.(.+)\\0.(.+)|s p/XDMCP/ i/willing; status: $2/ o/Unix/ h/$1/\n#DTLS 1.0/1.2 alert (there was no DTLS 1.1)\nsoftmatch dtls m|^\\x15\\xfe[\\xfd\\xff]\\0\\0\\0\\0\\0\\0\\0\\0..\\x02.\\0\\0\\0\\0\\0|\n\n##############################NEXT PROBE##############################\nProbe UDP DNSVersionBindReq q|\\0\\x06\\x01\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\x07version\\x04bind\\0\\0\\x10\\0\\x03|\nrarity 1\nports 53,1967,2967\n\n# Matches here have been grouped by product and roughly ordered based on prevalence\n# on the Internet\n# Note when generating match lines - TCP responses have two bytes at the beginning\n# of the response that the UDP doesn't, otherwise they are the same. Account for this\n# in the regex so that a matchline will work for both.\n\n# ISC BIND - RedHat / Fedora\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}(\\d[-\\w.+]*?)-RedHat-[-\\w._+]+.fc(\\d+)|s p/ISC BIND/ v/$1/ i/Fedora Core $2/ o/Linux/ cpe:/a:isc:bind:$1/ cpe:/o:fedoraproject:fedora_core:$2/\n# 9.9.3-rpz2+rl.13208.13-P2-RedHat-9.9.3-4.P2.el6\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}(\\d[-\\w.+]*?)-RedHat-[-\\w._+]+.el(\\d+)|s p/ISC BIND/ v/$1/ i/RedHat Enterprise Linux $2/ o/Linux/ cpe:/a:isc:bind:$1/ cpe:/o:redhat:enterprise_linux:$2/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}(\\d[-\\w.+]*?)-RedHat-|s p/ISC BIND/ v/$1/ i/RedHat Linux/ o/Linux/ cpe:/a:isc:bind:$1/ cpe:/o:linux:linux_kernel/a\n\n\n# ISC BIND - Ubuntu\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}(\\d[-\\w.+]*?)-[Uu]buntu|s p/ISC BIND/ v/$1/ i/Ubuntu Linux/ o/Linux/ cpe:/a:isc:bind:$1/ cpe:/o:linux:linux_kernel/a\n\n# ISC BIND - Debian\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}(\\d[-\\w.+~]*?)-9\\+deb8u[-\\w._+~]*?[Dd]ebian|s p/ISC BIND/ v/$1/ i/Debian Linux 8.0 (Jessie)/ o/Linux/ cpe:/a:isc:bind:$1/ cpe:/o:linux:linux_kernel/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}(\\d[-\\w.+~]*?)-9wheezy\\w+-[Dd]ebian|s p/ISC BIND/ v/$1/ i/Debian Linux 7.0 (Wheezy)/ o/Linux/ cpe:/a:isc:bind:$1/ cpe:/o:linux:linux_kernel/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}(\\d[-\\w.+~]*?)-[Dd]ebian|s p/ISC BIND/ v/$1/ i/Debian Linux/ o/Linux/ cpe:/a:isc:bind:$1/ cpe:/o:linux:linux_kernel/a\n\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}(?:BIND )?(\\d[-\\w.+~]*?)-9\\+deb8u[-\\w._+~]*?Raspbian|s p/ISC BIND/ v/$1/ i/Raspbian Linux 8.0 (Jessie based)/ o/Linux/ cpe:/a:isc:bind:$1/ cpe:/o:linux:linux_kernel/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}(?:BIND )?(\\d[-\\w.+~]*?)-Raspbian|s p/ISC BIND/ v/$1/ i/Raspbian Linux/ o/Linux/ cpe:/a:isc:bind:$1/ cpe:/o:linux:linux_kernel/a\n\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}([89][.\\d]+-APPLE(?:-[SPW]\\d+)?)|s p/ISC BIND/ v/$1/ i/Mac OS X/ o/Mac OS X/ cpe:/a:isc:bind/ cpe:/o:apple:mac_os_x/a\n\n# ISC BIND - Release numbers w/o OS info - may be dragons here\n# rpz = response policy zone patch     rl = rate liming patch\n# 9.8.4-rpz2+rl005.12-P1   9.6-ESV-R11-P2  9.5.0b2  8.3.7-REL 9.4.2-P2-W2\nmatch domain m=\\x07version\\x04bind\\0\\0\\x10\\0\\x03(?:\\xc0\\x0c|\\x07VERSION\\x04BIND\\0)\\0\\x10\\0\\x03.{7}(?:BIND )?([89][.\\d]+(?:[ab]\\d+)?(?:rc\\d)?(?:-REL)?(?:-rpz[\\d.]+)?(?:[-+]rl[\\d.]+)?(?:-ESV(?:-R\\d+)?)?(?:-[SPW][W\\d.-]+)?(?:-NOESW)?)(?:\\0|\\xc0|$)=s p/ISC BIND/ v/$1/ cpe:/a:isc:bind:$1/\n\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}Served by Bind - www\\.isc\\.org/software/bind|s p/ISC BIND/ cpe:/a:isc:bind/\n# Likely ISC bind w/o version string but w/ Responsible authority mailbox set to \"hostmaster.version.bind\"\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x06\\0\\x03.{6}\\xc0\\x0c\\nhostmaster\\xc0\\x0c|s p/ISC BIND/ cpe:/a:isc:bind/\n\n# dnsmasq\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}dnsmasq-([-\\w. +]+)$|s p/dnsmasq/ v/$1/ cpe:/a:thekelleys:dnsmasq:$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}dnsmasq-ubnt/([\\w.-]+)|s p/dnsmasq/ v/$1/ i/Ubiquiti build/ d/WAP/ cpe:/a:thekelleys:dnsmasq:$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03\\0\\0\\0\\0\\0\\x08\\x07dnsmasq| p/dnsmasq/ cpe:/a:thekelleys:dnsmasq/\n\n# Microsoft DNS - assumes hosts running DNS service are the server version of a given kernel\n# Microsoft has 3 configuration states that govern how the version is reported:\n# 0 = Off, no version response, 1 = Full version (6.3.9600 and often build), 2 = minimal (6.3)\n# Ref:  dnscmd /config /EnableVersionQuery <value> - https://msdn.microsoft.com/en-us/library/cc422472.aspx\n\n# match full response\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x01.{7}Microsoft DNS (10\\.0\\..+)|s p/Microsoft DNS/ v/$1/ i/Windows Server 2016/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2016/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x01.{7}Microsoft DNS (6\\.3\\.9600.+)|s p/Microsoft DNS/ v/$1/ i/Windows Server 2012 R2/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2012:r2/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x01.{7}Microsoft DNS (6\\.2\\.9200.+)|s p/Microsoft DNS/ v/$1/ i/Windows Server 2012/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2012/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x01.{7}Microsoft DNS (6\\.1\\.7601.+)|s p/Microsoft DNS/ v/$1/ i/Windows Server 2008 R2 SP1/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2008:r2:sp1/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x01.{7}Microsoft DNS (6\\.1\\.7600.+)|s p/Microsoft DNS/ v/$1/ i/Windows Server 2008 R2/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2008:r2/a\n# Windows 2008 and earlier CAN respond with answer class \\x00\\x03  = 3 (CHAOS), instead of \\x00\\x01 = 1 (Internet) like more modern versions do\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0[\\x01\\x03].{7}Microsoft DNS (6\\.0\\.6002.+)|s p/Microsoft DNS/ v/$1/ i/Windows Server 2008 SP2/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2008::sp2/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0[\\x01\\x03].{7}Microsoft DNS (6\\.0\\.6001.+)|s p/Microsoft DNS/ v/$1/ i/Windows Server 2008 SP1/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2008::sp1/a\n\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0[\\x01\\x03].{7}Microsoft DNS (5\\.2\\.3790.+)|s p/Microsoft DNS/ v/$1/ i/Windows Server 2003 SP2/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2003::sp2/a\n\n# Match Windows minimal response - dnscmd /config /EnableVersionQuery 2\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x01.{7}Microsoft DNS (10\\.0$)|s p/Microsoft DNS/ v/$1/ i/Windows Server 2016/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2016/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x01.{7}Microsoft DNS (6\\.3)$|s p/Microsoft DNS/ v/$1/ i/Windows Server 2012 R2/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2012:r2/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x01.{7}Microsoft DNS (6\\.2)$|s p/Microsoft DNS/ v/$1/ i/Windows Server 2012/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2012/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x01.{7}Microsoft DNS (6\\.1)$|s p/Microsoft DNS/ v/$1/ i/Windows Server 2008 R2/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2008:r2/a\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0[\\x01\\x03].{7}Microsoft DNS (6\\.0)$|s p/Microsoft DNS/ v/$1/ i/Windows Server 2008/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows_server_2008/a\n# Generic Windows DNS match\nsoftmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0[\\x01\\x03].{7}Microsoft DNS (.+)|s p/Microsoft DNS/ v/$1/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows/a\n\n\n# PowerDNS\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0[\\x01\\x03]\\xc0\\x0c\\0\\x10\\0[\\x01\\x03].{7}PowerDNS.Authoritative.Server.(\\d[\\w.-]+)| p/PowerDNS Authoritative Server/ v/$1/ cpe:/a:powerdns:authoritative:$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0[\\x01\\x03]\\xc0\\x0c\\0\\x10\\0[\\x01\\x03].{7}PowerDNS Recursor (\\d[\\w.-]+)|s p/PowerDNS Recursor/ v/$1/ cpe:/a:powerdns:recursor:$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0[\\x01\\x03]\\xc0\\x0c\\0\\x10\\0[\\x01\\x03].{7}PowerDNS Recursor$|s p/PowerDNS Recursor/ cpe:/a:powerdns:recursor/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0[\\x01\\x03]\\xc0\\x0c\\0\\x10\\0[\\x01\\x03].{7}Served by PowerDNS - https?://www\\.powerdns\\.com/?|s p/PowerDNS/ v/3.3 or later/ cpe:/a:powerdns:powerdns/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0[\\x01\\x03]\\xc0\\x0c\\0\\x10\\0[\\x01\\x03].{7}Served by POWERDNS (\\d[-.\\w]+)|s p/PowerDNS/ v/$1/ cpe:/a:powerdns:powerdns:$1/\n\n# Nonimum\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}Nominum Vantio (\\w+) ([\\d\\.]+)$|s p/Nominum Vantio $1/ v/$2/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}Nominum Vantio ([\\d\\.]+)|s p/Nominum Vantio/ v/$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}Nominum ANS(?:Premier)? ([\\d\\.]+)|s p/Nominum Vantio AuthServ/ v/$1/\n\n# NLNet Labs products - unbound / nsd\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}unbound ([\\w.-]+)$| p/Unbound/ v/$1/ cpe:/a:nlnetlabs:unbound:$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}unbound$|i p/Unbound/ cpe:/a:nlnetlabs:unbound/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}NSD ([-\\w.]+)|s p/NLnet Labs NSD/ v/$1/ cpe:/a:nlnetlabs:nsd:$1/\n\n# UltraDNS\n# Unable to locate cpe info for Neustar UltraDNS\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}UltraDNS Resolver|s p/UltraDNS Resolver/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\x07VERSION\\x04BIND\\0\\0\\x10\\0\\x03.{7}UltraDNS Resolver|s p/UltraDNS Resolver/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}UltraDNS TLD Platform|s p/UltraDNS Resolver/\n\n# Misc\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}ZyWALL DNS|s p/Zyxel ZyWALL dnsd/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}DNSServer\\xc0\\x0c|s p/Synology DNS Server/ cpe:/a:synology:dns/ cpe:/h:synology/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}Array SmartDNS\\xc0|s p/Array SmartDNS/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}DraytekDNS-v([\\d\\.]+)|s p/Draytek DNS/ v/$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}ALU DNS ([\\d\\.]+) Build (\\d+)|s p/Draytek DNS/ v/$1 build $2/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}gdnsd$|s p/Brandon Black gdnsd/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}Knot DNS ([\\d.]+(?:-dev)?)|s p/cz.nic Knot DNS/ v/$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}rbldnsd (\\d[\\w.\\/-]+) |s p/Michael Tokarev rbldnsd/ v/$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}djbdns[\\s-](\\d.\\d+)|s p/D J Bernstein djbdns/ v/$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}djbdns|i p/D J Bernstein djbdns/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}Atlas Anchor ([\\d\\.]+)|s p/RIPE Atlas Anchor/ v/$1/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}Incognito DNS Commander ([\\d.]+) \\((built \\w{3} \\d+ \\d{4})\\)|s p/Incognito DNS Commander/ v/$1/ i/$2/\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}Incognito DNS Service ([\\d.]+) \\((built \\w{3} \\d+ \\d{4})\\)|s p/Incognito DNS Service/ v/$1/ i/$2/\n\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}Hi:[\\w\\.=: ]+\\d{4}$| p/OzymanDNS DNS tunnel/\n\n# *Probably* Check Point's Meta IP - ~8 seen during Internet survey\nmatch domain m|n\\x04bind\\0\\0\\x10\\0\\x03\\x07VERSION\\x04BIND\\0\\0\\x10\\0\\x03.{7}Meta IP DNS - BIND V([\\d.]+)-REL \\(Build (\\d+)\\)| p/Check Point Meta IP ISC BIND/ v/$1 build $2/ cpe:/a:isc:bind:$1/\n\n\n# Not seen in Project Sonar version.bind survey 2017.08.18 and not tested\n# during 2017.08.19 DNS version.bind fingerprint/matchline review\nmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\x07VERSION\\x04BIND\\0\\0\\x10\\0\\x03.{7}Peticion no permitida/Query not allowed| p/ZyXEL Prestige 643 dns cache/ d/switch/\nmatch domain m|^\\0\\x06\\x81\\x80\\0\\x01\\0\\x01\\0\\0\\0\\0\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x01\\0\\x01\\0\\0\\0\\x05\\0\\x04\\xa3\\xc0\\x08\\x06$| p/ArubaOS 3.3 named/ o/ArubaOS/ cpe:/o:arubanetworks:arubaos:3.3/\n\n# These may be too generic, but unique so far unless corrected.\nmatch domain m|^(?:..)?\\0\\x06\\x81\\x85\\0\\x01\\0\\0\\0\\0\\0\\0\\x07version\\x04bind\\0\\0\\x10\\0\\x03| p/Unbound/ cpe:/a:nlnetlabs:unbound/\nmatch domain m|^(?:..)?\\0\\x06\\x81\\x04\\0\\x01\\0\\0\\0\\0\\0\\0\\x07version\\x04bind\\0\\0\\x10\\0\\x03| p/Simple DNS Plus/ o/Windows/ cpe:/a:jh_software:simple_dns_plus/ cpe:/o:microsoft:windows/a\nmatch domain m|^(?:..)?\\0\\x06\\x81\\x84\\0\\x01\\0\\0\\0\\0\\0\\0\\x07version\\x04bind\\0\\0\\x10\\0\\x03| p/Cloudflare public DNS/\nmatch domain m|^(?:..)?\\0\\x06\\x81\\x84\\0\\x01\\0\\0\\0\\0\\0\\x01\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\0\\0\\)\\x06\\0\\0\\0\\0\\0\\0\\0| p/dnscrypt-proxy/ cpe:/a:dnscrypt:dnscrypt-proxy/\nmatch domain m|^(?:..)?\\0\\x06\\x85\\x02\\0\\x01\\0\\0\\0\\0\\0\\0\\x07version\\x04bind\\0\\0\\x10\\0\\x03| p/PowerDNS/ cpe:/a:powerdns:powerdns/\nmatch domain m|^(?:..)?\\0\\x06\\x81\\x05\\0\\x01\\0\\0\\0\\0\\0\\0\\x07version\\x04bind\\0\\0\\x10\\0\\x03| p/NLnet Labs NSD/ cpe:/a:nlnetlabs:nsd/\nmatch domain m|^(?:..)?\\0\\x06\\x81\\x83\\0\\x01\\0\\0\\0\\0\\0\\0\\x07version\\x04bind\\0\\0\\x10\\0\\x03| p/dnsmasq/ cpe:/a:thekelleys:dnsmasq/\n\n# Softmatch section\nsoftmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\xc0\\x0c\\0\\x10\\0\\x03.{7}([^\\0\\xc0\\x0c]+)|s i/unknown banner: $1/\nsoftmatch domain m|\\x07version\\x04bind\\0\\0\\x10\\0\\x03\\x07VERSION\\x04BIND\\0\\0\\x10\\0\\x03.{7}([^\\0\\xc0\\x0c]+)|s i/unknown banner: $1/\n\n# the \\x0_, \\x8_, \\x9_ below accounts for recursion / authenticated data flags\nsoftmatch domain m|^(?:..)?\\0\\x06[\\x80-\\x90][\\x01\\x81\\x91]\\0\\0\\0\\0\\0\\0\\0\\0$| i/generic dns response: FORMERR/\nsoftmatch domain m|^(?:..)?\\0\\x06[\\x80-\\x90][\\x02\\x82\\x92]\\0\\0\\0\\0\\0\\0\\0\\0$| i/generic dns response: SERVFAIL/\nsoftmatch domain m|^(?:..)?\\0\\x06[\\x80-\\x90][\\x04\\x84\\x94]\\0\\0\\0\\0\\0\\0\\0\\0$| i/generic dns response: NOTIMP/\nsoftmatch domain m|^(?:..)?\\0\\x06[\\x80-\\x90][\\x05\\x85\\x95]\\0\\0\\0\\0\\0\\0\\0\\0$| i/generic dns response: REFUSED/\n# These echo the question back:\nsoftmatch domain m|^(?:..)?\\0\\x06[\\x80-\\x90][\\x01\\x81\\x91]\\0\\x01\\0\\0\\0\\0\\0\\0| i/generic dns response: FORMERR/\nsoftmatch domain m|^(?:..)?\\0\\x06[\\x80-\\x90][\\x02\\x82\\x92]\\0\\x01\\0\\0\\0\\0\\0\\0| i/generic dns response: SERVFAIL/\nsoftmatch domain m|^(?:..)?\\0\\x06[\\x80-\\x90][\\x04\\x84\\x94]\\0\\x01\\0\\0\\0\\0\\0\\0| i/generic dns response: NOTIMP/\nsoftmatch domain m|^(?:..)?\\0\\x06[\\x80-\\x90][\\x05\\x85\\x95]\\0\\x01\\0\\0\\0\\0\\0\\0| i/generic dns response: REFUSED/\n# End of domain matchlines\n\n# http://packetstormsecurity.com/files/91243/D-Link-DAP-1160-Unauthenticated-Remote-Configuration.html\nmatch dcc m|^(?:..)?\\0\\x06\\xf5\\xff\\0\\0\\x01\\0| p/D-Link Click 'n Connect/ d/broadband router/\n\n\n# INVALID-MAJOR-VERSION notification\nsoftmatch isakmp m|^\\0\\x06\\x01\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\x07ver\\x0b\\x10\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\(\\0\\0\\0\\x0c\\0\\0\\0\\x01\\x01\\0\\0\\x05|\n\nmatch kerberos-sec m=^~[\\x60-\\x62]\\x30[\\x5e-\\x60]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01\\x3c\\xa9\\x04\\x1b\\x02NM\\xaa\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM\\xab\\x16\\x1b\\x14No client in request=s p/MIT Kerberos/ i/server time: $1-$2-$3 $4:$5:$6Z/ cpe:/a:mit:kerberos/\n\n# Symantec Antivirus (rtvscan.exe)\nmatch symantec-av m|^\\0\\x06\\x01\\x01\\0\\x10..........$|s p/Symantec rtvscan antivirus/ cpe:/a:symantec:antivirus/\n\nmatch tunnel-test m|^\\0\\x06\\x01\\0\\0\\x02\\0\\0\\0\\0\\0\\0$| p/Check Point tunnel_test/\n\nmatch unreal m|^.[\\x40\\xc0].[\\x20\\x23\\x32\\x38].[\\x40\\xc0].[\\x20\\x23\\x32\\x38]|s p/Unreal Tournament 2004 game server/\n\nmatch cisco-sla-responder m|^..\\0\\x08\\0\\x03[\\0\\r][\\0\\n]$|s p/Cisco SLA Responder/ d/router/ o/IOS/ cpe:/o:cisco:ios/a\n\nmatch statd m|^r\\xfe\\x1d\\x13\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01$| p/NFS statd/\n\n#DTLS 1.0/1.2 alert (there was no DTLS 1.1)\nsoftmatch dtls m|^\\x15\\xfe[\\xfd\\xff]\\0\\0\\0\\0\\0\\0\\0\\0..\\x02.\\0\\0\\0\\0\\0|\n\nmatch chargen m|^ !\\\"#\\$%&'\\(\\)\\*\\+,-\\./0123456789:;<=>\\?@ABCDEFGHIJKLMNOPQRSTUVWXYZ\\[\\\\\\]\\^_${backquote}abcdefg\\r\\n!\\\"#\\$%&'\\(\\)\\*\\+,-\\./0123456789| p/Windows Vista chargen/ o/Windows Vista/ cpe:/o:microsoft:windows_vista/a\n\n\n##############################NEXT PROBE##############################\nProbe TCP DNSVersionBindReqTCP q|\\0\\x1E\\0\\x06\\x01\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\x07version\\x04bind\\0\\0\\x10\\0\\x03|\nrarity 3\nports 53,135,512-514,543,544,628,1029,13783,2068,2105,2967,5000,5323,5520,5530,5555,5556,6543,7000,7008\nsslports 853\nfallback DNSVersionBindReq\n\n# All legitimate 'domain' matchlines for this probe should be placed in the the\n# UDP DNSVersionBindReq probe section.\n\n# https://github.com/haiwen/ccnet\nmatch ccnet m|^\\x01\\x01\\0\\(\\0\\0\\0\\0([0-9a-f]{40})| i/peer ID $1/\n\n# https://github.com/clementine-player/Android-Remote/wiki/Developer-Documentation\nmatch clementine-remote m|^\\0\\0\\0\\x04\\x08\\x15\\x10-| p/Clementine Music Player remote control/ cpe:/a:clementine:clementine/\n\nmatch exec m|^\\x01Login incorrect\\.\\n$|\n# HP-UX B.11.00 A\nmatch exec m|^\\x01rexecd: Login incorrect.?\\n$| p/HP-UX rexecd/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch exec m|^\\x01rexecd: Couldn't look up address for your host\\n$| p/HP-UX rexecd/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch exec m|^\\x01rexecd: [-\\d]+ The login is not correct\\.\\n| p/AIX rexecd/ o/AIX/ cpe:/o:ibm:aix/a\nmatch exec m|^\\x01rexecd: [-\\d]+ Connexion incorrecte\\.\\n| p/AIX rexecd/ i/French/ o/AIX/ cpe:/o:ibm:aix/a\nmatch exec m|^\\x01INTERnet ACP AUXS failure  Status = %LOGIN-F-NOSUCHUSER\\r\\n\\0$| p/OpenVMS execd/ o/OpenVMS/ cpe:/o:hp:openvms/a\n\n\n# Last 8 bytes are little-endian NTFS timestamp. Date range here covers 1986-04-30 to 2056-10-16\nmatch domaintime m|^\\0\\x1e\\0\\x06\\x01\\0\\0\\x01......[\\xb0-\\xff]\\x01$| p/Greyware Domain Time II/\n\nmatch goldengate m|^\\0&  ERROR\\tMGR Did Not Recognize Command\\0| p/Oracle GoldenGate/ cpe:/a:oracle:goldengate/\n\nmatch http m|^HTTP/1\\.1 506 \\r\\nContent-Type: text/html\\r\\nServer: JavaWeb/0\\r\\n\\r\\n<html><body><h1>506 - IO Error</h1></body></html>$| p/AirDroid httpd/ d/phone/ o/Android/ cpe:/a:airdroid:airdroid/ cpe:/o:google:android/ cpe:/o:linux:linux_kernel/\n\nmatch iscsi m|^\\0\\x1e\\0\\x02\\0\\0\\0\\x01\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Synology DSM Snapshot Replication iSCSI LUN/\n\nmatch ixia m=^\\0.\\x05\\x02....\\0\\x01\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0.\\$Id: //ral_depot/products/IxChariot([\\w._-]+)/(?:ENDPOINT|endpoint)/CODE/client\\.c#\\d+ \\$\\0\\0\\0..\\0\\x02\\0\\x0ce1_thread\\0\\0\\x18main_process_incoming\\0$= p/IxChariot/ v/$1/ i/Ixia XR100 performance monitor/\n\n# Digital UNIX V4.0F login\nmatch login m|^\\x01Permission denied: Error 0$| p/Digital UNIX login/ o/Digital UNIX/ cpe:/o:dec:digital_unix/a\nmatch login m|^\\0\\^A\\^@\\^@\\^@\\^@\\^@\\^@\\^Gversion\\^Dbind\\^@\\^@\\^P\\^@\\n\\r\\n\\r\\n\\r\\n\\r#################################################\\n\\r###                                           ###\\n\\r###  LSI Logic Series 4 SCSI RAID Controller  ###\\n\\r###      Copyright \\d+, LSI Logic Inc\\.       ###\\n\\r###                                           ###\\n\\r###      Series 4 Disk Array Controller       ###\\n\\r###        Serial number:  (\\w+)         ###\\n\\r###        Network name:  ([-\\w_.]+) *###| p/LSI Logic Series SCSI RAID rlogin/ i/Serial $1; Network name $2/\nmatch login m|^\\0\\^A\\^@\\^@\\^@\\^@\\^@\\^@\\^Gversion\\^Dbind\\^@\\^@\\^P\\^@\\n\\r\\n\\r\\n\\r\\n\\r#####################################################################\\n\\r###                                                               ###\\n\\r###               Engenio Series 4, RAID Controller               ###\\n\\r###  Copyright 2003-2004, Engenio Information Technologies, Inc\\.  ###\\n\\r###                                                               ###\\n\\r###                Series 4 Disk Array Controller                 ###\\n\\r###                  Serial number:  (\\w+)                   ###\\n\\r###                     Network name:  ([\\w._-]+) *###\\n\\r| p/IBM DS4400 NAS device rlogin/ i/Serial $1; Network name $2/ d/storage-misc/ cpe:/h:ibm:ds4400/a\nmatch login m|^\\0\\r\\nSorry, shell is locked\\.\\r\\n$| p/FabricOS switch logind/ d/switch/ cpe:/o:brocade:fabric_os/\nmatch login m|^\\0\\r\\n\\nLantronix MSS100 Version V([\\d.]+)/\\d+\\(\\d+\\)\\n\\r\\nType HELP at the 'Local_\\d+> ' prompt for assistance\\.\\n\\r\\n\\r\\n\\nUsername> | p/Lantronix MSS100 serial interface logind/ v/$1/ d/specialized/\nmatch login m|^\\[Thread \\d+\\(INITIAL\\)\\] at 0x\\w+: Segmentation fault \\(Stack bottom 0x0\\)\\n| p|Aficio/NRG/Ricoh printer logind| d/printer/\nmatch login m|^\\x01Winsock RSHD/NT: Protocol negotiation error\\.\\n\\0$| p/Winsock RSHD/ o/Windows/ cpe:/o:microsoft:windows/a\n# We've seen this on Cisco routers and also NetApp filers\nmatch login m|^\\x01Permission denied\\.\\n$| p|Cisco/NetApp logind|\nmatch login m=^\\x01Permission denied ?: Error (?:35|0|1)\\r?\\n?$= p/Tru64 Unix logind/ o/Tru64 UNIX/ cpe:/o:compaq:tru64/a\nmatch login m|^\\x01permission denied\\.\\n| p/Solaris logind/ o/Solaris/ cpe:/o:sun:sunos/a\nmatch login m|^\\x01UX:in\\.rlogind: Permission denied\\.\\r\\n| p/Siemens HiPath logind/\nmatch login m|^\\x01Permission denied : Error \\d+\\r\\n|\nmatch login m|^\\x01rlogind: Acc\\xe8s refus\\xe9\\.\\r\\n| p/AIX rlogind/ i/French/ o/AIX/ cpe:/o:ibm:aix/a\nmatch login m|^\\0\\^A\\^@\\^@\\^@\\^@\\^@\\^@\\^Gversion\\^Dbind\\^@\\^@\\^P\\^@\\n\\r\\n\\r\\n\\r\\n\\r#+\\n\\r### +###\\n\\r###  LSI Logic Series 4 SCSI RAID Controller  ###.*Serial number:  1T84210104 |s p/LSI Series 4 RAID controller logind/ d/storage-misc/\nmatch login m|^\\0\\r\\nEL-(\\d+) RealPort Server - US Patent No\\. 6,047,319\\r\\n| p/Digi EtherLite $1 RealPort logind/ d/terminal server/\nmatch login m|^\\0\\n\\rSelect access level \\(read, write, administer\\): \\w+ _vxTaskEntry| p/3Com LANplex switch logind/ d/switch/\nmatch login m|^\\0\\^A\\^@\\^@\\^@\\^@\\^@\\^@\\^Gversion\\^Dbind\\^@\\^@\\^P\\^@\\r\\n-> shell restarted\\.\\r\\n\\r\\n-> | p/ShoreTel VoIP phone logind/ d/VoIP phone/\nmatch login m|^\\x01TCPIP RLOGIN Connection refused\\0\\0$| p/OpenVMS logind/ o/OpenVMS/ cpe:/o:hp:openvms/a\nmatch login m|^\\0\\r\\n-> trcStack aborted: error in top frame\\r\\ntShell restarted\\.\\r\\n\\r\\n-> !1 echo_recv: -1\\.\\r\\n| p/ACT VoIP wifi phone logind/ d/VoIP phone/\nmatch login m|^\\0\\r\\nEL-32 EtherLite module\\r\\n\\r\\n| p/Digi EtherLite32 logind/\nmatch login m|^\\x01in\\.rlogind: Permission denied\\.\\r\\n| p/Microsoft Windows Services for Unix logind/ o/Windows/ cpe:/a:microsoft:windows_services_for_unix/ cpe:/o:microsoft:windows/a\nmatch login m|^\\x01rlogind: Host name for your address \\([\\d.]+\\) unknown\\.\\r\\n| p|A/UX logind| o|A/UX| cpe:/o:apple:a_ux/\n# OpenBSD 2.3\n# Solaris 9\nmatch login m|^\\x01rlogind: Permission denied\\.\\r\\n$|\nmatch login m|^\\0\\r\\nlogin: | p/Airspan MiMAX WiMAX WAP logind/ d/WAP/\n\n# HP-UX 11 Kerberized rlogin\nmatch klogin m|^\\x01rlogind: Login Incorrect\\.\\r\\n$| p/HP-UX kerberized rlogin/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch klogin m|^\\x01rlogind: Kerberos Authentication not enabled\\.\\.\\r\\n| p/HP-UX kerberized rlogin/ i/disabled/ o/HP-UX/ cpe:/o:hp:hp-ux/a\n# Solaris Kerberos authenticated login\nmatch klogin m|^\\x01rlogind: Kerberos authentication failed\\.\\r\\n| p/Solaris kerberized rlogin/ o/Solaris/ cpe:/o:sun:sunos/a\nmatch klogin m|^\\x01rlogind: Kerberos authentication failed, exiting\\.\\r\\n| p/Solaris kerberized rlogin/ o/Solaris/ cpe:/o:sun:sunos/a\nmatch klogin m|^\\x01klogind: Kerberos authentication failed\\.\\r\\n| p/Kerberized rlogin/\nmatch klogin m|^\\x01eklogin: Kerberos authentication failed\\.\\r\\n| p/Encrypted Kerberized rlogin/\nmatch klogin m|^\\x01eklogind: Kerberos authentication failed\\.\\r\\n| p/Encrypted Kerberized rlogin/\n\n# Solaris Kerberos authenticated remote shell\nmatch kshell m|^\\x01[kr]shd: Authentication failed: Bad sendauth version was sent\\n| p/Solaris kerberised rsh/ o/Solaris/ cpe:/o:sun:sunos/a\nmatch kshell m|^\\x01krshd: Kerberos Authentication Failed\\.\\r\\n| p/AIX kerberised rsh/ o/AIX/ cpe:/o:ibm:aix/a\nmatch kshell m|^\\x01krshd: Echec de l'authentification Kerberos\\.\\r\\n\\0| p/AIX kerberised rsh/ i/French/ o/AIX/ cpe:/o:ibm:aix/a\nmatch kshell m|^\\x01kshd: Authentication failed: | p/Kerberized rsh/ o/Unix/\n\nmatch ssc-agent m|^\\0\\x1e\\0\\x06\\0\\t\\0\\0$| p/Novell NetWare ssc-agent/ o/NetWare/ cpe:/o:novell:netware/a\n# http://www.apcupsd.com/ - apcupsd 3.8.5-1.3 on Linux 2.4.X\nmatch apcupsd m|^\\0\\x11Invalid command\\n\\0\\0\\0$| p/apcupsd/\n\n# Avocent AutoView 1000R KVM or HP 3x1x16 KVM or Dell IP KVM model 2161DS Console Switch\nmatch kvm m|^BEEF\\x83\\0\\0| p/KVM daemon/\n\nmatch klogin m|^\\x01krlogind: Kerberos Authentication Failed\\.\\r\\n\\0| p/AIX kerberized rlogin/ o/AIX/ cpe:/o:ibm:aix/a\nmatch klogin m|^\\x01krlogind: Echec de l'authentification Kerberos\\.\\r\\n\\0| p/AIX kerberized rlogin/ i/French/ o/AIX/ cpe:/o:ibm:aix/a\nmatch klogin m|^\\0\\0's Password: $| p/AIX kerberized rlogin/ o/AIX/ cpe:/o:ibm:aix/a\nmatch kshell m|^\\x01rshd ?: [-\\d]+ The host name for your address is not known\\.\\n| p/AIX (kerberized?) rshd/ o/AIX/ cpe:/o:ibm:aix/a\nmatch kshell m|^\\x01rshd ?: [-\\d]+ Le nom d'h\\xf4te correspondant \\xe0 l'adresse est inconnu\\.\\n| p/AIX (kerberized?) rshd/ i/French/ o/AIX/ cpe:/o:ibm:aix/a\nmatch kshell m|^\\x01rshd: [-\\d]+ The remote user login is not correct\\.\\n| p/AIX (kerberized?) rshd/ o/AIX/ cpe:/o:ibm:aix/a\n\nmatch minecraft m|^\\xff\\0\\x0eProtocol error| p/Minecraft game server/\n\nmatch modbus m|^\\0\\x1e\\0\\x06\\0\\x03\\0\\x01\\0| p/Modbus TCP/\nmatch modbus m|^\\0\\x1e\\0\\x06\\0\\x03\\0\\x80\\x01| p/Modbus TCP/\n\nmatch pafserver m|^\\0&\\xa2\\xf4\\x04\\x97\\xbcNp\\xe4\\xc1\\x7cI\\xff\\xf9\\xe8\\x0c\\xd9\\xac\\xf1_u\\xa0\\x1d\\x82X\\0\\xde\\xd5\\xdd\\x19\\xce\\xc2\\xe0\\x92yD\\xde|\n\nmatch utrmcd m|^\\x01in\\.utrcmdd \\(remote\\): protocol error \\(1\\)\\n\\0| p/Sun Ray utrmcdd/ cpe:/a:sun:ray_server_software/\n\n# 13724/tcp\nmatch vnetd m|^1\\0$| p/Veritas Netbackup Network Utility/ cpe:/a:symantec:veritas_netbackup/\n\n# Sun Cobalt Adaptive Firewall 1.7-0\nmatch pafserver m|^\\0&\\xeb\\xefTQM\\xee\\[B| p/Sun Cobalt Adaptive Firewall/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch progress m|^\\0\\0\\0\\x01\\0\\x17\\0\\x14\\0\\x06\\0\\0\\0.\\0\\0\\0\\0\\0\\0|s p/Progress Database/ cpe:/a:progress:database/\n\n# RSA SecureID Ace Server 5\nmatch sdlog m|^\\0\\0\\0\\x01\\0\\x17\\0\\x14\\0\\x06\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0$| p/RSA SecureID Ace Server/ cpe:/h:rsa:securid/\n\nmatch freeciv m|^\\0\\x03\\x02\\0\\.\\x01\\0\\0\\0\\0Invalid name ''\\0\\+1\\.14\\.0 conn_info team\\0\\0\\x03\\x03$| p/Freeciv/ v/1.X/ cpe:/a:freeciv:freeciv:1/\nmatch freeciv m|^\\0\\x03X\\0.\\x01\\0\\0\\0\\0Your client is too old\\. To use this server please upgrade your client to a CVS version later than 2003-11-28 or Freeciv 1\\.15\\.0 or later\\.\\0\\0\\0\\x03\\0\\0\\x03\\x01$| p/Freeciv/ v/2.X/ cpe:/a:freeciv:freeciv:2/\nmatch freeciv m|^\\0\\x03X\\0.\\x01\\0\\0\\0\\0Tw\\xc3\\xb3j klient jest zbyt stary\\. Aby wej\\xc5\\x9b\\xc4\\x87 na ten serwer musisz u\\xc5\\xbcywa\\xc4\\x87 klienta w wersji co najmniej 1\\.15\\.0\\. \\(Lub z CVS'a po 18\\.11\\.2003\\)\\.\\0\\0\\0\\x03\\0\\0\\x03\\x01$| p/Freeciv/ v/2.X/ i/Polish/ cpe:/a:freeciv:freeciv:2:::pl/\nmatch freeciv m|^\\0\\x03X\\0.\\x01\\0\\0\\0\\0Votre client est trop vieux\\. Pour utiliser ce serveur veuillez mettre votre client \\xc3\\xa0 jour avec une version Freeciv 2\\.2 ou ult\\xc3\\xa9rieure\\.\\0\\0\\0\\x03\\0\\0\\x03\\x01$| p/Freeciv/ v/2.X/ i/French/ cpe:/a:freeciv:freeciv:2:::fr/\nmatch freeciv m|^\\0(?:\\x03\\x58\\0)?\\x6a\\x01\\0\\0\\0\\0Your client is too old\\. To use this server, please upgrade your client to a Freeciv 2\\.2 or later\\.\\0\\0\\0\\x03\\0\\0\\x03\\x01$| p/Freeciv/ v/2.X/ cpe:/a:freeciv:freeciv:2/\nmatch freeciv m|^\\0\\x03\\x58\\0\\x16\\x01\\0\\0\\0\\0Freeciv ([\\d.]+)\\0\\0\\0\\x03\\0\\0\\x03\\x01$| p/Freeciv/ v/$1/ cpe:/a:freeciv:freeciv:$1/\n\nmatch imaze-game m|^\\0\\x18\\x82iMaze server JC/HUK ([\\d.]+)$| p/iMaze game server/ v/$1/\n\nmatch msrpc m|^\\x05\\0\\r\\x03\\x10\\0\\0\\0\\x18\\0\\0\\0v\\x07\\0\\0\\x04\\0\\x01\\x05\\0\\0.\\0$|s p/Microsoft RPC/ o/Windows/ cpe:/o:microsoft:windows/a\n\n# http://msdn.microsoft.com/en-us/library/cc219293.aspx\n# SPM 2015, Version: 2015.3.3\nmatch mc-nmf m|^\\x08Ihttp://schemas\\.microsoft\\.com/ws/2006/05/framing/faults/UnsupportedVersion| p/.NET Message Framing/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch ormi m|^\\xe3\\r\\n\\r\\n\\0\\x01\\0.\\0vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol|s p/Oracle Remote Method Invocation/\n\nmatch arkeia m|^\\0\\x05\\0\\0\\0\\0\\0\\0$| p/Arkeia Network Backup/\n\nmatch qcheck m|^.*\\$Id: //ral_depot/products/current/ENDPOINT/CODE/client\\.c|s p/Ixia Q-Check network performance tester/\n\nmatch qmqp m|^58:Dnetstring format error while receiving QMQP packet header,| p/Postfix qmqpd/\n\nmatch sip m|^\\x01\\x11\\0\\x18\\x01\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\x07versi\\0\\t\\0\\x12\\0\\0\\x06\\0Global Failure\\0\\0| p/Kamailio sipd/ cpe:/a:kamailio:kamailio/\n\nmatch sybase-adaptive m|^\\x04\\x01\\0\\(\\0\\0\\0\\0\\xaa\\0\\x14\\0\\0\\x0f\\xa2\\x01\\x0eLogin failed\\.\\n\\xfd\\0\\x02\\0\\x02\\0\\0\\0\\0$| p/Sybase Adaptive Server/ o/Windows/ cpe:/a:sybase:adaptive_server/ cpe:/o:microsoft:windows/a\n\nmatch telecom-misc m|^\\0\\x1e\\x02\\x06\\x01\\0\\0\\0\\0\\0\\0\\xf1\\0| p/Radio IP MTG gateway/ d/telecom-misc/\n\nmatch warcraft m|^\\0\\0\\x09$| p/World of Warcraft game server/\n\nmatch upnp m|^HTTP/1\\.0 414 Request-URI Too Long\\r\\nServer: Linux/([\\w._-]+) UPnP/([\\w._-]+) fbxigdd/([\\w._-]+)\\r\\nConnection: close\\r\\n\\r\\n$| p/fbxigdd/ v/$3/ i/AliceBox PM203 UPnP; UPnP $2/ d/WAP/ o/Linux $1/ cpe:/o:linux:linux_kernel:$1/\n\nmatch xtunnels m|^\\0\\x03\\x04\\0\\x04$| p/XTunnels proxy server/\n\n# Alert (Level: Fatal, Description: Unexpected Message|Protocol Version|Handshake Failure)\nmatch ssl m|^\\x15\\x03[\\x00-\\x04]\\0\\x02\\x02[\\nF\\x28]|\n\n# DNS Server status request: http://www.rfc-editor.org/rfc/rfc1035.txt\n##############################NEXT PROBE##############################\nProbe UDP DNSStatusRequest q|\\0\\0\\x10\\0\\0\\0\\0\\0\\0\\0\\0\\0|\nrarity 5\nports 53,69,135,1761\n\n# Note when generating match lines - TCP DNS responses have two bytes at the beginning\n# of the response that the UDP doesn't, otherwise they are the same. Account for this\n# in the regex so that a matchline will work for both.\n\n# Matches weird txids in bytes 0,1 (UDP) or 2,3 (TCP), we sent txid 0\n# the \\x0_, \\x8_, \\x9_ below accounts for recursion / authenticated data flags\nsoftmatch domain m|^(?:..)?..\\x90[\\x01\\x81\\x91]\\0\\0\\0\\0\\0\\0\\0\\0$| i/generic dns response: FORMERR/\nsoftmatch domain m|^(?:..)?..\\x90[\\x04\\x84\\x94]\\0\\0\\0\\0\\0\\0\\0\\0$| i/generic dns response: NOTIMP/\nsoftmatch domain m|^(?:..)?..\\x90[\\x05\\x85\\x95]\\0\\0\\0\\0\\0\\0\\0\\0$| i/generic dns response: REFUSED/\n\n# Responds with an A record for itself?\nmatch domain m|^.{4,6}\\x84\\0\\0\\x01\\0\\x01\\0\\0\\0\\0[^\\0]+\\0\\0\\x01\\0\\x01[^\\0]+\\0\\0\\x01\\0\\x01\\0\\0\\0\\x1e\\0\\x04....$|s p/Incapsula WAF DNS/\n\nmatch iodine m|^\\x80\\xa7\\x84\\0\\0\\x01\\0\\x01\\0\\0\\0\\0.*\\0\\0\\x0a\\0\\x01\\xc0\\x0c\\0\\n\\0\\x01\\0\\0\\0\\0\\0\\x05BADIP$| p/iodine IP-over-DNS tunnel/ cpe:/a:kryo:iodine/\n\n\n# This one below came from 2 tested Windows XP boxes\nmatch msrpc m|^\\x04\\x06\\0\\0\\x10\\0\\0\\0\\0\\0\\0\\0|\n\nmatch netprobe m|^\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/Mega System Technologies NetProbe Lite environmental sensor/ d/specialized/\n\nmatch tftp m|^\\0\\x05\\0\\x02\\0The IP address is not in the range of allowable addresses\\.\\0| p/SolarWinds tftpd/ i/IP disallowed/ o/Windows/ cpe:/a:solarwinds:tftp_server/ cpe:/o:microsoft:windows/a\nmatch tftp m|^\\0\\x05\\0\\0Invalid TFTP Opcode| p/Cisco tftpd/ cpe:/a:cisco:tftp_server/\nmatch tftp m|^\\0\\x05\\0\\x04Illegal TFTP operation\\0| p/Plan 9 tftpd/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\nmatch tftp m|^\\0\\x05\\0\\x04Error: Illegal TFTP Operation\\0\\0\\0\\0\\0| p/Zoom X5 ADSL modem tftpd/ d/broadband router/ cpe:/h:zoom:x5/a\nmatch tftp m|^\\0\\x05\\0\\x04Illegal operation\\0$| p/Cisco router tftpd/ d/router/ o/IOS/ cpe:/a:cisco:tftp_server/ cpe:/o:cisco:ios/a\nmatch tftp m|^\\0\\x05\\0\\x04Illegal operation error\\.\\0$| p/Microsoft Windows Deployment Services tftpd/ o/Windows/ cpe:/o:microsoft:windows/\n# version 10.9.0.25\nmatch tftp m|^\\0\\x05\\0\\x04Unknown operatation code: 0 received from [\\d.]+:\\d+\\0| p/SolarWinds Free tftpd/ cpe:/a:solarwinds:tftp_server/\n# Brother MFC-9340CDW\nmatch tftp m|^\\0\\x05\\0\\x04illegal \\(unrecognized\\) tftp operation\\0$| p/Brother printer tftpd/ d/printer/\n# HP IMC 7.1\nmatch tftp m|^\\0\\x05\\0\\0Not defined, see error message\\(if any\\)\\.\\0| p/HP Intelligent Management Center tftpd/ cpe:/a:hp:intelligent_management_center/\nmatch tftp m|^\\0\\x05\\0\\x05Unknown transfer ID\\0| p/TFTP Server SP/ o/Windows/ cpe:/a:tftp:tftp_server_sp/ cpe:/o:microsoft:windows/a\n\n# TFTP error\nsoftmatch tftp m|^\\0\\x05\\0[\\0-\\x07][^\\0]+\\0$|\n\nmatch landesk-rc m|^\\0\\0\\0\\0USER\\x01\\0\\x10\\0\\x08\\0:\\xd0\\x08\\0:\\xd0\\x01\\x01\\.\\0O\\0\\x03\\0T\\0\\xff\\xff\\0\\0\\0\\xfd\\0\\0\\0\\0\\0\\0\\x02\\0\\0\\0LANDeskWorkgroup Manager ver ([\\d.]+)\\0| p/LANDesk Workgroup Manager/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\n\n\n# DNS Server status request: http://www.crynwr.com/crynwr/rfc1035/rfc1035.html\n##############################NEXT PROBE##############################\nProbe TCP DNSStatusRequestTCP q|\\0\\x0C\\0\\0\\x10\\0\\0\\0\\0\\0\\0\\0\\0\\0|\nrarity 7\nports 53,513,514,6050,41523\nsslports 853\nfallback DNSStatusRequest\n\n# All legitimate 'domain' matchlines for this probe should be placed in the the\n# DNSStatusRequest probe section.\n\n\n# ARCserve Client Agent v4.0d for Solaris 2.x(Running on SunOS 5.8Generic_108528-13 sun4u)\nmatch arcserve m|^\\0\\0s\\0\\0\\0\\0\\0$| p/ARCserve Client Agent/ i/backup software/ cpe:/a:ca:arcserve_client_agent/\n# ARCServe Win32 Client Agent v4.0\nmatch arcserve m|^h\\0\\0\\0\\0\\0\\0\\0$| p/ARCserve Client Agent/ i/backup software/ cpe:/a:ca:arcserve_client_agent/\n# ARCserver Client Agent Discovery service on W2K3\nmatch arcserve m|^([\\w\\d_-]+)\\0$| p/ARCserve Discovery/ h/$1/ cpe:/a:ca:arcserve_client_agent/\nmatch login m|^\\0\\r\\n\\nIQinVision IQeye3 Version ([vV].*)\\n\\r\\nType HELP| p/IQinVision IQeye3 logind/ v/version $1/ d/webcam/\nmatch login m|^\\0\\r\\n\\nLantronix ETS16 Version V([\\d.]+)/\\d+\\(\\d+\\)\\n\\r\\nType HELP at the 'BRTR-ETS16>' prompt for assistance\\.\\n\\r\\nUsername> | p/Lantronix ETS16 logind/ v/$1/ d/terminal server/ cpe:/h:lantronix:ets16:$1/\n# Craftbukkit server build 860 (Minecraft v 1.6.6) http://bukkit.org\nmatch minecraft m|^\\xff\\0\\x0e\\0P\\0r\\0o\\0t\\0o\\0c\\0o\\0l\\0 \\0e\\0r\\0r\\0o\\0r$| p/Minecraft game server/\nmatch shell m|^\\0rsh: \\x10: Command not supported\\n| p/Ricoh rshd/ d/printer/\n\n# TrinityCore\nmatch wow m|^\\0\\0\\t.{32}\\x01.*?\\0\\x10..\\0\\0\\0\\0......([^\\0]+)\\x00([\\d.]{7,15}:\\d+)\\0| p/World of Warcraft authserver/ i/realm: $1 on $2/\n\n# Know the device but not the service.\n# match unknown m|^\\0\\0\\0\\0\\0\\x03\\0\\x80\\x01$| p/Weintek MT8000 touch screen/ d/media device/\n\n##############################NEXT PROBE##############################\nProbe UDP NBTStat q|\\x80\\xf0\\0\\x10\\0\\x01\\0\\0\\0\\0\\0\\0\\x20\\x43\\x4bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0\\x21\\0\\x01|\nrarity 4\nports 137\n\n# NBTStat queries use DNS query packet format and so will trigger responses from DNS services\n# the \\x0_, \\x8_, \\x9_ below accounts for recursion / authenticated data flags\nsoftmatch domain m|^\\x80\\xf0[\\x80\\x81][\\x02\\x82\\x92]\\0\\x01\\0\\0\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01$| i/generic dns response: SERVFAIL/\nsoftmatch domain m|^\\x80\\xf0[\\x80\\x81][\\x03\\x83\\x93]\\0\\x01\\0\\0\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01$| i/generic dns response: NXDOMAIN/\n\nmatch domain m|^\\x80\\xf0\\x81\\x83\\0\\x01\\0\\0\\0\\0\\0\\0 ckaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\0\\0!\\0\\x01| p/Mikrotik DNS/ d/router/\n\n# NBT Response starts with a header:\n# The following fields are each 2 bytes: transaction ID; Flags; question count; answer count; name service count; additional record count\n# Next comes 34 bytes NUL-terminaed name\n# then comes 2 byte fields: question type; question clss\n# 4 byte TTL\n# 2 byte rdata length\n# 1 byte number of names\n### -- End of header\n# Next comes the given number of nbnames - each are a 15 byte name (space padded) followed by a one byte service type, and then 16 BIT flags\n### -- End of name table - finally comes the footer:\n# 48 - Adapter address (eg MAC addy)\n# 8 bit fields: major version; minor version\n# 16 bit fields: duration; frmps received; frmps transmitted; iframe receive errors; transmit aborts\n# 32 bit fields: trasnmitted; received\n# The remaining fields are all 16-bits: iframe transmit errors; number of receive buffers; tl_timeouts; tl_timeouts; free ncbs; ncbs;\n#                                       max_ncbs; number of transmit buffers; max datagram; pending sessions; max sessions; packet_sessions\n\n# I'm not convinced that these next 4 work on a very wide variety of\n# machines.  I think most of the real matching comes in the next block.\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...(\\w{1,15}) *\\0\\x04\\0(\\w{1,15}) *\\0\\x84\\0\\w{1,15} *\\x03\\x04\\0\\w{1,15} *\\x04\\0\\w{1,15} *\\x1e\\x84\\0\\w{1,15} *\\x1d\\x04\\0\\x01\\x02__MSBROWSE__\\x02\\x01\\x84\\0(\\w{1,15}) *\\x03|s p/Microsoft Windows XP netbios-ssn/ i/workgroup: $2 user: $3/ o/Windows XP/ h/$1/ cpe:/o:microsoft:windows_xp/\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...(\\w{1,15}) *\\0\\x04\\0(\\w{1,15}) *\\0\\x84\\0\\w{1,15} *\\x03\\x04\\0\\w{1,15} *\\x04\\0\\w{1,15} *\\x1e\\x84\\0\\w{1,15} *\\x1d\\x04\\0\\x01\\x02__MSBROWSE__\\x02\\x01\\x84\\0\\0|s p/Microsoft Windows XP netbios-ssn/ i/workgroup: $2/ o/Windows XP/ h/$1/ cpe:/o:microsoft:windows_xp/\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...(\\w{1,15}) *\\0\\x04\\0(\\w{1,15}) *\\0\\x84\\0\\w{1,15} *\\x03\\x04\\0\\w{1,15} *\\x04\\0(\\w{1,15}) *\\x03\\x04\\0\\w{1,15} *\\x1e\\x84\\0|s p/Microsoft Windows XP netbios-ssn/ i/workgroup: $2 user: $3/ o/Windows XP/ h/$1/ cpe:/o:microsoft:windows_xp/\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...(\\w{1,15}) *\\0\\x04\\0(\\w{1,15}) *\\0\\x84\\0\\w{1,15} *\\x03\\x04\\0\\w{1,15} *\\x04\\0\\w{1,15} *\\x1e\\x84\\0|s p/Microsoft Windows XP netbios-ssn/ i/workgroup: $2/ o/Windows XP/ h/$1/ cpe:/o:microsoft:windows_xp/\n\n# It would be really nice if we could get username and/or OS\n# information from this.  But it is quite hard to parse out the proper\n# information unambiguously, especially with just regular expressions.\n# But it certainly would be nice to get more info:\n#\n# nbtstat\n#\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0\\0..([\\w\\-]{1,15}) *\\0D\\0.*\\0([\\w\\-]{1,15}) *\\0\\xc4\\0|s p/Microsoft Windows netbios-ssn/ i/workgroup: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0\\0..([\\w\\-]{1,15}) *\\0D\\0([\\w\\-]{1,15}) *\\0\\xc4\\0|s p/Microsoft Windows netbios-ssn/ i/workgroup: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0\\0...*\\0([\\w\\-]{1,15}) *\\0D\\0.*\\0([\\w\\-]{1,15}) *\\0\\xc4\\0|s p/Microsoft Windows netbios-ssn/ i/workgroup: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0\\0...*\\0([\\w\\-]{1,15}) *\\0D\\0([\\w\\-]{1,15}) *\\0\\xc4\\0|s p/Microsoft Windows netbios-ssn/ i/workgroup: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n\n# Samba\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15})[\\s]{0,14}\\x20\\x04\\0.*?([\\w\\-]{1,15})[\\s]{0,14}\\0\\x84\\0\\0\\0\\0\\0\\0\\0|s p/Samba nmbd netbios-ns/ i/workgroup: $2/ h/$1/ cpe:/a:samba:samba/\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15})[\\s]{0,14}\\0\\x04\\0.*?([\\w\\-]{1,15})[\\s]{0,14}\\x1e\\x84\\0\\0\\0\\0\\0\\0\\0|s p/Samba nmbd netbios-ns/ i/workgroup: $2/ h/$1/ cpe:/a:samba:samba/\n\n# The following lines contain very similar matches but allow for variations in ordering of Workstation (\\0\\x04\\0) and Workgroup (\\0\\x84\\0)\n# Active Directory Controllers - service \\x1c\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15})[\\s]{0,14}\\0\\x04\\0.*?[\\w\\-]{1,15}[\\s]{0,14}\\0\\x84\\0.*?([\\w\\-]{1,15})[\\s]{0,14}\\x1c\\x84\\0|s p/Microsoft Windows netbios-ns/ i/Domain controller: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...[\\w\\-]{1,15}[\\s]{0,14}\\0\\x84\\0.*?([\\w\\-]{1,15})[\\s]{0,14}\\0\\x04\\0.*?([\\w\\-]{1,15})[\\s]{0,14}\\x1c\\x84\\0|s p/Microsoft Windows netbios-ns/ i/Domain controller: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...[\\w\\-]{1,15}[\\s]{0,14}\\0\\xc4\\0.*?([\\w\\-]{1,15})[\\s]{0,14}\\0D\\0.*?([\\w\\-]{1,15})[\\s]{0,14}\\x1c\\xc4\\0|s p/Microsoft Windows 2012 R2 netbios-ns/ i/Domain controller: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows_server_2012:r2/a\n\n# Member servers, workgroup, etc\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15})[\\s]{0,14}\\0\\x04\\0.*?([\\w\\-]{1,15})[\\s]{0,14}\\0\\x84\\0|s p/Microsoft Windows netbios-ns/ i/workgroup: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15})[\\s]{0,14}\\0\\x84\\0.*?([\\w\\-]{1,15})[\\s]{0,14}\\0\\x04\\0|s p/Microsoft Windows netbios-ns/ i/workgroup: $1/ o/Windows/ h/$2/ cpe:/o:microsoft:windows/a\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15})[\\s]{0,14}\\x20\\x04\\0.*?([\\w\\-]{1,15})[\\s]{0,14}\\x1e\\x84\\0|s p/Microsoft Windows 10 netbios-ns/ i/workgroup: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows_10/\n\n# The following allow more flexible ordering of Workstation (\\0\\x04\\0) and Workgroup (\\0\\x84\\0) and the number of other NetBIOS services between\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15})[\\s]{0,14}.*\\0([\\w\\-]{1,15})[\\s]{0,14}\\0\\x84\\0|s p/Microsoft Windows or Samba netbios-ns/ i/workgroup: $2/ h/$1/\n\n# Apple seems to just include the Workstation service, with the permanent flag. Second matchline accounts for MAC address included in packet\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0\\0A\\x01([\\w\\-]{1,15})[\\s]{0,14}\\0d\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Apple Mac OS X netbios-ns/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0\\0A\\x01([\\w\\-]{1,15})[\\s]{0,14}\\0d\\0[^\\0]{6}\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Apple Mac OS X netbios-ns/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0\\0A\\x01([\\w\\-]{1,15})[\\s]{0,14}\\0\\x04\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Apple Mac OS X netbios-ns/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\n\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15})[\\s]{0,14}\\0d\\0.*\\0([\\w\\-]{1,15})[\\s]{0,14}\\0\\xe4\\0|s p/Samba nmbd netbios-ns/ i/workgroup: $2/ h/$1/ cpe:/a:samba:samba/\n\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0\\0/\\x00......\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|s p/Microsoft Windows Mobile netbios-ns/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch netbios-ns m|^\\x80\\xf0\\x85\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15}).*\\04\\0([\\w\\-]{1,15}) *\\x1e\\x84\\0|s p/Novell NetWare netbios-ns/ i/workgroup: $2/ o/NetWare/ h/$1/ cpe:/o:novell:netware/a\n\n\n#\n# Samba has a version too\n# nmbd version 2.2.7 on Linux 2.4.20\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15}).*\\0([\\w\\-]{1,15}) *|s p/Samba nmbd netbios-ns/ i/workgroup: $2/ h/$1/ cpe:/a:samba:samba/\n\n# From an acer PDA\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...\\0\\x80H'y\\x86\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/WinCE netbios-ns/ o/Windows CE/ cpe:/o:microsoft:windows_ce/a\n\n# From a mikrotik router\nmatch netbios-ns m|^\\x80\\xf0\\x85\\x80\\0\\x01\\0\\0\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...\\d+\\.\\d+ \\0D\\0\\0\\0| p/MikroTik router netbios-ns/ d/router/\n\nmatch netbios-ns m|^\\x80\\xf0\\x84\\x00\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...\\x01\\x02__MSBROWSE__\\x02\\x01\\x84\\0(MACBOOKPRO-[0-9A-F]{4})\\0.*\\0([\\w._ -]+)\\x1d|s p/Apple Mac OS X netbios-ns/ i/workgroup: $2/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/\n\nmatch netbios-ns m|^\\x80\\xf0\\x85\\x80\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]+) *\\0\\x04\\0|s p/Xerox WorkCentre netbios-ns/ d/printer/ h/$1/\n# Brother MFC-9340CDW\nmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\x04\\x93\\xe0...([\\w-]+)\\0D\\0......\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|s p/Brother printer netbios-ns/ d/printer/ h/$1/\n\n\nsoftmatch netbios-ns m|^\\x80\\xf0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01\\0\\0\\0\\0...([\\w\\-]{1,15})[\\s]{0,14}| p/Unknown netbios-ns/ h/$1/\nsoftmatch netbios-ns m|^\\x80\\xf0[\\x80-\\x8f].\\0\\0\\0.\\0\\0\\0\\0 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01|\n\nmatch ntp m|^\\x04\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0LOCL....\\0\\0\\0\\0AAAAA\\0\\0!....\\0\\0\\0\\0....\\0\\0\\0\\0| p/Actiontec ntpd/ d/broadband router/\n\n# Apparently used on OS X: http://support.apple.com/kb/ts1629\nmatch osu-nms m|^\\x08\\x02\\0\\x03\\x03\\x11\\0\\0\\x03\\x03\\x12\\0\\0\\x03\\x03\\x13\\0\\0\\x03\\x03\\x14\\0\\0\\x06\\x03\\x15\\0\\0\\0\\0\\0\\x06\\x03\\x16\\0\\0\\0\\0\\0\\x03\\x03\\x18\\0\\0\\x04\\x03\\x19\\0\\0\\0\\x06\\x03!\\0\\0\\0\\0\\0\\x06\\x03\\\"\\0\\0\\0\\0\\0\\x06\\x03#\\0\\0\\0\\0\\0\\x06\\x03\\$\\0\\0\\0\\0\\0\\x06\\x03%\\0\\0\\0\\0\\0\\x06\\x03&\\0\\0\\0\\0$| p/OSU Network Monitoring System/\n\n##############################NEXT PROBE##############################\nProbe UDP Help q|help\\r\\n\\r\\n|\nrarity 3\nports 7,13,37,42\nmatch chargen m|@ABCDEFGHIJKLMNOPQRSTUVWXYZ|\nmatch echo m|^help\\r\\n\\r\\n$|\n# Solaris 8, 9\nmatch daytime m=^[A-Z][a-z]{2} [A-Z][a-z]{2} +\\d{1,2} +\\d\\d:\\d\\d:\\d\\d (?:19|20)\\d\\d\\n\\r$= p/Sun Solaris daytime/ o/Solaris/ cpe:/o:sun:sunos/a\n# Mandrake Linux 9.2, xinetd daytime\nmatch daytime m|^[0-3]\\d [A-Z][A-Z][A-Z] 20\\d\\d \\d\\d:\\d\\d:\\d\\d \\S+\\r\\n|\n# Windows small services daytime\nmatch daytime m|^\\d{1,2}:\\d\\d:\\d\\d [AP]M \\d{1,2}/\\d\\d/\\d{4}\\n$| p/Windows small service daytime/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch daytime m|^\\d{1,2}:\\d\\d:\\d\\d \\d{1,2}/\\d\\d/\\d{4}\\n$| p/Windows daytime/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch daytime m|^\\d\\d:\\d\\d:\\d\\d \\d\\d.\\d\\d.20\\d\\d\\n$| p/Microsoft Windows International daytime/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch daytime m|^\\w\\w\\w \\w\\w\\w \\d\\d \\d\\d:\\d\\d:\\d\\d \\d\\d\\d\\d\\r\\n$| p/AIX daytime/ o/AIX/ cpe:/o:ibm:aix/a\nmatch daytime m|^(\\w\\w\\w \\w\\w\\w \\d\\d \\d\\d:\\d\\d:\\d\\d \\w+ \\d\\d\\d\\d)\\r\\n\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0 \\0\\0\\0\\x7f\\xff\\xec0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x04\\x01Q\\xa0\\0\\0\\0\\0\\0\\x01\\0\\x15\\x90-d\\0\\0\\0\\0\\0\\0\\0\\0\\x1c\\0\\0\\xff\\xfe\\xff\\xff\\xff\\xff\\xc5:H\\0\\0\\x16\\xc3\\xd8\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff\\xac\\x10\\x0b\\x05\\0\\xff\\0\\x06T\\xa3\\0\\0 !\\\"#\\$%&'\\(\\)\\*\\+,-\\./0123456789:;<=>\\?@ABCDEFGHIJKLMNO\\xd3\\$\\x12\\xccTUVWOy\\x94L\\0\\r\\xd1z\\0\\0\\0\\0\\x04\\x02\\x1b${backquote}\\0\\0\\0\\0\\x04\\x02\\x1b${backquote}| i/time: $1/\n\nmatch drweb m|^\\x7csrv_realm=([^\\x7c]+)\\x7csrv_Uuid=[-\\da-f]{36}\\x7cdws9=\\d+\\x7cMajorVer=(\\d+)\\x7cMinorVer=(\\d+)\\x7c| p/DrWeb/ v/$2.$3/ i/realm: $1/ cpe:/a:drweb:drweb:$2.$3/\n# TIME\nmatch time m|^[\\xd5-\\xef]...$|s i/32 bits/\nmatch time m|^[\\xd5-\\xef]....\\0\\0\\0$|s i/64 bits/\n# Solaris Internet Name Server (42/udp), see ien116.txt\nmatch nameserver m|^help\\r\\n\\r\\n\\0\\0\\0\\0\\x20CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01| p/Solaris Internet Name Server/ i/IEN 116/ o/Solaris/ cpe:/o:sun:sunos/a\nmatch nameserver m|^\\x03\\x03\\x02$| p/Solaris Internet Name Server/ i/IEN 116/ o/Solaris/ cpe:/o:sun:sunos/a\nmatch nameserver m|^\\0\\x06\\x01\\0\\0\\x01\\0\\0\\x03\\x03\\x02$| p/Solaris Internet Name Server/ i/IEN 116/ o/Solaris/ cpe:/o:sun:sunos/a\n\nmatch valve-steam m|^\\xff\\xff\\xff\\xff!L_\\xa0.{28}\\0\\0\\0\\x08\\x06\\x10\\x06\\x18\\x9c\\xd3\\x01\\\".([\\w.-]+)0\\x028| p/Valve Steam In-Home Streaming service/ h/$1/\nmatch valve-steam m|^\\xff\\xff\\xff\\xff!L_\\xa0| p/Valve Steam In-Home Streaming service/\n\n##############################NEXT PROBE##############################\nProbe TCP Hello q|EHLO\\r\\n|\nrarity 8\nports 25,587,3025\nsslports 465\ntotalwaitms 7500\n\nmatch exalead m|^\\? 1 illegal command\\n\\0| p/Exalead search appliance/\n\nmatch smtp m|^220\\s+(DP-\\d+)\\r\\n250-Hello\\r\\n250-DSN\\r\\n| p/Panasonic smtpd/ v/$1/ i/Panasonic printer/ d/printer/\nmatch smtp m|^220 ESMTP service ready\\r\\n250\\x20ok\\r\\n| p/Rustock smtp backdoor/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 Hello [A-Z][a-z]{2}, .*\\r\\n501 Command \\\"EHLO\\\" requires an argument\\r\\n| p/Lotus Notes smtpd/ cpe:/a:ibm:lotus_notes/\nmatch smtp m|^220 ([\\w_.-]+) ESMTP\\r\\n250-[-\\w_.]+\\r\\n250-AUTH LOGIN CRAM-MD5 PLAIN\\r\\n250-AUTH=LOGIN CRAM-MD5 PLAIN\\r\\n250-PIPELINING\\r\\n250 8BITMIME\\r\\n| p/Access Remote PC smtpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 \\[[\\w_.-]+\\] FTGate Server Ready\\r\\n250-([\\w._-]+)\\r\\n| p/Floosietek FTGate smtpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n# NetWare GroupWise Internet Agent 7 SP3 beta\nmatch smtp m|^220 ([\\w_.-]+) Ready\\r\\n250-.*\\r\\n250-AUTH LOGIN\\r\\n(?:250-8BITMIME\\r\\n)?250-SIZE\\r\\n250 DSN\\r\\n| p/Novell NetWare GroupWise Internet Agent smtpd/ o/NetWare/ h/$1/ cpe:/a:novell:groupwise/ cpe:/o:novell:netware/a\nmatch smtp m|^220 .* Ready\\r\\n250-.*\\r\\n250-AUTH LOGIN\\r\\n(?:250-8BITMIME\\r\\n)?250-SIZE\\r\\n250 DSN\\r\\n| p/Novell NetWare GroupWise Internet Agent smtpd/ o/NetWare/ cpe:/a:novell:groupwise/ cpe:/o:novell:netware/a\nmatch smtp m|^220 \\[[\\w_.-]+\\] ESMTP Ready\\r\\n501 HELO requires domain address\\r\\n| p/Canon imageRUNNER C5185 smtpd/ d/printer/ cpe:/h:canon:imagerunner_c5185/\nmatch smtp m|^220 .* SMTP ready at .*\\r\\n501 Command \\\"EHLO\\\" requires an argument\\r\\n| p/Lotus Domino smtpd/ cpe:/a:ibm:lotus_domino/\nmatch smtp m|^220 Hello\\r\\n501 Command \\\"EHLO\\\" requires an argument\\r\\n| p/Lotus Domino smtpd/ cpe:/a:ibm:lotus_domino/\nmatch smtp m|^220 ([\\w_.-]+)\\r\\n250-[\\w._-]+ Axigen ESMTP hello\\r\\n| p/Axigen smtpd/ h/$1/ cpe:/a:gecad:axigen_mail_server/\nmatch smtp m|^220 [^\\r\\n]*ESMTP[^\\r\\n]*\\r\\n501 ehlo requires domain/address - see RFC-2821 4\\.1\\.1\\.1\\r\\n| p/qpsmtpd/ cpe:/a:ask_bjorn_hansen:qpsmtpd/\nmatch smtp m|^220 ([\\w_.-]+) ESMTP Service ready\\r\\n250-[\\w_.-]+ Missing required domain name in EHLO, defaulted to your IP address \\[[\\d.]+\\]\\r\\n| p/Critical Path smtpd/ h/$1/\nmatch smtp m|^220 \\r\\n501 \\r\\n| p/Konica Minolta bizhub 350 printer smtpd/ d/printer/ cpe:/h:konicaminolta:bizhub_350/\nmatch smtp m|^220 ([\\w_.-]+) ESMTP SonicWALL \\(([\\d.]+)\\)\\r\\n| p/SonicWALL Email Security smtpd/ v/$2/ d/security-misc/ h/$1/\nmatch smtp m|^220 ([\\w_.-]+) ready\\r\\n250-[\\w_.-]+\\r\\n250 AUTH LOGIN PLAIN \\r\\n$| p/Freemail smtpd/ h/$1/\nmatch smtp m|^554 SMTP synchronization error\\r\\n| p/Exim smtpd/ cpe:/a:exim:exim/\nmatch smtp m|^220 ([\\w._-]+)  ESMTP\\r\\n501 Syntax: EHLO hostname\\r\\n| p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 ESMTP Postfix\\r\\n501 Syntax: EHLO hostname\\r\\n| p/Postfix smtpd/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220-\\*{89}\\r\\n220 \\*{32}\\r\\n250-Welcome [\\w._-]+, nice to meet you\\.\\.\\.\\r\\n250-AUTH=(?:\\w+ ?)+\\r\\n250-AUTH(?: \\w+)+\\r\\n250-SIZE \\d+\\r\\n250-DSN\\r\\n250-ETRN\\r\\n250 XXXA\\r\\n| p/ArGoSoft smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ESMTP Ready\\r\\n250-([\\w._-]+) Hello \\[[\\d.]+\\]\\r\\n250-SIZE\\r\\n250-PIPELINING\\r\\n250-DSN\\r\\n250-ENHANCEDSTATUSCODES\\r\\n250-STARTTLS\\r\\n250-X-ANONYMOUSTLS\\r\\n250-AUTH NTLM\\r\\n250-X-EXPS GSSAPI NTLM\\r\\n250-8BITMIME\\r\\n250-BINARYMIME\\r\\n250-CHUNKING\\r\\n250-XEXCH50\\r\\n250 XRDST\\r\\n| p/Microsoft Outlook Web Access smtpd/ h/$1/\nmatch smtp m|^220 ([\\w._-]+) ESMTP\\r\\n250-\\1\\r\\n250-STARTTLS\\r\\n250-SIZE 50000000\\r\\n250-PIPELINING\\r\\n250 8BITMIME\\r\\n| p/qmail smtpd/ h/$1/ cpe:/a:djb:qmail/\nmatch smtp m|^220  ESMTP\\r\\n501 5\\.0\\.0 EHLO requires domain address\\r\\n| p/Sendmail/ cpe:/a:sendmail:sendmail/a\nmatch smtp m|^552 Invalid domain name in HELO command \\(DLH use case\\)\\.\\r\\n| p/Lotus Notes smtpd/ cpe:/a:ibm:lotus_domino/\nmatch smtp m|^220 ([\\w.-]+) ESMTP \\w\\w\\w, \\d\\d \\w\\w\\w \\d\\d\\d\\d [\\d:]{8} ([-+]?\\d\\d\\d\\d)\\r\\n550 Invalid or missing command argument\\(s\\)\\r\\n| p/MDaemon smtpd/ i/timezone: $2/ h/$1/ cpe:/a:alt-n:mdaemon/\nmatch smtp m|^220 ([\\w.-]+) Ready\\r\\n250-Requested mail action okay, completed\\.\\r\\n250 STARTTLS\\r\\n| p/McAfee Email Gateway/ h/$1/ cpe:/a:mcafee:email_gateway/\nmatch smtp m|^220 \\S*[^\\w.-]\\S* ESMTP CommuniGate Pro [^\\d].*\\r\\n250-([\\w.-]+) domain name should be qualified \\r\\n| p/CommuniGate Pro SMTP/ h/$1/ cpe:/a:stalker:communigate_pro/\nmatch smtp m|^220 (\\w[\\w.-]+) ESMTP\\r\\n501 Syntactically invalid EHLO argument\\(s\\)\\r\\n| p/Exim smtpd/ h/$1/ cpe:/a:exim:exim/\nmatch smtp m|^220 ESMTP (?:\\(NO U[BC]E\\))* ?server ready at \\w\\w\\w, \\d\\d \\w\\w\\w \\d\\d\\d\\d [\\d:]{8} ([-+]?\\d\\d\\d\\d)\\r\\n501 Command \"EHLO\" requires an argument\\r\\n| p/Lotus Notes smtpd/ i/timezone: $1/ cpe:/a:ibm:lotus_notes/\nmatch smtp m|^220 ([\\w._-]+) Mail ESMTP ready\\r\\n250-\\1 Axigen ESMTP hello\\r\\n| p/Axigen smtpd/ h/$1/ cpe:/a:gecad:axigen_mail_server/\n# Sometimes the hostnames don't match!\nmatch smtp m|^220 ([\\w._-]+) Mail ESMTP ready\\r\\n250-([\\w._-]+) Axigen ESMTP hello\\r\\n| p/Axigen smtpd/ i/alt hostname: $2/ h/$1/ cpe:/a:gecad:axigen_mail_server/\nmatch smtp m|^220 ([\\w._-]+)[^\\r\\n]*\\r\\n250-[^ ]* \\[[^]]+\\], this server offers \\d+ extensions\\r\\n250| p/MailEnable smtpd/ o/Windows/ h/$1/ cpe:/a:mailenable:mailenable/ cpe:/o:microsoft:windows/a\n\nmatch smtp m|^220 $| p/OpenBSD spamd/\n\nmatch smtp-proxy m|^220 ([-\\w_.]+) .*\\r\\n250-[-\\w_.]+ supports the following ESMTP extensions:\\r\\n250-SIZE \\d+\\r\\n250-DSN\\r\\n250-8bitmime\\r\\n250 OK\\r\\n| p/Trend Micro IMSS smtp proxy/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 ([\\w._-]+) ESMTP [\\w._-]+\\r\\n501 5\\.5\\.2 HELO requires domain address\\r\\n| p/SonicWALL Email Security Appliance smtp proxy/ d/proxy server/ h/$1/\nmatch smtp-proxy m|^220 Ready to receive mail -=- ESMTP\\r\\n250-Ready to receive mail -=-\\r\\n250-AUTH LOGIN PLAIN\\r\\n250-AUTH=LOGIN PLAIN\\r\\n250-PIPELINING\\r\\n250 8BITMIME\\r\\n| p/PineApp Mail-SeCure smtp proxy/ cpe:/a:pineapp:mail-secure/\nmatch smtp-proxy m|^220 MailStore SMTP Proxy Server\\r\\n250-([\\w._-]+)\\r\\n250-STARTTLS\\r\\n250 MAILSTORE\\r\\n| p/MailStore smtp proxy/ h/$1/\nmatch smtp-proxy m|^220 OutgoingFilter SMTP\\r\\n502 OutgoingFilter Command not implemented\\r\\n| p/Dr.Web SMTP-proxy/ cpe:/a:drweb:smtp-proxy/\n\n##############################NEXT PROBE##############################\nProbe TCP Help q|HELP\\r\\n|\nrarity 3\nports 1,7,21,25,79,113,119,515,587,1111,1311,12345,2401,2627,3000,3493,6560,6666-6670,14690,22490\nsslports 465,990\ntotalwaitms 7500\n\n# http://www.computerpokercompetition.org/\nmatch acpc m|^Usage: Valid commands are\\nLIST\\nCLEAR\\nSTATUS\\nKILL\\nNEW\\nCONFIG\\nAUTONCONNECT\\nGETINFO\\nHELP\\nFor specific help on each command, type HELP:COMMAND\\r\\r\\n\\n| p/Glassfrog computer poker server/\n\nmatch aleph m|^96\\r$| p/Aleph Integrated Library System/\nmatch bitkeeper m|^@SERVER INFO@\\nPROTOCOL=([\\d.]+)\\nVERSION=bk-([\\w._-]+)\\nUTC=\\d+\\nTIME_T=\\d+\\nROOT=([^\\n]+)\\nUSER=(?:[^\\n]+)\\nHOST=(?:[^\\n]+)\\nREALUSER=(?:[^\\n]+)\\nREALHOST=([^\\n]+)\\nPLATFORM=([^\\n]+)\\n| p/BitKeeper distributed VCS/ v/$2/ i/protocol $1; root $3; $5/ h/$4/ cpe:/a:bitmover:bitkeeper:$2/\n\nmatch caldav m|^<head>\\n<title>Error response</title>\\n</head>\\n<body>\\n<h1>Error response</h1>\\n<p>Error code 400\\.\\n<p>Message: Bad request syntax \\('HELP'\\)\\.\\n<p>Error code explanation: 400 = Bad request syntax or unsupported method\\.\\n</body>\\n| p/Radicale calendar and contacts server/ i/Python BaseHTTPServer/ cpe:/a:kozea:radicale/ cpe:/a:python:python/\n\nmatch chat m|^\\r\\n>STATUS\\tset status\\r\\nINVISIBLE\\tset invisible mode\\r\\nMAINWINDOW\\tshow/hide main window\\r\\n| p/Simple Instant Messenger control plugin/\n\n# CVSD (cvs chrooting service for pserver) cvsd 0.9.18\n# CVS 1.11.5 pserver\nmatch cvspserver m|^cvs \\[pserver aborted\\]: bad auth protocol start: HELP\\r\\n\\n?$| p/cvs pserver/\n# CVSNT pserver\nmatch cvspserver m|^cvs \\[server aborted\\]: bad auth protocol start: HELP\\r\\n$| p/CVSNT cvs pserver/ cpe:/a:march-hare:cvsnt/\nmatch cvspserver m|^cvs \\[server aborted\\]: bad auth protocol start: HELP\\r\\nerror  \\n$| p/CVSNT cvs pserver/ cpe:/a:march-hare:cvsnt/\nmatch cvspserver m|^cvsnt \\[server aborted\\]: bad auth protocol start: HELP\\r\\nerror  \\n$| p/CVSNT cvs pserver/ cpe:/a:march-hare:cvsnt/\nmatch cvspserver m|^cvsntsrv \\[server aborted\\]: bad auth protocol start: HELP\\r\\nerror  \\n$| p/CVSNT cvs pserver/ cpe:/a:march-hare:cvsnt/\n# Concurrent Versions System (CVS) 1.10.7 (client/server)\nmatch cvspserver m|^cvs-pserver \\[pserver aborted\\]: bad auth protocol start: HELP\\r\\n\\n| p/cvs pserver/\n\nmatch cvspserver m|^-f \\[pserver aborted\\]: bad auth protocol start: HELP\\r\\n\\n| p/SunOS cvs pserver/ o/SunOS/ cpe:/o:sun:sunos/a\nmatch echo m|^HELP\\r\\n$|\nmatch irc-proxy m|^:ezbounce!srv NOTICE \\(unknown\\) :\\x02| p/ezbounce irc proxy/ o/Unix/\n# ProFTPD 1.2.0\nmatch ftp m|^220 FTP Server[^[]* \\[([\\w.-]+)\\]\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n USER    PASS    ACCT\\*   CWD     XCWD    CDUP    XCUP    SMNT\\*   \\r\\n QUIT    REIN\\*   PORT    PASV    TYPE    STRU\\*   MODE\\*   RETR    \\r\\n STOR    STOU\\*   APPE    ALLO\\*   REST    RNFR    RNTO    ABOR    \\r\\n DELE    MDTM    RMD     XRMD    MKD     XMKD    PWD     XPWD    \\r\\n SIZE    LIST    NLST    SITE    SYST    STAT    HELP    NOOP    \\r\\n214 Direct comments to | p/ProFTPD/ v/1.2.0/ o/Unix/ h/$1/ cpe:/a:proftpd:proftpd:1.2.0/a\n# ProFTPD 1.2.5\nmatch ftp m|^220 ([-.\\w]+) FTP server ready\\.\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n USER    PASS    ACCT\\*   CWD     XCWD    CDUP    XCUP    SMNT\\*   \\r\\n QUIT    REIN\\*   PORT    PASV    TYPE    STRU    MODE    RETR    \\r\\n STOR    STOU\\*   APPE    ALLO\\*   REST    RNFR    RNTO    ABOR    \\r\\n DELE    MDTM    RMD     XRMD    MKD     XMKD    PWD     XPWD    \\r\\n SIZE    LIST    | p/ProFTPD/ v/1.2.5/ o/Unix/ h/$1/ cpe:/a:proftpd:proftpd:1.2.5/a\nmatch ftp m|^220 FTP-Server on \\[([-\\w_.]+)\\]\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n214-USER    PASS    ACCT\\*   CWD     XCWD    CDUP    XCUP    SMNT\\*   \\r\\n214-QUIT    REIN\\*   PORT    PASV    TYPE    STRU    MODE    RETR    \\r\\n214-STOR    STOU\\*   APPE    ALLO\\*   REST    RNFR    RNTO    ABOR    \\r\\n214-DELE    MDTM    RMD     XRMD    MKD     XMKD    PWD     XPWD    \\r\\n214-SIZE    LIST| p/ProFTPD/ v/1.2.5/ o/Unix/ h/$1/ cpe:/a:proftpd:proftpd:1.2.5/a\n# ProFTPD 1.2.6\nmatch ftp m|^220 ([-.\\w]+) FTP server ready\\.\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n214-USER    PASS    ACCT\\*   CWD     XCWD    CDUP    XCUP    SMNT\\*   \\r\\n214-QUIT    REIN\\*   PORT    PASV    EPRT    EPSV    TYPE    STRU    \\r\\n214-MODE    RETR    STOR    STOU    APPE    ALLO\\*   REST    RNFR    \\r\\n214-RNTO    ABOR    DELE    MDTM    RMD     XRMD    MKD     XMKD| p/ProFTPD/ v/1.2.6/ o/Unix/ h/$1/ cpe:/a:proftpd:proftpd:1.2.6/a\nmatch ftp m|^220 ([-.\\w]+ )?FTP [sS]erver ready\\.?\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n214-USER    PASS    ACCT\\*   CWD     XCWD    CDUP    XCUP    SMNT\\*   \\r\\n214-QUIT    REIN\\*   PORT    PASV    EPRT    EPSV    TYPE    STRU    \\r\\n214-MODE    RETR    STOR    STOU    APPE    ALLO\\*   REST    RNFR    \\r\\n214-RNTO    ABOR    DELE    MDTM    RMD     XRMD    MKD     XMKD| p/ProFTPD/ v/1.2.6/ o/Unix/ h/$1/ cpe:/a:proftpd:proftpd:1.2.6/a\n# ProFTPD 1.2.8\n# proftpd 1.2.9 rc1\nmatch ftp m%^220 .*\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n(?:214-| )USER    PASS    ACCT\\*   CWD     XCWD    CDUP    XCUP    SMNT\\*   \\r\\n(?:214-| )QUIT    REIN\\*   PORT    PASV    TYPE    STRU    MODE    RETR    \\r\\n(?:214-| )STOR    STOU    APPE    ALLO\\*   REST    RNFR    RNTO    ABOR    \\r\\n(?:214-| )DELE    MDTM    RMD     XRMD    MKD     XMKD    PWD     XPWD    \\r\\n(?:214-| )SIZE% p/ProFTPD/ v/1.2.8 - 1.2.9/ o/Unix/ cpe:/a:proftpd:proftpd/\nmatch ftp m%^220 .*\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n(?:214-| )USER    PASS    ACCT\\*   CWD     XCWD    CDUP    XCUP    SMNT\\*   \\r\\n(?:214-| )QUIT    REIN\\*   PORT    PASV    EPRT    EPSV    TYPE    STRU    \\r\\n(?:214-| )MODE    RETR    STOR    STOU    APPE    ALLO\\*   REST    RNFR    \\r\\n(?:214-| )RNTO    ABOR    DELE    MDTM    RMD     XRMD    MKD     XMKD    \\r\\n(?:214-| )PWD     XPWD    SIZE    LIST    NLST    SITE    SYST    STAT    \\r\\n% p/ProFTPD/ v/1.2.8 - 1.2.9/ o/Unix/ cpe:/a:proftpd:proftpd/\n# proftpd 1.2.9rc1 on linux 2.4.19\nmatch ftp m|220 localhost FTP server ready\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n214-USER    PASS    ACCT\\*   CWD     XCWD    CDUP    XCUP    SMNT\\*   \\r\\n214-QUIT    REIN\\*   PORT    PASV    TYPE    STRU    MODE    RETR    \\r\\n214-STOR    STOU    APPE    ALLO\\*   REST    RNFR    RNTO    ABOR    \\r\\n214-DELE| p/ProFTPD/ v/1.2.9rc1/ o/Unix/ cpe:/a:proftpd:proftpd:1.2.9rc1/a\n# proftpd 1.2.10\nmatch ftp m|^220 .*\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\):\\r\\n CWD     XCWD    CDUP    XCUP    SMNT\\*   QUIT    PORT    PASV    \\r\\n EPRT    EPSV    ALLO\\*   RNFR    RNTO    DELE    MDTM    RMD     \\r\\n XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    \\r\\n NOOP    FEAT    OPTS    AUTH\\*?   CCC\\*    CONF\\*   ENC\\*    MIC\\*    \\r\\n PBSZ\\*?   PROT\\*?   TYPE    STRU    MODE    RETR    STOR    STOU    \\r\\n|s p/ProFTPD/ v/1.2.10/ cpe:/a:proftpd:proftpd:1.2.10/a\n\nmatch ftp m|^220 .*\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\):\\r\\n CWD     XCWD    CDUP    XCUP    SMNT\\*   QUIT    PORT    PASV    \\r\\n EPRT    EPSV    ALLO\\*   RNFR    RNTO    DELE    MDTM    RMD     \\r\\n XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    \\r\\n|s p/ProFTPD/ cpe:/a:proftpd:proftpd/a\n\nmatch ftp m|^220[ -].*\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\):\\r\\n|s p/ProFTPD/ cpe:/a:proftpd:proftpd/a\n\nmatch ftp m|^220 .*\\r\\n214-\\xd1\\xeb\\xe5\\xe4\\xf3\\xfe\\xf9\\xe8\\xe5 \\xea\\xee\\xec\\xe0\\xed\\xe4\\xfb \\xe1\\xfb\\xeb\\xe8 \\xf0\\xe0\\xf1\\xef\\xee\\xe7\\xed\\xe0\\xed\\xfb \\(\\* => \\xed\\xe5 \\xf0\\xe5\\xe0\\xeb\\xe8\\xe7\\xee\\xe2\\xe0\\xed\\xee\\):\\r\\n| p/ProFTPD/ i/locale: ru_RU/ cpe:/a:proftpd:proftpd/a\n\n# Solaris 8 ftpd\nmatch ftp m|^220 ([-.+\\w]+) FTP server \\(.*\\) ready\\.\\r\\n214-The following commands are recognized:\\r\\n   USER    EPRT    STRU    MAIL\\*   ALLO    CWD     STAT\\*   XRMD \\r\\n   PASS    LPRT    MODE    MSND\\*   REST\\*   XCWD    HELP    PWD \\r\\n   ACCT\\*   EPSV    RETR    MSOM\\*   RNFR    LIST    NOOP    XPWD \\r\\n   REIN\\*   LPSV    STOR    MSAM\\*   RNTO    NLST    MKD     CDUP \\r\\n| p/Sun Solaris ftpd/ o/Solaris/ h/$1/ cpe:/o:sun:sunos/a\n# Phaser860 printer\nmatch ftp m|^220 FTP server ready\\.\\r\\n214- The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n   USER    PORT    STOR    MSAM\\*   RNTO\\*   NLST\\*   MKD\\*    CDUP\\*   EPLF\\*\\r\\n   PASS    PASV\\*   APPE\\*   MRSQ\\*   ABOR    SITE\\*   XMKD\\*   XCUP\\*\\r\\n   ACCT\\*   TYPE    MLFL\\*   MRCP\\*   DELE    SYST    RMD\\*    STOU \\r\\n   SMNT\\*   STRU    MAIL\\*   ALLO\\*   CWD\\*    STAT    XRMD\\*   SIZE\\*\\r\\n   REIN\\*   MODE    MSND\\*   REST\\*   XC| p/Phaser printer ftpd/ d/printer/\nmatch ftp m|^220 FTP server ready\\.\\r\\n214- The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n   USER    PORT    MODE    MSND\\*   REST\\*   XCWD\\*   HELP    PWD     MDTM\\*\\r\\n   PASS    EPRT    RETR\\*   MSOM\\*   RNFR\\*   LIST\\*   NOOP    XPWD    MACB\\*\\r\\n   ACCT\\*   PASV\\*   STOR    MSAM\\*   RNTO\\*   NLST\\*   MKD\\*    CDUP\\*   EPLF\\*\\r\\n   SMNT\\*   EPSV    APPE\\*   MRSQ\\*   ABOR    SITE\\*   XMKD\\*   XCUP\\*\\r\\n   REIN\\*   TYPE    MLFL\\*   MRCP\\*   DELE    SYST    RMD\\*    STOU \\r\\n   QUIT    STRU    MAIL\\*   ALLO\\*   CWD\\*    STAT    XRMD\\*   SIZE\\*\\r\\n214 Direct comments to http://www\\.xerox\\.com/officeprinting\\.\\r\\n| p/Xerox 8560DN printer ftpd/ d/printer/ cpe:/h:xerox:8560dn/a\n# bsd-ftpd 0.3.3 (port of OpenBSD ftp server) on Linux 2.4.20\nmatch ftp m|^220 ([-.\\w]+) FTP server ready\\.\\r\\n214- The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n   USER    PORT    TYPE    MLFL\\*   MRCP\\*   DELE    SYST    RMD     STOU \\r\\n   PASS    LPRT    STRU    MAIL\\*   ALLO    CWD     STAT    XRMD    SIZE \\r\\n   ACCT\\*   EPRT    MODE    MSND\\*   REST    XCWD    HELP    PWD     MDTM \\r\\n   SMNT\\*   PASV    RETR    MSOM\\*   RNFR    LIST    NOOP    XPWD \\r| p/bsd-ftpd/ o/Linux/ h/$1/ cpe:/o:linux:linux_kernel/a\n# Rhinosoft Serv-U FTP v.4.1 build 4.1.0.0 on Windows XP\nmatch ftp m|^220 .*\\r\\n214- The following commands are recognized \\(\\* => unimplemented\\)\\.\\r\\n   USER    PORT    RETR    ALLO    DELE    SITE    XMKD    CDUP    FEAT\\r\\n   PASS    PASV    STOR    REST    CWD     STAT    RMD     XCUP    OPTS\\r\\n   ACCT    TYPE    APPE    RNFR    XCWD    HELP    XRMD    STOU    AUTH\\r\\n   REIN    STRU    SMNT    RNTO    LIST    NOOP    PWD     SIZE    PBSZ\\r\\n| p/Rhinosoft Serv-U FTP/ cpe:/a:serv-u:serv-u/\n# BulletProof FTP server 2.15 on Windows XP\nmatch ftp m|^220 .*\\r\\n530 Please login with USER and PASS first\\.\\r\\n$| p/BulletProof FTPd/ o/Windows/ cpe:/o:microsoft:windows/a\n# SGI IRIX 6.5.18f ftpd\nmatch ftp m|^220 ([-.\\w]+) FTP server ready\\.\\r\\n214- The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n   USER    PORT    STOR    MSAM\\*   RNTO    NLST    MKD     CDUP \\r\\n   PASS    PASV    APPE    MRSQ\\*   ABOR    SITE    XMKD    XCUP \\r\\n   ACCT\\*   TYPE    MLFL\\*   MRCP\\*   DELE    SYST    RMD     STOU \\r\\n   SMNT\\*   STRU    MAIL\\*   ALLO    CWD     STAT    XRMD    SIZE \\r\\n   REIN\\*   MODE    MSND\\*   REST    XCWD    HELP    PWD     MDTM \\r\\n   QUIT    RETR    MSOM\\*   RNFR    LIST    NOOP    XPWD \\r\\n214 Direct comments to | p/SGI IRIX ftpd/ o/IRIX/ h/$1/ cpe:/o:sgi:irix/a\nmatch ftp m|^421 Server is temporarily unavailable - please try again later\\.\\r\\n421 Service closing control connection\\.\\r\\n| p/Serv-U ftpd/ i/Server temporarily unavailable/ o/Windows/ cpe:/a:serv-u:serv-u/ cpe:/o:microsoft:windows/a\n# FreeBSD 4.10 ftpd\nmatch ftp m|^220 FTP server ready\\.\\r\\n214- The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n   USER    PORT    TYPE    MLFL\\*   MRCP\\*   DELE    SYST    RMD     STOU \\r\\n   PASS    LPRT    STRU    MAIL\\*   ALLO    CWD     STAT    XRMD    SIZE \\r\\n   ACCT\\*   EPRT    MODE    MSND\\*   REST    XCWD    HELP    PWD     MDTM \\r\\n   SMNT\\*   PASV    RETR    MSOM\\*   RNFR    LIST    NOOP    XPWD \\r\\n   REIN\\*   LPSV    STOR    MSAM\\*   RNTO    NLST    MKD     CDUP \\r\\n   QUIT    EPSV    APPE    MRSQ\\*   ABOR    SITE    XMKD    XCUP \\r\\n214 End\\.\\r\\n| p/FreeBSD ftpd/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\nmatch ftp m|^220 .*\\r\\n214-CesarFTP server ([\\w.]+) supports the following commands:\\r\\n| p/ACLogic CesarFTPd/ v/$1/ o/Windows/ cpe:/a:aclogic:cesarftpd:$1/ cpe:/o:microsoft:windows/\nmatch ftp m|^220 Private ftp server, anonymous login not allowed\\.\\r\\n214-The following commands are recognized:\\r\\n   USER   PASS   QUIT   CWD    PWD    PORT   PASV   TYPE\\r\\n   LIST   REST   CDUP   RETR   STOR   SIZE   DELE   RMD \\r\\n   MKD    RNFR   RNTO   ABOR   SYST   NOOP   APPE   NLST\\r\\n   MDTM   XPWD   XCUP   XMKD   XRMD   NOP    EPSV   EPRT\\r\\n   AUTH   ADAT   PBSZ   PROT   FEAT   MODE   OPTS   HELP\\r\\n214 Have a nice day\\.\\r\\n| p/FileZilla ftpd/ i/No anon login/ o/Windows/ cpe:/a:filezilla-project:filezilla_server:ftpd/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220.*\\r\\n214-The following commands are recognized:\\r\\n   USER   PASS   QUIT   CWD    PWD    PORT   PASV   TYPE\\r\\n   LIST   REST   CDUP   RETR   STOR   SIZE   DELE   RMD \\r\\n   MKD    RNFR   RNTO   ABOR   SYST   NOOP   APPE   NLST\\r\\n   MDTM   XPWD   XCUP   XMKD   XRMD   NOP    EPSV   EPRT\\r\\n   AUTH   ADAT   PBSZ   PROT   FEAT   MODE   OPTS   HELP\\r\\n   ALLO   MLST   MLSD\\r\\n214 Have a nice day\\.\\r\\n| p/FileZilla ftpd/ o/Windows/ cpe:/a:filezilla-project:filezilla_server/ cpe:/o:microsoft:windows/a\n# OpenVMS 7.3-1\nmatch ftp m|^220 ([-\\w_.]+) FTP Server \\(Version ([\\d.]+)\\) Ready\\.\\r\\n214-The following commands are recognized:\\r\\n   USER    TYPE    RETR    RNFR    NLST    PWD     ALLO    EPSV \\r\\n   PASS    STRU    STOR    RNTO    CWD     CDUP    SYST    QUIT \\r\\n   SITE    PORT    STOU    DELE    MKD     NOOP    STAT    HELP \\r\\n   MODE    EPRT    APPE    LIST    RMD     ABOR    PASV \\r\\n214 End of Help\\.\\r\\n| p/OpenVMS ftpd/ v/$2/ h/$1/\nmatch ftp m|^220 SMTP service ready\\r\\n214-Commands:\\r\\r\\n214-\\tDATA\\tRCPT\\tMAIL\\tQUIT\\tRSET\\r\\r\\n214 \\tHELO\\tVRFY\\tEXPN\\tHELP\\tNOOP\\r\\n| p/WatchGuard Firebox II firewall ftpd/ d/firewall/\n\nmatch ftp m|^220 Speak friend, and enter\\r\\n214-\\r\\n  ftpd\\.bin - Round-robin File Transfer Server, version ([\\w.]+)\\r\\n| p/ftpd.bin round-robin file server/ v/$1/\nmatch ftp m|^220 FTP server ready\\.  \\r\\n214-Ethernet Interface\\r\\n    \\r\\n    To access help, cd to the help directory then enter a \\\"dir\\\" command\\.\\r\\n    \\r\\n    \\r\\n| p|QMS/Minolta Magicolor 2200 DeskLaser printer ftpd| d/printer/\nmatch ftp m|^220 FTPU ready\\.\\r\\n500 Sorry, no such command\\.\\r\\n| p/Netgear DG632 router ftpd/ d/router/ cpe:/h:netgear:dg632/a\nmatch ftp m|^220 ([-\\w_.]+) FTP server \\(UNIX_SV ([\\d.]+)\\) ready\\.\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n   USER    PORT    STOR    MSAM\\*   RNTO    NLST    MKD     CDUP \\r\\n   PASS    PASV    APPE    MRSQ\\*   ABOR    SITE    XMKD    XCUP \\r\\n   ACCT\\*   TYPE    MLFL\\*   MRCP\\*   DELE    SYST    RMD     STOU \\r\\n   SMNT\\*   STRU    MAIL\\*   ALLO    CWD     STAT    XRMD    SIZE \\r\\n   REIN\\*   MODE    MSND\\*   REST    XCWD    HELP    PWD     MDTM \\r\\n   QUIT    RETR    MSOM\\*   RNFR    LIST    NOOP    XPWD \\r\\n| p/WU-FTPd/ i/UNIX_SV $2/ o/Unix/ h/$1/ cpe:/a:redhat:wu_ftpd/\nmatch ftp m|^220 server ready\\r\\n530 Please login with USER and PASS\\r\\n$| p/Extreme FTPd/\nmatch ftp m|^220 FTP server ready\\.\\r\\n502 Command not implemented\\.\\r\\n$| p/Aruba router ftpd/ d/router/\nmatch ftp m|^220 Type 'site help' or 'quote site help'\\.\\r\\n220-| p/RaidenFTPd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220-\\r\\n220 Features p a \\.\\r\\n214 Please refer to FTP documentation\\.\\r\\n| p/Sami ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 FTP server at \\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3} ready\\.\\r\\n503 USER expected\\.\\r\\n| p/Linksys NSLU2 ftpd/ d/storage-misc/ cpe:/h:linksys:nslu2/\nmatch ftp m|^220[ -].*\\r\\n214-The following commands are recognized:\\r\\n.*\\r\\n214 Have a nice day\\.\\r\\n|s p/FileZilla ftpd/ o/Windows/ cpe:/a:filezilla-project:filezilla_server/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 ([-\\w_.]+)\\r\\n214-The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n.*\\r\\n214 Direct comments to|s p/ProFTPD/ h/$1/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220 Please enter your login name now\\.\\r\\n502 help is not implemented\\.\\r\\n| p/EvolutionX ftpd/ d/game console/\nmatch ftp m|^220[ -].*\\r\\n550 SSL/TLS required on the control channel\\r\\n|s p/ProFTPD/ i/requires SSL/ cpe:/a:proftpd:proftpd/a\nmatch ftp m|^220 FTP server ready\\r\\n214-The following commands are recognized:\\r\\nHELP\\tUSER\\tPASS\\tQUIT\\tLIST\\tNLST\\r\\nRETR\\tSTOR\\tCWD\\tTYPE\\tPORT\\tPWD\\r\\nSTRU\\tMODE\\tALLO\\tACCT\\tPASV\\tNOOP\\r\\nDELE\\tEPRT\\tEPSV\\r\\n214 End of command list\\.\\r\\n| p|TopLayer/Alcatel ftpd|\nmatch ftp m|^220.*This site is running NcFTPd Server software|s p/NcFTPd/\nmatch ftp m|^220 Connection established\\.\\r\\n214-The following commands are supported:\\r\\n\\tUSER\\tPORT\\tTYPE\\tABOR\\tCWD \\tLIST\\r\\n\\tPASS\\tPASV\\tSTRU\\tPWD \\tXCWD\\tNLST\\r\\n\\tQUIT\\tSTOR\\tRETR\\tMODE\\tXPWD\\tNOOP\\r\\n\\tHELP\\r\\n214 \\r\\n| p/Canon imageRUNNER 570 printer ftpd/ d/printer/ cpe:/h:canon:imagerunner_570/\nmatch ftp m|^220 ([\\w._-]+) (?:Ver )([\\w._-]+) FTP server\\.\\r\\n214- FTPD supported commands\\(RFC959 subset\\):\\r\\n| p/Kyocera $1 printer ftpd/ v/$2/ d/printer/ cpe:/h:kyocera:$1/a\nmatch ftp m|^220 ADP LaserStatio FTP server\\.\\r\\n214- FTPD supported commands\\(RFC959 subset\\):\\r\\n| p/Kyocera LaserStation 1940 printer ftpd/ d/printer/ cpe:/h:kyocera:laserstation_1940/a\nmatch ftp m|^220 ([\\w._ -]+) FTP server\\.\\r\\n214- FTPD supported commands\\(RFC959 subset\\):\\r\\n| p/Kyocera $1 printer ftpd/ d/printer/ cpe:/h:kyocera:$1/a\nmatch ftp m|^220.Welcome to ([-\\w_.]+)\\r\\n214-The following SITE commands are recognized\\r\\n.*214 Pure-FTPd - http://pureftpd\\.org/?\\r\\n|s p/Pure-FTPd/ h/$1/ cpe:/a:pureftpd:pure-ftpd/\nmatch ftp m|^214-The following SITE commands are recognized\\r\\n.*214 Pure-FTPd - http://pureftpd\\.org/\\r\\n|s p/Pure-FTPd/ cpe:/a:pureftpd:pure-ftpd/\nmatch ftp m|^220.*214 Pure-FTPd - http://pureftpd\\.org/?\\r\\n|s p/Pure-FTPd/ cpe:/a:pureftpd:pure-ftpd/\nmatch ftp m|^220 Welcome to the update FTP server v1\\.0\\.\\r\\n502 'HELP' command not implemented\\.\\r\\n| p/Netcomm V300 VoIP adapter update ftpd/ d/VoIP adapter/ cpe:/h:netcomm:v300/a\nmatch ftp m|^220 Connection established\\.\\r\\n214-The following commands are supported:\\r\\n\\tUSER\\tPORT\\tTYPE\\tABOR\\tCWD \\tLIST\\r\\n| p/Canon imageRUNNER printer ftpd/ d/printer/\nmatch ftp m|^220 Ftp firmware update utility\\r\\n500 Unknown command: \\\"HELP\\\"\\r\\n| p|Belkin/BT/D-Link/Gigaset broadband router ftp firmware update| d/broadband router/\nmatch ftp m|^220 FTP Server Ready\\r\\n.*\\r\\n214 Direct comments to psp@amoks\\.com\\.\\r\\n|s p/Amoks PlayStation Portable ftpd/ d/game console/\nmatch ftp m|^220 FTP server ready\\r\\n211 HELP text\\r\\n| p/Alfresco Document Management System ftpd/\nmatch ftp m|^220 FTP Server Ready\\r\\n500 Unknown cmd HELP\\r\\n| p/Optus Speedstream 4200 ADSL router ftpd/ d/router/\nmatch ftp m|^214-The following commands are recognized \\(\\* => unimplemented\\.\\)\\r\\n.*\\r\\n214 Direct comments to support@arcanesoft\\.com\\.\\r\\n|s p/Arcanesoft Vermillion ftpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ftp m|^220 Connection established\\.\\r\\n214-The following commands are supported\\.\\r\\n    USER    PORT    TYPE    ABOR    CWD     LIST\\r\\n    PASS    PASV    STRU    PWD     XCWD    NLST\\r\\n    QUIT    STOR    MODE    XPWD    NOOP    HELP\\r\\n214 End of HELP\\r\\n| p/Canon iPF6100 printer ftpd/ d/printer/ cpe:/h:canon:ipf6100/a\nmatch ftp m|^200 1500\\r\\nf\\0\\x18\\0\\0\\0x\\xda\\x0b\\xcd\\xcb\\xce\\xcb/\\xcfSH\\xce\\xcf\\xcdM\\xccK\\xd1\\x03\\x005\\x93\\x06\\x1e| p/Gene6 ftpd/\nmatch ftp m|^220 Welcome to connection\\.\\r\\n214 FTP Server Help\\.\\r\\n  HUMAX PVR FTP Server\\. \\r\\n214 End\\r\\n| p/Humax iHDR-5050C DVR ftpd/ d/media device/\nmatch ftp m|^220 Service ready for new user\\r\\n214-The following commands are recognized\\r\\n   ABOR\\r\\n   ALLO\\r\\n   APPE\\r\\n   CDUP\\r\\n   CWD\\r\\n   DELE\\r\\n   LIST\\r\\n   MKD\\r\\n   MODE\\r\\n   NLST\\r\\n   NOOP\\r\\n   PASS\\r\\n   PORT\\r\\n   PWD\\r\\n   QUIT\\r\\n   RETR\\r\\n   RMD\\r\\n   RNFR\\r\\n   RNTO\\r\\n   SIZE\\r\\n   SMNT\\r\\n   STOR\\r\\n   STRU\\r\\n   SYST\\r\\n   TYPE\\r\\n   USER\\r\\n   XCUP\\r\\n   XCWD\\r\\n   XMKD\\r\\n   XPWD\\r\\n   XRMD\\r\\n214 HELP command successful\\r\\n| p/Lumetrix Imaging Photometer ftpd/\nmatch ftp m|^220 ([\\w._-]+) FTP server ready\\.\\r\\n214-\\r\\n    The following commands are recognized\\.\\r\\n    \\(${backquote}-' = not implemented, ${backquote}\\+' = supports options\\)\\r\\n    USER    REIN-   TYPE    ALLO    MKD     HELP    MIC     MLST\\+   MSND-\\r\\n    PASS    PORT    STRU    REST    PWD     NOOP\\+   CONF    MLSD    MSOM-\\r\\n    ACCT-   LPRT    MODE    RNFR    LIST    AUTH    ENC     MAIL-   XCUP\\r\\n    CWD     EPRT    RETR    RNTO    NLST    ADAT    FEAT    MLFL-   XCWD\\r\\n    CDUP    PASV    STOR    ABOR    SITE    PROT    OPTS    MRCP-   XMKD\\r\\n    SMNT-   LPSV    STOU    DELE    SYST    PBSZ    MDTM    MRSQ-   XPWD\\r\\n    QUIT    EPSV    APPE    RMD     STAT    CCC     SIZE    MSAM-   XRMD\\r\\n214 Direct comments to ftp-bugs@| p/QNX ftpd/ v/$1/ o/QNX/ cpe:/o:qnx:qnx/a\n# DS210j, DS207+\nmatch ftp m|^220 ([\\w._-]+) FTP server ready\\.\\r\\n214- The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n   USER    LPRT    MODE    MSOM\\*   RNTO    SITE    RMD     SIZE    PROT \\r\\n   PASS    EPRT    RETR    MSAM\\*   ABOR    SYST    XRMD    MDTM \\r\\n   ACCT\\*   PASV    STOR    MRSQ\\*   DELE    STAT    PWD     MFMT \\r\\n   SMNT\\*   LPSV    APPE    MRCP\\*   CWD     HELP    XPWD    FEAT \\r\\n   REIN\\*   EPSV    MLFL\\*   ALLO    XCWD    NOOP    CDUP    OPTS \\r\\n   QUIT    TYPE    MAIL\\*   REST    LIST    MKD     XCUP    AUTH \\r\\n   PORT    STRU    MSND\\*   RNFR    NLST    XMKD    STOU    PBSZ \\r\\n214 Direct comments to ftp-bugs@| p/Synology DS200-series NAS device ftpd/ d/storage-misc/ h/$1/\n# DSM 5.2-5644 Update 5\nmatch ftp m|^220 ([\\w._-]+) FTP server ready\\.\\r\\n214- The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n   USER    LPRT    MODE    MSOM\\*   RNTO    SITE    RMD     SIZE    AUTH \\r\\n   PASS    EPRT    RETR    MSAM\\*   ABOR    SYST    XRMD    MDTM    PBSZ \\r\\n   ACCT\\*   PASV    STOR    MRSQ\\*   DELE    STAT    PWD     MFMT    PROT \\r\\n   SMNT\\*   LPSV    APPE    MRCP\\*   CWD     HELP    XPWD    MLSD \\r\\n   REIN\\*   EPSV    MLFL\\*   ALLO    XCWD    NOOP    CDUP    MLST \\r\\n   QUIT    TYPE    MAIL\\*   REST    LIST    MKD     XCUP    FEAT \\r\\n   PORT    STRU    MSND\\*   RNFR    NLST    XMKD    STOU    OPTS \\r\\n214 Direct comments to ftp-bugs@| p/Synology DiskStation Manager 5.2 ftpd/ d/storage-misc/ h/$1/ cpe:/a:synology:diskstation_manager:5.2/\nmatch ftp m|^220 Hi there!\\r\\n214-This is gatling \\(www\\.fefe\\.de/gatling/\\); No help available\\.\\r\\n214 See http://cr\\.yp\\.to/ftp\\.html for FTP help\\.\\r\\n| p/gatling ftpd/\nmatch ftp m|^220 Service ready for new user\\r\\n214-The following commands are implemented\\.\\r\\nABOR  APPE  CDUP  CWD   DELE  HELP  LIST  MDTM\\r\\nMKD   MODE  NLST  NOOP  PASS  PASV  PORT  PWD\\r\\nQUIT  REST  RETR  RMD   RNFR  RNTO  SITE  SIZE\\r\\nSTAT  STOR  STOU  STRU  SYST  TYPE  USER\\r\\n214 End of help\\r\\n| p/Cisco Wireless Control System ftpd/ cpe:/h:cisco:wireless_control_system/\nmatch ftp m|^220 Operation successful\\r\\n214-Features:\\r\\n EPSV\\r\\n PASV\\r\\n REST STREAM\\r\\n MDTM\\r\\n SIZE\\r\\n214 Ok\\r\\n| p/BusyBox ftpd/ cpe:/a:busybox:busybox/\nmatch ftp m|^220-Rival Group FTP Server\\r\\n220-Unauthorized access prohibited\\r\\n220 All activity is logged\\.\\r\\n214-CesarFTP server ([\\w._-]+) supports the following commands:\\r\\n214-ABOR ACCT ALLO APPE CDUP CWD  DELE HELP LIST\\r\\n214-MDTM MKD  MODE NLST NOOP PASS PASV PORT PWD \\r\\n214-QUIT REIN REST RETR RMD  RNFR RNTO SITE SMNT\\r\\n214-STAT STOR STOU STRU SYST TYPE\\r\\n214-\\r\\n214-CesarFTP server [\\w._-]+ supports specific commands\\r\\n214-invoked with the SITE command:\\r\\n214-\\r\\n214-SITE MSG\\r\\n214-\\r\\n214 \\r\\n| p/ACLogic CesarFTP/ v/$1/ o/Windows/ cpe:/a:aclogic:cesarftpd:$1/ cpe:/o:microsoft:windows/\nmatch ftp m|^220 pyftpdlib ([\\w._-]+) ready\\.\\r\\n214-The following commands are recognized:\\r\\n ABOR   ALLO   APPE   CDUP   CWD    DELE   EPRT   EPSV  \\r\\n FEAT   HELP   LIST   MDTM   MKD    MLSD   MLST   MODE  \\r\\n NLST   NOOP   OPTS   PASS   PASV   PORT   PWD    QUIT  \\r\\n REIN   REST   RETR   RMD    RNFR   RNTO   SIZE   STAT  \\r\\n STOR   STOU   STRU   SYST   TYPE   USER   XCUP   XCWD  \\r\\n XMKD   XPWD   XRMD  \\r\\n214 Help command successful\\.\\r\\n$| p/pyftpdlib/ v/$1/\n# CANOPY Motorola Broadband Wireless Technology Center\nmatch ftp m|^220 Service ready\\r\\n500 Unsupported command\\r\\n| p/Motorola Canopy WAP ftpd/ d/WAP/\nmatch ftp m|^220 FTP server ready\\r\\n214-The following commands are recognized:\\r\\nHELP\\tUSER\\tPASS\\tQUIT\\tLIST\\tNLST\\nRETR\\tSTOR\\tCWD\\tTYPE\\tPORT\\tPWD\\nSTRU\\tMODE\\tALLO\\tACCT\\tPASV\\tNOOP\\nDELE\\n214 End of command list\\.\\r\\n| p/Nortel CES1010E router ftpd/ d/router/ cpe:/h:nortel:ces1010e/\nmatch ftp m|^220 FTP server ready\\.\\r\\n214-The following commands are recognized:\\r\\nHELP\\tUSER\\tPASS\\tQUIT\\tLIST\\tNLST\\tCDUP\\r\\nRETR\\tSTOR\\tCWD\\tTYPE\\tPORT\\tPWD\\tXCUP\\r\\nSTRU\\tMODE\\tXCWD\\tALLO\\tACCT\\tXPWD\\tPASV\\r\\nNOOP\\tSYST\\r\\n214 End of command list\\.\\r\\n| p/Alcatel Litespan-2000 PBX ftpd/ d/PBX/ cpe:/h:alcatel:litespan-2000/\nmatch ftp m|^220 Opto 22 FTP server ready\\.\\r\\n502 HELP command not implemented, or not allowed\\.\\r\\n| p/Opto 22 ftpd/\n\n# Before version 2.0.8, vsftpd outputs the \"Please login\" lines in response to\n# blank lines, which is caught under GenericLines above.\" In 2.0.8 and after,\n# it ignores blank lines.\nmatch ftp m|^(?:220-.*\\r\\n)?220 .*\\r\\n530 Please login with USER and PASS\\.\\r\\n|s p/vsftpd/ v/2.0.8 or later/ cpe:/a:vsftpd:vsftpd/\nmatch ftp m|^220 FTP server ready\\.\\r\\n214- The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n   USER    REIN\\*   MODE    REST\\*   MKD     STAT\\*   EPSV    MRSQ\\*   XCUP \\r\\n   PASS    QUIT    RETR    RNFR    PWD     HELP    MLFL\\*   MRCP\\*   SIZE \\r\\n   ACCT\\*   PORT    STOR    RNTO    LIST    NOOP    MAIL\\*   XCWD    MDTM\\*\\r\\n   CWD     PASV    STOU\\*   ABOR    NLST    LPRT    MSND\\*   XMKD    FEAT\\*\\r\\n   CDUP    TYPE    APPE\\*   DELE    SITE\\*   LPSV    MSOM\\*   XRMD    OPTS\\*\\r\\n   SMNT\\*   STRU    ALLO\\*   RMD     SYST\\*   EPRT    MSAM\\*   XPWD \\r\\n214 End\\.\\r\\n| p/Panasonic AW-HE50 HD Integrated camera ftpd/ d/webcam/ cpe:/h:panasonic:aw-he50/\nmatch ftp m|^220 ftp server ready\\r\\n502 Command not recognized\\r\\n| p/Ice Cold Apps FTP Server Ultimate/ o/Android/ cpe:/a:icecoldapps:ftp_server_ultimate/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch ftp m|^220 FTP server ready\\r\\n500 Invalid command HELP \\r\\n| p/DeviceWISE M2M ftpd/ cpe:/a:telit:devicewise_m2m/\nmatch ftp m|^220 FTP server ready\\.\\r\\n214- The following commands are recognized \\(\\* =>'s unimplemented\\)\\.\\r\\n   USER    PORT    TYPE    MLFL\\*   MRCP\\*   DELE    SYST    XMKD    XCUP \\r\\n   PASS    LPRT    STRU    MAIL\\*   ALLO    CWD     FEAT    RMD     STOU \\r\\n   ACCT\\*   EPRT    MODE    MSND\\*   REST    XCWD    STAT    XRMD    SIZE \\r\\n   SMNT\\*   PASV    RETR    MSOM\\*   RNFR    LIST    HELP    PWD     MDTM \\r\\n   REIN\\*   LPSV    STOR    MSAM\\*   RNTO    NLST    NOOP    XPWD \\r\\n   QUIT    EPSV    APPE    MRSQ\\*   ABOR    SITE    MKD     CDUP \\r\\n214 End\\.\\r\\n| p/FreeBSD ftpd/ v/6.00LS/\nmatch ftp m|^220 .*\\r\\n550 Command not recognized or allowed\\.\\r\\n$| p/CrushFTP ftpd/ cpe:/a:crushftp:crushftp/\nmatch ftp m|^220 .*\\r\\n214-The following commands are recognized \\(\\* ==>'s unimplemented\\)\\.\\r\\n    ABOR \\r\\n    ACCT \\r\\n    ADAT \\*\\r\\n    ALLO \\r\\n    APPE \\r\\n    AUTH \\r\\n    CCC \\r\\n    CDUP \\r\\n    CWD \\r\\n    DELE \\r\\n    ENC \\*\\r\\n    EPRT \\r\\n    EPSV \\r\\n    FEAT \\r\\n    HELP \\r\\n    HOST \\r\\n    LANG \\r\\n    LIST \\r\\n    MDTM \\r\\n    MIC \\*\\r\\n    MKD \\r\\n    MODE \\r\\n    NLST \\r\\n    NOOP \\r\\n    OPTS \\r\\n    PASS \\r\\n    PASV \\r\\n    PBSZ \\r\\n    PORT \\r\\n    PROT \\r\\n    PWD \\r\\n    QUIT \\r\\n    REIN \\r\\n    REST \\r\\n    RETR \\r\\n    RMD \\r\\n    RNFR \\r\\n    RNTO \\r\\n    SITE \\r\\n    SIZE \\r\\n    SMNT \\r\\n    STAT \\r\\n    STOR \\r\\n    STOU \\r\\n    STRU \\r\\n    SYST \\r\\n    TYPE \\r\\n    USER \\r\\n    XCUP \\r\\n    XCWD \\r\\n    XMKD \\r\\n    XPWD \\r\\n    XRMD \\r\\n214 HELP command successful\\.\\r\\n| p/IIS ftpd/ v/7/ o/Windows/ cpe:/a:microsoft:internet_information_services:7/ cpe:/o:microsoft:windows/a\n\nmatch ftp-proxy m|^220 Service Ready\\r\\n502 Command Not implemented\\r\\n$| p/Novell iChain ftp proxy/ cpe:/a:novell:ichain/\n\nmatch finger m|^iFinger v(\\d[-.\\w]+)\\n\\n| p/IcculusFinger/ v/$1/\nmatch finger m|^\\n    ----------------------------------------------------------------------\\n                        Sorry, that user doesn't exist\\.\\n| p/Stock and Trade Finger Server fingerd/\n\nmatch freenet m|^HTTP/1\\.1 400 Parse error: Could not parse request line \\(split\\.length=1\\): HELP\\r\\n| p/Freenet/\n\n# http://www.gdsatcom.com/cte_r8000b.php\nmatch gd-comm m|^0:HELP command \\[SET, GET,GO, DO, \\*IDN\\?, ERR\\?, CLEAR, HELP\\] -or- HELP Tag; HELP Tag will provide detailed formatted information for the field requested\\.  Refer to the Programmer's Guide for more details\\.\\r\\n| p/General Dynamics R8000 Communications System Analyzer control/ d/specialized/ cpe:/h:generaldynamics:r8000/\n\nmatch gnuserv m|^gnudoit: Connection refused\\ngnudoit: unable to connect to remote$| p/Gnuserv/\n\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"esecsrva\\\"\\r\\n\\r\\n$| p/IBM Director wmicimserver httpd/ cpe:/a:ibm:director/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"ANLYX2\\\"\\r\\n\\r\\n$| p/IBM Director wmicimserver httpd/ cpe:/a:ibm:director/\n\n# Dell OpenManage 5.2 (File Version: 3.2.0.364) likes to throw exceptions...\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nConnection: Close\\r\\nContent-Type: text/html\\r\\n.*<p>java\\.lang\\.Exception: Invalid request: HELP</p>|s p/Dell PowerEdge OpenManage Server Administrator httpd/ o/Windows/ cpe:/a:dell:openmanage_server_administrator/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\n\\r\\nGET /bst/disconnect HTTP/1\\.1\\r\\nHost: ([\\w._-]+)\\r\\nUser-Agent: DragonFly Storm \\(Client; Protocol (\\d+)\\)\\r\\nConnection: close\\r\\n\\r\\n| p/DragonFly Storm httpd/ i/Protocol $2/ h/$1/\nmatch http m|^HTTP/1\\.1 400 Page not found\\r\\nServer: GoAhead-Webs\\r\\nDate: .*\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Document Error: Page not found</title></head>\\r\\n\\t\\t<body><h2>Access Error: Page not found</h2>\\r\\n\\t\\t<p>Bad request type</p></body></html>\\r\\n\\r\\n| p/GoAhead WebServer/ i/TRENDnet TEW-637AP WAP http config/ d/WAP/ cpe:/a:goahead:goahead_webserver/ cpe:/h:trendnet:tew-637ap/a\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nServer: RealVNC/([-.\\w]+)\\r\\nDate: Mon, 27 Jul 2009 08:06:03 GMT\\r\\nLast-Modified: Mon, 27 Jul 2009 08:06:03 GMT\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n| p/RealVNC/ v/$1/ i/unauthorized/ cpe:/a:realvnc:realvnc:$1/\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: httpd\\r\\n.*<HTML>\\n<HEAD>\\n<TITLE>400 Bad Request</TITLE>\\n<script language=\\\"javascript\\\">\\n<!--\\n\\tvar xmlhttp = false;.*<BODY BGCOLOR=\\\"#cc9999\\\">\\n<H4>400 Bad Request</H4>\\n<script language=\\\"javascript\\\">\\n<!--\\n\\tif\\(xmlhttp\\) {\\n\\t\\talert\\('Unauthorizationed'\\);|s p/Linksys 4400N WAP http config/ d/WAP/ cpe:/h:linksys:4400n/a\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: httpd\\r\\n.*<HTML>\\n<HEAD>\\n<TITLE>400 Bad Request</TITLE>\\n<script language=\\\"javascript\\\">\\n<!--\\n\\tvar xmlhttp = false;.*<BODY BGCOLOR=\\\"#cc9999\\\">\\n<H4>400 Bad Request</H4>\\n<script language=\\\"javascript\\\">\\n<!--\\n\\tif\\(xmlhttp\\) {\\n  \\t\\talert\\('Unauthorizationed'\\);|s p/Cisco WAP2000 WAP http config/ d/WAP/ cpe:/h:cisco:wap2000/a\nmatch http m|^HTTP/0\\.9 400 Bad Request\\r\\n\\r\\n$| p/Ganeti httpd/ cpe:/a:ganeti_project:ganeti/\nmatch http m|^UnknownMethod 400 Bad Request\\r\\nServer: httpd\\r\\nDate: .*\\r\\nConnection: keep-alive\\r\\nKeep-Alive: timeout=60, max=2000\\r\\nContent-Type: text/html\\r\\nContent-length: 130\\r\\n\\r\\n<HTML><HEAD><TITLE>Document Error: Bad Request</TITLE></HEAD>\\r\\n<BODY><H2>Access Error: 400 -- Bad Request</H2>\\r\\n</BODY></HTML>\\r\\n\\r\\n| p/Mbedthis-Appweb/ i/Dell iDRAC6 http config/ d/remote management/ cpe:/a:mbedthis:appweb/ cpe:/h:dell:idrac6/\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nContent-Type: text/plain; charset=UTF-8\\r\\n\\r\\nFailure: 500 Internal Server Error\\r\\n$| p/PS3 Media Server httpd/\nmatch http m|^HTTP/1\\.1 200 Ignoring bad request from client\\r\\nServer: Lotus Expeditor Web Container/([\\d.]+)\\r\\nContent-Type: text/html\\r\\nContent-Length: 122\\r\\n\\r\\n<HTML><TITLE>200 Ignoring bad request from client</TITLE><BODY><h1>200 Ignoring bad request from client</h1></BODY></HTML>| p/Lotus Expeditor Web Container/ v/$1/ cpe:/a:ibm:lotus_expeditor:$1/\nmatch http m|^HTTP/1\\.1 200 Ignoring bad request from client\\r\\nServer: Lotus Expeditor Web Container\\r\\nContent-Type: text/html\\r\\nContent-Length: 122\\r\\n\\r\\n<HTML><TITLE>200 Ignoring bad request from client</TITLE><BODY><h1>200 Ignoring bad request from client</h1></BODY></HTML>| p/Lotus Expeditor Web Container/ cpe:/a:ibm:lotus_expeditor/\n# Switched from HTTP 1.0 to 1.1 in 516a5825 (3.6.0)\nmatch http m|^HTTP/1\\.0 400 Bad Request \\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\n\\r\\nBAD REQUEST: Missing URI\\. Usage: GET /example/file\\.html$| p/Bukkit JSONAPI httpd for Minecraft game server/ v/3.6.0 or older/\nmatch http m|^HTTP/1\\.1 400 Bad Request \\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\n\\r\\nBAD REQUEST: Missing URI\\. Usage: GET /example/file\\.html$| p/Bukkit JSONAPI httpd for Minecraft game server/ v/3.6.0 or later/\nmatch http m|^INV 501 Not Implemented\\r\\nDate: .*\\r\\nServer: Intel\\(R\\) Small Business Technology ([\\w._-]+)\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Intel Small Business Technology Platform/ v/$1/ d/remote management/ cpe:/a:intel:small_business_technology_platform:$1/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .* GMT\\r\\nConnection: close\\r\\nServer: blaze\\r\\n\\r\\n$| p/Cisco CSP Collector/ cpe:/a:cisco:common_services_platform_collector/\n# 6.2.Alpha\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Length: 40\\r\\nContent-Type: text/html\\r\\n\\r\\n<h1>400 Bad Request</h1>Bad request line| p/JBoss Enterprise Application Platform/ cpe:/a:redhat:jboss_enterprise_application_platform/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nServer: PhpStorm ([\\w._-]+)\\r\\n| p/PhpStorm IDE httpd/ v/$1/ cpe:/a:jetbrains:phpstorm:$1/\nmatch http m|^<html><head><title>Metasploitable2 - Linux</title></head><body>\\n<pre>| p/Metasploitable 2 welcome page/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^<HTML><HEAD></HEAD><BODY>HTTP Error: 400</BODY></HTML>\\n\\n| p/FortiWifi 60CM wireless security appliance httpd/ cpe:/h:fortinet:fortiwifi_60cm/\nmatch http m|^HTTP/1\\.1 400 Bad Request - Request Line: HELP tokens\\.length 1\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n| p/MobileIron Sentry/ cpe:/a:mobileiron:mobileiron_sentry/\n\n# Seen a couple times for just Help probe... -Doug\nmatch http-proxy m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-store\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nX-Bypass-Cache: Application and Content Networking System Software ([\\d.]+)\\r\\n| p/Cisco ACNS outbound proxying/ v/$1/ cpe:/a:cisco:application_and_content_networking_system_software:$1/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Warning: Non-HTTP Protocol</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ cpe:/a:i2p_project:i2p/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Warnung: Kein HTTP Protokoll</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/German/ cpe:/a:i2p_project:i2p::::de/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Advertencia: Protocolo no HTTP</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/Spanish/ cpe:/a:i2p_project:i2p::::es/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Avertissement : protocole non HTTP</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/French/ cpe:/a:i2p_project:i2p::::fr/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Peringatan: Protokol Non-HTTP</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/Indonesian/ cpe:/a:i2p_project:i2p::::id/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Waarschuwing: non-HTTP protocol</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/Dutch/ cpe:/a:i2p_project:i2p::::nl/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Ostrzeżenie: protokół inny niż HTTP</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/Polish/ cpe:/a:i2p_project:i2p::::pl/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Aviso: Protocolo não-HTTP</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/Brazilian Portuguese/ cpe:/a:i2p_project:i2p::::pt_br/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Aviso: Protocolo fora do padrão HTTP</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/Portuguese/ cpe:/a:i2p_project:i2p::::pt/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Atenție: protocolul Non-HTTP</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/Romanian/ cpe:/a:i2p_project:i2p::::ro/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Предупреждение: Протокол не HTTP</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/Russian/ cpe:/a:i2p_project:i2p::::ru/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?Varning: Ej HTTP Protokoll</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/Swedish/ cpe:/a:i2p_project:i2p::::sv/\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\n.*<title>(?:I2P )?警告：非 HTTP 协议</title>\\r\\n<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\" ?>\\r\\n|s p/I2P anonymizing http proxy/ i/Chinese/ cpe:/a:i2p_project:i2p::::zh/\n# Also saw Russian-language, so this should catch it:\nmatch http-proxy m|^HTTP/1\\.1 403 Bad Protocol\\r\\nContent-Type: text/html; charset=UTF-8\\r\\nCache-control: no-cache\\r\\nConnection: close\\r\\nProxy-Connection: close\\r\\n\\r\\n.*<link rel=\\\"shortcut icon\\\" href=\\\"http://proxy\\.i2p/themes/console/images/favicon\\.ico\\\"|s p/I2P anonymizing http proxy/\nmatch http-proxy m|^HTTP/1\\.0 503\\r\\nServer: Charles\\r\\n| p/Charles http proxy/\nmatch http-proxy m|^ 400 badrequest\\r\\n.*<title>McAfee Web Gateway - Notification - </title>|s p/McAfee Web Gateway http proxy/ d/proxy server/ cpe:/a:mcafee:web_gateway/\nmatch http-proxy m|^<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4\\.01 Transitional//EN\" \"http://www\\.w3\\.org/TR/html4/loose\\.dtd\">\\n<HTML><HEAD>\\n<META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=utf-8\"> \\n<TITLE>\\xe9\\x94\\x99\\xe8\\xaf\\xaf\\xef\\xbc\\x9a\\xe6\\x82\\xa8\\xe6\\x89\\x80\\xe8\\xaf\\xb7\\xe6\\xb1\\x82\\xe7\\x9a\\x84\\xe7\\xbd\\x91\\xe5\\x9d\\x80\\xef\\xbc\\x88URL\\xef\\xbc\\x89\\xe6\\x97\\xa0\\xe6\\xb3\\x95\\xe8\\x8e\\xb7\\xe5\\x8f\\x96</TITLE>\\n<STYLE type=\"text/css\"><!--BODY\\{background-color:#ffffff;font-family:verdana,sans-serif\\}PRE\\{font-family:sans-serif\\}--></STYLE>\\n</HEAD>| p/Squid/ i/Chinese/ cpe:/a:squid-cache:squid::::zh/\n\nmatch ident m|^0 , 0 : ERROR : UNKNOWN-ERROR\\r\\n$| p/WatchGuard Firebox firewall identd/ d/firewall/\nmatch ident m|^HELP : USERID : UNIX : trilluser\\r\\n$| p/Trillian identd/ cpe:/a:trillian:trillian/\nmatch ident m|^HELP : USERID : UNIX : ([-\\w_.]+)\\r\\n$| p/Trillian identd/ i/Name $1/ cpe:/a:trillian:trillian/\n# Internet Rex v2.29\nmatch ident m|^\\d+, \\d+ : USERID : UNIX : [-.@\\w]+\\r\\n| p/Internet Rex identd/\nmatch ident m|^0, 0 : ERROR : UNKNOWN-ERROR$| p/Windows NT identd/ o/Windows/ cpe:/o:microsoft:windows_nt/a\n\nmatch ipp m|^HTTP/1\\.1 405 Method Not Allowed\\r\\nContent-Length: 23\\r\\nContent-Type: text/html\\r\\nUpgrade: TLS/1\\.0\\r\\n\\r\\n 405 Method Not Allowed| p/Ecosys ipp/ d/print server/\n\n# IRCNet ircd\nmatch irc m|^:([-\\w_.]+) 451 \\* :You have not registered\\r\\n$| p/IRCnet-based ircd/ h/$1/\nmatch irc m|^:([-\\w_.]+) 020 \\* :.*\\r\\n:[-\\w_.]+ 451 \\* :You have not registered\\r\\n| p/IRCnet-based ircd/ h/$1/\n\n# ircu\nmatch irc m|^:([-\\w_.]+) 451 \\*  :Register first\\.\\r\\n| p/ircu ircd inter-server port/ h/$1/ cpe:/a:undernet:ircu/\nmatch irc m|^:([-\\w_.]+) 451 HELP :You have not registered\\r\\n| p/ircu ircd/ h/$1/ cpe:/a:undernet:ircu/\nmatch irc m|^:([-\\w_.]+) 451  HELP :Register first\\.\\r\\n| p/ircu ircd/ h/$1/ cpe:/a:undernet:ircu/\nmatch irc m|^NOTICE AUTH :\\*\\*\\* Checking Ident\\r\\n:([-\\w_.]+) 451 \\*  :Register first\\.\\r\\n| p/ircu ircd/ h/$1/ cpe:/a:undernet:ircu/\nmatch irc m|^:([\\w._-]+) 451 \\* :Connection not registered\\r\\n| p/ngircd/ h/$1/ cpe:/a:barton:ngircd/\nmatch irc m|^:([\\w._-]+) 461 HELP\\r\\n| p/matterircd/ h/$1/ cpe:/a:42wim:matterircd/\nmatch irc m|^:([-\\w_.]+) 290  :\\.-----------------=#\\[ euIRCd HelpSystem \\]#=----------------\\.\\n| p/euIRCd/ h/$1/\n\nmatch jabber m|^</stream:stream>$| p/Zimbra 6 jabberd/\n\nmatch laserfiche m|^HLO 0 0 \\. 0 71\\r\\nContent-type: application/vnd\\.laserfiche\\.lrnp\\r\\n\\r\\nLRNP/1\\.1\\r\\n\\r\\nlistener\\r\\nEND\\r\\nERR 0 1 \\. 71 80\\r\\nContent-type: application/vnd\\.laserfiche\\.lrnp\\r\\n\\r\\n451 0 Invalid message \\(-2001\\)\\r\\nEND\\r\\nMSG 0 2 \\. 151 58\\r\\nContent-type: application/vnd\\.laserfiche\\.lrnp\\r\\n\\r\\nCLOSE 0\\r\\nEND\\r\\n$| p/Laserfiche document service/\n\nmatch lmtp m|^220 ([\\w.-]+) LMTP\\r\\n214-This is DBMail-LMTP\\.\\r\\n214-The following commands are supported:\\r\\n214-LHLO, RSET, NOOP, QUIT, HELP\\.\\r\\n214-VRFY, EXPN, MAIL, RCPT, DATA\\.\\r\\n214-For more information about a command:\\r\\n214 Use HELP <command>\\.\\r\\n| p/DBMail lmtpd/ h/$1/ cpe:/a:paul_j_stevens:dbmail/\n\nmatch nntp m|^200 NNTP server ready\\r\\n100 Avaliable commands:\\r\\nARTICLE\\r\\nAUTHINFO\\r\\nBODY\\r\\nGROUP\\r\\nHEAD\\r\\nHELP\\r\\nIHAVE\\r\\nLAST\\r\\nLIST\\r\\nNEWGROUPS\\r\\nNEWNEWS\\r\\nNEXT\\r\\nPOST\\r\\nQUIT\\r\\nSLAVE\\r\\nSTAT\\r\\nXHDR\\r\\n\\.\\r\\n| p|Hamster Playground/Kerio nntpd|\nmatch nntp m|^200 ([\\w._-]+) news server ready - posting ok\\r\\n100 Help text follows\\r\\n$| p/Intersquish nntpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n\nmatch pop3pw m|^200 Welcome to ([\\w.-]+) password daemon\\.\\r\\n214-Commands:\\r\\n214-\\tUSER\\tPASS\\tNEWPASS\\tQUIT\\tHELP\\r\\n214-\\r\\n214-For more info use \\\"HELP <topic>\\\"\\r\\n214 End of HELP info\\r\\n$| p/Gattaca PASS Server/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n\nmatch printer m|^([-\\w_.]+): lpd: Illegal service request\\n$| p/lpd/ h/$1/\nmatch printer m|^\\x01Socket \\d+ received unknown command 0x48 with arguments ELP$| p/RPM Print Manager lpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch printer m|^Command 48 is not supported\\n| p/BusyBox lpd/ cpe:/a:busybox:busybox/\n\nmatch print-monitor m|^false;error while receiving message from client\\n$| p/Genius Bytes print monitor/\n\nmatch bindshell m|^(root@([^:]+):[^#$]+)# bash: HELP: command not found\\n\\1# \\1# $| p/Bash shell/ i/**BACKDOOR**; root shell/ h/$2/ cpe:/a:gnu:bash/\nmatch bindshell m|^(([\\w-]+)@([^:]+):[^#$]+)\\$ bash: HELP: command not found\\n\\1\\$ \\1\\$ $| p/Bash shell/ i/**BACKDOOR**; user: $2/ h/$3/ cpe:/a:gnu:bash/\n# https://computing.llnl.gov/linux/slurm/\n# u32 length, u16 api version, u16 flags (0), u16 msg_type (8001), u32 body_length, u16 forward count, u16 ret count,\n# u32 addr, u16 port, len-prefix auth type, u32 auth version, len-prefix auth data, u32 return_code (1008 = SLURM_PROTOCOL_INSANE_MSG_LENGTH)\n# API version no longer really tracks software version\n# Expect new fingerprints to vary only in the 5th byte\nmatch slurm m|^\\0\\0\\0.\\x1b\\0\\0\\0\\x1fA\\0\\0\\0\\x04\\0\\0\\0\\0......\\0\\0\\0\\x0bauth/munge\\0\\0\\0\\0\\n\\0\\0..MUNGE:[\\w/+=]+:\\0\\0\\0\\x03\\xf0|s p/SLURM/ v/API 2.7/ i|auth/munge|\n\n# Symantec Enterprise Firewall 6.5.2 SMTP proxy on Windows 2000\nmatch smtp m|^220 ([-.+\\w]+) Generic SMTP handler\\r\\n214 Help not supported by this implementation\\r\\n$| p/Symantec Enterprise Firewall smtp proxy/ h/$1/ cpe:/a:symantec:enterprise_firewall/\n# Lotus Notes Domino 6.1 smtp server on Win2K\nmatch smtp m|^220 Welcome to ([-.+\\w]+) ESMTP Server at .*\\r\\n214-Enter one of the following commands:\\r\\n214-HELO EHLO MAIL RCPT DATA RSET NOOP QUIT\\r\\n214 HELP VRFY EXPN STARTTLS \\r\\n$| p/Lotus Notes Domino smtpd/ h/$1/ cpe:/a:ibm:lotus_domino/\nmatch smtp m|^220.*?\\n214-Commands supported:\\r\\n214-    HELO EHLO MAIL RCPT DATA(?: ETRN)?(?: AUTH)?\\r\\n214     NOOP QUIT RSET HELP \\r\\n$| p/Exim smtpd/ v/3.X/ cpe:/a:exim:exim:3/\nmatch smtp m|^220.*?\\r?\\n214-Commands supported:\\r\\n214 AUTH (?:STARTTLS )?HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP(?: VRFY)?\\r\\n$|s p/Exim smtpd/ v/4.X/ cpe:/a:exim:exim:4/\nmatch smtp m|^220[\\s-](\\S+) ESMTP ?\\r\\n214[\\s-]qmail home page: http://cr\\.yp\\.to/qmail\\.html, LinuxMagic Support http://www\\.linuxmagic\\.com\\r\\n| p/qmail smtpd/ i/LinuxMagic/ h/$1/ cpe:/a:djb:qmail/\nmatch smtp m|^220[\\s-](\\S+) ESMTP ?\\r\\n214[- ]qmail home page: http://pobox\\.com/~djb/qmail\\.html\\r\\n214[- ]qmail-ldap patch home page: http://www\\.nrg4u\\.com\\r\\n| p/qmail-ldap smtpd/ o/Unix/ h/$1/ cpe:/a:djb:qmail/\n# Some qmails don't have host ... ?\nmatch smtp m|^220[\\s-].*ESMTP ?\\r\\n214[- ]qmail home page: http://pobox\\.com/~djb/qmail\\.html\\r\\n| p/qmail smtpd/ o/Unix/ cpe:/a:djb:qmail/\nmatch smtp m|^220[\\s-](\\S+) (?:OK )?ESMTP ?\\r\\n214[- ]qmail home page: http://pobox\\.com/~djb/qmail\\.html| p/qmail smtpd/ o/Unix/ h/$1/ cpe:/a:djb:qmail/\nmatch smtp m|^220[\\s-].*?ESMTP\\r\\n214 netqmail home page: http://qmail\\.org/netqmail\\r\\n| p/netqmail smtpd/ v/1.04/ o/Unix/\n# VirusBuster MailShield for SMTP. Version 1.15.030 on Linux 2.4\nmatch smtp m|^220 ([-.\\w]+) SMTP version 1\\.00;\\r\\n214 We strongly advise you to study (?:of )?the RFC ?821\\.\\.\\.\\r\\n$| p/VirusBuster MailShield for SMTP/ o/$1/\n# Postfix 1.1.12, 1.1.13, 2.0.9, 2.0.16\nmatch smtp m|^220 ([-\\w_.]+) ESMTP\\r\\n402 Error: command not implemented\\r\\n$| p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 smtpd\\r\\n502 [\\d.]+ Error: command not recognized\\r\\n| p/Postfix smtpd/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 ([-\\w_.]+)\\r\\n502 [\\d.]+ Error: command not recognized\\r\\n| p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP (?:[^(]+? )?\\(Ubuntu\\)\\r\\n502 5\\.5\\.2 Error: command not recognized\\r\\n| p/Postfix smtpd/ o/Linux/ h/$1/ cpe:/a:postfix:postfix/a cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/a\nmatch smtp m|^220 (?:.*? )?([-\\w_.]+) ESMTP(?: [^\\r\\n]*)?\\r\\n502 5\\.5\\.2 Error: command not recognized\\r\\n| p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 (?:.*? )?([-\\w_.]+) ESMTP(?: [^\\r\\n]*)?\\r\\n402 4\\.5\\.2 Error: command not recognized\\r\\n| p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 ([-\\w_.]+) SMTP READY\\r\\n502 5\\.5\\.2 Error: command not recognized\\r\\n| p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 E?SMTP [^\\r\\n]*\\r\\n502 5\\.5\\.2 Error: command not recognized\\r\\n| p/Postfix smtpd/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 .*\\r\\n502 Error: command not implemented\\r\\n$| p/Postfix smtpd/ cpe:/a:postfix:postfix/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP \\w+\\r\\n$| p/Postfix smtpd/ h/$1/ cpe:/a:postfix:postfix/a\n# Courier ESMTP courier-0.42.0-1.7.3\nmatch smtp m|^220 ([-.\\w]+) ESMTP\\r\\n502 ESMTP command error\\r\\n$| p/Courier smtpd/ h/$1/\nmatch smtp m|214-2\\.0\\.0 This is sendmail version (\\S+)\\r?\\n214-2\\.0\\.0 Topics:|s p/Sendmail/ v/$1/ o/Unix/ cpe:/a:sendmail:sendmail:$1/\nmatch smtp m|214-2\\.0\\.0 This is sendmail\\r\\n214-2\\.0\\.0 Topics:|s p/Sendmail/ o/Unix/ cpe:/a:sendmail:sendmail/\nmatch smtp m|^220 (\\S+) E?SMTP Sendmail;| p/Sendmail/ o/Unix/ h/$1/ cpe:/a:sendmail:sendmail/\nmatch smtp m|^220.* Sendmail (\\d[-.\\w]+) -- HELP not implemented\\r\\n|s p/Sendmail/ v/$1/ o/Unix/ cpe:/a:sendmail:sendmail:$1/\nmatch smtp m|^220.*214-This is America Online mail version [vV](\\S+)|s p/AOL smtpd/ v/$1/\nmatch smtp m|^220.*214 2\\.0\\.0 http://www\\.google\\.com/search.*RFC\\+2821\\s*\\r?\\n|s p/Google smtpd/\nmatch smtp m|^220.*214 SMTP server comments and bug reports to: \\<zmhacks\\@nic.funet.fi\\>|s p/ZMailer smtpd/\nmatch smtp m|^220.*500 MessageWall: Unrecognized command|s p/MessageWall SMTP proxy/\nmatch smtp m|^220.*500 Unknown or unimplemented command|s p/MAILsweeper SMTP proxy/\nmatch smtp m|^220.*214 See http\\:\\/\\/www\\.messagelabs\\.com\\/support|s p/MessageLabs smtpd/\nmatch smtp m|^220 (\\S+) ESMTP Service\\r\\n502 5\\.3\\.0 Sendmail Xserve -- HELP not implemented\\r\\n$| p/Xserve smtpd/ o/Unix/ h/$1/\n# Doesn't look like we can always get the host from the following:\nmatch smtp m|^220 .*\\r\\n214-Commands Supported:\\r\\n214-HELO EHLO AUTH HELP QUIT MAIL NOOP RSET RCPT DATA ETRN VRFY STARTTLS\\r\\n214-Copyright \\(c\\) 1995-200\\d, Stalker Software, Inc\\.\\r\\n| p/CommuniGate Pro smtpd/ cpe:/a:stalker:communigate_pro/\nmatch smtp m|^220 Jana-Server ESMTP Service ready\\r\\n214- Jana Server ([\\w.]+)\\r\\n| p/Jana mail server/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP server ready .*\\r\\n214-This SMTP server is a part of the InterMail E-mail system\\.  For\\r\\n| p/InterMail smtpd/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP\\r\\n535 Authentication required\\.\\r\\n| p/Courier MSA smtpd/ i/Auth required/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP\\r\\n400 STARTTLS is required first\\.\\r\\n| p/Courier MSA smtpd/ i/STARTTLS required/ h/$1/\nmatch smtp m|^220  ESMTP\\r\\n214 qmail home page: http://pobox\\.com/~djb/qmail\\.html\\r\\n| p/qmail smtpd/ cpe:/a:djb:qmail/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP\\r\\n214-Gentoo Linux qmail-([-\\w.]+)\\r\\n214 qmail home page: http://pobox\\.com/~djb/qmail\\.html\\r\\n| p/qmail smtpd/ v/$2/ i/Gentoo/ o/Linux/ h/$1/ cpe:/a:djb:qmail/ cpe:/o:gentoo:linux/\nmatch smtp m|^220 .* ESMTP\\r\\n214-Gentoo Linux qmail-([-\\w.]+)\\r\\n214 qmail home page: http://pobox\\.com/~djb/qmail\\.html\\r\\n| p/qmail smtpd/ v/$1/ i/Gentoo/ o/Linux/ cpe:/a:djb:qmail/ cpe:/o:gentoo:linux/\nmatch smtp m|^554 SMTP synchronization error\\r\\n$| p/Exim smtpd/ cpe:/a:exim:exim/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP\\r\\n214-The following commands are recognized\\r\\n214-\\tdata\\tehlo\\thelo\\thelp\\r\\n214-\\tmail\\tnoop\\tquit\\trcpt\\r\\n214 \\trset\\tvrfy\\r\\n| p/IronPort C60 smtpd/ d/specialized/ o/AsyncOS/ h/$1/ cpe:/o:cisco:asyncos/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP\\r\\n214-The following commands are recognized\\r\\n214-\\tauth\\tdata\\tehlo\\teuq_full\\r\\n214-\\thelo\\thelp\\tmail\\tnoop\\r\\n214 \\tquit\\trcpt\\trset\\tvrfy\\r\\n| p/IronPort C600 smtpd/ d/specialized/ o/AsyncOS/ h/$1/ cpe:/o:cisco:asyncos/a\nmatch smtp m|^220  ESMTP\\r\\n214-The following commands are recognized\\r\\n214-\\tauth\\tdata\\tehlo\\thelo\\r\\n214-\\thelp\\tmail\\tnoop\\tquit\\r\\n214 \\trcpt\\trset\\tvrfy\\r\\n| p|Eserv/4 smtpd|\nmatch smtp m|^220 ([-\\w_.]+) ESMTP\\r\\n214-The following commands are recognized\\r\\n214-\\tauth\\tdata\\tehlo\\t| p/IronPort smtpd/ d/specialized/ o/AsyncOS/ h/$1/ cpe:/o:cisco:asyncos/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP ready\\r\\n214 [\\d.]+ Commands: HELO EHLO MAIL RCPT DATA RSET NOOP VRFY QUIT STARTTLS\\r\\n| p/Kerio smtpd/ h/$1/\nmatch smtp m|^220 \\[?([-\\w_.]+)\\]? ESMTP server ready\\.\\r\\n214-Recognized SMTP commands are:\\r\\n214-   HELO   EHLO   MAIL   RCPT   DATA   RSET\\r\\n214-   AUTH   NOOP   QUIT   HELP   VRFY   SOML\\r\\n214 Mail server account is '([-\\w_.]+)'\\.\\r\\n| p|Mercury/32 smtpd| i/Mail server account $2/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) Server ESMTP ready at .*\\r\\n241-\\r\\n$| p/BorderWare firewall smtpd/ d/firewall/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP \\r\\n$| p/BorderWare firewall smtpd/ d/firewall/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+)\\r\\n214-Commands supported:\\r\\n214 AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP\\r\\n| p/Exim smtpd/ h/$1/ cpe:/a:exim:exim/\nmatch smtp m|^220 ([-\\w_.]+) MailShield SMTP\\r\\n| p/MailShield smtpd/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+)\\r\\n211 DATA EXPN HELO MAIL NOOP QUIT RCPT RSET SAML SEND SOML TURN VRFY\\r\\n| p/IMail smtpd/ o/Windows/ h/$1/ cpe:/a:ipswitch:imail/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP\\r\\n214  qmail home page: http://pobox\\.com/~djb/qmail\\.html, LinuxMagic Support http://www\\.linuxmagic\\.com\\r\\n| p/Linuxmagic qmail-based smtpd/ o/Linux/ h/$1/ cpe:/a:djb:qmail/ cpe:/o:linux:linux_kernel/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP .*\\r\\n214-qmail home page: http://pobox\\.com/~djb/qmail\\.html\\r\\n214 qmail-ldap patch home page: http://www\\.nrg4u\\.com\\r\\n| p/qmail smtpd/ i/qmail-ldap support/ h/$1/ cpe:/a:djb:qmail/\nmatch smtp m|^220-([-\\w_.]+) ESMTP\\r\\n220-MagicMail Daemon with Built-In Anti-Spam\\r\\n220 See http://www\\.linuxmagic\\.com for info\\r\\n214 qmail home page: http://cr\\.yp\\.to/qmail\\.html, LinuxMagic Support http://www\\.linuxmagic\\.com\\r\\n| p/Linuxmagic qmail-based smtpd/ i/with Anti-Spam/ o/Linux/ h/$1/ cpe:/a:djb:qmail/ cpe:/o:linux:linux_kernel/a\nmatch smtp m|^220 ESMTP Service ready at .*\\r\\n214-Enter one of the following commands:\\r\\n214-HELO EHLO MAIL RCPT DATA RSET NOOP QUIT\\r\\n214 HELP \\r\\n| p/Lotus Domino smtpd/ cpe:/a:ibm:lotus_domino/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP MTA\\r\\n214-This is Sendmail version AIX([\\d.]+)/([\\w.]+)\\r\\n| p/Sendmail/ v/$3/ i/AIX $2/ o/AIX/ h/$1/ cpe:/a:sendmail:sendmail:$3/ cpe:/o:ibm:aix/a\nmatch smtp m|^220 Service ESMTP Ready\\r\\n214-This is Sendmail version ([\\d.]+) \\((P[-\\w_.]+)\\)\\r\\n.*future enhancements, contact your HP representative|s p/Sendmail/ v/$1 patch $2/ o/HP-UX/ cpe:/a:sendmail:sendmail:$1p$2/ cpe:/o:hp:hp-ux/a\nmatch smtp m|^220 ([-\\w_.]+)\\r\\n502 Command not implemented\\r\\n| p/IA Mailserver smtpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP[^\\r\\n]*\\r\\n211 DATA HELO EHLO MAIL NOOP QUIT RCPT RSET SAML TURN VRFY\\r\\n\\r\\n| p/hMailServer smtpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) .*\\r\\n211 DATA HELO EHLO MAIL NOOP QUIT RCPT RSET SAML TURN VRFY\\r\\n\\r\\n| p/hMailServer smtpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) - Ready at .*\\r\\n214-Commands:\\r\\n214-    HELO  MAIL  RCPT  DATA  RSET  NOOP    QUIT\\r\\n214-  For more info use 'HELP <topic>'\\.\\r\\n214 End of HELP info\\r\\n| p/NTMail smtpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ESMTP Service ready\\r\\n500 Command unrecognized\\r\\n$| p/Zoe Java smtpd/\nmatch smtp m|^220 ([-\\w_.]+) \\r\\n502 Command not implemented\\r\\n$| p/SmarterMail smtpd/ o/Windows/ h/$1/ cpe:/a:smartertools:smartermail/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) ESMTP [-\\w_.]+ Mail Server ([\\d.]+); .*\\r\\n214-2\\.0\\.0 This is [-\\w_.]+ Mail Server [-\\w_.]+\\r\\n214-2\\.0\\.0 Topics:\\r\\n| p/Merak Mail Server smtpd/ v/$2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 WebMail ESMTP\\r\\n502 negative vibes\\r\\n| p/Mozilla Thunderbird WebMail plugin smtpd/ cpe:/a:mozilla:thunderbird/\nmatch smtp m|^220 Mail Server\\r\\n211 Help:->Supported Commands: HELO,EHLO,QUIT,HELP,RCPT,MAIL,DATA,RSET,NOOP\\r\\n| p/MailEnable Enterprise/ v/2.0.x/ o/Windows/ cpe:/a:mailenable:mailenable:2.0:-:enterprise/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 Welcome to the mail server\\.\\r\\n211 DATA EXPN HELO MAIL NOOP QUIT RCPT RSET SAML SEND SOML TURN VRFY\\r\\n| p/Ipswitch iMail smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 .*\\r\\n214-This is ArGoSoft Mail Server Pro for WinNT/2000/XP, Version [-\\w_.]+ \\(([-\\w_.]+)\\)\\r\\n| p/ArGoSoft Pro smtpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ArGoSoft Mail Server Freeware, Version [-\\w_.]+ \\(([-\\w_.]+)\\)\\r\\n| p/ArGoSoft Freeware smtpd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([-\\w_.]+) Service ready\\.\\r\\n214- Valid commands are:\\r\\n214- HELO  MAIL  RCPT  DATA  RSET  QUIT  NOOP\\r\\n214- HELP  VRFY\\r\\n214- Commands not valid are:\\r\\n214- SEND  SOML  SAML  TURN\\r\\n214- Mail forwarding handled by this server\\.\\r\\n| p|i5/OS V5R4M0 or OS/400 smtpd| h/$1/\nmatch smtp m|^220 Simple Mail Tranfer Service Ready \\r\\n502 Commande not implement \\r\\n| p/Brother printer smtpd/ d/printer/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP server is ready\\r\\n.*214-Copyright \\(c\\) 1995-2004, Stalker Software, Inc\\.\\r\\n|s p/Stalker Software CommuniGate smtpd/ h/$1/ cpe:/a:stalker:communigate/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP\\r\\n211 DATA HELO EHLO MAIL NOOP QUIT RCPT RSET SAML TURN VRFY\\r\\n| p/hMailServer smtpd/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 \\[[-\\w_.]+\\] Courier Mail Server ([-\\w_.]+) ESMTP service ready\\r\\n| p/Courier MSA smtpd/ v/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP\\r\\n214-This is qpsmtpd \\r\\n214-See http://smtpd\\.develooper\\.com/\\r\\n| p/qpsmtpd smtpd/ h/$1/ cpe:/a:ask_bjorn_hansen:qpsmtpd/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP Generic Ready\\r\\n502 Command not implemented\\.\\r\\n| p/MailMarshal smtpd/ h/$1/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP SubEthaSMTP\\r\\n214-This is the SubEthaSMTP ([\\w._-]+) server| p/SubEtha smtpd/ v/$2/ h/$1/ cpe:/a:voodoodyne:subethasmtp:$2/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP SubEthaSMTP null\\r\\n| p/SubEtha smtpd/ h/$1/ cpe:/a:voodoodyne:subethasmtp/\nmatch smtp m|^220 ([-\\w_.]+) ESMTP SubEthaSMTP (\\d[\\w._-]*)\\r\\n| p/SubEtha smtpd/ v/$2/ h/$1/ cpe:/a:voodoodyne:subethasmtp:$2/\nmatch smtp m|^220 ([\\w_.-]+) ESMTP.*information about Email Mx, please see http://www\\.openwave\\.com\\r\\n|s p/Openwave Email Mx smtpd/ h/$1/\nmatch smtp m|^220 ([\\w_.-]+) Welcome\\r\\n214-ESMTP Mail Server\\r\\n214-Available commands:\\r\\n214-    HELO    EHLO    MAIL    RCPT    DATA\\r\\n214-    RSET    NOOP    QUIT    HELP    VRFY\\r\\n214-    AUTH    ETRN\\r\\n214-For information on a specific command, type \\\"HELP <command>\\\"\\.\\r\\n214 OK\\r\\n| p/SurgeMail smtpd/ h/$1/ cpe:/a:netwin:surgemail/\nmatch smtp m|^220 ([\\w_.-]+) ESMTP\\r\\n214-Run 'info anubis' or visit http://www\\.gnu\\.org/software/anubis/manual/\\r\\n214 End of HELP info\\r\\n$| p/GNU Anubis/ h/$1/ cpe:/a:gnu:anubis/\n# hMailServer 4.4.1-B273\nmatch smtp m|^220 ([\\w_.-]+)\\r\\n211 DATA HELO EHLO MAIL NOOP QUIT RCPT RSET SAML TURN VRFY\\r\\n| p/hMailServer/ h/$1/\n# Maybe too general, but the greeting was unique.\nmatch smtp m|^220 .+\\r\\n211 DATA HELO EHLO MAIL NOOP QUIT RCPT RSET SAML TURN VRFY\\r\\n\\r\\n| p/hMailServer/\nmatch smtp m|^220 ([\\w._-]+) -=- ESMTP\\r\\n502 unknown command\\.\\r\\n| p/PineApp SeCure SoHo smtpd/ h/$1/ cpe:/a:pineapp:mail-secure/\nmatch smtp m|^220 Ready to receive mail2 -=- ESMTP\\r\\n502 unknown command\\.\\r\\n| p/PineApp SeCure SoHo smtpd/ cpe:/a:pineapp:mail-secure/\nmatch smtp m|^220 ([\\w._-]+) ESMTP service ready\\r\\n214 2\\.0\\.0 try reading the RFCs: http://www\\.imc\\.org/rfcs\\.html\\r\\n| p/PowerMTA smtpd/ h/$1/\nmatch smtp m|^220 SMTP\\r\\n214-Usage: HELP <topic>\\r\\n214-Topics:\\r\\n214-\\tHELO EHLO MAIL RCPT DATA\\r\\n214-\\tVRFY EXPN RSET NOOP QUIT\\r\\n214 End of HELP info\\r\\n| p/Trend Micro IMSS smtpd/ v/7.0/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp m|^220 ([\\w._-]+) ESMTP\\r\\n214-2\\.0\\.0 These commands are recognised:\\r\\n214 2\\.0\\.0     DATA EHLO HELO HELP MAIL NOOP QUIT RCPT RSET\\r\\n| p/Koto Internet Services smtpd/ h/$1/\nmatch smtp m|^220 ([\\w._-]+) ESMTP\\r\\n250 2\\.0\\.0 See http://www\\.ietf\\.org/rfc/rfc2821\\r\\n| p|Plan 9 upas/smtpd| o/Plan 9/ h/$1/ cpe:/o:belllabs:plan_9/a\nmatch smtp m|^220 ([\\w._-]+) Service ready\\r\\n214-Commands:\\r\\n214-\\tHELO\\tEHLO\\tMAIL\\tRCPT\\tRSET\\tNOOP\\r\\n214-\\tQUIT\\tHELP\\tDATA\\tAUTH\\tVRFY\\tEXPN\\r\\n214-\\r\\n214-For more info use \\\"HELP <topic>\\\"\\r\\n214 End of HELP info\\r\\n| p/Gattaca Server smtpd/ h/$1/\nmatch smtp m|^250 Ok, but unimplemented\\r\\n220 EventMachine SMTP Server\\r\\n| p/Mailcatcher smtpd/\nmatch smtp m|^220 uniFLOW SMTP Email Gateway\\r\\n500 Sorry, not implemented\\r\\n| p|NT-ware uniFLOW/MOM smtpd|\n\nmatch smtp-proxy m|^220 SMTP service ready\\r\\n214-Commands:\\r\\n214-\\tDATA\\tRCPT\\tMAIL\\tQUIT\\tRSET\\r\\n214 \\tHELO\\tVRFY\\tEXPN\\tHELP\\tNOOP\\r\\n| p/WatchGuard smtp proxy/ d/firewall/\nmatch smtp-proxy m|^220 ready\\r\\n214-Commands:\\r\\n214-    HELO    MAIL    RCPT    DATA\\r\\n214-    RSET    NOOP    QUIT    HELP\\r\\n214-    VRFY    EXPN\\r\\n214-For more info use HELP <topic>\\r\\n214 End of HELP info\\r\\n| p/602LAN Suite smtpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 ([-\\w_.]+) SMTP service ready\\r\\n214 Help message\\r\\n| p/CA Secure Content smtp proxy/ h/$1/\nmatch smtp-proxy m|^421 ([-\\w_.]+) is too busy\\. Please try again later\\.\\r\\n| p/Surfcontrol smtp proxy/ h/$1/\nmatch smtp-proxy m|^220 ([-\\w_.]+) SMTP; .*\\r\\n500 Syntax error, command unrecognized\\.\\r\\n| p/Anti-Spam SMTP Proxy/ h/$1/\nmatch smtp-proxy m|^220 WebShield SMTP MR2\\r\\n| p/McAfee WebShield smtp proxy/ o/Windows/ cpe:/a:mcafee:webshield_smtp/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 SMTP Proxy Server Ready\\r\\n250 \\+OK entry follows, ends in \\.\\r\\n| p/IronMail CipherTrust SMTP Proxy/ cpe:/a:ciphertrust:ironmail/\nmatch smtp-proxy m|^220 SMTP SDC Ready\\r\\n250 \\+OK entry follows, ends in \\.\\r\\n| p/IronMail SMTP proxy/ cpe:/a:ciphertrust:ironmail/\nmatch smtp-proxy m|^220 ([-\\w_.]+) SMTP; .* \\+\\d{4}\\r\\n500 Syntax error, command unrecognized\\r\\n| p/Symantec Mail Security smtp proxy/ o/Windows/ h/$1/ cpe:/a:symantec:mail_security/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 ([\\w._-]+) Symantec Mail Security | p/Symantec Mail Security smtp proxy/ o/Windows/ h/$1/ cpe:/a:symantec:mail_security/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 ([-\\w_.]+) ESMTP smtprelay service ready\\.\\r\\n214-This is smtprelay\\r\\n214-Topics:| p/Genua smtprelay/ d/security-misc/ h/$1/\nmatch smtp-proxy m|^220 SMTP ESMTP ready at .*0\\r\\n214-\\r\\n214 End of HELP info\\r\\n| p/SurfControl smtp proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 ([-\\w_.]+)\\r\\n214-HELO domain\\r\\n214-EHLO domain\\r\\n214-QUIT\\r\\n214-MAIL FROM:<reverse-path> \\[options\\]\\r\\n| p/RedCondor smtp proxy/ h/$1/\nmatch smtp-proxy m|^220 ([-\\w_.]+) ESMTP Ready\\r\\n211 Help:->Supported Commands: HELO,EHLO,QUIT,HELP,RCPT,MAIL,DATA,RSET,NOOP\\r\\n| p/NoSpamToday! smtp proxy/ h/$1/\nmatch smtp-proxy m|^220 ([-\\w_.]+) SMTP Relay Service ready\\r\\n500 Syntax error, command unrecognized\\r\\n| p/Tumbleweed Email Firewall smtp proxy/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch smtp-proxy m|^220 ([\\w._-]+) AngelmatoPhylax SMTP proxy\\r\\n214 see RFC2821\\r\\n| p/AngelmatoPhylax smtp proxy/ h/$1/\nmatch smtp-proxy m|^503 Synchronization error\\r\\n| p/Altospam smtp proxy/\nmatch smtp-proxy m|^220 ([\\w._-]+)\\r\\n214-Usage: HELP <topic>\\r\\n214-Topics:\\r\\n214-\\tHELO EHLO MAIL RCPT DATA\\r\\n214-\\tVRFY EXPN RSET NOOP QUIT\\r\\n214 End of HELP info\\r\\n| p/Barracuda Networks Spam Firewall/ h/$1/ cpe:/h:barracudanetworks:spam_%26_virus_firewall_600:-/\n\nmatch speechd m|^248-  SPEAK           -- say text \\r\\n248-  KEY             -- say a combination of keys \\r\\n248-  CHAR            -- say a character \\r\\n248-  SOUND_ICON      -- execute a sound icon \\r\\n248-  SET             -- set a parameter \\r\\n248-  LIST            -- list available arguments \\r\\n248-  HISTORY         -- commands related to history \\r\\n248-  QUIT            -- close the connection \\r\\n248 OK HELP SENT\\r\\n| p/Speech Dispatcher text to speech/\n\nmatch tcpmux m|^(sgi_[-.\\w]+\\r\\n(?:[-.\\w]+\\r\\n)*)$| p/SGI IRIX tcpmux/ i/Available services: $SUBST(1, \"\\r\\n\", \",\")/ o/IRIX/ cpe:/o:sgi:irix/a\n\nmatch telnet m|^\\r\\nLDK-300 System\\r\\nVersion ([\\w._-]+) .*\\r\\nDATE: .*\\r\\nTIME: .*\\r\\nSITE NAME.*\\r\\nENTER PASSWORD: \\*| p/AcerTelecom LDK-300 PBX telnetd/ v/$1/ d/PBX/\nmatch telnet m|^HELP\\r\\n\\n\\x06 \\nATHENA_READ\\nATHENA_WRITE\\nCHIPVAR_GET\\nDEBUGTABLE\\nDITEM\\nDMEM\\nDREG16\\nDREG32\\nDREG8\\nDRV_CAT_FREE\\nDRV_CAT_INIT\\nDRV_NAME_GET\\nDRV_VAL_GET\\nDRV_VAL_SET\\nEXIT\\nGENIOCTL\\nGETMIB\\nHELP\\nHYP_READ       \\nHYP_WRITE      \\nHYP_WRITEBUFFER\\nITEM16\\nITEM32\\nITEM8\\nITEMLIST\\nMACCALIBRATE\\nMACVARGET\\nMACVARSET\\nMEM_READ\\nMEM_WRITE\\nMTAPI\\nPITEMLIST\\nPRINT_LEVEL\\nPROM_READ\\nPROM_WRITE\\nREAD_FILE\\nREBOOT\\nRECONF\\nRG_CONF_GET\\nRG_CONF_SET\\nRG_SHELL\\nSETMIB\\nSHELL\\nSTR_READ\\nSTR_WRITE\\nSYSTEM\\nTEST32\\nTFTP_GET\\nTFTP_PUT\\nVER\\r\\n00>$| p/OpenRG telnetd/ i|Cisco/Linksys WET610N wireless bridge| d/bridge/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\n# http://grey-corner.blogspot.com/2010/12/introducing-vulnserver.html\nmatch vulnserver m|^Welcome to Vulnerable Server! Enter HELP for help\\.\\nValid Commands:\\nHELP\\nSTATS \\[stat_value\\]\\nRTIME \\[rtime_value\\]\\nLTIME \\[ltime_value\\]\\nSRUN \\[srun_value\\]\\nTRUN \\[trun_value\\]\\nGMON \\[gmon_value\\]\\nGDOG \\[gdog_value\\]\\nKSTET \\[kstet_value\\]\\nGTER \\[gter_value\\]\\nHTER \\[hter_value\\]\\nLTER \\[lter_value\\]\\nKSTAN \\[lstan_value\\]\\nEXIT\\n$| p/Vulnserver/ o/Windows/ cpe:/o:microsoft:windows/\n\nmatch nut m|^Commands: HELP VER GET LIST SET INSTCMD LOGIN LOGOUT USERNAME PASSWORD STARTTLS\\n| p/Network UPS Tools upsd/\nmatch nut m|^Commands: VER REQ HELP LISTVARS LOGOUT LOGIN PASSWORD LISTRW VARTYPE VARDESC ENUM SET INSTCMD LISTINSTCMD INSTCMDDESC FSD MASTER USERNAME STARTTLS\\n| p/Network UPS Tools upsd/\n\n# Written in 1986.  More info at\n# http://ftp.rge.com/pub/X/X11R5/contrib/xwebster.README\nmatch webster m|^DICTIONARY server protocol:\\r\\n\\r\\nContact name is| p/Webster dictionary server/\n\nmatch xmpp-transport m|^\\x05\\xff$| p/Spectrum XMPP file transfer/\n\nsoftmatch smtp m|^220[\\s-].*smtp[^\\r]*\\r\\n214[\\s-]|i\nsoftmatch ftp m|^220[\\s-].*ftp[^\\r]*\\r\\n214[\\s-]|i\n\n##############################NEXT PROBE##############################\n# SSLv3 ClientHello probe. Will be able to reliably identify the SSL version\n# used, unless the server is running SSLv2 only. Note that it will also detect\n# TLSv1-only servers, based on a failed handshake alert.\nProbe TCP SSLSessionReq q|\\x16\\x03\\0\\0S\\x01\\0\\0O\\x03\\0?G\\xd7\\xf7\\xba,\\xee\\xea\\xb2${backquote}~\\xf3\\0\\xfd\\x82{\\xb9\\xd5\\x96\\xc8w\\x9b\\xe6\\xc4\\xdb<=\\xdbo\\xef\\x10n\\0\\0(\\0\\x16\\0\\x13\\0\\x0a\\0f\\0\\x05\\0\\x04\\0e\\0d\\0c\\0b\\0a\\0${backquote}\\0\\x15\\0\\x12\\0\\x09\\0\\x14\\0\\x11\\0\\x08\\0\\x06\\0\\x03\\x01\\0|\nrarity 1\nports 261,271,322,324,443,444,448,465,548,563,585,636,684,853,989,990,992-995,1241,1311,1443,2000,2221,2252,2376,2443,3443,4433,4443,4444,4911,5061,5443,5550,5868,5986,6251,6443,6679,6697,7000,7210,7272,7443,8009,8181,8194,8443,8531,8883,9001,9443,10443,14443,15002,44443,60443\nfallback GetRequest\n\n# Unknown service on Vingtor-Stentofon IP intercom echoes only up to the first \\n, so softmatching until we know more.\nsoftmatch echo m|^\\x16\\x03\\0\\0S\\x01\\0\\0O\\x03\\0\\?G\\xd7\\xf7\\xba,\\xee\\xea\\xb2${backquote}~\\xf3\\0\\xfd\\x82\\{\\xb9\\xd5\\x96\\xc8w\\x9b\\xe6\\xc4\\xdb<=\\xdbo\\xef\\x10n\\0\\0\\(\\0\\x16\\0\\x13\\0\\n|\n\n# OpenSSL/0.9.7aa, 0.9.8e\nmatch ssl m|^\\x16\\x03\\0\\0J\\x02\\0\\0F\\x03\\0| p/OpenSSL/ i/SSLv3/ cpe:/a:openssl:openssl/\n\n# Microsoft-IIS/5.0 - note that OpenSSL must go above this one because this is more general\nmatch ssl m|^\\x16\\x03\\0..\\x02\\0\\0F\\x03\\0|s p/Microsoft IIS SSL/ o/Windows/ cpe:/a:microsoft:internet_information_services/ cpe:/o:microsoft:windows/a\n# Novell Netware 6 Enterprise Web server 5.1 https\n# Novell Netware Ldap over SSL or enterprise web server 5.1 over SSL\nmatch ssl m|^\\x16\\x03\\0\\0:\\x02\\0\\x006\\x03\\0| p/Novell NetWare SSL/ o/NetWare/ cpe:/o:novell:netware/a\n# Cisco IDS 4.1 Appliance\nmatch ssl m|^\\x16\\x03\\0\\0\\*\\x02\\0\\0&\\x03\\0\\xd10:\\xbd\\\\\\x8e\\xe3\\x15\\x1c\\x0fZ\\xe4\\x04\\x87\\x07\\xc0\\x82\\xa9\\xd4\\x0e\\x9c1LXk\\xd1\\xd2\\x0b\\x1a\\xc6/p\\0\\0\\n\\0\\x16\\x03\\0\\x026\\x0b\\0\\x022\\0| p/Cisco IDS SSL/ d/firewall/\n# PGP Corporation Keyserver Web Console 7.0 - custom Apache 1.3\n# PGP LDAPS Keyserver 8.X\nmatch ssl m|^\\x16\\x03\\0\\0\\+\\x02\\0\\0'\\x03\\0...\\?|s p/PGP Corporation product SSL/\n# Unreal IRCd SSL\n# RemotelyAnywhere\nmatch ssl m|^\\x16\\x03\\0\\0\\*\\x02\\0\\0&\\x03\\0\\?|\n# Tumbleweed SecureTransport 4.1.1 Transaction Manager Secure Port on Solaris\n# Dell Openmanage\nmatch ssl m|^\\x15\\x03[\\x01\\x00]\\0\\x02\\x01\\0$| p/multi-vendor SSL/\n# Probably Oracle https?\nmatch ssl m|^}\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Oracle https/\nmatch ssl m|^\\x15\\x03\\0\\0\\x02\\x02\\(31666:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher:s3_srvr\\.c:881:\\n| p/Webmin SSL Control Panel/\nmatch ssl m|^20928:error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr\\.c:565:\\n| p/qmail-pop3d behind stunnel/ cpe:/a:djb:qmail/\n\nmatch ssl m|^\\x16\\x03\\0\\0\\*\\x02\\0\\0&\\x03\\0B| p/Tor over SSL/ cpe:/a:torproject:tor/\nmatch ssl m|^\\x16\\x03\\0\\0\\*\\x02\\0\\0&\\x03.*IOS-Self-Signed-Certificate|s p/Cisco IOS ssl/ d/router/\nmatch ssl m|^\\x16\\x03\\0\\0\\*\\x02\\0\\0&\\x03.*\\nCalifornia.*\\tPalo Alto.*\\x0cVMware, Inc\\..*\\x1bVMware Management Interface|s p/VMware management interface SSLv3/\nmatch ssl m|^\\x16\\x03\\0\\0\\*\\x02\\0\\0&\\x03.*\\x0edropbox-client0|s p/Dropbox client SSLv3/ cpe:/a:dropbox:dropbox/\nmatch ssl m|^\\x16\\x03\\0\\0\\*\\x02\\0\\0&\\x03.*vCenterServer_([\\w._-]+)|s p/VMware ESXi Server httpd/ v/$1/ cpe:/o:vmware:esxi:$1/\n\n# Alert (Level: Fatal, Description: Protocol Version|Handshake Failure)\nmatch ssl m|^\\x15\\x03[\\x00-\\x03]\\0\\x02\\x02[F\\x28]|\n# Alert (Level: Warning, Description: Close Notify)\nmatch ssl m|^\\x15\\x03[\\x00-\\x03]\\0\\x02\\x01\\x00|\n\n# Sophos Message Router\nmatch ssl/sophos m|^\\x16\\x03\\0.*Router\\$([a-zA-Z0-9_-]+).*Sophos EM Certification Manager|s p/Sophos Message Router/ h/$1/\nmatch ssl/sophos m|^\\x16\\x03\\0.*Sophos EM Certification Manager|s p/Sophos Message Router/\n\nmatch ssl/openvas m|^\\x16\\x03\\x01\\0J\\x02\\0\\0F\\x03\\x01| p/OpenVAS server/\n\n# Generic: TLSv1.3 ServerHello\nmatch ssl m|^\\x16\\x03\\x03..\\x02...\\x03\\x03|s p/TLSv1.2/\n# Generic: TLSv1.2 ServerHello\nmatch ssl m|^\\x16\\x03\\x02..\\x02...\\x03\\x02|s p/TLSv1.1/\n# Generic: TLSv1.1 ServerHello\nmatch ssl m|^\\x16\\x03\\x01..\\x02...\\x03\\x01|s p/TLSv1.0/\n\n# Generic: SSLv3 ServerHello\nmatch ssl m|^\\x16\\x03\\0..\\x02...\\x03\\0|s p/SSLv3/\n# SSLv3 - TLSv1.3 Alert\nmatch ssl m|^\\x15\\x03[\\0-\\x04]\\0\\x02[\\x01\\x02].$|s\n\nmatch adabas m|^,\\0,\\0\\x03\\x02\\0\\0G\\xd7\\xf7\\xbaO\\x03\\0\\?\\x05\\0\\0\\0\\0\\x02\\x18\\0\\xfd\\x0b\\0\\0<=\\xdbo\\xef\\x10n \\xd5\\x96\\xc8w\\x9b\\xe6\\xc4\\xdb$| p/ADABAS database/\n\n# Apple Filing Protocol (AFP) over TCP on Mac OS X\n# Sometimes we can get a host name or an IP address; those with come before those without.\n# These are mostly sorted by the flags field.\n\n# Flags \\x80\\xfb.\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x80\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x05\\x06AFPX03\\x06AFP2\\.2\\x0eAFPVersion 2\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 1\\.1.\\tDHCAST128|s p/Apple AFP/ i/name: $1; protocol 2.2; Mac OS X 10.1.*/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.1/\n\n# Flags \\x83\\xfb.\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x83\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x06\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2\\x0eAFPVersion 2\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 1\\.1.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\0|s p/Apple AFP/ i/name: $1; protocol 3.1; Mac OS X 10.2.*/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.2/\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x83\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x06\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2\\x0eAFPVersion 2\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 1\\.1.\\tDHCAST128|s p/Apple AFP/ i/name: $1; protocol 3.1; Mac OS X 10.2.*/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.2/\n\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x83\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x03\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\x06Recon1\\rClient Krb v20\\0.*[\\x04\\x05]([\\w.-]+)\\x01.afpserver/([\\w.@-]+)\\0|s p/Apple AFP/ i/name: $1; afpserver: $3; protocol 3.1; Mac OS X 10.2.*/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.2/\n\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x83\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x03\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\x01.afpserver/([\\w.@-]+)\\0|s p/Apple AFP/ i/name: $1; afpserver: $3; protocol 3.1; Mac OS X 10.3.*/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.3/\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x83\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x03\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\0|s p/Apple AFP/ i/name: $1; protocol 3.1; Mac OS X 10.3.*/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.3/\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x83\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x03\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\tDHCAST128|s p/Apple AFP/ i/name: $1; protocol 3.1; Mac OS X 10.3.*/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.3/\n\n# Flags \\x8f\\xfa.\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfa.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x01\\x06AFP3\\.1.\\tDHCAST128|s p/Apple Airport Extreme AFP/ i/name: $1; protocol 3.1/ d/WAP/ cpe:/h:apple:airport_extreme/\n\n# Flags \\x8f\\xfb.\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x04\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\x01.afpserver/([-\\w_.@]+)\\0|s p/Apple AFP/ i/name: $1; afpserver: $3; protocol 3.2; Mac OS X 10.3 - 10.5/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x04\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\x01.afpserver|s p/Apple AFP/ i/name: $1; protocol 3.2; Mac OS X 10.3 - 10.5/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x04\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\0|s p/Apple AFP/ i/name: $1; protocol 3.2; Mac OS X 10.3 - 10.5/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\n\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x04\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\x06Recon1\\rClient Krb v2\\x0fNo User Authent\\0.*[\\x04\\x05]([\\w.-]+)\\x01.afpserver/([-\\w_.@]+)\\0|s p/Apple AFP/ i/name: $1; afpserver: $3; protocol 3.2; Mac OS X 10.5 Server/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x_server:10.5/\n\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh.\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\x01.afpserver|s p/Apple AFP/ i/name: $1; protocol 3.3; Mac OS X 10.5/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.5/\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh.\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\tDHCAST128|s p/Apple AFP/ i/name: $1; protocol 3.3; Mac OS X 10.5/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.5/\n\nmatch afp m=^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*?(i?Mac(?:mini|Pro|Book(?:Air|Pro)?)?\\d+,\\d+)\\x04\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\x01.afpserver=s p/Apple AFP/ i/name: $1; protocol 3.3; Mac OS X 10.5 - 10.6; $2/ o/Mac OS X/ h/$3/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.5/ cpe:/o:apple:mac_os_x:10.6/\n\n# Patched version of OS X 10.5 may match these too... wait for corrections\nmatch afp m=^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*?(i?Mac(?:mini|Pro|Book(?:Air|Pro)?)?\\d+,\\d+)\\x04\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\0\\0=s p/Apple AFP/ i/name: $1; protocol 3.3; Mac OS X 10.6; $2/ o/Mac OS X/ h/$3/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.6/\n\nmatch afp m=^\\x01\\x03\\0\\x80........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*?(i?Mac(?:mini|Pro|Book(?:Air|Pro)?)?\\d+,\\d+)\\x04\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\x01.afpserver=s p/Apple AFP/ i/name: $1; protocol 3.3; Mac OS X 10.5 - 10.6; $2/ o/Mac OS X/ h/$3/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.5/ cpe:/o:apple:mac_os_x:10.6/\nmatch afp m|^\\x01\\x03\\0\\x80........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh.\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\x01.afpserver|s p/Apple AFP/ i/name: $1; protocol 3.3; Mac OS X 10.5/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.5/\n\n# Flags \\x8f\\xfb.\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*AirPort.*AFP3\\.2|s p|Apple Airport Extreme/Time Capsule AFP| i/name: $1; protocol 3.2 WAP/ cpe:/h:apple:airport_extreme/\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*TimeCapsule.*AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1.\\tDHCAST128.*[\\x04\\x05]([\\w.-]+)\\0|s p/Apple Time Capsule AFP/ i/name: $1; protocol 3.3/ d/storage-misc/ h/$2/\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*TimeCapsule.*AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1.\\tDHCAST128|s p/Apple Time Capsule AFP/ i/name: $1; protocol 3.3/ d/storage-misc/\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tVMware7,1\\x04\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03.\\tDHCAST128\\x04DHX2\\x06Recon1\\rClient\\x20Krb\\x20v2\\0\\0.*[\\x04\\x05]([\\w.-]+)\\x01.afpserver/([\\w.@-]+)\\0|s p/Apple AFP/ i/name: $1; afpserver: $3; protocol 3.1; Mac OS X 10.6.3/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\n# Sometimes the hostname isn't included\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x04\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2.\\tDHCAST128|s p/Apple AFP/ i/name: $1; protocol 3.2; Mac OS X 10.3 - 10.5/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\n\n# Flags \\x9f\\xf3\nmatch afp m=^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x9f\\xf3.([^\\0\\x01]+)[\\0\\x01].*?(i?Mac(?:mini|Pro|Book(?:Air|Pro)?)?\\d+,\\d+)\\x05\\x06AFP3\\.4\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03=s p/Apple AFP/ i/name: $1; protocol 3.4; OS X 10.9 - 10.11; $2/ o/OS X/ cpe:/a:apple:afp_server/ cpe:/o:apple:mac_os_x:10.10/ cpe:/o:apple:mac_os_x:10.11/ cpe:/o:apple:mac_os_x:10.9/\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x9f\\xf3.([^\\0\\x01]+).*?VMware(\\d+),(\\d+)\\x05\\x06AFP3\\.4\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03|s p/Apple AFP/ i/name: $1; protocol 3.4; VMware $2.$3/ o/Mac OS X/ cpe:/a:apple:afp_server/ cpe:/o:apple:mac_os_x/a\n\n# Flags \\x9f\\xfb.\nmatch afp m=^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x9f\\xfb.([^\\0\\x01]+)[\\0\\x01].*?(i?Mac(?:mini|Pro|Book(?:Air|Pro)?)?\\d+,\\d+)\\x05\\x06AFP3\\.4\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06\\tDHCAST128\\x04DHX2\\x06Recon1\\rClient Krb v2\\x03GSS\\x0fNo User Authent.*\\x1b\\$not_defined_in_RFC4178@please_ignore$=s p/Apple AFP/ i/name: $1; protocol 3.4; Mac OS X 10.6 - 10.8; $2/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.6/ cpe:/o:apple:mac_os_x:10.7/ cpe:/o:apple:mac_os_x:10.8/\nmatch afp m=^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x9f\\xfb.([^\\0\\x01]+)[\\0\\x01].*?(i?Mac(?:mini|Pro|Book(?:Air|Pro)?)?\\d+,\\d+)\\x05\\x06AFP3\\.4\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x05\\tDHCAST128\\x04DHX2\\x06Recon1\\rClient Krb v2\\x03GSS.*\\x1b\\$not_defined_in_RFC4178@please_ignore=s p/Apple AFP/ i/name: $1; protocol 3.4; Mac OS X 10.6 - 10.8; $2/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.6/ cpe:/o:apple:mac_os_x:10.7/ cpe:/o:apple:mac_os_x:10.8/\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x9f\\xfb.([^\\0\\x01]+)[\\0\\x01].*VMware(\\d+),(\\d+)\\x05\\x06AFP3\\.4\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06\\tDHCAST128\\x04DHX2\\x06Recon1\\rClient Krb v2\\x03GSS\\x0fNo User Authent.*\\x1b\\$not_defined_in_RFC4178@please_ignore$|s p/Apple AFP/ i/name: $1; protocol 3.4; Mac OS X 10.6; VMware $2.$3/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\nmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x9f\\xfb.([^\\0\\x01]+)[\\0\\x01].*Xserve\\d+,\\d+\\x05\\x06AFP3\\.4\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x05\\tDHCAST128|s p/Apple AFP/ i/name: $1; protocol 3.4; Xserve/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\nmatch afp m=^\\x01\\x03\\0\\0........\\0\\0\\0\\0........\\x9f\\xfb.([^\\0\\x01]+)[\\0\\x01].*?(i?Mac(?:mini|Pro|Book(?:Air|Pro)?)?\\d+,\\d+)\\x05\\x06AFP3\\.4\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x05\\tDHCAST128\\x04DHX2\\x06Recon1\\x03GSS\\x0fNo User Authent=s p/Apple AFP/ i/name: $1; protocol 3.4; OS X 10.8; $2/ o/OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x:10.8/\n\nsoftmatch afp m|^\\x01\\x03\\0\\0........\\0\\0\\0\\0.*AFP|s\n\nmatch ajp13 m|^AB\\0N\\x04\\x01\\x94\\0\\x06/cccb/\\0\\0\\x02\\0\\x0cContent-Type\\0\\0\\x17text/html;charset=utf-8\\0\\0\\x0eContent-Length\\0\\0\\x03970\\0AB\\x03| p/Apache Jserv/\n\nmatch cpu m|^unsupported auth method\\0| p/Plan 9 cpu/ o/Plan 9/ cpe:/o:belllabs:plan_9/a\n\nmatch decomsrv m|^\\x02\\0\\0\\x01\\x03\\0U\\xd0DSQ\\x02\\0\\0\\x01\\x03\\0U\\xd0DSQ$| p/Lotus Domino decommission server/ i/decomsrv.exe/ cpe:/a:ibm:lotus_domino/\n\nmatch dsr-video m|^\\0\\0\\0\\0\\0\\x84\\0\\x10\\x01\\xa3{\\x10\\0\\0\\0\\0$| p/Avocent KVM DSR video/\n\nmatch ftp m|^220 \\r\\n451 The parameter is incorrect\\. \\r\\n| p/IIS ftpd/ o/Windows/ cpe:/a:microsoft:internet_information_services/ cpe:/o:microsoft:windows/a\n# Better to grab more details elsewhere\nsoftmatch ftp m|^220 .*\\r\\n451 The parameter is incorrect\\. \\r\\n| p/IIS ftpd/ o/Windows/ cpe:/a:microsoft:internet_information_services/ cpe:/o:microsoft:windows/a\n\nmatch h.239 m|^BadRecord| p/Polycom People+Content IP H.239/ d/VoIP phone/\nmatch h323q931 m|^\\x03\\0\\x000\\x08\\x02\\0\\0}\\x08\\x02\\x80\\xe2\\x14\\x01\\0~\\0\\x1d\\x05\\x08 \\x19\\0\\x06\\0\\x08\\x91J\\0\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Polycom ViewStation H.323/\n\nmatch http m|^HTTP/1\\.0 500 Internal Server Error\\r\\nConnection: Close\\r\\nContent-Type: text/html\\r\\n.*<p>java\\.lang\\.Exception: Invalid request: \\x16\\x03|s p/Dell PowerEdge OpenManage Server Administrator httpd/ o/Windows/ cpe:/a:dell:openmanage_server_administrator/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 400 Bad Request\\nContent-type: text/html\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n<HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\n<BODY><H1>400 Bad Request</H1>\\nUnsupported method\\.\\n</BODY>\\n| p/Brivo EdgeReader access control http interface/ d/security-misc/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nContent-Length: 30\\r\\nContent-Type: text/plain\\r\\n\\r\\nHTTP requires CRLF terminators| p/CherryPy wsgiserver/ cpe:/a:cherrypy:cherrypy/\nmatch http m|^<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2\\.0//EN\">\\n<html><head>\\n<title>501 Method Not Implemented</title>\\n</head><body>\\n<h1>Method Not Implemented</h1>\\n<p>\\x16\\x03 to /[^ ]* not supported\\.<br />\\n</p>\\n<hr>\\n<address>IBM_HTTP_Server at ([\\w.-]+) Port \\d+</address>\\n</body></html>\\n| p/IBM HTTP Server/ h/$1/ cpe:/a:ibm:http_server/\nmatch http m|^HTTP/1\\.1 400 Bad Request\\r\\nDate: .*<center>nginx</center>\\r\\n</body>\\r\\n</html>\\r\\n$|s p/nginx/ i/reverse proxy/ cpe:/a:igor_sysoev:nginx/\nmatch http m|^<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2\\.0//EN\">\\n<html><head>\\n<title>501 Method Not Implemented</title>\\n</head><body>\\n<h1>Method Not Implemented</h1>\\n<p>\\x16\\x03 to /[^ ]* not supported\\.<br />\\n</p>\\n<hr>\\n<address>Apache Server at ([\\w.-]+) Port \\d+</address>\\n</body></html>\\n| p/Apache httpd/ h/$1/ cpe:/a:apache:http_server/a\n\nmatch http-proxy m|^ 400 badrequest\\r\\nVia: 1\\.0 ([\\w.-]+) \\(McAfee Web Gateway ([\\w._-]+)\\)\\r\\nConnection: Close\\r\\n| p/McAfee Web Gateway/ v/$2/ i/Via $1/ cpe:/a:mcafee:web_gateway:$2/\nmatch http-proxy m|^HTTP/1\\.1 400\\r\\nConnection: close\\r\\n\\r\\nBad request syntax \\('\\\\x16\\\\x03\\\\x00\\\\x00S\\\\x01\\\\x00\\\\x00O\\\\x03\\\\x00\\?G\\\\xd7\\\\xf7\\\\xba,\\\\xee\\\\xea\\\\xb2${backquote}~\\\\xf3\\\\x00\\\\xfd\\\\x82\\{\\\\xb9\\\\xd5\\\\x96\\\\xc8w\\\\x9b\\\\xe6\\\\xc4\\\\xdb<=\\\\xdbo\\\\xef\\\\x10n\\\\x00\\\\x00\\(\\\\x00\\\\x16\\\\x00\\\\x13\\\\x00'\\)| p/XX-Net web proxy tool/\nmatch http-proxy m|^HTTP/1\\.0 414 Request URI too long\\r\\nContent-Type: text/html\\r\\nContent-Length: 23\\r\\nExpires: now\\r\\nPragma: no-cache\\r\\nCache-control: no-cache,no-store\\r\\n\\r\\nRequest URI is too long| p/Pound http reverse proxy/ cpe:/a:apsis:pound/\n\nmatch ilo-vm m|^\\\"\\0\\x03\\0$| p/HP Integrated Lights-Out Virtual Media/ cpe:/h:hp:integrated_lights-out/\nmatch iperf3 m|^\\t$|\n\nmatch login m|^\\0\\r\\nlogin: \\^W\\^@\\^@\\^@\\^| p/VxWorks logind/ o/VxWorks/ cpe:/o:windriver:vxworks/a\n\nmatch maxdb m|^.Rejected bad connect packet\\0$|s p/SAP MaxDB/\n\nmatch msexchange-logcopier m|^\\x15\\x01\\0\\0\\x08\\0\\0\\0\\0\\x80\\t\\x03\\x08$| p/Microsoft Exchange 2010 log copier/ cpe:/a:microsoft:exchange_server:2010/\n\n# Some echo back the length from the probe?\nmatch modbus m|^\\x16\\x03\\0\\0[\\0S]\\x03[\\0\\x01]\\x80[\\x01-\\x03]| p/Modbus TCP/\nmatch modbus m|^\\x16\\x03\\0\\0[\\0S]\\x03[\\0\\x01]\\x80[\\x0a-\\x0b]| p/Modbus TCP/ i/gateway/\n# SoftPLC?\nmatch modbus m|^\\x16\\x03\\0\\0\\0\\xfd[\\0\\x01]\\x80[\\x01-\\x03]\\0+$| p/Modbus TCP/\n# Mitsubishi variable frequency drive\nmatch modbus m|^\\x16\\x03\\0\\0S\\x03\\0\\x93\\x01| p/Modbus TCP/\n\nmatch netbios-ssn m|^\\0\\0\\0%G\\xd7\\xf7\\xba,\\xff\\xea\\xff\\xff~\\xf3\\0\\xfd\\x82{\\xb9\\xd5\\x96\\xc8w\\x9b\\xe6\\xc4\\xdb<=\\xdbo\\xef\\x10n\\0\\0\\0\\0\\x16\\0$| p/Konica Minolta bixhub 350 printer smbd/ d/printer/ cpe:/h:konicaminolta:bixhub_350/a\n\nmatch pbx-alarm m|^1\\x0c5\\x0c9\\x0c\\x0b\\x03$| p/Aastra Open Interfaces Platform PBX alarm server/ d/PBX/ cpe:/a:aastra:oip/\n\nmatch pop3-proxy m|^ERR concurrent connection limit in avast! exceeded\\(pass:\\d+, processes:([\\w._-]+)\\[\\d+\\]\\)\\r\\n| p/Avast! anti-virus pop3 proxy/ i/connection limit exceeded by $1/ o/Windows/ cpe:/o:microsoft:windows/\n\n# This funny service runs on port 9001 and seems to echo other service probes,\n# however they don't seem to come in any obvious order. Examples:\n# ---------- GenericLines ----------\n# m|^GET / HTTP/1\\.0|\n# ---------- GetRequest ----------\n# m|^OPTIONS / HTTP/1\\.0|\n# ---------- SSLSessionReq ----------\n# m|^OPTIONS / RTSP/1\\.0|\n# ---------- SSLv23SessionReq ----------\n# m|^\\x80\\0\\0\\(r\\xfe\\x1d\\x13\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x01\\x86\\xa0\\0\\x01\\x97\\x7c\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|\nmatch postx-reporting m|^OPTIONS / RTSP/1\\.0| p/PostX IP Reporting alarm system/\n\nmatch progress m|^\\0\\0\\0\\x01\\0\\x17\\0\\x14\\0\\x06\\0\\0\\0.\\0\\0\\0\\0\\0\\0|s p/Progress Database/ cpe:/a:progress:database/\n\n# SecureTransport 5.3\nmatch ptcp m|^\\0.\\x02\\0\\0\\x02\\0CClient /[\\d.]+:\\d+ has requested unsupported pTCP version 0\\x02\\0\\0\\0\\0| p/Axway SecureTransport PeSIT over pTCP/ cpe:/a:axway:securetransport/\n\nmatch ptp-ip m|^\\x0c\\0\\0\\0\\x05\\0\\0\\0\\x03\\0\\0\\0| p/Picture Transport Protocol over IP/\n\nmatch remoting m|^\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01..\\0\\0System\\.Runtime\\.Remoting\\.RemotingException: |s p/MS .NET Remoting services/ cpe:/a:microsoft:.net_framework/\n\nmatch siebel m|^\\0\\0\\0\\x40\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0..\\0\\0\\0\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\x4e...\\0...\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x05\\0\\0\\0\\x0c\\0\\0\\0\\x08\\0\\x12\\0\\x68\\0\\0\\0\\0$| p/Siebel Gateway Name Server/ cpe:/a:oracle:siebel_suite/\n\nmatch xtel m|^\\x15Annuaire \\xe9lectronique| p/xteld/ i/French/\n\nmatch tor m|^\\x16\\x03\\0\\0\\*\\x02\\0\\0&\\x03\\0.*T[oO][rR]1.*[\\x00-\\x20]([-\\w_.]+) <identity>|s p/Tor node/ i/Node name: $1/ cpe:/a:torproject:tor/\n\nmatch storagecraft-image m|^\\x15\\x01\\0\\0\\x08\\0\\0\\0\\0\\x80\\t\\x03\\x08\\.NET\\x01\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x03\\x01\\0\\x03\\0\\x01\\x01 \\0\\0\\0Authentication failure on server\\x05\\0\\0\\0\\0$| p/StorageCraft Image Manager/\n\nmatch vmware-print m|^\\r\\0\\0+$| p/VMware virtual printing service/\n\nmatch xamarin m|^ERROR: Another instance is running\\n| p/Xamarin MonoTouch/\n\n##############################NEXT PROBE##############################\n# This is an RDP connection request with the MSTS cookie set. Some RDP\n# listeners (with NLA?) only respond to this one.\n# This must be sent before TLSSessionReq because Windows RDP will handshake TLS\n# immediately and we don't have a way of identifying RDP at that point.\nProbe TCP TerminalServerCookie q|\\x03\\0\\0*%\\xe0\\0\\0\\0\\0\\0Cookie: mstshash=nmap\\r\\n\\x01\\0\\x08\\0\\x03\\0\\0\\0|\nrarity 7\nports 3388,3389\nfallback TerminalServer\n\n# Windows 10\nmatch ms-wbt-server m|^\\x03\\0\\0\\x13\\x0e\\xd0\\0\\0\\x124\\0\\x02\\x1f\\x08\\0\\x02\\0\\0\\0| p/Microsoft Terminal Services/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ms-wbt-server m|^\\x03\\0\\0\\x0b\\x06\\xd0\\0\\0\\x124\\0$| p/Microsoft Terminal Services/ o/Windows XP/ cpe:/o:microsoft:windows_xp/a\n\n##############################NEXT PROBE##############################\n# TLSv1.2 ClientHello probe. TLS implementations may choose to ignore (close\n# silently) incompatible ClientHello messages like the one in SSLSessionReq.\n# This one should be widely compatible, and if we avoid adding non-ssl service\n# matches here, we can continue to upgrade it (bytes 10 and 11 and the ranges\n# in the match lines)\nProbe TCP TLSSessionReq q|\\x16\\x03\\0\\0\\x69\\x01\\0\\0\\x65\\x03\\x03U\\x1c\\xa7\\xe4random1random2random3random4\\0\\0\\x0c\\0/\\0\\x0a\\0\\x13\\x009\\0\\x04\\0\\xff\\x01\\0\\0\\x30\\0\\x0d\\0,\\0*\\0\\x01\\0\\x03\\0\\x02\\x06\\x01\\x06\\x03\\x06\\x02\\x02\\x01\\x02\\x03\\x02\\x02\\x03\\x01\\x03\\x03\\x03\\x02\\x04\\x01\\x04\\x03\\x04\\x02\\x01\\x01\\x01\\x03\\x01\\x02\\x05\\x01\\x05\\x03\\x05\\x02|\nrarity 1\n# Remove 3388 and 3389 if the ssl/ms-wbt-server match below doesn't catch stuff well enough.\nports 443,444,465,636,989,990,992,993,994,995,1241,1311,2252,3388,3389,4433,4444,5061,6679,6697,8443,8883,9001\nfallback GetRequest\n\n# SSLv3 - TLSv1.3 ServerHello\nmatch ssl m|^\\x16\\x03[\\0-\\x04]..\\x02\\0\\0.\\x03[\\0-\\x03]|s\n# SSLv3 - TLSv1.3 Alert\nmatch ssl m|^\\x15\\x03[\\0-\\x04]\\0\\x02[\\x01\\x02].$|s\n\nmatch autonomic-mrad m|^\\x1b\\[2J\\x1b\\[2J\\r\\n\\r\\nAutonomic Controls MRAD Bridge version (\\d[\\w.]+) Release\\.\\r\\nMore info found on the Web http://www\\.Autonomic-Controls\\.com\\r\\n\\r\\nType '\\?' for help or 'help <command>' for help on <command>\\.\\r\\n\\r\\n\\r\\nError: Unknown command '\\x01'\\.\\r\\nError: Unknown command '\\x03'\\.\\r\\n| p/Autonomic Controls MRAD Bridge/ v/$1/ d/media device/\n\nmatch iperf3 m|^\\t$|\n\n##############################NEXT PROBE##############################\n# SSLv2-compatible ClientHello, 39 ciphers offered.\n# Will elicit a ServerHello from most SSL implementations, apart from those\n# that are TLSv1-only or SSLv3-only. As it comes after the SSLv3 probe\n# (SSLSessionReq), its only added value is the detection of SSLv2-only servers.\n# SSLv2-only servers are rare so this probe has a high rarity.\nProbe TCP SSLv23SessionReq q|\\x80\\x9e\\x01\\x03\\x01\\x00u\\x00\\x00\\x00 \\x00\\x00f\\x00\\x00e\\x00\\x00d\\x00\\x00c\\x00\\x00b\\x00\\x00:\\x00\\x009\\x00\\x008\\x00\\x005\\x00\\x004\\x00\\x003\\x00\\x002\\x00\\x00/\\x00\\x00\\x1b\\x00\\x00\\x1a\\x00\\x00\\x19\\x00\\x00\\x18\\x00\\x00\\x17\\x00\\x00\\x16\\x00\\x00\\x15\\x00\\x00\\x14\\x00\\x00\\x13\\x00\\x00\\x12\\x00\\x00\\x11\\x00\\x00\\n\\x00\\x00\\t\\x00\\x00\\x08\\x00\\x00\\x06\\x00\\x00\\x05\\x00\\x00\\x04\\x00\\x00\\x03\\x07\\x00\\xc0\\x06\\x00@\\x04\\x00\\x80\\x03\\x00\\x80\\x02\\x00\\x80\\x01\\x00\\x80\\x00\\x00\\x02\\x00\\x00\\x01\\xe4i<+\\xf6\\xd6\\x9b\\xbb\\xd3\\x81\\x9f\\xbf\\x15\\xc1@\\xa5o\\x14,M \\xc4\\xc7\\xe0\\xb6\\xb0\\xb2\\x1f\\xf9)\\xe8\\x98|\n\nrarity 8\nports 443,444,465,548,636,989,990,992,993,994,995,1241,1311,2000,4433,4444,5550,7210,7272,8009,8194,8443,9001\nfallback GetRequest\n\n# SSLv2 ServerHello\nmatch ssl m|^..\\x04\\0.\\0\\x02|s p/SSLv2/\n\n# TLSv1 ServerHello, compatible with SSLv2:\nmatch ssl m|^\\x16\\x03\\x01..\\x02...\\x03\\x01|s p/TLSv1/\n\n# SSLv3 ServerHello, compatible with SSLv2:\nmatch ssl m|^\\x16\\x03\\0..\\x02...\\x03\\0|s p/SSLv3/\n\n# SSLv3 - TLSv1.3 ServerHello\nmatch ssl m|^\\x16\\x03[\\0-\\x04]..\\x02\\0\\0.\\x03[\\0-\\x03]|s\n\n# SSLv3 - TLSv1.2 Alert\nmatch ssl m|^\\x15\\x03[\\0-\\x04]\\0\\x02[\\x01\\x02].$|s\n\nmatch iperf3 m|^\\t$|\nmatch misys-loaniq m|^\\0\\0\\0#sJ\\0\\0\\0\\0\\0\\0#\\0\\0\\0Invalid time string: \\n\\0\\0\\0\\0#sJ\\0\\0\\0\\0\\0\\0#\\0\\0\\0Invalid time string: \\n\\0\\0\\0\\0#sJ\\0\\0\\0\\0\\0\\0#\\0\\0\\0Invalid time string: \\n\\0\\0\\0\\0#sJ\\0\\0\\0\\0\\0\\0#\\0\\0\\0Invalid time string: \\n\\0\\0\\0..sJ\\0\\0\\0\\0\\0\\0..\\0\\0\\n Misys Loan IQ ([\\w._-]+) \\(Server\\)\\n Build  : for Windows using Oracle \\(built: (\\w\\w\\w \\d\\d \\d\\d\\d\\d_\\d\\d:\\d\\d:\\d\\d) \\([\\w._-]+@[\\w._-]+-C:\\\\[^)]*\\)\\)\\n Patch Info : \\[(?:[\\w._-]+(?:, )?)+\\]\\n\\n Environment name: \\w+ Prime - \\w+\\n    ADMCP Primary node: \\w+;  Secondary node: \\w+; Portdaem Port = (\\d+)\\n\\n Current time: [^\\n]*\\n On: \\w+  \\([\\w._-]+\\)\\n OS: (Microsoft Windows[^\\n]*)\\n MEMORY  \\(Tot/Free\\) : ([\\d.]+) / ([\\d.]+) MB\\n\\n Last Logger Start : [^\\n]*\\n L$| p/Misys Loan IQ/ v/$1/ i|built $2; portdaem port $3; free memory $6/$5 MB; $4| o/Windows/ cpe:/o:microsoft:windows/a\nmatch misys-loaniq m|^\\0\\0@\\0tJ\\0\\0\\0\\0\\0\\0\\0@\\0\\0\\n Misys Loan IQ ([\\w._-]+) \\(Server\\)\\n Build  : for Windows using Oracle \\(built: (\\w\\w\\w \\d\\d \\d\\d\\d\\d_\\d\\d:\\d\\d:\\d\\d) \\([\\w._-]+@[\\w._-]+-C:\\\\[^)]*\\)\\)\\n Patch Info : \\[\\]\\n\\n Environment name: \\w+ \\w+\\n    ADMCP Primary node: \\w+;  Secondary node: \\w+; Portdaem Port = (\\d+)\\n\\n Current time: [^\\n]*\\n On: \\w+  \\([\\w._-]+\\)\\n OS: (Microsoft Windows[^\\n]*)\\n MEMORY  \\(Tot/Free\\) : ([\\d.]+) / ([\\d.]+) MB\\n| p/Misys Loan IQ/ v/$1/ i|built $2; portdaem port $3; free memory $6/$5 MB; $4| o/Windows/ cpe:/o:microsoft:windows/a\n\n\n##############################NEXT PROBE##############################\n# Kerberos AS_REQ with realm NM, server name krbtgt/NM, missing client name.\nProbe TCP Kerberos q|\\0\\0\\0\\x71\\x6a\\x81\\x6e\\x30\\x81\\x6b\\xa1\\x03\\x02\\x01\\x05\\xa2\\x03\\x02\\x01\\x0a\\xa4\\x81\\x5e\\x30\\x5c\\xa0\\x07\\x03\\x05\\0\\x50\\x80\\0\\x10\\xa2\\x04\\x1b\\x02NM\\xa3\\x17\\x30\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e\\x30\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM\\xa5\\x11\\x18\\x0f19700101000000Z\\xa7\\x06\\x02\\x04\\x1f\\x1e\\xb9\\xd9\\xa8\\x17\\x30\\x15\\x02\\x01\\x12\\x02\\x01\\x11\\x02\\x01\\x10\\x02\\x01\\x17\\x02\\x01\\x01\\x02\\x01\\x03\\x02\\x01\\x02|\nrarity 5\nports 88\n\n# MIT 1.2.8\nmatch kerberos-sec m=^\\0\\0\\0[\\x88-\\x8a]~\\x81[\\x86-\\x88]0\\x81[\\x83-\\x85]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa2\\x11\\x18\\x0f\\d{14}Z\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01\\x06\\xa9\\x04\\x1b\\x02NM\\xaa\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM\\xab\\(\\x1b&Client not found in Kerberos database\\0$=s p/MIT Kerberos/ v/1.2/ i/server time: $1-$2-$3 $4:$5:$6Z/ cpe:/a:mit:kerberos:5-1.2/\n\n# OS X 10.6.2; MIT 1.3.5, 1.6.3, 1.7.\nmatch kerberos-sec m=^\\0\\0\\0[\\x6d-\\x6f]~[\\x6b-\\x6d]0[\\x69-\\x6b]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa2\\x11\\x18\\x0f\\d{14}Z\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01\\x06\\xa9\\x04\\x1b\\x02NM\\xaa\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM\\xab\\x0e\\x1b\\x0cNULL_CLIENT\\0$=s p/MIT Kerberos/ v/1.3 - 1.8/ i/server time: $1-$2-$3 $4:$5:$6Z/ cpe:/a:mit:kerberos:5-1/\n\n# Heimdal 1.0.1-5ubuntu4\nmatch kerberos-sec m=^\\0\\0\\0[\\x62-\\x64]~[\\x60-\\x62]0[\\x5e-\\x60]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01<\\xa9\\x04\\x1b\\x02NM\\xaa\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM\\xab\\x16\\x1b\\x14No client in request$=s p/Heimdal Kerberos/ i/server time: $1-$2-$3 $4:$5:$6Z/ cpe:/a:heimdal:kerberos/\n\nmatch kerberos-sec m=^\\0\\0\\0[\\x4a-\\x4c]~[\\x48-\\x4a]0[\\x46-\\x48]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01D\\xa9\\x04\\x1b\\x02NM\\xaa\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM$=s p/Microsoft Windows Kerberos/ i/server time: $1-$2-$3 $4:$5:$6Z/ o/Windows/ cpe:/a:microsoft:kerberos/ cpe:/o:microsoft:windows/a\nmatch kerberos-sec m=^\\0\\0\\0[\\x79-\\xf0]\\0[\\x79-\\xf0]\\0\\x01\\0\\0~[\\x71-\\xe8]0[\\x69-\\x80]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01<\\xa9.\\x1b.([\\w.-]+)\\xaa\\x1d0\\x1b\\xa0\\x03\\x02\\x01\\0\\xa1\\x140\\x12\\x1b\\x06kadmin\\x1b\\x08changepw\\xac#\\x04!\\0\\x01Request length was inconsistent=s p/MIT Kerberos/ i/OpenWRT; server time: $1-$2-$3 $4:$5:$6Z; realm: $7/ cpe:/a:mit:kerberos/\n\nmatch netradio m%^@(?:NETRADIO|MAIN|SYS):[A-Z0-9]+=% p/Yamaha Net Radio/ d/media device/\n\nmatch qemu-vlan m|^\\0\\0\\0qj\\x81n0\\x81k\\xa1\\x03\\x02\\x01\\x05\\xa2\\x03\\x02\\x01\\n\\xa4\\x81\\^0\\\\\\xa0\\x07\\x03\\x05\\0P\\x80\\0\\x10\\xa2\\x04\\x1b\\x02NM\\xa3\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM\\xa5\\x11\\x18\\x0f19700101000000Z| p/QEMU VLAN listener/ cpe:/a:qemu:qemu/\n\nmatch sap-gui m|^\\0\\0\\0\\x0e\\*\\*DPTMMSG\\*\\*\\0\\0\\xf8| p/SAP Gui Dispatcher/ cpe:/a:sap:gui/\n\nsoftmatch smpp m|^\\0\\0\\0\\x10\\x80\\0\\0\\0\\0\\0\\0\\x03....$|s\n\n# SMB Negotiate Protocol\n##############################NEXT PROBE##############################\nProbe TCP SMBProgNeg q|\\0\\0\\0\\xa4\\xff\\x53\\x4d\\x42\\x72\\0\\0\\0\\0\\x08\\x01\\x40\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x40\\x06\\0\\0\\x01\\0\\0\\x81\\0\\x02PC NETWORK PROGRAM 1.0\\0\\x02MICROSOFT NETWORKS 1.03\\0\\x02MICROSOFT NETWORKS 3.0\\0\\x02LANMAN1.0\\0\\x02LM1.2X002\\0\\x02Samba\\0\\x02NT LANMAN 1.0\\0\\x02NT LM 0.12\\0|\nrarity 4\nports 42,88,135,139,445,660,1025,1027,1031,1112,3006,3900,5000,5009,5432,5555,5600,7461,9102,9103,18182,27000-27010\n\nmatch anynet-sna m|^\\0\\0MF\\xff\\xf3MBr\\0\\0\\0\\0\\x08\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\0\\x81\\0\\x02PC NETWORK PROGRAM 1\\.0\\0\\x02MICROSOFT NETWORKS 1\\.03\\0\\x02MICROSOFT NETWORKS 3\\.0\\0\\x02LANMAN1\\.0\\0\\x02LM1\\.2X002\\0\\x02Samba\\0\\x02NT LANMAN 1\\.0\\0\\x02NT LM 0$| p/AnyNet SNA/\nmatch as-signon m|^\\0\\0\\0\\x18\\xffSMBr\\0\\0\\0\\0\\x08\\x01@\\0\\x04\\xf0\\0\\0\\x01\\0\\x03$| p/IBM Client Tools signon/\n\nmatch nomachine-nx m|^...................................................................................................\\x00\\x00\\x00\\x00\\x00.\\x00\\x00\\x00\\x00\\x00\\x00\\x00...\\x00\\x00\\x00\\x00\\x00...\\x84\\x8e\\x7f\\x00\\x00......\\x00\\x00......\\x00\\x00......\\x00\\x00......\\x00\\x00...\\x00\\x00\\x00\\x00\\x00....\\x8e\\x7f\\x00\\x00......\\x00\\x00......\\x00\\x00...\\x00\\x00\\x00\\x00\\x00...\\x00\\x00\\x00\\x00\\x00...\\x00\\x00\\x00\\x00\\x00......\\x00\\x00...\\x00\\x00\\x00\\x00\\x00....\\x00\\x00\\x00\\x00......\\x00\\x00...\\x84\\x8e\\x7f\\x00\\x00......\\x00\\x00......\\x00\\x00....\\x00\\x00\\x00\\x00......\\x00\\x00...\\x00\\x00\\x00\\x00\\x00.....\\x7f\\x00\\x00......\\x00\\x00.\\xfe\\x7c\\x17..\\x00\\x00......\\x00\\x00...\\x00\\x00\\x00\\x00\\x00......\\x00\\x00......\\x00\\x00....\\x00\\x00\\x00\\x00......\\x00\\x00...\\x00\\x00\\x00\\x00\\x00......\\x00\\x00\\x40.....\\x00\\x00......\\x00\\x00......\\x00\\x00......\\x00\\x00.....\\x7f\\x00\\x00...\\x00\\x00\\x00\\x00\\x00...\\x00\\x00\\x00\\x00\\x00...\\x00\\x00\\x00\\x00\\x00...\\x00\\x00\\x00\\x00\\x00....\\x8e\\x7f\\x00\\x00......\\x00\\x00...| p/NoMachine NX remote administration/\n\nmatch airport-admin m|^acpp\\0.\\0.....\\0\\0\\0\\x01| p/Apple AirPort or Time Capsule admin/\n\nmatch afarianotify m|^\\0\\0\\x017<AfariaNotify version=\\\"([\\w._-]+)\\\"><Client name=\\\"\\w+\\\" GUID=\\\"{[0-9A-F-]+}\\\"/><Message type=\\\"Response\\\" value=\\\"Client Error\\\"><Description><!\\[CDATA\\[\\[\\w\\w\\w \\w\\w\\w \\d\\d \\d\\d:\\d\\d:\\d\\d \\d\\d\\d\\d\\]\\t\\[Unrecognized notification header\\]:\\t\\[Expected\\]:<AfariaNotify version=\\r\\n\\r\\n\\]\\]></Description></Message></AfariaNotify>| p/Sybase Afaria/ v/$1/ i/Abbott i-STAT blood analyzer/\n\nmatch ajp13 m|^\\0\\0\\0\\x01\\0\\x0cUnauthorized| p/Oracle Containers for J2EE/ i/unauthorized/ cpe:/a:oracle:containers_for_j2ee/\n\nmatch bmc-tmart m=^\\x15uBMC TM ART Version ([\\w._-]+, Build \\d+ from [\\d-]+), Copyright \\? [\\d-]+ BMC Software, Inc\\. \\| All Rights Reserved\\.= p/BMC Transaction Management Application Response Time/ v/$1/ cpe:/a:bmc:transaction_management_application_response_time:$1/\n\nmatch brassmonkey m|^\\x08\\0\\0\\0\\0\\0\\x08\\x01\\0\\0\\t\\0$| p/Brass Monkey controller service/\n\nmatch byond m|^\\0\\0\\0\\x02\\0\\0$| p/BYOND game platform/\n\nmatch caigos-conductus m|^\\0\\0\\0\\0\\0\\0\\0=r\\0\\0\\0\\0\\0\\0\\0\\xd8\\x97%\\x01\\x13\\0\\0\\0CONDUCTUS_PG([\\w._-]+)\\x1a\\0\\0\\0unbekannter Code: 19240920$| p/Conductus/ v/$1/ i/Caigos GIS/\nmatch caigos-pactor m|^\\0\\0\\0\\0\\0\\0\\0:r\\0\\0\\0\\0\\0\\0\\0\\xe8EU\\x04\\x10\\0\\0\\0PACTOR_PG([\\w._-]+)\\x1a\\0\\0\\0unbekannter Code: 72697320$| p/Pactor/ v/$1/ i/Caigos GIS/\nmatch caigos-fundus m|^\\0\\0\\0\\0\\0\\0\\0;r\\0\\0\\0\\0\\0\\0\\0h\\xd52\\t\\x10\\0\\0\\0FUNDUS_PG([\\w._-]+)\\x1b\\0\\0\\0unbekannter Code: 154326376$| p/Fundus/ v/$1/ i/Caigos GIS/\nmatch caigos-paratus m|^\\0\\0\\0\\0\\0\\0\\0;r\\0\\0\\0\\0\\0\\0\\0XL\\)\\x01\\x11\\0\\0\\0PARATUS_PG([\\w._-]+)\\x1a\\0\\0\\0unbekannter Code: 19483736$| p/Paratus/ v/$1/ i/Caigos GIS/\nmatch caigos-conspectus m|^\\0\\0\\0\\0\\0\\0\\0>r\\0\\0\\0\\0\\0\\0\\0\\xf8\\x926\\x01\\x14\\0\\0\\0CONSPECTUS_PG([\\w._-]+)\\x1a\\0\\0\\0unbekannter Code: 20353784$| p/Conspectus/ v/$1/ i/Caigos GIS/\n\nmatch digitalwatchdog m|^\\x01\\0\\0\\0\\0\\0\\0\\(PSPROTOCOL\\0\\0\\0\\0\\0\\0\\xa0\\0\\0\\x01\\0\\0\\0\\x0c\\0\\0\\0\\0\\0\\0\\0\\0\\xe0\\0\\0\\x04\\0\\0\\0\\0\\0\\0\\0\\0| p/Digital Watchdog IP camera unknown service/ d/webcam/\n# Need more matches. Same response to Kerberos, runs on 1489 and 1490(secure)\nmatch docbroker m|^\\0\\0\\0\\x080\\x06\\x02\\x01\\0\\x02\\x01i| p/Documentum Content Server/ cpe:/a:emc:documentum_content_server/\nmatch fastobjects-db m|^\\xce\\xfa\\x01\\0\\x16\\0\\0\\0\\0\\0\\0\\x003\\xf6\\0\\0\\0\\0\\0\\0\\0\\0$| p/Versant FastObjects database/\n\n# Flexlm might be too general: -Doug\nmatch flexlm m|^W.-60\\0|s p/FlexLM license manager/\nmatch flexlm m|^W.\\0\\0\\0\\0|s p/FlexLM license manager/\n\nmatch greenplum m|^E\\0\\0\\0\\x83SFATAL\\0C0A000\\0Munsupported frontend protocol 3923\\.19778: server supports 1\\.0 to 3\\.0\\0Fpostmaster\\.c\\0L2504\\0RProcessStartupPacket\\0\\0| p/Greenplum database/\n\nmatch h2 m|^\\x52\\x00\\x00\\x00\\x08\\x00\\x00\\x00\\x03$| p/H2 database/\n\nmatch honeywell-hscodbcn m|^\\0\\0\\0\\x02\\0\\x03$| p/Honeywell hscodbcn power management server/\n\nmatch http m|^HTTP/1\\.0 503 OK\\r\\nContent-Type: text/html\\r\\n\\r\\nBusy$| p/D-Link DI-524 WAP http config/ d/WAP/ cpe:/h:dlink:di-524/\nmatch http m|^HTTP/1\\.1 414 Request URI Too Long\\r\\nServer: Catwalk\\r\\nDate: .*\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\n\\r\\n$| p/Catwalk httpd/ i/Canon imageRUNNER printer/ d/printer/\nmatch iperf3 m|^\\t$|\n\n# Need more examples of this one -Doug\nmatch kerberos-sec m|^.*Internal KDC error, contact administrator|s p/Shishi kerberos-sec/\n\nmatch libvirt-rpc m|^\\0\\0\\0\\xb8\\xffSMBr\\0\\0\\0\\0\\x08\\x01@\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0'\\0\\0\\0\\x07\\0\\0\\0\\x01\\0\\0\\0\\x30Cannot find program -11317950 version 1912602624\\0\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x02%s\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x30Cannot find program -11317950 version 1912602624\\0\\0\\0\\0\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\0\\0\\0\\0| p/libvirt RPC/ cpe:/a:redhat:libvirt/\n\nmatch lorex-monitor m|^\\0\\0\\x01\\x01@\\n\\0\\x08\\x80\\0\\x82\\0L\\xb8..\\xff\\xff\\xff\\xff\\0\\0\\0\\0$|s p/Lorex security camera monitor/ d/webcam/\n\nmatch metatrader m|^A$| p/MetaTrader Data Center/\n\n# Longhorn\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.\\n\\0\\x01\\0\\x04\\x11\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfd\\xe3\\x03\\0|s p/Microsoft Windows Longhorn microsoft-ds/ o/Windows/ cpe:/o:microsoft:windows/a\n# Windows XP SP1\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.\\n\\0\\x01\\0\\x04\\x11\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfd\\xe3\\0\\0|s p/Microsoft Windows XP microsoft-ds/ o/Windows XP/ cpe:/o:microsoft:windows_xp/a\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.2\\0\\x01\\0\\x04A\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfd\\xf3\\0\\0|s p/Microsoft Windows 2000 microsoft-ds/ o/Windows 2000/ cpe:/o:microsoft:windows_2000/a\n# Microsoft Windows 2003 or 2008\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.2\\0\\x01\\0\\x04.\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfd\\xf3\\x01\\0|s p/Microsoft Windows 2003 or 2008 microsoft-ds/ o/Windows/ cpe:/o:microsoft:windows_server_2003/a\n# Microsoft Windows 2000 Server\n# Microsoft Windows 2000 Server SP4\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.[}2]\\0\\x01\\0\\x04A\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfd[\\xe3\\xf3]\\0\\0|s p/Microsoft Windows 2000 microsoft-ds/ o/Windows 2000/ cpe:/o:microsoft:windows_2000/a\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.2\\0\\x01\\0\\x04A\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfc\\xe3\\x01\\0|s p/Microsoft Windows Server 2008 R2 - 2012 microsoft-ds/ o/Windows Server 2008 R2 - 2012/ cpe:/o:microsoft:windows/\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.2\\0\\x01\\0\\x04A\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfc\\xf3\\x01\\0.{21}((?:..)*)\\0\\0((?:..)*)\\0\\0|s p/Microsoft Windows Server 2008 R2 - 2012 microsoft-ds/ i/workgroup: $P(1)/ o/Windows/ h/$P(2)/ cpe:/o:microsoft:windows/\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.\\n\\0\\x01\\0\\x04\\x11\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfc\\xe3\\x01\\0.{21}((?:..)*)\\0\\0((?:..)*)\\0\\0|s p/Microsoft Windows 7 - 10 microsoft-ds/ i/workgroup: $P(1)/ o/Windows/ h/$P(2)/ cpe:/o:microsoft:windows/\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.\\n\\0\\x01\\0\\x04\\x11\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfc\\xe3\\x01\\0|s p/Microsoft Windows 7 - 10 microsoft-ds/ o/Windows/ cpe:/o:microsoft:windows/\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.2\\0\\x01\\0\\x04\\x11\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfc\\xe3\\x01\\0.{21}(.*)\\0\\0(.*)\\0\\0|s p/Microsoft Windows 7 - 10 microsoft-ds/ i/workgroup: $P(1)/ o/Windows/ h/$P(2)/ cpe:/o:microsoft:windows/\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.2\\0\\x01\\0\\x04\\x11\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfc\\xe3\\x01\\0|s p/Microsoft Windows 7 - 10 microsoft-ds/ o/Windows/ cpe:/o:microsoft:windows/\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.2\\0\\x01\\0\\x04A\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfd\\xe3\\x01\\0.{21}((?:..)*)\\0\\0((?:..)*)\\0\\0|s p/Microsoft Windows Server 2008 R2 microsoft-ds/ i/workgroup: $P(1)/ o/Windows/ h/$P(2)/ cpe:/o:microsoft:windows_server_2008:r2/a\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.\\x10\\0\\x01\\0\\x04\\x11\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfc\\xe3\\x01\\0.{21}((?:..)*)\\0\\0((?:..)*)\\0\\0|s p/Microsoft Windows Embedded Standard microsoft-ds/ i/workgroup: $P(1)/ o/Windows/ h/$P(2)/ cpe:/o:microsoft:windows/a\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.\\x10\\0\\x01\\0\\x04\\x11\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfd\\xe3\\0\\0.{21}((?:..)*)\\0\\0((?:..)*)\\0\\0|s p/Microsoft Windows XP Embedded microsoft-ds/ i/workgroup: $P(1)/ o/Windows/ h/$P(2)/ cpe:/o:microsoft:windows_xp/a\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.\\x0a\\0\\x01\\0\\x04\\x11\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfd\\xe3\\x01\\0.{21}((?:..)*)\\0\\0((?:..)*)\\0\\0|s p/Microsoft Windows Vista Embedded microsoft-ds/ i/workgroup: $P(1)/ o/Windows/ h/$P(2)/ cpe:/o:microsoft:windows_vista/a\n\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.\\x05\\0\\x01\\0\\x04\\x11\\0\\0\\0\\0\\x01\\0\\xad\\x05\\0\\0|s p|IBM OS/400 microsoft-ds| o|OS/400| cpe:/o:ibm:os_400/a\n\n# Xerox WorkCentre Pro c3545 and Xerox DocumentCentre 425\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x81\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\r\\x03\\0|s p/Xerox printer microsoft-ds/ d/printer/\nmatch microsoft-ds m|^\\0\\0\\0\\x61\\xffSMBr\\0\\0\\0\\0\\x88\\x03\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x06\\0\\x02\\x0a\\0\\x01\\0....\\xff\\xff\\x00\\x00....\\0\\x03\\0\\0\\0|s p/Xerox WorkCentre 5225 printer microsoft-ds/ d/printer/ cpe:/h:xerox:workcentre_5225/a\n# FujiXerox ApeosPort-IV C4470\n# Xerox WorkCentre 5225\nmatch microsoft-ds m|^\\0\\0\\0\\x61\\xffSMBr\\0\\0\\0\\0\\x88\\x03\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x06\\0\\x02\\x0a\\0\\x01\\0\\x04\\x11\\0\\0\\xff\\xff\\0\\0....\\0\\x03\\0\\0..........\\x08\\x1c\\0........\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$|s p/Xerox printer microsoft-ds/ d/printer/\nmatch microsoft-ds m|^\\0\\0\\0\\x3d\\xffSMBr\\0\\0\\0\\0\\x88\\0\\x40\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0..\\0\\0\\x01\\0\\r\\x04\\0\\x01\\0\\xfc\\x032\\0\\x03\\0\\0\\0\\0\\0\\0\\0......\\0\\0\\0\\0\\0\\0|s p/Edimax PS-1206P print server smbd/ d/print server/\nmatch microsoft-ds m|^\\0\\0\\0\\x4d\\xffSMBr\\0\\0\\0\\0\\x88\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0..\\0\\0\\x01\\0\\x11\\x07\\0\\x02\\x02\\0\\x01\\0\\xfc\\x7f\\0\\0\\0\\0\\x01\\0\\x01\\0\\0\\0\\0\\x02\\0\\0..........\\x08\\x08\\0\\0\\0\\0\\0\\0\\0\\0\\0|s p/Sharp MX-M350N printer smbd/ d/printer/ cpe:/h:sharp:mx-m350n/a\nmatch microsoft-ds m|^\\0...\\xffSMBr\\0\\0\\0\\0\\x81\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0..\\0\\0\\x01\\0\\x11\\x06\\0\\x03\\x7f\\0\\x01\\0\\xff\\xff\\0\\0\\xff\\xff\\0\\0\\0\\0\\0\\0\\xfd\\xb3\\0\\0..........\\x08\\x22\\0........((?:\\w\\0)+)\\0\\0((?:\\w\\0)+)\\0\\0$|s p/EMC Celerra NAS device smbd/ i/Primary domain: $P(1)/ h/$P(2)/\nmatch microsoft-ds m|^\\0...\\xffSMBr\\0\\0\\0\\0\\x98\\x01\\x40\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff\\x40\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x03\\x01\\0\\x01\\0\\0\\x10\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfd\\xe3\\0\\0..........\\x00\\x34\\0W\\0O\\0R\\0K\\0G\\0R\\0O\\0U\\0P\\0\\0\\0H\\0O\\0M\\0E\\0U\\0S\\0E\\0R\\0-\\0.\\0.\\0.\\0.\\0.\\0.\\0\\0\\0|s p/Dionaea honeypot smbd/\nmatch microsoft-ds m|^\\0...\\xffSMBr\\0\\0\\0\\0\\x98\\x02\\xc8\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x40\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x032\\0\\x01\\0\\x04\\x41\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\xfc\\xc0\\0\\x80..........\\0..................\\x60\\x5f\\x06\\x06\\+\\x06\\x01\\x05\\x05\\x02\\xa0U0S\\xa0\\+0\\)\\x06\\t\\*\\x86H\\x86\\xf7\\x12\\x01\\x02\\x02\\x06\\x05\\+\\x05\\x01\\x05\\x02\\x06\\t\\*\\x86H\\x82\\xf7\\x12\\x01\\x02\\x02\\x06\\n\\+\\x06\\x01\\x04\\x01\\x827\\x02\\x02\\n\\xa3\\$0\\\"\\xa0 \\x1b\\x1e[\\w._-]+/([\\w._-]+)@$|s p/Likewise smbd/ h/$1/\n# key was \\xd7\\xd7\\xd8\\xd8\\xd8\\xd8\\xd8\\xd9\nmatch microsoft-ds m|^\\0...\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x03\\n\\0\\x01\\0<\\[\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\\\\\0\\0\\0........\\0\\0\\x08\\x08\\0........| p/HP Officejet Pro 8600 printer smbd/ d/printer/ cpe:/h:hp:officejet_pro_8600/a\n# key was 4 bytes repeated\nmatch microsoft-ds m|^\\0...\\xffSMBr\\0\\0\\0\\0\\x88\\x03\\xc0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x02\\x01\\0\\x01\\0\\xff\\xff\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\}\\xa2\\0\\0..........\\x08\\x08\\0........|s p/Arcadyan ARV752DPW22 (Vodafone EasyBox 803A) WAP smbd/ d/WAP/ cpe:/h:arcadyan:arv752dpw22/\nmatch microsoft-ds m|^\\0...\\xffSMBr\\0\\0\\0\\0\\x88\\x01H\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x03\\n\\0\\x01\\0\\0\\0\\x01\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\x7c\\xe0\\0\\0..........\\x08\\x08\\0........|s p/Epson WF-2650 printer smbd/ d/printer/ cpe:/h:epson:wf-2650/a\nmatch microsoft-ds m|^\\0...\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x03\\n\\0\\x01\\0\\xec\\xfa\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\x7c \\0\\0..........\\x08\\x08\\0........|s p/Apple Time Capsule smbd/ d/storage-misc/\nmatch microsoft-ds m|^\\0...\\xffSMBr\\0\\0\\0\\0\\x88C@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x03\\xff\\xff\\x01\\0\\x04A\\0\\0\\x04A\\0\\0....\\xfc\\x02\\0\\0.{21}((?:..)+)\\0\\0((?:..)+)\\0\\0| p/Acopia ARX switch smbd/ i/workgroup: $P(1)/ d/storage-misc/ h/$P(2)/\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01@\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x02\\x01\\0\\x01\\0h\\x0b\\0\\0\\xff\\xff\\0\\0\\0\\0\\0\\0\\x07\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0..\\x08\\x08\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Fujitsu Storagebird LAN smbd/ d/storage-misc/ cpe:/h:fujitsu:storagebird_lan/\nmatch microsoft-ds m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01H\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x03\\n\\0\\x01\\0\\0\\0\\x01\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\x7c \\0\\0..........\\x08\\x08| p/Epson printer smbd/ d/printer/\nmatch microsoft-ds m|^\\0\\0\\0a\\xffSMBr\\0\\0\\0\\0\\x80\\0{16}@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x03\\x01\\0\\x14\\0@\\x1e\\0\\0\\xff\\xff\\0\\0....\\x14\\x02\\0{10}..\\x08\\x1c\\0.{8}((?:(?!\\0\\0).)+?)\\0\\0| p/Canon Pixma printer smbd/ i/workgroup: $P(1)/ d/printer/\n\n# Microsoft Windows XP SP1\n# Windows 2000\nmatch msrpc m|^\\x05\\0\\r\\x03\\x10\\0\\0\\0\\x18\\0\\0\\0....\\x04\\0\\x01\\x05\\0...$|s p/Microsoft Windows RPC/ o/Windows/ cpe:/o:microsoft:windows/a\n# Microsoft Windows 2000\n# samba-2.2.7-5.8.0 on RedHat 8\n# samba-2.2.7a-8.9.0 on Red Hat Linux 7.x\nmatch netbios-ssn m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x06\\0.*\\W([-_.\\w]+)\\0$|s p/Samba smbd/ i/workgroup: $1/ cpe:/a:samba:samba/\n# Samba 2.999+3.0.alpha21-5 on Linux\n# Samba 3.0.0rc4-Debian\n# Samba 4.1.6-ubuntu\n# Samba 3.6.x on FreeBSD\n# Samba 3.0.x based SMB implementation by Apple\nmatch netbios-ssn m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88..\\0\\0[-\\w. ]*\\0+@\\x06\\0\\0\\x01\\0\\x11\\x06\\0.{42}(.*)\\0\\0(.*)\\0\\0$|s p/Samba smbd/ v/3.X - 4.X/ i/workgroup: $P(1)/ h/$P(2)/ cpe:/a:samba:samba/\n# The line below may no longer be required and seems to miss the first capture on test systems\nmatch netbios-ssn m=^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88..\\0\\0[-\\w. ]*\\0+@\\x06\\0\\0\\x01\\0\\x11\\x06\\0.*(?:[^\\0]|[^_A-Z0-9-]\\0)((?:[-\\w]\\0){2,50})=s p/Samba smbd/ v/3.X - 4.X/ i/workgroup: $P(1)/ cpe:/a:samba:samba/\nmatch netbios-ssn m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88..\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x06\\0..\\0\\x01\\0..\\0\\0...\\0..\\0\\0|s p/Samba smbd/ v/3.X - 4.X/ cpe:/a:samba:samba/\n# Samba 2.2.8a on Linux 2.4.20\nmatch netbios-ssn m|^\\x83\\0\\0\\x01\\x81$| p/Samba smbd/ cpe:/a:samba:samba/\nmatch netbios-ssn m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x88..\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x01\\xff\\xff\\0\\0$|s p/Samba smbd/ v/4.6.2/ cpe:/a:samba:samba:4.6.2/\n# DAVE 4.1 enhanced windows networks services for Mac on Mac OS X\nmatch netbios-ssn m|^\\0\\0\\0.\\xffSMBr\\x02\\0Y\\0\\x98\\x01.\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\0\\x07\\0|s p/Thursby DAVE Windows filesharing/ i/Runs on Macintosh systems/ o/Mac OS/ cpe:/o:apple:mac_os/a\n# Windows Session Service - 139/tcp - Formerly Window 98 match, actually matches Win 98 through Windows 8 / 2012 R2\nmatch netbios-ssn m|^\\x83\\0\\0\\x01\\x8f$| p/Microsoft Windows netbios-ssn/ o/Windows/ cpe:/o:microsoft:windows/a\n# Netware might just be using Samba?\nmatch netbios-ssn m|^\\0\\0\\0M\\xffSMBr\\0\\0\\0\\0\\x80\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x032\\0\\x01\\0\\xff\\xff\\0\\0\\0\\0\\x01\\0| p/NetWare 6 SMB Services/ o/NetWare/ cpe:/o:novell:netware:6/\n# Network Appliance ONTAP 6.3.3 netbios-ssn\nmatch netbios-ssn m=^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x98\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.*(?:[^\\0]|[^_A-Z0-9-]\\0)((?:[-\\w]\\0){2,50})=s p/Netapp ONTAP smbd/ i/workgroup: $P(1)/ cpe:/a:netapp:data_ontap/\nmatch netbios-ssn m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x98\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0.*\\W([-_.\\w]+)\\0$| p/Netapp ONTAP smbd/ i/workgroup: $1/ cpe:/a:netapp:data_ontap/\nmatch netbios-ssn m|^\\0\\0\\0M\\xffSMBr\\0\\0\\0\\0\\x88\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x02\\x02\\0\\x01\\0\\0\\x80\\0\\0\\0\\0\\x01\\0\\x01\\0\\0\\0\\0\\x02\\0\\0| p/Kyocera FS-1030D printer smbd/ d/printer/ cpe:/h:kyocera:fs-1030d/a\nmatch netbios-ssn m|^\\x82\\0\\0\\0\\n-> doHttp: Connection timeouted!\\n\\ntelnetd: This system \\*IN USE\\* via telnet\\.\\nshell restarted\\.\\n\\x08\\x08\\x08\\x08        \\*\\*\\*  EPSON Network Print Server \\(([^)]+)\\)  \\*\\*\\*\\n\\n\\x08\\x08\\x08\\x08        \\nPassword: | p/Epson print server smbd/ v/$1/ d/print server/\nmatch netbios-ssn m|^\\0\\0\\0M\\xffSMBr\\0\\0\\0\\0\\x98. \\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x03\\x32\\0\\x01\\0....\\x00\\x00\\x01\\x00....\\xf4\\xc2\\0\\0|s p/IOGear GMFPSU22W6 print server smbd/ d/print server/ cpe:/h:iogear:gmfpsu22w6/a\n# match netbios-ssn m|^\\0\\0\\0M\\xffSMBr\\0\\0\\0\\0\\x98\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x032\\0\\x01\\0\\x04A\\0\\0\\0\\0\\x01\\0 \\0\\0\\0\\xf4\\xc2\\0\\0\\x80\\x1e\\xdd\\x8b\\xe7\\?\\xca\\x01 \\xfe\\x08\\x08\\0z~\\xc7\\*\\xc9\\x1f\\xd3\\x9b\"\nmatch netbios-ssn m|^\\0\\0\\0M\\xffSMBr\\0\\0\\0\\0\\x98\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11\\x07\\0\\x02\\x01\\0\\x01\\0\\xff\\xff\\0\\0\\xff\\xff\\0\\0\\0\\0\\0\\0\\x01\\x02\\0\\0| p/Brother MFC-820CW printer smbd/ d/printer/ cpe:/h:brother:mfc-820cw/a\nmatch netbios-ssn m|^\\0\\0\\0G\\xffSMBr\\0\\0\\0\\0\\x88\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\r\\x04\\0\\0\\0\\xa0\\x05\\x02\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0WORKGROUP\\0$| p/Citizen CLP-521 printer smbd/ d/printer/ cpe:/h:citizen:clp-521/\nmatch netbios-ssn m|^\\0\\0\\0G\\xffSMBr\\0\\0\\0\\0\\x88\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\r\\x04\\0\\0\\0\\xa0\\x05\\x02\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Kyocera Mita KM-1530 printer smbd/ d/printer/ cpe:/h:kyocera:mita_km-1530/a\nmatch netbios-ssn m|^\\x82\\0\\0\\0$| p/Konica Minolta bizhub C452 printer smbd/ d/printer/ cpe:/h:konicaminolta:bizhub_c452/\n\n# Too broad, but also gives good info\nsoftmatch microsoft-ds m|^\\0\\0..\\xffSMBr\\0\\0\\0\\0[\\x80-\\xff]..\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11[\\x01-\\x07]\\0.{42}(.*)\\0\\0(.*)\\0\\0$|s i/workgroup: $P(1)/ h/$P(2)/\nsoftmatch microsoft-ds m|^\\0\\0..\\xffSMBr\\0\\0\\0\\0[\\x80-\\xff]..\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x06\\0\\0\\x01\\0\\x11[\\x01-\\x07]\\0|s\n\nmatch remote-volume m|^\\0\\0\\0\\x18\\xffSMB\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x01\\0\\0\\0| p/NetApp Remote Volume protocol/\nmatch netradio m%^@(?:NETRADIO|MAIN|SYS):[A-Z0-9]+=% p/Yamaha Net Radio/ d/media device/\n\nmatch nightwatchman m|^ACKDONEV\\$\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0([\\d.]+)\\0\\0\\0| p/1E NightWatchman WakeUp Server/ v/$1/\n\n# HP OpenView Storage Data Protector A.05.10 on Windows 2000\n# Hewlett Packard Omniback 4.1 on Windows NT\nmatch omniback m|^\\0\\0\\0.\\xff\\xfe1\\x005\\0\\0\\0 \\0\\x07\\0\\x01\\0\\[\\x001\\x002\\0:\\x001\\0\\]\\0\\0\\0 \\0\\x07\\0\\x02\\0\\[\\x002\\x000\\x000\\x003\\0\\]\\0\\0\\0 |s p/HP OpenView Omniback/ o/Windows/ cpe:/o:microsoft:windows/a\n# HP OpenView Storage Data Protector A.05.10 on Linux\nmatch omniback m|^\\0\\0\\0.15\\0 \\x07\\x01\\[12:1\\]\\0 \\x07\\x02\\[2003\\]\\0 \\x07\\x051\\d+\\0 INET\\0 ([\\w._-]+)\\0|s p|HP OpenView Omniback/Data Protector| o/Unix/ h/$1/\n\nmatch ouman-trend m|^\\0\\0\\0\\x05\\xffSMBr$| p/Ouman Trend environmental sensor/\n\n#### Match versions based on line numbers in error messages.\n# http://seclists.org/nmap-dev/2010/q1/456\n# Update like this:\n# cd src/backend/postmaster/; git tag -l 'REL*' | while read tag; do git checkout $tag -- postmaster.c; echo $tag:$(grep -n \"PG_PROTOCOL_MINOR(PG_PROTOCOL_LATEST))));\" postmaster.c) >> lines.txt; done\n\n# The line numbers need to be updated in both the non-Windows and Windows sections\n\n# Amazon Redshift, based on PostgreSQL 8.0.2\n# line numbers are distinctly different, as well as the source code path\nmatch postgresql m|^E\\0\\0\\0.SFATAL\\0C0A000\\0Munsupported frontend protocol 65363\\.19778: server supports 1\\.0 to 3\\.0\\0F/home/ec2-user/padb/src/pg/src/backend/postmaster/postmaster\\.c\\0L2463\\0RProcessStartupPacket\\0\\0$|s p/Amazon Redshift/ v/1.0.1691/ cpe:/a:amazon:redshift:1.0.1691/\n\n# PostgreSQL - Non-Windows platforms\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1287\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/7.4.0 - 7.4.1/ cpe:/a:postgresql:postgresql:7.4/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1293\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/7.4.2 - 7.4.30/ cpe:/a:postgresql:postgresql:7.4/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1408\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.0 - 8.0.1/ cpe:/a:postgresql:postgresql:8.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1431\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.2 - 8.0.4/ cpe:/a:postgresql:postgresql:8.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1439\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.7 - 8.0.8/ cpe:/a:postgresql:postgresql:8.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1443\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.9 - 8.0.13/ cpe:/a:postgresql:postgresql:8.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1445\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.6 or 8.0.14 - 8.0.26/ cpe:/a:postgresql:postgresql:8.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1449\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.1.0/ cpe:/a:postgresql:postgresql:8.1.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1450\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.1.1/ cpe:/a:postgresql:postgresql:8.1.1/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1448\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.1.3 - 8.1.4/ cpe:/a:postgresql:postgresql:8.1/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1452\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.1.5 - 8.1.9/ cpe:/a:postgresql:postgresql:8.1/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1454\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.1.2 or 8.1.10 - 8.1.23/ cpe:/a:postgresql:postgresql:8.1/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1432\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.2.0/ cpe:/a:postgresql:postgresql:8.2.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1437\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.2.1 - 8.2.4/ cpe:/a:postgresql:postgresql:8.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1440\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.2.5 - 8.2.19/ cpe:/a:postgresql:postgresql:8.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1441\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.5 or 8.2.20 - 8.2.23/ cpe:/a:postgresql:postgresql:8.0.5/ cpe:/a:postgresql:postgresql:8.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1497\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.3.0 - 8.3.7/ cpe:/a:postgresql:postgresql:8.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1507\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.3.8 - 8.3.13/ cpe:/a:postgresql:postgresql:8.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1508\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.3.14 - 8.3.18/ cpe:/a:postgresql:postgresql:8.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1514\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.3.19/ cpe:/a:postgresql:postgresql:8.3.19/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1515\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.3.20 - 8.3.23/ cpe:/a:postgresql:postgresql:8.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1570\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.4.0/ cpe:/a:postgresql:postgresql:8.4.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1621\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.4.1 - 8.4.11/ cpe:/a:postgresql:postgresql:8.4/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1626\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.4.12/ cpe:/a:postgresql:postgresql:8.4.12/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1627\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.4.13 - 8.4.19/ cpe:/a:postgresql:postgresql:8.4/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1622\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.4.20 - 8.4.22/ cpe:/a:postgresql:postgresql:8.4/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1666\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.0 - 9.0.7/ cpe:/a:postgresql:postgresql:9.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1671\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.8/ cpe:/a:postgresql:postgresql:9.0.8/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1677\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.9 - 9.0.15/ cpe:/a:postgresql:postgresql:9.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1672\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.16 - 9.0.18/ cpe:/a:postgresql:postgresql:9.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1705\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.19 - 9.0.22/ cpe:/a:postgresql:postgresql:9.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1753\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.23/ cpe:/a:postgresql:postgresql:9.0.23/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1694\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.0 - 9.1.1/ cpe:/a:postgresql:postgresql:9.1/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1695\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.2 - 9.1.3/ cpe:/a:postgresql:postgresql:9.1/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1700\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.4/ cpe:/a:postgresql:postgresql:9.1.4/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1706\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.5 - 9.1.11/ cpe:/a:postgresql:postgresql:9.1/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1701\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.12 - 9.1.14/ cpe:/a:postgresql:postgresql:9.1/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1734\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.15 - 9.1.18/ cpe:/a:postgresql:postgresql:9.1/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1803\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.19/ cpe:/a:postgresql:postgresql:9.1.19/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1833\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.20 - 9.1.24/ cpe:/a:postgresql:postgresql:9.1/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1612\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.0 - 9.2.6/ cpe:/a:postgresql:postgresql:9.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1607\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.7 - 9.2.9/ cpe:/a:postgresql:postgresql:9.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1640\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.10 - 9.2.13/ cpe:/a:postgresql:postgresql:9.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1709\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.14/ cpe:/a:postgresql:postgresql:9.2.14/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1739\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.15 - 9.2.16/ cpe:/a:postgresql:postgresql:9.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1742\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.17/ cpe:/a:postgresql:postgresql:9.2.17/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1746\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.18 - 9.2.19/ cpe:/a:postgresql:postgresql:9.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1747\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.20 - 9.2.21/ cpe:/a:postgresql:postgresql:9.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1755\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.22 - 9.2.24/ cpe:/a:postgresql:postgresql:9.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1837\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.0 - 9.3.2/ cpe:/a:postgresql:postgresql:9.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1834\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.3 - 9.3.5/ cpe:/a:postgresql:postgresql:9.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1872\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.6 - 9.3.9/ cpe:/a:postgresql:postgresql:9.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1949\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.10/ cpe:/a:postgresql:postgresql:9.3.10/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1979\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.11 - 9.3.12/ cpe:/a:postgresql:postgresql:9.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1982\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.13/ cpe:/a:postgresql:postgresql:9.3.13/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1849\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.0/ cpe:/a:postgresql:postgresql:9.4.0/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1881\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.1 - 9.4.4/ cpe:/a:postgresql:postgresql:9.4/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1955\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.5/ cpe:/a:postgresql:postgresql:9.4.5/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1986\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.14 - 9.3.15 or 9.4.6 - 9.4.8/ cpe:/a:postgresql:postgresql:9/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1987\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.16 - 9.3.17/ cpe:/a:postgresql:postgresql:9.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1994\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.21 - 9.3.25/ cpe:/a:postgresql:postgresql:9.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1990\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.9/ cpe:/a:postgresql:postgresql:9.4.9/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2000\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.10/ cpe:/a:postgresql:postgresql:9.4.10/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2001\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.11/ cpe:/a:postgresql:postgresql:9.4.11/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2002\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.12/ cpe:/a:postgresql:postgresql:9.4.12/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2010\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.13 - 9.4.15 or 9.4.22 - 9.4.26/ cpe:/a:postgresql:postgresql:9.4/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2009\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.16 - 9.4.21, 9.5.20 (Docker apline image)/ cpe:/a:postgresql:postgresql:9.4/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1991\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.0 - 9.5.3/ cpe:/a:postgresql:postgresql:9.5/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L1995\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.18 - 9.3.20 or 9.5.4/ cpe:/a:postgresql:postgresql:9/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2005\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.5/ cpe:/a:postgresql:postgresql:9.5.5/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2006\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.6/ cpe:/a:postgresql:postgresql:9.5.6/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2007\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.7/ cpe:/a:postgresql:postgresql:9.5.7/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2015\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.8 - 9.5.10 or 9.5.17 - 9.5.21/ cpe:/a:postgresql:postgresql:9.5/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2014\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.11 - 9.5.16/ cpe:/a:postgresql:postgresql:9.5/\n# 9.6.0 introduced a nonlocalized error message\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2008\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.0 - 9.6.1/ cpe:/a:postgresql:postgresql:9.6/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2009\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.2/ cpe:/a:postgresql:postgresql:9.6.2/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2023\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.3/ cpe:/a:postgresql:postgresql:9.6.3/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2031\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.4 - 9.6.6 or 9.6.13 - 9.6.17/ cpe:/a:postgresql:postgresql:9.6/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2030\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.7 - 9.6.12/ cpe:/a:postgresql:postgresql:9.6/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2065\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/10.0 - 10.1 or 10.8 - 10.12/ cpe:/a:postgresql:postgresql:10/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2064\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/10.2 - 10.7/ cpe:/a:postgresql:postgresql:10/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2015\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/11.0 - 11.2/ cpe:/a:postgresql:postgresql:11/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2016\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/11.3 - 11.7/ cpe:/a:postgresql:postgresql:11/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2060\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/12.0 - 12.2/ cpe:/a:postgresql:postgresql:12/\n\n# PostgreSQL - Docker image - most docker images have the same error message as the release version, these do not.\n# Seems images build after the move to from Alpine 3.10 to 3.11 have changed line numbers.\n# PR where this behavior starts: https://github.com/docker-library/postgres/pull/657\nmatch postgresql m|^E\\0\\0\\0.SFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2004\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.25 - 9.4.26/ i/Docker alpine image/ cpe:/a:postgresql:postgresql:9.4/ cpe:/a:alpinelinux:alpine_linux:-/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2025\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.16 - 9.6.17/ i/Docker alpine image/ cpe:/a:postgresql:postgresql:9.6/ cpe:/a:alpinelinux:alpine_linux:-/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2059\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/10.11 - 10.12/ i/Docker alpine image/ cpe:/a:postgresql:postgresql:10/ cpe:/a:alpinelinux:alpine_linux:-/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2010\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/11.6 - 11.7/ i/Docker alpine image/ cpe:/a:postgresql:postgresql:11/ cpe:/a:alpinelinux:alpine_linux:-/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0Fpostmaster\\.c\\0L2054\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/12.1 - 12.2/ i/Docker alpine image/ cpe:/a:postgresql:postgresql:12/ cpe:/a:alpinelinux:alpine_linux:-/\n\n\n# PostgreSQL - Windows platforms\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1287\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/7.4.0 - 7.4.1/ o/Windows/ cpe:/a:postgresql:postgresql:7.4/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1293\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/7.4.2 - 7.4.30/ o/Windows/ cpe:/a:postgresql:postgresql:7.4/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1408\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.0 - 8.0.1/ o/Windows/ cpe:/a:postgresql:postgresql:8.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1431\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.2 - 8.0.4/ o/Windows/ cpe:/a:postgresql:postgresql:8.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1439\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.7 - 8.0.8/ o/Windows/ cpe:/a:postgresql:postgresql:8.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1443\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.9 - 8.0.13/ o/Windows/ cpe:/a:postgresql:postgresql:8.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1445\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.6 or 8.0.14 - 8.0.26/ o/Windows/ cpe:/a:postgresql:postgresql:8.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1449\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.1.0/ o/Windows/ cpe:/a:postgresql:postgresql:8.1.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1450\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.1.1/ o/Windows/ cpe:/a:postgresql:postgresql:8.1.1/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1448\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.1.3 - 8.1.4/ o/Windows/ cpe:/a:postgresql:postgresql:8.1/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1452\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.1.5 - 8.1.9/ o/Windows/ cpe:/a:postgresql:postgresql:8.1/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1454\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.1.2 or 8.1.10 - 8.1.23/ o/Windows/ cpe:/a:postgresql:postgresql:8.1/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1432\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.2.0/ o/Windows/ cpe:/a:postgresql:postgresql:8.2.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1437\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.2.1 - 8.2.4/ o/Windows/ cpe:/a:postgresql:postgresql:8.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1440\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.2.5 - 8.2.19/ o/Windows/ cpe:/a:postgresql:postgresql:8.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1441\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.0.5 or 8.2.20 - 8.2.23/ o/Windows/ cpe:/a:postgresql:postgresql:8.0.5/ cpe:/a:postgresql:postgresql:8.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1497\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.3.0 - 8.3.7/ o/Windows/ cpe:/a:postgresql:postgresql:8.3/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1507\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.3.8 - 8.3.13/ o/Windows/ cpe:/a:postgresql:postgresql:8.3/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1508\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.3.14 - 8.3.18/ o/Windows/ cpe:/a:postgresql:postgresql:8.3/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1514\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.3.19/ o/Windows/ cpe:/a:postgresql:postgresql:8.3.19/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1515\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.3.20 - 8.3.23/ o/Windows/ cpe:/a:postgresql:postgresql:8.3/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1570\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.4.0/ o/Windows/ cpe:/a:postgresql:postgresql:8.4.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1621\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.4.1 - 8.4.11/ o/Windows/ cpe:/a:postgresql:postgresql:8.4/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1626\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.4.12/ o/Windows/ cpe:/a:postgresql:postgresql:8.4.12/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1627\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.4.13 - 8.4.19/ o/Windows/ cpe:/a:postgresql:postgresql:8.4/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1622\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/8.4.20 - 8.4.22/ o/Windows/ cpe:/a:postgresql:postgresql:8.4/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1666\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.0 - 9.0.7/ o/Windows/ cpe:/a:postgresql:postgresql:9.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1671\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.8/ o/Windows/ cpe:/a:postgresql:postgresql:9.0.8/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1677\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.9 - 9.0.15/ o/Windows/ cpe:/a:postgresql:postgresql:9.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1672\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.16 - 9.0.18/ o/Windows/ cpe:/a:postgresql:postgresql:9.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1705\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.19 - 9.0.22/ o/Windows/ cpe:/a:postgresql:postgresql:9.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1753\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.0.23/ o/Windows/ cpe:/a:postgresql:postgresql:9.0.23/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1694\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.0 - 9.1.1/ o/Windows/ cpe:/a:postgresql:postgresql:9.1/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1695\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.2 - 9.1.3/ o/Windows/ cpe:/a:postgresql:postgresql:9.1/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1700\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.4/ o/Windows/ cpe:/a:postgresql:postgresql:9.1.4/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1706\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.5 - 9.1.11/ o/Windows/ cpe:/a:postgresql:postgresql:9.1/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1701\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.12 - 9.1.14/ o/Windows/ cpe:/a:postgresql:postgresql:9.1/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1734\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.15 - 9.1.18/ o/Windows/ cpe:/a:postgresql:postgresql:9.1/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1803\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.19/ o/Windows/ cpe:/a:postgresql:postgresql:9.1.19/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1833\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.1.20 - 9.1.24/ o/Windows/ cpe:/a:postgresql:postgresql:9.1/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1612\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.0 - 9.2.6/ o/Windows/ cpe:/a:postgresql:postgresql:9.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1607\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.7 - 9.2.9/ o/Windows/ cpe:/a:postgresql:postgresql:9.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1640\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.10 - 9.2.13/ o/Windows/ cpe:/a:postgresql:postgresql:9.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1709\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.14/ o/Windows/ cpe:/a:postgresql:postgresql:9.2.14/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1739\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.15 - 9.2.16/ o/Windows/ cpe:/a:postgresql:postgresql:9.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1742\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.17/ o/Windows/ cpe:/a:postgresql:postgresql:9.2.17/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1746\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.18 - 9.2.19/ o/Windows/ cpe:/a:postgresql:postgresql:9.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1747\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.20 - 9.2.21/ o/Windows/ cpe:/a:postgresql:postgresql:9.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1755\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.2.22 - 9.2.24/ o/Windows/ cpe:/a:postgresql:postgresql:9.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1837\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.0 - 9.3.2/ o/Windows/ cpe:/a:postgresql:postgresql:9.3/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1834\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.3 - 9.3.5/ o/Windows/ cpe:/a:postgresql:postgresql:9.3/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1872\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.6 - 9.3.9/ o/Windows/ cpe:/a:postgresql:postgresql:9.3/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1949\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.10/ o/Windows/ cpe:/a:postgresql:postgresql:9.3.10/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1849\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.0/ o/Windows/ cpe:/a:postgresql:postgresql:9.4.0/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1881\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.1 - 9.4.4/ o/Windows/ cpe:/a:postgresql:postgresql:9.4/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1955\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.5/ o/Windows/ cpe:/a:postgresql:postgresql:9.4.5/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1986\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.14 - 9.3.15 or 9.4.6 - 9.4.8/ o/Windows/ cpe:/a:postgresql:postgresql:9/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1987\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.16 - 9.3.17/ o/Windows/ cpe:/a:postgresql:postgresql:9.3/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1994\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.21 - 9.3.25/ o/Windows/ cpe:/a:postgresql:postgresql:9.3/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1990\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.9/ o/Windows/ cpe:/a:postgresql:postgresql:9.4.9/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2000\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.10/ o/Windows/ cpe:/a:postgresql:postgresql:9.4.10/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2001\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.11/ o/Windows/ cpe:/a:postgresql:postgresql:9.4.11/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2002\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.12/ o/Windows/ cpe:/a:postgresql:postgresql:9.4.12/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2010\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.13 - 9.4.15 or 9.4.22 - 9.4.26/ o/Windows/ cpe:/a:postgresql:postgresql:9.4/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2009\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.4.16 - 9.4.21/ o/Windows/ cpe:/a:postgresql:postgresql:9.4/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1991\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.0 - 9.5.3/ o/Windows/ cpe:/a:postgresql:postgresql:9.5/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L1995\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.3.18 - 9.3.20 or 9.5.4/ o/Windows/ cpe:/a:postgresql:postgresql:9/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2005\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.5/ o/Windows/ cpe:/a:postgresql:postgresql:9.5.5/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2006\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.6/ o/Windows/ cpe:/a:postgresql:postgresql:9.5.6/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2007\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.7/ o/Windows/ cpe:/a:postgresql:postgresql:9.5.7/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2015\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.8 - 9.5.10 or 9.5.17 - 9.5.21/ o/Windows/ cpe:/a:postgresql:postgresql:9.5/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2014\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.5.11 - 9.5.16/ o/Windows/ cpe:/a:postgresql:postgresql:9.5/ cpe:/o:microsoft:windows/a\n# 9.6.0 introduced a nonlocalized error message\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2008\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.0 - 9.6.1/ o/Windows/ cpe:/a:postgresql:postgresql:9.6/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2009\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.2/ o/Windows/ cpe:/a:postgresql:postgresql:9.6.2/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2023\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.3/ o/Windows/ cpe:/a:postgresql:postgresql:9.6.3/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2031\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.4 - 9.6.6 or 9.6.13 - 9.6.17/ o/Windows/ cpe:/a:postgresql:postgresql:9.6/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2030\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/9.6.7 - 9.6.12/ o/Windows/ cpe:/a:postgresql:postgresql:9.6/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2065\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/10.0 - 10.1 or 10.8 - 10.12/ o/Windows/ cpe:/a:postgresql:postgresql:10/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2064\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/10.2 - 10.7/ o/Windows/ cpe:/a:postgresql:postgresql:10/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2015\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/11.0 - 11.2/ o/Windows/ cpe:/a:postgresql:postgresql:11/ cpe:/o:microsoft:windows/a\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2016\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/11.3 - 11.7/ o/Windows/ cpe:/a:postgresql:postgresql:11/ cpe:/o:microsoft:windows/a\n# Unverified: does postgresql 12 have a different error message?\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0L2060\\0RProcessStartupPacket\\0\\0$|s p/PostgreSQL DB/ v/12.0 - 12.2/ o/Windows/ cpe:/a:postgresql:postgresql:12/ cpe:/o:microsoft:windows/a\n\n# PostgreSQL - Language specific\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0Mnicht unterst\\xc3\\xbctztes Frontend-Protokoll 65363\\.19778: Server unterst\\xc3\\xbctzt 1\\.0 bis 3\\.0\\0Fpostmaster\\.c\\0L\\d+\\0|s p/PostgreSQL DB/ i/German; Unicode support/ cpe:/a:postgresql:postgresql::::de/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0Mnicht unterst.{1,2}tztes Frontend-Protokoll 65363\\.19778: Server unterst.{1,2}tzt 1\\.0 bis 3\\.0\\0Fpostmaster\\.c\\0L\\d+\\0|s p/PostgreSQL DB/ i/German/ cpe:/a:postgresql:postgresql::::de/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0MProtocole non support\\xc3\\xa9e de l'interface 65363\\.19778: le serveur supporte de 1\\.0 \\xc3\\xa0 3\\.0\\0Fpostmaster\\.c\\0L\\d+\\0|s p/PostgreSQL DB/ i/French; Unicode support/ cpe:/a:postgresql:postgresql::::fr/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0MProtocole non support\\?e de l'interface 65363\\.19778 : le serveur supporte de 1\\.0 \\?\\n3\\.0\\0Fpostmaster\\.c\\0L1621\\0RProcessStartupPacket\\0\\0| p/PostgreSQL DB/ v/8.4.1 - 8.4.11/ i/French/ cpe:/a:postgresql:postgresql:8.4:::fr/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0MProtocole non support\\?e de l'interface 65363\\.19778 : le serveur supporte de 1\\.0 \\?\\n3\\.0\\0Fpostmaster\\.c\\0L1626\\0RProcessStartupPacket\\0\\0$| p/PostgreSQL DB/ v/8.4.12/ i/French/ cpe:/a:postgresql:postgresql:8.4.12:::fr/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0MProtocole non support[e\\xe9]e de l'interface 65363\\.19778: le serveur supporte de 1\\.0 [a\\xe0] 3\\.0\\0Fpostmaster\\.c\\0L\\d+\\0|s p/PostgreSQL DB/ i/French/ cpe:/a:postgresql:postgresql::::fr/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0Mprotocole non support\\xe9e de l'interface 65363\\.19778: le serveur supporte de 1\\.0 \\xe0 3\\.0\\0Fpostmaster\\.c\\0L\\d+\\0|s p/PostgreSQL DB/ i/French/ cpe:/a:postgresql:postgresql::::fr/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0Mel protocolo 65363\\.19778 no est..? soportado: servidor soporta 1\\.0 hasta 3\\.0\\0Fpostmaster\\.c\\0L\\d+\\0|s p/PostgreSQL DB/ i/Spanish/ cpe:/a:postgresql:postgresql::::es/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0Mel protocolo 65363\\.19778 no est\\? permitido: servidor permite 1\\.0 hasta 3\\.0\\0Fpostmaster\\.c\\0L\\d+\\0|s p/PostgreSQL DB/ i/Spanish/ cpe:/a:postgresql:postgresql::::es/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0Mprotocolo 65363\\.19778 n\\xe3o \\xe9 suportado: servidor suporta 1\\.0 a 3\\.0\\0Fpostmaster\\.c\\0L\\d+\\0|s p/PostgreSQL DB/ i/Portuguese/ cpe:/a:postgresql:postgresql::::pt/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0Mprotocolo do cliente 65363\\.19778 n.{4,6} suportado: servidor suporta 1\\.0 a 3\\.0\\0Fpostmaster\\.c\\0L\\d+\\0|s p/PostgreSQL DB/ i/Portuguese/ cpe:/a:postgresql:postgresql::::pt/\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M\\xd0\\xbd\\xd0\\xb5\\xd0\\xbf\\xd0\\xbe\\xd0\\xb4\\xd0\\xb4\\xd0\\xb5\\xd1\\x80\\xd0\\xb6\\xd0\\xb8\\xd0\\xb2\\xd0\\xb0\\xd0\\xb5\\xd0\\xbc\\xd1\\x8b\\xd0\\xb9 \\xd0\\xba\\xd0\\xbb\\xd0\\xb8\\xd0\\xb5\\xd0\\xbd\\xd1\\x82\\xd1\\x81\\xd0\\xba\\xd0\\xb8\\xd0\\xb9 \\xd0\\xbf\\xd1\\x80\\xd0\\xbe\\xd1\\x82\\xd0\\xbe\\xd0\\xba\\xd0\\xbe\\xd0\\xbb 65363\\.19778: \\xd1\\x81\\xd0\\xb5\\xd1\\x80\\xd0\\xb2\\xd0\\xb5\\xd1\\x80 \\xd0\\xbf\\xd0\\xbe\\xd0\\xb4\\xd0\\xb4\\xd0\\xb5\\xd1\\x80\\xd0\\xb6\\xd0\\xb8\\xd0\\xb2\\xd0\\xb0\\xd0\\xb5\\xd1\\x82 \\xd0\\xbe\\xd1\\x82 1\\.0 \\xd0\\xb4\\xd0\\xbe 3\\.0\\0Fpostmaster\\.c\\0L\\d+\\0|s p/PostgreSQL DB/ i/Russian; Unicode support/ cpe:/a:postgresql:postgresql::::ru/\n# Supposed to be Ukrainian? submission came from a .ua domain.\nmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\? \\?\\?\\?\\?\\?\\?\\?\\? \\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\? \\?\\?\\?\\?\\?\\?\\?\\?\\?\\? 65363\\.19778; \\?\\?\\?\\?\\?\\? \\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\?\\? 1\\.0 - 3\\.0 \\0Fpostmaster\\.c\\0L1695\\0RProcessStartupPacket\\0\\0$| p/PostgreSQL DB/ v/9.1.2 - 9.1.3/ cpe:/a:postgresql:postgresql:9.1::uk/\n# Korean\nmatch postgresql m|^E\\0\\0\\0\\xb1S\\xec\\xb9\\x98| p/PostgreSQL DB/ cpe:/a:postgresql:postgresql/\n\n# PostgreSQL softmatch entries, put all hard matches above this line.\nsoftmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0MProtocole non support.{1,2}e de l'interface 65363| p/PostgreSQL DB/ i/French/ cpe:/a:postgresql:postgresql::::fr/\nsoftmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0Mel protocolo 65363| p/PostgreSQL DB/ i/Spanish/ cpe:/a:postgresql:postgresql::::es/\nsoftmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0Mnicht unterst.*?Frontend-Protokoll 65363\\.19778:|s p/PostgreSQL DB/ i/German/ cpe:/a:postgresql:postgresql::::de/\nsoftmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M\\xe3\\x83\\x95\\xe3\\x83\\xad\\xe3\\x83\\xb3\\xe3\\x83\\x88\\xe3\\x82\\xa8\\xe3\\x83\\xb3\\xe3\\x83\\x89\\xe3\\x83\\x97\\xe3\\x83\\xad\\xe3\\x83\\x88\\xe3\\x82\\xb3\\xe3\\x83\\xab|s p/PostgreSQL DB/ i/Japanese/ cpe:/a:postgresql:postgresql::::ja/\nsoftmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*?1\\.0.*?3\\.0.*?\\0Fpostmaster\\.c\\0|s p/PostgreSQL DB/ cpe:/a:postgresql:postgresql/\nsoftmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0M.*?65363\\.19778.*?1\\.0.*?3\\.0.*?\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0|s p/PostgreSQL DB/ o/Windows/ cpe:/a:postgresql:postgresql/ cpe:/o:microsoft:windows/a\nsoftmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0C0A000\\0Munsupported frontend protocol 65363| p/PostgreSQL DB/ cpe:/a:postgresql:postgresql/\n\nsoftmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0M.*?65363\\.19778.*?1\\.0.*?3\\.0.*?\\0F\\.\\\\src\\\\backend\\\\postmaster\\\\postmaster\\.c\\0|s p/PostgreSQL DB/ v/9.6.0 or later/ o/Windows/ cpe:/a:postgresql:postgresql/ cpe:/o:microsoft:windows/a\nsoftmatch postgresql m|^E\\0\\0\\0.S[^\\0]+\\0VFATAL\\0C0A000\\0Munsupported frontend protocol 65363| p/PostgreSQL DB/ v/9.6.0 or later/ cpe:/a:postgresql:postgresql/\n\nmatch tcsd m|^\\0\\0\\0\\x1c\\0\\0 \\x04\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/TCSD daemon/\n\n# Teradata Database 13.10\nmatch teradata m|^\\x03\\x02\\x01\\0\\0\\0\\0\\0\\x004\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x7f\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x001\\x004\\0\\0\\0\\0\\0K\\x1f\\(\\0The LAN message Format field is invalid\\.| p/Teradata database/\n\nmatch tng-dts m|^\\0\\0\\0\\$sequence_number=\\[0\\] result=\\[-2005\\] \\0$| p/CA DTS Agent/\n\n# SAP Release: SAP ECC (Enterprise Core Component) 6.0 on Windows 2003\nmatch sap-gui m|^\\0\\0\\0\\x0e\\*\\*DPTMMSG\\*\\*\\0\\0\\xf8| p/SAP Gui Dispatcher/ cpe:/a:sap:gui/\n\nmatch serversettingsd m|^\\0\\0\\x004main\\0\\0\\x01\\0\\0\\0\\0\\x0c\\0\\0\\0\\0\\0\\0\\0\\x0c\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0quit\\xff\\xff\\xff\\xffcrpt$| p/Apple serversettingsd administration daemon/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch spotify-login m|^\\x01\\0$| p/Spotify login server/\nmatch symantec-esm m|^\\0\\x01[#,]$| p/Symantec Enterprise Security Manager agent/ cpe:/a:symantec:enterprise_security_manager/\n# Windows 2000 Server Wins name resolution service\n# Windows NT 4.0 Wins\n# Windows 2003 WINS service\nmatch wins m|^\\0\\0\\0\\x1e\\xffS\\xad\\x80\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0...\\0\\0\\x01\\0\\0\\x81\\0\\x02|s p/Microsoft Windows Wins/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch sap-its m|^\\0\\0\\0\\x0c\\x01\\x03\\0\\0\\0\\0\\x07.\\0\\0\\0\\0\\0\\0\\x07.Content-Type:  text/html; charset=Windows-\\d+\\r\\n\\r\\n<!--\\r\\n This page was created by the \\r\\n SAP Internet Transaction Server|s p/SAP Internet Transaction Server/\n\n# Likely false-positive?\nmatch routersetup m|^\\0\\0\\0.\\xffSMBr\\0\\0\\0\\0\\x80|s p|Nortel/D-Link router instant setup| d/router/\nmatch tally-census m|^\\xcd\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\x02\\0\\0\\0\\0\\0$| p/Tally Collection Client/\nmatch bacula-fd m|^\\0\\0\\0\\x152999 Invalid command\\n\\xff\\xff\\xff\\xfc$| p/Bacula file daemon/\nmatch bacula-sd m|^\\0\\0\\0\\x0b3999 No go\\n$| p/Bacula storage daemon/\nmatch opsec-ufp m|^\\0\\0\\0\\x0c\\x01\\x01\\0\\x04r\\0\\0\\0$| p/Check-Point NG firewall/\n\n# Spark 1.5.2\nmatch spark m|^\\0\\0\\0\\0$| p/Apache Spark/ cpe:/a:apache:spark/\n\nmatch lexmark-objectstore m|\\0\\0\\0\\x80<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\r\\n<exception requestID=\\\"0\\\">\\r\\n  <message>Unable to parse Message\\.</message>\\r\\n</exception>\\r\\n| p/Lexmark printer objectstore/ d/printer/\nmatch lexmark-objectstore m|^\\0\\0\\0\\x7c<\\?xml version=\"1\\.0\" encoding=\"UTF-8\"\\?>\\r\\n<exception requestID=\"0\">\\n<message>Unable to parse Message\\.</message>\\n</exception>\\r\\n| p/Lexmark printer objectstore/ d/printer/\n\nmatch ftp m|^2[23]0 FTP Server Ready\\r\\n504 Comand length not supported\\.\\r\\n| p/HP JetDirect ftpd/ d/printer/\n\nmatch vertica m|^V\\0\\0\\x01f:ErrorMsg\\nelevel:23\\nfilename:/scratch_a/release/vbuild/vertica/Session/ClientSession\\.cpp\\nlineno:3800\\ncaught:SessionRun\\nsqlerrcode:16933376\\nverticacode:3753\\nmessage:Invalid startup packet layout: expected terminator as last byte\\ndetail:\\nhint:\\nlog_message:Invalid startup packet layout: expected terminator as last byte\\nlog_detail:\\nlog_hint:\\ncursorpos:0\\n\\.\\n| p/HP Vertica database/ v/7.0.1/ cpe:/a:hp:vertica:7.0.1/\nsoftmatch vertica m|^V\\0\\0\\x01f:ErrorMsg\\nelevel:23\\nfilename:/scratch_a/release/vbuild/vertica/Session/ClientSession\\.cpp\\nlineno:(\\d+)\\ncaught:SessionRun\\nsqlerrcode:16933376\\nverticacode:3753\\nmessage:Invalid startup packet layout: expected terminator as last byte\\ndetail:\\nhint:\\nlog_message:Invalid startup packet layout: expected terminator as last byte\\nlog_detail:\\nlog_hint:\\ncursorpos:0\\n\\.\\n| p/HP Vertica database/ i/error line $1/ cpe:/a:hp:vertica/\n\nsoftmatch smpp m|^\\0\\0\\0\\x10\\x80\\0\\0\\0\\0\\0\\0\\x03....$|s\n\n# From xlsclients\n##############################NEXT PROBE##############################\nProbe TCP X11Probe q|\\x6C\\0\\x0B\\0\\0\\0\\0\\0\\0\\0\\0\\0|\nrarity 4\nports 80,443,497,1550,2002,5302,6000-6020,7000,7100,7101,7777,8000\n\nmatch acti-control m|^\\x01\\0\\0\\0\\x01\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/ACTi E32 camera control server port/ d/webcam/ cpe:/h:acti:e32/\n\nmatch apcupsd m|^\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x06\\0\\0\\0\\0@\\x0c\\0\\x9c\\x18\\0\\0X Consortium\\x01\\n\\x01\\0\\x05\\0\\0\\0f\\x84\\x017\\0\\0\\0\\0\\0\\0\\0\\0$| p/apcupsd/\n\nmatch fastcgi m|^\\x01\\x0b\\0\\0\\0\\x08\\0\\0\\0\\0\\0\\0\\0...|s p/HHVM FastCGI/ cpe:/a:hiphop_virtual_machine_for_php_project:hiphop_virtual_machine_for_php/\n\n# retroclient 6.5.108 on Linux\nmatch font-service m|^\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x06\\0\\0\\0\\0@\\x0c\\0p\\x17\\0\\0X Consortium\\x01\\n\\x01\\0\\x05\\0\\0\\0....\\0\\0..\\0\\0\\0\\0$|s p/Sun Solaris fs.auto/ o/Solaris/ cpe:/o:sun:sunos/a\n# HP-UX 11.11\nmatch font-service m|^\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x06\\0\\0\\0\\0@\\x0c\\0\\xd4\\x17\\0\\0X Consortium\\x01\\n\\x01\\0\\x05\\0\\0\\0....\\0\\0..\\0\\0\\0\\0$|s p/HP-UX X Font Server/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch font-service m|^\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x0e\\0\\0\\0\\0 \\*\\0.\\x19\\0\\0The XFree86 Project[-.\\w() ]+..\\x01\\n\\x01\\0\\x05\\0\\0\\0....\\0\\0..\\0\\0\\0|s p/XFree86 X Font Server/ o/Unix/ cpe:/a:xfree86:xfree86/\nmatch font-service m|^\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x07\\0\\0\\0\\0 \\x10\\0....X\\.Org Foundation\\x01\\n|s p/X.Org X Font Server/ o/Unix/ cpe:/a:x:x.org_x11/\nmatch font-service m|^\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x07\\0\\0\\0\\0.......The X\\.Org Group|s p/X.Org X Font Server/ o/Unix/ cpe:/a:x:x.org_x11/\nmatch font-service m|^\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0\\0.......HD\\0@|s p/X Font Server for TrueType Fonts/ o/Unix/\nmatch font-service m|^\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\r\\0\\0\\0\\0.......International Business Machines Corp\\.|s p/IBM AIX X Font Server/ o/AIX/ cpe:/o:ibm:aix/a\n\nmatch modbus m|^l\\0\\0\\0\\0\\x03\\0\\x80\\x01| p/Modbus TCP/\n\nmatch networkaudio m|^\\0\\x19\\x02\\0\\x02\\0\\x07\\0Protocol version mismatch\\0| p/Network Audio System/ cpe:/a:radscan:network_audio_system/\n\nmatch retrospect m|^\\0\\xca\\0\\0\\0\\0\\0\\x04\\0\\0\\0\\0\\0\\0\\x02\\($| p/Dantz Retrospect backup client/ cpe:/a:dantz:retrospect/\n\nmatch rpcapd m|^\\0\\x01\\0\\x03\\0\\0\\0/Incompatible version number: message discarded\\.$| p/WinPcap remote packet capture daemon/ o/Windows/ cpe:/a:winpcap:winpcap/ cpe:/o:microsoft:windows/a\n\nmatch sphinx-search m|^\\0\\0\\0\\x01\\0\\x01\\0\\0\\0\\0\\0\\x1c\\0\\0\\0\\x18unknown command \\(code=0\\)| p/Sphinx Search daemon/\n\nmatch video m|^\\0\\xdc0@p\\xdc0@3\\.[0-9a-f]{8}\\.[0-9A-F]......\\0\\x000\\0\\0\\0..(?:\\*\\0/sda/1/\\d+/\\d+\\.0123\\.[0-9a-f]{8}\\.[0-9A-F]......\\0\\x000\\0\\0\\0..)+|s p/ECV ECV-REC16SH webcam video stream/ d/webcam/\n\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*Sun Microsystems, Inc\\.|s p/XSun Solaris X11 server/ o/Solaris/ cpe:/o:sun:sunos/a\nmatch X11 m|^\\0\\x2D\\x0B\\0\\0\\0\\x0C\\0| i/access denied/\n# I think the below means access denied (no authentication protocol\n# specified?) or is it a problem w/my probe that I should fix?\nmatch X11 m|^\\0\\x16\\x0b\\0\\0\\0\\x06\\0No protocol specified\\x0a..$|s i/access denied/ o/Unix/\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0......\\0\\0.*The XFree86 Project, Inc|s p/XFree86/ i/open/ o/Unix/ cpe:/a:xfree86:xfree86/\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0......\\0\\0.*The X\\.Org Foundation|s p/X.Org/ i/open/ o/Unix/ cpe:/a:x:x.org_x11/\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0.....\\x02\\0\\0..\\xff\\xff\\x1f\\0\\0\\x01\\0\\0.*Gentoo Linux \\(XFree86 (\\d[^)]+)\\)\\0\\0|s p/XFree86/ v/$1/ i/Gentoo Linux/ o/Linux/ cpe:/a:xfree86:xfree86:$1/ cpe:/o:gentoo:linux/\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0.....\\x03\\0\\0..\\xff\\xff\\x1f\\0\\0\\x01\\0\\0.\\0\\xff\\xff\\x01\\x07\\0\\0  \\x08\\xff....Gentoo Linux \\(The X\\.Org Foundation ([-\\w_.]+), revision ([-\\w_.]+)\\)\\0\\0|s p/X.Org/ v/$1 revision $2/ i/Gentoo Linux/ o/Linux/ cpe:/a:x:x.org_x11:$1/ cpe:/o:gentoo:linux/\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0.....\\x02\\0\\0.*Mandrake Linux \\(XFree86 (\\d[^\\)]+)\\)\\0\\0|s p/XFree86/ v/$1/ i/Mandrake Linux/ o/Linux/ cpe:/a:xfree86:xfree86:$1/ cpe:/o:mandrakesoft:mandrake_linux/\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0.....\\x03\\0\\0.*Mandrakelinux \\(X\\.Org X11 ([\\d.]+), patch level ([\\w.]+)\\)|s p/X.Org/ v/$1 patch level $2/ i/Mandrake Linux/ o/Linux/ cpe:/a:x:x.org_x11:$1/ cpe:/o:mandrakesoft:mandrake_linux/\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.*Conectiva Linux \\(XFree86 ([\\d.]+), patch level (\\w+)\\)|s p/XFree86/ v/$1 patch level $2/ i/Connectiva Linux/ o/Linux/ cpe:/a:xfree86:xfree86:$1/ cpe:/o:linux:linux_kernel/a\n# StarNet X-Win32 v5.4 on Windows XP\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*StarNet Communications Corp\\.|s p/StarNet X-Win32/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\0J\\x0b\\0\\0...This copy of X-Win32 will only accept connections from network ([\\d.]+)\\0\\0|s p/StarNet X-Win32/ i/Only accepting connections from net $1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0=\\0\\x01\\0\\0\\0\\0\\0\\xc0\\x06\\xff\\xff\\?.*\\0DECWINDOWS Digital Equipment Corporation Digital UNIX V(\\d[-.\\w]+)\\0\\0\\x01\\x01|s p/Digital UNIX X-Window/ v/$1/ i/Version is X Server and not of Digital UNIX/ o/Digital UNIX/ cpe:/o:dec:digital_unix/a\n# tightvnc 1.2.3 Xvnc\n# Tightvnc 3.3.3 Xvnc\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0%\\0\\x04\\r\\0\\0\\0\\0..\\xff\\xff\\?\\0\\0\\x01\\0\\0\\x1b\\0\\xff\\xff\\x01\\x02\\0\\0  \\x08\\xff....AT&T Laboratories Cambridge\\0|s p/Xvnc/\nmatch X11 m|^\\x01\\0\\x0b\\0\\0......\\0\\0\\0..\\xff\\xff\\?\\0.*AT&T Laboratories Cambridge|s p/Xvnc/\n\n# Exceed X server for Win32\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0.\\0..\\0\\0\\0\\0..\\xff\\xff\\x1f\\0\\x01\\0\\0\\0.\\0\\xff\\xff.\\x04\\0\\0\\x08 \\x08\\xfe...\\0Hummingbird Ltd\\.\\x01\\x01 \\0|s p/Hummingbird Exceed X server/ v/11.X/ o/Windows/ cpe:/a:hummingbird:exceed:11/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0.\\0..\\0\\0\\0\\0..\\xff\\xff\\?\\0\\x01\\0\\0\\0.\\0\\xff\\xff.\\x04\\x01\\x01\\x08 \\x08\\xfe...\\0Hummingbird Ltd\\.\\x01\\x01 \\0|s p/Hummingbird Exceed X server/ v/8.X, 9.X, or 10.X/ o/Windows/ cpe:/a:hummingbird:exceed/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0.\\0..\\0\\0\\0\\0..\\xff\\xff\\?\\0\\x01\\0\\0\\0.\\0\\xff\\xff\\x01\\x04\\x01\\x01\\x08 \\x08\\xfe...\\0Hummingbird Communications Ltd\\.\\0\\x01\\x01 ...\\0\\0\\x08\\x08 ...\\0\\0\\x0c\\x0c ...\\0\\0\\x18  ...\\0\\0.\\0\\0\\0 \\0\\0\\0\\xff\\xff\\xff\\0\\0\\0\\0\\0|s p/Hummingbird Exceed X server/ v/7.X/ o/Windows/ cpe:/a:hummingbird:exceed:7/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0..\\xff\\xff\\?\\0\\x01\\0\\0\\0.\\0\\xff\\xff\\x01.\\x01\\x01\\x08 \\x08\\xfe...\\0Hummingbird Communications Ltd\\..\\x01\\x01|s p/Hummingbird Exceed X server/ v/6.X/ o/Windows/ cpe:/a:hummingbird:exceed:6/ cpe:/o:microsoft:windows/a\n# General catch-alls\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0..\\xff\\xff.\\0\\x01\\0\\0..\\0\\xff\\xff......\\x08\\xfe...\\0Hummingbird Communications Ltd\\.|s p/Hummingbird Exceed X server/ o/Windows/ cpe:/a:hummingbird:exceed/ cpe:/o:microsoft:windows/a\n# This Hummingbird match isn't quite generic enough in some casses.\n# I'm not sure what all of the X11 flags are though so rather than\n# just make it more generic, I'll comment it out and include a more generic\n# one below.  [Brandon]\n#match X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0..\\xff\\xff.*Hummingbird Ltd\\.|s p/Hummingbird Exceed X server/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0......?\\0\\0\\0...?\\xff\\xff.*Hummingbird Ltd\\.|s p/Hummingbird Exceed X server/ o/Windows/ cpe:/a:hummingbird:exceed/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0..\\xff\\xff\\?\\0.\\0\\0..\\0\\xff\\xff......\\x08....\\0DECWINDOWS compatibility\\. Hummingbird|s p/Hummingbird Exceed X server/ i/DECWINDOWS compatibility/ o/Windows/ cpe:/a:hummingbird:exceed/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0..\\xff\\xff\\?\\0.\\0\\0..\\0\\xff\\xff......\\x08....\\0DECWINDOWS DigitalEquipmentCorporation, eXcursion|s p/DEC eXcursion X server/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0......\\0\\0\\0..\\xff\\xff\\?\\0.\\0\\0..\\0\\xff\\xff.*Hewlett-Packard Company\\0|s p/Hewlett-Packard X server/ o/HP-UX/ cpe:/o:hp:hp-ux/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0......\\0\\0\\0..\\xff\\xff\\?\\0.\\0\\0..\\0\\xff\\xff.*Santa Cruz Operation Inc\\.\\0|s p/SCO X server/ o/SCO UNIX/ cpe:/o:sco:sco_unix/a\n\n# HP MC/ServiceGuard for Linux A.11.14.02\nmatch X11 m|^\\0\\0\\0\\x01\\0\\0\\0\\x0c\\0\\0\\0\\0$| p|HP MC/ServiceGuard| cpe:/a:hp:serviceguard/\n\nmatch X11 m|^\\x01\\0\\x0b\\0\\0......\\0\\0\\0..\\xff\\xff\\?\\0.*Labtam Europe Ltd\\.\\0\\0\\x01\\x01|s p/Labtam X-WinPro/\n\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*NetSarang Computer, Inc\\.|s p/NetSarang XManager/ o/Windows/ cpe:/a:netsarang:xmanager/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*WRQ, Inc\\.|s p/ReflectionX/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*RealVNC Ltd|s p/RealVNC/ cpe:/a:realvnc:realvnc/\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*Pexus Systems, Inc|s p/Pexus X Server/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*HDS Network Systems, Inc\\. \\(([^)]+)\\)|s p/HDS X Server/ v/$1/ d/terminal server/ o/NetOS/ cpe:/o:hds:netos/\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.*The Cygwin/X Project|s p/Cygwin X Server Project/ o/Windows/ cpe:/a:redhat:cygwin/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*Labtam Europe Ltd\\.|s p/Labtam X-WinPro/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*ASTEC, Inc\\.|s p/ASTEC-X/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m=^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*(?:LabF\\.com|LabF)=s p/LabF WinaXe/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*MicroImages, Inc\\.\\0|s p/MicroImages MiX/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*Attachmate Corporation\\0|s p/Attachmate Kea! X server/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*WebTerm X ([\\d.]+) by Powerlan USA\\0|s p/Powerlan WebTerm X server/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*Silicon Graphics|s p/SGI IRIX X server/ o/IRIX/ cpe:/o:sgi:irix/a\n\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.......\\0\\0..\\xff\\xff.\\0\\0\\x01\\0\\0.\\0\\xff\\xff......\\x08\\xff....Colin Harrison\\0|s p/Xming X server/ o/Windows/ cpe:/a:straightrunning:xming/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.......\\0\\0..\\xff\\xff.\\0\\0\\x01\\0\\0.\\0\\xff\\xff......\\x08\\xff....The Xming Project\\0| p/Xming X server/ o/Windows/ cpe:/a:straightrunning:xming/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*Open source\\0|s p/Android X Server/ d/phone/ o/Android/ cpe:/o:google:android/ cpe:/o:linux:linux_kernel/\n\n# Strange one... X.Org Group?\nmatch X11 m|^\\x01\\0\\x0b\\0\\0.....\\0\\0\\0\\0.*The X\\.Org Group\\0|s p|Xvnc X11/VNC proxy|\nmatch X11 m|^\\x01\\0\\x0b\\0\\0......\\0\\0\\0.*Moba/X\\0|s p/MobaXterm/ o/Windows/ cpe:/a:mobatek:mobaxterm/ cpe:/o:microsoft:windows/a\nmatch X11 m|^\\x01\\0\\x0b\\0\\0......\\0\\0\\0.*HC-Consult\\0|s p/VcXsrv X server/ o/Windows/ cpe:/a:hc-consult:vcxsrv/ cpe:/o:microsoft:windows/a\n\nmatch X11 m|^\\x01\\0\\x0b\\0\\0\\0\\x4C\\0\\xA0\\xE0\\x63\\x02\\0\\0| i/open/\nsoftmatch X11 m|^\\x01\\0\\x0b\\0\\0......\\0\\0\\0.|s\n\nmatch xfs m|^\\0\\0\\x02\\0\\0\\0\\x01\\0\\x04\\0\\0\\0\\0\\r([\\w._-]+):\\d+\\0\\x07\\0\\0\\0\\0 \\x10\\0,\\x1a\\0\\0X\\.Org Foundation\\x01\\n\\x01\\0\\x05\\0\\0\\0\\xe6\\xbf\\xc0\\xb5\\0\\0\\0\\0\\0\\0\\0\\0$| p/X.Org xfs font server/ h/$1/ cpe:/a:x:x.org_x11/\n\nmatch giop m|^GIOP\\x01\\0\\x01\\x06\\0\\0\\0\\0$| p/omniORB omniNames/ i/Corba naming service/\nmatch domain m|^\\x80\\xf0\\x80\\x12\\0\\x01\\0\\0\\0\\0\\0\\0\\x20CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01| p/Microsoft DNS/ o/Windows/ cpe:/a:microsoft:dns/ cpe:/o:microsoft:windows/a\nmatch gadu m|^UDAG$| p/Kadu polish IM client/ cpe:/a:kadu:kadu/\n\n# Skype - Protocol seems to spew out 14 random characters upon\n# connection. Luckily, this shouldn't conflict any other X11 services.\n#match skype m|^.{14}$|s p/Skype VoIP data channel/\n\n\n##############################NEXT PROBE##############################\nProbe TCP FourOhFourRequest q|GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0\\r\\n\\r\\n|\nrarity 6\nports 80-85,88,2100,8000-8010,8080-8085,8880-8888,9999,49152\nsslports 443,4443,8443\nfallback GetRequest\n\nmatch bittorrent-tracker m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/plain\\r\\nPragma: no-cache\\r\\n\\r\\nyour file may exist elsewhere in the universe\\nbut alas, not here\\n| p/BitTornado tracker httpd/\n\nmatch http m|^HTTP/1\\.0 499 Access Denied\\.\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><TITLE>Access Denied</TITLE><H2>Navi Error\\. Access Denied\\.</H2><BODY><P>Please check the typed URL\\.</P></BODY></HTML>| p/EMC Clariion CX300 switch http config/ d/switch/ cpe:/h:emc:clariion_cx300/a\n\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-Type: text/html \\n\\n<tr>\\n<td>\\n<img src=\\\"/clearpixelIcon\\?ac=20\\\" height=\\\"5\\\" width=\\\"0\\\" border=\\\"0\\\" alt=\\\"\\\" title=\\\"\\\">| p/Perforce p4web http interface/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html \\r\\n\\r\\n<tr>\\n<td>\\n<img src=\\\"/clearpixelIcon\\?ac=20\\\" height=\\\"5\\\" width=\\\"0\\\" border=\\\"0\\\" alt=\\\"\\\" title=\\\"\\\">| p/Perforce p4web http interface/\n\nmatch http m|^HTTP/1\\.0 404\\nContent-Type: text/html\\n\\n<HTML>\\n<HEAD>\\n<!-- \\(C\\) COPYRIGHT IBM CORP\\. 1996,2004 -->\\n<TITLE>LCFD Error 404</TITLE>\\n| p/IBM Tivoli Endpoint httpd/ cpe:/a:ibm:tivoli_endpoint_manager/\n# Might be too general:\nmatch http m|^HTTP/1\\.0 200\\r\\nContent-type: text/html\\r\\n\\r\\nInvalid request$| p/IBM Tivoli Endpoint httpd/ cpe:/a:ibm:tivoli_endpoint_manager/\nmatch http m|^<html>\\n<link rel=stylesheet href=form\\.css>\\n<body onload='document\\.login\\.passwd\\.focus\\(\\)'>\\n<form name=login method=POST>\\n.*System Name &nbsp; : ([^\\r\\n]+)\\n.*Location Name : ([^\\r\\n]+)\\n.*MAC Address &nbsp;&nbsp; : ([-\\w]+)\\n\\n|s p|Allnet/Cameo/D-Link switch http config| i/$1@$2; MAC $3/ d/switch/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nContent-Type: text/html\\r\\nWWW-Authenticate: Digest realm=\\\"Raid Console\\\", qop=\\\"auth\\\", nonce=\\\"\\w+\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Areca RAID-Controller http config/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n\\r\\n404 Not Found: \\[/nice ports,/Trinity\\.txt\\.bak\\]$| p/SHTTPD/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\n.*<LINK REL=\\\"stylesheet\\\" HREF=\\\"/style\\.css\\\" TYPE=\\\"text/css\\\"></HEAD>\\r\\n<BODY><H2>URL demand\\xe9e introuvable\\.</H2>|s p/Lexmark Optra T610 printer http config/ i/French/ d/printer/ cpe:/h:lexmark:optra_t610/a\nmatch http m|^HTTP/1\\.0 403 File not found - unknown extension\\r\\n\\r\\n| p|apt-cache/apt-proxy httpd| o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 403 Sorry, not allowed to fetch that type of file: Tri%6Eity\\.txt%2ebak\\r\\n\\r\\n| p/apt-cache httpd/\nmatch http m|^HTTP/1\\.0 304 Not Modified\\r\\nContent-Length: 0\\r\\nServer: Unknown\\r\\n\\r\\n| p/McData 4500 fibre switch http config/ d/switch/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: KM-httpd/([-\\w_.]+)\\r\\n.*<em>HTTP Response Code: </em> 404<br><em>From server at: </em> ([-\\w_.]+)<br><em>|s p/Konica Minolta printer http config/ v/$1/ d/printer/ h/$2/\nmatch http m|^HTTP/1\\.0 404 Object Not Found\\r\\nContent-Type: text/html\\r\\n\\r\\n<body><h1>HTTP/1\\.0 404 Object Not Found\\r\\n</h1></body>| p/Microsoft IIS httpd/ v/3.X/ o/Windows/ cpe:/a:microsoft:internet_information_services:3/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Medusa/([\\w.]+)\\r\\n.*<title>Asterisk/DeStar PBX :: Page not found</title>\\n|s p/Medusa httpd/ v/$1/ i/Destar Asterisk PBX http config/\nmatch http m|^HTTP/1\\.1 404 Can't find file\\r\\n$| p|Dynamode/Motorola WAP http config| d/WAP/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: lighttpd/([\\d.]+)\\r\\n|s p/lighttpd/ v/$1/ cpe:/a:lighttpd:lighttpd:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nContent-Type: text/html\\r\\nContent-Length: 241\\r\\n\\r\\n<html><head><title>POPFile Web Server Error 404| p/POPFile web control interface/\nmatch http m|^HTTP/1\\.0 400 No any servlet found for serving /\\r\\ncontent-type: text/html\\r\\nconnection: keep-alive\\r\\ncontent-length: \\d+\\r\\nmime-version: [\\d.]+\\r\\n\\r\\n<HTML><HEAD><TITLE>400 No any servlet found for serving /</TITLE></HEAD><BODY BGCOLOR=\\\"#F1D0F2\\\"><H2>400 No any servlet found for serving /</H2><HR><ADDRESS><A HREF=\\\"http://tjws\\.sourceforge\\.net\\\">Rogatkin's JWS based on Acme\\.Serve Version ([\\w._-]+), \\$Revision: ([\\w._-]+) \\$| p/Rogatkin's JWS httpd/ v/$2/ i/Based on Acme.Serve $1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n  <head>\\n    <title>Linksys PAP2 Configuration</title>\\r\\n| p/Linksys PAP2 VoIP http config/ d/VoIP adapter/\nmatch http m|^HTTP/1\\.1 200 OK.*\\nServer: HPSMH\\n.*\\n<title>System Management Homepage</TITLE>|s p/HP System Management Homepage/ o/HP-UX/ cpe:/a:hp:system_management_homepage/ cpe:/o:hp:hp-ux/a\nmatch http m|^HTTP/1\\.0 499 Unauthorized user access\\. Check User/Password/Scope\\. \\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<HTML><TITLE>Access Denied</TITLE><H2>Navi Error\\. Access Denied\\.</H2><BODY><P>Please check the typed URL\\.</P></BODY></HTML>| p|Dell/EMC CX300 Navisphere http config| d/storage-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\nServer: Indy/([\\w._-]+)\\r\\nSet-Cookie: IDHTTPSESSIONID=\\w+; path=/\\r\\n\\r\\n$| p/Indy httpd/ v/$1/ i/MediaPortal TV-Server http config/ d/media device/ cpe:/a:indy:httpd:$1/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Indy/([\\w._-]+)\\r\\n|s p/Indy httpd/ v/$1/ cpe:/a:indy:httpd:$1/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nCache-Control: no-cache\\r\\nContent-Type:text/html\\r\\nContent-Length:  +\\d+\\r\\n\\r\\n.*size=\\\"2\\\">VoIP System Embedded \\n\\t\\tWEB Server ([\\w._-]+),|s p/Perfectone IP301 VoIP phone http config/ v/$1/ d/VoIP phone/ cpe:/h:perfectone:ip301/a\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-Type: text/html; charset=utf-8\\nConnection: close\\n\\nUnknown operator\\.$| p/Arc httpd/\nmatch http m|^HTTP/1\\.0 403 Forbidden\\r\\n.*\\r\\n<title>Abilis CPX - 403 forbidden</title>|s p/Abilis CPX http config/ d/PBX/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\nServer: WEBCAM\\r\\nCONTENT-LENGTH:\\d+\\r\\n\\r\\n\\r\\nHTTP requested /nice%20ports%2C/Tri%6Eity\\.txt%2ebak was not found  UID (\\d+) PID (\\d+)\\n| p/Pixord IP Camera http config/ i/UID $1; PID $2/ d/webcam/\nmatch http m|^<html>\\n<link rel=stylesheet href=form\\.css>\\n<body onload='document\\.login\\.passwd\\.focus\\(\\)'>\\n<form name=login method=POST>\\n.*<td bgcolor=#C1D6FF>&nbsp;System Name &nbsp; : ([\\w._-]+)\\n.*&nbsp;MAC Address &nbsp;&nbsp; : ([\\w-]+)\\n|s p/Web-Smart Gigabit Ethernet Switch http config/ i/MAC $2/ d/switch/ h/$1/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\n\\r\\nThis page does not exist or you are not authorized to view it| p/Google Search Appliance httpd/ d/specialized/ cpe:/a:google:search_appliance_software/\nmatch http m|^HTTP/1\\.0 404 Document Follows\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\n\\r\\n<HEAD><TITLE>404 Not Found</TITLE></HEAD>\\r\\n<BODY><H1>404 Not Found</H1>\\r\\nUrl '/NICE%20PORTS%2C\\\\TRI%6EITY\\.TXT%2EBAK' not found on server<P>\\r\\n</BODY>| p/HP StorageWorks MSL4048 http config/ d/storage-misc/\nmatch http m|^HTTP/1\\.0 404 Document Follows\\r\\nContent-Type: text/html\\r\\nContent-Length: 147\\r\\n\\r\\n<HEAD><TITLE>404 Not Found</TITLE></HEAD>\\r\\n<BODY><H1>404 Not Found</H1>\\r\\nUrl '/nice%20ports%2C/Tri%6Eity\\.txt%2ebak' not found on server<P>\\r\\n</BODY>| p/Crestron automation system httpd/ d/specialized/ cpe:/h:crestron/\nmatch http m|^HTTP/1\\.1 404 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: WMI (V[\\w._-]+)\\r\\n.*HTTP/1\\.1 404 NOT FOUND!<br>Check flash:/s3p03_00\\.web , please\\.</h1>|s p/WMI/ v/$1/ i/3Com 4500 switch http config/ d/switch/ cpe:/h:3com:4500/a\nmatch http m|^HTTP/1\\.0 401 Unauthorized\\r\\nWWW-Authenticate: Basic realm=\\\"/webpages\\\"\\r\\nServer: DigiSprite\\r\\n| p/DigiSprite httpd/ d/webcam/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nDate: .*\\r\\nLocation: https://([\\w_.-]+)/nice%20ports%2C/Tri%6Eity\\.txt%2ebak\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: 56\\r\\n\\r\\n<HTML><BODY><H1>301 Moved Permanently</H1></BODY></HTML>$| p/VMware ESX 4.0 Server httpd/ h/$1/ cpe:/o:vmware:esx:4.0/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n  <head>\\n    <title>Sipura SPA Configuration</title>\\r\\n  </head>\\n  <body>\\n        <p><font size=\\\"5\\\" color=\\\"#990000\\\">404 Not Found\\r\\n!</p>\\n</body>\\n</head></html>\\n$| p/Sipura SPA-2100 VoIP phone http config/ d/VoIP phone/ cpe:/h:sipura:spa-2100/a\nmatch http m|^HTTP/1\\.1 403\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\n\\r\\nAccess denied$| p/Vibe Streamer music server httpd/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: httpd\\r\\n.*<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#cc9999\\\"><H4>404 Not Found</H4>\\nFile not found\\.\\n</BODY></HTML>\\n$|s p/DD-WRT milli_httpd/ d/WAP/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: HTTP\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Type: text/html; charset=utf-8\\r\\nConnection: close\\r\\nCache-Control: no-cache\\r\\n\\r\\n<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD>\\n<BODY BGCOLOR=\\\"#fcfcfc\\\"><H4>404 Not Found</H4>\\nFile not found\\.\\n$|s p/Aladino SIP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nContent-Length: 232\\r\\nCache-Control: max-age=0\\r\\n.*<address>iNTERFACEWARE Iguana Administration Server</address>\\r\\n</body>\\r\\n\\r\\n</html>\\r\\n|s p/Interfaceware Iguana heathcare management http interface/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Switch \\r\\n.*<html dir=ltr>\\n<head>.*<h1 style=\\\"COLOR:000000; FONT: 24pt/30pt \\\">HTTP/1\\.1 404 NOT FOUND!<br>Check flash:/http\\.zip , please\\.</h1>|s p/3Com switch http config/ d/switch/\nmatch http m|^HTTP/1\\.0 404 Not found\\r\\nDate: .*\\r\\nServer: Acme\\.Serve/v([\\w._ -]+)\\r\\nConnection: close\\r\\nContent-type: text/html; charset=Cp1252\\r\\n\\r\\n| p/Acme.Serve/ v/$1/ i/APC PowerChute/ d/power-device/ cpe:/a:acme:acme.serve:$1/\nmatch http m|^HTTP/1\\.0 404 Not found\\nDate: .*\\nServer: Acme\\.Serve/v([\\w._ -]+)\\nConnection: close\\nContent-type: text/html; charset=ISO-8859-1\\n\\n| p/Acme.Serve/ v/$1/ i/APC PowerChute/ d/power-device/ cpe:/a:acme:acme.serve:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/plain\\r\\nContent-Length: 35\\r\\nConnection: close\\r\\n\\r\\nError 404: Not Found\\nFile not found$| p/Mongoose httpd/ cpe:/a:cesanta:mongoose/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: 35\\r\\nConnection: close\\r\\n\\r\\nError 404: Not Found\\nFile not found$| p/Mongoose httpd/ v/3.7/ cpe:/a:cesanta:mongoose:3.7/\nmatch http m|^HTTP/1\\.0 200 OKContent-Type: text/htmlContent-Length: \\d+\\r\\n\\r\\nYou have reached Aperio DSC Server running on 0\\.0\\.0\\.0 / \\d+\\r\\n Number of current sessions = \\d+\\r\\n| p/Aperio Digital Slide Conferencing httpd/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Length: 0\\r\\nConnection: Close\\r\\nContent-Type: text/html\\r\\n\\r\\n$| p/Google Mini search appliance httpd/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n.*<small>Powered by Jetty://</small>|s p/Jetty/ cpe:/a:mortbay:jetty/\n# WebCam webserver Sharx Security SCNC2700 https://www.sharxsecurity.com/products.html\n# Elro Network Camera\n# foscam ip camera\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: Netwave IP Camera\\r\\n| p/Netwave webcam http config/ d/webcam/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nServer: IP_SHARER WEB ([\\w._-]+)\\r\\nContent-type: text/html\\r\\nConnection: close\\r\\n\\r\\n| p/IP_SHARER WEB/ v/$1/ d/router/ cpe:/a:trendnet:ip_sharer_web:$1/\nmatch http m|^HTTP/1\\.0 404 NOT FOUND\\r\\nContent-Type:text/html\\r\\n.*<TITLE>\\r\\n      MiniWeb Client Workbench\\r\\n    </TITLE>\\r\\n  </HEAD>\\r\\n  <link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"/CSS/MiniWeb\\.css\\\">\\r\\n|s p/Siemens Simatic HMI MiniWeb httpd/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n<title>(SPA\\w+) Configuration Utility</title>\\n| p/Cisco $1 VoIP phone http config/ d/VoIP phone/ cpe:/h:cisco:$1/\nmatch http m|^HTTP/1\\.1 400 ERROR\\r\\nConnection: keep-alive\\r\\nContent-Length: 17\\r\\nContent-Type: text/html\\r\\n\\r\\n\\r\\ninvalid request$| p/uTorrent utserver web interface/ o/Linux/ cpe:/a:utorrent:utorrent/ cpe:/o:linux:linux_kernel/\nmatch http m|^HTTP/1\\.0 404 Not Found ?\\r\\nDate: .*\\r\\nServer: ZWorld Rabbit\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY>404 Not Found</BODY></HTML>\\r\\n\\r\\n$| p/Z-World Rabbit microcontroller httpd/\nmatch http m|^HTTP/1\\.0 200 OK\\nContent-Type: text/html\\n\\n<head><title>File not found</title></head><h1><tt><font color=red>404 / OOPS!</font></tt></h1>\\n<i>'File not found'</i>,<br>\\nHow dare they say!<br>\\nI am here,<br>\\njust out of the way\\.<br>\\n<br>\\nHow was I found\\?<br>\\nA typo\\? A mistake\\?<br>\\nOr were you snooping\\?!<br>\\n<br>\\nNonetheless, we meet at last\\.<br>\\nI am found - hip hip hooray!<br>\\nNevermore can they say:<br>\\n<i>'File not found! <a href=index>Back to main page!</a>'</i><br>\\n<br>\\n<a href=index><img src=\\\"puretraclogo\\.png\\\" border=0></a>$| p/PureChoice Nose environmental monitor http config/ cpe:/h:purechoice:nose/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\n.*<link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"/gsa-style\\.css\\\">\\n<!--\\[if IE 6\\]>\\n      \\n        <link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"IE6fixes\\.css\\\"/>\\n        <link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"\\.\\./IE6fixes\\.css\\\"/>\\n    <!\\[endif\\]--><link rel=\\\"icon\\\" href=\\\"/favicon\\.gif\\\" type=\\\"image/x-icon\\\">\\n<title>Greenbone Security Assistant</title>\\n|s p/Greenbone Security Assistant/ cpe:/a:greenbone:greenbone_security_assistant/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\n.*<link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"/gsa-style\\.css\\\">\\n<!--\\[if IE 6\\]>\\n      \\n        <link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"IE6fixes\\.css\\\"/>\\n        <link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"\\.\\./IE6fixes\\.css\\\"/>\\n    <!\\[endif\\]--><link rel=\\\"icon\\\" href=\\\"/favicon\\.gif\\\" type=\\\"image/x-icon\\\">\\n<title>Greenbone Security Assistant</title>\\n|s p/Greenbone Security Assistant/ v/2.0.1/ cpe:/a:greenbone:greenbone_security_assistant:2.0.1/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/html\\r\\nCache-Control: public\\r\\nPragma: cache\\r\\nExpires: .* GMT\\r\\nDate: .* GMT\\r\\nLast-Modified: Fri, 12 Aug 2011 00:00:00 GMT\\r\\nAccept-Ranges: bytes\\r\\nConnection: close\\r\\n\\r\\n<html>\\n<head>\\n  <title>404 Not Found</title>\\n</head>\\n<body bgcolor=\\\"ffffff\\\">\\n  <h2>404 Not Found<h2>\\n  <p>\\n  \\n</body>\\n</html>\\n$| p/Orange Livebox WAP http config/ d/WAP/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nCache-Control: private, max-age=0, no-cache\\r\\nContent-Length: 188\\r\\nContent-Type: text/html\\r\\n\\r\\n<P align=\\\"center\\\"><STRONG><FONT color=\\\"#ff3333\\\">GSCSERVER DEFAULT HANDLER - FILE NOT FOUND</P><BR><P align=\\\"center\\\">REQUESTED FILE = nice%20ports%2C/tri%6eity\\.txt%2ebak</FONT></STRONG></P>$| p/Geutebrueck GeViControl video surveillance http admin/ d/security-misc/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nConnection: close\\r\\nServer: Apache\\r\\nContent-Length: 43\\r\\n\\r\\n<h3>No site configured at this address</h3>$| p/Metasploit reverse_http stager/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Expires: Thu, 01-Jan-1970 00:00:00 GMT\\r\\n.*<title>VMware vCloud Director</title>|s p/VMware vCloud Director/ cpe:/a:vmware:vcloud_director/\nmatch http m|^HTTP/1\\.1 404 [^\\r\\n]*\\r\\nContent-Type: text/html;charset=.*<h3>Apache Tomcat/([\\d.]+)</h3></body></html>$|s p/Apache Tomcat/ v/$1/ cpe:/a:apache:tomcat:$1/a\nmatch http m|^HTTP/1\\.1 404 /nice%20ports%2C/Tri%6Eity\\.txt%2ebak\\r\\nContent-Type: text/html;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: wifi-security-server\\r\\n\\r\\n<html><head><title>Apache Tomcat - Error report</title>| p/Apache Tomcat/ cpe:/a:apache:tomcat/a\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nServer: LG ROAP Server\\r\\nPragma: no-cache\\r\\nCache-Control: no-store, no-cache, must-revalidate\\r\\nConnection: Close\\r\\nContent-Length: \\d+\\r\\nContent-Type: application/atom\\+xml; charset=utf-8\\r\\n\\r\\n<\\?xml version=\\\"1\\.0\\\" encoding=\\\"utf-8\\\"\\?><envelope><ROAPError>401</ROAPError><ROAPErrorDetail>Unauthorized</ROAPErrorDetail></envelope>$| p/LG Smart TV Rights Object Acquisition Protocol/ d/media device/\nmatch http m|^HTTP/1\\.1 200 OK\\r.*\\nX-Powered-By: (Servlet/[\\d.]+ JSP/[\\d.]+) \\(Oracle GlassFish Server ([\\d.]+) Java/Oracle Corporation/([\\d.]+)\\)\\r.*\\nX-Powered-By: (JSF/[\\d.]+)\\r\\n|s p/Oracle GlassFish application server/ v/$2/ i|$1 $4 Java/$3| cpe:/a:oracle:glassfish_server:$2/\nmatch http m|^HTTP/1\\.1 200 OK\\r.*\\nServer: Oracle GlassFish Server ([\\d.]+)\\r\\n|s p/Oracle GlassFish application server/ v/$1/ cpe:/a:oracle:glassfish_server:$1/\n# Milestone ImageServer, Milestone XProtect Enterprise\nmatch http m|^HTTP/1\\.1 404 Object Not Found\\r\\nDate: .*\\r\\nConnection: close\\r\\nContent-Type: text/plain\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\nSorry, file not found\\.$|s p/Milestone httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type:text/html\\r\\nExpires: .*\\r\\nPragma: no-cache\\r\\nServer: LPC Http Server/V([\\d.]+)\\r\\n\\r\\n| p/Konica Minolta LPC httpd/ v/$1/ d/printer/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nServer: ReeCam IP Camera\\r\\n| p/ReeCam IP Camera httpd/ d/webcam/\nmatch http m|^HTTP/1\\.1 301 Moved Permanently\\r\\nLocation: /error\\r\\n$| p/Enphase httpd/ d/power-device/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nSet-Cookie: sid=[0-9a-f]{128}; path=/; httponly\\r\\nContent-Type: application/json\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\n{\\\"message\\\":\\\"Resource Not Found\\\",\\\"status\\\":404}| p/Node.js/ cpe:/a:nodejs:node.js/\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nLast-modified: .*\\r\\nServer: ESERV-10/([\\d.]+)\\n| p/Viola ESERV-10 httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 503 DNS error for hostname nice%20ports%2C: Name or service not known\\. If nice%20ports%2C refers to a configured cache repository, please check the corresponding configuration file\\.\\r\\nContent-Length: 478\\r\\nContent-Type: text/html\\r\\nDate: .*\\r\\nServer: Debian Apt-Cacher NG/([\\w._-]+)\\r\\nConnection: close\\r\\n\\r\\n| p/Debian Apt-Cacher NG/ v/$1/ cpe:/a:debian:apt-cacher:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\r\\n<head>\\r\\n<title>(SPA\\d\\d\\d[\\w._-]*) Configuration Utility</title>| p/Cisco $1 http config/ d/VoIP phone/ cpe:/h:cisco:$1/a\nmatch http m|^HTTP/1\\.0 \\d\\d\\d \\r\\n(?:[^\\r\\n]+\\r\\n)*?server: CubeCoders-McMyAdmin/IAWS\\r\\n.*<p id=\\\"verinfo\\\">McMyAdmin Enterprise - Web Backend v([\\d.]+)</p>|s p/CubeCoders McMyAdmin Enterprise Minecraft control panel/ v/$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/plain\\r\\nDate: .*\\r\\nConnection: close\\r\\n\\r\\nCannot GET /nice%20ports%2C/Tri%6Eity\\.txt%2ebak| p/Express.js httpd/\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nDate: .* GMT\\r\\nConnection: Keep-Alive\\r\\nContent-Type: text/html\\r\\nCACHE-CONTROL: no-cache\\r\\nContent-Length: \\d+\\r\\n\\r\\n<html>\\n<head>\\n<[Mm][Ee][Tt][Aa] http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=[Uu][Tt][Ff]-8\\\"(?: /)?>\\r?\\n<title>replace</title>\\n<body>\\n<script language=\\\"JavaScript\\\" type=\\\"text/javascript\\\">\\nvar pageName = '/';\\n| p/Huawei router http admin/ d/broadband router/\nmatch http m|^HTTP/1\\.1 401 Unauthorized\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 0\\r\\nWww-Authenticate: Basic realm=\"([^\"]+)\"\\r\\nSet-Cookie: com\\.apple\\.servermgrd=.*\\r\\nDate: .*\\r\\n\\r\\n| p/Apple Server Admin/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\n# FIXME: wrong cpe?\nmatch http m|^HTTP/1\\.1 404 /nice%20ports%2C/Tri%6Eity\\.txt%2ebak\\r\\nX-FRAME-OPTIONS: SAMEORIGIN\\r\\nContent-Type: text/html;charset=utf-8\\r\\nContent-Length: \\d+\\r\\nDate: .*\\r\\nConnection: close\\r\\nServer: DSM\\r\\n\\r\\n<html><head><title>JBoss Web/([\\w._-]+) - JBWEB000064: Error report</title>| p/JBoss Web/ v/$1/ i/Vormetric Data Security Manager/ d/security-misc/ cpe:/a:redhat:jboss_enterprise_web_platform:$1/ cpe:/h:vormetric:data_security_manager/\nmatch http m|^HTTP/1\\.0 404 Not Found\\r\\nContent-Type: text/plain; charset=utf-8\\r\\nDocker-Distribution-Api-Version: registry/([\\d.]+)\\r\\nX-Content-Type-Options: nosniff\\r\\nDate: .*\\r\\nContent-Length: 19\\r\\n\\r\\n404 page not found\\n| p/Docker Registry/ i/API: $1/ cpe:/a:redhat:docker/\n# hp2530\nmatch http m|^HTTP/1\\.0 200 OK\\r\\nServer: eHTTP v([\\w._-]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nCache-Control: no-cache\\r\\nX-Frame-Options: SAMEORIGIN\\r\\n\\r\\n| p/eHTTP/ v/$1/ i/HP switch http config/ d/switch/ cpe:/a:ehttp:ehttp:$1/\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n  <head>\\n    <title>Cisco SPA Configuration</title>\\r\\n| p/Cisco SPA IP phone http config/ d/VoIP phone/\nmatch http m|^HTTP/1\\.0 302 Moved Temporarily\\r\\nLocation: \\.\\./index\\.html\\r\\nServer: NET-DK/([\\d.]+)\\r\\nDate: .*\\r\\nConnection: close\\r\\nSet-Cookie: sessionToken=\\d+; path=/;\\r\\n\\r\\n| p/NET-DK httpd/ v/$1/ i/Compal CH7465LG-ZG cable modem/ d/broadband router/ cpe:/h:compal:ch7465lg-zg/a\nmatch http m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Type: text/html\\r\\nConnection: close\\r\\n\\r\\n<html>\\n  <head>\\n    <title>Linksys SPA Configuration</title>\\r\\n  </head>\\n  <body>\\n        <p><font size=\"5\" color=\"#990000\">404 Not Found\\r\\n!</p>\\n</body>\\n</head></html>\\n| p/Linksys SPA VoIP phone http config/ d/VoIP phone/\n# Rebranded Samsung?\nmatch http m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: unknown\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Ziggo Mediabox XL/ d/media device/\nmatch http m|^HTTP/1\\.1 500 Server error\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\nContent-Length: \\d+\\r\\nPragma: no-cache\\r\\nExpires: .*\\r\\n\\r\\n<html><head><script>\\r\\nfunction IWTop\\(\\)\\{| p/Atozed IntraWeb httpd/ cpe:/a:atozed:intraweb/\n\nmatch http m=^HTTP/1\\.0 404 Not Found\\r\\n(?:[^<]+|<(?!/head>))*?<style>\\nbody \\{ background-color: #fcfcfc; color: #333333; margin: 0; padding:0; \\}\\nh1 \\{ font-size: 1\\.5em; font-weight: normal; background-color: #9999cc; min-height:2em; line-height:2em; border-bottom: 1px inset black; margin: 0; \\}\\nh1, p \\{ padding-left: 10px; \\}\\ncode\\.url \\{ background-color: #eeeeee; font-family:monospace; padding:0 2px;\\}\\n</style>=s p/PHP cli server/ v/5.5 or later/ cpe:/a:php:php/\nmatch http m=^HTTP/1\\.0 404 Not Found\\r\\n(?:[^<]+|<(?!/head>))*?<style>\\nbody \\{ background-color: #ffffff; color: #000000; \\}\\nh1 \\{ font-family: sans-serif; font-size: 150%; background-color: #9999cc; font-weight: bold; color: #000000; margin-top: 0;\\}\\n</style>=s p/PHP cli server/ v/5.4/ cpe:/a:php:php:5.4/\n\nmatch http-proxy m|^HTTP/1\\.0 404 Error\\r\\n.*<HTML><HEAD><TITLE>Extra Systems Proxy Server</TITLE>|s p/Extra Systems http proxy/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch http-proxy m|^HTTP/1\\.1 502 Bad Gateway\\r\\nConnection : close\\r\\n.*\\n<title>The requested URL could not be retrieved</title>\\n<link href=\\\"http://passthrough\\.fw-notify\\.net/static/default\\.css\\\"|s p/Astaro firewall http proxy/ d/firewall/ cpe:/a:astaro:security_gateway_software/\nmatch http-proxy m|^HTTP/1\\.0 404 Not Found\\r\\nDate: .*\\r\\nServer: PanWeb Server/ - \\r\\n| p/Palo Alto PanWeb httpd/ d/firewall/ cpe:/a:paloaltonetworks:panweb/\n\nmatch raop m|^RTSP/1\\.0 401 Unauthorized\\r\\nServer: AirTunes/([\\w._-]+)\\r\\nWWW-Authenticate: Digest realm=\\\"raop\\\" nonce=\\\"\\w+\\\"\\r\\n\\r\\n$| p/Apple AirTunes RAOP/ v/$1/ i/Apple AirPort Express/ d/WAP/ cpe:/h:apple:airport_express/\n\nmatch rtsp m|^RTSP/1\\.0 400 Bad Request\\r\\nServer: AirTunes/([\\w._-]+)\\r\\n\\r\\n$| p/Apple AirTunes rtspd/ v/$1/ i/Apple TV/ d/media device/ o/Mac OS X/ cpe:/a:apple:apple_tv/ cpe:/o:apple:mac_os_x/a\n\nmatch scifinder m|^\\0\\[T /nic$| p/CAS SciFinder/\n\nmatch upnp m|^HTTP/1\\.1 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?.*SERVER: Linux/([\\w._+-]+), UPnP/([\\d.]+), Intel UPnP SDK/([\\w._~-]+)\\r\\n|s p/Portable SDK for UPnP devices/ v/$3/ i/kernel $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m=^HTTP/1\\.0 \\d\\d\\d .*\\r\\nSERVER: (?:TP-LINK )?Wireless (?:N )?(?:Router|AP) ([\\w._/-]+)(?:http://www\\.tp-link\\.com)?, UPnP/([\\d.]+)\\r\\n= p/TP-LINK $1 WAP upnp/ i/UPnP $2/ d/WAP/ cpe:/h:tp-link:$1/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FreeBSD/([\\w._-]+), UPnP/1\\.0, FUPPES/([\\w._-]+)\\r\\n\\r\\n|s p/Free UPnP Entertainment Service/ v/$2/ i/FreeBSD $1/ o/FreeBSD/ cpe:/a:ulrich_voelkel:fuppes:$2/ cpe:/o:freebsd:freebsd:$1/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Linux/([\\w._-]+), UPnP/1\\.0, FUPPES/([\\w._-]+)\\r\\n\\r\\n|s p/Free UPnP Entertainment Service/ v/$2/ i/Linux $1/ o/Linux/ cpe:/a:ulrich_voelkel:fuppes:$2/ cpe:/o:linux:linux_kernel:$1/\nmatch upnp m|^HTTP/1\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: (\\w+)/([\\w._-]+), UPnP/1\\.0, FUPPES/([\\w._-]+)\\r\\n\\r\\n|s p/Free UPnP Entertainment Service/ v/$3/ o/$1 $2/ cpe:/a:ulrich_voelkel:fuppes:$3/\nmatch upnp m|^HTTP/1\\.[01] \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?SERVER: Linux/(([\\d.]+)-[\\d.]+) UPnP/([\\d.]+) Evolution Media Server DLNADOC/([\\d.]+)\\r\\n|s p/Cisco Evolution Media Server upnpd/ i/UPnP $3; DLNADOC $4; Linux $1/ d/media device/ o/Linux $2/ cpe:/a:cisco:evolution_media_server/ cpe:/o:linux:linux_kernel:$1/a\n\nmatch vnc-http m|^HTTP/1\\.0 404 Not Found\\r?\\n\\r?\\n<HTML>\\n  <HEAD><TITLE>404 Not Found</TITLE></HEAD>\\n  <BODY>\\n    <H1>Not Found</H1>\\n    The requested file could not be found\\.\\n  </BODY>\\n</HTML>\\n| p/TightVNC/ cpe:/a:tightvnc:tightvnc/a\n\n##############################NEXT PROBE##############################\n# ftp://ftp.rfc-editor.org/in-notes/rfc1179.txt\nProbe TCP LPDString q|\\x01default\\n|\nrarity 6\nports 515,2947,3333,32211,19350\n\nmatch http m|^<html><head><title>Error</title></head>\\n<body>Your client sent an invalid \\x01default request without a\\nprotocol version \\(assuming HTTP v0\\.9\\)\\.\\n<p>The request can not be processed\\.</body></html>$| p/Polycom VVX VoIP phone http config/ d/VoIP phone/\n\n# Port 19350\nmatch fms-core m|^\\x01\\x01\\x14\\0\\0%\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x08register\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x05\\x02\\0\\r_defaultRoot_| p/Adobe Flash Media Server core/ cpe:/a:adobe:flash_media_server/\n\nmatch printer m|^\\0$|\nmatch printer m|^default: unknown printer\\n$| p/Solaris lpd/ o/Solaris/ cpe:/o:sun:sunos/a\n# Microsoft Windows 2000 server LPD\nmatch printer m|^\\x01\\x01$| p/Microsoft lpd/ o/Windows/ cpe:/o:microsoft:windows/a\n# Blackbox Terminal Server (IOLAN v4.03.00 a CDi)\n# Chase IOLAN terminal server lpd\n# Bay Networks MicroAnnex XL  Comm. Server R10.0\nmatch printer m|^[\\x01\\x02]$|\nmatch printer m|^[-.\\w]+: lpsched: unknown printer\\n$| p/SGI IRIX lprsrv/ o/IRIX/ cpe:/o:sgi:irix/a\nmatch printer m|^Printer default not found \\([\\w_]+\\)\\.\\n| p/print server/ d/print server/\nmatch printer m|^VSE Line Printer Daemon has rejected this request\\.\\0\\0| p/VSE lpd/ d/print server/ o|z/VSE| cpe:/o:ibm:z%2fvse/\nmatch printer m|^no queue to check\\n\\0$| p/Wyse Winterm 1200 LE terminal lpd/ d/terminal/\nmatch printer m|^/usr/local/helios/sbin/lpd Printer default doesn't exist! \\n$| p/Helios lpd/\nmatch printer m|^\\0\\x01\\r\\n                     Century LPD Service\\r\\nUnknown printer 'default'\\n$| p/Century TinyTERM lpd/\nmatch printer m|^Cirrato printing service \\(with PayEx support\\)\\0| p/Cirrato lpd/ i/with PayEx support/ cpe:/a:cirrato:cirrato/\nmatch rbnb m|^EXM {EXC \\0\\x1fcom\\.rbnb\\.api\\.SerializeExceptionMSG \\0JUnrecognizable parameter read from input stream\\.\\nElement read was \\x01default}\\r\\nPNG {}\\r\\n| p/Ring Buffered Network Bus/ i|http://outlet.creare.com/rbnb/|\nmatch rfactor-monitor m|^\\x02rFactorMonitor\\x000400\\0$| p/rFactor game monitor/\nmatch gpsd m|^GPSD,D=\\?,E=\\?,F=([-\\w_./]+),A=\\?,U=\\?,L=\\d ([-\\w_.]+) abcdefgiklmnopqrstuvwxyz,T=\\?\\r\\n| p/gpsd/ v/$2/ i/Serial port $1/ cpe:/a:gpsd_project:gpsd:$2/\n\nmatch winlog m|^\\xd0\\xb7\\x07\\x01$| p/Sielco Sistemi Winlog Pro/ cpe:/a:sielcosistemi:winlog_pro/\n\n# Ldap searchRequest for objectClass = * over TCP - elicits response that allows fingerprinting of distinct service and gathering target info, unlike LDAPBindReq\n##############################NEXT PROBE##############################\nProbe TCP LDAPSearchReq q|\\x30\\x84\\x00\\x00\\x00\\x2d\\x02\\x01\\x07\\x63\\x84\\x00\\x00\\x00\\x24\\x04\\x00\\x0a\\x01\\x00\\x0a\\x01\\x00\\x02\\x01\\x00\\x02\\x01\\x64\\x01\\x01\\x00\\x87\\x0b\\x6f\\x62\\x6a\\x65\\x63\\x74\\x43\\x6c\\x61\\x73\\x73\\x30\\x84\\x00\\x00\\x00\\x00|\nrarity 6\nports 256,257,389,390,1702,3268,3892,11711\nsslports 636,637,3269,11712\n\nmatch ldap m|^0\\x84\\0\\0..\\x02\\x01.*dsServiceName1\\x84\\0\\0\\0.\\x04.CN=NTDS\\x20Settings,CN=([^,]+),CN=Servers,CN=([^,]+),CN=Sites,CN=Configuration,DC=([^,]+),DC=([^,]+)0\\x84\\0|s p/Microsoft Windows Active Directory LDAP/ i/Domain: $3.$4, Site: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch ldap m|^0\\x84\\0\\0..\\x02\\x01.*dsServiceName1\\x84\\0\\0\\0.\\x04.CN=NTDS\\x20Settings,CN=([^,]+),CN=Servers,CN=([^,]+),CN=Sites,CN=Configuration,DC=([^,]+),DC=([^,]+),DC=([^,]+)0\\x84\\0|s p/Microsoft Windows Active Directory LDAP/ i/Domain: $3.$4.$5, Site: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch ldap m|^0\\x82\\x05.\\x02\\x01.*vmwPlatformServicesControllerVersion1\\x07\\x04\\x05([\\d.]+)0.\\x04.*\\nserverName1.\\x04.cn=([^,.]+)|s p/VMware vCenter or PSC LDAP/ v/PSCv $1/ h/$2/ cpe:/a:vmware:server/\n\n# Ldap searchRequest for objectClass = * over TCP - Active Directory specific\n##############################NEXT PROBE##############################\nProbe UDP LDAPSearchReqUDP q|\\x30\\x84\\x00\\x00\\x00\\x2d\\x02\\x01\\x07\\x63\\x84\\x00\\x00\\x00\\x24\\x04\\x00\\x0a\\x01\\x00\\x0a\\x01\\x00\\x02\\x01\\x00\\x02\\x01\\x64\\x01\\x01\\x00\\x87\\x0b\\x6f\\x62\\x6a\\x65\\x63\\x74\\x43\\x6c\\x61\\x73\\x73\\x30\\x84\\x00\\x00\\x00\\x00|\nrarity 8\nports 389\n\nmatch ldap m|^0\\x84\\0\\0..\\x02\\x01.*dsServiceName1\\x84\\0\\0\\0.\\x04.CN=NTDS\\x20Settings,CN=([^,]+),CN=Servers,CN=([^,]+),CN=Sites,CN=Configuration,DC=([^,]+),DC=([^,]+)0\\x84\\0|s p/Microsoft Windows Active Directory LDAP/ i/Domain: $3.$4, Site: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch ldap m|^0\\x84\\0\\0..\\x02\\x01.*dsServiceName1\\x84\\0\\0\\0.\\x04.CN=NTDS\\x20Settings,CN=([^,]+),CN=Servers,CN=([^,]+),CN=Sites,CN=Configuration,DC=([^,]+),DC=([^,]+),DC=([^,]+)0\\x84\\0|s p/Microsoft Windows Active Directory LDAP/ i/Domain: $3.$4.$5, Site: $2/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\n\n# Ldap bind request, version 2, null DN, AUTH_TYPE simple, null password\n##############################NEXT PROBE##############################\nProbe TCP LDAPBindReq q|\\x30\\x0c\\x02\\x01\\x01\\x60\\x07\\x02\\x01\\x02\\x04\\0\\x80\\0|\nrarity 6\nports 256,257,389,390,1702,3268,3892,4035\nsslports 636,637,3269,4035\n\nmatch oo-defrag m|^h\\0\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\x07\\x08\\0\\0\\x02\\0\\0\\0\\0d\\0\\0\\0\\0\\xd9\\$\\x01\\0\\0\\0\\0\\0\\0T\\0\\0\\0\\0\\0\\0\\xb7x\\x01\\0\\0\\0\\0\\0\\xc4\\x05\\0\\0\\0\\0\\0\\0\\xc4\\x05\\0\\0\\0\\0\\0\\0\\xe2\\x0b\\0\\0\\0\\0\\0\\0\\xb7\\xb5p@\\^\\xa7\\x08\\0\\0\\0\\0\\0| p/O&O Defrag/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch drobo-dsvc m|^(?:DRIDDSVC\\x07\\x01.\\0\\0\\0..[^\\0]*\\0)?DRIDDSVC\\x07\\x01.\\0\\0\\0..<ESATMUpdate>\\r\\n\\t<mESAUpdateSignature>ESAINFO</mESAUpdateSignature>\\r\\n\\t<mESAUpdateVersion>\\d+</mESAUpdateVersion>\\r\\n\\t<mESAUpdateSize>\\d+</mESAUpdateSize>\\r\\n\\t<mESAID>\\w+</mESAID>\\r\\n\\t<mSerial>\\w+</mSerial>\\r\\n\\t<mName>Drobo(?:-FS)?</mName>\\r\\n\\t<mVersion>([][\\w._ ]+)</mVersion>\\r\\n\\t<mReleaseDate>([^<]+)</mReleaseDate>\\r\\n|s p/Drobo-FS DDSVC/ v/$1 ($2)/\n\nmatch fw1-secureremote m|^[AQ]\\0\\0\\0\\0\\0\\0[^\\0]| p/Check Point Firewall-1 SecureRemote/ d/firewall/ cpe:/a:checkpoint:firewall-1/\nmatch fw1-log m|^\\0\\0\\0\\t51000000\\0\\0\\0\\0[^\\0]| p/Check Point Firewall-1 logging service/ d/firewall/ cpe:/a:checkpoint:firewall-1/\n# OpenLDAP 2.0.15 on RH Linux 7.3\nmatch ldap m|^0%\\x02\\x01\\x01a \\n\\x010\\x04\\0\\x04\\x19anonymous bind disallowed$| p/OpenLDAP/ i/access denied/ cpe:/a:openldap:openldap/\n# OpenLDAP 2.1.22 - doesn't by default allow LDAPv2 request\nmatch ldap m|^02\\x02\\x01\\x01a-\\n\\x01\\x02\\x04\\0\\x04&requested protocol version not allowed$| p/OpenLDAP/ v/2.1.X/ cpe:/a:openldap:openldap:2.1/\n# OpenLDAP 2.2.8\nmatch ldap m|^0E\\x02\\x01\\x01a@\\n\\x01\\x02\\x04\\0\\x049historical protocol version requested, use LDAPv3 instead| p/OpenLDAP/ v/2.2.X - 2.3.X/ cpe:/a:openldap:openldap/\nmatch ldap m|^0\\x84\\0\\0\\0I\\x02\\x01\\x01a\\x84\\0\\0\\0@\\n\\x01\\x02\\x04\\0\\x049historical protocol version requested, use LDAPv3 instead$| p/OpenLDAP/ v/2.4.X/ cpe:/a:openldap:openldap:2.4/\n\nmatch ldap m|^0\\x1a\\x02\\x01\\x01a\\x15\\n\\x01\\0\\x04\\0\\x04\\x0eanonymous bind| p/Nortel CallPilot LDAP/\n\n# Netware 6\n# Macintosh 8\n# Win 2000 Advanced server.\nmatch ldap m|^0\\x0c\\x02\\x01\\x01a\\x07\\n\\x01\\0\\x04\\0\\x04\\0| i/Anonymous bind OK/\n# MS Windows Win2K SP4 AD server, also Oracle LDAP on Linux\nmatch ldap m|^0\\x84\\0\\0\\0\\x10\\x02\\x01\\x01a\\x84\\0\\0\\0\\x07\\n\\x01\\0\\x04\\0\\x04\\0$|\n# PGP Corporation PGP Keyserver 7.0 (relabeled Freeware PGP Keyserver 2.5.8)\n#  PGP LDAP Server 8.x\nmatch ldap m|^0\\x17\\x02\\x01\\x01a\\x12\\n\\x01\\0\\x04\\0\\x04\\x0bPGPError #0$| p/PGP Corp. PGP Keyserver/ cpe:/a:pgp:keyserver/\n# OctetString VDE Enterprise Edition on Linux 2.4\nmatch ldap m|^0\\x0e\\x02\\x01\\x01a\\t\\n\\x01\\0\\x04\\0\\x04\\0\\x87\\0$| p/OctetString VDE directory service/\n# Lotus Notes 6.5.3 LDAP on W2K3, anonymous bind not allowed, port 637 (ssl)\nmatch ldap m|^0\\.\\x02\\x01\\x01a\\)\\n\\x010\\x04\\0\\x04\\\"Failed, anonymous bind not allowed$| p/Lotus Domino 6.x LDAP/ i/access denied/ cpe:/a:ibm:lotus_domino/\n\n# This came off a KIRK Wireless VoIP adapter which I *think* uses Cisco LDAP ??\nmatch ldap m|^0\\x0c\\x02\\x01\\x01a\\x07\\n\\x011\\x04\\0\\x04\\0$| p/Cisco LDAP server/\n\nmatch ldap m|^0.\\x02.*TLS confidentiality required|s i/TLS required/\n\nmatch ldap m|^0&\\x02\\x01\\x01a!\\n\\x01\\x02\\x04\\0\\x04\\x1aOnly LDAP v3 is supported\\.$| p/ApacheDS LDAP/ i/LDAPv3/\nmatch ldap m|^0\\x1a\\x02\\x01\\x01a\\x15\\n\\x01\\0\\x04\\0\\x04\\x0eBind succeeded$| p/Siemens DirX/\n# Think this means TLS required?\nmatch ldap m|^0 \\x02\\x01\\x01a\\x1b\\n\\x015\\x04\\0\\x04\\x14Minimum SSF not met\\.| p/Red Hat directory server LDAP/ i/Minimum SSF not met/ o/Linux/ cpe:/a:redhat:ns-slapd/ cpe:/o:redhat:directory_server/\nmatch ldap m|^0\\x81\\xa0\\x02\\x01\\x01a\\x81\\x9a\\n\\x011\\x04\\0\\x04\\x81\\x92The server has been configured to only allow bind operations that result in authenticated connections\\.  Anonymous bind operations are not allowed\\.| p/UnboundID LDAP SDK/ i/access denied/ cpe:/a:unboundid:ldap-sdk/\n\nmatch rse m|^\\xa2\\x85\\x99\\xa5\\x85\\x99@| p/IBM Explorer for zOS (FMID HALG300)/ o|z/OS| cpe:/a:ibm:zos_explorer/ cpe:/o:ibm:z%2fos/\n\nsoftmatch ldap m|^0..?\\x02\\x01\\x01a..?\\n\\x01.\\x04\\0\\x04|s\n\n# This probe sends a SIP OPTIONS request.\n# Most of the numbers, usernames, and hostnames are abitrary.\n##############################NEXT PROBE##############################\nProbe TCP SIPOptions q|OPTIONS sip:nm SIP/2.0\\r\\nVia: SIP/2.0/TCP nm;branch=foo\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nMax-Forwards: 70\\r\\nContent-Length: 0\\r\\nContact: <sip:nm@nm>\\r\\nAccept: application/sdp\\r\\n\\r\\n|\nrarity 5\nports 406,5060,8081,31337\nsslports 5061\nfallback GetRequest\n# Some VoIP phones take longer to respond\ntotalwaitms 7500\n\nmatch atalla m|^<00#020035#0101##>\\r\\n<00#020035#0101##>\\r\\n<00#020035#0101##>\\r\\n| p/Atalla Hardware Security Module payment system/ d/specialized/\n\nmatch honeypot m|^HTTP/1\\.0 200 OK\\r\\nAllow: OPTIONS, GET, HEAD, POST\\r\\nContent-Length: 0\\r\\nConnection: close\\r\\n\\r\\n| p/Dionaea Honeypot httpd/\nmatch honeypot m|^SIP/2\\.0 200 OK\\r\\nContent-Length: 0\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo\\r\\nFrom: sip:nm@nm;tag=root\\r\\nAccept: application/sdp\\r\\nTo: sip:nm2@nm2\\r\\nContact: sip:nm2@nm2\\r\\nCSeq: 42 OPTIONS\\r\\nAllow: REGISTER, OPTIONS, INVITE, CANCEL, BYE, ACK\\r\\nCall-ID: 50000\\r\\nAccept-Language: en\\r\\n\\r\\n| p/Dionaea Honeypot sipd/\n\nmatch http m|^SIP/2\\.0 501 Not Implemented\\r\\nServer: Embedded HTTP Server ([\\d.]+)\\r\\n| p/Embedded HTTP Server/ v/$1/\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nServer: Catwalk/([\\d.]+)\\r\\n| p/Catwalk/ v/$1/ i/Canon imageRUNNER C5000-series printer http config/ d/printer/ cpe:/h:canon:imagerunner_c5000/\n# Canon iR3235\nmatch http m|^HTTP/1\\.1 500 Internal Server Error\\r\\nServer: Catwalk\\r\\n| p/Catwalk/ i/Canon imageRUNNER printer http config/ d/printer/\nmatch http m|^HTTP/1\\.0 404 Resource not found\\r\\nServer: Opera/([\\w._-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: unite-session-id=[0-9a-f]+; Max-Age=2073600; path=/\\r\\n|s p/Opera Unite httpd/ v/$1/\nmatch http m|^HTTP/1\\.0 302 Found\\r\\nLocation: ([\\w:/.-]*)sip:nm\\r\\nServer: BigIP\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/F5 BIG-IP load balancer httpd/ i/redirecting to $1/ d/load balancer/\nmatch http m|^HTTP/1\\.1 401 Access Denied\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: logintheme=cpanel; path=/; secure; port=\\d+\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: cpsrvd/([\\w._-]+)\\r\\n|s p/cPanel httpd/ v/$1/\nmatch http m|^HTTP/1\\.1 401 Access Denied\\r\\n(?:[^\\r\\n]+\\r\\n)*?Set-Cookie: logintheme=cpanel; path=/; HttpOnly; port=\\d+\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: cpsrvd/([\\w._-]+)\\r\\n|s p/cPanel httpd/ v/$1/ o/Unix/\nmatch http m|^HTTP/1\\.1 302 Moved Temporarily\\r\\nDate: .*\\r\\nLocation: https://[\\w._-]+sip:nm\\r\\nConnection: close\\r\\n\\r\\n$| p/Asterisk PBX httpd/ d/PBX/ cpe:/a:digium:asterisk/\nmatch http m|^HTTP/1\\.0 501 Document Follows\\r\\nContent-Type: text/html\\r\\nContent-Length: 106\\r\\n\\r\\n<HEAD><TITLE>501 Method Not Implemented</TITLE></HEAD>\\r\\n<BODY><H1>501 Method Not Implemented</H1>\\r\\n</BODY>$| p/HP StorageWorks MSL2024 tape library httpd/ d/storage-misc/\nmatch http m|^HTTP/2\\.0 404 Not Found\\r\\nDate: .*\\r\\nServer: Restlet-Framework/([\\w._-]+)\\r\\n.*<title>Status page</title>\\n</head>\\n<body style=\\\"font-family: sans-serif;\\\">\\n<p style=\\\"font-size: 1\\.2em;font-weight: bold;margin: 1em 0px;\\\">Not Found</p>\\n<p>The server has not found anything matching the request URI</p>\\n|s p/Serviio media server http status/ i/Restlet framework $1/ cpe:/a:restlet:restlet:$1/\nmatch http m|^HTTP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Restlet-Framework/@major-number@\\.@minor-number@@release-type@@release-number@\\r\\n.*<p>The server has not found anything matching the request URI</p>|s p/Serviio media server http status/ v/1.2/ cpe:/a:restlet:restlet/\nmatch http m=^HTTP/1\\.1 500 Internal Server Error\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/plain\\r\\n\\r\\nTraceback \\(most recent call last\\):\\n  File \\\"([\\w._/-]+/(?:sickbeard|Sick-Beard)/cherrypy)/wsgiserver/__init__\\.py\\\", line \\d+, in communicate\\n= p/CherryPy/ i/Sick Beard PVR; path: $1/ cpe:/a:cherrypy:cherrypy/\nmatch http m|^HTTP/1\\.1 501 Unimplimented\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Huawei HG8245T modem http config/ d/broadband router/ cpe:/h:huawei:hg8245t/a\nmatch http m|^HTTP/1\\.0 501 Not Implemented\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\n<HTML><HEAD><TITLE>501 Not Implemented</TITLE></HEAD>\\n<BODY><H1>501 Not Implemented</H1>\\nPOST to non-script is not supported in Boa\\.\\n</BODY></HTML>\\n|s p/Boa httpd/ cpe:/a:boa:boa/\nmatch http m|^HTTP/1\\.1 302 Moved\\r\\nDate: Fri, 27 May 2016 03:15:37 GMT\\r\\nServer: cPanel\\r\\nPersistent-Auth: false\\r\\nCache-Control: no-cache\\r\\nConnection: close\\r\\nLocation: https://([\\w.-]+):2078sip:nm\\r\\nVary: Accept-Encoding\\r\\nExpires: Fri, 01 Jan 1990 00:00:00 GMT\\r\\nX-Redirect-Reason: requiressl\\r\\n\\r\\n| p/cPanel https redirector/ h/$1/\n\nmatch imsp m|^VIA: BAD IMSP busy\\r\\nFROM: BAD IMSP busy\\r\\nTO: BAD IMSP busy\\r\\n|\n\nmatch rtsp m|^RTSP/1\\.0 405 Method Not Allowed\\r\\nCSeq: 42\\r\\n\\r\\n| p/Lotus Domino Sametime RTSP/ cpe:/a:ibm:lotus_domino/\nmatch rtsp m|^RTSP/1\\.0 200 OK\\r\\nCSeq: 42 OPTIONS\\r\\nPublic: OPTIONS, DESCRIBE, PLAY, PAUSE, SETUP, TEARDOWN, SET_PARAMETER, GET_PARAMETER\\r\\nDate: .*\\r\\n\\r\\n| p/Hikvision 7513 POE IP camera rtspd/ d/webcam/\nmatch rtsp m|^RTSP/1\\.0 401 Unauthorized\\r\\nCSeq: 42\\r\\nWWW-Authenticate: Digest realm=\"Login to ([\\w._-]+)\", nonce=\"[a-f\\d]{32}\"\\r\\n\\r\\n| p/Lorex IP camera rtspd/ d/webcam/ h/$1/\n\nmatch telnet m|^login: Login incorrect\\nlogin: Login incorrect\\nlogin: Login incorrect\\nlogin: Login incorrect\\nlogin: Login incorrect\\n| p/McAfee firewall telnetd/\n\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: PolycomSoundStationIP-SSIP_(\\d+)-UA/([\\d.]+)_(\\w+)\\r\\n|s p/Polycom SoundStation $1/ v/$2/ i/MAC: $3/ d/VoIP phone/ cpe:/h:polycom:soundstation_$1/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: PolycomSoundStationIP-SSIP_(\\d+)-UA/([\\d.]+)\\r\\n|s p/Polycom SoundStation $1/ v/$2/ d/VoIP phone/ cpe:/h:polycom:soundstation_$1/\nmatch sip m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent: PolycomSoundPointIP-SPIP_(\\d+)-UA/([\\d.]+)_(\\w+)\\r\\n|s p/Polycom SoundPoint $1/ v/$2/ i/MAC: $3/ d/VoIP phone/ cpe:/h:polycom:soundpoint_$1/\nmatch sip m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent: PolycomSoundPointIP-SPIP_(\\d+)-UA/([\\d.]+)\\r\\n|s p/Polycom SoundPoint $1/ v/$2/ d/VoIP phone/ cpe:/h:polycom:soundpoint_$1/\nmatch sip m|^SIP/2\\.0 400 Invalid Contact information\\r\\n.*received=[\\d.]+;ms-received-port=\\d+;ms-received-cid=\\d+\\r\\n|s p/Microsoft Live SIP client/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch sip m|^SIP/2\\.0 400 Invalid Contact information\\r\\n(?:[^\\r\\n]+\\r\\n)*?Via: SIP/2\\.0/TCP nm;branch=foo;received=[\\d.]+;ms-received-port=\\d+;ms-received-cid=[0-9A-F]{8}\\r\\nms-diagnostics: \\d+;reason=\\\"Parsing failure\\\";source=\\\"([\\w._-]+)\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n$|s p/Microsoft Office Communications Server/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch sip m|^SIP/2\\.0 501 Not Implemented.*\\r\\nServer: SJphone/([-\\w_.]+) \\(SJ Labs\\)\\r\\n|s p/SJphone SIP client/ v/$1/\nmatch sip m|^SIP/2\\.0 405 Method Not Allowed.*\\r\\nServer: SJphone/([-\\w_.]+) \\(SJ Labs\\)\\r\\n|s p/SJphone SIP client/ v/$1/\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Speedport ([\\w._ -]+) \\(|s p/T-Com Speedport/ v/$1/ d/broadband router/\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Speedport/([\\d.-]+)\\r\\n|s p/T-Com Speedport/ v/$1/ d/broadband router/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: X-Lite release ([\\w._ -]+)\\r\\n|s p/X-Lite SIP phone/ v/$1/ d/VoIP phone/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: X-Lite Beta release ([\\w._ -]+)\\r\\n|s p/X-Lite SIP phone/ v/$1/ d/VoIP phone/\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Twinkle/([\\w._-]+)\\r\\n|s p/Twinkle softphone/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch sip m|^SIP/2\\.0 500 Server Internal Error\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: BT Home Hub\\r\\n|s p/BT HomeHub/ d/VoIP phone/\nmatch sip m|^SIP/2\\.0 500 Server Internal Error\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: BT Home Hub (\\d+)\\r\\n|s p/BT HomeHub/ v/$1/ d/VoIP phone/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: TANDBERG/81 \\(([\\w._ -]+)\\)\\r\\n|s p/Tandberg MXP VoIP server/ v/$1/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: TANDBERG/([\\w._-]+) \\(([\\w._ -]+)\\)\\r\\n|s p/Tandberg-$1 VoIP server/ v/$2/ d/VoIP adapter/\nmatch sip m=^SIP/2\\.0 \\d\\d\\d .*Server: TANDBERG/(?:69|4098|4100) \\(([\\w._ -]+)\\)\\r\\n=s p/Tandberg VCS VoIP server/ v/$1/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 400 Transport protocol incorrect\\r\\n| p/Microsoft Office Communications Service 2005/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Accept: application/sdp\\r\\nAccept-Language: en\\r\\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO\\r\\nSupported: replaces\\r\\nAllow-Events: presence, message-summary, tunnel-info\\r\\n|s p/3CX VoIP PBX/ d/PBX/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch sip m|^SIP/2\\.0 405 Method Not Allowed\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: ABS ECC\\r\\n|s p/Alcatel-Lucent OmniTouch Unified Communication VoIP gateway/ d/PBX/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Zoiper (rev\\.\\d+)\\r\\n|s p/Zoiper VoIP software/ v/$1/ cpe:/a:securax:zoiper:$1/\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Asterisk PBX ([\\w._~+-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO\\r\\n|s p/Asterisk/ v/$1/ d/PBX/ cpe:/a:digium:asterisk:$1/\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Asterisk PBX ([\\w._~+-]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH\\r\\n|s p/Asterisk/ v/$1/ d/PBX/ cpe:/a:digium:asterisk:$1/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Asterisk PBX ([\\w._~+-]+)\\r\\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH\\r\\n|s p/Asterisk/ v/$1/ d/PBX/ cpe:/a:digium:asterisk:$1/\nmatch sip m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Glassfish_SIP_([\\w._-]+)\\r\\n|s p/Glassfish SIP Server/ v/$1/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?To: <sip:nm2@nm2>;tag=[0-9a-f-]+\\r\\n(?:[^\\r\\n]+\\r\\n)*?Allow: INVITE,ACK,CANCEL,BYE,OPTIONS,REFER,INFO,NOTIFY,PRACK,MESSAGE\\r\\n(?:[^\\r\\n]+\\r\\n)*?Supported: replaces,timer,100rel\\r\\nAccept: application/sdp\\r\\n|s p/Cisco 7940 IP Phone/ d/VoIP phone/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Telepathy-SofiaSIP/([\\w._-]+) sofia-sip/([\\w._-]+)\\r\\n|s p/Telepathy-SofiaSIP/ v/$1/ i/sofia-sip $2/\nmatch sip m|^SIP/2\\.0 503 Service Unavailable\\r\\n(?:[^\\r\\n]+\\r\\n)*?Warning: 399 \\\"Routing failed: ccbid=997 tcpindex=2 socket=nm:\\d+'\\r\\n(?:[^\\r\\n]+\\r\\n)*?To: <sip:nm2@nm2>;tag=\\d+\\r\\n|s p/Cisco CallManager 6/ cpe:/h:cisco:call_manager:6/\nmatch sip m|^SIP/2\\.0 500 Server Internal Error\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Thomson Inventel / HW_V[\\w._-]+ / FW_V[\\w._-]+ / SW_V([\\w._-]+)\\r\\n|s p/Aladino SIP phone/ v/$1/ d/VoIP phone/\nmatch sip m|^SIP/2\\.0 406 Not acceptable\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: sipXecs/([\\w._-]+) sipXecs/sipxbridge \\(Linux\\)\\r\\n|s p/SIPfoundry sipXecs PBX/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: VOIP_Agent_001\\r\\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, SUBSCRIBE, REFER, NOTIFY, UPDATE, MESSAGE, SERVICE, INFO, PING\\r\\n|s p/D-Link DVG-5121SP VoIP adapter/ d/VoIP adapter/ cpe:/h:dlink:dvg-5121sp/a\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Sipek on PJSUA v([\\w._-]+)/win32\\r\\n|s p/Sipek VoIP/ v/$1/ i/on PJSUA/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: snom([\\w._-]+)/([\\w._-]+)\\r\\n|s p/Snom $1 VoIP phone/ v/$2/ d/VoIP phone/ cpe:/h:snom:$1/a\nmatch sip m|^SIP/2\\.0 200 OK\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=\\w+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nContact: <sip:[\\d.]+:\\d+>\\r\\nAllow: INVITE,ACK,CANCEL,OPTIONS,UPDATE,INFO,NOTIFY,BYE,REFER\\r\\nAccept: application/sdp,application/media_control\\+xml,application/dtmf-relay,application/dtmf,message/sipfrag;version=2\\.0\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Tandberg Codian IP GW 3510 VoIP gateway/ d/VoIP adapter/ cpe:/h:tandberg:codian_ip_gw_3510/a\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: (AVM FRITZ!Box Fon WLAN [\\w._-]+(?: v\\d)?) ([\\w._-]+ \\(\\w+ +\\d+ \\d+\\))|s p/$1 SIP/ v/$2/ d/WAP/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: QIP ([\\w._ -]+)\\r\\n|s p/QIP instant messenger SIP/ v/$1/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: T-Com-IpPbxSrv/([\\w._-]+)\\r\\n|s p/Telekom Netphone VoIP phone SIP/ v/$1/ d/VoIP phone/\nmatch sip m|^SIP/2\\.0 403 Not relaying\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: kamailio \\(([\\w._-]+) \\(x86_64/linux\\)\\)\\r\\n|s p/Kamailio/ v/$1/ i/x86_64/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch sip m|^SIP/2\\.0 478 Unresolvable destination \\(478/SL\\)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: kamailio \\(([\\w._-]+) \\(x86_64/linux\\)\\)\\r\\n|s p/Kamailio/ v/$1/ i/x86_64/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch sip m|^SIP/2\\.0 405 Method Not Allowed\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Patton SN(\\w+) 5BIS MxSF v([\\w._-]+) [0-9A-F]+ R([\\w._-]+) (\\d\\d\\d\\d-\\d\\d-\\d\\d) H323 SIP BRI\\r\\n\\r\\n|s p/Patton SmartNode $1 VoIP adapter http config/ v/$2 $4/ d/VoIP adapter/ o/SmartWare $3/ cpe:/h:patton:sn$1/ cpe:/o:patton:smartware:$3/\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo;received=[\\d.]+\\r\\nTo: <sip:nm2@nm2>;tag=\\w+\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Nokia N86 phone SIP/ d/phone/ cpe:/h:nokia:n86/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\nVia: SIP/2\\.0/TCP nm;received=[\\d.]+;branch=foo\\r\\nCall-ID: 50000\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=foo\\r\\nCSeq: 42 OPTIONS\\r\\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\\r\\nAccept: application/sdp, application/pidf\\+xml, application/xpidf\\+xml, application/simple-message-summary, message/sipfrag;version=2\\.0, application/im-iscomposing\\+xml, text/plain\\r\\nSupported: replaces, 100rel, timer, norefersub\\r\\nAllow-Events: presence, message-summary, refer\\r\\nUser-Agent: netTALK\\r\\n| p/netTALK/ d/phone/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo\\r\\nTo: <sip:nm2@nm2>;tag=\\w+\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nAllow: INVITE,ACK,CANCEL,BYE,OPTIONS,REFER,NOTIFY\\r\\nContent-Type: application/sdp\\r\\nContent-Length: \\d+\\r\\n\\r\\nv=0\\r\\no=- \\d+ \\d+ IN IP4 [\\d.]+\\r\\ns=-\\r\\nc=IN IP4 [\\d.]+\\r\\nt=0 0\\r\\nm=audio 0 RTP/AVP 18 4 3 8 0 101\\r\\na=rtpmap:101 telephone-event/8000\\r\\n$| p/eyeP Media VoIP phone SIP/ d/VoIP phone/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Aastra (MX-ONE) SN/([\\w._-]+)\\r\\n|s p/Aastra $1 PBX SIP/ v/$2/ d/PBX/\nmatch sip m|^SIP/2\\.0 504 Server time-out\\r\\nms-user-logon-data: RemoteUser\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=\\w+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Microsoft Outlook Web Access SIP/\nmatch sip m|^SIP/2\\.0 481 Call Leg/Transaction Does Not Exist\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=0-\\w+-\\w+-\\w+-\\w+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nVia: SIP/2\\.0/TCP nm;received=[\\d.]+;branch=foo\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Sony PCS-TL50 videoconferencing SIP/ cpe:/h:sony:pcs-tl50/\nmatch sip m|^SIP/2\\.0 404 Not found\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=local-tag\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nContact: <sip:nm@nm>\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Edgewater Networks Edgemarc 4500 series VoIP gateway SIP/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 504 Server time-out\\r\\nms-user-logon-data: RemoteUser\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=\\w+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo\\r\\nServer: RTC/4\\.0\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Microsoft Lync SIP/ v/2010/ cpe:/a:microsoft:lync:2010/\nmatch sip m|^SIP/2\\.0 504 Server time-out\\r\\nms-user-logon-data: RemoteUser\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=\\w+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo\\r\\nServer: RTC/5\\.0\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Microsoft Lync SIP/ v/2013/ cpe:/a:microsoft:lync:2013/\nmatch sip m|^SIP/2\\.0 504 Server time-out\\r\\nms-user-logon-data: RemoteUser\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=\\w+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo\\r\\nServer: RTC/6\\.0\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Microsoft Skype for Business SIP/ v/2015/ cpe:/a:microsoft:skype_for_business:2015/\nmatch sip m|^SIP/2\\.0 403 Non-self Request-URI\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Epygi Quadro SIP User Agent/v([\\w._-]+) \\(QUADRO-([^\\)]*)\\)\\r\\n|s p/Epygi Quadro $2 PBX SIP/ v/$1/ d/PBX/ cpe:/h:epygi:$2/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Allow: INVITE,ACK,CANCEL,OPTIONS,UPDATE,INFO,NOTIFY,BYE,REFER\\r\\nAccept: application/sdp,application/media_control\\+xml,application/dtmf-relay,application/dtmf,message/sipfrag;version=2\\.0\\r\\n|s p/Cisco TelePresence MCU 4505 videoconference system SIP/ cpe:/h:cisco:telepresence_mcu_4505/\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent:Polycom (HDX [\\w._ -]+) \\(Release - ([\\w._-]+)\\)\\r\\n|s p/Polycom $1 videoconference system SIP/ v/$2/ cpe:/h:polycom:$1/\nmatch sip m|^SIP/2\\.0 403 Forbidden\\r\\nContent-Type: application/X-NECSIPEXT2MLv1\\r\\nSupported: timer\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=\\w+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo;received=[\\d.]+\\r\\nContent-Length: 99\\r\\n\\r\\nInd-ErrDsp=nec-code: 1:Non-Registered Access       ,2: \\(Retry after    10 sec\\)    ,6:1: EXIT  ,10\\r\\n| p/NEC SL1100 VoIP PBX/ d/PBX/\nmatch sip m|^SIP/2\\.0 500 Server Internal Error\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: SpeedTouch (\\w+)\\r\\nX-Serialnumber: (\\w+)\\r\\n|s p/SpeedTouch $1 SIP/ i/serial $2/ d/broadband router/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: (?:Polycom/[\\d.]+ )?PolycomVVX-([\\w._]+)-UA/([\\d.]+)(?:_[\\da-f]+)?\\r\\n|s p/Polycom $SUBST(1,\"_\",\" \") SIP/ v/$2/ d/VoIP phone/ cpe:/h:polycom:$1/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Auerswald COMpact VoIP sofia-sip/([\\w._-]+)\\r\\n|s p/sofia-sip/ v/$1/ i/Auerswald COMpact 5020 VoIP/ d/PBX/\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: FRITZ!OS\\r\\n|s p/AVM FRITZ!OS SIP/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent:PolycomRealPresenceGroup(\\d+)/([\\w._-]+)\\r\\n|s p/Polycom RealPresence Group $1 SIP/ v/$2/\nmatch sip m|^SIP/2\\.0 500 Server Internal Error\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: BT Home Hub ([\\w._-]+) Build ([\\w._-]+)\\r\\nX-Serialnumber: (\\w+)\\r\\n|s p/BT Home Hub $1 SIP/ v/$2/ i/serial: $3/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 400 Invalid Via Port 0\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: drgos-drg(\\d+)-([\\w._-]+)\\r\\n|s p/Genexis DRG $1 SIP/ v/$2/ d/broadband router/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=[a-f\\d-]{58}\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nVia: SIP/2\\.0/TCP nm;received=[\\d.]+;branch=foo\\r\\nSupported: gruu-10,replaces,msrtc-event-categories\\r\\nContent-Length: 0\\r\\n\\r\\n| p/LifeSize UVC Multipoint SIP/\nmatch sip m|^SIP/2\\.0 403 Forbidden\\r\\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Wowza Streaming Engine ([\\w._-]+) build(\\d+)\\r\\n|s p/Wowza Streaming Engine sipd/ v/$1 build $2/ cpe:/a:wowza:wowza_streaming_engine:$1/\nmatch sip m|^SIP/2\\.0 400 Invalid Contact information\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=[0-9A-F]{32}\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo;received=[\\d.]+;ms-received-port=\\d+;ms-received-cid=[0-9A-F]+\\r\\nms-diagnostics: 1018;reason=\\\"Parsing failure\\\";source=\\\"([\\w._-]+)\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Microsoft Office Communications Server sipd/ v/2007 R2/ h/$1/\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: AVM FRITZ!Box ([\\w._-]+) Cable \\(um\\) ([\\w._-]+) \\([\\w ]+\\)\\r\\n|s p/AVM FRITZ!Box $1 sipd/ v/$2/ d/broadband router/\nmatch sip m|^SIP/2\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent: TAU-1M\\.IP/([\\w._-]+) SN/\\w+ sofia-sip/([\\w._-]+)\\r\\n|s p/sofia-sip/ v/$2/ i/Eltex TAU-1M.IP VoIP gateway, version $1/ d/VoIP adapter/ cpe:/a:sofia-sip:sofia-sip:$2/ cpe:/h:eltex:tau-1m.ip:$1/\nmatch sip m|^SIP/2\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent: Zoiper for Windows ([\\d.]+) (r\\d+)\\r\\n|s p/Zoiper for Windows sipd/ v/$1/ i/$2/ o/Windows/ cpe:/a:securax:zoiper_for_windows:$1/ cpe:/o:microsoft:windows/a\nmatch sip m|^SIP/2\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent: CommsMundi Softswitch\\r\\n|s p/Comms Mundi sipd/ cpe:/a:wireless_mundi:comms_mundi/\nmatch sip m|^SIP/2\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent:Polycom HDX (\\d+) HD \\(Release - ([\\d.-]+)\\)\\r\\n|s p/Polycom HDX $1 videoconferencing system sipd/ v/$2/ d/webcam/ cpe:/h:polycom:hdx_$1/\nmatch sip m|^SIP/2\\.0 \\d\\d\\d .*\\r\\nServer: TANDBERG/4102 \\(X7\\.0\\.2\\)\\r\\n|\nmatch sip m|^SIP/2\\.0 200 OK\\r\\nAccept: application/sdp, application/dtmf-relay, application/QSIG, application/broadsoft\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Patton (\\w+) [^\\r\\n]+ M5T SIP Stack/([\\w._-]+)\\r\\n|s p/M5T SIP Client Engine/ v/$2/ i/Patton $1/ d/VoIP adapter/ cpe:/a:media5corp:m5t_sip_client_engine:$2/ cpe:/h:patton:$1/\nmatch sip m|^SIP/2\\.0 200 Rawr!!\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo;received=[\\d.]+\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=[\\da-f]{32}\\.[\\da-f]+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Kamailio sipd/ cpe:/a:kamailio:kamailio/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent:Mitel-(\\d\\w+)-SIP-Phone ([\\d.]+) [0-9A-F]{12}\\r\\n|s p/Mitel SIP phone sipd/ v/$2/ i/model: $1/ cpe:/h:mitel:$1-ip/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent:Mitel-Mitel-SIP-Phone ([\\d.]+) [0-9A-F]{12}\\r\\n|s p/Mitel SIP phone sipd/ v/$1/\nmatch sip m|^SIP/2\\.0 484 Address Incomplete\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: SIP Pulse (\\d[\\w.]+)\\r\\n|s p/SIP Pulse/ v/$1/ cpe:/a:sippulse:sippulse:$1/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: FreeSwitch\\r\\n|s p/FreeSwitch sipd/ cpe:/a:freeswitch:freeswitch/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: PJSUA v([\\d.]+) Darwin-([\\d.]+)/|s p/PJSIP pjsua sipd/ v/$1/ i/Darwin $2/ o/OS X/ cpe:/o:apple:mac_os_x/a\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: PJSUA v([\\d.]+) Linux-([\\d.]+)/(ix[\\w_]+)|s p/PJSIP pjsua sipd/ v/$1/ i/arch: $3/ o/Linux $2/ cpe:/o:linux:linux_kernel:$2/a\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: PJSUA v([\\d.]+) win32-([\\d.]+)/(ix[\\w_]+)|s p/PJSIP pjsua sipd/ v/$1/ i/arch: $3/ o/Windows $2/ cpe:/o:microsoft:windows/a\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: MicroSIP/([\\d.]+)\\r\\n|s p/MicroSIP sipd/ v/$1/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Tely_v([\\d.-]+)\\r\\n|s p/Tely sipd/ v/$1/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: CSipSimple_([^/-]+)[-\\d]*/(r\\d+)\\r\\n|s p/CSipSimple sipd/ v/$2/ i/device: $SUBST(1,\"_\",\" \")/ cpe:/a:csipsimple:csipsimple:$2/\nmatch sip m|^SIP/2\\.0 500 Server Internal Error\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Thomson ([\\w-]+) Build ([\\d.]+)\\r\\nX-Serialnumber: (\\w+)\\r\\n|s p/Thomson $1 router sipd/ v/$2/ i/serial: $3/ d/broadband router/ cpe:/h:thomson:$1/a\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Softphone/([\\d.]+) \\(RingCentral(?: \\(\\d+\\))?; (Windows \\w+) \\((\\d\\d) bits\\)/([\\d.]+); revision: \\d+\\)\\r\\n|s p/RingCentral Softphone/ v/$1/ i/arch: $3-bit; OS Version $4/ o/$2/ cpe:/a:ringcentral:softphone:$1/ cpe:/o:microsoft:$2/\nmatch sip m|^SIP/2\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent: Yealink (SIP-[\\w_]+) ([\\d.]+)\\r\\n|s p/Yealink $1 VoIP phone sipd/ v/$2/ d/VoIP phone/ cpe:/h:yealink:$1/\n\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent: Asterisk PBX ([\\w._+-]+)\\r\\n|s p/Asterisk PBX/ v/$1/ d/PBX/ cpe:/a:digium:asterisk:$1/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: OpenS[Ee][Rr] \\(([\\w\\d\\.-]+) \\(([\\d\\w/]+)\\)\\)|s p/OpenSER SIP Server/ v/$1/ i/$2/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Sip EXpress router \\(([\\w\\d\\.-]+) \\(([\\d\\w/]+)\\)\\)|s p/SIP Express Router/ v/$1/ i/$2/\n# OpenSER and SER have joined to become SIP Router\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: SIP Router \\(([\\w\\d\\.-]+) \\(([\\d\\w/]+)\\)\\)|s p/SIP Router/ v/$1/ i/$2/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: OpenSIPS \\(([\\w\\d\\.-]+) \\(([\\d\\w/]+)\\)\\)|s p/OpenSIPS SIP Server/ v/$1/ i/$2/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Cisco-SIPGateway/IOS-([-\\d\\w.]+)\\r\\n|s p/Cisco SIP Gateway/ i/IOS $1/ d/router/ o/IOS/ cpe:/o:cisco:ios/a\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Sphericall/([\\w._-]+) Build/(\\d+)\\r\\n|s p/Sphericall VoIP Gateway/ v/$1 build $2/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CommuniGatePro/([\\w._-]+)\\r\\n|s p/CommuniGatePro VoIP Gateway/ v/$1/ cpe:/a:stalker:communigate_pro:$1/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Sip EXpress router \\(([\\w._-]+) OpenIMSCore \\(i386/linux\\)\\)\\r\\n|s p/OpenIMSCore SIP EXpress router/ v/$1/ i/Linux i386/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: FreeSWITCH-mod_sofia/([\\w._ +~-]+)\\r\\n|s p/FreeSWITCH mod_sofia/ v/$1/ cpe:/a:freeswitch:freeswitch/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Configured by 2600hz!\\r\\n(?:[^\\r\\n]+\\r\\n)*?Accept: application/sdp\\r\\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE\\r\\n|s p/FreeSWITCH/ d/PBX/ cpe:/a:freeswitch:freeswitch/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\nUser-Agent: 3CXPhoneSystem ([\\w._-]+)(?: \\(\\d+\\))?\\r\\n|s p/3CX PhoneSystem PBX/ v/$1/ o/Windows/ cpe:/a:3cx:3cx_phonesystem:$1/ cpe:/o:microsoft:windows/a\nmatch sip-proxy m|^SIP/2\\.0 503 Remote end of tunnel is not connected\\r\\n(?:[^\\r\\n]+\\r\\n)*?Warning: \\d+ \\w+ \\\"Remote end of the bridge is not connected\\\"\\r\\n|s p/3CX PhoneSystem PBX/ i/misconfigured/ d/PBX/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: ComdasysB2BUA([\\w._-]+)\\r\\n|s p/Comdasys SIP Server/ v/$1/\nmatch sip-proxy m|^SIP/2\\.0 405 Method Not Allowed\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: SIParator/([\\w._-]+)\\r\\n|s p/Ingate SIParator/ v/$1/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Audiocodes-Sip-Gateway-(Mediant [\\w._-]+)/v([\\w._-]+)\\r\\n|s p/Audiocodes $1 SIP gateway/ v/$2/ d/VoIP adapter/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Audiocodes-Sip-Gateway-(MP-[\\w._ -]+)/v\\.([\\w._-]+)\\r\\n|s p/Audiocodes $1 SIP gateway/ v/$2/ d/VoIP adapter/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Berofix VOIP Gateway\\r\\n|s p/Berofix VoIP gateway/ d/VoIP adapter/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: HiPath ([\\w._-]+) V([\\w._ -]+) SIP Stack/([\\w._-]+)\\r\\n|s p/Siemens HiPath $1 VoIP gateway/ v/$2/ i/SIP stack $3/ d/VoIP adapter/ cpe:/h:siemens:hipath_$1/a\nmatch sip-proxy m|^SIP/2\\.0 503 Service Unavailable\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo;received=[\\d.]+\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=\\w+\\r\\nDate: .*?\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nWarning: \\d+ [\\w._-]+ \\\"Unable to find a device handler for the request received on port \\d+ from [\\d.]+\\\"\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Cisco Unified Communications Manager/ cpe:/a:cisco:unified_communications_manager/\n# CUCM 6.1.2.1001-4\nmatch sip-proxy m|^SIP/2\\.0 503 Service Unavailable\\r\\nDate: .*\\r\\nWarning: \\d+ \\\"Routing failed: ccbid=\\d+ tcpindex=\\d+ socket=nm:\\d+'\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nContent-Length: 0\\r\\nTo: <sip:nm2@nm2>;tag=\\d+\\r\\nCall-ID: 50000\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo;received=[\\d.]+\\r\\nCSeq: 42 OPTIONS\\r\\n\\r\\n| p/Cisco Unified Communications Manager/ cpe:/a:cisco:unified_communications_manager/\nmatch sip-proxy m|^SIP/2\\.0 100 Trying\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Sipwise NGCP Proxy ([\\w._-]+)\\r\\n|s p/Sipwise NGCP SIP/ v/$1/ d/PBX/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: NEC-i SL Series ([\\w._-]+)/2\\.1\\r\\n|s p/NEC SL-series VoIP PBX/ v/$1/ d/PBX/\nmatch sip-proxy m|^SIP/2\\.0 400 Bad Request - Branch in top Via header has no Magic Cookie\\r\\nv:SIP/2\\.0/TCP nm;branch=foo;received=[\\d.]+\\r\\nf:<sip:nm@nm>;tag=root\\r\\nt:<sip:nm2@nm2>;tag=to_tag_[\\da-f]+\\r\\ni:50000\\r\\nCSeq:42 OPTIONS\\r\\nl:0\\r\\n\\r\\n|s p/Nokia CFX-5000 SIP core controller/ d/PBX/\nmatch sip-proxy m|^SIP/2\\.0 403 Forbidden\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=\\w{16}\\r\\nCSeq: 42 OPTIONS\\r\\nCall-ID: 50000\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Avaya Session Border Controller/ cpe:/a:avaya:session_border_controller/\nmatch sip-proxy m|^SIP/2\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mediant (\\d+)/v\\.([\\d.]+)[\\w.]+\\r\\n|s p/AudioCodes Mediant $1 session border controller sipd/ v/$2/ cpe:/h:audiocodes:mediant_$1/\nmatch sip-proxy m|^SIP/2\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Altitude vBox\\r\\n|s p/Altitude vBox VoIP PBX/ d/PBX/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Asterisk PBX ([\\w._+~-]+)\\r\\n|s p/Asterisk PBX/ v/$1/ d/PBX/ cpe:/a:digium:asterisk:$1/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FPBX-([\\d.]+)\\(([\\d.]+)\\)\\r\\n|s p/FreePBX/ v/$1/ i/Asterisk $2/ d/PBX/ cpe:/a:digium:asterisk:$2/ cpe:/a:sangoma:freepbx:$1/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Speedport (W \\w+)/Version -([\\d.]+)\\r\\n\\r\\n|s p/Telekom Speedport router sipd/ v/$2/ i/model $1/ d/broadband router/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Mitel SIP-DECT \\(SW-Version=([\\w._-]+)\\)\\r\\n|s p/Mitel SIP DECT OpenMobility Manager sipd/ v/$1/ cpe:/a:mitel:openmobility_manager:$1/\n# notes2.exe 9.0.1\nmatch sip-proxy m|^SIP/2\\.0 \\d\\d\\d .*\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo;received=[^;\\n]+;rport=\\d+\\r\\nContact: <sip:[^>]+>;\\+sip\\.instance=\"<urn:uuid:[a-f\\d]{8}-[a-f\\d]{4}-[a-f\\d]{4}-[a-f\\d]{4}-[a-f\\d]{12}>\"\\r\\nAllow: INVITE, ACK, CANCEL, BYE, NOTIFY, INFO, MESSAGE, UPDATE\\r\\nContent-Length: 0\\r\\n\\r\\n| p/IBM Notes sipd/ cpe:/a:ibm:notes/\nmatch sip-proxy m|^SIP/2\\.0 404 Not Found\\r\\nVia: SIP/2\\.0/TCP nm:5060;received=[^;]+;branch=foo\\r\\nCall-ID: 50000\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=[a-f\\d]{8}-[a-f\\d]{8}\\r\\nCSeq: 42 OPTIONS\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Cisco Unified Communications Manager sipd/ cpe:/a:cisco:unified_communications_manager/\nmatch sip-proxy m|^SIP/2\\.0 400 Via transport inconsistent with actual transport\\r\\nVia: SIP/2\\.0/TCP nm:5060;received=[^;]+;branch=foo\\r\\nCall-ID: 50000\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>\\r\\nCSeq: 42 OPTIONS\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Cisco Unified Communications Manager sipd/ cpe:/a:cisco:unified_communications_manager/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo;received=.*\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=[a-f0-9]{32}\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nAllow: INVITE, ACK, BYE, CANCEL, REFER, OPTIONS, INFO, NOTIFY, PRACK, UPDATE\\r\\nAccept: application/sdp\\r\\nContent-Type: application/sdp\\r\\nContent-Length: \\d+\\r\\n\\r\\n| p|Telos Z/IP ONE sipd| d/specialized/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\nVia: SIP/2\\.0/TCP nm;branch=foo;received=[^;]*;rport=\\d+;ingress-zone=(\\S+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Cisco-CUCM([\\d.]+)\\r\\n|s p/Cisco Unified Communications Manager sipd/ v/$2/ i/zone: $1/ cpe:/a:cisco:unified_communications_manager:$2/\n\nmatch ssl/http m|^HTTP/1\\.1 501 Not Implemented\\r\\nConnection: close\\r\\nServer: AppWork GmbH HttpServer\\r\\n\\r\\n| p/AppWork JDownloader2 httpd/ cpe:/a:appwork:jdownloader:2/\n\n# The SIPOptionsProbe can trigger a response out of psyBNC\nmatch irc-proxy m|^Login failed\\. Disconnecting\\.\\r\\n$| p/psyBNC/ i/Login Failed/\n\nmatch upnp m|^HTTP/1\\.1 404 Not Found\\r\\nConnection: close\\r\\nServer: UPnP/([\\w._-]+), DLNADOC/([\\w._-]+), Platinum/([\\w._-]+)\\r\\n\\r\\n| p/Platinum upnpd/ v/$3/ i/XBMC; DLNADOC $2; UPnP $1/ o/Linux/ cpe:/a:plutinosoft:platinum:$3/ cpe:/o:linux:linux_kernel/\nmatch upnp m|^HTTP/1\\.1 404 Not Found\\r\\nContent-Length: \\d+\\r\\nContent-Type: text/html\\r\\nServer: Linux/(\\w+) UPnP/([\\d.]+) DLNADOC/([\\d.]+) Platinum/([\\d.]+)\\r\\n\\r\\n| p/Platinum unpnd/ v/$4/ i/arch: $1; UPnP $2; DLNADOC $3/ o/Linux/ cpe:/a:plutinosoft:platinum:$4/ cpe:/o:linux:linux_kernel/a\nmatch upnp m|^HTTP/1\\.1 501 Unimplemented\\r\\nServer: unspecified, UPnP/([\\w._-]+), unspecified\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Cisco-Linksys E4200 WAP upnpd/ i/UPnP $1/ cpe:/h:cisco:e4200/\n\n# TODO: enumerate version differences between these two?\nmatch webdav m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: cPanel\\r\\nContent-Length: 0\\r\\nConnection: Keep-Alive\\r\\nAllow: UNLOCK,HEAD,MOVE,OPTIONS,LOCK,POST,PUT,COPY,MKCOL,GET,DELETE,PROPFIND\\r\\nContent-Type: httpd/unix-directory\\r\\nDAV: 1,2,<http://apache\\.org/dav/propset/fs/1>\\r\\nKeep-Alive: timeout=15, max=96\\r\\nMS-Author-Via: DAV\\r\\n\\r\\n|s p/cPanel webdav/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch webdav m|^HTTP/1\\.1 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: cPanel\\r\\nPersistent-Auth: false\\r\\nCache-Control: no-cache[^\\r\\n]*\\r\\nConnection: Keep-Alive\\r\\nVary: Accept-Encoding\\r\\nAllow: [A-Z, ]+\\r\\nContent-Length: 0\\r\\nContent-Type: text/plain\\r\\nExpires: Fri, 01 Jan 1990 00:00:00 GMT\\r\\nDAV: 1, 2\\r\\nKeep-Alive: timeout=15, max=96\\r\\nMS-Author-Via: DAV\\r\\n\\r\\n|s p/cPanel webdav/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\nmatch xmpp m|^<stream:error><bad-format xmlns='urn:ietf:params:xml:ns:xmpp-streams'/></stream:error></stream:stream>$| p/Isode M-Link XMPP/ cpe:/a:isode:m-link/\n\n# internal communication service of Yamaha RX-V2067 AV-Receiver\nmatch yamaha-comm m|^@SYS:INPNAMEMULTICH=MULTI CH\\r\\n@SYS:INPNAMEPHONO=PHONO\\r\\n@SYS:INPNAMEAV1=Blu-ray\\r\\n@SYS:INPNAMEAV2=Dreambox\\r\\n@SYS:INPNAMEAV3=PS 3\\r\\n@SYS:INPNAMEAV4=AV4\\r\\n@SYS:INPNAMEAV5=AV5\\r\\n@SYS:INPNAMEAV6=AV6\\r\\n@SYS:INPNAMEAV7=AV7\\r\\n@SYS:INPNAMEVAUX=V-AUX\\r\\n@SYS:INPNAMEAUDIO1=TV\\r\\n@SYS:INPNAMEAUDIO2=AUDIO2\\r\\n@SYS:INPNAMEAUDIO3=AUDIO3\\r\\n@SYS:INPNAMEAUDIO4=AUDIO4\\r\\n@SYS:INPNAMEDOCK=DOCK\\r\\n@SYS:INPNAMEUSB=USB\\r\\n@TUN:AVAIL=Not Ready\\r\\n@MAIN:ZONENAME=Main\\r\\n| p/Yamaha RX-V2067 AV receiver/ d/media device/ cpe:/h:yamaha:rx-v2067/\n\nmatch zabbix m|^OK$| p/Zabbix Monitoring System/ cpe:/a:zabbix:zabbix/\n\nmatch zeiss-axio m|^SIP/2\\.0\\rID: 50000\\rTIONS\\r| p/Zeiss Axio Imager microsocope/\n\nsoftmatch sip m|^SIP/2\\.0 ([-\\w\\s.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ([-\\w\\s/_\\.\\(\\)]+)\\r\\n|s p/$2/ i/Status: $1/\nsoftmatch sip m|^SIP/2\\.0 ([-\\w\\s.]+)\\r.*\\nUser-[Aa]gent: ([-\\w\\s/_\\.\\(\\)]+)\\r\\n|s p/$2/ i/Status: $1/\nsoftmatch sip m|^SIP/2\\.0 ([-\\w\\s.]+)\\r\\n| i/SIP end point; Status: $1/\n\n##############################NEXT PROBE##############################\nProbe UDP SIPOptions q|OPTIONS sip:nm SIP/2.0\\r\\nVia: SIP/2.0/UDP nm;branch=foo;rport\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nMax-Forwards: 70\\r\\nContent-Length: 0\\r\\nContact: <sip:nm@nm>\\r\\nAccept: application/sdp\\r\\n\\r\\n|\nrarity 5\nports 5060\n# Some VoIP phones take longer to respond\ntotalwaitms 7500\n\nsoftmatch quic m|^\\rPTIONS sQ\\d\\d\\d|\n\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Asterisk PBX \\(digium\\)\\r\\n|s p/Digium Switchvox PBX/ i/based on Asterisk/ d/PBX/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: SAGEM / 3202\\.3 / 2601EC \\r\\n|s p/Sagem ADSL router/ d/broadband router/\nmatch sip m|^SIP/2\\.0 408 Request timeout\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: sipXecs/([\\w._-]+) sipXecs/sipXproxy \\(Linux\\)\\r\\n|s p/SIPfoundry sipXecs PBX/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: AVM (FRITZ!Box Fon WLAN [\\w._ -]+) (?:Annex A )?(?:\\(UI\\) )?([\\w._ -]+ \\(\\w+ +\\d+ +\\d+\\))|s p/AVM $1 SIP/ v/$2/ d/WAP/ cpe:/h:avm:$1/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: NetSapiens SiPBx 1-1205c\\r\\n|s p/NetSapiens SiPBX SIP switch/ d/switch/\nmatch sip m|^SIP/2\\.0 481 Call Leg/Transaction Does Not Exist\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=0-\\w+-\\w+-\\w+-\\w+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nVia: SIP/2\\.0/UDP nm;received=[\\d.]+;rport=\\d+;branch=foo\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Sony PCS-TL50 videoconferencing SIP/ cpe:/h:sony:pcs-tl50/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\nCSeq: 42 OPTIONS\\r\\nVia: SIP/2\\.0/UDP nm;branch=foo;rport\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nCall-ID: 50000\\r\\nTo: <sip:nm2@nm2>\\r\\nContact: <sip:nm2@[\\d.]+>\\r\\nContent-Length: 0\\r\\n\\r\\n$| p/Ekiga SIP/ v/3.2.7/ cpe:/a:ekiga:ekiga:3.2.7/\nmatch sip m|^SIP/2\\.0 403 Forbidden\\r\\n(?:[^\\r\\n]+\\r\\n)*?From: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=Mitel-([\\w._-]+)_\\d+-\\d+\\r\\n|s p/Mitel $1 PBX SIP/ d/PBX/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Allow: INVITE, ACK, CANCEL, BYE, OPTIONS, INFO, REFER, SUBSCRIBE, NOTIFY\\r\\nAccept: application/sdp,application/dtmf-relay,application/simple-message-summary,message/sipfrag\\r\\nAccept-Encoding: identity\\r\\n|s p/Siemens Gigaset DX800A VoIP phone SIP/ d/VoIP phone/ cpe:/h:siemens:gigaset_dx800a/a\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Zoiper rev\\.(\\d+)\\r\\n|s p/Zoiper softphone SIP/ v/$1/ cpe:/a:securax:zoiper:$1/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Ekiga/([\\w._-]+)\\r\\n|s p/Ekiga/ v/$1/ cpe:/a:ekiga:ekiga:$1/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: HG4000/([\\w._-]+)+\\r\\n|s p/Hypermedia HG-4000 VoIP GSM gateway SIP/ v/$1/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: Grandstream (IP\\d+) ([\\w._-]+)\\r\\n|s p/Grandstream $1 VoIP phone SIP/ v/$2/ d/VoIP phone/ cpe:/h:grandstream:$1/a\nmatch sip m|^SIP/2\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent: Yealink (SIP-[\\w_]+) ([\\d.]+)\\r\\n|s p/Yealink $1 VoIP phone sipd/ v/$2/ d/VoIP phone/ cpe:/h:yealink:$1/\nmatch sip m|^SIP/2\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent: (VP\\d+\\w*) ([\\d.]+)\\r\\n|s p/Yealink $1 VoIP phone sipd/ v/$2/ d/VoIP phone/ cpe:/h:yealink:$1/\nmatch sip m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: FRITZ!OS\\r\\n|s p/AVM FRITZ!OS SIP/ d/VoIP adapter/\nmatch sip m|^SIP/2\\.0 200 Rawr!!\\r\\nVia: SIP/2\\.0/UDP nm;branch=foo;rport=\\d+;received=[\\d.]+\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=[\\da-f]{32}\\.[\\da-f]+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Kamailio sipd/ cpe:/a:kamailio:kamailio/\n\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: FPBX-([\\d.]+)\\(([\\d.]+)\\)\\r\\n|s p/FreePBX/ v/$1/ i/Asterisk $2/ d/PBX/ cpe:/a:digium:asterisk:$2/ cpe:/a:sangoma:freepbx:$1/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Asterisk PBX ([\\w._+~-]+)\\r\\n|s p/Asterisk PBX/ v/$1/ d/PBX/ cpe:/a:digium:asterisk:$1/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: OpenS[Ee][Rr] \\(([\\w\\d\\.-]+) \\(([\\d\\w/]+)\\)\\)|s p/OpenSER SIP Server/ v/$1/ i/$2/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: Sip EXpress router \\(([\\w\\d\\.-]+) \\(([\\d\\w/]+)\\)\\)|s p/SIP Express Router/ v/$1/ i/$2/\n# OpenSER and SER have joined to become SIP Router\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: SIP Router \\(([\\w\\d\\.-]+) \\(([\\d\\w/]+)\\)\\)|s p/SIP Router/ v/$1/ i/$2/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?User-Agent: Asterisk PBX\\r\\n|s p/Asterisk PBX/ cpe:/a:digium:asterisk/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: OpenSIPS \\(([\\w\\d\\.-]+) \\(([\\d\\w/]+)\\)\\)|s p/OpenSIPS SIP Server/ v/$1/ i/$2/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?\\r\\nUser-Agent: ComdasysB2BUA([\\w._-]+)\\r\\n|s p/Comdasys SIP Server/ v/$1/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: NEC-i SL Series ([\\w._-]+)/2\\.1\\r\\n|s p/NEC SL-series VoIP PBX/ v/$1/ d/PBX/\nmatch sip-proxy m|^SIP/2\\.0 200 OK\\r\\nVia: SIP/2\\.0/UDP nm;branch=foo;received=[\\d.]+;rport=\\d+\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=as\\d+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nServer: -(\\d[\\w._-]+)\\((\\d[\\w._-]+)\\)\\r\\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH\\r\\nSupported: replaces, timer\\r\\nContact: .*\\r\\nAccept: application/sdp\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Asterisk/ v/$2/ i/FreePBX $1/ cpe:/a:digium:asterisk:$2/\nmatch sip-proxy m|^SIP/2\\.0 400 Bad Request - [A-Z] - 16007\\r\\nv:SIP/2\\.0/UDP nm;branch=foo;rport=\\d+;received=[\\d.]+\\r\\nf:<sip:nm@nm>;tag=root\\r\\nt:<sip:nm2@nm2>;tag=\\d+\\r\\ni:50000\\r\\nCSeq:42 OPTIONS\\r\\nl:0\\r\\n\\r\\n| p/Nokia CFX-5000 SIP core controller/ d/PBX/\nmatch sip-proxy m|^SIP/2\\.0 400 Bad Request - [A-Z] - 16007\\r\\nVia: SIP/2\\.0/UDP nm;branch=foo;rport=\\d+;received=[\\d.]+\\r\\nFrom: <sip:nm@nm>;tag=root\\r\\nTo: <sip:nm2@nm2>;tag=\\d+\\r\\nCall-ID: 50000\\r\\nCSeq: 42 OPTIONS\\r\\nContent-Length: 0\\r\\n\\r\\n| p/Nokia CFX-5000 SIP core controller/ d/PBX/\nmatch sip-proxy m|^SIP/2\\.0 404 Not Found\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: Asterisk PBX\\r\\n(?:[^\\r\\n]+\\r\\n)*?Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO|s p/Asterisk/ d/PBX/ cpe:/a:digium:asterisk/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: CommuniGatePro/([\\w._-]+)\\r\\n|s p/CommuniGatePro VoIP Gateway/ v/$1/ cpe:/a:stalker:communigate_pro:$1/\nmatch sip-proxy m|^SIP/2\\.0 (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?Server: STARFACE PBX\\r\\n|s p/STARFACE PBX/ cpe:/a:starface:starface_pbx/\n\nsoftmatch sip m|^SIP/2\\.0 ([-\\w\\s.]+)\\r\\n(?:[^\\r\\n]+\\r\\n)*?Server: ([-\\w\\s/_\\.\\(\\)]+)\\r\\n|s p/$2/ i/Status: $1/\nsoftmatch sip m|^SIP/2\\.0 ([-\\w\\s.]+)\\r.*\\nUser-[Aa]gent: ([-\\w\\s/_\\.\\(\\)]+)\\r\\n|s p/$2/ i/Status: $1/\nsoftmatch sip m|^SIP/2\\.0 ([-\\w\\s.]+)\\r\\n| i/SIP end point; Status: $1/\n\n# Supposed to be multicast, but apparently something answers unicast?\nmatch ws-discovery m|^<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<SOAP-ENV:Envelope xmlns:SOAP-ENV=\\\"http://www\\.w3\\.org/2003/05/soap-envelope\\\" xmlns:SOAP-ENC=\\\"http://www\\.w3\\.org/2003/05/soap-encoding\\\" xmlns:xsi=\\\"http://www\\.w3\\.org/2001/XMLSchema-instance\\\" xmlns:xsd=\\\"http://www\\.w3\\.org/2001/XMLSchema\\\" xmlns:wsa=\\\"http://schemas\\.xmlsoap\\.org/ws/2004/08/addressing\\\" xmlns:d=\\\"http://schemas\\.xmlsoap\\.org/ws/2005/04/discovery\\\" xmlns:d3=\\\"http://www\\.onvif\\.org/ver10/network/wsdl/RemoteDiscoveryBinding\\\" xmlns:d4=\\\"http://www\\.onvif\\.org/ver10/network/wsdl/DiscoveryLookupBinding\\\" xmlns:dn=\\\"http://www\\.onvif\\.org/ver10/network/wsdl\\\"><SOAP-ENV:Body><SOAP-ENV:Fault><faultcode>SOAP-ENV:Client</faultcode><faultstring>No XML element tag</faultstring></SOAP-ENV:Fault></SOAP-ENV:Body></SOAP-ENV:Envelope>| p/Huacam Cyclops ONVIF 1.0 responder/ d/webcam/\n# Brother MFC-9340CDW\nmatch ws-discovery m|^<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<SOAP-ENV:Envelope xmlns:SOAP-ENV=\\\"http://www\\.w3\\.org/2003/05/soap-envelope\\\" xmlns:wsa=\\\"http://schemas\\.xmlsoap\\.org/ws/2004/08/addressing\\\" xmlns:wsdisco=\\\"http://schemas\\.xmlsoap\\.org/ws/2005/04/discovery\\\" xmlns:wsdp=\\\"http://schemas\\.xmlsoap\\.org/ws/2006/02/devprof\\\" xmlns:wse=\\\"http://schemas\\.xmlsoap\\.org/ws/2004/08/eventing\\\" xmlns:xop=\\\"http://www\\.w3\\.org/2004/08/xop/include\\\" xmlns:wsx=\\\"http://schemas\\.xmlsoap\\.org/ws/2004/09/mex\\\" xmlns:wxf=\\\"http://schemas\\.xmlsoap\\.org/ws/2004/09/transfer\\\" xmlns:wprt=\\\"http://schemas\\.microsoft\\.com/windows/2006/08/wdp/print\\\" xmlns:wscn=\\\"http://schemas\\.microsoft\\.com/windows/2006/08/wdp/scan\\\"><SOAP-ENV:Body><SOAP-ENV:Fault><faultcode>SOAP-ENV:Client</faultcode><faultstring>HTTP Error: 405 Method Not Allowed</faultstring></SOAP-ENV:Fault></SOAP-ENV:Body></SOAP-ENV:Envelope>| p/Brother WS-Print 1.0 responder/ d/printer/\n# Softmatch for now, since submission didn't contain specific device\nsoftmatch ws-discovery m|^<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<SOAP-ENV:Envelope .*xmlns:\\w+=\\\"http://schemas\\.xmlsoap\\.org/ws/2005/04/discovery\\\" .*xmlns:\\w+=\\\"http://www\\.onvif\\.org/ver10/network/wsdl/RemoteDiscoveryBinding\\\"| p/ONVIF 1.0 responder/ d/webcam/\nsoftmatch ws-discovery m|^<\\?xml version=\\\"1\\.0\\\" encoding=\\\"UTF-8\\\"\\?>\\n<SOAP-ENV:Envelope .*xmlns:\\w+=\\\"http://schemas\\.xmlsoap\\.org/ws/2005/04/discovery\\\" .*xmlns:\\w+=\\\"http://schemas\\.microsoft\\.com/windows/2006/08/wdp/print\\\"| p/WS-Print 1.0 responder/ d/printer/\n\n##############################NEXT PROBE##############################\nProbe TCP LANDesk-RC q|\\x54\\x4e\\x4d\\x50\\x04\\0\\0\\0\\x54\\x4e\\x4d\\x45\\0\\0\\x04\\0|\nrarity 6\nports 1761-1763,2701,5709\n# With Host and User currently logged in\nmatch landesk-rc m|^TNMP.\\0\\0\\0TNME.\\0\\0\\0USER.\\x08\\x04\\0\\x08\\0.{9}\\0R\\0\\x03\\0W\\0\\xff\\xff\\0.\\0\\xfd..\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\x01\\x04\\0\\0\\0\\0\\0...\\0\\xb5\\x01\\xbb\\0Desktop Manager (\\d\\.\\d)\\0\\x02\\x04\\x01\\x02\\x01\\0\\0\\W+([-\\w]+)\\0([-\\w]+)\\0\\0$|s p/LANDesk RC/ v/$1/ i/User: $3/ h/$2/ cpe:/a:landesk:landesk_management_suite:$1/\n# With just hostname\nmatch landesk-rc m|^TNMP.\\0\\0\\0TNME.\\0\\0\\0USER.\\x08\\x04\\0\\x08\\0.{9}\\0R\\0\\x03\\0W\\0\\xff\\xff\\0.\\0\\xfd..\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\x01\\x04\\0\\0\\0\\0\\0...\\0\\xb5\\x01\\xbb\\0Desktop Manager (\\d\\.\\d)\\0\\x02\\x04\\x01\\x02\\x01\\0\\0\\W+(\\w+)\\0\\0\\0$|s p/LANDesk RC/ v/$1/ h/$2/ cpe:/a:landesk:landesk_management_suite:$1/\n# Being Controled w/ User\nmatch landesk-rc m|^TNMP.\\0\\0\\0TNME.\\0\\0\\0USER.\\x08\\x04\\0\\x08\\0.{9}\\0R\\0\\x03\\0W\\0\\xff\\xff\\0.\\0\\xfd..\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\x01\\x04\\0\\0\\0\\0\\0...\\0\\xb5\\x01\\xbb\\0Desktop Manager (\\d\\.\\d)\\0\\x02\\x04\\x01\\x02\\x01\\0\\0\\W+([\\w.:]+)\\W+(\\w+)\\0(\\w+)\\0\\0$|s p/LANDesk RC/ v/$1/ i/User: $4 Controller: $2/ h/$3/ cpe:/a:landesk:landesk_management_suite:$1/\n# Being Controled w/o User\n#match landesk-rc m|^TNMP.\\0\\0\\0TNME.\\0\\0\\0USER.\\x08\\x04\\0\\x08\\0.{9}\\0R\\0\\x03\\0W\\0\\xff\\xff\\0.\\0\\xfd..\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\x01\\x04\\0\\0\\0\\0\\0...\\0\\xb5\\x01\\xbb\\0Desktop Manager (\\d\\.\\d)\\0\\x02\\x04\\x01\\x02\\x01\\0\\0\\W+([\\w.:]+)\\W+(\\w+)\\0(\\w+)\\0{2,3}$|s v/LANDesk RC/$1/Host: $3 Controler: $2/\nmatch landesk-rc m|^TNMP.\\0\\0\\0TNME.\\0\\0\\0USER.\\x08\\x04\\0\\x08\\0.{9}\\0R\\0\\x03\\0W\\0\\xff\\xff\\0.\\0\\xfd..\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\x01\\x04\\0\\0\\0\\0\\0...\\0\\xb5\\x01\\xbb\\0Desktop Manager (\\d\\.\\d)\\0\\x02\\x04\\x01\\x02\\x01\\0\\0\\W+([\\w.:]+)\\W+(\\w+)\\0|s p/LANDesk RC/ v/$1/ i/Controller: $2/ h/$3/ cpe:/a:landesk:landesk_management_suite:$1/\n\nmatch landesk-rc m|^TNMP\\x16\\0\\0\\0TNME\\x80\\0\\xfe\\xff..([\\w.]+):(\\d)$|s p/LANDesk RC/ i/Busy, From $1 on port 176$2/ cpe:/a:landesk:landesk_management_suite/\n\n# Novell Zen Remote Desktop Several 4.0.X submissions\nmatch landesk-rc m|^\\0\\x04\\0| p/Novell Zen Remote Desktop/ v/4.0.X/\n# 6.5.14\nmatch landesk-rc m|^\\0\\x06\\x05| p/Novell Zen Remote Desktop/ v/6.5.X/\n\nmatch landesk-rc m|^TNMP.\\0\\0\\0TNME.\\0\\0\\0USER.\\x07\\x04\\0\\x08\\0.{9}\\0P\\0\\x03\\0U\\0\\xff\\xff\\0.*Desktop Manager ([\\d.]+)\\0|s p/LANDesk RC/ v/$1/ cpe:/a:landesk:landesk_management_suite:$1/\n\nmatch spice m|^REDQ\\x02\\0\\0\\0\\x02\\0\\0\\0[^\\0]| i/SPICE 2.2/\n\n##############################NEXT PROBE##############################\nProbe TCP TerminalServer q|\\x03\\0\\0\\x0b\\x06\\xe0\\0\\0\\0\\0\\0|\nrarity 6\nports 515,1028,1068,1503,1720,1935,2040,3388,3389\n\nmatch activefax m|^ActiveFax Server: Es befinden sich insgesamt| p/ActFax Communication ActiveFax/ i/German/\n\nmatch arcserve-gdd m|^\\0\\0\\x0b\\x06\\xe0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0......\\0\\0\\xa0\\xf9\\x7f\\xee\\xfb\\x7f\\0\\0|s p/Arcserve Unified Data Protection Global Deduplication DataStore/ cpe:/a:arcserve:udp/\n\n# TLS 1.0 alert \"unexpected message\"\nmatch ssl/consul-rpc m|^\\x15\\x03\\x01\\0\\x02\\x02\\n| p/HashiCorp Consul RPC/ cpe:/a:hashicorp:consul/\n# Cisco video conference device port 1720\nmatch H.323/Q.931 m|^\\x03\\0\\0\\x10\\x08\\x02\\x80\\0}\\x08\\x02\\x80\\xe2\\x14\\x01\\0|\n\nmatch lineage-ii m|^\\x03\\0.$| p/Lineage II game server/\n# TODO: Dissect this; probably too specific\nmatch lineage-ii m|^G\\0\\0\\x01\\0\\0\\0\\xce\\x1e\\0\\0\\xce\\x1e\\0\\0\\xce\\x1e\\0\\0/\\x04\\0\\x000\\0,\\x006\\0,\\x003\\x003\\x003\\x002\\0,\\x003\\x003\\x003\\x003\\0\\0\\0\\x81\\x8d\\0\\0\\x81\\x8d\\0\\0\\x91\\x91\\0\\0\\0\\0\\0\\0\\x02\\0\\0\\0| p/L2J Lineage II game server/\n\n# \\x03 is queue status command for LPD service.  Should be terminated\n# by \\n, but apparently some dumb lpds allow \\0.  For now I will keep\n# 515 in the common ports line, I suppose\nmatch printer m|^no entries\\n$| p/Xerox lpd/ d/printer/\nmatch printer m|^SB06D2F0: \\xe5\\x9f\\xf0\\x18\\xe5\\x9f\\xf0\\x18\\xe5\\x9f\\xf0\\x18\\xe5\\x9f\\xf0\\x18\\xe5\\x9f\\xf0\\x18\\xe1\\xa0 no entries\\n$| p/Kyocera Mita KM-1530 lpd/ d/printer/\nmatch printer m|^ActiveFax Server: There are \\d+ entries in the Faxlist\\r\\n| p/ActiveFax lpd/\nmatch printer m|^Host Name: ([-\\w_.]+)\\nPrinter Device: hp LaserJet (\\w+)\\nPrinter Status: ([^\\r\\n]+)\\n\\0\\0| p/NetSarang Xlpd/ i/HP LaserJet $2; Status $3/ o/Windows/ h/$1/ cpe:/o:microsoft:windows/a\nmatch printer m|^Fictive printer queue short information\\n$| p/Canon MF4360-4390 lpd/ d/printer/\nmatch printer m|^414A_Citizen_CLP(\\d+): \\xe5\\x9f\\xf0\\x18\\xe5\\x9f\\xf0\\x18\\xe5\\x9f\\xf0\\x18\\xe5\\x9f\\xf0\\x18\\xe5\\x9f\\xf0\\x18\\xe1\\xa0 no entries\\n$| p/Citizen CLP-$1 lpd/ d/printer/\n\n# Windows 2000 Server\n# Windows 2000 Advanced Server\n# Windows XP Professional\nmatch ms-wbt-server m|^\\x03\\0\\0\\x0b\\x06\\xd0\\0\\0\\x12.\\0$|s p/Microsoft Terminal Service/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ms-wbt-server m|^\\x03\\0\\0\\x17\\x08\\x02\\0\\0Z~\\0\\x0b\\x05\\x05@\\x06\\0\\x08\\x91J\\0\\x02X$| p/Microsoft Terminal Service/ i/Used with Netmeeting, Remote Desktop, Remote Assistance/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ms-wbt-server m|^\\x03\\0\\0\\x11\\x08\\x02..}\\x08\\x03\\0\\0\\xdf\\x14\\x01\\x01$|s p/Microsoft NetMeeting Remote Desktop Service/ o/Windows/ cpe:/a:microsoft:netmeeting/ cpe:/o:microsoft:windows/a\nmatch ms-wbt-server m|^\\x03\\0\\0\\x0b\\x06\\xd0\\0\\0\\x03.\\0$|s p/Microsoft NetMeeting Remote Desktop Service/ o/Windows/ cpe:/a:microsoft:netmeeting/ cpe:/o:microsoft:windows/a\n\n# Need more samples!\nmatch ms-wbt-server m|^\\x03\\0\\0\\x0b\\x06\\xd0\\0\\0\\0\\0\\0| p/xrdp/ cpe:/a:jay_sorg:xrdp/\nmatch ms-wbt-server m|^\\x03\\0\\0\\x0e\\t\\xd0\\0\\0\\0[\\x02\\xa1]\\0\\xc0\\x01\\n$| p/IBM Sametime Meeting Services/ o/Windows/ cpe:/a:ibm:sametime/ cpe:/o:microsoft:windows/a\n\nmatch ms-wbt-server m|^\\x03\\0\\0\\x0b\\x06\\xd0\\0\\x004\\x12\\0| p/VirtualBox VM Remote Desktop Service/ o/Windows/ cpe:/a:oracle:vm_virtualbox/ cpe:/o:microsoft:windows/a\n\nmatch ms-wbt-server-proxy m|^nmproxy: Procotol byte is not 8\\n$| p/nmproxy NetMeeting proxy/\n\n# Semi-open protocol from Adobe: http://www.adobe.com/devnet/rtmp/.\n# Some reverse engineering at http://wiki.gnashdev.org/RTMP says the server\n# handshake is a 0x03 byte followed by 1536 seeming-random bytes. However\n# service scan only gets 900 or 1300 bytes, so just check for as much as\n# possible up to 1536.\nmatch rtmp m|^\\x03.{899,1536}$|s p/Real-Time Messaging Protocol/\n\nmatch sybase-monitor m|^\\0\\x01\\0\\x08\\0\\0\\x01\\0$| p/Sybase Monitor Server/ o/Windows/ cpe:/a:sybase:monitor_server/ cpe:/o:microsoft:windows/a\n\nmatch trillian m|^.\\0\\x01.....\\0([^\\0]+)\\0|s p/Trillian MSN Module/ i/Name $1/ o/Windows/ cpe:/a:trillian:trillian/ cpe:/o:microsoft:windows/a\n\nmatch trustwave m|^control\\n   ping\\n   endping\\nendcontrol\\n| p/Trustwave SIEM OE/ cpe:/a:trustwave:siem_oe/\n\n##############################NEXT PROBE##############################\n# Netware Create Connection Service request\nProbe TCP NCP q|\\x44\\x6d\\x64\\x54\\0\\0\\0\\x17\\0\\0\\0\\x01\\0\\0\\0\\0\\x11\\x11\\0\\xff\\x01\\xff\\x13|\nrarity 6\nports 524,1200,1217,2000,3000-3006,3031,6802\n\nmatch audioworks m|^\\0\\0$| p/AudioWorks sound server/ o/IRIX/ cpe:/o:sgi:irix/a\n\n# port 3888/tcp. Two identical length-prefixed messages. Same response to afp probe.\nmatch jute m|^\\0\\0\\0\\(\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x01\\0\\0\\0\\(\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x01| p/Apache ZooKeeper/ cpe:/a:apache:zookeeper/\n\n# Netware 5 and 6\n# NCP \"OK\" reply\nmatch ncp m|^\\x74\\x4e\\x63\\x50\\0\\0\\0\\x10\\x33\\x33| p/Novell NetWare NCP/ cpe:/o:novell:netware/\nmatch srun m|^X\\0\\0\\0$| p/Caucho Resin JSP Engine srun/ cpe:/a:caucho:resin/\nmatch progress m|^\\0\\0\\0\\x01\\0\\x17\\0\\x14\\0\\x06\\0\\0\\0.\\0\\0\\0\\0\\0\\0|s p/Progress Database/ cpe:/a:progress:database/\n\n# last 4 bytes are LE -88, PI_UNKNOWN_COMMAND\nmatch pigpio m|^DmdT\\0\\0\\0\\x17\\0\\0\\0\\x01\\xa8\\xff\\xff\\xff| p/pigpiod/ cpe:/a:pigpio:pigpiod/\n\n# Apple Remote Events echos a truncated version of the probe back\nmatch appleevents m|^DmdT\\0\\0\\0\\x17\\0\\0\\0\\x01$| p/Apple Remote Events/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\n\nmatch resin-watchdog m|^Q$| p/Caucho Resin Pro Watchdog/ cpe:/a:caucho:resin/\n\nmatch smpp m|^\\0\\0\\0\\(\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\0\\0\\x02\\0\\0.*\\0\\0\\0\\0\\0\\0\\0\\x03\\0\\0\\0\\0\\0\\0\\0\\x03\\0\\0\\0\\x01|s p/Apache Zookeeper smpp/\n\nmatch softplc m|^\\x04\\xef\\xef\\xb3\\0\\0\\0\\x01\\x01\\0\\xc4\\x01\\0\\0\\0\\0| p/CODESYS SoftPLC/ cpe:/a:3s-software:codesys_runtime_system/\n\nmatch tuxedo-wsl m|^\\d+SESSIONDENIED&REASON=Protocol violation\\n$| p/BEA Tuxedo WorkStation Listener/ cpe:/a:bea:tuxedo/\n\nmatch telnet m|^\\xff\\xfd\\x98\\xff\\xfb\\x01\\xff\\xfd\\x18\\xff\\xfd\\x98Welcome to UniData Telnet Server\\r\\nlogin: | p/Rocket UniData RDBMS telnetd/\n\nmatch textui m|^R:ERROR:6 \\\"Syntax Error\\\"\\r\\n| p/Vantage InFusion home automation controller port/\n\n##############################NEXT PROBE##############################\nProbe TCP NotesRPC q|\\x3A\\x00\\x00\\x00\\x2F\\x00\\x00\\x00\\x02\\x00\\x00\\x40\\x02\\x0F\\x00\\x01\\x00\\x3D\\x05\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x2F\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x40\\x1F\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00|\nrarity 6\nports 130,427,1352,1972,7171,8728,22001\n\nmatch intersys-cache m|^O\\0\\0\\0\\x03\\xff\\0\\0\\0\\0\\0\\0\\x03\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0[\\0\\x01]G\\x04\\0\\x0e\\0\\x01\\0\\x0f\\0\\x0e\\0Access Denied$| p/InterSystems Cache database/\nmatch intersys-cache m|^r\\0\\0\\0\\x03\\xff\\0\\0\\0\\0\\0\\0\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0[\\0\\x01]\\x008\\0Cache Direct Server Fatal Error: Invalid subfunc code: 0$| p/InterSystems Cache database/\n\n#match lotusnotes m|^${backquote}\\0\\0\\0U\\0\\0\\0\\x03\\0\\0@\\x02\\x0f\\0\\x05\\x009\\x05.....\\x03\\0\\0\\0\\0\\x02\\0/\\0\\x12|s\n# Lotus Domino (r) Server (Release 5.0.8 for Windows/32\n# Lotus Notes domino 5.0.11\n# Lotus Server 6.0.1\n# Lotus Domino (r) Server (Release 6.0.1CF1 for Windows/32\nmatch lotusnotes m|^.\\0\\0\\0.\\0\\0\\0\\x03\\0\\0@\\x02\\x0f\\0.*\\x03\\0\\0\\0\\0\\x02\\0/\\0.\\0\\0\\0\\0\\0\\0\\0.*CN=([-.\\w ]+)/O=([-.\\w ]+)[^-.\\w ]|s p/Lotus Domino server/ i/CN=$1;Org=$2/ cpe:/a:ibm:lotus_domino_server/\nmatch lotusnotes m|^.\\0\\0\\0.\\0\\0\\0\\x03\\0\\0@\\x02\\x0f\\0.*\\x03\\0\\0\\0\\0\\x02\\0/\\0.\\0\\0\\0\\0\\0\\0\\0.*CN=([-.\\w ]+)/OU=([-.\\w ]+)/O=([-.\\w ]+)[^-.\\w ]|s p/Lotus Domino server/ i/CN=$1;OU=$2;Org=$3/ cpe:/a:ibm:lotus_domino_server/\nmatch lotusnotes m|^.\\0\\0\\0.\\0\\0\\0\\x03\\0\\0@\\x02\\x0f\\0.*\\x03\\0\\0\\0\\0\\x02\\0/\\0.\\0\\0\\0\\0\\0\\0\\0.*CN=([-.\\w ]+)/OU=([-.\\w ]+)/OU=([-.\\w ]+)/O=([-.\\w ]+)|s p/Lotus Domino server/ i|CN=$1;OU=$2/$3;Org=$4| cpe:/a:ibm:lotus_domino_server/\n\nmatch megaraid-monitor m|^\\x02\\0\\0\\0\\0\\0\\0/\\0\\0\\0\\0\\0\\0\\0\\0\\0@\\x1f\\0\\0\\0\\0\\0\\0\\0\\0\\0/\\0\\0\\0\\x02\\0\\0@\\x02\\x0f\\0\\x01\\0=\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\)\\0\\0\\0<monitorcontrol><error/></monitorcontrol>$| p/MegaRaid Monitoring Agent/\n\nmatch routeros-api m|^\\x06!fatal\\rnot logged in\\0| p/MikroTik RouterOS API/ o/RouterOS/ cpe:/o:mikrotik:routeros/\n\n# Interesting service: Not sure if it's RPC\nmatch rpcbind m|^\\x18\\0\\x01\\x02Invalid packet length\\0| p/Amanda voicemail system/ d/telecom-misc/\n# Moved this from SSLSessionReq because it seems more reliable.\n# May need to generalize and grab the language if we see non-\"en\" responses\nmatch srvloc m|^\\x02\\x02\\0\\0\\x12\\0\\0\\0\\0\\0\\0\\0\\0\\x02en\\0\\x02$| p/Apple slpd/ o/Mac OS/ cpe:/o:apple:mac_os/a\nsoftmatch svrloc m|^\\x02\\x02\\0\\0.\\0\\0\\0\\0\\0..\\0.\\w+|s p/SLP Service Agent/\nmatch slp-srvreg m|^\\x02\\x05\\0\\0\\x12\\0\\0\\0\\0\\0\\0@\\0\\x02en\\xff\\xef| p/AIX SLP Directory Agent/ o/AIX/ cpe:/o:ibm:aix/a\nsoftmatch slp-srvreg m|^\\x02\\x05\\0\\0.\\0\\0\\0\\0\\0..\\0.\\w+|s p/SLP Directory Agent/\n\nsoftmatch slmp m|^\\xd4\\0MP\\x04\\0\\0\\0TNM\\x0b\\0P\\0\\0\\0.......|s p/Mitsubishi PLC SLMP/ d/specialized/\n\nmatch thrift-binary m|^\\x04\\0\\0\\0\\x11Invalid status 58$| p/Hadoop Hive 2/ cpe:/a:apache:hive/\nmatch tibia m|^V\\0\\x02\\0Your terminal version is too old\\.\\nPlease get a new version at\\nhttp://www\\.tibia\\.com\\.\\0$| p/Tibia graphical MUD/\n\nmatch xplorer m|Access violation at address \\w+ in module 'Xplorer\\.exe'\\. Read of address| p/SoftOne Business Xplorer/ o/Windows/ cpe:/o:microsoft:windows/a\n\nmatch pc-anywhere m|\\x1bY2\\0\\x01\\x03B\\0\\0\\x01\\0\\x14....................\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Symantec pcAnywhere/ cpe:/a:symantec:pcanywhere/\n\n##############################NEXT PROBE##############################\nProbe TCP DistCCD q|DIST00000001ARGC00000005ARGV00000002ccARGV00000002-cARGV00000006nmap.cARGV00000002-oARGV00000006nmap.oDOTI00000000|\nrarity 8\nports 3632\n\nmatch distccd m|^DONE00000001STAT00000000SERR00000000SOUT00000000DOTO.*?GCC: ([^\\0]+)| p/distccd/ v/v1/ i/$1/\nmatch distccd m|^DONE00000001STAT00000100SERR000000\\w+/tmp/distccd_.*:\\d+: internal compiler error: Segmentation fault| p/distccd/ i/broken/\nmatch distccd m|^DONE00000001.*?DOTO00| p/distccd/ v/v1/ i/unknown compiler/\nmatch distccd m|^DONE00000001.*ccache: failed to create /usr/share/distcc/\\.ccache \\(Permission denied\\)\\n| p/distccd/ i/broken/\nmatch distccd m|^DONE00000001.*CRITICAL! distcc seems to have invoked itself recursively!\\n|s p/distccd/ i/broken/\nmatch distccd m|^[\\w._-]+DONE[\\w._-]+ .*ERROR: attempt to use unknown compiler aborted: ([\\w._-]+)\\n|s p/distccd/ i/broken: compiler $1 doesn't exist/\n\n##############################NEXT PROBE##############################\n# Java Remote Method Invocation, version 2, stream protocol\n# https://docs.oracle.com/javase/9/docs/specs/rmi/protocol.html\nProbe TCP JavaRMI q|\\x4a\\x52\\x4d\\x49\\0\\x02\\x4b|\nrarity 7\nports 706,999,1030,1035,1090,1098,1099,1100-1103,1129,1199,1234,1440,1981,2199,2809,3273,3333,3900,5520,5521,5580,5999,6060,6789,6996,7700,7800,7801,7878,7890,8050,8051,8085,8091,8205,8303,8642,8686,8701,8888-8890,8901-8903,8999,9001,9003-9005,9050,9090,9099,9300,9500,9711,9809,9810-9815,9875,9910,9991,9999,10001,10098,10099,10162,10990,11001,11099,11333,12000,13013,14000,15000,15001,15200,16000,17200,18980,20000,23791,26256,31099,32913,33000,37718,45230,47001,47002,50050,50500-50504\n\n# 0x4e = ProtocolAck. 0x4f = ProtocolNotSupported.\n# 4th byte begins client host ID, which is usually IP address\nmatch java-rmi m|^\\x4e..[0-9a-f:.]+\\0\\0..$|s p/Java RMI/\n# GNU Classpath does reverse-lookup of hostname\nmatch java-rmi m|^\\x4e..[\\w._-]+\\0\\0..$|s p/GNU Classpath grmiregistry/\n\n# https://github.com/quine/GoProGTFO\nmatch gopro-json m|^\\{\"rval\": -7, \"param_size\": 0 \\}\\0| p/GoPro or similar camera json service/ d/webcam/\n\n##############################NEXT PROBE##############################\nProbe TCP Radmin q|\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x08\\x08|\nports 4899,9001\nrarity 8\n\nmatch fcgiwrap m|^\\x01\\x0b\\0\\0\\0\\x08\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/fcgiwrap/\n\nmatch radmin m|^\\x01\\x00\\x00\\x00\\x25\\x09\\x00\\x01\\x10\\x08\\x01\\x00\\x09\\x08| p/Famatech Radmin/ v/2.X/ i/Windows Authentication/ o/Windows/ cpe:/a:famatech:radmin:2/ cpe:/o:microsoft:windows/a\nmatch radmin m|^\\x01\\x00\\x00\\x00\\x25\\x0a\\x00\\x01\\x10\\x08\\x01\\x00\\x0a\\x08| p/Famatech Radmin/ v/2.X/ i/Radmin Authentication/ o/Windows/ cpe:/a:famatech:radmin:2/ cpe:/o:microsoft:windows/a\nmatch radmin m|^\\x01\\x00\\x00\\x00\\x25\\x00\\x00\\x02\\x12\\x08\\x02\\x00\\x00\\x0a| p/Famatech Radmin/ v/3.X/ i/Radmin Authentication/ o/Windows/ cpe:/a:famatech:radmin:3/ cpe:/o:microsoft:windows/a\nmatch radmin m|^\\x01\\x00\\x00\\x00\\x25\\x71\\x00\\x02\\x12\\x08\\x02\\x00\\x71\\x0a| p/Famatech Radmin/ v/3.X/ i/Windows Authentication/ o/Windows/ cpe:/a:famatech:radmin:3/ cpe:/o:microsoft:windows/a\nmatch radmin m|^\\x01\\x00\\x00\\x00\\x25\\x08\\x00\\x02\\x12\\x08\\x02\\x00\\x08\\x0a| p/Famatech Radmin/ v/3.X/ i/Radmin Authentication/ o/Windows/ cpe:/a:famatech:radmin:3/ cpe:/o:microsoft:windows/a\nmatch radmin m|^\\x01\\x00\\x00\\x00\\x25\\x79\\x00\\x02\\x12\\x08\\x02\\x00\\x79\\x0a| p/Famatech Radmin/ v/3.X/ i/Windows Authentication/ o/Windows/ cpe:/a:famatech:radmin:3/ cpe:/o:microsoft:windows/a\nmatch radmin m|^\\x01\\x00\\x00\\x00\\x25\\x59\\x00\\x02\\x12\\x08\\x02\\x00\\x59\\x0a| p/Famatech Radmin/ v/3.3/ o/Windows/ cpe:/a:famatech:radmin:3.3/ cpe:/o:microsoft:windows/a\nmatch radmin m|^\\x01\\x00\\x00\\x00\\x25\\x04\\x00\\x02\\x12\\x08\\x02\\x00\\x04\\x0a| p/Famatech Radmin/ v/3.0/ o/Windows/ cpe:/a:famatech:radmin:3.0/ cpe:/o:microsoft:windows/a\nmatch radmin m|^\\x01\\x00\\x00\\x00\\x09\\x00\\x00\\x10\\x4f\\x2f\\x10\\x00\\x00\\x04\\x00\\x00\\x00\\x1c| p/Famatech Radmin/ v/3.X/ i/Source IP blocked/ o/Windows/ cpe:/a:famatech:radmin:3/ cpe:/o:microsoft:windows/a\n\nsoftmatch radmin m|^\\x01\\x00\\x00\\x00\\x25.\\x00..\\x08.\\x00..|s p/Famatech Radmin/ o/Windows/ cpe:/a:famatech:radmin/ cpe:/o:microsoft:windows/a\n\nmatch srcds m|^\\n\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/srcds game server/\n\n##############################NEXT PROBE##############################\nProbe UDP Sqlping q|\\x02|\nrarity 6\nports 1434,19131-19133\nmatch ms-sql-m m|^\\x05..ServerName;([\\w\\-]+);InstanceName;[\\w\\-]+;IsClustered;\\w{2,3};Version;([\\d\\.]+);np;.+;tcp;(\\d{1,5});| p/Microsoft SQL Server/ v/$2/ i/ServerName: $1; TCPPort: $3/ o/Windows/ cpe:/a:microsoft:sql_server:$2/ cpe:/o:microsoft:windows/a\nmatch ms-sql-m m|^\\x05..ServerName;([\\w\\-]+);InstanceName;[\\w\\-]+;IsClustered;\\w{2,3};Version;([\\d\\.]+);tcp;(\\d{1,5});np;.+;$| p/Microsoft SQL Server/ v/$2/ i/ServerName: $1; TCPPort: $3/ o/Windows/ cpe:/a:microsoft:sql_server:$2/ cpe:/o:microsoft:windows/a\nmatch ms-sql-m m|^\\x05..ServerName;([\\w\\-]+);InstanceName;[\\w\\-]+;IsClustered;\\w{2,3};Version;([\\d\\.]+);tcp;(\\d{1,5});;| p/Microsoft SQL Server/ v/$2/ i/ServerName: $1; TCPPort: $3/ o/Windows/ cpe:/a:microsoft:sql_server:$2/ cpe:/o:microsoft:windows/a\nmatch ms-sql-m m|^\\x05..ServerName;([\\w\\-]+);InstanceName;[\\w\\-]+;IsClustered;\\w{2,3};Version;([\\d\\.]+);;| p/Microsoft SQL Server/ v/$2/ i/ServerName: $1/ o/Windows/ cpe:/a:microsoft:sql_server:$2/ cpe:/o:microsoft:windows/a\n\n# http://wiki.vg/Pocket_Minecraft_Protocol#ID_UNCONNECTED_PING_OPEN_CONNECTIONS_.280x1C.29\nmatch minecraft-pe m|^\\x1c................\\0\\xff\\xff\\0\\xfe\\xfe\\xfe\\xfe\\xfd\\xfd\\xfd\\xfd\\x12\\x34\\x56\\x78..MCCPP;Demo;([^;]+)|s p/Minecraft Pocket Edition server/ v/pre-0.11/ i/Server Name: $P(1)/ cpe:/a:mojang:minecraft_pocket_edition/\n# Server Name field supports colors as \\xc2\\xa7N where N is a color code (0=black, 2=green, etc)\nmatch minecraft-pe m|^\\x1c................\\0\\xff\\xff\\0\\xfe\\xfe\\xfe\\xfe\\xfd\\xfd\\xfd\\xfd\\x12\\x34\\x56\\x78..MCPE;([^;]+);\\d+;([^;]+);(\\d+);(\\d+)|s p/Minecraft Pocket Edition server/ v/$2/ i|Server Name: $P(1); $3/$4 players| cpe:/a:mojang:minecraft_pocket_edition:$2/\nmatch minecraft-pe m|^\\x1c................\\0\\xff\\xff\\0\\xfe\\xfe\\xfe\\xfe\\xfd\\xfd\\xfd\\xfd\\x12\\x34\\x56\\x78..MCPE;;\\d+;([^;]+);(\\d+);(\\d+)|s p/Minecraft Pocket Edition server/ v/$1/ i|$2/$3 players| cpe:/a:mojang:minecraft_pocket_edition:$1/\n\nsoftmatch minecraft-pe m|^\\x1c................\\0\\xff\\xff\\0\\xfe\\xfe\\xfe\\xfe\\xfd\\xfd\\xfd\\xfd\\x12\\x34\\x56\\x78| p/Minecraft Pocket Edition server/\n\n##############################NEXT PROBE##############################\nProbe UDP NTPRequest q|\\xe3\\x00\\x04\\xfa\\x00\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xc5\\x4f\\x23\\x4b\\x71\\xb1\\x52\\xf3|\nrarity 5\nports 123,5353,9100\n\nmatch ca-mq m|^\\xfa\\xfe\\0\\x10\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0$| p/CA Message Queuing Server/ cpe:/a:ca:messaging/\n\nmatch echo m|^\\xe3\\x00\\x04\\xfa\\x00\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xc5\\x4f\\x23\\x4b\\x71\\xb1\\x52\\xf3$|\n\nmatch ntp m|^[\\x24\\x64\\xa4]\\x01..............................................$|s p/NTP/ v/v4/ i/primary server/\nmatch ntp m|^[\\x24\\x64\\xa4][\\x02-\\x0f]..............................................$|s p/NTP/ v/v4/ i/secondary server/\n# Don't think this is valid, but we can uncomment if we get a submission:\n#match ntp m|^[\\x24\\x64\\xa4]\\x10..............................................$|s p/NTP/ v/v4/ i/unsynchronized/\nmatch ntp m|^\\xe4[\\0\\x10]..............................................$|s p/NTP/ v/v4/ i/unsynchronized/\nmatch ntp m|^\\xe4[\\x01]..............................................$|s p/NTP/ v/v4/ i/primary server; unsynchronized/\nmatch ntp m|^\\xe4[\\x01-\\x0f]..............................................$|s p/NTP/ v/v4/ i/secondary server; unsynchronized/\n\nmatch ntp m|^\\x1c[\\x01-\\x0f]..............................................$|s p/NTP/ v/v3/\n# This is just unsynchronized NTP v3\nmatch ntp m|^\\xdc[\\x00-\\x0f]..............................................$|s p/Microsoft NTP/ o/Windows/ cpe:/o:microsoft:windows/a\nmatch ntp m|^\\x5c\\x03..............................................$|s p/Microsoft Windows Server 2003 NTP/ v/v3/ o/Windows 2003/ cpe:/o:microsoft:windows_server_2003/a\n\n# Solaris Internet Name Server (42/udp), see ien116.txt\nmatch nameserver m|^help\\r\\n\\r\\n\\0\\0\\0\\0\\x20CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\0\\0!\\0\\x01| p/Solaris Internet Name Server/ i/IEN 116/ o/Solaris/ cpe:/o:sun:sunos/a\n\nmatch mdns m|^\\0\\0\\x84\\0\\0\\0\\0\\x05\\0\\0\\0\\0.Lexmark ([\\x20-\\x7f]+)\\x0c_host-config\\x04_udp\\x05local\\0|s p/Lexmark $1 printer mdns/ d/printer/ cpe:/h:lexmark:$1/a\nmatch hbn3 m|^\\0\\0\\x84\\0\\0\\0\\0\\x05\\0\\0\\0\\0\\x15S300-S400 Series \\(32\\).+ET(\\w{2})(\\w{2})(\\w{2})(\\w{2})(\\w{2})(\\w{2})| p/Lexmark S300-S400 series HBN3/ i/MAC: $1:$2:$3:$4:$5:$6/ d/printer/\nmatch hbn3 m|^\\0\\0\\x84\\0\\0\\0\\0\\x05\\0\\0\\0\\0\\x15S300-S400 Series.+ET(\\w{2})(\\w{2})(\\w{2})(\\w{2})(\\w{2})(\\w{2})| p/Lexmark S300-S400 Series HBN3/ i/MAC: $1:$2:$3:$4:$5:$6/ d/printer/\n\nsoftmatch mdns m|^\\0\\0\\x84\\0\\0\\0\\0\\x05\\0\\0\\0\\0|\n\nmatch sip m|^SIP/2\\.0 200 OK\\r\\n(?:[^\\r\\n]+\\r\\n)*?Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, UPDATE, OPTIONS, MESSAGE, NOTIFY, INFO, REFER\\r\\n(?:[^\\r\\n]+\\r\\n)*?User-Agent: SightSpeedClient v\\. ([\\w._-]+)\\r\\n|s p/SightSpeedClient sipd/ v/$1/ i/AVM FRITZ!Box Fon WAP/\n\n# These first two probes only serve to determine the NTP version\n# Nessus uses.  The third will match even a newer one, but just show\n# the NTP as 1.0.  So we give the highest rarity to these first two\n# probes so they will usually only be used for port 1241.  But the\n# third is left with a lower rarity to catch Nessus running on\n# non-default ports.\n#\n# These probes have a high likelihood of triggering false positives because\n# any service that echos your command back can match.  The docs on the\n# the protocol make me think a ^ anchor can be added to the response so\n# this should cut down on the the false positives. (Brandon)\n#\n# See ntp_white_paper_11.txt for more information on the Nessus protocol\n#\n##############################NEXT PROBE##############################\nProbe TCP NessusTPv12 q|< NTP/1.2 >\\n|\nrarity 9\nports 1241\nsslports 1241\nmatch nessus m|^< NTP/1.2 >\\n| p/Nessus Daemon/ i/NTP v1.2/ cpe:/a:tenable:nessus/\n\n##############################NEXT PROBE##############################\nProbe TCP NessusTPv11 q|< NTP/1.1 >\\n|\nrarity 9\nports 1241\nsslports 1241\nmatch nessus m|^< NTP/1.1 >\\n| p/Nessus Daemon/ i/NTP v1.1/ cpe:/a:tenable:nessus/\n\n##############################NEXT PROBE##############################\nProbe TCP NessusTPv10 q|< NTP/1.0 >\\n|\nrarity 8\nports 1241\nsslports 1241\n\nmatch http-proxy m|^HTTP/1\\.0 400 Bad Request\\r\\nServer: squid/([\\w._+-]+)\\r\\n| p/Squid/ v/$1/ cpe:/a:squid-cache:squid:$1/\n\nmatch nessus m|^< NTP/1.0 >\\n| p/Nessus Daemon/ i/NTP v1.0/ cpe:/a:tenable:nessus/\nmatch zabbix m|^NOT OK\\n$| p/Zabbix Monitoring System/ cpe:/a:zabbix:zabbix/\n\n\n##############################NEXT PROBE##############################\nProbe UDP SNMPv1public q|0\\x82\\0/\\x02\\x01\\0\\x04\\x06public\\xa0\\x82\\0\\x20\\x02\\x04\\x4c\\x33\\xa7\\x56\\x02\\x01\\0\\x02\\x01\\0\\x30\\x82\\0\\x10\\x30\\x82\\0\\x0c\\x06\\x08\\x2b\\x06\\x01\\x02\\x01\\x01\\x05\\0\\x05\\0|\nrarity 4\nports 161\n\nmatch bittorrent-udp-tracker m|^\\x03\\0\\0\\0lic\\xa0Connection ID missmatch\\.\\0| p/opentracker UDP tracker/ cpe:/a:dirk_engling:opentracker/\nmatch snmp m|^0.*\\x02\\x01\\0\\x04\\x06public\\xa2.*\\x06\\x08\\+\\x06\\x01\\x02\\x01\\x01\\x05\\0\\x04[^\\0]([^\\0]+)|s p/SNMPv1 server/ i/public/ h/$1/\n\nmatch snmp m|^0.*\\x02\\x01\\0\\x04\\x06public\\xa2|s p/SNMPv1 server/ i/public/\n\nmatch echo m|^0\\x82\\0/\\x02\\x01\\0\\x04\\x06public\\xa0\\x82\\0\\x20\\x02\\x04\\x4c\\x33\\xa7\\x56\\x02\\x01\\0\\x02\\x01\\0\\x30\\x82\\0\\x10\\x30\\x82\\0\\x0c\\x06\\x08\\x2b\\x06\\x01\\x02\\x01\\x01\\x05\\0\\x05\\0$|\n\n##############################NEXT PROBE##############################\nProbe UDP SNMPv3GetRequest q|\\x30\\x3a\\x02\\x01\\x03\\x30\\x0f\\x02\\x02\\x4a\\x69\\x02\\x03\\0\\xff\\xe3\\x04\\x01\\x04\\x02\\x01\\x03\\x04\\x10\\x30\\x0e\\x04\\0\\x02\\x01\\0\\x02\\x01\\0\\x04\\0\\x04\\0\\x04\\0\\x30\\x12\\x04\\0\\x04\\0\\xa0\\x0c\\x02\\x02\\x37\\xf0\\x02\\x01\\0\\x02\\x01\\0\\x30\\0|\nrarity 4\nports 161\n\nmatch echo m|^\\x30\\x3a\\x02\\x01\\x03\\x30\\x0f\\x02\\x02\\x4a\\x69\\x02\\x03\\0\\xff\\xe3\\x04\\x01\\x04\\x02\\x01\\x03\\x04\\x10\\x30\\x0e\\x04\\0\\x02\\x01\\0\\x02\\x01\\0\\x04\\0\\x04\\0\\x04\\0\\x30\\x12\\x04\\0\\x04\\0\\xa0\\x0c\\x02\\x02\\x37\\xf0\\x02\\x01\\0\\x02\\x01\\0\\x30\\0$|\n# H.225 bandwidthReject\nmatch H.323-gatekeeper-discovery m|^8\\x02\\x01\\x10\\0$| p/GNU Gatekeeper discovery/ cpe:/a:gnugk:gnu_gatekeeper/\n\n# Enterprise numbers as used in SNMP engine IDs are here:\n# http://www.iana.org/assignments/enterprise-numbers\n\n# Reserved - SNMP Engine ID 0 \\x00\\x00\n# Netgear GS748TS V5.0.0.23\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x00\\x00|s\n\n# Cisco - SNMP Engine ID 9 (CiscoSystems) = \\x00\\x09\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x00\\x09|s p/Cisco SNMP service/\n\n# Cisco - SNMP Engine ID 99 (SNMP Research) = \\x00\\x63\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x00\\x63|s p/Cisco SNMP service/\n\n# Xerox - SNMP Engine ID 253 (Xerox) = \\x00\\xfd\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x00\\xfd|s p/Xerox SNMP service/\n\n# Scientific Atlanta - SNMP Engine ID 1429 = \\x05\\x95\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x05\\x95|s p/Scientific Atlanta SNMP service/\n\n# Brocade - SNMP Engine ID 1588 (Brocade Communications Systems, Inc.) = \\x06\\x34\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x06\\x34|s p/Brocade SNMP service/\n\n# QLogic - SNMP Engine ID 1663 (Ancor Communications) = \\x06\\x7f\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x06\\x7f|s p/QLogic SNMP service/\n\n# IBM - SNMP Engine ID 1104 (First Virtual Holdins Incorporated) = \\x04\\x50\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x04\\x50|s p/IBM SNMP service/\n\n# Huawei - SNMP Engine ID 2011 (HUAWEI Technology Co.,Ltd) = \\x07\\xdb\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x07\\xdb|s p/Huawei SNMP service/\n\n# Lexmark - SNMP Engine ID 2021 (Engine Enterprise ID: U.C. Davis, ECE Dept. Tom) = \\x07\\xe5\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x07\\xe5|s p/Lexmark SNMP service/\n\n# Thomson Inc. - SNMP Engine ID 2863 (Thomson Inc.) = \\x0b\\x2f\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x0b\\x2f|s p/Thomson SNMP service/\n\n# Blue Coat - SNMP Engine ID 3417 (CacheFlow Inc.) = \\x0d\\x59\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x0d\\x59|s p/Blue Coat SNMP service/\n\n# Canon - SNMP Engine ID 4976 (Agent++) = \\x13\\x70\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x13\\x70|s p/Canon SNMP service/\n\n# net-snmp (net-snmp.org) - SNMP Engine ID 8072 (net-snmp) = \\x1f\\x88\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x1f\\x88|s p/net-snmp/ cpe:/a:net-snmp:net-snmp/\n\n# Fortigate-310B v4.0,build0324,110520 (MR2 Patch 7)\n# Fortinet, Inc. - SNMP Engine ID 12356 = \\x30\\x44\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\x80\\0\\x30\\x44|s p/Fortinet SNMP service/ d/firewall/\n\n# Aruba Networks - SNMP Engine ID 14823 = \\x39\\xe7\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x39\\xe7|s p/Aruba Networks SNMP service/\n\n# OpenBSD Project - SNMP Engine ID 30155 = \\x75\\xcb\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\0\\x75\\xcb|s p/OpenBSD SNMP service/\n\n# Wireshark says <MISSING> for the SNMP Engine ID.\nmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04.{5,6}\\x01\\0\\x02\\x03|s p/MikroTik router SNMP service/ d/router/\n\n# Tandberg Video Conferencing equipment\nmatch snmp m|^0\\x82\\0\\x37\\x02\\x01\\0\\x04\\x06public\\xa2\\x82\\0\\x28\\x02.{41,43}\\nSoftW:\\x20([^\\0\\n]+)\\nMCU:\\x20([^\\0\\n]+)\\n|s p/$2/ i/$1/\n\n# Zebra GX430T label printer\nmatch snmp m|^0\\x82\\0\\x37\\x02\\x01\\0\\x04\\x06public\\xa2\\x82\\0\\x28.{20}\\x2b\\x06\\x01\\x02\\x01\\x01\\x05\\0\\x04\\nZBR_SPICE0|s p/Zebra GX430T label printer SNMP service/ d/printer/ cpe:/h:zebra:gx430t/\n\n# P-660HW-D1 from Zyxel\nmatch snmp m|^0\\x82\\0\\x3a\\x02\\x01\\0\\x04\\x06public\\xa2\\x82\\0\\x2b.{20}\\x06\\x08\\x2b\\x06\\x01\\x02\\x01\\x01\\x05\\0\\x04\\x0bcfr25657985|s p/ZyXEL Prestige 660HW ADSL router/ d/broadband router/ cpe:/h:zyxel:prestige_660hw/\n\n#Generic SNMPv3 matchline\nsoftmatch snmp m|^..\\x02\\x01\\x030.\\x02\\x02Ji\\x02.{3,4}\\x04\\x01.\\x02\\x01\\x03\\x04|s p/SNMPv3 server/\n\n##############################NEXT PROBE##############################\nProbe TCP WMSRequest q|\\x01\\0\\0\\xfd\\xce\\xfa\\x0b\\xb0\\xa0\\0\\0\\0MMS\\x14\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x12\\0\\0\\0\\x01\\0\\x03\\0\\xf0\\xf0\\xf0\\xf0\\x0b\\0\\x04\\0\\x1c\\0\\x03\\0N\\0S\\0P\\0l\\0a\\0y\\0e\\0r\\0/\\09\\0.\\00\\0.\\00\\0.\\02\\09\\08\\00\\0;\\0 \\0{\\00\\00\\00\\00\\0A\\0A\\00\\00\\0-\\00\\0A\\00\\00\\0-\\00\\00\\0a\\00\\0-\\0A\\0A\\00\\0A\\0-\\00\\00\\00\\00\\0A\\00\\0A\\0A\\00\\0A\\0A\\00\\0}\\0\\0\\0\\xe0\\x6d\\xdf\\x5f|\nrarity 6\nports 1549,1755,5001,9090\n\nmatch afp m|^\\x01\\x03\\0N........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\tMacintosh\\x05\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06AFP2\\.2\\x05\\tDHCAST128.*\\x04([\\w.]+)\\x01.afpserver|s p/Apple AFP/ i/name: $1; protocol 3.3; Mac OS X 10.5/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\nmatch afp m|^\\x01\\x03\\0N........\\0\\0\\0\\0........\\x8f\\xfb.([^\\0\\x01]+)[\\0\\x01].*\\nMacmini3,1\\x04\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x05\\tDHCAST128.*\\x04([\\w.]+)\\x01oafpserver|s p/Apple AFP/ i/name: $1; protocol 3.3; Mac OS X 10.6; Mac mini/ o/Mac OS X/ h/$2/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\n# Flags \\x9f\\xfb.\nmatch afp m|^\\x01\\x03\\0\\x4e........\\0\\0\\0\\0........\\x9f\\xfb.([^\\0\\x01]+)[\\0\\x01].*MacBookAir\\d+,\\d+\\x05\\x06AFP3\\.4\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06\\tDHCAST128\\x04DHX2\\x06Recon1\\rClient Krb v2\\x03GSS\\x0fNo User Authent.*\\x1b\\$not_defined_in_RFC4178@please_ignore$|s p/Apple AFP/ i/name: $1; protocol 3.4; Mac OS X 10.6; MacBook Air/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\nmatch afp m|^\\x01\\x03\\0\\x4e........\\0\\0\\0\\0........\\x9f\\xfb.([^\\0\\x01]+)[\\0\\x01].*MacBookPro\\d+,\\d+\\x05\\x06AFP3\\.4\\x06AFP3\\.3\\x06AFP3\\.2\\x06AFP3\\.1\\x06AFPX03\\x06\\tDHCAST128\\x04DHX2\\x06Recon1\\rClient Krb v2\\x03GSS\\x0fNo User Authent.*\\x1b\\$not_defined_in_RFC4178@please_ignore$|s p/Apple AFP/ i/name: $1; protocol 3.4; Mac OS X 10.6; MacBook Pro/ o/Mac OS X/ cpe:/a:apple:afp_server/a cpe:/o:apple:mac_os_x/a\n\nmatch dec-notes m|^\\x08\\0\\0\\0\\x01\\0\\x02\\x04\\0\\0\\0\\0$| p/DEC Notes/ o/VMS/\n\n# http://www.corepointhealth.com/resource-center/hl7-resources/mlp-minimum-layer-protocol\nmatch hl7-mlp m|^\\x0b\\x1c\\r| p/HL7 Minimum Layer Protocol/\n\nmatch jsonrpc m|^{\\n   \\\"error\\\" : {\\n      \\\"code\\\" : -32700,\\n      \\\"message\\\" : \\\"Parse error\\.\\\"\\n   },\\n   \\\"id\\\" : 0,\\n   \\\"jsonrpc\\\" : \\\"([\\w._-]+)\\\"\\n}\\n| p/XBMC JSON-RPC/ v/$1/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/\nmatch jsonrpc m|^{\\\"error\\\":{\\\"code\\\":-32700,\\\"message\\\":\\\"Parse error\\.\\\"},\\\"id\\\":null,\\\"jsonrpc\\\":\\\"([\\w._-]+)\\\"}| p/XBMC JSON-RPC/ v/$1/ d/media device/ o/Linux/ cpe:/o:linux:linux_kernel/\n\nmatch shivahose m|^\\x02\\x06$| i/Shiva network modem access/\nmatch slingbox m|^\\x01\\x01\\0\\xfd\\xce\\xfa\\x0b\\xb0\\xa0\\0\\0\\0\\x0f\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x12$| p/Slingbox streaming video/\nsoftmatch slmp m|^\\xd4\\0MP\\x04\\0\\0\\0TNM\\x0b\\0P\\0\\0\\0.......|s p/Mitsubishi PLC SLMP/ d/specialized/\n\n# Also www.getmangos.com: Mangos Realms Server.\nmatch warcraft m|^\\0\\0\\x09$| p/World of Warcraft game server/\n\n#WMS 4.1.0.3927\nmatch wms m|^\\x01\\0\\0.\\xce\\xfa\\x0b\\xb0.\\0\\0\\0MMS .\\0{7}.{9}\\0\\0\\0\\x01\\0\\x04\\0\\0\\0\\0\\0\\xf0\\xf0\\xf0\\xf0\\x0b\\0\\x04\\0\\x1c\\0\\x03\\0\\0\\0\\0\\0\\0\\0\\xf0\\?\\x01\\0\\0\\0\\x01\\0\\0\\0\\0\\x80\\0\\0...\\0.\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0.\\0\\0\\x00(\\d)\\0\\.\\x00(\\d)\\0\\.\\x00(\\d)\\0\\.\\x00(\\d)\\x00(\\d)\\x00(\\d)\\x00(\\d)\\0\\0\\0|s p/Microsoft Windows Media Services/ v/$1.$2.$3.$4$5$6$7/ o/Windows/ cpe:/a:microsoft:windows_media_services:$1.$2.$3.$4$5$6$7/a cpe:/o:microsoft:windows/a\nmatch wms m|^\\x01\\0\\0.\\xce\\xfa\\x0b\\xb0.\\0\\0\\0MMS .\\0{7}.{9}\\0\\0\\0\\x01\\0\\x04\\0\\0\\0\\0\\0\\xf0\\xf0\\xf0\\xf0\\x0b\\0\\x04\\0\\x1c\\0\\x03\\0\\0\\0\\0\\0\\0\\0\\xf0\\?\\x01\\0\\0\\0\\x01\\0\\0\\0\\0\\x80\\0\\0...\\0.\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0.\\0\\0\\x00(\\d)\\0\\.\\x00(\\d)\\x00(\\d)\\0\\.\\x00(\\d)\\x00(\\d)\\0\\.\\x00(\\d)\\x00(\\d)\\x00(\\d)\\x00(\\d)\\0\\0\\0|s p/Microsoft Windows Media Services/ v/$1.$2$3.$4$5.$6$7$8$9/ o/Windows/ cpe:/a:microsoft:windows_media_services:$1.$2$3.$4$5.$6$7$8$9/a cpe:/o:microsoft:windows/a\n\n##############################NEXT PROBE##############################\nProbe TCP oracle-tns q|\\0Z\\0\\0\\x01\\0\\0\\0\\x016\\x01,\\0\\0\\x08\\0\\x7F\\xFF\\x7F\\x08\\0\\0\\0\\x01\\0 \\0:\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\04\\xE6\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0(CONNECT_DATA=(COMMAND=version))|\nrarity 7\nports 1035,1521,1522,1525,1526,1574,1748,1754,14238,20000\n\nmatch http m|^HTTP/1\\.0 400 Bad Request\\r\\nDate: .*\\r\\nServer: Boa/([\\w._-]+)\\r\\nConnection: close\\r\\nContent-Type: text/html\\r\\n\\r\\n<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD>\\n<BODY><H1>400 Bad Request</H1>\\nYour client has issued a malformed or illegal request\\.\\n</BODY></HTML>\\n$| p/Boa httpd/ v/$1/ i/Prolink ADSL router/ d/broadband router/ cpe:/a:boa:boa:$1/\n\nmatch iscsi m|^\\x3f\\x80\\x04\\0\\0\\0\\x00\\x30\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff\\xff\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\xf7\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0Z\\0\\0\\x01\\0\\0\\0\\x016\\x01\\x2c\\0\\0\\x08\\0\\x7f\\xff\\x7f\\x08\\0\\0\\0\\x01\\0\\x20\\0\\x3a\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x004\\xe6\\0\\0$| p/iSCSI/\nmatch iscsi m|^\\x3f\\x80\\x04\\0\\0\\0\\x00\\x30\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff\\xff\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x00\\x00\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0Z\\0\\0\\x01\\0\\0\\0\\x016\\x01\\x2c\\0\\0\\x08\\0\\x7f\\xff\\x7f\\x08\\0\\0\\0\\x01\\0\\x20\\0\\x3a\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x004\\xe6\\0\\0$| p/HP StorageWorks D2D backup system iSCSI/ d/storage-misc/\n\nmatch palm-hotsync m|^\\x01.\\0\\0\\0\\x14\\x11\\x01\\0\\0\\0\\0\\0\\0\\0\\x20\\0\\0\\0\\x06\\x01\\0..\\0\\0$|s p/Palm Pilot HotSync/\n\nmatch oracle-tns m|^\\0.\\0\\0[\\x02\\x04]\\0\\0\\0.*TNSLSNR for ([-.+/ \\w]{2,24}): Version ([-\\d.]+) - Production|s p/Oracle TNS Listener/ v/$2/ i/for $1/\nmatch dbsnmp m|^\\0.\\0\\0\\x02\\0\\0\\0.*\\(IAGENT = \\(AGENT_VERSION = ([\\d.]+)\\)\\(RPC_VERSION = ([\\d.]+)\\)\\)|s p/Oracle Intelligent Agent/ v/$1/ i/RPC v$2/\nmatch oracle m|^\\0\\x20\\0\\0\\x02\\0\\0\\0\\x016\\0\\0\\x08\\0\\x7f\\xff\\x01\\0\\0\\0\\0\\x20|s p/Oracle Database/ cpe:/a:oracle:database_server/\nmatch oracle m|^\\+\\0\\0\\0$| p/Oracle Database/ cpe:/a:oracle:database_server/\nmatch oracle-tns m|^..\\0\\0\\x04\\0\\0\\0\\\"\\0..\\(DESCRIPTION=\\(TMP=\\)\\(VSNNUM=\\d+\\)\\(ERR=1189\\)\\(ERROR_STACK=\\(ERROR=\\(CODE=1189\\)\\(EMFI=4\\)\\)| p/Oracle TNS Listener/ i/unauthorized/\nmatch oracle-tns m|^..\\0\\0\\x04\\0\\0\\0\\\"\\0..\\(DESCRIPTION=\\(TMP=\\)\\(VSNNUM=\\d+\\)\\(ERR=1194\\)\\(ERROR_STACK=\\(ERROR=\\(CODE=1194\\)\\(EMFI=4\\)\\)\\)\\)| p/Oracle TNS Listener/ i/insecure transport/\nmatch oracle-tns m|^..\\0\\0\\x04\\0\\0\\0\\\"\\0..\\(DESCRIPTION=\\(ERR=12504\\)\\)\\0| p/Oracle TNS listener/ i/requires service name/\nsoftmatch oracle-tns m|^\\0.\\0\\0[\\x02\\x04]\\0\\0\\0.*\\([ABD-Z]|s p/Oracle TNS Listener/\nmatch dbsnmp m|^\\0,\\0\\0\\x04\\0\\0\\0\\\"\\0\\0 \\(CONNECT_DATA=\\(COMMAND=version\\)\\)| p/Oracle DBSNMP/\n\nmatch hp-radia m|^\\xff\\xff$| p/HP Radia configuration server/\n\nmatch winbox m|^.\\x01\\0.M2\\x01\\0\\xff\\x88\\0\\0\\x02\\0\\xff\\x88[\\x01\\x02]\\0|s p/MikroTik WinBox/ cpe:/a:mikrotik:winbox/\n\n# TrinityCore\nmatch wow m|^\\0\\0\\t.{32}\\x01..{32}| p/World of Warcraft authserver/\n\n##############################NEXT PROBE##############################\nProbe UDP xdmcp q|\\0\\x01\\0\\x02\\0\\x01\\0|\nrarity 6\nports 177\nmatch bacnet m|^\\x81\\n\\0\\t\\x01\\0${backquote}\\x01\\t$| p/BACnet building automation/\nmatch xdmcp m|^\\0\\x01\\0\\x05..\\0\\0\\0.(.+)\\0.(.+)|s p/XDMCP/ i/willing; status: $2/ o/Unix/ h/$1/\nmatch xdmcp m|^\\0\\x01\\0\\x06..\\0.(.+)\\0.(.+)|s p/XDMCP/ i/unwilling; status: $2/ o/Unix/ h/$1/\nmatch tftp m|^\\0\\x05\\0\\x04Illegal TFTP operation\\0| p/Windows 2003 Server Deployment Service/ o/Windows/ cpe:/o:microsoft:windows_server_2003/a\nmatch tftp m|^\\0\\x05\\0\\x01File not found\\.\\0$| p/Enistic zone controller tftpd/\nmatch tftp m|^\\0\\x05\\0\\x02No such file or directory\\0| p/Windows 10 IoT tftpd/ o/Windows 10/ cpe:/o:microsoft:windows_10/a\n\nsoftmatch coap m|^${backquote}E|\n\n##############################NEXT PROBE##############################\n# AFS version probing\nProbe UDP AFSVersionRequest q|\\0\\0\\x03\\xe7\\0\\0\\0\\0\\0\\0\\0\\x65\\0\\0\\0\\0\\0\\0\\0\\0\\x0d\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|\nrarity 5\nports 7001,1719\n# OpenAFS\nmatch afs m|^[\\d\\D]{28}\\s*OpenAFS\\s+([\\d\\.]+)\\s+([^\\0]+)\\0| p/OpenAFS/ v/$1/ i/$2/ cpe:/a:openafs:openafs:$1/\nmatch afs m|^[\\d\\D]{28}\\s*OpenAFS\\s+stable\\s+([\\d\\.]+)\\s+([^\\0]+)\\0| p/OpenAFS/ v/$1/ i/$2 stable/ cpe:/a:openafs:openafs:$1/\nmatch afs m|^[\\d\\D]{28}\\s*OpenAFS([\\d\\.]{3}[^\\s\\0]*)\\s+([^\\0]+)\\0| p/OpenAFS/ v/$1/ i/$2/ cpe:/a:openafs:openafs:$1/\nmatch afs m|^[\\d\\D]{28}\\s*OpenAFS([\\d\\.]{3}[^\\s\\0]*)\\0| p/OpenAFS/ v/$1/ cpe:/a:openafs:openafs:$1/\n# Transarc AFS\nmatch afs m|^[\\d\\D]{28}\\s*Base\\sconfiguration\\safs([\\d\\.]+)\\s+[^\\s\\0\\;]+[\\0\\;]| p/Transarc AFS/ v/$1/\n# Arla\nmatch afs m|^[\\d\\D]{28}\\s*arla-([\\d\\.]+)\\0| p/Arla/ v/$1/\n\n# OpenSSL 0.9.8g: openssl s_server -dtls1\n# Alert (21), DTLS 1.0 (0xfeff)\nmatch dtls m|^\\x15\\xfe\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x07\\x02\\x16\\0\\0\\0\\0\\0$| p/OpenSSL DTLS 1.0/ cpe:/a:openssl:openssl/\n\nmatch H.323-gatekeeper-discovery m|^\\x04\\x80\\x03\\xe7\\0\\x08\\0D\\0E\\0U\\0G\\0K\\0......$|s p/GNU Gatekeeper discovery/ cpe:/a:gnugk:gnu_gatekeeper/\nmatch H.323-gatekeeper-discovery m|^\\x04\\x80\\x03\\xe7\\0\\x10\\0D\\0E\\0U\\0C\\0O\\0S\\0R\\0V\\x003\\0\\n\\x08\\x01\\x03\\x06\\xb7$| p/GNU Gatekeeper discovery/ v/2.3.2/ cpe:/a:gnugk:gnu_gatekeeper:2.3.2/\nmatch H.323-gatekeeper-discovery m|^\\x06\\x80\\x03\\xe7\\x06\\0\\x08\\x91J\\0\\x05\\x12\\0G\\0A\\0T\\0E\\0K\\0E\\0E\\0P\\0E\\0R\\0......| p/Cisco Unified Communications Manager Gatekeeper RAS service/ cpe:/a:cisco:unified_communications_manager/\n\n### do not slow down the scan\n\nProbe TCP mydoom q|\\x0d\\x0d|\nrarity 9\nports 706,3127-3198\nmatch mydoom m|\\x04\\x5b\\0\\0\\0\\0\\0\\0| p/MyDoom virus backdoor/ v/v012604/\n\nmatch silc m|^\\0\\x13\\0\\x01\\r\\0\\x08\\0\\x01S\\x96Rz\\xc2\\x02\\0\\xff\\0.............4$|s p/SILCd conferencing service/\n\nProbe TCP WWWOFFLEctrlstat q|WWWOFFLE STATUS\\r\\n|\nrarity 9\nports 706,8081\nmatch http-proxy-ctrl m|^WWWOFFLE Server Status\\n-*\\nVersion *: (\\d.*)\\n| p/WWWOFFLE proxy control/ v/$1/\nmatch http-proxy-ctrl m|^WWWOFFLE Incorrect Password\\n| p/WWWOFFLE proxy control/ i/Unauthorized/\n\nmatch silc m|^\\0\\x13\\0\\x01\\r\\0\\x08\\0\\x01S\\x96Rz\\xc2\\x02\\0\\xff\\0.............4$|s p/SILCd conferencing service/\n\n##########################################################################################################\n# Cross Match Verifier E TCP/IP fingerprint reader (http://www.crossmatch.com/products_singlescan_vE.html)\n# The device runs an embedded Linux\n#\nProbe TCP Verifier q|Subscribe\\n|\nrarity 8\nports 1500\ntotalwaitms 11000\nmatch crossmatchverifier m=^(?:Idle|Notify)\\r\\n$= p/Cross Match Verifier E fingerprint control/\nmatch secure-socket m|^\\0$| p/CA Secure Socket Adapter/\n\nProbe TCP VerifierAdvanced q|Query\\n|\nrarity 8\nports 1501\nmatch crossmatchverifier m|^Settings\\r\\nGain\\x20(\\d+)\\r\\nContrast\\x20(\\d+)\\r\\nTime\\x20(\\d+)\\r\\nIllumination\\x20(\\d+)\\r\\nProcessed\\r\\n$| p/Cross Match Verifier E fingerprint advanced control/ i/Gain: $1; Contrast: $2; Time: $3; Illumination: $4/\n\n\n\n\n############ SOCKS PROBES ############\n\n# These are some simple probes that query a SOCKS server as specified in the\n# following RFCs/documents:\n#\n# SOCKS4.Protocol - SOCKS Protocol Version 4\n# RFC 1928 - SOCKS Protocol Version 5\n# RFC 1929 - Username/Password Authentication for SOCKS V5\n# RFC 1961 - GSS-API Authentication Method for SOCKS Version 5\n\n\n# The following probe is designed to check the status of a SOCKS5 implementation.\n#\n# It attempts to create a TCP connection to google.com:80 assuming the SOCKS server\n# allows unauthenticated connections. The probe also tells the SOCKS server\n# that we support all major types of authentication so we can determine which\n# authentication method the server requires.\n#\n# We don't try to establish TCP port bindings on the SOCKS server and we don't\n# try UDP connections though these could easily be added to new probes.\n\nProbe TCP Socks5 q|\\x05\\x04\\x00\\x01\\x02\\x80\\x05\\x01\\x00\\x03\\x0agoogle.com\\x00\\x50GET / HTTP/1.0\\r\\n\\r\\n|\nrarity 8\nports 199,1080,1090,1095,1100,1105,1109,3128,6588,6660-6669,7777,8000,8008,8010,8080,8088,9481\n\nmatch caldav m|^HTTP/1\\.1 503 Service Unavailable\\r\\nServer: DavMail Gateway ([\\w._-]+)\\r\\nDAV: 1, calendar-access, calendar-schedule, calendarserver-private-events, addressbook\\r\\n(?:[^\\r\\n]+\\r\\n)*?Content-Length: 83\\r\\n\\r\\nInvalid header: google\\.com\\0PGET / HTTP/1\\.0, HTTPS connection to an HTTP listener \\? |s p/DavMail CalDAV http gateway/ v/$1/ d/proxy server/\n\n# http://freenetproject.org/fcp.html\nmatch fcp m|^ProtocolError\\nFatal=true\\nCodeDescription=ClientHello must be first message\\nCode=1\\nEndMessage\\n$| p/Freenet Client Protocol 2.0/\n\nmatch http m|^HTTP/1\\.1 400 ERROR\\r\\nConnection: keep-alive\\r\\nContent-Length: 17\\r\\nContent-Type: text/html\\r\\n\\r\\n\\r\\ninvalid requestHTTP/1\\.1 400 ERROR\\r\\nConnection: keep-alive\\r\\nContent-Length: 17\\r\\nContent-Type: text/html\\r\\n\\r\\n\\r\\ninvalid request| p/uTorrent http admin/ v/3.0/ cpe:/a:utorrent:utorrent:3.0/\nmatch http m|^HTTP/1\\.0 500 Unexpected new line: \\x05\\x04\\0\\x01\\x02\\x3f\\x05\\x01\\0\\x03\\[CRLF\\]\\.\\r\\nContent-Type: text/html\\r\\nContent-Length: 763\\r\\nConnection: Close\\r\\n\\r\\n<html>\\r\\n    <head>\\r\\n        <meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\" />\\r\\n        <title>Unexpected new line: \\x05\\x04\\0\\x01\\x02\\?\\x05\\x01\\0\\x03\\[CRLF\\]\\.</title>\\r\\n    </head>\\r\\n    <body>\\r\\n        <h1>500 - Unexpected new line: \\x05\\x04\\0\\x01\\x02\\?\\x05\\x01\\0\\x03\\[CRLF\\]\\.</h1>\\r\\n        <pre>System\\.InvalidOperationException: Unexpected new line: \\x05\\x04\\0\\x01\\x02\\?\\x05\\x01\\0\\x03\\[CRLF\\]\\.\\n  at fp\\.bb \\(Char A_0\\) \\[0x00000\\] in <filename unknown>:0 \\n  at ha\\.d \\(\\) \\[0x00000\\] in <filename unknown>:0 \\n  at ha\\.b \\(System\\.Byte\\[\\] A_0, Int32 A_1, Int32 A_2\\) \\[0x00000\\] in <filename unknown>:0 \\n| p/McMyAdmin Minecraft game admin console/ v/2.2.14/\nmatch http m|^HTTP/1\\.0 500 Unexpected new line: \\x05\\x04\\0\\x01\\x02\\xef\\xbf\\xbd\\x05\\x01\\0\\x03\\[CRLF\\]\\.\\r\\nContent-Type: text/html\\r\\nContent-Length: 769\\r\\nConnection: Close\\r\\n\\r\\n<html>\\r\\n    <head>\\r\\n        <meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\" />\\r\\n        <title>Unexpected new line: \\x05\\x04\\0\\x01\\x02\\xef\\xbf\\xbd\\x05\\x01\\0\\x03\\[CRLF\\]\\.</title>\\r\\n    </head>\\r\\n    <body>\\r\\n        <h1>500 - Unexpected new line: \\x05\\x04\\0\\x01\\x02\\xef\\xbf\\xbd\\x05\\x01\\0\\x03\\[CRLF\\]\\.</h1>\\r\\n        <pre>System\\.InvalidOperationException: Unexpected new line: \\x05\\x04\\0\\x01\\x02\\xef\\xbf\\xbd\\x05\\x01\\0\\x03\\[CRLF\\]\\.\\n  at fp\\.ba \\(Char A_0\\) \\[0x00000\\] in <filename unknown>:0 \\n| p/McMyAdmin Minecraft game admin console/ v/2.2.14/\nmatch http m|^HTTP/1\\.0 500 Unexpected new line: \\x05\\x04\\0\\x01\\x02\\xef\\xbf\\xbd\\x05\\x01\\0\\x03\\[CRLF\\]\\.\\r\\nContent-Type: text/html\\r\\nContent-Length: 769\\r\\nConnection: Close\\r\\n\\r\\n<html>\\r\\n    <head>\\r\\n        <meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html; charset=utf-8\\\" />\\r\\n        <title>Unexpected new line: \\x05\\x04\\0\\x01\\x02\\xef\\xbf\\xbd\\x05\\x01\\0\\x03\\[CRLF\\]\\.</title>\\r\\n    </head>\\r\\n    <body>\\r\\n        <h1>500 - Unexpected new line: \\x05\\x04\\0\\x01\\x02\\xef\\xbf\\xbd\\x05\\x01\\0\\x03\\[CRLF\\]\\.</h1>\\r\\n        <pre>System\\.InvalidOperationException: Unexpected new line: \\x05\\x04\\0\\x01\\x02\\xef\\xbf\\xbd\\x05\\x01\\0\\x03\\[CRLF\\]\\.\\n  at f8\\.be \\(Char A_0\\) \\[0x00000\\] in <filename unknown>:0 \\n| p/McMyAdmin Minecraft game admin console/\nmatch http m|^HTTP/1\\.1 400 Page not found\\r\\nServer: IPCamera-Web\\r\\nDate: .* \\d\\d\\d\\d\\r\\nPragma: no-cache\\r\\nCache-Control: no-cache\\r\\nContent-Type: text/html\\r\\n\\r\\n<html><head><title>Document Error: Page not found</title></head>\\r\\n\\t\\t<body><h2>Access Error: Page not found</h2>\\r\\n\\t\\t<p>Bad request type</p></body></html>\\r\\n\\r\\n| p/Tenvis IP camera admin httpd/ d/webcam/\nmatch http m|^\\x05\\x04\\0\\x01\\x02\\x80\\x05\\x01\\0\\x03\\ngoogle\\.com\\0PGET / HTTP/1\\.0\\r\\n\\r\\n\\0HTTP/1\\.0 500 Internal Server Error\\r\\nContent-Length: 0\\r\\n\\r\\n| p/DeviceWISE Enterprise M2M httpd/ cpe:/a:telit:devicewise_m2m/\n\nmatch http-proxy m|^<!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2\\.0//EN\\\">\\n<HTML><HEAD><TITLE>Error</TITLE></HEAD>\\n<BODY><h2>400 Can not find method and URI in request</h2>\\r\\nWhen trying to load <a href=\\\"smartcache://url-parse-error\\\">smartcache://url-parse-error</a>\\.\\n<hr noshade size=1>\\r\\nGenerated by smart\\.cache \\(<a href=\\\"http://scache\\.sourceforge\\.net/\\\">Smart Cache ([\\w._-]+)</a>\\)\\r\\n</BODY></HTML>\\r\\n$| p/Smart Cache http-proxy/ v/$1/\n\nmatch socks5 m|^\\x05\\0\\x05\\0\\0\\x01.{6}HTTP|s i/No authentication required; connection ok/\nmatch socks5 m|^\\x05\\0\\x05\\x01| i/No authentication; general failure/\nmatch socks5 m|^\\x05\\0\\x05\\x02| i/No authentication; connection not allowed by ruleset/\nmatch socks5 m|^\\x05\\0\\x05\\x03| i/No authentication; network unreachable/\nmatch socks5 m|^\\x05\\0\\x05\\x04| i/No authentication; host unreachable/\nmatch socks5 m|^\\x05\\0\\x05\\x05| i/No authentication; connection refused by destination host/\nmatch socks5 m|^\\x05\\0\\x05\\x06| i/No authentication; TTL expired/\nmatch socks5 m|^\\x05\\0\\x05\\x07| i|No authentication; command not supported/protocol error|\nmatch socks5 m|^\\x05\\0\\x05\\x08| i/No authentication; address type not supported/\n\nmatch socks5 m|^\\x05\\x01| i/GSSAPI authentication required/\nmatch socks5 m|^\\x05\\x02| i|Username/password authentication required|\n\nmatch socks5 m|^\\x05\\xFF$| i/No acceptable authentication method/\n\n# When server doesn't buffer our probe properly. Seen on XMPP socks servers like Apple iChat, PyMSN, jabberd\nmatch socks5 m|^\\x05\\0$| i/No authentication; connection failed/\n\nsoftmatch socks5 m|^\\x05|\n\n# The following probe is designed to check the status of a SOCKS4 implementation.\n#\n# It attempts to create a TCP connection to 127.0.0.1:22. We supply a username root\n# in the user id string field. We don't try to establish TCP port bindings on\n# the SOCKS server though this could easily be added to a new probe.\n\nProbe TCP Socks4 q|\\x04\\x01\\x00\\x16\\x7f\\x00\\x00\\x01root\\x00|\nrarity 8\nports 199,1080,1090,1095,1100,1105,1109,3128,6588,6660-6669,8000,8008,8080,8088\n\nmatch socks4 m|^\\0\\x5a| i/Connection ok/\nmatch socks4 m|^\\0\\x5b| i/Connection rejected or failed; connections possibly ok/\nmatch socks4 m|^\\0\\x5c| i/Connection failed; ident required/\nmatch socks4 m|^\\0\\x5d| i/Connection failed; username required/\n\nmatch shell m|^\\0Access is denied\\n$| p/Windows Services for Unix rsh/ o/Windows/ cpe:/a:microsoft:windows_services_for_unix/ cpe:/o:microsoft:windows/a\n\n\n##############################NEXT PROBE##############################\nProbe TCP OfficeScan q|GET /?CAVIT HTTP/1.1\\r\\n\\r\\n|\nrarity 9\nports 12345\nfallback GetRequest\nmatch http m|^HTTP/1.0 \\d\\d\\d .*\\r\\nServer: OfficeScan Client| p/Trend Micro OfficeScan Antivirus http config/\n\n\n\n##############################NEXT PROBE##############################\nProbe TCP ms-sql-s q|\\x12\\x01\\x00\\x34\\x00\\x00\\x00\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x0c\\x03\\x00\\x28\\x00\\x04\\xff\\x08\\x00\\x01\\x55\\x00\\x00\\x00\\x4d\\x53\\x53\\x51\\x4c\\x53\\x65\\x72\\x76\\x65\\x72\\x00\\x48\\x0f\\x00\\x00|\nrarity 7\nports 1433\n\nmatch iscsi m|^\\?\\x80\\x04\\0\\0\\0\\x000\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff\\xff\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x12\\x01\\x004\\0\\0\\0\\0\\0\\0\\x15\\0\\x06\\x01\\0\\x1b\\0\\x01\\x02\\0\\x1c\\0\\x0c\\x03\\0\\(\\0\\x04\\xff\\x08\\0\\x01U\\0\\0\\0MSSQLServer\\0$| p/iSCSI Target/ d/phone/ o/iOS/ cpe:/o:apple:iphone_os/\n\n# Specific minor version lines. Check bytes 30–33:\n# \\x0a \\x32 \\x06\\x40 → 10.50.1600\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x00\\xc2| p/Microsoft SQL Server 2000/ v/8.00.194; RTM/ o/Windows/ cpe:/a:microsoft:sql_server:2000:gold/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x01\\x37| p/Microsoft SQL Server 2000/ v/8.00.311; RTMa/ o/Windows/ cpe:/a:microsoft:sql_server:2000/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x01\\x7e| p/Microsoft SQL Server 2000/ v/8.00.384; SP1/ o/Windows/ cpe:/a:microsoft:sql_server:2000:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x01\\x80| p/Microsoft SQL Server 2000/ v/8.00.384; SP1/ o/Windows/ cpe:/a:microsoft:sql_server:2000:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x02\\x14| p/Microsoft SQL Server 2000/ v/8.00.532; SP2/ o/Windows/ cpe:/a:microsoft:sql_server:2000:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x02\\x16| p/Microsoft SQL Server 2000/ v/8.00.534; SP2/ o/Windows/ cpe:/a:microsoft:sql_server:2000:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x02\\xf8| p/Microsoft SQL Server 2000/ v/8.00.760; SP3/ o/Windows/ cpe:/a:microsoft:sql_server:2000:sp3/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x02\\xfe| p/Microsoft SQL Server 2000/ v/8.00.766; SP3a/ o/Windows/ cpe:/a:microsoft:sql_server:2000:sp3a/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x03\\x32| p/Microsoft SQL Server 2000/ v/8.00.818; SP3+ MS03-031/ o/Windows/ cpe:/a:microsoft:sql_server:2000:sp3/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x07\\xf7| p/Microsoft SQL Server 2000/ v/8.00.2039; SP4/ o/Windows/ cpe:/a:microsoft:sql_server:2000:sp4/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x08\\x02| p/Microsoft SQL Server 2000/ v/8.00.2050; SP4+ MS08-040/ o/Windows/ cpe:/a:microsoft:sql_server:2000:sp4/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x08\\x00\\x08\\x07| p/Microsoft SQL Server 2000/ v/8.00.2055; SP4+ MS09-004/ o/Windows/ cpe:/a:microsoft:sql_server:2000:sp4/ cpe:/o:microsoft:windows/\n\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x05\\x77| p/Microsoft SQL Server 2005/ v/9.00.1399; RTM/ o/Windows/ cpe:/a:microsoft:sql_server:2005:gold/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x05\\x7e| p/Microsoft SQL Server 2005/ v/9.00.1406/ o/Windows/ cpe:/a:microsoft:sql_server:2005/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x07\\xff| p/Microsoft SQL Server 2005/ v/9.00.2047; SP1/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x08\\x7a| p/Microsoft SQL Server 2005/ v/9.00.2170; SP1+/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x0b\\xe2| p/Microsoft SQL Server 2005/ v/9.00.3042; SP2/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x0b\\xee| p/Microsoft SQL Server 2005/ v/9.00.3054; SP2+/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x0b\\xfc| p/Microsoft SQL Server 2005/ v/9.00.3068; SP2+ MS08-040/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x0c\\x01| p/Microsoft SQL Server 2005/ v/9.00.3073; SP2+ MS08-052/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x0c\\x05| p/Microsoft SQL Server 2005/ v/9.00.3077; SP2+ MS09-004/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x0c\\x08| p/Microsoft SQL Server 2005/ v/9.00.3080; SP2+ MS09-062/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x0f\\xc3| p/Microsoft SQL Server 2005/ v/9.00.4035; SP3/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp3/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x0f\\xd5| p/Microsoft SQL Server 2005/ v/9.00.4053; SP3+ MS09-062/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp3/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x10\\x73| p/Microsoft SQL Server 2005/ v/9.00.4211; SP3+/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp3/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x13\\x88| p/Microsoft SQL Server 2005/ v/9.00.5000; SP4/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp4/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x13\\xcd| p/Microsoft SQL Server 2005/ v/9.00.5069; SP4+ MS12-070/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp4/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00\\x14\\xcc| p/Microsoft SQL Server 2005/ v/9.00.5324; SP4+ MS12-070 cumulative/ o/Windows/ cpe:/a:microsoft:sql_server:2005:sp4/ cpe:/o:microsoft:windows/\n# Generic match for SQL Server 2005\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x09\\x00(..)|s p/Microsoft SQL Server 2005/ v/9.00.$I(1,\">\")/ o/Windows/ cpe:/a:microsoft:sql_server:2005/ cpe:/o:microsoft:windows/\n\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x04\\x33| p/Microsoft SQL Server 2008/ v/10.00.1075; CTP/ o/Windows/ cpe:/a:microsoft:sql_server:2008/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x06\\x40| p/Microsoft SQL Server 2008/ v/10.00.1600; RTM/ o/Windows/ cpe:/a:microsoft:sql_server:2008:gold/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x06\\xfb| p/Microsoft SQL Server 2008/ v/10.00.1787; Cumulative Update 3/ o/Windows/ cpe:/a:microsoft:sql_server:2008/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x09\\xe3| p/Microsoft SQL Server 2008/ v/10.00.2531; SP1/ o/Windows/ cpe:/a:microsoft:sql_server:2008:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x0a\\xba| p/Microsoft SQL Server 2008/ v/10.00.2746; SP1+ Cumulative Update 5/ o/Windows/ cpe:/a:microsoft:sql_server:2008:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x0f\\xa0| p/Microsoft SQL Server 2008/ v/10.00.4000; SP2/ o/Windows/ cpe:/a:microsoft:sql_server:2008:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x0f\\xe0| p/Microsoft SQL Server 2008/ v/10.00.4064; SP2+ MS11-049/ o/Windows/ cpe:/a:microsoft:sql_server:2008/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x15\\x7c| p/Microsoft SQL Server 2008/ v/10.00.5500; SP3/ o/Windows/ cpe:/a:microsoft:sql_server:2008:sp3/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x15\\x88| p/Microsoft SQL Server 2008/ v/10.00.5512; SP3+ MS12-070/ o/Windows/ cpe:/a:microsoft:sql_server:2008:sp3/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x15\\xa2| p/Microsoft SQL Server 2008/ v/10.00.5538; SP3+ MS15-058/ o/Windows/ cpe:/a:microsoft:sql_server:2008:sp3/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x17\\x70| p/Microsoft SQL Server 2008/ v/10.00.6000; SP4/ o/Windows/ cpe:/a:microsoft:sql_server:2008:sp4/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00\\x18\\x61| p/Microsoft SQL Server 2008/ v/10.00.6241; SP4+ MS15-058/ o/Windows/ cpe:/a:microsoft:sql_server:2008:sp4/ cpe:/o:microsoft:windows/\n# Generic match for SQL Server 2008\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x00(..)|s p/Microsoft SQL Server 2008/ v/10.00.$I(1,\">\")/ o/Windows/ cpe:/a:microsoft:sql_server:2008/ cpe:/o:microsoft:windows/\n\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x32\\x06\\x40| p/Microsoft SQL Server 2008 R2/ v/10.50.1600; RTM/ o/Windows/ cpe:/a:microsoft:sql_server:2008_r2:gold/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x32\\x06\\x51| p/Microsoft SQL Server 2008 R2/ v/10.50.1617; RTM+ MS11-049/ o/Windows/ cpe:/a:microsoft:sql_server:2008_r2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x32\\x09\\xc4| p/Microsoft SQL Server 2008 R2/ v/10.50.2500; SP1/ o/Windows/ cpe:/a:microsoft:sql_server:2008_r2:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x32\\x09\\xf6| p/Microsoft SQL Server 2008 R2/ v/10.50.2550; SP1+ MS12-070/ o/Windows/ cpe:/a:microsoft:sql_server:2008_r2:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x32\\x0f\\xa0| p/Microsoft SQL Server 2008 R2/ v/10.50.4000; SP2/ o/Windows/ cpe:/a:microsoft:sql_server:2008_r2:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x32\\x10\\xb4| p/Microsoft SQL Server 2008 R2/ v/10.50.4276; SP2+ Cumulative Update 5/ o/Windows/ cpe:/a:microsoft:sql_server:2008_r2:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x32\\x17\\x70| p/Microsoft SQL Server 2008 R2/ v/10.50.6000; SP3/ o/Windows/ cpe:/a:microsoft:sql_server:2008_r2:sp3/ cpe:/o:microsoft:windows/\n# Generic match for SQL Server 2008 R2\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0a\\x32(..)|s p/Microsoft SQL Server 2008 R2/ v/10.50.$I(1,\">\")/ o/Windows/ cpe:/a:microsoft:sql_server:2008_r2/ cpe:/o:microsoft:windows/\n\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0b\\x00\\x08\\x34| p/Microsoft SQL Server 2012/ v/11.00.2100; RTM/ o/Windows/ cpe:/a:microsoft:sql_server:2012:gold/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0b\\x00\\x0b\\xb8| p/Microsoft SQL Server 2012/ v/11.00.3000; SP1/ o/Windows/ cpe:/a:microsoft:sql_server:2012:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0b\\x00\\x0c\\x38| p/Microsoft SQL Server 2012/ v/11.00.3128; SP1+/ o/Windows/ cpe:/a:microsoft:sql_server:2012:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0b\\x00\\x13\\xc2| p/Microsoft SQL Server 2012/ v/11.00.5058; SP2/ o/Windows/ cpe:/a:microsoft:sql_server:2012:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0b\\x00\\x17\\x84| p/Microsoft SQL Server 2012/ v/11.00.6020; SP3/ o/Windows/ cpe:/a:microsoft:sql_server:2012:sp3/ cpe:/o:microsoft:windows/\n# Generic match for SQL Server 2012\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0b\\x00(..)| p/Microsoft SQL Server 2012/ v/11.00.$I(1,\">\")/ o/Windows/ cpe:/a:microsoft:sql_server:2012/ cpe:/o:microsoft:windows/\n\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0c\\x00\\x07\\xd0| p/Microsoft SQL Server 2014/ v/12.00.2000/ o/Windows/ cpe:/a:microsoft:sql_server:2014/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0c\\x00\\x10\\x04| p/Microsoft SQL Server 2014/ v/12.00.4100; SP1/ o/Windows/ cpe:/a:microsoft:sql_server:2014:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0c\\x00\\x10\\x75| p/Microsoft SQL Server 2014/ v/12.00.4213; SP1+ MS15-058/ o/Windows/ cpe:/a:microsoft:sql_server:2014:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0c\\x00\\x13\\x88| p/Microsoft SQL Server 2014/ v/12.00.5000; SP2/ o/Windows/ cpe:/a:microsoft:sql_server:2014:sp2/ cpe:/o:microsoft:windows/\n# Generic match for SQL Server 2014\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0c\\x00(..)|s p/Microsoft SQL Server 2014/ v/12.00.$I(1,\">\")/ o/Windows/ cpe:/a:microsoft:sql_server:2014/ cpe:/o:microsoft:windows/\n\n# Generic match for SQL Server 2016\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0d\\x00\\x06\\x41| p/Microsoft SQL Server 2016/ v/13.00.1601/ o/Windows/ cpe:/a:microsoft:sql_server:2016/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0d\\x00\\x0f\\xa1| p/Microsoft SQL Server 2016/ v/13.00.4001; SP1/ o/Windows/ cpe:/a:microsoft:sql_server:2016:sp1/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0d\\x00\\x13\\xa2| p/Microsoft SQL Server 2016/ v/13.00.5026; SP2/ o/Windows/ cpe:/a:microsoft:sql_server:2016:sp2/ cpe:/o:microsoft:windows/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0d\\x00(..)| p/Microsoft SQL Server 2016/ v/13.00.$I(1,\">\")/ o/Windows/ cpe:/a:microsoft:sql_server:2016/ cpe:/o:microsoft:windows/\n\n# No longer Windows-only\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0e\\x00\\x03\\xe8|s p/Microsoft SQL Server 2017/ v/14.00.1000/ cpe:/a:microsoft:sql_server:2017/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0e\\x00\\x0c\\xb9|s p/Microsoft SQL Server 2017/ v/14.00.3257; CU18/ cpe:/a:microsoft:sql_server:2017:cu18/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0e\\x00(..)|s p/Microsoft SQL Server 2017/ v/14.00.$I(1,\">\")/ cpe:/a:microsoft:sql_server:2017/\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01\\x00\\x00\\x00\\x15\\x00\\x06\\x01\\x00\\x1b\\x00\\x01\\x02\\x00\\x1c\\x00\\x01\\x03\\x00\\x1d\\x00\\x00\\xff\\x0f\\x00(..)|s p/Microsoft SQL Server 2019/ v/15.00.$I(1,\">\")/ cpe:/a:microsoft:sql_server:2019/\n\n\nsoftmatch ms-sql-s m|^\\x04\\x01\\x00\\x25\\x00\\x00\\x01| p/Microsoft SQL Server/ o/Windows/ cpe:/a:microsoft:sql_server/ cpe:/o:microsoft:windows/\n\nmatch ms-sql-s m|^\\x04\\x01\\x00\\x2b\\x00\\x00\\x00\\x00\\x00\\x00\\x1a\\x00\\x06\\x01\\x00\\x20\\x00\\x01\\x02\\x00\\x21\\x00\\x01\\x03\\x00\\x22\\x00\\x00\\x04\\x00\\x22\\x00\\x01\\xff\\x08\\x00\\x02\\x10\\x00\\x00\\x02\\x00\\x00| p/Dionaea honeypot MS-SQL server/\n\n\n##############################NEXT PROBE##############################\n# ActiveMQ's STOMP (Streaming Text Orientated Messaging Protocol)\nProbe TCP HELP4STOMP q|HELP\\n\\n\\0|\nrarity 8\nports 6163,61613\n#### Match versions based on line numbers in error messages.\n# git clone https://github.com/apache/activemq.git\n# cd activemq/activemq-stomp/src/main/java/org/apache/activemq/transport/stomp/\n# git tag -l | while read tag; do git checkout $tag -- ProtocolConverter.java; echo $tag:$(grep -n \"Unknown STOMP action\" ProtocolConverter.java) >> lines.txt; done\n\nmatch stomp m|^ERROR\\ncontent-type:text/plain\\nmessage:Unknown STOMP action: HELP\\n\\norg\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolException: Unknown STOMP action: HELP\\r\\n\\tat org\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolConverter\\.onStompCommand\\(ProtocolConverter\\.java:270\\)|s p/Apache ActiveMQ/ v/5.6.0 - 5.7.0 or 5.15.5 - 5.15.9/ cpe:/a:apache:activemq:5/\nmatch stomp m|^ERROR\\ncontent-type:text/plain\\nmessage:Unknown STOMP action: HELP\\n\\norg\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolException: Unknown STOMP action: HELP\\r\\n\\tat org\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolConverter\\.onStompCommand\\(ProtocolConverter\\.java:254\\)|s p/Apache ActiveMQ/ v/5.8.0/ cpe:/a:apache:activemq:5.8.0/\nmatch stomp m|^ERROR\\ncontent-type:text/plain\\nmessage:Unknown STOMP action: HELP\\n\\norg\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolException: Unknown STOMP action: HELP\\r\\n\\tat org\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolConverter\\.onStompCommand\\(ProtocolConverter\\.java:241\\)|s p/Apache ActiveMQ/ v/5.9.0 - 5.9.1/ cpe:/a:apache:activemq:5.9/\nmatch stomp m|^ERROR\\ncontent-type:text/plain\\nmessage:Unknown STOMP action: HELP\\n\\norg\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolException: Unknown STOMP action: HELP\\r\\n\\tat org\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolConverter\\.onStompCommand\\(ProtocolConverter\\.java:267\\)|s p/Apache ActiveMQ/ v/5.10.0/ cpe:/a:apache:activemq:5.10.0/\nmatch stomp m|^ERROR\\ncontent-type:text/plain\\nmessage:Unknown STOMP action: HELP\\n\\norg\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolException: Unknown STOMP action: HELP\\r\\n\\tat org\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolConverter\\.onStompCommand\\(ProtocolConverter\\.java:266\\)|s p/Apache ActiveMQ/ v/5.10.1 - 5.11.1/ cpe:/a:apache:activemq:5/\nmatch stomp m|^ERROR\\ncontent-type:text/plain\\nmessage:Unknown STOMP action: HELP\\n\\norg\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolException: Unknown STOMP action: HELP\\r\\n\\tat org\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolConverter\\.onStompCommand\\(ProtocolConverter\\.java:268\\)|s p/Apache ActiveMQ/ v/5.11.2 - 5.11.4/ cpe:/a:apache:activemq:5.11/\nmatch stomp m|^ERROR\\ncontent-type:text/plain\\nmessage:Unknown STOMP action: HELP\\n\\norg\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolException: Unknown STOMP action: HELP\\r\\n\\tat org\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolConverter\\.onStompCommand\\(ProtocolConverter\\.java:269\\)|s p/Apache ActiveMQ/ v/5.12.0 - 5.15.4/ cpe:/a:apache:activemq:5/\nmatch stomp m|^ERROR\\ncontent-type:text/plain\\nmessage:Unknown STOMP action: HELP\\n\\norg\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolException: Unknown STOMP action: HELP\\r\\n\\tat org\\.apache\\.activemq\\.transport\\.stomp\\.ProtocolConverter\\.onStompCommand\\(ProtocolConverter\\.java:244\\)|s p/Apache ActiveMQ/ v/5.15.10 - 5.15.11/ cpe:/a:apache:activemq:5.15/\n\n# catch-all softmatch. Add submitted fingerprints above using the line number as above.\nsoftmatch stomp m|^ERROR\\n(?:[^\\n]+\\n)?message:Unknown STOMP action:.+ org\\.apache\\.activemq\\.|s p/Apache ActiveMQ/ cpe:/a:apache:activemq/\nmatch stomp m|^ERROR\\nmessage:Illegal command\\ncontent-type:text/plain\\nversion:([\\d.,]+)\\ncontent-length:\\d+\\n\\nYou must log in using CONNECT first\\0\\n| p/RabbitMQ/ i/versions: $1/ cpe:/a:pivotal_software:rabbitmq/\n\n# The following line matches IPDS (IBM's Intelligent Printer Data Stream) on port 9600\n# match ipds m|^%%\\[ Error: syntaxerror; Offending Command:|s p/IPDS Service/ d/printer/\n\n##############################NEXT PROBE##############################\n# Sends string 'stats' and matches memcached and zookeeper\nProbe TCP Memcache q|stats\\r\\n|\nrarity 8\nports 2181,11211\nmatch memcached m|^STAT pid \\d+\\r\\nSTAT uptime (\\d+)\\r\\nSTAT time \\d+\\r\\nSTAT version ([.\\d]+)\\r\\n|s p/Memcached/ v/$2/ i/uptime $1 seconds/ cpe:/a:memcached:memcached:$2/\nmatch memcached m|^STAT pid \\d+\\r\\nSTAT uptime (\\d+)\\r\\nSTAT time \\d+\\r\\nSTAT version ([.\\d]+) \\(?Ubuntu\\)?\\r\\n|s p/Memcached/ v/$2/ i/uptime $1 seconds; Ubuntu/ o/Linux/ cpe:/a:memcached:memcached:$2/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/a\nmatch zookeeper m|^Zookeeper version: ([\\w.-]+), built on ([\\w./]+)| p/Zookeeper/ v/$1/ i/Built on $2/ cpe:/a:zookeeper:zookeeper:$1/\n\nsoftmatch memcached m|^STAT pid \\d+\\r\\n|\n\n##############################NEXT PROBE##############################\n# Beast Trojan v2\nProbe TCP beast2 q|666|\nrarity 9\nports 666,6666\nmatch backdoor m|^666(\\d+)\\xff(\\d+)\\xff(\\d+)\\xff$| p/Beast Trojan/ v/version 2/ i/**BACKDOOR**; No password; New server port: $1; New client ports: $2, $3/ o/Windows/ cpe:/o:microsoft:windows/a\n\n\n##############################NEXT PROBE##############################\nProbe TCP firebird q|\\0\\0\\0\\x01\\0\\0\\0\\x13\\0\\0\\0\\x02\\0\\0\\0\\x24\\0\\0\\0\\x0bservice_mgr\\0\\0\\0\\0\\x02\\0\\0\\0\\x13\\x01\\x08scanner \\x04\\x05nmap \\x06\\0\\0\\0\\0\\0\\x08\\0\\0\\0\\x01\\0\\0\\0\\x02\\0\\0\\0\\x03\\0\\0\\0\\x02\\0\\0\\0\\x0a\\0\\0\\0\\x01\\0\\0\\0\\x02\\0\\0\\0\\x03\\0\\0\\0\\x04|\nrarity 8\nports 3050\n\nmatch firebird m|^\\0\\0\\0\\x03\\0\\0\\0\\x0a\\0\\0\\0\\x01| p/Firebird RDBMS/ v/Protocol version 10/ cpe:/a:firebirdsql:firebird/\nsoftmatch firebird m|^\\0\\0\\0\\x03\\0\\0\\0.\\0\\0\\0.|s p/Firebird RDBMS/ cpe:/a:firebirdsql:firebird/\n\nmatch cisco-smartinstall m|^\\0\\0\\0\\x04\\0\\0\\0\\0\\0\\0\\0\\x04\\0\\0\\0\\x04\\0\\0\\0\\x01| p/Cisco Switch Smart Install/ d/switch/ o/IOS/ cpe:/o:cisco:ios/a\n\n\n# Following 4 probes created by Tom Sellers:\n##############################NEXT PROBE##############################\nProbe TCP ibm-db2-das q|\\0\\0\\0\\0DB2DAS      \\x01\\x04\\0\\0\\0\\x10\\x39\\x7a\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\x0c\\0\\0\\0\\0\\0\\0\\x0c\\0\\0\\0\\x0c\\0\\0\\0\\x04|\nrarity 8\nports 523,9930-9934,9090,50000\nmatch ibm-db2 m|^\\0\\0\\0\\0DB2DAS\\x20\\x20\\x20\\x20\\x20\\x20.{28}\\x9b\\0\\0\\0\\x0c\\0\\0\\0Z\\0\\0\\0\\x10\\0\\0\\0\\x0c\\0\\0\\0L\\0\\0\\0\\0\\0\\0\\0\\$\\0\\0\\0\\x0c\\0\\0\\0O\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x10\\0\\0\\0\\x0c\\0\\0\\0L\\0\\0\\0\\0\\0\\0\\0\\x19\\0\\0\\0\\x0c\\0\\0\\0\\x04\\0\\0\\x04\\xb8SQL0(\\d)(\\d\\d)(\\d+)|s p/IBM DB2 Database Server/ v/$1.$2.$3/ cpe:/a:ibm:db2:$1.$2.$3/\n\n# 8001 = version, 0003 = EXCEPTION\nmatch thrift-binary m|^\\x80\\x01\\0\\x03\\0\\0\\0\\0B2DA\\x0b\\0\\x01\\0\\0\\0\\0\\x08\\0\\x02\\0\\0\\0\\x02\\0| p/Apache Thrift TBinary/\n\n# If this is too general, switch to the more specific match here:\n#match softether-rpc m|^@{1000}@*$| p/SoftEther VPN client config port/\nmatch softether-rpc m|^@+$| p/SoftEther VPN client config port/\n\n##############################NEXT PROBE##############################\nProbe TCP ibm-db2 q|\\x01\\xc2\\0\\0\\0\\x04\\0\\0\\xb6\\x01\\0\\0SQLDB2RA\\0\\x01\\0\\0\\x04\\x01\\x01\\0\\x05\\0\\x1d\\0\\x88\\0\\0\\0\\x01\\0\\0\\x80\\0\\0\\0\\x01\\x09\\0\\0\\0\\x01\\0\\0\\x40\\0\\0\\0\\x01\\x09\\0\\0\\0\\x01\\0\\0\\x40\\0\\0\\0\\x01\\x08\\0\\0\\0\\x04\\0\\0\\x40\\0\\0\\0\\x01\\x04\\0\\0\\0\\x01\\0\\0\\x40\\0\\0\\0\\x40\\x04\\0\\0\\0\\x04\\0\\0\\x40\\0\\0\\0\\x01\\x04\\0\\0\\0\\x04\\0\\0\\x40\\0\\0\\0\\x01\\x04\\0\\0\\0\\x04\\0\\0\\x40\\0\\0\\0\\x01\\x04\\0\\0\\0\\x02\\0\\0\\x40\\0\\0\\0\\x01\\x04\\0\\0\\0\\x04\\0\\0\\x40\\0\\0\\0\\x01\\0\\0\\0\\0\\x01\\0\\0\\x40\\0\\0\\0\\0\\x04\\0\\0\\0\\x04\\0\\0\\x80\\0\\0\\0\\x01\\x04\\0\\0\\0\\x04\\0\\0\\x80\\0\\0\\0\\x01\\x04\\0\\0\\0\\x03\\0\\0\\x80\\0\\0\\0\\x01\\x04\\0\\0\\0\\x04\\0\\0\\x80\\0\\0\\0\\x01\\x08\\0\\0\\0\\x01\\0\\0\\x40\\0\\0\\0\\x01\\x04\\0\\0\\0\\x04\\0\\0\\x40\\0\\0\\0\\x01\\x10\\0\\0\\0\\x01\\0\\0\\x80\\0\\0\\0\\x01\\x10\\0\\0\\0\\x01\\0\\0\\x80\\0\\0\\0\\x01\\x04\\0\\0\\0\\x04\\0\\0\\x40\\0\\0\\0\\x01\\x09\\0\\0\\0\\x01\\0\\0\\x40\\0\\0\\0\\x01\\x09\\0\\0\\0\\x01\\0\\0\\x80\\0\\0\\0\\x01\\x04\\0\\0\\0\\x03\\0\\0\\x80\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\x04\\0\\0\\x01\\0\\0\\x80\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\x40\\0\\0\\0\\x01\\0\\0\\0\\0\\x01\\0\\0\\x40\\0\\0\\0\\0\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xe4\\x04\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x7f|\nrarity 8\nports 523,50000-50025,60000-60025\n\nmatch hbase m|FatalConnectionException\\x12.Expected\\x20HEADER=HBas| p/Apache HBase/ cpe:/a:apache:hbase/\nmatch ibm-db2 m|(?<=.)DB2/([^\\0]+)\\0\\0\\0\\0\\0\\0\\0\\0.{1,4}\\0\\0\\0\\0\\0\\0\\0SQL0(\\d)(\\d\\d)(\\d+)|s p/IBM DB2 Database Server/ v/$2.$3.$4/ o/$1/ cpe:/a:ibm:db2:$2.$3.$4/\nmatch ibm-db2 m|^\\0\\xa9\\x10..\\x01\\0\\0SQLDB2RA\\x01\\0\\x05\\0.{10,13}SQLCA|s p/IBM DB2 Database Server/ cpe:/a:ibm:db2/\nmatch ibm-db2 m|^\\0\\xa9\\x10..\\x01\\x0e\\x10SQLDB2RA\\x01\\0\\x05\\0.{10,13}SQLCA|s p/IBM DB2 Database Server/ cpe:/a:ibm:db2/\n\n##############################NEXT PROBE##############################\nProbe TCP pervasive-relational q|Client string for PARC version 1 Wire Encryption version 1\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|\nrarity 8\nports 1583,3351\n\nmatch psql m|^\\0{255}| p/Pervasive.SQL Server - Relational Engine/\nmatch psql m|^\\0Server string for PARC version 1 Wire Encryption version 1\\0| p/Pervasive.SQL Server - Relational Engine/ i/encrypted/\n\n\n##############################NEXT PROBE##############################\nProbe TCP pervasive-btrieve q|\\x3c\\0\\x4b\\0\\0\\0\\x20\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xff\\xff\\xff\\xff\\0\\0\\x0a\\x04\\xa0\\xbe\\x53\\x03\\x55\\x52\\0\\0\\x3c\\0\\0\\0\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x1a\\0\\x3c\\0\\0\\0\\0\\0\\x0a\\0\\0\\0\\0\\0|\nports 1583,3351\nrarity 8\nmatch psql-btrieve m|^A\\0K\\0\\0\\0....\\0\\0\\0\\0\\0\\0\\xff\\xff\\xff\\xff\\0\\0\\n\\x04\\xa0|s p/Pervasive.SQL Server - Btrieve Engine/\n\n# Following probe created by Patrik Karlsson:\n##############################NEXT PROBE##############################\nProbe UDP ibm-db2-das-udp q|DB2GETADDR\\0SQL08010\\0|\nrarity 8\nports 523\n\nmatch ibm-db2 m|^DB2RETADDR\\0SQL0(\\d)(\\d\\d)(\\d+)\\0([^\\0]+)\\0|s p/IBM DB2 Database Server/ v/$1.$2.$3/ i/Hostname: $4/ cpe:/a:ibm:db2:$1.$2.$3/\n\n##############################NEXT PROBE##############################\n# Apache JServe Protocol (ajp) v1.3 Ping request\nProbe TCP ajp q|\\x12\\x34\\x00\\x01\\x0a|\nrarity 8\nports 8008,8009\n\n# AJP 1.3 Ping response\nmatch ajp13 m|^\\x41\\x42\\x00\\x01\\x09$| p/Apache Jserv/ i/Protocol v1.3/\n\n\n##############################NEXT PROBE##############################\n# DNS-based service discovery (DNS-SD). Asks for all services on the host.\n# http://files.dns-sd.org/draft-cheshire-dnsext-dns-sd.txt, section 9.\nProbe UDP DNS-SD q|\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\x09_services\\x07_dns-sd\\x04_udp\\x05local\\0\\0\\x0c\\0\\x01|\nrarity 4\nports 5353\n\n# mDNSResponder-176.3\n# Avahi under Ubuntu\nmatch mdns m|^\\0\\0\\x84\\0\\0\\x01..\\0\\0\\0\\0\\x09_services\\x07_dns-sd\\x04_udp\\x05local\\0\\0\\x0c\\0\\x01|s p/DNS-based service discovery/\nmatch hbn3 m|^\\0\\0\\x84\\0\\0\\0\\0\\x01\\0\\0\\0\\0.Lexmark (\\w+)\\x0c_host-config\\x04_udp\\x05local\\0\\0\\x10\\0\\x01\\0\\0\\0<\\x01\\x19.IPADDRESS [\\d.]+.IPNETMASK [\\d.]+.IPGATEWAY [\\d.]+.IPNAME \\\"([\\w._-]+)\\\"\\x15MACLAA \\\"000000000000\\\"\\x15MACUAA \\\"([0-9A-F]{12})\\\"|s p/Lexmark hbn3 (DNS-SD-like configuration)/ i/Lexmark $1 printer; MAC $3/ d/printer/ h/$2/ cpe:/h:lexmark:$1/a\n\nmatch isakmp m|^\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\t_servic\\x0b\\x10\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\(\\0\\0\\0\\x0c\\0\\0\\0\\x01\\x01\\0\\0\\x05| p/Openswan ISAKMP/ cpe:/a:openswan:openswan/\nmatch isakmp m|^\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\t_servic\\) % \\0\\0\\0\\0\\0\\0\\0\\$\\0\\0\\0\\x08\\0\\0\\0\\x05| p/StrongSwan ISAKMP/ cpe:/a:strongswan:strongswan/\n\n##############################NEXT PROBE##############################\n# HP Printer Job Language, supported on most PostScript printers.\n# http://h20000.www2.hp.com/bc/docs/support/SupportManual/bpl13208/bpl13208.pdf\n# http://h20000.www2.hp.com/bc/docs/support/SupportManual/bpl13207/bpl13207.pdf\nProbe TCP hp-pjl q|\\x1b%-12345X@PJL INFO ID\\x0d\\x0a\\x1b%-12345X\\x0d\\x0a|\nports 9100-9107\nrarity 9\n\n# Most printers respond with the printer version in quotes\nmatch hp-pjl m|^@PJL INFO ID\\r?\\n\\\"([^\"]+)\\\"\\r?\\n| p/$1/ d/printer/\n# Some respond without the quotes\nmatch hp-pjl m|^@PJL INFO ID ?\\r?\\n([\\w\\d _-]+)\\r?\\n| p/$1/ d/printer/\n# Some respond with blank info\nmatch hp-pjl m|@PJL\\x20INFO\\x20ID\\r?\\n\\r?\\n| d/printer/\n\n# COMMENTING THIS SOFTMATCH OUT. It is meant to stop causing a bunch\n# of extra printing of probes against PJL ports (those port numbers\n# are excluded by default anyway), but it caused problems described in\n# this thread: http://seclists.org/nmap-dev/2010/q2/753\n# But it might be useful for people doing pjl testing specifically.\n# softmatch hp-pjl m|^| i/hp-pjl probe got something back/\n\n##############################NEXT PROBE##############################\n# Citrix MetaFrame application discovery service\n# http://sh0dan.org/oldfiles/hackingcitrix.html\nProbe UDP Citrix q|\\x1e\\0\\x01\\x30\\x02\\xfd\\xa8\\xe3\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|\nrarity 5\nports 1604\n\n# Citrix MetaFrame\nmatch icabrowser m|^\\x30\\0\\x02\\x31\\x02\\xfd\\xa8\\xe3\\x02\\0\\x06\\x44| p/Citrix MetaFrame/ cpe:/a:citrix:metaframe/\n\nmatch ntp m|^\\x1e\\xc0\\x010\\x02\\0\\xa8\\xe3\\0\\0\\0\\0$| p/Digium Switchvox PBX ntpd/ d/PBX/\n\nmatch openvpn m|^\\.\\x83&SU\\xe3_\\xd5V\\x01\\0\\0\\0\\0\\0\\x010\\x02\\xfd\\xa8\\xe3\\0| p/SoftEther VPN OpenVPN Clone Function/\n\n##############################NEXT PROBE##############################\n# Kerberos AS_REQ with realm NM, server name krbtgt/NM, missing client name.\nProbe UDP Kerberos q|\\x6a\\x81\\x6e\\x30\\x81\\x6b\\xa1\\x03\\x02\\x01\\x05\\xa2\\x03\\x02\\x01\\x0a\\xa4\\x81\\x5e\\x30\\x5c\\xa0\\x07\\x03\\x05\\0\\x50\\x80\\0\\x10\\xa2\\x04\\x1b\\x02NM\\xa3\\x17\\x30\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e\\x30\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM\\xa5\\x11\\x18\\x0f19700101000000Z\\xa7\\x06\\x02\\x04\\x1f\\x1e\\xb9\\xd9\\xa8\\x17\\x30\\x15\\x02\\x01\\x12\\x02\\x01\\x11\\x02\\x01\\x10\\x02\\x01\\x17\\x02\\x01\\x01\\x02\\x01\\x03\\x02\\x01\\x02|\nrarity 5\nports 88\n\n# MIT 1.2.8\nmatch kerberos-sec m=^~\\x81[\\x86-\\x88]0\\x81[\\x83-\\x85]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa2\\x11\\x18\\x0f\\d{14}Z\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01\\x06\\xa9\\x04\\x1b\\x02NM\\xaa\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM\\xab\\(\\x1b&Client not found in Kerberos database\\0$=s p/MIT Kerberos/ v/1.2/ i/server time: $1-$2-$3 $4:$5:$6Z/ cpe:/a:mit:kerberos:5-1.2/\n# OS X 10.6.2; MIT 1.3.5, 1.6.3, 1.7.\nmatch kerberos-sec m=^~[\\x6b-\\x6d]0[\\x69-\\x6b]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa2\\x11\\x18\\x0f\\d{14}Z\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01\\x06\\xa9\\x04\\x1b\\x02NM\\xaa\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM\\xab\\x0e\\x1b\\x0cNULL_CLIENT\\0$=s p/MIT Kerberos/ v/1.3 - 1.8/ i/server time: $1-$2-$3 $4:$5:$6Z/ cpe:/a:mit:kerberos:5-1/\n\n# Heimdal 1.0.1-5ubuntu4\nmatch kerberos-sec m=^~[\\x60-\\x62]0[\\x5e-\\x60]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01<\\xa9\\x04\\x1b\\x02NM\\xaa\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM\\xab\\x16\\x1b\\x14No client in request$=s p/Heimdal Kerberos/ i/server time: $1-$2-$3 $4:$5:$6Z/ cpe:/a:heimdal:kerberos/\n\nmatch kerberos-sec m=^~[\\x48-\\x4a]0[\\x46-\\x48]\\xa0\\x03\\x02\\x01\\x05\\xa1\\x03\\x02\\x01\\x1e\\xa4\\x11\\x18\\x0f(\\d\\d\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)(\\d\\d)Z\\xa5[\\x03-\\x05]\\x02(?:\\x03...|\\x02..|\\x01.)\\xa6\\x03\\x02\\x01D\\xa9\\x04\\x1b\\x02NM\\xaa\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtgt\\x1b\\x02NM$=s p/Microsoft Windows Kerberos/ i/server time: $1-$2-$3 $4:$5:$6Z/ o/Windows/ cpe:/a:microsoft:kerberos/ cpe:/o:microsoft:windows/a\n\n# DCE RPC Reject\nmatch msrpc m|^\\x04\\x06\\x20\\0\\x10\\0\\0\\x03\\x02\\x01\\x05\\xa2\\x03\\x02\\x01\\n\\xa4\\x81\\x5e0\\x5c\\xa0\\x07\\x03\\x05\\0\\x50\\x80\\0\\x10\\xa2\\x04\\x1b\\x02NM\\xa3\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06krbtg....|s p/Microsoft RPC/ o/Windows/ cpe:/o:microsoft:windows/a\n\n##############################NEXT PROBE##############################\n# SqueezeCenter discovery\nProbe UDP SqueezeCenter q|eIPAD\\0NAME\\0JSON\\0VERS\\0UUID\\0JVID\\x06\\x12\\x34\\x56\\x78\\x12\\x34|\nrarity 8\nports 3483\n\nmatch squeezecenter m|^ENAME.{1}(.+)JSON.{1}(\\d+)VERS.{1}(.+)UUID.{1}(.+)$| p/Logitech SqueezeCenter music server/ v/$3/ i/Server Name: $1, JSON: $2, UUID: $4/\n\n\n##############################NEXT PROBE##############################\n# AFP - Request GetStatus\nProbe TCP afp q|\\x00\\x03\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\x0f\\0|\nrarity 6\nports 548\n\n# See other AFP matches in SSLSessionReq.\n\n# Netatalk 3.1.1\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f[\\x59\\x79].([^\\0\\x01]+)[\\0\\x01].*Netatalk([\\w._-]+)\\x06\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3\\x06AFP3\\.4|s p/Netatalk/ v/$2/ i/name: $1; protocol 3.4/ o/Unix/ cpe:/a:netatalk:netatalk:$2/\n# Netatalk 2.2.2\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x7b.([^\\0\\x01]+)[\\0\\x01].*Netatalk([\\w._-]+)\\x05\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$2/ i/name: $1; protocol 3.3/ o/Unix/ cpe:/a:netatalk:netatalk:$2/\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x59.([^\\0\\x01]+)[\\0\\x01].*Netatalk([\\w._-]+)\\x05\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$2/ i/name: $1; protocol 3.3/ o/Unix/ cpe:/a:netatalk:netatalk:$2/\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x5d.MyBookWorld[\\0\\x01].*Netatalk([\\w._-]+)\\x05\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$1/ i/Western Digital MyBook World NAS device; name: MyBookWorld; protocol 3.3/ o/Unix/ cpe:/a:netatalk:netatalk:$1/\n# Netatalk 2.2.1dev\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x7d.([^\\0\\x01]+)[\\0\\x01].*Netatalk([\\w._-]+)\\x05\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$2/ i/name: $1; protocol 3.3/ o/Unix/ cpe:/a:netatalk:netatalk:$2/\n# Netatalk 2.2.0\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x79.([^\\0\\x01]+)[\\0\\x01].*Netatalk ([\\w._-]+)\\x05\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$2/ i/name: $1; protocol 3.3/ o/Unix/ cpe:/a:netatalk:netatalk:$2/\n# Netatalk 2.2.1\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x79.([\\w._-]+)[\\0\\x01].*Netatalk([\\w._-]+)\\x05\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$2/ i/name: $1; protocol 3.3/ o/Unix/ cpe:/a:netatalk:netatalk:$2/\n# Netatalk 2.2.0\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x7d.(FreeNAS)[\\0\\x01].*Netatalk ([\\w._-]+)\\x05\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$2/ i/FreeNAS; name: $1; protocol 3.3/ o/FreeBSD/ cpe:/a:netatalk:netatalk:$2/ cpe:/o:freebsd:freebsd/\n# Netatalk 2.2.1.1-0u\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x5d.([\\w._-]+)[\\0\\x01].*Netatalk[ \\0]?([\\w._-]+)\\x05\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$2/ i/name: $1; protocol 3.3/ o/Unix/ cpe:/a:netatalk:netatalk:$2/\n\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x7d.([^\\0\\x01]+)[\\0\\x01].*Netatalk ([\\w._-]+)\\x05\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$2/ i/name: $1; protocol 3.3/ o/Unix/ cpe:/a:netatalk:netatalk:$2/\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x7d.([^\\0\\x01]+)[\\0\\x01].*Netatalk([\\w._-]+)\\x06\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3\\x06AFP3\\.4| p/Netatalk/ v/$2/ i/name: $1; protocol 3.4/ o/Unix/ cpe:/a:netatalk:netatalk:$2/\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x7d.(MyBookWorld)[\\0\\x01].*Netatalk ([\\w._-]+)\\x05\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$SUBST(2,\"-\",\".\")/ i/Western Digital MyBook World NAS device; name: $1; protocol 3.3/ o/Unix/ cpe:/a:netatalk:netatalk:$SUBST(2,\"-\",\".\")/\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x7d.([\\w._-]+)[\\0\\x01].*Netatalk([\\w._-]+)\\x08\\x0eAFPVersion 1\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 2\\.1\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2\\x06AFP3\\.3|s p/Netatalk/ v/$SUBST(2,\"-\",\".\")/ i/QNAP NAS TS-219P+; name: $1; protocol 3.3/ o/Linux/ cpe:/a:netatalk:netatalk:$SUBST(2,\"-\",\".\")/ cpe:/o:linux:linux_kernel:2.6/\n\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x81\\x7d\\0\\0.*Netatalk\\x06\\x0eAFPVersion 1\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 2\\.1\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x04\\x04DHX2\\tDHCAST128|s p/Netatalk/ i/protocol 3.1/ o/Unix/ cpe:/a:netatalk:netatalk/\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x83\\x7f.([^\\0\\x01]+)[\\0\\x01].*Netatalk\\x04\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2|s p/Netatalk/ v/2/ i/name: $1; protocol 3.2/ o/Unix/ cpe:/a:netatalk:netatalk:2/\n\n# Netatalk 2.0.5\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x83\\x7d.([^\\0\\x01]+)[\\0\\x01].*\\x08Netatalk\\x04\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2|s p/Netatalk/ v/2/ i/name: $1; protocol 3.2/ o/Unix/ cpe:/a:netatalk:netatalk:2/\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x83\\x7d.([^\\0\\x01]+)[\\0\\x01].*\\x08Netatalk\\x06\\x0eAFPVersion 1\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 2\\.1\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1|s p/Netatalk/ v/2/ i/name: $1; protocol 3.1/ o/Unix/ cpe:/a:netatalk:netatalk:2/\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x83\\x7d.([^\\0\\x01]+)[\\0\\x01].*\\x08Netatalk\\x07\\x0eAFPVersion 1\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 2\\.1\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2| p/Netatalk/ v/2/ i/name: $1; protocol 3.2/ o/Unix/ cpe:/a:netatalk:netatalk:2/\n\n# Netatalk 2.0.4\n# Netatalk 2.0.3\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x83\\x79.([^\\0\\x01]+)[\\0\\x01].*\\x08Netatalk\\x06\\x0eAFPVersion 1\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 2\\.1\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1|s p/Netatalk/ v/2/ i/name: $1; protocol 3.1/ o/Unix/ cpe:/a:netatalk:netatalk:2/\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x83\\x79.([^\\0\\x01]+)[\\0\\x01].*\\x08Netatalk\\x04\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x06AFP3\\.2|s p/Netatalk/ v/2/ i/name: $1; protocol 3.2/ o/Unix/ cpe:/a:netatalk:netatalk:2/\n\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x83\\x59.([^\\0\\x01]+)[\\0\\x01].*\\x08Netatalk\\x06\\x0eAFPVersion 1\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 2\\.1\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1|s p/Netatalk/ v/2/ i/name: $1; protocol 3.1/ o/Unix/ cpe:/a:netatalk:netatalk:2/\n\n# Netatalk 1.6.4\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x80\\x7d.([^\\0\\x01]+)[\\0\\x01].*\\x04unix\\x04\\x0eAFPVersion 1\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 2\\.1\\x06AFP2\\.2|s p/Netatalk/ v/1.6/ i/name: $1; protocol 2.2/ o/Unix/ cpe:/a:netatalk:netatalk:1.6/\n\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x8f\\x79.([^\\0\\x01]+)[\\0\\x01].*Netatal(\\d[\\w.]+)|s p/Netatalk/ v/$2/ i/name: $1/ o/Unix/ cpe:/a:netatalk:netatalk:$2/\n\n# Novell NetWare AFP\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\0\\xbf.([^\\0]+)\\0.*\\x16Novell NetWare ([0-9.]+)\\x06\\x0eAFPVersion 1\\.1\\x0eAFPVersion 2\\.0\\x0eAFPVersion 2\\.1\\x06AFP2\\.2\\x06AFPX03\\x06AFP3\\.1\\x02\\x10[^\\x16]+\\x16|s p/Novell NetWare AFP/ v/$2/ i/name: $1; protocol 3.1/ o/NetWare/ cpe:/o:novell:netware/a\n\n# Novell Open Enterprise Server\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\0\\xb7.([^\\0]+)\\0.*\\x1fNovell\\x20Open\\x20Enterprise\\x20Server\\x202|s p/Novell Open Enterprise Server/ v/2/ i/name: $1/ o/Linux/ cpe:/a:novell:open_enterprise_server:2/ cpe:/o:linux:linux_kernel/a\n\n# Windows NT or Windows 2000\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x80\\x7f.([^\\0\\x01]+)[\\0\\x01].*\\x0aWindows NT\\x03\\x0eAFPVersion 2\\.0\\x0eAFPVersion 2\\.1\\x06AFP2\\.2\\x03\\x10ClearTxt Passwrd\\x0eMicrosoft V1\\.0\\x05MS2\\.0|s i/name: $1; protocol 2.2; MS2.0/ o/Windows/ cpe:/o:microsoft:windows/\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0........\\x80\\x7f.([^\\0\\x01]+)[\\0\\x01].*\\x0aWindows NT\\x03\\x0eAFPVersion 2\\.0\\x0eAFPVersion 2\\.1\\x06AFP2\\.2\\x03\\x0eMicrosoft V1\\.0\\x05MS2\\.0\\x05MS3\\.0|s i/name: $1; protocol 2.2; MS3.0/ o/Windows/ cpe:/o:microsoft:windows/\n\n# Seems to repeat the length in the first reserved field.\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0................\\x03\\xff.([^\\0\\x01]+)[\\0\\x01].*Windows Version: ([\\d.]+ \\(2\\) build \\d+ (?:Service Pack \\d+)?) (\\d+)-bit \\(ExtremeZ-IP ([\\w._-]+)\\).*afpserver/([\\w._@-]+)\\0|s p/ExtremeZ-IP AFP/ v/$4/ i/name: $1; afpserver: $5; $3-bit/ o/Windows $2/ cpe:/o:microsoft:windows/a\nmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0................\\x03\\xff.([^\\0\\x01]+)[\\0\\x01].*Windows Version: ([\\d.]+ \\(2\\) build \\d+ (?:Service Pack \\d+)?) (\\d+)-bit \\(ExtremeZ-IP ([\\w._-]+)\\).*|s p/ExtremeZ-IP AFP/ v/$4/ i/name: $1; $3-bit/ o/Windows $2/ cpe:/o:microsoft:windows/a\n\nsoftmatch afp m|^\\x01\\x03\\0\\x01\\0\\0\\0\\0....\\0\\0\\0\\0.*AFP|s\n\nmatch lsf-mbd m|^\\0\\\"\\0\\0\\x17\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Platform Load Sharing Facility MBD/ cpe:/a:platform:load_sharing_facility/\nmatch pigpio m|^\\0\\x03\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\x02\\xa8\\xff\\xff\\xff| p/pigpiod/ cpe:/a:pigpio:pigpiod/\n\n##############################NEXT PROBE##############################\n# Quake1 server info\nProbe UDP Quake1_server_info q|\\x80\\x00\\x00\\x0c\\x02\\x51\\x55\\x41\\x4b\\x45\\x00\\x03|\nrarity 9\nports 26000-26004\n\nmatch quake m|^\\x80\\x00..\\x83([^\\x00]*)\\x00([^\\x00]*)\\x00| p/Quake 1 server/ i/address: $1, name: $2/\n\n##############################NEXT PROBE##############################\n# Quake2 status\nProbe UDP Quake2_status q|\\xff\\xff\\xff\\xffstatus|\nrarity 8\nports 27910-27914\n\nmatch quake2 m|^\\xff\\xff\\xff\\xffprint\\n.*\\\\version\\\\([^\\\\]* Linux)(?=\\\\).*\\\\gamename\\\\data1(?=\\\\)| p/Alien Arena game server/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\n\n##############################NEXT PROBE##############################\n# Quake3 getstatus\nProbe UDP Quake3_getstatus q|\\xff\\xff\\xff\\xffgetstatus|\nrarity 8\nports 26000-26004,27960-27964,30720-30724,44400\n\nmatch quake3 m|^\\xff\\xff\\xff\\xffstatusResponse\\n.*\\\\gamename\\\\Nexuiz(?=\\\\).*\\\\gameversion\\\\([^\\\\]*)(?=\\\\)| p/Nexuiz game server/ v/$1/\nmatch quake3 m|^\\xff\\xff\\xff\\xffstatusResponse\\n.*\\\\version\\\\([^\\\\]* linux-[^\\\\]*)(?=\\\\).*\\\\gamename\\\\baseoa(?=\\\\)| p/OpenArena game server/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch quake3 m|^\\xff\\xff\\xff\\xffstatusResponse\\n.*\\\\version\\\\([^\\\\]* freebsd-[^\\\\]*)(?=\\\\).*\\\\gamename\\\\baseoa(?=\\\\)| p/OpenArena game server/ v/$1/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\nmatch quake3 m|^\\xff\\xff\\xff\\xffstatusResponse\\n.*\\\\version\\\\tremulous ([^\\\\]* linux-[^\\\\]*)(?=\\\\)| p/Tremulous game server/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch quake3 m|^\\xff\\xff\\xff\\xffstatusResponse\\n.*\\\\version\\\\tremulous ([^\\\\]* freebsd-[^\\\\]*)(?=\\\\)| p/Tremulous game server/ v/$1/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\nmatch quake3 m|^\\xff\\xff\\xff\\xffstatusResponse\\n.*\\\\version\\\\([^\\\\]* linux-[^\\\\]*)(?=\\\\).*\\\\gamename\\\\q3ut4(?=\\\\)| p/Urban Terror game server/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch quake3 m|^\\xff\\xff\\xff\\xffstatusResponse\\n.*\\\\version\\\\([^\\\\]* freebsd-[^\\\\]*)(?=\\\\).*\\\\gamename\\\\q3ut4(?=\\\\)| p/Urban Terror game server/ v/$1/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\nmatch quake3 m|^\\xff\\xff\\xff\\xffstatusResponse\\n.*\\\\version\\\\([^\\\\]* Linux)(?=\\\\).*\\\\gamename\\\\Warsow(?=\\\\)| p/Warsow game server/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch quake3 m|^\\xff\\xff\\xff\\xffstatusResponse\\n.*\\\\version\\\\([^\\\\]* linux-[^\\\\]*)(?=\\\\)| p/World of Padman game server/ v/$1/ o/Linux/ cpe:/o:linux:linux_kernel/a\nmatch quake3 m|^\\xff\\xff\\xff\\xffstatusResponse\\n.*\\\\version\\\\([^\\\\]* freebsd-[^\\\\]*)(?=\\\\)| p/World of Padman game server/ v/$1/ o/FreeBSD/ cpe:/o:freebsd:freebsd/a\n\n##############################NEXT PROBE##############################\n# Quake 3 and other games\n# http://svn.icculus.org/twilight/trunk/dpmaster/doc/techinfo.txt?view=markup\n# Protocol 68 is a specific revision of Quake 3, but the server should respond\n# with an empty server list even if it doesn't know that game.\nProbe UDP Quake3_master_getservers q|\\xff\\xff\\xff\\xffgetservers 68 empty full|\nrarity 9\nports 27950,30710\n\nmatch quake3-master m|^\\xff\\xff\\xff\\xffgetserversResponse|\n\n##############################NEXT PROBE##############################\n# SqueezeCenter CLI\n# http://wiki.slimdevices.com/index.php/CLI\nProbe TCP SqueezeCenter_CLI q|serverstatus\\r\\n|\nrarity 8\nports 9090\n\nmatch squeezecli m|^serverstatus.*version%3A([\\.\\d]+) uuid%3A([-\\w]+) info%20total%20albums%3A\\d+ info%20total%20artists%3A\\d+ info%20total%20genres%3A\\d+ info%20total%20songs%3A(\\d+) player%20count%3A\\d+ sn%20player%20count%3A\\d+ other%20player%20count%3A\\d+\\r\\n|s p/SqueezeCenter CLI/ v/$1/ i/UUID: $2, Total songs: $3/\n\n##############################NEXT PROBE##############################\n# Arucer backdoor\n# http://www.kb.cert.org/vuls/id/154421\n# The probe is the UUID for the 'YES' command, which is basically a ping command, encoded by XORing with 0xE5 (the original string is \"E2AC5089-3820-43fe-8A4D-A7028FAD8C28\"). The response is the string 'YES', encoded the same way.\nProbe TCP Arucer q|\\xC2\\xE5\\xE5\\xE5\\x9E\\xA0\\xD7\\xA4\\xA6\\xD0\\xD5\\xDD\\xDC\\xC8\\xD6\\xDD\\xD7\\xD5\\xC8\\xD1\\xD6\\x83\\x80\\xC8\\xDD\\xA4\\xD1\\xA1\\xC8\\xA4\\xD2\\xD5\\xD7\\xDD\\xA3\\xA4\\xA1\\xDD\\xA6\\xD7\\xDD\\x98\\xE5|\nrarity 8\nports 7777\n\nmatch arucer m|^\\xbc\\xa0\\xb6$| p/Arucer backdoor/ i/**BACKDOOR**/ o/Windows/ cpe:/o:microsoft:windows/a\n\n##############################NEXT PROBE##############################\n# Mac OS X Server serialnumberd; checks for other servers with the same serial\n# number on the local network. AAAAAA is a dummy value.\nProbe UDP serialnumberd q|SNQUERY: 127.0.0.1:AAAAAA:xsvr|\nrarity 8\nports 626\n\nmatch serialnumber m|^SNRESPS:127\\.0\\.0\\.1:(0x[0-9A-F]{40}):xsvr:(0x[0-9A-F]{40}):(0x[0-9a-f]{8}):(0x[0-9A-F]{40}):127\\.0\\.0\\.1\\0$| p/Mac OS X Server serialnumberd/ i/numbers: $1 $2 $3 $4/ o/Mac OS X/ cpe:/o:apple:mac_os_x/a\nmatch serialnumber m|^SNRESPS:([\\w._-]+):(0x[0-9A-F]{40}):xsvr:(0x[0-9A-F]{40}):(0x[0-9a-f]{8}):(0x[0-9A-F]{40}):[\\w._-]+\\0$| p/Mac OS X Server serialnumberd/ i/numbers: $2 $3 $4 $5/ o/Mac OS X/ h/$1/ cpe:/o:apple:mac_os_x/a\n\n##############################NEXT PROBE##############################\n# Lotus Domino Console\n#\nProbe TCP dominoconsole q|#ST\\n|\nrarity 8\nsslports 2050\n\nmatch dominoconsole m|^([^/]+)/([\\w._-]+):([^:]*):([^:]*):| p/Lotus Domino Console/ i/domain: $1; description: \"$4\"/ o/$3/ h/$2/ cpe:/a:ibm:lotus_domino/\n\n##############################NEXT PROBE##############################\n# Informix probe\n#\nProbe TCP informix q|\\0\\x94\\x01\\x3c\\0\\0\\0\\x64\\0\\x65\\0\\0\\0\\x3d\\0\\x06IEEEM\\0\\0lsqlexec\\0\\0\\0\\0\\0\\0\\x069.280\\0\\0\\x0cRDS#R000000\\0\\0\\x05sqli\\0\\0\\0\\x01\\x33\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\x05nmap\\0\\0\\x05nmap\\0ol\\0\\0\\0\\0\\0\\0\\0\\0\\0=tlitcp\\0\\0\\0\\0\\0\\x01\\0\\x68\\0\\x0b\\0\\0\\0\\x03\\0\\x05nmap\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x6a\\0\\0\\0\\x7f|\nrarity 8\nports 1526,9088-9100\n\nmatch informix m|^..\\x03<\\x10\\0\\0d\\0e\\0\\0\\0=\\0\\x06IEEEI\\0\\0lsrvinfx\\0\\0\\0\\0\\0\\0\\x05V1\\.0\\0\\0\\x04SER\\0\\0\\x08asfecho\\0{19}o[ln]\\0{9}=soctcp\\0{5}\\x01\\0f\\0{6}\\xfcI..\\0\\0\\0\\x01\\0\\0\\0.nmap@[\\d\\w.-]+\\0k\\0\\0\\0\\0\\0\\0..\\0\\0\\0\\0\\0.(.*)\\0\\0..*\\0\\0.([A-Z]\\:[^/]*)\\0\\0t\\0\\x08\\x01Y\\0\\x06\\x01Y\\0\\0\\0\\x7f$|s p/Informix Dynamic Server/ v/11.50/ i/Path: $2/ o/Windows/ h/$1/ cpe:/a:ibm:informix_dynamic_server:11.50/ cpe:/o:microsoft:windows/a\nmatch informix m|^..\\x03<\\x10\\0\\0d\\0e\\0\\0\\0=\\0\\x06IEEEI\\0\\0lsrvinfx\\0\\0\\0\\0\\0\\0\\x05V1\\.0\\0\\0\\x04SER\\0\\0\\x08asfecho\\0{19}o[ln]\\0{9}=soctcp\\0{5}\\x01\\0f\\0{6}\\xfcI..\\0\\0\\0\\x01\\0\\0\\0.nmap@[\\d\\w.-]+\\0k\\0\\0\\0\\0\\0\\0..\\0\\0\\0\\0\\0.(.*)\\0\\0..*\\0\\0.([^\\\\]*)\\0\\0t\\0\\x08\\0\\0\\x03\\xe9\\0\\0\\x03\\xe9\\0\\x7f$|s p/Informix Dynamic Server/ v/11.50/ i/Path: $2/ h/$1/ cpe:/a:ibm:informix_dynamic_server:11.50/\n# Should we detect windows paths here, too?\n# non-capturing group is a path that may be interesting. e.g.: /opt/SinoDB_Software_Bundle/bin/oninit\nmatch informix m|^..\\x03<\\x10\\0\\0d\\0e\\0\\0\\0=\\0\\x06IEEEI\\0\\0lsrvinfx\\0\\0\\0\\0\\0\\0\\x05V1\\.0\\0\\0\\x04SER\\0\\0\\x08asfecho\\0{19}o[ln]\\0{9}=soctcp\\0{5}\\x01\\0f\\0{6}\\xfcI..\\0\\0\\0\\x01\\0\\0\\0.nmap@[\\d\\w.-]+\\0k\\0\\0\\0\\0\\0\\0..\\0\\0\\0\\0\\0.(.+)\\0\\0..*\\0\\0.([^\\\\]+)\\0\\0n\\0\\x04\\0{5}t\\x001\\0\\0\\x03\\xe9\\0\\0\\x03\\xe9..(?:[^\\0]+)\\0\\0\\x7f|s p/Informix Dynamic Server/ v/11.70/ i/Path: $2/ h/$1/ cpe:/a:ibm:informix_dynamic_server:11.70/\n\nmatch informix m|^..\\x03<\\x10\\0\\0d\\0e\\0\\0\\0=\\0\\x06IEEEI\\0\\0lsrvinfx\\0\\0\\0\\0\\0\\0\\x05V1\\.0\\0\\0\\x04SER\\0\\0\\x08asfecho\\0{19}o[ln]\\0{9}=soctcp\\0{5}\\x01\\0f\\0{6}\\xfcI..\\0\\0\\0\\x01\\0\\0\\0.nmap@[\\d\\w.-]+\\0k\\0\\0\\0\\0\\0\\x03..\\0\\0\\0\\0\\0.([^\\0]+)\\0\\0.[^\\0]*\\0\\0.([A-Z]\\:[^/]*)\\0|s p/Informix Dynamic Server/ i/Path: $2/ o/Windows/ h/$1/ cpe:/a:ibm:informix_dynamic_server/ cpe:/o:microsoft:windows/a\nmatch informix m|^..\\x03<\\x10\\0\\0d\\0e\\0\\0\\0=\\0\\x06IEEEI\\0\\0lsrvinfx\\0\\0\\0\\0\\0\\0\\x05V1\\.0\\0\\0\\x04SER\\0\\0\\x08asfecho\\0{19}o[ln]\\0{9}=soctcp\\0{5}\\x01\\0f\\0{6}\\xfcI..\\0\\0\\0\\x01\\0\\0\\0.nmap@[\\d\\w.-]+\\0k\\0\\0\\0\\0\\0\\x03..\\0\\0\\0\\0\\0.([^\\0]+)\\0\\0.[^\\0]*\\0\\0.([^\\\\]*)\\0|s p/Informix Dynamic Server/ i/Path: $2/ h/$1/ cpe:/a:ibm:informix_dynamic_server/\n\nsoftmatch informix m|^..\\x03<\\x10\\0\\0d\\0e\\0\\0\\0=|\n\n##############################NEXT PROBE##############################\n# The DRDA protocol is used by both Informix and DB2\n#\nProbe TCP drda q|\\0\\x32\\xd0\\x01\\0\\x01\\0\\x2c\\x10\\x41\\0\\x04\\x11\\x5e\\0\\x04\\x11\\x6d\\0\\x04\\x11\\x5a\\0\\x18\\x14\\x04\\x14\\x03\\x00\\x07\\x24\\x07\\0\\x08\\x24\\x0f\\x00\\x08\\x14\\x40\\0\\x08\\x14\\x74\\0\\x08\\0\\x04\\x11\\x47|\nrarity 8\nports 50000,60000,1526,1527,9088-9100\n\nsoftmatch drda m|^\\0.......\\x14\\x43..\\x11\\x5e.*\\x11\\x47|\n\nmatch oo-defrag m|^\\x10\\0\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\r\\x08\\0\\0\\x02\\0{7}j\\0\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\x07\\x08\\0\\0\\x02\\0{97}\\x10\\0\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\r\\x08\\0\\0\\x02\\0{7}j\\0\\0\\0\\x01\\0\\0\\0\\x03\\0\\0\\0\\x07\\x08\\0\\0\\x02\\0{97}\\x0c\\0\\0\\0\\x01\\0{7}\\xd7\\x07\\0{6}| p/O&O Defrag/ o/Windows/ cpe:/o:microsoft:windows/a\n\n##############################NEXT PROBE##############################\n# MQ Initial Packet Queue-manager=nmap-probe; channel=SYSTEM.ADMIN.SRVCONN\n#\nProbe TCP ibm-mqseries q|TSH\\x20\\x00\\x00\\x00\\xEC\\x01\\x01\\x31\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x11\\x04\\xB8\\x00\\x00\\x49\\x44\\x20\\x20\\x0A\\x26\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x7F\\xF6\\x06\\x40\\x00\\x00\\x00\\x00\\x00\\x00SYSTEM.ADMIN.SVRCONN\\x51\\x00\\x04\\xB8nmap-probe\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x00\\x00\\x00\\x01\\x00\\x6A\\x00\\x00\\x00\\xFF\\x00\\xFF\\xFF\\xFF\\xFF\\xFF\\xFF\\xFF\\xFF\\xFF\\xFF\\xFF\\xFF\\xFF\\xFF\\xFF\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x0A\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02MQJB00000000CANNED_DATA\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20|\nrarity 8\nports 1414-1420\n\nmatch ibm-mqseries m|^TSH\\x20\\0\\0\\0\\xec\\x02\\x01\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x11\\x01\\x00\\x00..\\0\\0ID\\x20\\x20\\x08&\\0\\x98\\0\\0\\0\\0\\xf6\\x7f\\x00\\x00\\0\\x00\\x40\\0\\0\\0\\0\\0([^\\s]*)\\s*\\x2c\\x01\\0\\0\\0\\0\\0\\0\\0\\xff\\0\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\n\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x02MQJB00000000CANNED_DATA\\s*$|s p/IBM WebSphere MQ/ v/6.0/ i/channel: $1/ cpe:/a:ibm:websphere_mq:6.0/\nmatch ibm-mqseries m|^TSH\\x20\\0\\0\\0\\xec\\x02\\x01\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x11\\x01\\x00\\x00..\\0\\0ID\\x20\\x20\\x0a&\\0\\x90\\0\\0\\0\\0\\xf6\\x7f\\x00\\x00\\0\\x00\\x40\\0\\0\\0\\0\\0([^\\s]*)\\s*\\x51\\x00\\xb5\\x01([^\\s]*)\\s*\\x2c\\x01\\0\\0\\0\\0\\0\\0\\0\\xff\\0\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\0\\0\\0\\0\\0\\0\\n\\0\\0\\0\\0\\0\\0\\0..\\0\\0.\\0\\0\\0.\\0\\0\\0[^\\s]*\\s*$|s p/IBM WebSphere MQ/ v/7.0/ i/queue manager: $2, channel: $1/ cpe:/a:ibm:websphere_mq:7.0/\nmatch ibm-mqseries m|^TSH\\x20\\0\\0\\0\\xec\\x01\\x01\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x00\\x00\\x01\\x11..\\0\\0ID\\x20\\x20\\x0a&\\0\\x90\\0\\0\\0\\0\\x00\\x00\\x7f\\xf6\\0\\x40\\x00\\0\\0\\0\\0\\0([^\\s]*)\\s*\\x00\\x00\\x01\\x2c\\0\\0\\0\\0\\0\\xff\\0\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\n\\0\\0\\0\\0\\0.*MQMM07000107JJ\\.PRD\\.(QM02_\\d\\d\\d\\d-\\d\\d-\\d\\d_\\d+\\.\\d+\\.\\d+)\\s*$|s p/IBM WebSphere MQ/ v/7.0/ i/channel: $1; $2/ cpe:/a:ibm:websphere_mq:7.0/\nmatch ibm-mqseries m|^TSH\\x20\\0\\0\\0\\$\\x01\\x05\\n\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x02\\\"\\x04\\xb8\\0\\0\\0\\0\\0\\x08\\0\\0\\0\\x01$| p/IBM WebSphere MQ/ v/7.0.1/ cpe:/a:ibm:websphere_mq:7.0.1/\n\nsoftmatch ibm-mqseries m|^TSH\\x20\\0\\0\\0| p/IBM WebSphere MQ/ cpe:/a:ibm:websphere_mq/\n\n##############################NEXT PROBE##############################\n# Queries iPhoto for the /server-info url containing the shared library name\n#\nProbe TCP apple-iphoto q|GET /server-info HTTP/1.1\\r\\nClient-DPAP-Version: 1.1\\r\\nUser-Agent: iPhoto/9.1.1  (Macintosh; N; PPC)\\r\\n\\r\\n|\nrarity 8\nports 8770\n\nmatch apple-iphoto m|^HTTP/1\\.1 200 OK\\r\\nDate: .*\\r\\nDPAP-Server: iPhoto/(.*)\\r\\nContent-Type: application/x-dmap-tagged\\r\\nContent-Length: \\d+\\r\\n\\r\\nmsrv\\0\\0\\0\\x83mstt\\0\\0\\0\\x04\\0\\0\\0\\xc8mpro\\0\\0\\0\\x04\\0\\x02\\0\\0ppro\\0\\0\\0\\x04\\0\\x01\\0\\x01minm\\0\\0\\0.(.*)mslr\\0\\0\\0\\x01\\0mstm\\0\\0\\0\\x04\\0\\0\\x07\\x08msal\\0\\0\\0\\x01\\0msau\\0\\0\\0\\x01\\x02msas\\0\\0\\0\\x01\\x03msix\\0\\0\\0\\x01\\0msdc\\0\\0\\0\\x04\\0\\0\\0\\x01$| p/Apple iPhoto/ v/$1/ i/Library name: $2/ cpe:/a:apple:iphoto:$1/\n\n##############################NEXT PROBE##############################\n# Zend Java Bridge, vulnerable control port, see\n# <http://www.zerodayinitiative.com/advisories/ZDI-11-113/>\n# GetClassName called on an empty string.\nProbe TCP ZendJavaBridge q|\\0\\0\\0\\x1f\\0\\0\\0\\0\\0\\0\\0\\x0cGetClassName\\0\\0\\0\\x02\\x04\\0\\0\\0\\0\\x01\\0|\nrarity 9\nports 5000,5001,5002,10001-10003\n\nmatch h.239 m|^BadRecord| p/Polycom People+Content IP H.239/ d/VoIP phone/\n\n# LOGO! 7 on port 10001\nmatch siemens-logo m|^\\x06\\x03\\x04\\0\\0\\x002| p/Siemens LOGO! PLC/ d/specialized/\n\n# port 5002 on Mitsubishi PLC: http://plcremote.net/143-2/\nmatch mitsubishi-qj71e71 m|^\\x80\\[\\0K\\xc7P| p/Mitsubishi QJ71E71/ d/specializied/\n\nmatch sybase-adaptive m|^\\x04\\x01\\0\\x28\\0\\0\\0\\0\\xaa\\x14\\0\\xa2\\x0f\\0\\0\\x01\\x0eLogin failed\\.\\n\\xfd\\x02\\0\\x02\\0\\0\\0\\0\\0$| p/Sybase Adaptive Server/ o/Windows/ cpe:/a:sybase:adaptive_server/ cpe:/o:microsoft:windows/a\nmatch sybase-monitor m|^\\x04\\x01\\0\\x1a\\0\\0\\0\\0\\xaa\\x01\\x0eLogin failed\\.\\n\\xfd$| p/Sybase Monitor Server/ o/Windows/ cpe:/a:sybase:monitor_server/ cpe:/o:microsoft:windows/a\n\nmatch zend-java-bridge m|^\\0\\0\\0\\x15\\x04\\0\\0\\0\\x10java\\.lang\\.String$|\n\n##############################NEXT PROBE##############################\n# BackOrifice PING message, no password. The probe is the encryption of\n# \"*!*QWTY?\\x13\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\". Servers with a password set will\n# not reply.\n# http://web.cip.com.br/flaviovs/boproto.html\nProbe UDP BackOrifice q|\\xCE\\x63\\xD1\\xD2\\x16\\xE7\\x13\\xCF\\x38\\xA5\\xA5\\x86\\xB2\\x75\\x4B\\x99\\xAA\\x32\\x58|\nports 31337\nrarity 9\n\n# Encryption of \"*!*QWTY?........\\x01  !PONG!1.20!\".\nmatch BackOrifice m|^\\xCE\\x63\\xD1\\xD2\\x16\\xE7\\x13\\xCF........\\x01\\x12\\x78\\xC4\\xE3\\xD6\\xA6\\x65\\x51\\x75\\x51\\xEB\\x2A\\x3F|s p/BackOrifice trojan/ v/1.20/ i/no password/ o/Windows/ cpe:/o:microsoft:windows/a\n\n##############################NEXT PROBE##############################\nProbe TCP gkrellm q|gkrellm 0.0.0|\nrarity 9\nports 19150\n\nmatch gkrellm m|^<gkrellmd_setup>\\n<version>\\ngkrellmd ([\\w._-]+)\\n| p/GKrellM System Monitor/ v/$1/\n\n##############################NEXT PROBE##############################\nProbe TCP metasploit-xmlrpc q|<?xml version=\"1.0\" ?><methodCall><methodName>nmap.probe</methodName></methodCall>\\n\\0|\nports 9390,55553\nsslports 55553\nrarity 9\nmatch metasploit-xmlrpc m|<\\?xml\\x20version=\\\"1\\.0\\\"\\x20\\?><methodResponse><fault><value><struct><member><name>faultCode</name><value><i4>-99</i4></value></member><member><name>faultString</name><value><string>Method\\x20nmap\\.probe\\x20missing\\x20or\\x20wrong\\x20number\\x20of\\x20parameters!</string></value></member></struct></value></fault></methodResponse>\\n\\0|\n\nmatch omp m|^<omp_response status=\\\"400\\\" status_text=\\\"First command must be AUTHENTICATE, COMMANDS or GET_VERSION\\\"/>| p/OpenVAS Management Protocol/ cpe:/a:openvas:openvas_manager/\n\n##############################NEXT PROBE##############################\n# MongoDB probe, this is a status request\n# See http://www.mongodb.org/display/DOCS/Mongo+Wire+Protocol for more details\nProbe TCP mongodb q|\\x41\\0\\0\\0\\x3a\\x30\\0\\0\\xff\\xff\\xff\\xff\\xd4\\x07\\0\\0\\0\\0\\0\\0test.$cmd\\0\\0\\0\\0\\0\\xff\\xff\\xff\\xff\\x1b\\0\\0\\0\\x01serverStatus\\0\\0\\0\\0\\0\\0\\0\\xf0\\x3f\\0|\nrarity 8\n# ports 9001 and 49153 supported by Shodan search for \"It looks like you are trying to access MongoDB\"\nports 9001,27017,49153\nmatch mongodb m|^.*version.....([\\.\\d]+)|s p/MongoDB/ v/$1/ cpe:/a:mongodb:mongodb:$1/\nmatch mongodb m|^\\xcb\\0\\0\\0....:0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\xa7\\0\\0\\0\\x01uptime\\0\\0\\0\\0\\0\\0 ${backquote}@\\x03globalLock\\09\\0\\0\\0\\x01totalTime\\0\\0\\0\\0\\x7c\\xf0\\x9a\\x9eA\\x01lockTime\\0\\0\\0\\0\\0\\0\\xac\\x9e@\\x01ratio\\0!\\xc6\\$G\\xeb\\x08\\xf0>\\0\\x03mem\\0<\\0\\0\\0\\x10resident\\0\\x03\\0\\0\\0\\x10virtual\\0\\xa2\\0\\0\\0\\x08supported\\0\\x01\\x12mapped\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01ok\\0\\0\\0\\0\\0\\0\\0\\xf0\\?\\0$|s p/MongoDB/ cpe:/a:mongodb:mongodb/\nmatch mongodb m|^.\\0\\0\\0....:0\\0\\0\\x01\\0\\0\\0\\x08\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\+\\0\\0\\0\\x02errmsg\\0\\x0e\\0\\0\\0need to login\\0\\x01ok\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|s p/MongoDB/ i/need to login/ cpe:/a:mongodb:mongodb/\nmatch mongodb m|^.\\0\\0\\0....:0\\0\\0\\x01\\0\\0\\0\\x08\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0.\\0\\0\\0\\x01ok\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x02errmsg\\0.\\0\\0\\0not authorized on (\\S+) to execute command \\{ serverStatus: 1\\.0 \\}\\0\\x10code\\0\\r\\0\\0\\0|s p/MongoDB/ i/not authorized; database: $1/ cpe:/a:mongodb:mongodb/\n\n##############################NEXT PROBE##############################\n# Sybase SQL Anywhere Ping Probe\nProbe UDP sybaseanywhere q|\\x1b\\0\\0\\x3d\\0\\0\\0\\0\\x12CONNECTIONLESS_TDS\\0\\0\\0\\x01\\0\\0\\x04\\0\\x05\\0\\x05\\0\\0\\x01\\x02\\0\\0\\x03\\x01\\x01\\x04\\x08\\0\\0\\0\\0\\0\\0\\0\\0\\x07\\x02\\x04\\xb1|\nrarity 7\nports 2638\nmatch sybaseanywhere m|^\\x1b\\0\\0.\\0\\0\\0\\0\\x12CONNECTIONLESS_TDS\\0\\0\\0\\x01\\x01\\0\\x04\\0\\x05\\0\\x05\\0.(.*)\\0\\x01\\x02..\\x03\\x01\\x02\\x04\\x08\\0\\0\\0\\0\\0\\0\\0\\0\\x07\\x02\\x04\\xb1|s p/Sybase SQL Anywhere/ i/Instance name: $1/ cpe:/a:sybase:sql_anywhere/\n\n##############################NEXT PROBE##############################\n# Vuze DHT PING probe\n# See http://wiki.vuze.com/w/Distributed_hash_table#PING\nProbe UDP vuze-dht q|\\xff\\xf0\\x97\\x0d\\x2e\\x60\\xd1\\x6f\\0\\0\\x04\\0\\0\\x55\\xab\\xec\\x32\\0\\0\\0\\0\\0\\x32\\x04\\x0a\\0\\xc8\\x75\\xf8\\x16\\0\\x5c\\xb9\\x65\\0\\0\\0\\0\\x4e\\xd1\\xf5\\x28|\nrarity 8\nports 17555,49152-49156\nmatch vuze-dht m|^\\0\\0\\x04\\x01\\0U\\xab\\xec\\xff\\xf0\\x97\\r\\.${backquote}\\xd1o..........|s p/Vuze/ cpe:/a:azureus:vuze/\n\n##############################NEXT PROBE##############################\n# PC-Anywhere probe\nProbe UDP pc-anywhere q|NQ|\nrarity 8\nports 5632\nmatch pc-anywhere m|^NR([^_]*)_*AHM_3___\\0$|s p/Symantec pcAnywhere/ i/Servername: $1/ cpe:/a:symantec:pcanywhere/\n\n##############################NEXT PROBE##############################\n# PC-DUO host probe\nProbe UDP pc-duo q|\\0\\x80\\x80\\x08\\xff\\0|\nrarity 8\nports 1505\nmatch pc-duo m|^.........(.*)\\0|s p/Vector PC-Duo/ i/Servername: $1/\n\n##############################NEXT PROBE##############################\n# PC-DUO Gateway probe\nProbe UDP pc-duo-gw q|\\x20\\x90\\x80\\x08\\xff\\0|\nrarity 8\nports 2303\nmatch pc-duo-gw m|^.........(.*)\\0|s p/Vector PC-Duo Gateway Server/ i/Servername: $1/\n\n##############################NEXT PROBE##############################\n# Redis key-value store\nProbe TCP redis-server q|*1\\r\\n$4\\r\\ninfo\\r\\n|\nrarity 8\nports 6379\nmatch redis m|-ERR operation not permitted\\r\\n|s p/Redis key-value store/ cpe:/a:redislabs:redis/\nmatch redis m|^\\$\\d+\\r\\n(?:#[^\\r\\n]*\\r\\n)*redis_version:([.\\d]+)\\r\\n|s p/Redis key-value store/ v/$1/ cpe:/a:redislabs:redis:$1/\n\n##############################NEXT PROBE##############################\n# Memcached distributed memory object caching system\nProbe UDP memcached q|\\0\\x01\\0\\0\\0\\x01\\0\\0stats\\r\\n|\nrarity 8\nports 11211\nmatch memcached m|^\\0\\x01\\0\\0\\0\\x01\\0\\0STAT pid \\d+\\r\\nSTAT uptime \\d+\\r\\nSTAT time \\d+\\r\\nSTAT version ([.\\d]+)\\r\\n|s p/Memcached/ v/$1/ cpe:/a:memcached:memcached:$1/\nmatch memcached m|^\\0\\x01\\0\\0\\0\\x01\\0\\0STAT pid \\d+\\r\\nSTAT uptime \\d+\\r\\nSTAT time \\d+\\r\\nSTAT version ([.\\d]+) \\(?Ubuntu\\)?\\r\\n|s p/Memcached/ v/$1/ i/Ubuntu/ o/Linux/ cpe:/a:memcached:memcached:$1/ cpe:/o:canonical:ubuntu_linux/ cpe:/o:linux:linux_kernel/a\n# May as well softmatch to avoid further probing\nsoftmatch memcached m|^\\0\\x01\\0\\0\\0\\x01\\0\\0STAT |\n\n##############################NEXT PROBE##############################\n# Sends a ServerInfo PBC request to the Basho Riak distributed database\nProbe TCP riak-pbc q|\\0\\0\\0\\x01\\x07|\nrarity 8\nports 8087\nmatch riak-pbc m|^....\\x08..(riak@[\\w._-]+)..([\\w._-]+)$|s p/Basho Riak/ v/$2/ h/$1/\n\n##############################NEXT PROBE##############################\n# Sends a ServerInfo PBC request to the Basho Riak distributed database\nProbe TCP tarantool q|show info\\r\\n|\nrarity 8\nports 9001,33015\nmatch tarantool m|---\\r\\ninfo:\\r\\n  version: \\\"([^\\\"]*)\\\"\\r\\n  uptime: (\\d*)\\r\\n  pid: (\\d*)\\r\\n  (?:[._\\w\\s]*: .*\\r\\n)*  config: \\\"([^\\\"]*)\\\"| p/Tarantool/ v/$1/ i/Uptime: $2, PID: $3, Config: $4/\n\nmatch haproxy-stats m|^Name: HAProxy\\nVersion: (\\d[\\w._~+-]*)\\n.*\\nUptime: (.+)\\n|s p/HAProxy stats socket/ v/$1/ i/uptime: $2/ cpe:/a:haproxy:haproxy:$1/\n\n##############################NEXT PROBE##############################\n# Sends a stats request to a Couchbase Membase server\nProbe TCP couchbase-data q|\\x80\\x10\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x15\\xf0\\xd1\\x62\\0\\0\\0\\0\\0\\0\\0\\0|\nrarity 8\nports 11210\nmatch couchbase-tap m|^\\x81\\x10..\\0\\0\\0\\0\\0\\0\\0.....\\0\\0\\0\\0\\0\\0\\0\\0ep_version([._\\w]+).*ep_dbname([_\\\\\\/\\w\\s:]+)|s p/Couchbase Membase/ v/$1/ i/DB name: $2/\nmatch couchbase-tap m|^\\x81\\x10..\\0\\0\\0\\0\\0\\0\\0.....\\0\\0\\0\\0\\0\\0\\0\\0ep_version([._\\w]+)|s p/Couchbase Membase/ v/$1/\n\n##############################NEXT PROBE##############################\n# Sends a Get all registered names probe to the EPMD daemon\nProbe TCP epmd q|\\0\\x01\\x6e|\nrarity 8\nports 4369\nmatch epmd m|^\\0\\0\\x11\\x11| p/Erlang Port Mapper Daemon/\n\n##############################NEXT PROBE##############################\n# Voldemort Native Protocol Version 3 connect probe\nProbe TCP vp3 q|vp3|\nrarity 8\nports 6666\nmatch vp3 m|^ok$| p/Voldemort/\n\n##############################NEXT PROBE##############################\n# Kumofs kumo-server version probe\nProbe TCP kumo-server q|\\x94\\0\\xcd\\xef\\xd1\\x61\\x91\\x03|\nrarity 8\nports 3333,19800,19700,59100\nmatch kumo-server m|^\\x94\\x01\\xcd\\xef\\xd1\\xc0\\xda\\0.([^\\s]+)|s p/Kumofs/ v/$1/\nmatch kumo-manager m|^\\x94\\x01\\xcd\\xef\\xd1\\x05\\xc0$| p/Kumofs/\n\nmatch dec-notes m|^\\x7c\\0\\0\\0\\x01\\0\\x1f\\x83\\x01\\x80\\x1f\\x86\\x013%NOTES-E-SRV_INVSEQ, invalid sequence of operations\\0\\0\\x1f\\x83\\x01\\x80\\x1f\\x86\\x013%NOTES-E-SRV_INVSEQ, invalid sequence of operations\\0\\0| p/DEC Notes/ o/VMS/\n\nmatch directfb m|^\\x1c\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\0\\0\\xd1a\\x91\\x03\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|\n\n# TODO: get more samples\nmatch rhpp m|^\\0\\0\\0\\x80\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xc0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x80j\\x81n0\\x81k\\xa1\\x03\\x02\\x01\\x05\\xa2\\x03\\x02\\x01\\n\\xa4\\x81\\^0\\\\\\xa0\\x07\\x03\\x05\\0P\\x80\\0\\x10\\xa2\\x04\\0\\x80\\xc8\\x10\\xa3\\x170\\x15\\xa0\\x03\\x02\\x01\\0\\xa1\\x0e0\\x0c\\x1b\\x06k\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x1f\\x1e\\xb9\\xd9\\xa8\\x170\\x15\\x02\\x01\\x12\\x02\\x01\\x11\\x02\\x01\\x10\\x02\\x01\\x17\\x02\\x01\\x01\\x02\\x03\\x01\\xff\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Ricoh Reliability Host Printing Protocol/ d/printer/\n\nmatch upnp m|^HTTP/0\\.0 \\d\\d\\d (?:[^\\r\\n]*\\r\\n(?!\\r\\n))*?SERVER: Linux/([-+\\w_.]+), UPnP/([\\d.]+), Intel SDK for UPnP devices ?/([\\w._~-]+)\\r\\n|s p/Intel UPnP reference SDK/ v/$3/ i/Linux $1; UPnP $2/ o/Linux/ cpe:/o:linux:linux_kernel:$1/\n\n##############################NEXT PROBE##############################\n# Metasploit msgpack-based RPC. https://community.rapid7.com/docs/DOC-1516\nProbe TCP metasploit-msgrpc q|GET /api HTTP/1.0\\r\\n\\r\\n|\nrarity 9\n# http://seclists.org/nmap-dev/2012/q2/971\nports 50505,55552\nsslports 3790\nmatch metasploit-msgrpc m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: binary/message-pack\\r\\nConnection: close\\r\\nServer: Rex\\r\\nContent-Length: 1084\\r\\n\\r\\n\\x85\\xa5error\\xc3\\xaberror_class\\xadArgumentError\\xacerror_string\\xbdInvalid Request Verb: '\\\"GET\\\"'\\xaferror_backtrace\\xdc\\x00\\x12\\xda\\x000lib/msf/core/rpc/v10/service\\.rb:107:in ${backquote}process'\\xda\\x006lib/msf/core/rpc/v10/service\\.rb:88:in ${backquote}on_request_uri'\\xda\\x006lib/msf/core/rpc/v10/service\\.rb:70:in ${backquote}block in start'\\xda\\x00/lib/rex/proto/http/handler/proc\\.rb:37:in ${backquote}call'\\xda\\x005lib/rex/proto/http/handler/proc\\.rb:37:in ${backquote}on_request'\\xda\\x00| p/Metasploit Remote API/ v/4.4.0-dev/\n\n##############################NEXT PROBE##############################\n# svrloc\nProbe UDP svrloc q|\\x02\\x01\\x00\\x006 \\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x02en\\x00\\x00\\x00\\x15service:service-agent\\x00\\x07default\\x00\\x00\\x00\\x00|\nrarity 8\nports 427\nmatch svrloc m|^\\x02\\x0b| p/Service Location Protocol/ v/2/\n\n##############################NEXT PROBE##############################\n# Hazelcast In-Memory Data Grid >= 1.9-RC http://www.hazelcast.com/\n# http://seclists.org/nmap-dev/2013/q2/7\nProbe TCP hazelcast-http q|GET /hazelcast/rest/cluster HTTP/1.0\\r\\n\\r\\n\\r\\n|\nrarity 9\nports 5701-5709\n# Sample:\n# |HTTP/1\\.1 200 OK\\r\\nContent-Length: 114\\r\\n\\r\\nCluster \\[2\\] {\\n\\tMember \\[127\\.0\\.0\\.1\\]:5701 this\\n\\tMember \\[127\\.0\\.0\\.1\\]:5702\\n}\\n\\nConnectionCount: 1\\nAllConnectionCount: 95\\n\\r\\n|\nmatch hazelcast m|^HTTP/1\\.1 200 OK\\r\\nContent-Length: \\d+\\r\\n\\r\\nCluster \\[\\d+\\] {\\n\\tMember (.*?)}\\n\\nConnectionCount: (\\d+)\\nAllConnectionCount: (\\d+)\\n\\r\\n$|s p/Hazelcast/ i/ConnectionCount $2; AllConnectionCount $3; $SUBST(1,\"\\n\\tMember\",\",\")/ cpe:/a:hazelcast:hazelcast/\n\n\n##############################NEXT PROBE##############################\n# Minecraft Server List Ping http://mc.kev009.com/Server_List_Ping\nProbe TCP minecraft-ping q|\\xFE\\x01|\nrarity 8\nports 25565\n\n# Fields are Protocol version, Software version, motd, current player count, max players\nmatch minecraft m|^\\xff\\x00.\\x00\\xa7\\x00\\x31\\x00\\x00(.+?)\\x00\\x00(.+?)\\x00\\x00(.+?)\\x00\\x00(.+?)\\x00\\x00(.+)|s p/Minecraft/ v/$P(2)/ i|Protocol: $P(1), Message: $P(3), Users: $P(4)/$P(5)|\n\nmatch minecraft-classic m|^\\x01\\x01\\x0eUnhandled message id \"254\"! {37}| p/MCGalaxy Minecraft server/\n\n##############################NEXT PROBE##############################\n# Sends a distribution handshake to an Erlang Distribution Node.\n# send_name request of protocol version 0, with only capability flags\n# DFLAG_EXTENDED_REFERENCES and DFLAG_EXTENDED_PIDS_PORTS, and with a node name\n# of \"nm@p\"\n# http://erlang.org/doc/apps/erts/erl_dist_protocol.html#id90729\n# http://seclists.org/nmap-dev/2013/q1/360\nProbe TCP erlang-node q|\\0\\x0bn\\0\\0\\0\\0\\x01\\x04nm@p|\nrarity 9\n\nmatch erlang-node m|^\\0\\x03sok\\0.n\\0\\0.{8}(.+).|s p/Erlang Distribution Node/ i/Node name: $1/\nmatch erlang-node m|^\\0[^\\x03]s(.+)|s p/Erlang Distribution Node/ i/Status: $1/\n\n\n##############################NEXT PROBE##############################\n# UDP ping. \"abcdefgh\" is an identifier. See\n# http://mumble.sourceforge.net/Protocol.\n# http://seclists.org/nmap-dev/2013/q2/413\nProbe UDP Murmur q|\\0\\0\\0\\0abcdefgh|\nrarity 9\nports 64738\n\nmatch murmur m|^\\0...abcdefgh............$|s p/Murmur/ v/1.2.X/\n\n\n##############################NEXT PROBE##############################\n# Ventrilo 2.1.2+\n# UDP general status request (encrypted).\n# See http://aluigi.altervista.org/papers.htm#ventrilo\n# http://seclists.org/nmap-dev/2013/q2/413\nProbe UDP Ventrilo q|\\x01\\xe7\\xe5\\x75\\x31\\xa3\\x17\\x0b\\x21\\xcf\\xbf\\x2b\\x99\\x4e\\xdd\\x19\\xac\\xde\\x08\\x5f\\x8b\\x24\\x0a\\x11\\x19\\xb6\\x73\\x6f\\xad\\x28\\x13\\xd2\\x0a\\xb9\\x12\\x75|\nrarity 9\nports 3784\n\nmatch ventrilo m|^.{111}|s p/Ventrilo/ v/2.1.2+/\n\n\n##############################NEXT PROBE##############################\n# TeamSpeak 2 TCPQuery \"ver\" command.\n# http://seclists.org/nmap-dev/2013/q2/413\nProbe TCP teamspeak-tcpquery-ver q|ver\\r\\n|\nrarity 9\nports 51234,9998\n\nmatch teamspeak-tcpquery m|^\\[TS\\]\\r\\n([\\w._-]+) Win32 ([\\w._-]+)\\r\\nOK\\r\\n$| p/TeamSpeak 2 TCPQuery/ v/$1/ i/$2/ o/Windows/ cpe:/a:teamspeak:teamspeak2:$1/ cpe:/o:microsoft:windows/a\nmatch teamspeak-tcpquery m|^\\[TS\\]\\r\\n([\\w._-]+) Linux ([\\w._-]+)\\r\\nOK\\r\\n$| p/TeamSpeak 2 TCPQuery/ v/$1/ i/$2/ o/Linux/ cpe:/a:teamspeak:teamspeak2:$1/ cpe:/o:linux:linux_kernel/a\n\nmatch uptime-agent m|^up.time agent ([\\d.]+) \\(build (\\d+)\\) linux\\n| p/Idera Uptime Infrastructure Monitor/ v/$1/ i/build $2/ o/Linux/ cpe:/a:idera:uptime_infrastructure_monitor:$1/ cpe:/o:linux:linux_kernel/a\nmatch uptime-agent m|^up.time agent ([\\d.]+) \\(build (\\d+)\\) ([\\w._-]+)\\n| p/Idera Uptime Infrastructure Monitor/ v/$1/ i/build $2/ o/$3/ cpe:/a:idera:uptime_infrastructure_monitor:$1/\n\n##############################NEXT PROBE##############################\n# Login request.\n# See http://wiki.wireshark.org/TeamSpeak2\n# http://seclists.org/nmap-dev/2013/q2/413\nProbe UDP TeamSpeak2 q|\\xf4\\xbe\\x03\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x32\\x78\\xba\\x85\\x09\\x54\\x65\\x61\\x6d\\x53\\x70\\x65\\x61\\x6b\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x0a\\x57\\x69\\x6e\\x64\\x6f\\x77\\x73\\x20\\x58\\x50\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x20\\x00\\x3c\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x08\\x6e\\x69\\x63\\x6b\\x6e\\x61\\x6d\\x65\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00|\nrarity 9\nports 8767\n\n# Offset  Type   Value                  Comment\n# 0-1     uint16 0xBEF4                 Class: connection\n# 2-3     uint16 0x0004                 Type: login reply\n# 4-7     uint32 0                      Session key; zero on first reply\n# 8-11    uint32 client id\n# 12-15   uint32 2                      Sequence number; 2 on first reply\n# 16-19   uint32 some crc32 checksum\n# 20      uint8  server name length\n# 21-49   string server name\n# 50      uint8  platform length\n# 51-79   string platform\n# 80-81   uint16 1. version             E.g. the \"2\" in \"2.0.23.19\"\n# 82-83   uint16 2. version             E.g. the \"0\" in \"2.0.23.19\"\n# 84-85   uint16 3. version             E.g. the \"23\" in \"2.0.23.19\"\n# 86-87   uint16 4. version             E.g. the \"19\" in \"2.0.23.19\"\n# 88-179  bytes  unknown\n# 180     uint8  welcome message length\n# 181-435 string welcome message\n\nmatch teamspeak2 m|^\\xf4\\xbe\\x04\\x00\\x00\\x00\\x00\\x00....\\x02\\x00\\x00\\x00.....([^\\0]+)\\0*.Win32\\0*\\x02\\x00\\x00\\x00\\x17\\x00\\x13\\x00|s p/TeamSpeak 2/ v/2.0.23.19/ i/name: $1; no password/ o/Windows/ cpe:/a:teamspeak:teamspeak2:2.0.23.19/ cpe:/o:microsoft:windows/\nmatch teamspeak2 m|^\\xf4\\xbe\\x04\\x00\\x00\\x00\\x00\\x00....\\x02\\x00\\x00\\x00.....([^\\0]+)\\0*.Linux\\0*\\x02\\x00\\x00\\x00\\x17\\x00\\x13\\x00|s p/TeamSpeak 2/ v/2.0.23.19/ i/name: $1; no password/ o/Linux/ cpe:/a:teamspeak:teamspeak2:2.0.23.19/ cpe:/o:linux:linux_kernel/\nmatch teamspeak2 m|^\\xf4\\xbe\\x04\\x00\\x00\\x00\\x00\\x00....\\x02\\x00\\x00\\x00....\\0{60}.{356}$|s p/TeamSpeak 2/ cpe:/a:teamspeak:teamspeak2/\n\n\n##############################NEXT PROBE##############################\n# UDP login request (encrypted)\n# http://seclists.org/nmap-dev/2013/q3/72\nProbe UDP TeamSpeak3 q|\\x05\\xca\\x7f\\x16\\x9c\\x11\\xf9\\x89\\x00\\x00\\x00\\x00\\x02\\x9d\\x74\\x8b\\x45\\xaa\\x7b\\xef\\xb9\\x9e\\xfe\\xad\\x08\\x19\\xba\\xcf\\x41\\xe0\\x16\\xa2\\x32\\x6c\\xf3\\xcf\\xf4\\x8e\\x3c\\x44\\x83\\xc8\\x8d\\x51\\x45\\x6f\\x90\\x95\\x23\\x3e\\x00\\x97\\x2b\\x1c\\x71\\xb2\\x4e\\xc0\\x61\\xf1\\xd7\\x6f\\xc5\\x7e\\xf6\\x48\\x52\\xbf\\x82\\x6a\\xa2\\x3b\\x65\\xaa\\x18\\x7a\\x17\\x38\\xc3\\x81\\x27\\xc3\\x47\\xfc\\xa7\\x35\\xba\\xfc\\x0f\\x9d\\x9d\\x72\\x24\\x9d\\xfc\\x02\\x17\\x6d\\x6b\\xb1\\x2d\\x72\\xc6\\xe3\\x17\\x1c\\x95\\xd9\\x69\\x99\\x57\\xce\\xdd\\xdf\\x05\\xdc\\x03\\x94\\x56\\x04\\x3a\\x14\\xe5\\xad\\x9a\\x2b\\x14\\x30\\x3a\\x23\\xa3\\x25\\xad\\xe8\\xe6\\x39\\x8a\\x85\\x2a\\xc6\\xdf\\xe5\\x5d\\x2d\\xa0\\x2f\\x5d\\x9c\\xd7\\x2b\\x24\\xfb\\xb0\\x9c\\xc2\\xba\\x89\\xb4\\x1b\\x17\\xa2\\xb6|\nrarity 9\nports 9987\n\n# These are the bytes in common, but a lot of the bytes are close in value\n# #match ts3 m|^........\\x00\\x00\\x02......\\xef.....\\x19|s p/TeamSpeak 3 server/\nmatch ts3 m|^........\\x00\\x00\\x02\\x97\\x76\\x8b\\x54\\xad\\x79\\xe3\\xaf\\x87\\xeb\\xaa\\x1a\\x19\\xba\\xcf\\x41\\xe0\\x16\\xa2\\x32\\x6c\\xf3\\xcf\\xf4\\x8e\\x3c\\x44\\x83\\xc8\\x8d\\x51\\x45\\x6f\\x90\\x95\\x23\\x33\\x08\\x86\\x2d\\x40|s p/TeamSpeak 3 server/ cpe:/a:teamspeak:teamspeak3/\nmatch ts3 m|^........\\x00\\x00\\x02\\x9bj\\x90O\\xb6/\\xef\\xb3\\xca\\xbf\\xf6L\\x19\\xb6\\xd0V\\xb5\\x14\\xf33Y\\xdc\\xd4\\xf8\\xcd\\x12n\\xc2\\xcb\\x8c\\x15\\x19T\\xde\\xc7v%\\t\\x938\\x18\\(\\xd3W\\xc4U\\xdc\\xd5m\\xf7Z\\xcd~@\\x8e\\x8fN\\x97h|s p/TeamSpeak 3 server/ cpe:/a:teamspeak:teamspeak3/\n\n##############################NEXT PROBE##############################\n# xmlsysd info request\n# http://www.phy.duke.edu/~rgb/brahma/Resources/xmlsysd.php\nProbe TCP xmlsysd q|init\\noff all\\non identity version\\nsend\\nquit\\n|\nrarity 9\nports 7887\n\nmatch xmlsysd m|^Content-Length: [0-9]+\\n\\n<\\?xml version=\\\"1\\.0\\\"\\?>\\s*<xmlsysd init=\\\"1\\\">\\s*<system>\\s*<identity>\\s*<hostname>([^<]*)</hostname>\\s*<hostip>([^<]*)</hostip>\\s*</identity>\\s*</system>\\s*<proc>\\s*<version>([^<]*)</version>\\s*</proc>\\s*</xmlsysd>|s p/xmlsysd daemon/ i/IP: $2/ o/$3/ h/$1/ cpe:/a:wulfware:xmlsysd/\n\n##############################NEXT PROBE##############################\n# Freelancer game server status query\n# http://sourceforge.net/projects/gameq/\n# (relevant files: games.ini, packets.ini, freelancer.php)\nProbe UDP FreelancerStatus q|\\x00\\x02\\xf1\\x26\\x01\\x26\\xf0\\x90\\xa6\\xf0\\x26\\x57\\x4e\\xac\\xa0\\xec\\xf8\\x68\\xe4\\x8d\\x21|\nrarity 9\nports 2302\n\nmatch freelancer m|^\\x00\\x03\\xf1\\x26.{88}(.*)\\0\\0(?:.*?:){5}(.*)\\0\\0$|s p/Freelancer/ i/name: $P(1); description: $P(2)/\n\n# All-Seeing Eye service provided by some game servers for querying\n# the server's status\n# For more info on the protocol see:\n# http://int64.org/docs/gamestat-protocols/ase.html\n# http://aluigi.altervista.org/papers.htm#ase\n# http://sourceforge.net/projects/gameq/\n# (relevant files: games.ini, packets.ini, ase.php)\nProbe UDP ASE q|s|\nrarity 9\nports 1258,2126,3123,12444,13200,23196,26000,27138,27244,27777,28138\n\nmatch allseeingeye m=^EYE1.(.*?)(\\x02\\d|\\x03\\d{2}|\\x04\\d{3}|\\x05\\d{4}|\\x06\\d{5})=s p/All-Seeing Eye/ i/game: $1; port: $P(2)/\n\n##############################NEXT PROBE##############################\nProbe UDP AndroMouse q|AMSNIFF|\nrarity 9\nports 8888\n\nmatch AndroMouse m|^GOTBACK$|s p/AndroMouse Android remote mouse server/\n\n##############################NEXT PROBE##############################\nProbe UDP AirHID q|from:airhid|\nrarity 9\nports 13246\n\nmatch AirHID m|^andReceiver-\\d+\\.\\d+\\.\\d+$|s p/AirHID Andrioid remote mouse server/\n\n##############################NEXT PROBE##############################\nProbe UDP NetMotionMobility q|\\0\\x40\\x50\\0\\0\\0\\0\\x85\\x5d\\xb4\\x91\\x28\\0\\0\\0\\0\\0\\x01\\x7c\\x91\\x40\\0\\0\\0\\xaa\\x39\\xda\\x42\\x37\\x65\\xcf\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0|\nrarity 7\nports 5008\nmatch NetMotionMobility m|^\\0\\x40\\x51\\0\\0\\0\\0| p/NetMotion Mobility VPN/\n\n##############################NEXT PROBE##############################\n# Queries Docker APIs for the /version url containing version information.\n# https://docs.docker.com/reference/api/docker_remote_api/\n#\nProbe TCP docker q|GET /version HTTP/1.1\\r\\n\\r\\n|\nrarity 8\nports 2375,2379,2380\nsslports 2376\n\nmatch docker m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/json\\r\\nJob-Name: version\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\n\\r\\n{.*\\\"ApiVersion\\\":\\\"([^\"]+)\\\",.*\\\"KernelVersion\\\":\\\"([^\"]+)\\\",.*\\\"Os\\\":\\\"([^\"]+)\\\",.*\\\"Version\\\":\\\"([^\"]+)\\\"| p/Docker remote API/ v/$4/ i/API $1; KernelVersion $2/ o/$3/ cpe:/a:docker:docker:$4/\n# Ordering doesn't matter, we'd like to at least grab ApiVersion and Version\nmatch docker m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/json\\r\\nJob-Name: version\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\n\\r\\n{.*\\\"ApiVersion\\\":\\\"([^\"]+)\\\",.*\\\"Version\\\":\\\"([^\"]+)\\\"| p/Docker remote API/ v/$2/ i/API $1/ cpe:/a:docker:docker:$2/\nmatch docker m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/json\\r\\nJob-Name: version\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\n\\r\\n{.*\\\"Version\\\":\\\"([^\"]+)\\\",.*\\\"ApiVersion\\\":\\\"([^\"]+)\\\"| p/Docker remote API/ v/$1/ i/API $2/ cpe:/a:docker:docker:$1/\n# Similar to above, but without the Job-Name header.\nmatch docker m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/json\\r\\nServer: Docker.*\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\n\\r\\n{.*\\\"Version\\\":\\\"([^\"]+)\\\",.*\\\"ApiVersion\\\":\\\"([^\"]+)\\\",.*\\\"Os\\\":\\\"([^\"]+)\\\",.*\\\"KernelVersion\\\":\\\"([^\"]+)\\\"| p/Docker remote API/ v/$1/ i/API $2; KernelVersion $4/ o/$3/ cpe:/a:docker:docker:$1/\nmatch docker m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/json\\r\\nServer: Docker.*\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\n\\r\\n{.*\\\"Version\\\":\\\"([^\"]+)\\\",.*\\\"ApiVersion\\\":\\\"([^\"]+)\\\"| p/Docker remote API/ v/$1/ i/API $2/ cpe:/a:docker:docker:$1/\n\n# API spec only lists Version, GoVersion, ApiVersion (in API >= 1.12), and GitCommit.\n# Assuming the above matches will get ApiVersion if it's present, this one can report ApiVersion <= 1.11\nmatch docker m|^HTTP/1\\.1 200 OK\\r\\nContent-Type: application/json\\r\\nJob-Name: version\\r\\nDate: .*\\r\\nContent-Length: \\d+\\r\\n\\r\\n{.*\\\"Version\\\":\\\"([^\"]+)\\\"| p/Docker remote API/ v/$1/ i/API 1.11 or older/ cpe:/a:docker:docker:$1/\n\n\n##############################NEXT PROBE##############################\n# VERSIONS cell indicating support for protocol versions 3, 4, 5, and 6.\n# https://spec.torproject.org/torspec (see sections 3 and 4.1)\n# Version 6 doesn't exist as of 2018, but send it in the hope of\n# catching a future change.\n# Structure is:\n#   CircID       2 bytes\n#   Command (7)  1 byte\n#   Length       2 bytes\n#   array of 2-byte version numbers\n# We can't detect protocol versions 1 and 2, because those require you to\n# do the SSL handshake in a particular way (version 1 requires you to use\n# specific ciphersuites and send a client certificate (\"the v1 handshake\")\n# and version 2 requires a renegotiation after the initial handshake (\"the\n# v2 handshake\")).\nProbe TCP tor-versions q|\\x00\\x00\\x07\\x00\\x08\\x00\\x03\\x00\\x04\\x00\\x05\\x00\\x06|\nrarity 8\nsslports 443,9001,9002\n\n# Since 0.3.1.1-alpha - 2017-05-22\n# https://gitweb.torproject.org/tor.git/tree/ChangeLog: \"adds some\n# basic padding to resist netflow-based traffic analysis\"\n# https://bugs.torproject.org/16861\n# https://gitweb.torproject.org/torspec.git/tree/proposals/251-netflow-padding.txt\n# https://gitweb.torproject.org/torspec.git/tree/proposals/254-padding-negotiation.txt\nmatch tor-orport m|^\\x00\\x00\\x07\\x00\\x06\\x00\\x03\\x00\\x04\\x00\\x05| p/Tor/ v/0.3.1.1 or later/ i/supported protocol versions: 3, 4, 5/ cpe:/a:torproject:tor/\n\n# Since 0.2.4.11-alpha - 2013-03-11.\n# https://gitweb.torproject.org/tor.git/tree/ChangeLog: \"Support a new version\n# of the link protocol that allows 4-byte circuit IDs.\"\n# https://bugs.torproject.org/7351\n# https://gitweb.torproject.org/torspec.git/tree/proposals/214-longer-circids.txt\nmatch tor-orport m|^\\x00\\x00\\x07\\x00\\x04\\x00\\x03\\x00\\x04| p/Tor/ v/0.2.4.11 - 0.3.1.1/ i/supported protocol versions: 3, 4/ cpe:/a:torproject:tor/\n\n# 0.2.3.6-alpha - 2011-10-26\n# https://gitweb.torproject.org/tor.git/tree/ChangeLog: \"This release also\n# features support for a new v3 connection handshake protocol...\"\n#\n# Also matches this independent JavaScript implementation: https://github.com/Ayms/node-Tor\n# You can distinguish node-Tor from mainstream tor because it sends a response\n# with version 3 even if you indicate client support for only versions 1 and 2.\n# But that requires sending another version probe.\nmatch tor-orport m|^\\x00\\x00\\x07\\x00\\x02\\x00\\x03| p/Tor/ v/0.2.3.7 - 0.2.4.11/ i/supported protocol versions: 3/\n\n# An independent implementation that \"only returns the highest\n# understood version matching what the server supports, instead of a\n# list of all supported versions.\"\n# https://github.com/tvdw/gotor\n# https://lists.torproject.org/pipermail/tor-dev/2015-January/008135.html\nmatch tor-orport m|^\\x00\\x00\\x07\\x00\\x02\\x00\\x04| p/GoTor/ i/supported protocol versions: 4/\n\n##############################NEXT PROBE##############################\n# TLS with Pre-Shared Key handshake, generated by NSE's tls.lua\n# SSL services that only support PSK will not respond to other probes.\n# http://seclists.org/nmap-dev/2015/q2/47\nProbe TCP TLS-PSK q|\\x16\\x03\\x00\\x00u\\x01\\x00\\x00q\\x03\\x03U8*bETXSJDSZNHMDFAONDKJXXZYZHWHR\\x00\\x000\\x00\\x8a\\x00\\x8b\\x00\\x8c\\x00\\x8d\\x00\\x8e\\x00\\x8f\\x00\\x90\\x00\\x91\\x00\\x92\\x00\\x93\\x00\\x94\\x00\\x95\\x00\\xa8\\x00\\xa9\\x00\\xaa\\x00\\xab\\x00\\xac\\x00\\xad\\x00\\xae\\x00\\xaf\\x00\\xb2\\x00\\xb3\\x00\\xb6\\x00\\xb7\\x01\\x00\\x00\\x18\\x00\\r\\x00\\x14\\x00\\x12\\x00\\x01\\x00\\x02\\x00\\x03\\x01\\x01\\x01\\x02\\x01\\x03\\x02\\x01\\x02\\x02\\x02\\x03|\nrarity 9\nports 27036\n\nmatch ssl/steam m|^\\x16\\x03\\x03\\0.\\x02\\0\\0.\\x03\\x03.*\\x16\\x03\\x03\\0\\x0b\\x0c\\0\\0\\x07\\0\\x05steam|s p/Valve Steam In-Home Streaming service/ i/TLSv1.2 PSK/\n\nmatch ssl m=^\\x16\\x03[\\0-\\x03]..\\x02\\0\\0.\\x03[\\0-\\x03].*\\x16\\x03[\\0-\\x03]\\0.\\x0c.....(.+?)(?:\\x16\\x03[\\0-\\x03]|$)=s p/TLS PSK/ i/PSK identity hint: $P(1)/\n\n# SSLv3 - TLSv1.3 Alert\nmatch ssl m|^\\x15\\x03[\\0-\\x04]\\0\\x02[\\x01\\x02].$|s\n\n##############################NEXT PROBE##############################\n# Queries z/OS Network Job Entry\n# Sends an NJE Probe with the following information (text is converted to EBCDIC):\n# TYPE        = OPEN\n# OHOST       = FAKE\n# RHOST       = FAKE\n# RIP and OIP = 0.0.0.0\n# R           = 0\n# Based on http://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.hasa600/init.htm\nProbe TCP NJE q|\\xd6\\xd7\\xc5\\xd5@@@@\\xc6\\xc1\\xd2\\xc5@@@@\\0\\0\\0\\0\\xc6\\xc1\\xd2\\xc5@@@@\\0\\0\\0\\0\\0|\nrarity 9\nports 175\nsslports 2252\n# If the port supports NJE it will respond with either a 'NAK' or 'ACK' in EBCDIC\nmatch nje m|^\\xd5\\xc1\\xd2| p/IBM Network Job Entry (JES)/\nmatch nje m|^\\xc1\\xc3\\xd2| p/IBM Network Job Entry (JES)/\n\n##############################NEXT PROBE##############################\n# Detects TN3270 Servers which send IAC DO TTYPE on initial connection\n# instead of IAC DO TN3270E\nProbe TCP tn3270 q|\\xff\\xfb\\x18\\xff\\xfa\\x18\\x00IBM-3279-4-E\\xff\\xf0\\xff\\xfb\\x19\\xff\\xfd\\x19\\xff\\xfb\\0\\xff\\xfd\\0|\nrarity 8\nports 23,2323,2023,623\nsslports 992\n\n# IAC DO TERMINAL TYPE, IAC SB TERMINAL TYPE SEND SE, .*, IAC DO EOR\nmatch tn3270 m|^\\xff\\xfd\\x18\\xff\\xfa\\x18\\x01\\xff\\xf0.*?\\xff\\xfd\\x19| p/IBM Telnet TN3270/ i/traditional tn3270/\n\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\r\\n\\r\\nSunOS UNIX \\(([^)]+)\\)\\r\\n\\r\\0\\r\\n\\r\\0login: | p/SunOS telnetd/ o/SunOS/ h/$1/ cpe:/o:sun:sunos/a\nmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01\\r\\n\\r\\nUltrix(?:-32)? V([\\d.]+) \\(Rev\\.? (\\d+)\\) \\(([^)]+)\\)\\r\\n\\r\\r\\n\\rlogin: |i p/Ultrix telnetd/ o/Ultrix $1/ h/$3/ cpe:/o:dec:ultrix:$1:$2/\nmatch telnet m|^\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfa\\x18\\x01\\xff\\xf0\\x1b\\[;H\\x1b\\[2JTERM=ibm-3279-4-e\\r\\n         C{10}      hh       YYYY      YYYY {13}\\r\\n| p/ChiYu HandPunch attendance software telnetd/ cpe:/a:chiyu:handpunch/\n\n# Softmatch because we can get way more specific with most of these.\nsoftmatch telnet m|^\\xff\\xfd\\x18\\xff\\xfa\\x18\\x01\\xff\\xf0\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x01| p/2.11BSD-derived telnetd/ o/Unix/\n\n##############################NEXT PROBE##############################\n# CORBA GIOP (General Inter-ORB Protocol)\n# GIOP Header:\n# - Magic: GIOP\n# - Version: 1.0 (\\x01\\x00)\n# - Msge type: Request (\\x00)\n# - Msg size: 36 ($\\x00\\x00\\x00 i.e \\x24\\x00\\x00\\x00)\n# Request Data:\n# - ServiceContextList (\\x00\\x00\\x00\\x00)\n# - Request Id: 1 (\\x01\\x00\\x00\\x00)\n# - Response expected: 1 (\\x01)\n# - Object key Length: 6 (\\x06x\\00\\x00\\x00)\n# - Object Key: 616263646566\n# - Operation length : 4 (\\x04\\x00\\x00\\x00)\n# - Req Operation: get (i.e \\x67\\x65\\x74\\x00)\n# - Requesting Principal Length: 0 (\\x00\\x00\\x00\\x00)\nProbe TCP giop q|GIOP\\x01\\x00\\x01\\x00$\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x06\\x00\\x00\\x00abcdef\\x00\\x00\\x04\\x00\\x00\\x00get\\x00\\x00\\x00\\x00\\x00|\n# rarity 7 because it has been observed on non-standard ports\nrarity 7\nports 2481\nsslports 2482\n\n# Filemaker Pro Advanced 11\nmatch giop m|^GIOP\\x01\\0\\x01\\x01@\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x02\\0\\0\\0'\\0\\0\\0IDL:omg\\.org/CORBA/OBJECT_NOT_EXIST:1\\.0\\0| p/omg.org CORBA naming service/\n# Mitel networks IIOP\nmatch giop m|^GIOP\\x01\\0\\0\\x01\\0\\0\\0@\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\x02\\0\\0\\0'IDL:omg\\.org/CORBA/OBJECT_NOT_EXIST:1\\.0\\0\\0OM\\0\\x02\\0\\0\\0\\x01| p/omg.org CORBA naming service/\nsoftmatch giop m|^GIOP\\x01\\x00\\x01\\x01........\\x01\\x00\\x00\\x00|\nsoftmatch giop m|^GIOP.*IDL:omg\\.org|s\n\nmatch iscsi m|^#\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0| p/Synology DSM iSCSI/\n\n##############################NEXT PROBE##############################\n# P_CONTROL_HARD_RESET_CLIENT_V2\nProbe TCP OpenVPN q|\\0\\x0e87\\xa5&\\x08\\xa2\\x1b\\xa0\\xb1\\0\\0\\0\\0\\0|\nports 1194,443,500\nrarity 9\nmatch openvpn m|^\\0\\x1a@........\\x01\\0\\0\\0\\x007\\xa5&\\x08\\xa2\\x1b\\xa0\\xb1\\0\\0\\0\\0$| p/OpenVPN/\n# No version info submitted; update to hard match when it's available\nsoftmatch openvpn m|^\\0\\x1e@........\\x02\\0\\0\\0\\0\\0\\0\\0\\x007\\xa5&\\x08\\xa2\\x1b\\xa0\\xb1\\0\\0\\0\\0\\0\\x0e@........\\0\\0\\0\\0\\0|\n\n\n##############################NEXT PROBE##############################\n# P_CONTROL_HARD_RESET_CLIENT_V2\nProbe UDP OpenVPN q|8d\\xc1x\\x01\\xb8\\x9b\\xcb\\x8f\\0\\0\\0\\0\\0|\nports 1194,443,500\nrarity 9\nmatch openvpn m|^@........\\x01\\0\\0\\0\\0d\\xc1x\\x01\\xb8\\x9b\\xcb\\x8f\\0\\0\\0\\0|s p/OpenVPN/\n# INVALID-MAJOR-VERSION\nsoftmatch isakmp m|^................\\x0b\\x10\\x05\\0\\0\\0\\0\\0\\0\\0\\0\\(\\0\\0\\0\\x0c\\0\\0\\0\\x01\\x01\\0\\0\\x05|\n\n##############################NEXT PROBE##############################\n# Phoenix Contact PCWorx\nProbe TCP pcworx q|\\x01\\x01\\x00\\x1a\\x00\\x00\\x00\\x00x\\x80\\x00\\x03\\x00\\x0cIBETH01N0_M\\x00|\nrarity 9\nports 1962\n\nmatch pcworx m|\\x81\\x01\\0\\x14\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\x02\\0\\0\\0.\\0\\0| p/Phoenix Contact PCWorx/\n\n##############################NEXT PROBE##############################\n# ProConOs protocol\nProbe TCP proconos q|\\xcc\\x01\\x00\\x0b\\x40\\x02\\x00\\x00\\x47\\xee|\nrarity 9\nports 20547\n\nmatch proconos m|^\\xcc\\x01...\\x02\\x92\\0V\\d+\\.\\d+ProConOS V([\\d.]+) \\w\\w\\w +\\d+ \\d+\\0+\\0([^\\0]+)\\0+([^\\0]+)\\0+([^\\0]+)\\0+([^\\0]+)\\0|s p/ProConOS/ v/$1/ i|PLC: $2; project: $3/$4; source: $5|\nmatch echo m|^\\xcc\\x01\\0\\x0b@\\x02\\0\\0G\\xee|\n\n##############################NEXT PROBE##############################\n# Tridium Niagara Fox\nProbe TCP niagara-fox q|fox a 1 -1 fox hello\\n{\\nfox.version=s:1.0\\nid=i:1\\n};;\\n|\nrarity 9\nports 1911\nsslports 4911\n\nmatch niagara-fox m|^fox a 0 -1 fox hello\\n\\{\\nfox\\.version=s:([\\d.]+)\\nid=i:\\d+.*\\napp\\.name=s:Station\\napp\\.version=s:([\\d.]+)\\n|s p/Tridium Niagara/ v/$2/ i/fox version $1/ cpe:/a:tridium:niagara:$2/\nsoftmatch niagara-fox m|^fox a 0|\n\n##############################NEXT PROBE##############################\n# MQTT v3.1.1 CONNECT\nProbe TCP mqtt q|\\x10\\x10\\x00\\x04MQTT\\x04\\x02\\x00\\x1e\\x00\\x04nmap|\nrarity 9\nports 1883\nsslports 8883\n\nmatch mqtt m|^\\x20\\x02\\x00.$|\n\n##############################NEXT PROBE##############################\n# RMCP Get Channel Auth Capabilities\nProbe UDP ipmi-rmcp q|\\x06\\0\\xff\\x07\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x09\\x20\\x18\\xc8\\x81\\0\\x38\\x8e\\x04\\xb5|\nrarity 9\nports 623\n\nsoftmatch asf-rmcp m|^\\x06\\0\\xff\\x07\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x10|\n\n##############################NEXT PROBE##############################\n# CoAP GET .well-known/core\nProbe UDP coap-request q|@\\x01\\x01\\xce\\xbb.well-known\\x04core|\nrarity 9\nports 5683\nsslports 5684\n\nsoftmatch coap m|^${backquote}E|\n\n##############################NEXT PROBE##############################\n# DTLS Client Hello. Dissection available in nmap-payloads\nProbe UDP DTLSSessionReq q|\\x16\\xfe\\xff\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x36\\x01\\x00\\x00\\x2a\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x2a\\xfe\\xfd\\x00\\x00\\x00\\x00\\x7c\\x77\\x40\\x1e\\x8a\\xc8\\x22\\xa0\\xa0\\x18\\xff\\x93\\x08\\xca\\xac\\x0a\\x64\\x2f\\xc9\\x22\\x64\\xbc\\x08\\xa8\\x16\\x89\\x19\\x30\\x00\\x00\\x00\\x02\\x00\\x2f\\x01\\x00|\nrarity 5\nports 443,853,4433,4740,5349,5684,5868,6514,6636,8232,10161,10162,12346,12446,12546,12646,12746,12846,12946,13046\n\n# OpenSSL 1.1.0 s_server -dtls -listen\n# HelloVerifyRequest always uses DTLS 1.1 version, per RFC 6347\nmatch dtls m|^\\x16\\xfe\\xff\\0\\0\\0\\0\\0\\0\\0\\0..\\x03...\\0\\0\\0\\0\\0...\\xfe\\xff.|\n# Except when it doesn't? This was from IKEA's E1526 Trådfri Gateway, but could be anything.\nmatch dtls m|^\\x16\\xfe\\xfd\\0\\0\\0\\0\\0\\0\\0\\0..\\x03...\\0\\0\\0\\0\\0...\\xfe\\xfd.|\n# ServerHello\nmatch dtls m|^\\x16\\xfe[\\xfd\\xff]\\0\\0\\0\\0\\0\\0\\0\\0..\\x02...\\0\\0\\0\\0\\0...\\xfe[\\xfd\\xff].|\n\n#DTLS 1.0 alert: Handshake Failure\nmatch dtls m|^\\x15\\xfe\\xff\\0\\0\\0\\0\\0\\0\\0\\0..\\x02\\(\\0\\0\\0\\0\\0|\n\n##############################NEXT PROBE##############################\n# Detects iperf3 servers by sending a string longer than the 37-byte test identifer or cookie\n# https://github.com/esnet/iperf/wiki/IperfProtocolStates#test-initiation\nProbe TCP iperf3 q|0000000000000000000000000000000000000\\0\\0\\0\\0|\nports 5201\nrarity 9\nmatch iperf3 m|^\\t$|\n\n##############################NEXT PROBE##############################\n# QUIC initialization with random CID, advertising version Q999, which should elicit a version negotiation packet from the server\nProbe UDP QUIC q|\\r\\x89\\xc1\\x9c\\x1c*\\xff\\xfc\\xf1Q999\\x00|\nports 80,443\nrarity 6\n\nsoftmatch quic m|^\\r\\x89\\xc1\\x9c\\x1c\\*\\xff\\xfc\\xf1((?:Q[0-8]\\d\\d)+)$| i/QUIC versions$SUBST(1,\"Q\",\", Q\")/\n\n##############################NEXT PROBE##############################\n# Detects ClamAV servers and possibly other services that respond to the string VERSION\nProbe TCP VersionRequest q|VERSION|\nports 3310\nrarity 8\nmatch clam m|^ClamAV ([\\w.]+)/(\\w+)/(.+)$| p/ClamAV/ v/$1 ($2)/ i/AV definitions updated on:$3/\n\n##############################NEXT PROBE##############################\n# NoMachine Network Server\n# Announce client version 5.6.7 (could be anything)\nProbe TCP NoMachine q|NXSH-5.6.7\\n|\nports 4000\nrarity 9\n\nmatch nomachine-nx m|^NXD-([\\d.]+)\\n| p/NoMachine NX Server remote desktop/ v/$1/ cpe:/a:nomachine:nx_server:$1/\n\n##############################NEXT PROBE##############################\n# JMON for z/OS (FMID HALG300)\nProbe TCP JMON q|CONNECT01 v09\\n|\nrarity 9\nports 6715\nsslports 6715\n\nmatch jmon m|^ACKNOWLEDGE| p/JMON for zOS (FMID HALG300)/ o|z/OS| cpe:/a:ibm:zos_explorer/ cpe:/o:ibm:z%2fos/\n\n##############################NEXT PROBE##############################\n# LibreOffice Impress Remote Server\n# Requests to pair a remote called \"Nmap\" with the pin 0000\nProbe TCP LibreOfficeImpressSCPair q|LO_SERVER_CLIENT_PAIR\\nNmap\\n0000\\n\\n|\nrarity 9\nports 1599\nmatch impress-remote m|^LO_SERVER_VALIDATING_PIN\\n$| p/LibreOffice Impress remote/ cpe:/a:libreoffice:libreoffice/\n\n##############################NEXT PROBE##############################\n# Apple Remote Desktop\nProbe UDP ARD q|\\0\\x14\\0\\x01\\x03|\nrarity 8\nports 3283\n\n# Need to figure out what is different between these versions:\nmatch netassistant m|^\\0\\x01\\x03\\xea\\x001\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x12\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0[^\\0]([^\\0]+)\\0|s p/Apple Remote Desktop/ i/name: $P(1)/\nmatch netassistant m|^\\0\\x01\\x01d\\x001\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x01\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x12\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0[^\\0]([^\\0]+)\\0|s p/Apple Remote Desktop/ i/name: $P(1)/\n\n##############################NEXT PROBE##############################\n# LinuxSampler Control Protocol\n# https://www.linuxsampler.org/api/draft-linuxsampler-protocol.html\nProbe TCP LSCP q|GET SERVER INFO\\r\\n|\nrarity 9\nports 8888\n\nmatch lscp m|^DESCRIPTION: LinuxSampler - modular, streaming capable sampler\\r\\nVERSION: ([\\d.]+)\\r\\nPROTOCOL_VERSION: ([\\d.]+)\\r\\n| p/LinuxSampler/ v/$1/ i/LSCP $2/ cpe:/a:linuxsampler:linuxsampler:$1/\n\n##############################NEXT PROBE##############################\n# Hamlib rotctld get_info\n# https://www.systutorials.com/docs/linux/man/8-rotctld/\nProbe TCP rotctl q|get_info\\n|\nrarity 9\nports 4533\n\n# Maybe rigctld also?\nmatch rotctld m|^get_info: (.*)\\nRPRT 0\\n| p/Hamlib rotctld/ i/model: $1/\n\n##############################NEXT PROBE##############################\n# Ubiquiti Discovery Protocol\nProbe UDP UbiquitiDiscoveryv1 q|\\x01\\0\\0\\0|\nrarity 9\nports 10001\n\n# Valid response is protocol version (\\x01) and cmd (\\0) followed\n# by 2 bytes of length then TLV groups\nmatch ubiquiti-discovery m|^\\x01\\0.[^\\0].*\\x0c\\0\\x06AirCam|s p/Ubiquiti Discovery Service/ i/v1 protocol, AirCam/ cpe:/h:ubnt:aircam:/\nmatch ubiquiti-discovery m|^\\x01\\0.[^\\0].*\\x0c\\0\\nAirCamDome|s p/Ubiquiti Discovery Service/ i/v1 protocol, AirCamDome/ cpe:/h:ubnt:aircam_dome:/\n\n# Match short model name = \\x0c followed by 2 byte len then value\n# No known type bytes fall in \\w the following regex should be safe\nmatch ubiquiti-discovery m|^\\x01\\0.[^\\0].*\\x0c\\0.([\\w-]+)|s p/Ubiquiti Discovery Service/ i/v1 protocol, $1/\n\nsoftmatch ubiquiti-discovery m|^\\x01\\0.[^\\0].{48}|s p/Ubiquiti Discovery Service/ i/v1 protocol/\n\n##############################NEXT PROBE##############################\n# Ubiquiti Discovery Protocol\nProbe UDP UbiquitiDiscoveryv2 q|\\x02\\x08\\0\\0|\nrarity 9\nports 10001\n\n# Valid response is protocol version (\\x02 ) and cmd followed\n# by 2 bytes of length then TLV groups\n# Known cmd values are \\x06, \\x09, and \\x0b\nmatch ubiquiti-discovery m|^\\x02[\\x06\\x09\\x0b].[^\\0].*\\x15\\0.([\\w-]+)\\x16\\0.([\\d.]+)|s p/Ubiquiti Discovery Service/ i/v2 protocol, $1 software ver. $2/\nmatch ubiquiti-discovery m|^\\x02[\\x06\\x09\\x0b].[^\\0].*\\x15\\0.([\\w-]+)|s p/Ubiquiti Discovery Service/ i/v2 protocol, $1/\nsoftmatch ubiquiti-discovery m|^\\x02[\\x06\\x09\\x0b].[^\\0].{48}|s p/Ubiquiti Discovery Service/ i/v2 protocol/\n\n##############################NEXT PROBE##############################\n# Sharp TV IP/Serial remote control protocol\n# 4 requests: device name, model name, software version, IP protocol version.\n# http://files.sharpusa.com/Downloads/ForHome/HomeEntertainment/LCDTVs/Manuals/tel_man_LC70LE734U.pdf\nProbe TCP SharpTV q|TVNM1   \\rMNRD1   \\rSWVN1   \\rIPPV1   \\r|\nrarity 9\nports 10002\n\n# Fake impossible match; delete once we get a real probe response\nmatch sharp-remote m|^(?!x)x|\n\n##############################NEXT PROBE##############################\n# Android Debug Bridge CONNECT probe\n# https://android.googlesource.com/platform/system/core/+/master/adb/protocol.txt\nProbe TCP adbConnect q|CNXN\\0\\0\\0\\x01\\0\\x10\\0\\0\\x07\\0\\0\\0\\x32\\x02\\0\\0\\xbc\\xb1\\xa7\\xb1host::\\0|\nrarity 8\nports 5555\n\nmatch adb m|^CNXN\\0\\0\\0\\x01\\0\\x10\\0\\0........\\xbc\\xb1\\xa7\\xb1(\\w+)::ro.product.name=([^;]+);ro.product.model=([^;]+);ro.product.device=([^;]+);\\0$|s p/Android Debug Bridge $1/ i/name: $2; model: $3; device: $4/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nmatch adb m|^CNXN\\0\\0\\0\\x01\\0\\x10\\0\\0........\\xbc\\xb1\\xa7\\xb1(\\w+)::ro.product.name=([^;]+);ro.product.model=([^;]+);ro.product.device=([^;]+);features=([^\\0]+)$|s p/Android Debug Bridge $1/ i/name: $2; model: $3; device: $4; features: $5/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\n\nmatch adb m|CNXN\\0\\0\\0\\x01\\0\\x10\\0\\0\\t\\0\\0\\0\\xe4\\x02\\0\\0\\xbc\\xb1\\xa7\\xb1device::\\0$| p/Android Debug Bridge device/ i/no auth/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\n# If it has identifying info, softmatch so we can make a better fingerprint\nsoftmatch adb m|^CNXN\\0\\0\\0\\x01\\0\\x10\\0\\0........\\xbc\\xb1\\xa7\\xb1(\\w+):[^:]*:[^\\0]+\\0$|s p/Android Debug Bridge $1/ i/no auth/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\n\nmatch adb m|^AUTH\\x01\\0\\0\\0\\0\\0\\0\\0........\\xbc\\xb1\\xa7\\xb1|s p/Android Debug Bridge/ i/token auth required/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\nsoftmatch adb m|^AUTH(.)\\0\\0\\0\\0\\0\\0\\0........\\xbc\\xb1\\xa7\\xb1|s p/Android Debug Bridge/ i/auth required: $I(1,\"<\")/ o/Android/ cpe:/o:google:android/a cpe:/o:linux:linux_kernel/a\n\n##############################NEXT PROBE##############################\n# pi-hole \"telnet API\"\nProbe TCP piholeVersion q|>version\\n|\nrarity 9\nports 4711\n\nmatch pi-hole-stats m|^version v(\\d[\\w._-]+)| p/pi-hole Telnet API/ v/$1/ cpe:/a:pi-hole:pi-hole:$1/\nmatch pi-hole-stats m|^unknown command: .*---EOM---\\n\\n$|s p/pi-hole Telnet API/ cpe:/a:pi-hole:pi-hole/\n\n##############################NEXT PROBE##############################\n# BearWare TeamTalk login probe\nProbe TCP teamtalk-login q|login\\n|\nrarity 9\nports 10333\n\n# Authentication required\nmatch teamtalk m%^(?:teamtalk|welcome) userid=\\d+ servername=\"([^\"]+)\" .* protocol=\"([\\d.]+)\"\\r\\nerror number=2002 message=\"Invalid user account\"\\r\\n% p/BearWare TeamTalk/ i/protocol: $2; servername: $1/ cpe:/a:bearware:teamtalk/\n# Open chat server\nmatch teamtalk m%^(?:teamtalk|welcome) userid=\\d+ servername=\"([^\"]+)\" .* protocol=\"([\\d.]+)\"\\r\\naccepted .*\\r\\nserverupdate .* version=\"([\\d.]+)\"\\r\\n% p/BearWare TeamTalk/ v/$3/ i/protocol: $2; servername: $1; no authentication required/ cpe:/a:bearware:teamtalk:$2/\n\n# Sometimes server name isn't available\nmatch teamtalk m%^(?:teamtalk|welcome) userid=\\d+ servername=\"\" .* protocol=\"([\\d.]+)\"\\r\\nerror number=2002 message=\"Invalid user account\"\\r\\n% p/BearWare TeamTalk/ i/protocol: $1/ cpe:/a:bearware:teamtalk/\nmatch teamtalk m%^(?:teamtalk|welcome) userid=\\d+ servername=\"\" .* protocol=\"([\\d.]+)\"\\r\\naccepted .*\\r\\nserverupdate .* version=\"([\\d.]+)\"\\r\\n% p/BearWare TeamTalk/ v/$2/ i/protocol: $1; no authentication required/ cpe:/a:bearware:teamtalk:$2/\n\nmatch teamtalk m%^(?:teamtalk|welcome) userid=\\d+ servername=\\\"([^\"]+)\\\" .* protocol=\\\"([\\w._-]+)\\\"\\r\\n% p/Bearware TeamTalk/ i/servername: $1; protocol: $2/ cpe:/a:bearware:teamtalk/\nmatch teamtalk m%^(?:teamtalk|welcome) userid=\\d+ servername=\\\"\\\" .* protocol=\\\"([\\w._-]+)\\\"\\r\\n% p/Bearware TeamTalk/ i/protocol: $1/ cpe:/a:bearware:teamtalk/\n\n##############################NEXT PROBE##############################\n# Insteon PLM device info probe\nProbe TCP insteonPLM q|\\x02\\x60|\nrarity 9\nports 9761\n\n# Response bytes:\n# 0260 - device info\n# ... - device ID, usually displayed as hex\n# . - Device type: https://github.com/automategreen/home-controller/blob/3899a8bc7d739449c53c90982ed94bf66b8fce0c/lib/Insteon/utils.js#L3\n# . - Device sub-type (no key available)\n# 9b/9c - PLM version.\n# 06 - ACK (15 is NACK)\nmatch insteon-plm m|^\\x02\\x60...(.).\\x9b\\x06$| p/Insteon SmartLinc PLM/ i/device type: $I(1,\">\")/\nmatch insteon-plm m|^\\x02\\x60...(.).[\\x9c\\x9d]\\x06$| p/Insteon Hub PLM/ i/device type: $I(1,\">\")/\n\n`\n"
  },
  {
    "path": "nmap-services.go",
    "content": "package gonmap\n\nimport (\n\t\"strconv\"\n\t\"strings\"\n)\n\nvar nmapServicesString = `1\ttcpmux\n2\tcompressnet\n3\tcompressnet\n5\trje\n7\techo\n9\tdiscard\n11\tsystat\n13\tdaytime\n15\tnetstat\n17\tqotd\n18\tmsp\n19\tchargen\n20\tftp-data\n21\tftp\n22\tssh\n23\ttelnet\n24\tpriv-mail\n25\tsmtp\n26\trsftp\n27\tnsw-fe\n29\tmsg-icp\n31\tmsg-auth\n33\tdsp\n35\tpriv-print\n37\ttime\n38\trap\n39\trlp\n41\tgraphics\n42\tnameserver\n43\twhois\n44\tmpm-flags\n45\tmpm\n46\tmpm-snd\n47\tni-ftp\n48\tauditd\n49\ttacacs\n50\tre-mail-ck\n51\tla-maint\n52\txns-time\n53\tdomain\n54\txns-ch\n55\tisi-gl\n56\txns-auth\n57\tpriv-term\n58\txns-mail\n59\tpriv-file\n61\tni-mail\n62\tacas\n63\tvia-ftp\n64\tcovia\n65\ttacacs-ds\n66\tsqlnet\n67\tdhcps\n68\tdhcpc\n69\ttftp\n70\tgopher\n71\tnetrjs-1\n72\tnetrjs-2\n73\tnetrjs-3\n74\tnetrjs-4\n75\tpriv-dial\n76\tdeos\n77\tpriv-rje\n78\tvettcp\n79\tfinger\n80\thttp\n81\thosts2-ns\n82\txfer\n83\tmit-ml-dev\n84\tctf\n85\tmit-ml-dev\n86\tmfcobol\n87\tpriv-term-l\n88\tkerberos-sec\n89\tsu-mit-tg\n90\tdnsix\n91\tmit-dov\n92\tnpp\n93\tdcp\n94\tobjcall\n95\tsupdup\n96\tdixie\n97\tswift-rvf\n98\tlinuxconf\n99\tmetagram\n100\tnewacct\n101\thostname\n102\tiso-tsap\n103\tgppitnp\n104\tacr-nema\n105\tcsnet-ns\n106\tpop3pw\n107\trtelnet\n108\tsnagas\n109\tpop2\n110\tpop3\n111\trpcbind\n112\tmcidas\n113\tident\n114\taudionews\n115\tsftp\n116\tansanotify\n117\tuucp-path\n118\tsqlserv\n119\tnntp\n120\tcfdptkt\n121\terpc\n122\tsmakynet\n123\tntp\n124\tansatrader\n125\tlocus-map\n126\tunitary\n127\tlocus-con\n128\tgss-xlicen\n129\tpwdgen\n130\tcisco-fna\n131\tcisco-tna\n132\tcisco-sys\n133\tstatsrv\n134\tingres-net\n135\tmsrpc\n136\tprofile\n137\tnetbios-ns\n138\tnetbios-dgm\n139\tnetbios-ssn\n140\temfis-data\n141\temfis-cntl\n142\tbl-idm\n143\timap\n144\tnews\n145\tuaac\n146\tiso-tp0\n147\tiso-ip\n148\tcronus\n149\taed-512\n150\tsql-net\n151\thems\n152\tbftp\n153\tsgmp\n154\tnetsc-prod\n155\tnetsc-dev\n156\tsqlsrv\n157\tknet-cmp\n158\tpcmail-srv\n159\tnss-routing\n160\tsgmp-traps\n161\tsnmp\n162\tsnmptrap\n163\tcmip-man\n164\tcmip-agent\n165\txns-courier\n166\ts-net\n167\tnamp\n168\trsvd\n169\tsend\n170\tprint-srv\n171\tmultiplex\n172\tcl-1\n173\txyplex-mux\n174\tmailq\n175\tvmnet\n176\tgenrad-mux\n177\txdmcp\n178\tnextstep\n179\tbgp\n180\tris\n181\tunify\n182\taudit\n183\tocbinder\n184\tocserver\n185\tremote-kis\n186\tkis\n187\taci\n188\tmumps\n189\tqft\n190\tgacp\n191\tprospero\n192\tosu-nms\n193\tsrmp\n194\tirc\n195\tdn6-nlm-aud\n196\tdn6-smm-red\n197\tdls\n198\tdls-mon\n199\tsmux\n200\tsrc\n201\tat-rtmp\n202\tat-nbp\n203\tat-3\n204\tat-echo\n205\tat-5\n206\tat-zis\n207\tat-7\n208\tat-8\n209\ttam\n210\tz39.50\n211\t914c-g\n212\tanet\n213\tipx\n214\tvmpwscs\n215\tsoftpc\n216\tatls\n217\tdbase\n218\tmpp\n219\tuarps\n220\timap3\n221\tfln-spx\n222\trsh-spx\n223\tcdc\n224\tmasqdialer\n242\tdirect\n243\tsur-meas\n244\tdayna\n245\tlink\n246\tdsp3270\n247\tsubntbcst_tftp\n248\tbhfhs\n256\tfw1-secureremote\n257\tfw1-mc-fwmodule\n258\tfw1-mc-gui\n259\tesro-gen\n260\topenport\n261\tnsiiops\n262\tarcisdms\n263\thdap\n264\tbgmp\n265\tmaybe-fw1\n266\tsst\n267\ttd-service\n268\ttd-replica\n269\tmanet\n270\tgist\n271\tpt-tls\n280\thttp-mgmt\n281\tpersonal-link\n282\tcableport-ax\n283\trescap\n284\tcorerjd\n286\tfxp\n287\tk-block\n308\tnovastorbakcup\n309\tentrusttime\n310\tbhmds\n311\tasip-webadmin\n312\tvslmp\n313\tmagenta-logic\n314\topalis-robot\n315\tdpsi\n316\tdecauth\n317\tzannet\n318\tpkix-timestamp\n319\tptp-event\n320\tptp-general\n321\tpip\n322\trtsps\n323\trpki-rtr\n324\trpki-rtr-tls\n333\ttexar\n344\tpdap\n345\tpawserv\n346\tzserv\n347\tfatserv\n348\tcsi-sgwp\n349\tmftp\n350\tmatip-type-a\n351\tmatip-type-b\n352\tdtag-ste-sb\n353\tndsauth\n354\tbh611\n355\tdatex-asn\n356\tcloanto-net-1\n357\tbhevent\n358\tshrinkwrap\n359\ttenebris_nts\n360\tscoi2odialog\n361\tsemantix\n362\tsrssend\n363\trsvp_tunnel\n364\taurora-cmgr\n365\tdtk\n366\todmr\n367\tmortgageware\n368\tqbikgdp\n369\trpc2portmap\n370\tcodaauth2\n371\tclearcase\n372\tulistserv\n373\tlegent-1\n374\tlegent-2\n375\thassle\n376\tnip\n377\ttnETOS\n378\tdsETOS\n379\tis99c\n380\tis99s\n381\thp-collector\n382\thp-managed-node\n383\thp-alarm-mgr\n384\tarns\n385\tibm-app\n386\tasa\n387\taurp\n388\tunidata-ldm\n389\tldap\n390\tuis\n391\tsynotics-relay\n392\tsynotics-broker\n393\tdis\n394\tembl-ndt\n395\tnetcp\n396\tnetware-ip\n397\tmptn\n398\tkryptolan\n399\tiso-tsap-c2\n400\twork-sol\n401\tups\n402\tgenie\n403\tdecap\n404\tnced\n405\tncld\n406\timsp\n407\ttimbuktu\n408\tprm-sm\n409\tprm-nm\n410\tdecladebug\n411\trmt\n412\tsynoptics-trap\n413\tsmsp\n414\tinfoseek\n415\tbnet\n416\tsilverplatter\n417\tonmux\n418\thyper-g\n419\tariel1\n420\tsmpte\n421\tariel2\n422\tariel3\n423\topc-job-start\n424\topc-job-track\n425\ticad-el\n426\tsmartsdp\n427\tsvrloc\n428\tocs_cmu\n429\tocs_amu\n430\tutmpsd\n431\tutmpcd\n432\tiasd\n433\tnnsp\n434\tmobileip-agent\n435\tmobilip-mn\n436\tdna-cml\n437\tcomscm\n438\tdsfgw\n439\tdasp\n440\tsgcp\n441\tdecvms-sysmgt\n442\tcvc_hostd\n443\thttps\n444\tsnpp\n445\tmicrosoft-ds\n446\tddm-rdb\n447\tddm-dfm\n448\tddm-ssl\n449\tas-servermap\n450\ttserver\n451\tsfs-smp-net\n452\tsfs-config\n453\tcreativeserver\n454\tcontentserver\n455\tcreativepartnr\n456\tmacon\n457\tscohelp\n458\tappleqtc\n459\tampr-rcmd\n460\tskronk\n461\tdatasurfsrv\n462\tdatasurfsrvsec\n463\talpes\n464\tkpasswd5\n465\tsmtps\n466\tdigital-vrc\n467\tmylex-mapd\n468\tphoturis\n469\trcp\n470\tscx-proxy\n471\tmondex\n472\tljk-login\n473\thybrid-pop\n474\ttn-tl-w1\n475\ttcpnethaspsrv\n476\ttn-tl-fd1\n477\tss7ns\n478\tspsc\n479\tiafserver\n480\tloadsrv\n481\tdvs\n482\tbgs-nsi\n483\tulpnet\n484\tintegra-sme\n485\tpowerburst\n486\tsstats\n487\tsaft\n488\tgss-http\n489\tnest-protocol\n490\tmicom-pfs\n491\tgo-login\n492\tticf-1\n493\tticf-2\n494\tpov-ray\n495\tintecourier\n496\tpim-rp-disc\n497\tretrospect\n498\tsiam\n499\tiso-ill\n500\tisakmp\n501\tstmf\n502\tmbap\n503\tintrinsa\n504\tcitadel\n505\tmailbox-lm\n506\tohimsrv\n507\tcrs\n508\txvttp\n509\tsnare\n510\tfcp\n511\tpassgo\n512\texec\n513\tlogin\n514\tshell\n515\tprinter\n516\tvideotex\n517\ttalk\n518\tntalk\n519\tutime\n520\tefs\n521\tripng\n522\tulp\n523\tibm-db2\n524\tncp\n525\ttimed\n526\ttempo\n527\tstx\n528\tcustix\n529\tirc\n530\tcourier\n531\tconference\n532\tnetnews\n533\tnetwall\n534\tmm-admin\n535\tiiop\n536\topalis-rdv\n537\tnmsp\n538\tgdomap\n539\tapertus-ldp\n540\tuucp\n541\tuucp-rlogin\n542\tcommerce\n543\tklogin\n544\tkshell\n545\tekshell\n546\tdhcpv6-client\n547\tdhcpv6-server\n548\tafp\n549\tidfp\n550\tnew-rwho\n551\tcybercash\n552\tdeviceshare\n553\tpirp\n554\trtsp\n555\tdsf\n556\tremotefs\n557\topenvms-sysipc\n558\tsdnskmp\n559\tteedtap\n560\trmonitor\n561\tmonitor\n562\tchshell\n563\tsnews\n564\t9pfs\n565\twhoami\n566\tstreettalk\n567\tbanyan-rpc\n568\tms-shuttle\n569\tms-rome\n570\tmeter\n571\tumeter\n572\tsonar\n573\tbanyan-vip\n574\tftp-agent\n575\tvemmi\n576\tipcd\n577\tvnas\n578\tipdd\n579\tdecbsrv\n580\tsntp-heartbeat\n581\tbdp\n582\tscc-security\n583\tphilips-vc\n584\tkeyserver\n585\timap4-ssl\n586\tpassword-chg\n587\tsubmission\n588\tcal\n589\teyelink\n590\ttns-cml\n591\thttp-alt\n592\teudora-set\n593\thttp-rpc-epmap\n594\ttpip\n595\tcab-protocol\n596\tsmsd\n597\tptcnameservice\n598\tsco-websrvrmg3\n599\tacp\n600\tipcserver\n601\tsyslog-conn\n602\txmlrpc-beep\n603\tmnotes\n604\ttunnel\n605\tsoap-beep\n606\turm\n607\tnqs\n608\tsift-uft\n609\tnpmp-trap\n610\tnpmp-local\n611\tnpmp-gui\n612\thmmp-ind\n613\thmmp-op\n614\tsshell\n615\tsco-inetmgr\n616\tsco-sysmgr\n617\tsco-dtmgr\n618\tdei-icda\n619\tcompaq-evm\n620\tsco-websrvrmgr\n621\tescp-ip\n622\tcollaborator\n623\toob-ws-http\n624\tcryptoadmin\n625\tapple-xsrvr-admin\n626\tapple-imap-admin\n627\tpassgo-tivoli\n628\tqmqp\n629\t3com-amp3\n630\trda\n631\tipp\n632\tbmpp\n633\tservstat\n634\tginad\n635\trlzdbase\n636\tldapssl\n637\tlanserver\n638\tmcns-sec\n639\tmsdp\n640\tentrust-sps\n641\trepcmd\n642\tesro-emsdp\n643\tsanity\n644\tdwr\n645\tpssc\n646\tldp\n647\tdhcp-failover\n648\trrp\n649\tcadview-3d\n650\tobex\n651\tieee-mms\n652\thello-port\n653\trepscmd\n654\taodv\n655\ttinc\n656\tspmp\n657\trmc\n658\ttenfold\n660\tmac-srvr-admin\n661\thap\n662\tpftp\n663\tpurenoise\n664\tsecure-aux-bus\n665\tsun-dr\n666\tdoom\n667\tdisclose\n668\tmecomm\n669\tmeregister\n670\tvacdsm-sws\n671\tvacdsm-app\n672\tvpps-qua\n673\tcimplex\n674\tacap\n675\tdctp\n676\tvpps-via\n677\tvpp\n678\tggf-ncp\n679\tmrm\n680\tentrust-aaas\n681\tentrust-aams\n682\txfr\n683\tcorba-iiop\n684\tcorba-iiop-ssl\n685\tmdc-portmapper\n686\thcp-wismar\n687\tasipregistry\n688\trealm-rusd\n689\tnmap\n690\tvatp\n691\tresvc\n692\thyperwave-isp\n693\tconnendp\n694\tha-cluster\n695\tieee-mms-ssl\n696\trushd\n697\tuuidgen\n698\tolsr\n699\taccessnetwork\n700\tepp\n701\tlmp\n702\tiris-beep\n704\telcsd\n705\tagentx\n706\tsilc\n707\tborland-dsj\n709\tentrustmanager\n710\tentrust-ash\n711\tcisco-tdp\n712\ttbrpf\n713\tiris-xpc\n714\tiris-xpcs\n715\tiris-lwz\n716\tpana\n723\tomfs\n729\tnetviewdm1\n730\tnetviewdm2\n731\tnetviewdm3\n737\tsometimes-rpc2\n740\tnetcp\n741\tnetgw\n742\tnetrcs\n744\tflexlm\n747\tfujitsu-dev\n748\tris-cm\n749\tkerberos-adm\n750\tkerberos\n751\tkerberos_master\n752\tqrh\n753\trrh\n754\tkrb_prop\n758\tnlogin\n759\tcon\n760\tkrbupdate\n761\tkpasswd\n762\tquotad\n763\tcycleserv\n764\tomserv\n765\twebster\n767\tphonebook\n769\tvid\n770\tcadlock\n771\trtip\n772\tcycleserv2\n773\tsubmit\n774\trpasswd\n775\tentomb\n776\twpages\n777\tmultiling-http\n780\twpgs\n781\thp-collector\n782\thp-managed-node\n783\tspamassassin\n786\tconcert\n787\tqsc\n799\tcontrolit\n800\tmdbs_daemon\n801\tdevice\n802\tmbap-s\n808\tccproxy-http\n810\tfcp-udp\n828\titm-mcell-s\n829\tpkix-3-ca-ra\n830\tnetconf-ssh\n831\tnetconf-beep\n832\tnetconfsoaphttp\n833\tnetconfsoapbeep\n847\tdhcp-failover2\n848\tgdoi\n853\tdomain-s\n854\tdlep\n860\tiscsi\n861\towamp-control\n862\ttwamp-control\n871\tsupfilesrv\n873\trsync\n886\ticlcnet-locate\n887\ticlcnet_svinfo\n888\taccessbuilder\n898\tsun-manageconsole\n900\tomginitialrefs\n901\tsamba-swat\n902\tiss-realsecure\n903\tiss-console-mgr\n910\tkink\n911\txact-backup\n912\tapex-mesh\n913\tapex-edge\n950\toftep-rpc\n953\trndc\n975\tsecurenetpro-sensor\n989\tftps-data\n990\tftps\n991\tnas\n992\ttelnets\n993\timaps\n994\tircs\n995\tpop3s\n996\txtreelic\n997\tmaitrd\n998\tbusboy\n999\tgarcon\n1000\tcadlock\n1001\twebpush\n1002\twindows-icfw\n1008\tufsd\n1010\tsurf\n1012\tsometimes-rpc1\n1021\texp1\n1022\texp2\n1023\tnetvenuechat\n1024\tkdm\n1025\tNFS-or-IIS\n1026\tLSA-or-nterm\n1027\tIIS\n1028\tms-lsa\n1029\tms-lsa\n1030\tiad1\n1031\tiad2\n1032\tiad3\n1033\tnetinfo\n1034\tzincite-a\n1035\tmultidropper\n1036\tnsstp\n1037\tams\n1038\tmtqp\n1039\tsbl\n1040\tnetsaint\n1041\tdanf-ak2\n1042\tafrog\n1043\tboinc\n1044\tdcutility\n1045\tfpitp\n1046\twfremotertm\n1047\tneod1\n1048\tneod2\n1049\ttd-postman\n1050\tjava-or-OTGfileshare\n1051\toptima-vnet\n1052\tddt\n1053\tremote-as\n1054\tbrvread\n1055\tansyslmd\n1056\tvfo\n1057\tstartron\n1058\tnim\n1059\tnimreg\n1060\tpolestar\n1061\tkiosk\n1062\tveracity\n1063\tkyoceranetdev\n1064\tjstel\n1065\tsyscomlan\n1066\tfpo-fns\n1067\tinstl_boots\n1068\tinstl_bootc\n1069\tcognex-insight\n1070\tgmrupdateserv\n1071\tbsquare-voip\n1072\tcardax\n1073\tbridgecontrol\n1074\twarmspotMgmt\n1075\trdrmshc\n1076\tsns_credit\n1077\timgames\n1078\tavocent-proxy\n1079\tasprovatalk\n1080\tsocks\n1081\tpvuniwien\n1082\tamt-esd-prot\n1083\tansoft-lm-1\n1084\tansoft-lm-2\n1085\twebobjects\n1086\tcplscrambler-lg\n1087\tcplscrambler-in\n1088\tcplscrambler-al\n1089\tff-annunc\n1090\tff-fms\n1091\tff-sm\n1092\tobrpd\n1093\tproofd\n1094\trootd\n1095\tnicelink\n1096\tcnrprotocol\n1097\tsunclustermgr\n1098\trmiactivation\n1099\trmiregistry\n1100\tmctp\n1101\tpt2-discover\n1102\tadobeserver-1\n1103\txaudio\n1104\txrl\n1105\tftranhc\n1106\tisoipsigport-1\n1107\tisoipsigport-2\n1108\tratio-adp\n1109\tkpop\n1110\tnfsd-status\n1111\tlmsocialserver\n1112\tmsql\n1113\tltp-deepspace\n1114\tmini-sql\n1115\tardus-trns\n1116\tardus-cntl\n1117\tardus-mtrns\n1118\tsacred\n1119\tbnetgame\n1120\tbnetfile\n1121\trmpp\n1122\tavailant-mgr\n1123\tmurray\n1124\thpvmmcontrol\n1125\thpvmmagent\n1126\thpvmmdata\n1127\tsupfiledbg\n1128\tsaphostctrl\n1129\tsaphostctrls\n1130\tcasp\n1131\tcaspssl\n1132\tkvm-via-ip\n1133\tdfn\n1134\taplx\n1135\tomnivision\n1136\thhb-gateway\n1137\ttrim\n1138\tencrypted_admin\n1139\tcce3x\n1140\tautonoc\n1141\tmxomss\n1142\tedtools\n1143\timyx\n1144\tfuscript\n1145\tx9-icue\n1146\taudit-transfer\n1147\tcapioverlan\n1148\telfiq-repl\n1149\tbvtsonar\n1150\tblaze\n1151\tunizensus\n1152\twinpoplanmess\n1153\tc1222-acse\n1154\tresacommunity\n1155\tnfa\n1156\tiascontrol-oms\n1157\tiascontrol\n1158\tlsnr\n1159\toracle-oms\n1160\tolsv\n1161\thealth-polling\n1162\thealth-trap\n1163\tsddp\n1164\tqsm-proxy\n1165\tqsm-gui\n1166\tqsm-remote\n1167\tcisco-ipsla\n1168\tvchat\n1169\ttripwire\n1170\tatc-lm\n1171\tatc-appserver\n1172\tdnap\n1173\td-cinema-rrp\n1174\tfnet-remote-ui\n1175\tdossier\n1176\tindigo-server\n1177\tdkmessenger\n1178\tskkserv\n1179\tb2n\n1180\tmc-client\n1181\t3comnetman\n1182\taccelenet\n1183\tllsurfup-http\n1184\tllsurfup-https\n1185\tcatchpole\n1186\tmysql-cluster\n1187\talias\n1188\thp-webadmin\n1189\tunet\n1190\tcommlinx-avl\n1191\tgpfs\n1192\tcaids-sensor\n1193\tfiveacross\n1194\topenvpn\n1195\trsf-1\n1196\tnetmagic\n1197\tcarrius-rshell\n1198\tcajo-discovery\n1199\tdmidi\n1200\tscol\n1201\tnucleus-sand\n1202\tcaiccipc\n1203\tssslic-mgr\n1204\tssslog-mgr\n1205\taccord-mgc\n1206\tanthony-data\n1207\tmetasage\n1208\tseagull-ais\n1209\tipcd3\n1210\teoss\n1211\tgroove-dpp\n1212\tlupa\n1213\tmpc-lifenet\n1214\tfasttrack\n1215\tscanstat-1\n1216\tetebac5\n1217\thpss-ndapi\n1218\taeroflight-ads\n1219\taeroflight-ret\n1220\tquicktime\n1221\tsweetware-apps\n1222\tnerv\n1223\ttgp\n1224\tvpnz\n1225\tslinkysearch\n1226\tstgxfws\n1227\tdns2go\n1228\tflorence\n1229\tzented\n1230\tperiscope\n1231\tmenandmice-lpm\n1232\tfirst-defense\n1233\tuniv-appserver\n1234\thotline\n1235\tmosaicsyssvc1\n1236\tbvcontrol\n1237\ttsdos390\n1238\thacl-qs\n1239\tnmsd\n1240\tinstantia\n1241\tnessus\n1242\tnmasoverip\n1243\tserialgateway\n1244\tisbconference1\n1245\tisbconference2\n1246\tpayrouter\n1247\tvisionpyramid\n1248\thermes\n1249\tmesavistaco\n1250\tswldy-sias\n1251\tservergraph\n1252\tbspne-pcc\n1253\tq55-pcc\n1254\tde-noc\n1255\tde-cache-query\n1256\tde-server\n1257\tshockwave2\n1258\topennl\n1259\topennl-voice\n1260\tibm-ssd\n1261\tmpshrsv\n1262\tqnts-orb\n1263\tdka\n1264\tprat\n1265\tdssiapi\n1266\tdellpwrappks\n1267\tepc\n1268\tpropel-msgsys\n1269\twatilapp\n1270\tssserver\n1271\texcw\n1272\tcspmlockmgr\n1273\temc-gateway\n1274\tt1distproc\n1275\tivcollector\n1276\tivmanager\n1277\tmiva-mqs\n1278\tdellwebadmin-1\n1279\tdellwebadmin-2\n1280\tpictrography\n1281\thealthd\n1282\temperion\n1283\tproductinfo\n1284\tiee-qfx\n1285\tneoiface\n1286\tnetuitive\n1287\troutematch\n1288\tnavbuddy\n1289\tjwalkserver\n1290\twinjaserver\n1291\tseagulllms\n1292\tdsdn\n1293\tpkt-krb-ipsec\n1294\tcmmdriver\n1295\tehtp\n1296\tdproxy\n1297\tsdproxy\n1298\tlpcp\n1299\thp-sci\n1300\th323hostcallsc\n1301\tci3-software-1\n1302\tci3-software-2\n1303\tsftsrv\n1304\tboomerang\n1305\tpe-mike\n1306\tre-conn-proto\n1307\tpacmand\n1308\todsi\n1309\tjtag-server\n1310\thusky\n1311\trxmon\n1312\tsti-envision\n1313\tbmc_patroldb\n1314\tpdps\n1315\tels\n1316\texbit-escp\n1317\tvrts-ipcserver\n1318\tkrb5gatekeeper\n1319\tamx-icsp\n1320\tamx-axbnet\n1321\tpip\n1322\tnovation\n1323\tbrcd\n1324\tdelta-mcp\n1325\tdx-instrument\n1326\twimsic\n1327\tultrex\n1328\tewall\n1329\tnetdb-export\n1330\tstreetperfect\n1331\tintersan\n1332\tpcia-rxp-b\n1333\tpasswrd-policy\n1334\twritesrv\n1335\tdigital-notary\n1336\tischat\n1337\twaste\n1338\twmc-log-svc\n1339\tkjtsiteserver\n1340\tnaap\n1341\tqubes\n1342\tesbroker\n1343\tre101\n1344\ticap\n1345\tvpjp\n1346\talta-ana-lm\n1347\tbbn-mmc\n1348\tbbn-mmx\n1349\tsbook\n1350\teditbench\n1351\tequationbuilder\n1352\tlotusnotes\n1353\trelief\n1354\trightbrain\n1355\tintuitive-edge\n1356\tcuillamartin\n1357\tpegboard\n1358\tconnlcli\n1359\tftsrv\n1360\tmimer\n1361\tlinx\n1362\ttimeflies\n1363\tndm-requester\n1364\tndm-server\n1365\tadapt-sna\n1366\tnetware-csp\n1367\tdcs\n1368\tscreencast\n1369\tgv-us\n1370\tus-gv\n1371\tfc-cli\n1372\tfc-ser\n1373\tchromagrafx\n1374\tmolly\n1375\tbytex\n1376\tibm-pps\n1377\tcichlid\n1378\telan\n1379\tdbreporter\n1380\ttelesis-licman\n1381\tapple-licman\n1382\tudt_os\n1383\tgwha\n1384\tos-licman\n1385\tatex_elmd\n1386\tchecksum\n1387\tcadsi-lm\n1388\tobjective-dbc\n1389\ticlpv-dm\n1390\ticlpv-sc\n1391\ticlpv-sas\n1392\ticlpv-pm\n1393\ticlpv-nls\n1394\ticlpv-nlc\n1395\ticlpv-wsm\n1396\tdvl-activemail\n1397\taudio-activmail\n1398\tvideo-activmail\n1399\tcadkey-licman\n1400\tcadkey-tablet\n1401\tgoldleaf-licman\n1402\tprm-sm-np\n1403\tprm-nm-np\n1404\tigi-lm\n1405\tibm-res\n1406\tnetlabs-lm\n1407\tdbsa-lm\n1408\tsophia-lm\n1409\there-lm\n1410\thiq\n1411\taf\n1412\tinnosys\n1413\tinnosys-acl\n1414\tibm-mqseries\n1415\tdbstar\n1416\tnovell-lu6.2\n1417\ttimbuktu-srv1\n1418\ttimbuktu-srv2\n1419\ttimbuktu-srv3\n1420\ttimbuktu-srv4\n1421\tgandalf-lm\n1422\tautodesk-lm\n1423\tessbase\n1424\thybrid\n1425\tzion-lm\n1426\tsas-1\n1427\tmloadd\n1428\tinformatik-lm\n1429\tnms\n1430\ttpdu\n1431\trgtp\n1432\tblueberry-lm\n1433\tms-sql-s\n1434\tms-sql-m\n1435\tibm-cics\n1436\tsas-2\n1437\ttabula\n1438\teicon-server\n1439\teicon-x25\n1440\teicon-slp\n1441\tcadis-1\n1442\tcadis-2\n1443\ties-lm\n1444\tmarcam-lm\n1445\tproxima-lm\n1446\tora-lm\n1447\tapri-lm\n1448\toc-lm\n1449\tpeport\n1450\tdwf\n1451\tinfoman\n1452\tgtegsc-lm\n1453\tgenie-lm\n1454\tinterhdl_elmd\n1455\tesl-lm\n1456\tdca\n1457\tvalisys-lm\n1458\tnrcabq-lm\n1459\tproshare1\n1460\tproshare2\n1461\tibm_wrless_lan\n1462\tworld-lm\n1463\tnucleus\n1464\tmsl_lmd\n1465\tpipes\n1466\toceansoft-lm\n1467\tcsdmbase\n1468\tcsdm\n1469\taal-lm\n1470\tuaiact\n1471\tcsdmbase\n1472\tcsdm\n1473\topenmath\n1474\ttelefinder\n1475\ttaligent-lm\n1476\tclvm-cfg\n1477\tms-sna-server\n1478\tms-sna-base\n1479\tdberegister\n1480\tpacerforum\n1481\tairs\n1482\tmiteksys-lm\n1483\tafs\n1484\tconfluent\n1485\tlansource\n1486\tnms_topo_serv\n1487\tlocalinfosrvr\n1488\tdocstor\n1489\tdmdocbroker\n1490\tinsitu-conf\n1491\tanynetgateway\n1492\tstone-design-1\n1493\tnetmap_lm\n1494\tcitrix-ica\n1495\tcvc\n1496\tliberty-lm\n1497\trfx-lm\n1498\twatcom-sql\n1499\tfhc\n1500\tvlsi-lm\n1501\tsas-3\n1502\tshivadiscovery\n1503\timtc-mcs\n1504\tevb-elm\n1505\tfunkproxy\n1506\tutcd\n1507\tsymplex\n1508\tdiagmond\n1509\trobcad-lm\n1510\tmvx-lm\n1511\t3l-l1\n1512\twins\n1513\tfujitsu-dtc\n1514\tfujitsu-dtcns\n1515\tifor-protocol\n1516\tvpad\n1517\tvpac\n1518\tvpvd\n1519\tvpvc\n1520\tatm-zip-office\n1521\toracle\n1522\trna-lm\n1523\tcichild-lm\n1524\tingreslock\n1525\torasrv\n1526\tpdap-np\n1527\ttlisrv\n1528\tmciautoreg\n1529\tsupport\n1530\trap-service\n1531\trap-listen\n1532\tmiroconnect\n1533\tvirtual-places\n1534\tmicromuse-lm\n1535\tampr-info\n1536\tampr-inter\n1537\tsdsc-lm\n1538\t3ds-lm\n1539\tintellistor-lm\n1540\trds\n1541\trds2\n1542\tgridgen-elmd\n1543\tsimba-cs\n1544\taspeclmd\n1545\tvistium-share\n1546\tabbaccuray\n1547\tlaplink\n1548\taxon-lm\n1549\tshivahose\n1550\t3m-image-lm\n1551\thecmtl-db\n1552\tpciarray\n1553\tsna-cs\n1554\tcaci-lm\n1555\tlivelan\n1556\tveritas_pbx\n1557\tarbortext-lm\n1558\txingmpeg\n1559\tweb2host\n1560\tasci-val\n1561\tfacilityview\n1562\tpconnectmgr\n1563\tcadabra-lm\n1564\tpay-per-view\n1565\twinddlb\n1566\tcorelvideo\n1567\tjlicelmd\n1568\ttsspmap\n1569\tets\n1570\torbixd\n1571\trdb-dbs-disp\n1572\tchip-lm\n1573\titscomm-ns\n1574\tmvel-lm\n1575\toraclenames\n1576\tmoldflow-lm\n1577\thypercube-lm\n1578\tjacobus-lm\n1579\tioc-sea-lm\n1580\ttn-tl-r1\n1581\tmil-2045-47001\n1582\tmsims\n1583\tsimbaexpress\n1584\ttn-tl-fd2\n1585\tintv\n1586\tibm-abtact\n1587\tpra_elmd\n1588\ttriquest-lm\n1589\tvqp\n1590\tgemini-lm\n1591\tncpm-pm\n1592\tcommonspace\n1593\tmainsoft-lm\n1594\tsixtrak\n1595\tradio\n1596\tradio-sm\n1597\torbplus-iiop\n1598\tpicknfs\n1599\tsimbaservices\n1600\tissd\n1601\taas\n1602\tinspect\n1603\tpicodbc\n1604\ticabrowser\n1605\tslp\n1606\tslm-api\n1607\tstt\n1608\tsmart-lm\n1609\tisysg-lm\n1610\ttaurus-wh\n1611\till\n1612\tnetbill-trans\n1613\tnetbill-keyrep\n1614\tnetbill-cred\n1615\tnetbill-auth\n1616\tnetbill-prod\n1617\tnimrod-agent\n1618\tskytelnet\n1619\txs-openstorage\n1620\tfaxportwinport\n1621\tsoftdataphone\n1622\tontime\n1623\tjaleosnd\n1624\tudp-sr-port\n1625\tsvs-omagent\n1626\tshockwave\n1627\tt128-gateway\n1628\tlontalk-norm\n1629\tlontalk-urgnt\n1630\toraclenet8cman\n1631\tvisitview\n1632\tpammratc\n1633\tpammrpc\n1634\tloaprobe\n1635\tedb-server1\n1636\tisdc\n1637\tislc\n1638\tismc\n1639\tcert-initiator\n1640\tcert-responder\n1641\tinvision\n1642\tisis-am\n1643\tisis-ambc\n1644\tsaiseh\n1645\tsightline\n1646\tsa-msg-port\n1647\trsap\n1648\tconcurrent-lm\n1649\tkermit\n1650\tnkd\n1651\tshiva_confsrvr\n1652\txnmp\n1653\talphatech-lm\n1654\tstargatealerts\n1655\tdec-mbadmin\n1656\tdec-mbadmin-h\n1657\tfujitsu-mmpdc\n1658\tsixnetudr\n1659\tsg-lm\n1660\tskip-mc-gikreq\n1661\tnetview-aix-1\n1662\tnetview-aix-2\n1663\tnetview-aix-3\n1664\tnetview-aix-4\n1665\tnetview-aix-5\n1666\tnetview-aix-6\n1667\tnetview-aix-7\n1668\tnetview-aix-8\n1669\tnetview-aix-9\n1670\tnetview-aix-10\n1671\tnetview-aix-11\n1672\tnetview-aix-12\n1673\tproshare-mc-1\n1674\tproshare-mc-2\n1675\tpdp\n1676\tnetcomm1\n1677\tgroupwise\n1678\tprolink\n1679\tdarcorp-lm\n1680\tCarbonCopy\n1681\tsd-elmd\n1682\tlanyon-lantern\n1683\tncpm-hip\n1684\tsnaresecure\n1685\tn2nremote\n1686\tcvmon\n1687\tnsjtp-ctrl\n1688\tnsjtp-data\n1689\tfirefox\n1690\tng-umds\n1691\tempire-empuma\n1692\tsstsys-lm\n1693\trrirtr\n1694\trrimwm\n1695\trrilwm\n1696\trrifmm\n1697\trrisat\n1698\trsvp-encap-1\n1699\trsvp-encap-2\n1700\tmps-raft\n1701\tl2f\n1702\tdeskshare\n1703\thb-engine\n1704\tbcs-broker\n1705\tslingshot\n1706\tjetform\n1707\tvdmplay\n1708\tgat-lmd\n1709\tcentra\n1710\timpera\n1711\tpptconference\n1712\tregistrar\n1713\tconferencetalk\n1714\tsesi-lm\n1715\thoudini-lm\n1716\txmsg\n1717\tfj-hdnet\n1718\th323gatedisc\n1719\th323gatestat\n1720\th323q931\n1721\tcaicci\n1722\thks-lm\n1723\tpptp\n1724\tcsbphonemaster\n1725\tiden-ralp\n1726\tiberiagames\n1727\twinddx\n1728\ttelindus\n1729\tcitynl\n1730\troketz\n1731\tmsiccp\n1732\tproxim\n1733\tsiipat\n1734\tcambertx-lm\n1735\tprivatechat\n1736\tstreet-stream\n1737\tultimad\n1738\tgamegen1\n1739\twebaccess\n1740\tencore\n1741\tcisco-net-mgmt\n1742\t3Com-nsd\n1743\tcinegrfx-lm\n1744\tncpm-ft\n1745\tremote-winsock\n1746\tftrapid-1\n1747\tftrapid-2\n1748\toracle-em1\n1749\taspen-services\n1750\tsslp\n1751\tswiftnet\n1752\tlofr-lm\n1753\tpredatar-comms\n1754\toracle-em2\n1755\twms\n1756\tcapfast-lmd\n1757\tcnhrp\n1758\ttftp-mcast\n1759\tspss-lm\n1760\twww-ldap-gw\n1761\tlandesk-rc\n1762\tlandesk-rc\n1763\tlandesk-rc\n1764\tlandesk-rc\n1765\tcft-4\n1766\tcft-5\n1767\tcft-6\n1768\tcft-7\n1769\tbmc-net-adm\n1770\tbmc-net-svc\n1771\tvaultbase\n1772\tessweb-gw\n1773\tkmscontrol\n1774\tglobal-dtserv\n1775\tvdab\n1776\tfemis\n1777\tpowerguardian\n1778\tprodigy-intrnet\n1779\tpharmasoft\n1780\tdpkeyserv\n1781\tanswersoft-lm\n1782\thp-hcip\n1784\tfinle-lm\n1785\twindlm\n1786\tfunk-logger\n1787\tfunk-license\n1788\tpsmond\n1789\thello\n1790\tnmsp\n1791\tea1\n1792\tibm-dt-2\n1793\trsc-robot\n1794\tcera-bcm\n1795\tdpi-proxy\n1796\tvocaltec-admin\n1797\tuma\n1798\tetp\n1799\tnetrisk\n1800\tansys-lm\n1801\tmsmq\n1802\tconcomp1\n1803\thp-hcip-gwy\n1804\tenl\n1805\tenl-name\n1806\tmusiconline\n1807\tfhsp\n1808\toracle-vp2\n1809\toracle-vp1\n1810\tjerand-lm\n1811\tscientia-sdb\n1812\tradius\n1813\tradius-acct\n1814\ttdp-suite\n1815\tmmpft\n1816\tharp\n1817\trkb-oscs\n1818\tetftp\n1819\tplato-lm\n1820\tmcagent\n1821\tdonnyworld\n1822\tes-elmd\n1823\tunisys-lm\n1824\tmetrics-pas\n1825\tdirecpc-video\n1826\tardt\n1827\tpcm\n1828\titm-mcell-u\n1829\toptika-emedia\n1830\tnet8-cman\n1831\tmyrtle\n1832\ttht-treasure\n1833\tudpradio\n1834\tardusuni\n1835\tardusmul\n1836\tste-smsc\n1837\tcsoft1\n1838\ttalnet\n1839\tnetopia-vo1\n1840\tnetopia-vo2\n1841\tnetopia-vo3\n1842\tnetopia-vo4\n1843\tnetopia-vo5\n1844\tdirecpc-dll\n1845\taltalink\n1846\ttunstall-pnc\n1847\tslp-notify\n1848\tfjdocdist\n1849\talpha-sms\n1850\tgsi\n1851\tctcd\n1852\tvirtual-time\n1853\tvids-avtp\n1854\tbuddy-draw\n1855\tfiorano-rtrsvc\n1856\tfiorano-msgsvc\n1857\tdatacaptor\n1858\tprivateark\n1859\tgammafetchsvr\n1860\tsunscalar-svc\n1861\tlecroy-vicp\n1862\tmysql-cm-agent\n1863\tmsnp\n1864\tparadym-31\n1865\tentp\n1866\tswrmi\n1867\tudrive\n1868\tviziblebrowser\n1869\ttransact\n1870\tsunscalar-dns\n1871\tcanocentral0\n1872\tcanocentral1\n1873\tfjmpjps\n1874\tfjswapsnp\n1875\twestell-stats\n1876\tewcappsrv\n1877\thp-webqosdb\n1878\tdrmsmc\n1879\tnettgain-nms\n1880\tvsat-control\n1881\tibm-mqseries2\n1882\tecsqdmn\n1883\tmqtt\n1884\tidmaps\n1885\tvrtstrapserver\n1886\tleoip\n1887\tfilex-lport\n1888\tncconfig\n1889\tunify-adapter\n1890\twilkenlistener\n1891\tchildkey-notif\n1892\tchildkey-ctrl\n1893\telad\n1894\to2server-port\n1896\tb-novative-ls\n1897\tmetaagent\n1898\tcymtec-port\n1899\tmc2studios\n1900\tupnp\n1901\tfjicl-tep-a\n1902\tfjicl-tep-b\n1903\tlinkname\n1904\tfjicl-tep-c\n1905\tsugp\n1906\ttpmd\n1907\tintrastar\n1908\tdawn\n1909\tglobal-wlink\n1910\tultrabac\n1911\tmtp\n1912\trhp-iibp\n1913\tarmadp\n1914\telm-momentum\n1915\tfacelink\n1916\tpersona\n1917\tnoagent\n1918\tcan-nds\n1919\tcan-dch\n1920\tcan-ferret\n1921\tnoadmin\n1922\ttapestry\n1923\tspice\n1924\txiip\n1925\tdiscovery-port\n1926\tegs\n1927\tvidete-cipc\n1928\temsd-port\n1929\tbandwiz-system\n1930\tdriveappserver\n1931\tamdsched\n1932\tctt-broker\n1933\txmapi\n1934\txaapi\n1935\trtmp\n1936\tjetcmeserver\n1937\tjwserver\n1938\tjwclient\n1939\tjvserver\n1940\tjvclient\n1941\tdic-aida\n1942\tres\n1943\tbeeyond-media\n1944\tclose-combat\n1945\tdialogic-elmd\n1946\ttekpls\n1947\tsentinelsrm\n1948\teye2eye\n1949\tismaeasdaqlive\n1950\tismaeasdaqtest\n1951\tbcs-lmserver\n1952\tmpnjsc\n1953\trapidbase\n1954\tabr-api\n1955\tabr-secure\n1956\tvrtl-vmf-ds\n1957\tunix-status\n1958\tdxadmind\n1959\tsimp-all\n1960\tnasmanager\n1961\tbts-appserver\n1962\tbiap-mp\n1963\twebmachine\n1964\tsolid-e-engine\n1965\ttivoli-npm\n1966\tslush\n1967\tsns-quote\n1968\tlipsinc\n1969\tlipsinc1\n1970\tnetop-rc\n1971\tnetop-school\n1972\tintersys-cache\n1973\tdlsrap\n1974\tdrp\n1975\ttcoflashagent\n1976\ttcoregagent\n1977\ttcoaddressbook\n1978\tunisql\n1979\tunisql-java\n1980\tpearldoc-xact\n1981\tp2pq\n1982\testamp\n1983\tlhtp\n1984\tbigbrother\n1985\thsrp\n1986\tlicensedaemon\n1987\ttr-rsrb-p1\n1988\ttr-rsrb-p2\n1989\ttr-rsrb-p3\n1990\tstun-p1\n1991\tstun-p2\n1992\tstun-p3\n1993\tsnmp-tcp-port\n1994\tstun-port\n1995\tperf-port\n1996\ttr-rsrb-port\n1997\tgdp-port\n1998\tx25-svc-port\n1999\ttcp-id-port\n2000\tcisco-sccp\n2001\tdc\n2002\tglobe\n2003\tfinger\n2004\tmailbox\n2005\tdeslogin\n2006\tinvokator\n2007\tdectalk\n2008\tconf\n2009\tnews\n2010\tsearch\n2011\traid-cc\n2012\tttyinfo\n2013\traid-am\n2014\ttroff\n2015\tcypress\n2016\tbootserver\n2017\tcypress-stat\n2018\tterminaldb\n2019\twhosockami\n2020\txinupageserver\n2021\tservexec\n2022\tdown\n2023\txinuexpansion3\n2024\txinuexpansion4\n2025\tellpack\n2026\tscrabble\n2027\tshadowserver\n2028\tsubmitserver\n2029\thsrpv6\n2030\tdevice2\n2031\tmobrien-chat\n2032\tblackboard\n2033\tglogger\n2034\tscoremgr\n2035\timsldoc\n2036\te-dpnet\n2037\tapplus\n2038\tobjectmanager\n2039\tprizma\n2040\tlam\n2041\tinterbase\n2042\tisis\n2043\tisis-bcast\n2044\trimsl\n2045\tcdfunc\n2046\tsdfunc\n2047\tdls\n2048\tdls-monitor\n2049\tnfs\n2050\tav-emb-config\n2051\tepnsdp\n2052\tclearvisn\n2053\tknetd\n2054\tweblogin\n2055\tiop\n2056\tomnisky\n2057\trich-cp\n2058\tnewwavesearch\n2059\tbmc-messaging\n2060\tteleniumdaemon\n2061\tnetmount\n2062\ticg-swp\n2063\ticg-bridge\n2064\tdnet-keyproxy\n2065\tdlsrpn\n2066\taura\n2067\tdlswpn\n2068\tavocentkvm\n2069\tevent-port\n2070\tah-esp-encap\n2071\tacp-port\n2072\tmsync\n2073\tgxs-data-port\n2074\tvrtl-vmf-sa\n2075\tnewlixengine\n2076\tnewlixconfig\n2077\ttsrmagt\n2078\ttpcsrvr\n2079\tidware-router\n2080\tautodesk-nlm\n2081\tkme-trap-port\n2082\tinfowave\n2083\tradsec\n2084\tsunclustergeo\n2085\tada-cip\n2086\tgnunet\n2087\teli\n2088\tip-blf\n2089\tsep\n2090\tlrp\n2091\tprp\n2092\tdescent3\n2093\tnbx-cc\n2094\tnbx-au\n2095\tnbx-ser\n2096\tnbx-dir\n2097\tjetformpreview\n2098\tdialog-port\n2099\th2250-annex-g\n2100\tamiganetfs\n2101\trtcm-sc104\n2102\tzephyr-srv\n2103\tzephyr-clt\n2104\tzephyr-hm\n2105\teklogin\n2106\tekshell\n2107\tmsmq-mgmt\n2108\trkinit\n2109\tergolight\n2110\tumsp\n2111\tkx\n2112\tkip\n2113\thsl-storm\n2114\tnewheights\n2115\tkdm\n2116\tccowcmr\n2117\tmentaclient\n2118\tmentaserver\n2119\tgsigatekeeper\n2120\tkauth\n2121\tccproxy-ftp\n2122\tcaupc-remote\n2123\tgtp-control\n2124\telatelink\n2125\tlockstep\n2126\tpktcable-cops\n2127\tindex-pc-wb\n2128\tnet-steward\n2129\tcs-live\n2130\txds\n2131\tavantageb2b\n2132\tsolera-epmap\n2133\tzymed-zpp\n2134\tavenue\n2135\tgris\n2136\tappworxsrv\n2137\tconnect\n2138\tunbind-cluster\n2139\tias-auth\n2140\tias-reg\n2141\tias-admind\n2142\ttdmoip\n2143\tlv-jc\n2144\tlv-ffx\n2145\tlv-pici\n2146\tlv-not\n2147\tlv-auth\n2148\tveritas-ucl\n2149\tacptsys\n2150\tdynamic3d\n2151\tdocent\n2152\tgtp-user\n2153\tctlptc\n2154\tstdptc\n2155\tbrdptc\n2156\ttrp\n2157\txnds\n2158\ttouchnetplus\n2159\tgdbremote\n2160\tapc-2160\n2161\tapc-agent\n2162\tnavisphere\n2163\tnavisphere-sec\n2164\tddns-v3\n2165\tx-bone-api\n2166\tiwserver\n2167\traw-serial\n2168\teasy-soft-mux\n2169\tbrain\n2170\teyetv\n2171\tmsfw-storage\n2172\tmsfw-s-storage\n2173\tmsfw-replica\n2174\tmsfw-array\n2175\tairsync\n2176\trapi\n2177\tqwave\n2178\tbitspeer\n2179\tvmrdp\n2180\tmc-gt-srv\n2181\teforward\n2182\tcgn-stat\n2183\tcgn-config\n2184\tnvd\n2185\tonbase-dds\n2186\tgtaua\n2187\tssmc\n2188\tradware-rpm\n2189\tradware-rpm-s\n2190\ttivoconnect\n2191\ttvbus\n2192\tasdis\n2193\tdrwcs\n2197\tmnp-exchange\n2198\tonehome-remote\n2199\tonehome-help\n2200\tici\n2201\tats\n2202\timtc-map\n2203\tb2-runtime\n2204\tb2-license\n2205\tjps\n2206\thpocbus\n2207\thpssd\n2208\thpiod\n2209\trimf-ps\n2210\tnoaaport\n2211\temwin\n2212\tleecoposserver\n2213\tkali\n2214\trpi\n2215\tipcore\n2216\tvtu-comms\n2217\tgotodevice\n2218\tbounzza\n2219\tnetiq-ncap\n2220\tnetiq\n2221\trockwell-csp1\n2222\tEtherNetIP-1\n2223\trockwell-csp2\n2224\tefi-mg\n2225\trcip-itu\n2226\tdi-drm\n2227\tdi-msg\n2228\tehome-ms\n2229\tdatalens\n2230\tqueueadm\n2231\twimaxasncp\n2232\tivs-video\n2233\tinfocrypt\n2234\tdirectplay\n2235\tsercomm-wlink\n2236\tnani\n2237\toptech-port1-lm\n2238\taviva-sna\n2239\timagequery\n2240\trecipe\n2241\tivsd\n2242\tfoliocorp\n2243\tmagicom\n2244\tnmsserver\n2245\thao\n2246\tpc-mta-addrmap\n2247\tantidotemgrsvr\n2248\tums\n2249\trfmp\n2250\tremote-collab\n2251\tdif-port\n2252\tnjenet-ssl\n2253\tdtv-chan-req\n2254\tseispoc\n2255\tvrtp\n2256\tpcc-mfp\n2257\tsimple-tx-rx\n2258\trcts\n2259\tacd-pm\n2260\tapc-2260\n2261\tcomotionmaster\n2262\tcomotionback\n2263\tecwcfg\n2264\tapx500api-1\n2265\tapx500api-2\n2266\tmfserver\n2267\tontobroker\n2268\tamt\n2269\tmikey\n2270\tstarschool\n2271\tmmcals\n2272\tmmcal\n2273\tmysql-im\n2274\tpcttunnell\n2275\tibridge-data\n2276\tibridge-mgmt\n2277\tbluectrlproxy\n2278\ts3db\n2279\txmquery\n2280\tlnvpoller\n2281\tlnvconsole\n2282\tlnvalarm\n2283\tlnvstatus\n2284\tlnvmaps\n2285\tlnvmailmon\n2286\tnas-metering\n2287\tdna\n2288\tnetml\n2289\tdict-lookup\n2290\tsonus-logging\n2291\teapsp\n2292\tmib-streaming\n2293\tnpdbgmngr\n2294\tkonshus-lm\n2295\tadvant-lm\n2296\ttheta-lm\n2297\td2k-datamover1\n2298\td2k-datamover2\n2299\tpc-telecommute\n2300\tcvmmon\n2301\tcompaqdiag\n2302\tbinderysupport\n2303\tproxy-gateway\n2304\tattachmate-uts\n2305\tmt-scaleserver\n2306\ttappi-boxnet\n2307\tpehelp\n2308\tsdhelp\n2309\tsdserver\n2310\tsdclient\n2311\tmessageservice\n2312\twanscaler\n2313\tiapp\n2314\tcr-websystems\n2315\tprecise-sft\n2316\tsent-lm\n2317\tattachmate-g32\n2318\tcadencecontrol\n2319\tinfolibria\n2320\tsiebel-ns\n2321\trdlap\n2322\tofsd\n2323\t3d-nfsd\n2324\tcosmocall\n2325\tansysli\n2326\tidcp\n2327\txingcsm\n2328\tnetrix-sftm\n2329\tnvd\n2330\ttscchat\n2331\tagentview\n2332\trcc-host\n2333\tsnapp\n2334\tace-client\n2335\tace-proxy\n2336\tappleugcontrol\n2337\tideesrv\n2338\tnorton-lambert\n2339\t3com-webview\n2340\twrs_registry\n2341\txiostatus\n2342\tmanage-exec\n2343\tnati-logos\n2344\tfcmsys\n2345\tdbm\n2346\tredstorm_join\n2347\tredstorm_find\n2348\tredstorm_info\n2349\tredstorm_diag\n2350\tpsbserver\n2351\tpsrserver\n2352\tpslserver\n2353\tpspserver\n2354\tpsprserver\n2355\tpsdbserver\n2356\tgxtelmd\n2357\tunihub-server\n2358\tfutrix\n2359\tflukeserver\n2360\tnexstorindltd\n2361\ttl1\n2362\tdigiman\n2363\tmediacntrlnfsd\n2364\toi-2000\n2365\tdbref\n2366\tqip-login\n2367\tservice-ctrl\n2368\topentable\n2370\tl3-hbmon\n2371\tworldwire\n2372\tlanmessenger\n2373\tremographlm\n2374\thydra\n2375\tdocker\n2376\tdocker\n2377\tswarm\n2378\tdali\n2379\tetcd-client\n2380\tetcd-server\n2381\tcompaq-https\n2382\tms-olap3\n2383\tms-olap4\n2384\tsd-request\n2385\tsd-data\n2386\tvirtualtape\n2387\tvsamredirector\n2388\tmynahautostart\n2389\tovsessionmgr\n2390\trsmtp\n2391\t3com-net-mgmt\n2392\ttacticalauth\n2393\tms-olap1\n2394\tms-olap2\n2395\tlan900_remote\n2396\twusage\n2397\tncl\n2398\torbiter\n2399\tfmpro-fdal\n2400\topequus-server\n2401\tcvspserver\n2402\ttaskmaster2000\n2403\ttaskmaster2000\n2404\tiec-104\n2405\ttrc-netpoll\n2406\tjediserver\n2407\torion\n2408\toptimanet\n2409\tsns-protocol\n2410\tvrts-registry\n2411\tnetwave-ap-mgmt\n2412\tcdn\n2413\torion-rmi-reg\n2414\tbeeyond\n2415\tcodima-rtp\n2416\trmtserver\n2417\tcomposit-server\n2418\tcas\n2419\tattachmate-s2s\n2420\tdslremote-mgmt\n2421\tg-talk\n2422\tcrmsbits\n2423\trnrp\n2424\tkofax-svr\n2425\tfjitsuappmgr\n2426\tvcmp\n2427\tmgcp-gateway\n2428\tott\n2429\tft-role\n2430\tvenus\n2431\tvenus-se\n2432\tcodasrv\n2433\tcodasrv-se\n2434\tpxc-epmap\n2435\toptilogic\n2436\ttopx\n2437\tunicontrol\n2438\tmsp\n2439\tsybasedbsynch\n2440\tspearway\n2441\tpvsw-inet\n2442\tnetangel\n2443\tpowerclientcsf\n2444\tbtpp2sectrans\n2445\tdtn1\n2446\tbues_service\n2447\tovwdb\n2448\thpppssvr\n2449\tratl\n2450\tnetadmin\n2451\tnetchat\n2452\tsnifferclient\n2453\tmadge-ltd\n2454\tindx-dds\n2455\twago-io-system\n2456\taltav-remmgt\n2457\trapido-ip\n2458\tgriffin\n2459\tcommunity\n2460\tms-theater\n2461\tqadmifoper\n2462\tqadmifevent\n2463\tlsi-raid-mgmt\n2464\tdirecpc-si\n2465\tlbm\n2466\tlbf\n2467\thigh-criteria\n2468\tqip-msgd\n2469\tmti-tcs-comm\n2470\ttaskman-port\n2471\tseaodbc\n2472\tc3\n2473\taker-cdp\n2474\tvitalanalysis\n2475\tace-server\n2476\tace-svr-prop\n2477\tssm-cvs\n2478\tssm-cssps\n2479\tssm-els\n2480\tpowerexchange\n2481\tgiop\n2482\tgiop-ssl\n2483\tttc\n2484\tttc-ssl\n2485\tnetobjects1\n2486\tnetobjects2\n2487\tpns\n2488\tmoy-corp\n2489\ttsilb\n2490\tqip-qdhcp\n2491\tconclave-cpp\n2492\tgroove\n2493\ttalarian-mqs\n2494\tbmc-ar\n2495\tfast-rem-serv\n2496\tdirgis\n2497\tquaddb\n2498\todn-castraq\n2499\tunicontrol\n2500\trtsserv\n2501\trtsclient\n2502\tkentrox-prot\n2503\tnms-dpnss\n2504\twlbs\n2505\tppcontrol\n2506\tjbroker\n2507\tspock\n2508\tjdatastore\n2509\tfjmpss\n2510\tfjappmgrbulk\n2511\tmetastorm\n2512\tcitrixima\n2513\tcitrixadmin\n2514\tfacsys-ntp\n2515\tfacsys-router\n2516\tmaincontrol\n2517\tcall-sig-trans\n2518\twilly\n2519\tglobmsgsvc\n2520\tpvsw\n2521\tadaptecmgr\n2522\twindb\n2523\tqke-llc-v3\n2524\toptiwave-lm\n2525\tms-v-worlds\n2526\tema-sent-lm\n2527\tiqserver\n2528\tncr_ccl\n2529\tutsftp\n2530\tvrcommerce\n2531\tito-e-gui\n2532\tovtopmd\n2533\tsnifferserver\n2534\tcombox-web-acc\n2535\tmadcap\n2536\tbtpp2audctr1\n2537\tupgrade\n2538\tvnwk-prapi\n2539\tvsiadmin\n2540\tlonworks\n2541\tlonworks2\n2542\tudrawgraph\n2543\treftek\n2544\tnovell-zen\n2545\tsis-emt\n2546\tvytalvaultbrtp\n2547\tvytalvaultvsmp\n2548\tvytalvaultpipe\n2549\tipass\n2550\tads\n2551\tisg-uda-server\n2552\tcall-logging\n2553\tefidiningport\n2554\tvcnet-link-v10\n2555\tcompaq-wcp\n2556\tnicetec-nmsvc\n2557\tnicetec-mgmt\n2558\tpclemultimedia\n2559\tlstp\n2560\tlabrat\n2561\tmosaixcc\n2562\tdelibo\n2563\tcti-redwood\n2564\thp-3000-telnet\n2565\tcoord-svr\n2566\tpcs-pcw\n2567\tclp\n2568\tspamtrap\n2569\tsonuscallsig\n2570\ths-port\n2571\tcecsvc\n2572\tibp\n2573\ttrustestablish\n2574\tblockade-bpsp\n2575\thl7\n2576\ttclprodebugger\n2577\tscipticslsrvr\n2578\trvs-isdn-dcp\n2579\tmpfoncl\n2580\ttributary\n2581\targis-te\n2582\targis-ds\n2583\tmon\n2584\tcyaserv\n2585\tnetx-server\n2586\tnetx-agent\n2587\tmasc\n2588\tprivilege\n2589\tquartus-tcl\n2590\tidotdist\n2591\tmaytagshuffle\n2592\tnetrek\n2593\tmns-mail\n2594\tdts\n2595\tworldfusion1\n2596\tworldfusion2\n2597\thomesteadglory\n2598\tcitriximaclient\n2599\tsnapd\n2600\tzebrasrv\n2601\tzebra\n2602\tripd\n2603\tripngd\n2604\tospfd\n2605\tbgpd\n2606\tnetmon\n2607\tconnection\n2608\twag-service\n2609\tsystem-monitor\n2610\tversa-tek\n2611\tlionhead\n2612\tqpasa-agent\n2613\tsmntubootstrap\n2614\tneveroffline\n2615\tfirepower\n2616\tappswitch-emp\n2617\tcmadmin\n2618\tpriority-e-com\n2619\tbruce\n2620\tlpsrecommender\n2621\tmiles-apart\n2622\tmetricadbc\n2623\tlmdp\n2624\taria\n2625\tblwnkl-port\n2626\tgbjd816\n2627\twebster\n2628\tdict\n2629\tsitaraserver\n2630\tsitaramgmt\n2631\tsitaradir\n2632\tirdg-post\n2633\tinterintelli\n2634\tpk-electronics\n2635\tbackburner\n2636\tsolve\n2637\timdocsvc\n2638\tsybase\n2639\taminet\n2640\tsai_sentlm\n2641\thdl-srv\n2642\ttragic\n2643\tgte-samp\n2644\ttravsoft-ipx-t\n2645\tnovell-ipx-cmd\n2646\tand-lm\n2647\tsyncserver\n2648\tupsnotifyprot\n2649\tvpsipport\n2650\teristwoguns\n2651\tebinsite\n2652\tinterpathpanel\n2653\tsonus\n2654\tcorel_vncadmin\n2655\tunglue\n2656\tkana\n2657\tsns-dispatcher\n2658\tsns-admin\n2659\tsns-query\n2660\tgcmonitor\n2661\tolhost\n2662\tbintec-capi\n2663\tbintec-tapi\n2664\tpatrol-mq-gm\n2665\tpatrol-mq-nm\n2666\textensis\n2667\talarm-clock-s\n2668\talarm-clock-c\n2669\ttoad\n2670\ttve-announce\n2671\tnewlixreg\n2672\tnhserver\n2673\tfirstcall42\n2674\tewnn\n2675\tttc-etap\n2676\tsimslink\n2677\tgadgetgate1way\n2678\tgadgetgate2way\n2679\tsyncserverssl\n2680\tpxc-sapxom\n2681\tmpnjsomb\n2683\tncdloadbalance\n2684\tmpnjsosv\n2685\tmpnjsocl\n2686\tmpnjsomg\n2687\tpq-lic-mgmt\n2688\tmd-cg-http\n2689\tfastlynx\n2690\thp-nnm-data\n2691\titinternet\n2692\tadmins-lms\n2694\tpwrsevent\n2695\tvspread\n2696\tunifyadmin\n2697\toce-snmp-trap\n2698\tmck-ivpip\n2699\tcsoft-plusclnt\n2700\ttqdata\n2701\tsms-rcinfo\n2702\tsms-xfer\n2703\tsms-chat\n2704\tsms-remctrl\n2705\tsds-admin\n2706\tncdmirroring\n2707\temcsymapiport\n2708\tbanyan-net\n2709\tsupermon\n2710\tsso-service\n2711\tsso-control\n2712\taocp\n2713\traventbs\n2714\traventdm\n2715\thpstgmgr2\n2716\tinova-ip-disco\n2717\tpn-requester\n2718\tpn-requester2\n2719\tscan-change\n2720\twkars\n2721\tsmart-diagnose\n2722\tproactivesrvr\n2723\twatchdog-nt\n2724\tqotps\n2725\tmsolap-ptp2\n2726\ttams\n2727\tmgcp-callagent\n2728\tsqdr\n2729\ttcim-control\n2730\tnec-raidplus\n2731\tfyre-messanger\n2732\tg5m\n2733\tsignet-ctf\n2734\tccs-software\n2735\tnetiq-mc\n2736\tradwiz-nms-srv\n2737\tsrp-feedback\n2738\tndl-tcp-ois-gw\n2739\ttn-timing\n2740\talarm\n2741\ttsb\n2742\ttsb2\n2743\tmurx\n2744\thonyaku\n2745\turbisnet\n2746\tcpudpencap\n2747\tfjippol-swrly\n2748\tfjippol-polsvr\n2749\tfjippol-cnsl\n2750\tfjippol-port1\n2751\tfjippol-port2\n2752\trsisysaccess\n2753\tde-spot\n2754\tapollo-cc\n2755\texpresspay\n2756\tsimplement-tie\n2757\tcnrp\n2758\tapollo-status\n2759\tapollo-gms\n2760\tsabams\n2761\tdicom-iscl\n2762\tdicom-tls\n2763\tdesktop-dna\n2764\tdata-insurance\n2765\tqip-audup\n2766\tlisten\n2767\tuadtc\n2768\tuacs\n2769\texce\n2770\tveronica\n2771\tvergencecm\n2772\tauris\n2773\trbakcup1\n2774\trbakcup2\n2775\tsmpp\n2776\tridgeway1\n2777\tridgeway2\n2778\tgwen-sonya\n2779\tlbc-sync\n2780\tlbc-control\n2781\twhosells\n2782\teverydayrc\n2783\taises\n2784\twww-dev\n2785\taic-np\n2786\taic-oncrpc\n2787\tpiccolo\n2788\tfryeserv\n2789\tmedia-agent\n2790\tplgproxy\n2791\tmtport-regist\n2792\tf5-globalsite\n2793\tinitlsmsad\n2795\tlivestats\n2796\tac-tech\n2797\tesp-encap\n2798\ttmesis-upshot\n2799\ticon-discover\n2800\tacc-raid\n2801\tigcp\n2802\tveritas-tcp1\n2803\tbtprjctrl\n2804\tdvr-esm\n2805\twta-wsp-s\n2806\tcspuni\n2807\tcspmulti\n2808\tj-lan-p\n2809\tcorbaloc\n2810\tnetsteward\n2811\tgsiftp\n2812\tatmtcp\n2813\tllm-pass\n2814\tllm-csv\n2815\tlbc-measure\n2816\tlbc-watchdog\n2817\tnmsigport\n2818\trmlnk\n2819\tfc-faultnotify\n2820\tunivision\n2821\tvrts-at-port\n2822\tka0wuc\n2823\tcqg-netlan\n2824\tcqg-netlan-1\n2826\tslc-systemlog\n2827\tslc-ctrlrloops\n2828\titm-lm\n2829\tsilkp1\n2830\tsilkp2\n2831\tsilkp3\n2832\tsilkp4\n2833\tglishd\n2834\tevtp\n2835\tevtp-data\n2836\tcatalyst\n2837\trepliweb\n2838\tstarbot\n2839\tnmsigport\n2840\tl3-exprt\n2841\tl3-ranger\n2842\tl3-hawk\n2843\tpdnet\n2844\tbpcp-poll\n2845\tbpcp-trap\n2846\taimpp-hello\n2847\taimpp-port-req\n2848\tamt-blc-port\n2849\tfxp\n2850\tmetaconsole\n2851\twebemshttp\n2852\tbears-01\n2853\tispipes\n2854\tinfomover\n2855\tmsrp\n2856\tcesdinv\n2857\tsimctlp\n2858\tecnp\n2859\tactivememory\n2860\tdialpad-voice1\n2861\tdialpad-voice2\n2862\tttg-protocol\n2863\tsonardata\n2864\tastromed-main\n2865\tpit-vpn\n2866\tiwlistener\n2867\tesps-portal\n2868\tnpep-messaging\n2869\ticslap\n2870\tdaishi\n2871\tmsi-selectplay\n2872\tradix\n2874\tdxmessagebase1\n2875\tdxmessagebase2\n2876\tsps-tunnel\n2877\tbluelance\n2878\taap\n2879\tucentric-ds\n2880\tsynapse\n2881\tndsp\n2882\tndtp\n2883\tndnp\n2884\tflashmsg\n2885\ttopflow\n2886\tresponselogic\n2887\taironetddp\n2888\tspcsdlobby\n2889\trsom\n2890\tcspclmulti\n2891\tcinegrfx-elmd\n2892\tsnifferdata\n2893\tvseconnector\n2894\tabacus-remote\n2895\tnatuslink\n2896\tecovisiong6-1\n2897\tcitrix-rtmp\n2898\tappliance-cfg\n2899\tpowergemplus\n2900\tquicksuite\n2901\tallstorcns\n2902\tnetaspi\n2903\textensisportfolio\n2904\tm2ua\n2905\tm3ua\n2906\tcaller9\n2907\twebmethods-b2b\n2908\tmao\n2909\tfunk-dialout\n2910\ttdaccess\n2911\tblockade\n2912\tepicon\n2913\tboosterware\n2914\tgamelobby\n2915\ttksocket\n2916\telvin_server\n2917\telvin_client\n2918\tkastenchasepad\n2919\troboer\n2920\troboeda\n2921\tcesdcdman\n2922\tcesdcdtrn\n2923\twta-wsp-wtp-s\n2924\tprecise-vip\n2926\tmobile-file-dl\n2927\tunimobilectrl\n2928\tredstone-cpss\n2929\tamx-webadmin\n2930\tamx-weblinx\n2931\tcircle-x\n2932\tincp\n2933\t4-tieropmgw\n2934\t4-tieropmcli\n2935\tqtp\n2936\totpatch\n2937\tpnaconsult-lm\n2938\tsm-pas-1\n2939\tsm-pas-2\n2940\tsm-pas-3\n2941\tsm-pas-4\n2942\tsm-pas-5\n2943\tttnrepository\n2944\tmegaco-h248\n2945\th248-binary\n2946\tfjsvmpor\n2947\tgpsd\n2948\twap-push\n2949\twap-pushsecure\n2950\tesip\n2951\tottp\n2952\tmpfwsas\n2953\tovalarmsrv\n2954\tovalarmsrv-cmd\n2955\tcsnotify\n2956\tovrimosdbman\n2957\tjmact5\n2958\tjmact6\n2959\trmopagt\n2960\tdfoxserver\n2961\tboldsoft-lm\n2962\tiph-policy-cli\n2963\tiph-policy-adm\n2964\tbullant-srap\n2965\tbullant-rap\n2966\tidp-infotrieve\n2967\tsymantec-av\n2968\tenpp\n2969\tessp\n2970\tindex-net\n2971\tnetclip\n2972\tpmsm-webrctl\n2973\tsvnetworks\n2974\tsignal\n2975\tfjmpcm\n2976\tcns-srv-port\n2977\tttc-etap-ns\n2978\tttc-etap-ds\n2979\th263-video\n2980\twimd\n2981\tmylxamport\n2982\tiwb-whiteboard\n2983\tnetplan\n2984\thpidsadmin\n2985\thpidsagent\n2986\tstonefalls\n2987\tidentify\n2988\thippad\n2989\tzarkov\n2990\tboscap\n2991\twkstn-mon\n2992\tavenyo\n2993\tveritas-vis1\n2994\tveritas-vis2\n2995\tidrs\n2996\tvsixml\n2997\trebol\n2998\tiss-realsec\n2999\tremoteware-un\n3000\tppp\n3001\tnessus\n3002\texlm-agent\n3003\tcgms\n3004\tcsoftragent\n3005\tdeslogin\n3006\tdeslogind\n3007\tlotusmtap\n3008\tmidnight-tech\n3009\tpxc-ntfy\n3010\tgw\n3011\ttrusted-web\n3012\ttwsdss\n3013\tgilatskysurfer\n3014\tbroker_service\n3015\tnati-dstp\n3016\tnotify_srvr\n3017\tevent_listener\n3018\tsrvc_registry\n3019\tresource_mgr\n3020\tcifs\n3021\tagriserver\n3022\tcsregagent\n3023\tmagicnotes\n3024\tnds_sso\n3025\tslnp\n3026\tagri-gateway\n3027\tLiebDevMgmt_C\n3028\tLiebDevMgmt_DM\n3029\tLiebDevMgmt_A\n3030\tarepa-cas\n3031\teppc\n3032\tredwood-chat\n3033\tpdb\n3034\tosmosis-aeea\n3035\tfjsv-gssagt\n3036\thagel-dump\n3037\thp-san-mgmt\n3038\tsantak-ups\n3039\tcogitate\n3040\ttomato-springs\n3041\tdi-traceware\n3042\tjournee\n3043\tbrp\n3044\tepp\n3045\tslnp\n3046\tdi-ase\n3047\thlserver\n3048\tpctrader\n3049\tcfs\n3050\tgds_db\n3051\tgalaxy-server\n3052\tpowerchute\n3053\tdsom-server\n3054\tamt-cnf-prot\n3055\tpolicyserver\n3056\tcdl-server\n3057\tgoahead-fldup\n3058\tvideobeans\n3059\tqsoft\n3060\tinterserver\n3061\tcautcpd\n3062\tncacn-ip-tcp\n3063\tncadg-ip-udp\n3064\tdnet-tstproxy\n3065\tslinterbase\n3066\tnetattachsdmp\n3067\tfjhpjp\n3068\tls3bcast\n3069\tls3\n3070\tmgxswitch\n3071\tcsd-mgmt-port\n3072\tcsd-monitor\n3073\tvcrp\n3074\txbox\n3075\torbix-locator\n3076\torbix-config\n3077\torbix-loc-ssl\n3078\torbix-cfg-ssl\n3079\tlv-frontpanel\n3080\tstm_pproc\n3081\ttl1-lv\n3082\ttl1-raw\n3083\ttl1-telnet\n3084\titm-mccs\n3085\tpcihreq\n3086\tsj3\n3087\tasoki-sma\n3088\txdtp\n3089\tptk-alink\n3090\tstss\n3091\t1ci-smcs\n3093\trapidmq-center\n3094\trapidmq-reg\n3095\tpanasas\n3096\tndl-aps\n3098\tumm-port\n3099\tchmd\n3100\topcon-xps\n3101\thp-pxpib\n3102\tslslavemon\n3103\tautocuesmi\n3104\tautocuelog\n3105\tcardbox\n3106\tcardbox-http\n3107\tbusiness\n3108\tgeolocate\n3109\tpersonnel\n3110\tsim-control\n3111\twsynch\n3112\tksysguard\n3113\tcs-auth-svr\n3114\tccmad\n3115\tmctet-master\n3116\tmctet-gateway\n3117\tmctet-jserv\n3118\tpkagent\n3119\td2000kernel\n3120\td2000webserver\n3121\tpcmk-remote\n3122\tvtr-emulator\n3123\tedix\n3124\tbeacon-port\n3125\ta13-an\n3127\tctx-bridge\n3128\tsquid-http\n3129\tnetport-id\n3130\ticpv2\n3131\tnetbookmark\n3132\tms-rule-engine\n3133\tprism-deploy\n3134\tecp\n3135\tpeerbook-port\n3136\tgrubd\n3137\trtnt-1\n3138\trtnt-2\n3139\tincognitorv\n3140\tariliamulti\n3141\tvmodem\n3142\tapt-cacher\n3143\tseaview\n3144\ttarantella\n3145\tcsi-lfap\n3146\tbears-02\n3147\trfio\n3148\tnm-game-admin\n3149\tnm-game-server\n3150\tnm-asses-admin\n3151\tnm-assessor\n3152\tfeitianrockey\n3153\ts8-client-port\n3154\tccmrmi\n3155\tjpegmpeg\n3156\tindura\n3157\te3consultants\n3158\tstvp\n3159\tnavegaweb-port\n3160\ttip-app-server\n3161\tdoc1lm\n3162\tsflm\n3163\tres-sap\n3164\timprs\n3165\tnewgenpay\n3166\tsossecollector\n3167\tnowcontact\n3168\tpoweronnud\n3169\tserverview-as\n3170\tserverview-asn\n3171\tserverview-gf\n3172\tserverview-rm\n3173\tserverview-icc\n3174\tarmi-server\n3175\tt1-e1-over-ip\n3176\tars-master\n3177\tphonex-port\n3178\tradclientport\n3179\th2gf-w-2m\n3180\tmc-brk-srv\n3181\tbmcpatrolagent\n3182\tbmcpatrolrnvu\n3183\tcops-tls\n3184\tapogeex-port\n3185\tsmpppd\n3186\tiiw-port\n3187\todi-port\n3188\tbrcm-comm-port\n3189\tpcle-infex\n3190\tcsvr-proxy\n3191\tcsvr-sslproxy\n3192\tfiremonrcc\n3193\tspandataport\n3194\tmagbind\n3195\tncu-1\n3196\tncu-2\n3197\tembrace-dp-s\n3198\tembrace-dp-c\n3199\tdmod-workspace\n3200\ttick-port\n3201\tcpq-tasksmart\n3202\tintraintra\n3203\tnetwatcher-mon\n3204\tnetwatcher-db\n3205\tisns\n3206\tironmail\n3207\tvx-auth-port\n3208\tpfu-prcallback\n3209\tnetwkpathengine\n3210\tflamenco-proxy\n3211\tavsecuremgmt\n3212\tsurveyinst\n3213\tneon24x7\n3214\tjmq-daemon-1\n3215\tjmq-daemon-2\n3216\tferrari-foam\n3217\tunite\n3218\tsmartpackets\n3219\twms-messenger\n3220\txnm-ssl\n3221\txnm-clear-text\n3222\tglbp\n3223\tdigivote\n3224\taes-discovery\n3225\tfcip-port\n3226\tisi-irp\n3227\tdwnmshttp\n3228\tdwmsgserver\n3229\tglobal-cd-port\n3230\tsftdst-port\n3231\tvidigo\n3232\tmdtp\n3233\twhisker\n3234\talchemy\n3235\tmdap-port\n3236\tapparenet-ts\n3237\tapparenet-tps\n3238\tapparenet-as\n3239\tapparenet-ui\n3240\ttriomotion\n3241\tsysorb\n3242\tsdp-id-port\n3243\ttimelot\n3244\tonesaf\n3245\tvieo-fe\n3246\tdvt-system\n3247\tdvt-data\n3248\tprocos-lm\n3249\tssp\n3250\thicp\n3251\tsysscanner\n3252\tdhe\n3253\tpda-data\n3254\tpda-sys\n3255\tsemaphore\n3256\tcpqrpm-agent\n3257\tcpqrpm-server\n3258\tivecon-port\n3259\tepncdp2\n3260\tiscsi\n3261\twinshadow\n3262\tnecp\n3263\tecolor-imager\n3264\tccmail\n3265\taltav-tunnel\n3266\tns-cfg-server\n3267\tibm-dial-out\n3268\tglobalcatLDAP\n3269\tglobalcatLDAPssl\n3270\tverismart\n3271\tcsoft-prev\n3272\tuser-manager\n3273\tsxmp\n3274\tordinox-server\n3275\tsamd\n3276\tmaxim-asics\n3277\tawg-proxy\n3278\tlkcmserver\n3279\tadmind\n3280\tvs-server\n3281\tsysopt\n3282\tdatusorb\n3283\tnetassistant\n3284\t4talk\n3285\tplato\n3286\te-net\n3287\tdirectvdata\n3288\tcops\n3289\tenpc\n3290\tcaps-lm\n3291\tsah-lm\n3292\tmeetingmaker\n3293\tfg-fps\n3294\tfg-gip\n3295\tdyniplookup\n3296\trib-slm\n3297\tcytel-lm\n3298\tdeskview\n3299\tsaprouter\n3300\tceph\n3302\tmcs-fastmail\n3303\topsession-clnt\n3304\topsession-srvr\n3305\todette-ftp\n3306\tmysql\n3307\topsession-prxy\n3308\ttns-server\n3309\ttns-adv\n3310\tdyna-access\n3311\tmcns-tel-ret\n3312\tappman-server\n3313\tuorb\n3314\tuohost\n3315\tcdid\n3316\taicc-cmi\n3317\tvsaiport\n3318\tssrip\n3319\tsdt-lmd\n3320\tofficelink2000\n3321\tvnsstr\n3322\tactive-net\n3323\tactive-net\n3324\tactive-net\n3325\tactive-net\n3326\tsftu\n3327\tbbars\n3328\tegptlm\n3329\thp-device-disc\n3330\tmcs-calypsoicf\n3331\tmcs-messaging\n3332\tmcs-mailsvr\n3333\tdec-notes\n3334\tdirectv-web\n3335\tdirectv-soft\n3336\tdirectv-tick\n3337\tdirectv-catlg\n3338\tanet-b\n3339\tanet-l\n3340\tanet-m\n3341\tanet-h\n3342\twebtie\n3343\tms-cluster-net\n3344\tbnt-manager\n3345\tinfluence\n3346\ttrnsprntproxy\n3347\tphoenix-rpc\n3348\tpangolin-laser\n3349\tchevinservices\n3350\tfindviatv\n3351\tbtrieve\n3352\tssql\n3353\tfatpipe\n3354\tsuitjd\n3355\tordinox-dbase\n3356\tupnotifyps\n3357\tadtech-test\n3358\tmpsysrmsvr\n3359\twg-netforce\n3360\tkv-server\n3361\tkv-agent\n3362\tdj-ilm\n3363\tnati-vi-server\n3364\tcreativeserver\n3365\tcontentserver\n3366\tcreativepartnr\n3367\tsatvid-datalnk\n3368\tsatvid-datalnk\n3369\tsatvid-datalnk\n3370\tsatvid-datalnk\n3371\tsatvid-datalnk\n3372\tmsdtc\n3373\tlavenir-lm\n3374\tcluster-disc\n3375\tvsnm-agent\n3376\tcdbroker\n3377\tcogsys-lm\n3378\twsicopy\n3379\tsocorfs\n3380\tsns-channels\n3381\tgeneous\n3382\tfujitsu-neat\n3383\tesp-lm\n3384\thp-clic\n3385\tqnxnetman\n3386\tgprs-data\n3387\tbackroomnet\n3388\tcbserver\n3389\tms-wbt-server\n3390\tdsc\n3391\tsavant\n3392\tefi-lm\n3393\td2k-tapestry1\n3394\td2k-tapestry2\n3395\tdyna-lm\n3396\tprinter_agent\n3397\tsaposs\n3398\tsapcomm\n3399\tsapeps\n3400\tcsms2\n3401\tfilecast\n3402\tfxaengine-net\n3405\tnokia-ann-ch1\n3406\tnokia-ann-ch2\n3407\tldap-admin\n3408\tBESApi\n3409\tnetworklens\n3410\tnetworklenss\n3411\tbiolink-auth\n3412\txmlblaster\n3413\tsvnet\n3414\twip-port\n3415\tbcinameservice\n3416\tcommandport\n3417\tcsvr\n3418\trnmap\n3419\tsoftaudit\n3420\tifcp-port\n3421\tbmap\n3422\trusb-sys-port\n3423\txtrm\n3424\txtrms\n3425\tagps-port\n3426\tarkivio\n3427\twebsphere-snmp\n3428\ttwcss\n3429\tgcsp\n3430\tssdispatch\n3431\tndl-als\n3432\tosdcp\n3433\talta-smp\n3434\topencm\n3435\tpacom\n3436\tgc-config\n3437\tautocueds\n3438\tspiral-admin\n3439\thri-port\n3440\tans-console\n3441\tconnect-client\n3442\tconnect-server\n3443\tov-nnm-websrv\n3444\tdenali-server\n3445\tmonp\n3446\t3comfaxrpc\n3447\tdirectnet\n3448\tdnc-port\n3449\thotu-chat\n3450\tcastorproxy\n3451\tasam\n3452\tsabp-signal\n3453\tpscupd\n3454\tmira\n3455\tprsvp\n3456\tvat\n3457\tvat-control\n3458\td3winosfi\n3459\tintegral\n3460\tedm-manager\n3461\tedm-stager\n3462\ttrack\n3463\tedm-adm-notify\n3464\tedm-mgr-sync\n3465\tedm-mgr-cntrl\n3466\tworkflow\n3467\trcst\n3468\tttcmremotectrl\n3469\tpluribus\n3470\tjt400\n3471\tjt400-ssl\n3472\tjaugsremotec-1\n3473\tjaugsremotec-2\n3474\tttntspauto\n3475\tgenisar-port\n3476\tnppmp\n3477\tecomm\n3478\tstun\n3479\ttwrpc\n3480\tplethora\n3481\tcleanerliverc\n3482\tvulture\n3483\tslim-devices\n3484\tgbs-stp\n3485\tcelatalk\n3486\tifsf-hb-port\n3487\tltctcp\n3488\tfs-rh-srv\n3489\tdtp-dia\n3490\tcolubris\n3491\tswr-port\n3492\ttvdumtray-port\n3493\tnut\n3494\tibm3494\n3495\tseclayer-tcp\n3496\tseclayer-tls\n3497\tipether232port\n3498\tdashpas-port\n3499\tsccip-media\n3500\trtmp-port\n3501\tisoft-p2p\n3502\tavinstalldisc\n3503\tlsp-ping\n3504\tironstorm\n3505\tccmcomm\n3506\tapc-3506\n3507\tnesh-broker\n3508\tinteractionweb\n3509\tvt-ssl\n3510\txss-port\n3511\twebmail-2\n3512\taztec\n3513\tarcpd\n3514\tmust-p2p\n3515\tmust-backplane\n3516\tsmartcard-port\n3517\t802-11-iapp\n3518\tartifact-msg\n3519\tnvmsgd\n3520\tgalileolog\n3521\tmc3ss\n3522\tnssocketport\n3523\todeumservlink\n3524\tecmport\n3525\teisport\n3526\tstarquiz-port\n3527\tbeserver-msg-q\n3528\tjboss-iiop\n3529\tjboss-iiop-ssl\n3530\tgf\n3531\tpeerenabler\n3532\traven-rmp\n3533\traven-rdp\n3534\turld-port\n3535\tms-la\n3536\tsnac\n3537\tni-visa-remote\n3538\tibm-diradm\n3539\tibm-diradm-ssl\n3540\tpnrp-port\n3541\tvoispeed-port\n3542\thacl-monitor\n3543\tqftest-lookup\n3544\tteredo\n3545\tcamac\n3547\tsymantec-sim\n3548\tinterworld\n3549\ttellumat-nms\n3550\tssmpp\n3551\tapcupsd\n3552\ttaserver\n3553\trbr-discovery\n3554\tquestnotify\n3555\trazor\n3556\tsky-transport\n3557\tpersonalos-001\n3558\tmcp-port\n3559\tcctv-port\n3560\tiniserve-port\n3561\tbmc-onekey\n3562\tsdbproxy\n3563\twatcomdebug\n3564\tesimport\n3565\tm2pa\n3566\tquest-data-hub\n3567\toap\n3568\toap-s\n3569\tmbg-ctrl\n3570\tmccwebsvr-port\n3571\tmegardsvr-port\n3572\tmegaregsvrport\n3573\ttag-ups-1\n3574\tdmaf-server\n3575\tccm-port\n3576\tcmc-port\n3577\tconfig-port\n3578\tdata-port\n3579\tttat3lb\n3580\tnati-svrloc\n3581\tkfxaclicensing\n3582\tpress\n3583\tcanex-watch\n3584\tu-dbap\n3585\temprise-lls\n3586\temprise-lsc\n3587\tp2pgroup\n3588\tsentinel\n3589\tisomair\n3590\twv-csp-sms\n3591\tgtrack-server\n3592\tgtrack-ne\n3593\tbpmd\n3594\tmediaspace\n3595\tshareapp\n3596\tiw-mmogame\n3597\ta14\n3598\ta15\n3599\tquasar-server\n3600\ttrap-daemon\n3601\tvisinet-gui\n3602\tinfiniswitchcl\n3603\tint-rcv-cntrl\n3604\tbmc-jmx-port\n3605\tcomcam-io\n3606\tsplitlock\n3607\tprecise-i3\n3608\ttrendchip-dcp\n3609\tcpdi-pidas-cm\n3610\techonet\n3611\tsix-degrees\n3612\thp-dataprotect\n3613\talaris-disc\n3614\tsigma-port\n3615\tstart-network\n3616\tcd3o-protocol\n3617\tsharp-server\n3618\taairnet-1\n3619\taairnet-2\n3620\tep-pcp\n3621\tep-nsp\n3622\tff-lr-port\n3623\thaipe-discover\n3624\tdist-upgrade\n3625\tvolley\n3626\tbvcdaemon-port\n3627\tjamserverport\n3628\tept-machine\n3629\tescvpnet\n3630\tcs-remote-db\n3631\tcs-services\n3632\tdistccd\n3633\twacp\n3634\thlibmgr\n3635\tsdo\n3636\tservistaitsm\n3637\tscservp\n3638\tehp-backup\n3639\txap-ha\n3640\tnetplay-port1\n3641\tnetplay-port2\n3642\tjuxml-port\n3643\taudiojuggler\n3644\tssowatch\n3645\tcyc\n3646\txss-srv-port\n3647\tsplitlock-gw\n3648\tfjcp\n3649\tnmmp\n3650\tprismiq-plugin\n3651\txrpc-registry\n3652\tvxcrnbuport\n3653\ttsp\n3654\tvaprtm\n3655\tabatemgr\n3656\tabatjss\n3657\timmedianet-bcn\n3658\tps-ams\n3659\tapple-sasl\n3660\tcan-nds-ssl\n3661\tcan-ferret-ssl\n3662\tpserver\n3663\tdtp\n3664\tups-engine\n3665\tent-engine\n3666\teserver-pap\n3667\tinfoexch\n3668\tdell-rm-port\n3669\tcasanswmgmt\n3670\tsmile\n3671\tefcp\n3672\tlispworks-orb\n3673\tmediavault-gui\n3674\twininstall-ipc\n3675\tcalltrax\n3676\tva-pacbase\n3677\troverlog\n3678\tipr-dglt\n3679\tnewton-dock\n3680\tnpds-tracker\n3681\tbts-x73\n3682\tcas-mapi\n3683\tbmc-ea\n3684\tfaxstfx-port\n3685\tdsx-agent\n3686\ttnmpv2\n3687\tsimple-push\n3688\tsimple-push-s\n3689\trendezvous\n3690\tsvn\n3691\tmagaya-network\n3692\tintelsync\n3693\teasl\n3695\tbmc-data-coll\n3696\ttelnetcpcd\n3697\tnw-license\n3698\tsagectlpanel\n3699\tkpn-icw\n3700\tlrs-paging\n3701\tnetcelera\n3702\tws-discovery\n3703\tadobeserver-3\n3704\tadobeserver-4\n3705\tadobeserver-5\n3706\trt-event\n3707\trt-event-s\n3708\tsun-as-iiops\n3709\tca-idms\n3710\tportgate-auth\n3711\tedb-server2\n3712\tsentinel-ent\n3713\ttftps\n3714\tdelos-dms\n3715\tanoto-rendezv\n3716\twv-csp-sms-cir\n3717\twv-csp-udp-cir\n3718\topus-services\n3719\titelserverport\n3720\tufastro-instr\n3721\txsync\n3722\txserveraid\n3723\tsychrond\n3724\tblizwow\n3725\tna-er-tip\n3726\tarray-manager\n3727\te-mdu\n3728\te-woa\n3729\tfksp-audit\n3730\tclient-ctrl\n3731\tsmap\n3732\tm-wnn\n3733\tmultip-msg\n3734\tsynel-data\n3735\tpwdis\n3736\trs-rmi\n3737\txpanel\n3738\tversatalk\n3739\tlaunchbird-lm\n3740\theartbeat\n3741\twysdma\n3742\tcst-port\n3743\tipcs-command\n3744\tsasg\n3745\tgw-call-port\n3746\tlinktest\n3747\tlinktest-s\n3748\twebdata\n3749\tcimtrak\n3750\tcbos-ip-port\n3751\tgprs-cube\n3752\tvipremoteagent\n3753\tnattyserver\n3754\ttimestenbroker\n3755\tsas-remote-hlp\n3756\tcanon-capt\n3757\tgrf-port\n3758\tapw-registry\n3759\texapt-lmgr\n3760\tadtempusclient\n3761\tgsakmp\n3762\tgbs-smp\n3763\txo-wave\n3764\tmni-prot-rout\n3765\trtraceroute\n3766\tsitewatch-s\n3767\tlistmgr-port\n3768\trblcheckd\n3769\thaipe-otnk\n3770\tcindycollab\n3771\tpaging-port\n3772\tctp\n3773\tctdhercules\n3774\tzicom\n3775\tispmmgr\n3776\tdvcprov-port\n3777\tjibe-eb\n3778\tc-h-it-port\n3779\tcognima\n3780\tnnp\n3781\tabcvoice-port\n3782\tiso-tp0s\n3783\tbim-pem\n3784\tbfd-control\n3785\tbfd-echo\n3786\tupstriggervsw\n3787\tfintrx\n3788\tisrp-port\n3789\tremotedeploy\n3790\tquickbooksrds\n3791\ttvnetworkvideo\n3792\tsitewatch\n3793\tdcsoftware\n3794\tjaus\n3795\tmyblast\n3796\tspw-dialer\n3797\tidps\n3798\tminilock\n3799\tradius-dynauth\n3800\tpwgpsi\n3801\tibm-mgr\n3802\tvhd\n3803\tsoniqsync\n3804\tiqnet-port\n3805\ttcpdataserver\n3806\twsmlb\n3807\tspugna\n3808\tsun-as-iiops-ca\n3809\tapocd\n3810\twlanauth\n3811\tamp\n3812\tneto-wol-server\n3813\trap-ip\n3814\tneto-dcs\n3815\tlansurveyorxml\n3816\tsunlps-http\n3817\ttapeware\n3818\tcrinis-hb\n3819\tepl-slp\n3820\tscp\n3821\tpmcp\n3822\tacp-discovery\n3823\tacp-conduit\n3824\tacp-policy\n3825\tffserver\n3826\twormux\n3827\tnetmpi\n3828\tneteh\n3829\tneteh-ext\n3830\tcernsysmgmtagt\n3831\tdvapps\n3832\txxnetserver\n3833\taipn-auth\n3834\tspectardata\n3835\tspectardb\n3836\tmarkem-dcp\n3837\tmkm-discovery\n3838\tsos\n3839\tamx-rms\n3840\tflirtmitmir\n3841\tzfirm-shiprush3\n3842\tnhci\n3843\tquest-agent\n3844\trnm\n3845\tv-one-spp\n3846\tan-pcp\n3847\tmsfw-control\n3848\titem\n3849\tspw-dnspreload\n3850\tqtms-bootstrap\n3851\tspectraport\n3852\tsse-app-config\n3853\tsscan\n3854\tstryker-com\n3855\topentrac\n3856\tinformer\n3857\ttrap-port\n3858\ttrap-port-mom\n3859\tnav-port\n3860\tsasp\n3861\twinshadow-hd\n3862\tgiga-pocket\n3863\tasap-tcp\n3864\tasap-tcp-tls\n3865\txpl\n3866\tdzdaemon\n3867\tdzoglserver\n3868\tdiameter\n3869\tovsam-mgmt\n3870\tovsam-d-agent\n3871\tavocent-adsap\n3872\toem-agent\n3873\tfagordnc\n3874\tsixxsconfig\n3875\tpnbscada\n3876\tdl_agent\n3877\txmpcr-interface\n3878\tfotogcad\n3879\tappss-lm\n3880\tigrs\n3881\tidac\n3882\tmsdts1\n3883\tvrpn\n3884\tsoftrack-meter\n3885\ttopflow-ssl\n3886\tnei-management\n3887\tciphire-data\n3888\tciphire-serv\n3889\tdandv-tester\n3890\tndsconnect\n3891\trtc-pm-port\n3892\tpcc-image-port\n3893\tcgi-starapi\n3894\tsyam-agent\n3895\tsyam-smc\n3896\tsdo-tls\n3897\tsdo-ssh\n3898\tsenip\n3899\titv-control\n3900\tudt_os\n3901\tnimsh\n3902\tnimaux\n3903\tcharsetmgr\n3904\tomnilink-port\n3905\tmupdate\n3906\ttopovista-data\n3907\timoguia-port\n3908\thppronetman\n3909\tsurfcontrolcpa\n3910\tprnrequest\n3911\tprnstatus\n3912\tgbmt-stars\n3913\tlistcrt-port\n3914\tlistcrt-port-2\n3915\tagcat\n3916\twysdmc\n3917\taftmux\n3918\tpktcablemmcops\n3919\thyperip\n3920\texasoftport1\n3921\therodotus-net\n3922\tsor-update\n3923\tsymb-sb-port\n3924\tmpl-gprs-port\n3925\tzmp\n3926\twinport\n3927\tnatdataservice\n3928\tnetboot-pxe\n3929\tsmauth-port\n3930\tsyam-webserver\n3931\tmsr-plugin-port\n3932\tdyn-site\n3933\tplbserve-port\n3934\tsunfm-port\n3935\tsdp-portmapper\n3936\tmailprox\n3937\tdvbservdsc\n3938\tdbcontrol_agent\n3939\taamp\n3940\txecp-node\n3941\thomeportal-web\n3942\tsrdp\n3943\ttig\n3944\tsops\n3945\temcads\n3946\tbackupedge\n3947\tccp\n3948\tapdap\n3949\tdrip\n3950\tnamemunge\n3951\tpwgippfax\n3952\ti3-sessionmgr\n3953\txmlink-connect\n3954\tadrep\n3955\tp2pcommunity\n3956\tgvcp\n3957\tmqe-broker\n3958\tmqe-agent\n3959\ttreehopper\n3960\tbess\n3961\tproaxess\n3962\tsbi-agent\n3963\tthrp\n3964\tsasggprs\n3965\tati-ip-to-ncpe\n3966\tbflckmgr\n3967\tppsms\n3968\tianywhere-dbns\n3969\tlandmarks\n3970\tlanrevagent\n3971\tlanrevserver\n3972\ticonp\n3973\tprogistics\n3974\tcitysearch\n3975\tairshot\n3976\topswagent\n3977\topswmanager\n3978\tsecure-cfg-svr\n3979\tsmwan\n3980\tacms\n3981\tstarfish\n3982\teis\n3983\teisp\n3984\tmapper-nodemgr\n3985\tmapper-mapethd\n3986\tmapper-ws_ethd\n3987\tcenterline\n3988\tdcs-config\n3989\tbv-queryengine\n3990\tbv-is\n3991\tbv-smcsrv\n3992\tbv-ds\n3993\tbv-agent\n3995\tiss-mgmt-ssl\n3996\tabcsoftware\n3997\tagentsease-db\n3998\tdnx\n3999\tremoteanything\n4000\tremoteanything\n4001\tnewoak\n4002\tmlchat-proxy\n4003\tpxc-splr-ft\n4004\tpxc-roid\n4005\tpxc-pin\n4006\tpxc-spvr\n4007\tpxc-splr\n4008\tnetcheque\n4009\tchimera-hwm\n4010\tsamsung-unidex\n4011\taltserviceboot\n4012\tpda-gate\n4013\tacl-manager\n4014\ttaiclock\n4015\ttalarian-mcast1\n4016\ttalarian-mcast2\n4017\ttalarian-mcast3\n4018\ttalarian-mcast4\n4019\ttalarian-mcast5\n4020\ttrap\n4021\tnexus-portal\n4022\tdnox\n4023\tesnm-zoning\n4024\ttnp1-port\n4025\tpartimage\n4026\tas-debug\n4027\tbxp\n4028\tdtserver-port\n4029\tip-qsig\n4030\tjdmn-port\n4031\tsuucp\n4032\tvrts-auth-port\n4033\tsanavigator\n4034\tubxd\n4035\twap-push-http\n4036\twap-push-https\n4037\travehd\n4038\tfazzt-ptp\n4039\tfazzt-admin\n4040\tyo-main\n4041\thouston\n4042\tldxp\n4043\tnirp\n4044\tltp\n4045\tlockd\n4046\tacp-proto\n4047\tctp-state\n4049\twafs\n4050\tcisco-wafs\n4051\tcppdp\n4052\tinteract\n4053\tccu-comm-1\n4054\tccu-comm-2\n4055\tccu-comm-3\n4056\tlms\n4057\twfm\n4058\tkingfisher\n4059\tdlms-cosem\n4060\tdsmeter_iatc\n4061\tice-location\n4062\tice-slocation\n4063\tice-router\n4064\tice-srouter\n4065\tavanti_cdp\n4066\tpmas\n4067\tidp\n4068\tipfltbcst\n4069\tminger\n4070\ttripe\n4071\taibkup\n4072\tzieto-sock\n4073\tiRAPP\n4074\tcequint-cityid\n4075\tperimlan\n4076\tseraph\n4077\tascomalarm\n4078\tcssp\n4079\tsantools\n4080\tlorica-in\n4081\tlorica-in-sec\n4082\tlorica-out\n4083\tlorica-out-sec\n4084\tfortisphere-vm\n4085\tezmessagesrv\n4086\tftsync\n4087\tapplusservice\n4088\tnpsp\n4089\topencore\n4090\tomasgport\n4091\tewinstaller\n4092\tewdgs\n4093\tpvxpluscs\n4094\tsysrqd\n4095\txtgui\n4096\tbre\n4097\tpatrolview\n4098\tdrmsfsd\n4099\tdpcp\n4100\tigo-incognito\n4101\tbrlp-0\n4102\tbrlp-1\n4103\tbrlp-2\n4104\tbrlp-3\n4105\tshofarplayer\n4106\tsynchronite\n4107\tj-ac\n4108\taccel\n4109\tizm\n4110\tg2tag\n4111\txgrid\n4112\tapple-vpns-rp\n4113\taipn-reg\n4114\tjomamqmonitor\n4115\tcds\n4116\tsmartcard-tls\n4117\thillrserv\n4118\tnetscript\n4119\tassuria-slm\n4120\tminirem\n4121\te-builder\n4122\tfprams\n4123\tz-wave\n4124\ttigv2\n4125\trww\n4126\tddrepl\n4127\tunikeypro\n4128\tnufw\n4129\tnuauth\n4130\tfronet\n4131\tstars\n4132\tnuts_dem\n4133\tnuts_bootp\n4134\tnifty-hmi\n4135\tcl-db-attach\n4136\tcl-db-request\n4137\tcl-db-remote\n4138\tnettest\n4139\tthrtx\n4140\tcedros_fds\n4141\toirtgsvc\n4142\toidocsvc\n4143\toidsr\n4144\twincim\n4145\tvvr-control\n4146\ttgcconnect\n4147\tvrxpservman\n4148\thhb-handheld\n4149\tagslb\n4150\tPowerAlert-nsa\n4151\tmenandmice_noh\n4152\tidig_mux\n4153\tmbl-battd\n4154\tatlinks\n4155\tbzr\n4156\tstat-results\n4157\tstat-scanner\n4158\tstat-cc\n4159\tnss\n4160\tjini-discovery\n4161\tomscontact\n4162\tomstopology\n4163\tsilverpeakpeer\n4164\tsilverpeakcomm\n4165\taltcp\n4166\tjoost\n4167\tddgn\n4168\tpslicser\n4169\tiadt\n4170\td-cinema-csp\n4171\tml-svnet\n4172\tpcoip\n4173\tmma-discovery\n4174\tsmcluster\n4175\tbccp\n4176\ttl-ipcproxy\n4177\twello\n4178\tstorman\n4179\tMaxumSP\n4180\thttpx\n4181\tmacbak\n4182\tpcptcpservice\n4183\tgmmp\n4184\tuniverse_suite\n4185\twcpp\n4186\tboxbackupstore\n4187\tcsc_proxy\n4188\tvatata\n4189\tpcep\n4190\tsieve\n4191\tdsmipv6\n4192\tazeti\n4193\tpvxplusio\n4195\taws-wsp\n4197\thctl\n4199\teims-admin\n4200\tvrml-multi-use\n4201\tvrml-multi-use\n4202\tvrml-multi-use\n4203\tvrml-multi-use\n4204\tvrml-multi-use\n4205\tvrml-multi-use\n4206\tvrml-multi-use\n4207\tvrml-multi-use\n4208\tvrml-multi-use\n4209\tvrml-multi-use\n4210\tvrml-multi-use\n4211\tvrml-multi-use\n4212\tvrml-multi-use\n4213\tvrml-multi-use\n4214\tvrml-multi-use\n4215\tvrml-multi-use\n4216\tvrml-multi-use\n4217\tvrml-multi-use\n4218\tvrml-multi-use\n4219\tvrml-multi-use\n4220\tvrml-multi-use\n4221\tvrml-multi-use\n4222\tvrml-multi-use\n4223\tvrml-multi-use\n4224\txtell\n4225\tvrml-multi-use\n4226\tvrml-multi-use\n4227\tvrml-multi-use\n4228\tvrml-multi-use\n4229\tvrml-multi-use\n4230\tvrml-multi-use\n4231\tvrml-multi-use\n4232\tvrml-multi-use\n4233\tvrml-multi-use\n4234\tvrml-multi-use\n4235\tvrml-multi-use\n4236\tvrml-multi-use\n4237\tvrml-multi-use\n4238\tvrml-multi-use\n4239\tvrml-multi-use\n4240\tvrml-multi-use\n4241\tvrml-multi-use\n4242\tvrml-multi-use\n4243\tvrml-multi-use\n4244\tvrml-multi-use\n4245\tvrml-multi-use\n4246\tvrml-multi-use\n4247\tvrml-multi-use\n4248\tvrml-multi-use\n4249\tvrml-multi-use\n4250\tvrml-multi-use\n4251\tvrml-multi-use\n4252\tvrml-multi-use\n4253\tvrml-multi-use\n4254\tvrml-multi-use\n4255\tvrml-multi-use\n4256\tvrml-multi-use\n4257\tvrml-multi-use\n4258\tvrml-multi-use\n4259\tvrml-multi-use\n4260\tvrml-multi-use\n4261\tvrml-multi-use\n4262\tvrml-multi-use\n4263\tvrml-multi-use\n4264\tvrml-multi-use\n4265\tvrml-multi-use\n4266\tvrml-multi-use\n4267\tvrml-multi-use\n4268\tvrml-multi-use\n4269\tvrml-multi-use\n4270\tvrml-multi-use\n4271\tvrml-multi-use\n4272\tvrml-multi-use\n4273\tvrml-multi-use\n4274\tvrml-multi-use\n4275\tvrml-multi-use\n4276\tvrml-multi-use\n4277\tvrml-multi-use\n4278\tvrml-multi-use\n4279\tvrml-multi-use\n4280\tvrml-multi-use\n4281\tvrml-multi-use\n4282\tvrml-multi-use\n4283\tvrml-multi-use\n4284\tvrml-multi-use\n4285\tvrml-multi-use\n4286\tvrml-multi-use\n4287\tvrml-multi-use\n4288\tvrml-multi-use\n4289\tvrml-multi-use\n4290\tvrml-multi-use\n4291\tvrml-multi-use\n4292\tvrml-multi-use\n4293\tvrml-multi-use\n4294\tvrml-multi-use\n4295\tvrml-multi-use\n4296\tvrml-multi-use\n4297\tvrml-multi-use\n4298\tvrml-multi-use\n4299\tvrml-multi-use\n4300\tcorelccam\n4301\td-data\n4302\td-data-control\n4303\tsrcp\n4304\towserver\n4305\tbatman\n4306\tpinghgl\n4307\tvisicron-vs\n4308\tcompx-lockview\n4309\tdserver\n4310\tmirrtex\n4311\tp6ssmc\n4312\tpscl-mgt\n4313\tperrla\n4314\tchoiceview-agt\n4316\tchoiceview-clt\n4317\topentelemetry\n4320\tfdt-rcatp\n4321\trwhois\n4322\ttrim-event\n4323\ttrim-ice\n4324\tbalour\n4325\tgeognosisman\n4326\tgeognosis\n4327\tjaxer-web\n4328\tjaxer-manager\n4329\tpubliqare-sync\n4330\tdey-sapi\n4331\tktickets-rest\n4332\tgetty-focus\n4333\tmsql\n4334\tnetconf-ch-ssh\n4335\tnetconf-ch-tls\n4336\trestconf-ch-tls\n4340\tgaia\n4341\tlisp-data\n4342\tlisp-cons\n4343\tunicall\n4344\tvinainstall\n4345\tm4-network-as\n4346\telanlm\n4347\tlansurveyor\n4348\titose\n4349\tfsportmap\n4350\tnet-device\n4351\tplcy-net-svcs\n4352\tpjlink\n4353\tf5-iquery\n4354\tqsnet-trans\n4355\tqsnet-workst\n4356\tqsnet-assist\n4357\tqsnet-cond\n4358\tqsnet-nucl\n4359\tomabcastltkm\n4360\tmatrix_vnet\n4361\tnacnl\n4362\tafore-vdp-disc\n4366\tshadowstream\n4368\twxbrief\n4369\tepmd\n4370\telpro_tunnel\n4371\tl2c-control\n4372\tl2c-data\n4373\tremctl\n4374\tpsi-ptt\n4375\ttolteces\n4376\tbip\n4377\tcp-spxsvr\n4378\tcp-spxdpy\n4379\tctdb\n4389\txandros-cms\n4390\twiegand\n4391\tapwi-imserver\n4392\tapwi-rxserver\n4393\tapwi-rxspooler\n4394\tapwi-disc\n4395\tomnivisionesx\n4396\tfly\n4400\tds-srv\n4401\tds-srvr\n4402\tds-clnt\n4403\tds-user\n4404\tds-admin\n4405\tds-mail\n4406\tds-slp\n4407\tnacagent\n4408\tslscc\n4409\tnetcabinet-com\n4410\titwo-server\n4411\tfound\n4412\tsmallchat\n4413\tavi-nms\n4414\tupdog\n4415\tbrcd-vr-req\n4416\tpjj-player\n4417\tworkflowdir\n4418\taxysbridge\n4419\tcbp\n4420\tnvm-express\n4421\tscaleft\n4422\ttsepisp\n4423\tthingkit\n4425\tnetrockey6\n4426\tbeacon-port-2\n4427\tdrizzle\n4428\tomviserver\n4429\tomviagent\n4430\trsqlserver\n4431\twspipe\n4432\tl-acoustics\n4433\tvop\n4441\tnetblox\n4442\tsaris\n4443\tpharos\n4444\tkrb524\n4445\tupnotifyp\n4446\tn1-fwp\n4447\tn1-rmgmt\n4448\tasc-slmd\n4449\tprivatewire\n4450\tcamp\n4451\tctisystemmsg\n4452\tctiprogramload\n4453\tnssalertmgr\n4454\tnssagentmgr\n4455\tprchat-user\n4456\tprchat-server\n4457\tprRegister\n4458\tmcp\n4460\tntske\n4480\tproxy-plus\n4484\thpssmgmt\n4485\tassyst-dr\n4486\ticms\n4487\tprex-tcp\n4488\tawacs-ice\n4500\tsae-urn\n4502\ta25-fap-fgw\n4534\tarmagetronad\n4535\tehs\n4536\tehs-ssl\n4537\twssauthsvc\n4538\tswx-gate\n4545\tworldscores\n4546\tsf-lm\n4547\tlanner-lm\n4548\tsynchromesh\n4549\taegate\n4550\tgds-adppiw-db\n4551\tieee-mih\n4552\tmenandmice-mon\n4553\ticshostsvc\n4554\tmsfrs\n4555\trsip\n4556\tdtn-bundle-tcp\n4557\tfax\n4558\tmtcevrunqman\n4559\thylafax\n4563\tamahi-anywhere\n4566\tkwtc\n4567\ttram\n4568\tbmc-reporting\n4569\tiax\n4570\tdeploymentmap\n4573\tcardifftec-back\n4590\trid\n4591\tl3t-at-an\n4592\thrpd-ith-at-an\n4593\tipt-anri-anri\n4594\tias-session\n4595\tias-paging\n4596\tias-neighbor\n4597\ta21-an-1xbs\n4598\ta16-an-an\n4599\ta17-an-an\n4600\tpiranha1\n4601\tpiranha2\n4602\tmtsserver\n4603\tmenandmice-upg\n4604\tirp\n4605\tsixchat\n4606\tsixid\n4621\tventoso\n4646\tdots-signal\n4658\tplaysta2-app\n4659\tplaysta2-lob\n4660\tmosmig\n4661\tkar2ouche\n4662\tedonkey\n4663\tnoteit\n4664\tems\n4665\tcontclientms\n4666\teportcomm\n4667\tmmacomm\n4668\tmmaeds\n4669\teportcommdata\n4670\tlight\n4671\tacter\n4672\trfa\n4673\tcxws\n4674\tappiq-mgmt\n4675\tdhct-status\n4676\tdhct-alerts\n4677\tbcs\n4678\ttraversal\n4679\tmgesupervision\n4680\tmgemanagement\n4681\tparliant\n4682\tfinisar\n4683\tspike\n4684\trfid-rp1\n4685\tautopac\n4686\tmsp-os\n4687\tnst\n4688\tmobile-p2p\n4689\taltovacentral\n4690\tprelude\n4691\tmtn\n4692\tconspiracy\n4700\tnetxms-agent\n4701\tnetxms-mgmt\n4702\tnetxms-sync\n4703\tnpqes-test\n4704\tassuria-ins\n4711\ttrinity-dist\n4713\tpulseaudio\n4725\ttruckstar\n4726\ta26-fap-fgw\n4727\tfcis\n4728\tcapmux\n4729\tgsmtap\n4730\tgearman\n4731\tremcap\n4732\tohmtrigger\n4733\tresorcs\n4737\tipdr-sp\n4738\tsolera-lpn\n4739\tipfix\n4740\tipfixs\n4741\tlumimgrd\n4742\tsicct\n4743\topenhpid\n4744\tifsp\n4745\tfmp\n4746\tintelliadm-disc\n4747\tbuschtrommel\n4749\tprofilemac\n4750\tssad\n4751\tspocp\n4752\tsnap\n4753\tsimon\n4754\tgre-in-udp\n4755\tgre-udp-dtls\n4756\tRDCenter\n4774\tconverge\n4784\tbfd-multi-ctl\n4785\tcncp\n4786\tsmart-install\n4787\tsia-ctrl-plane\n4788\txmcp\n4789\tvxlan\n4790\tvxlan-gpe\n4791\troce\n4800\tiims\n4801\tiwec\n4802\tilss\n4803\tnotateit\n4804\taja-ntv4-disc\n4827\thtcp\n4837\tvaradero-0\n4838\tvaradero-1\n4839\tvaradero-2\n4840\topcua-tcp\n4841\tquosa\n4842\tgw-asv\n4843\topcua-tls\n4844\tgw-log\n4845\twcr-remlib\n4846\tcontamac_icm\n4847\twfc\n4848\tappserv-http\n4849\tappserv-https\n4850\tsun-as-nodeagt\n4851\tderby-repli\n4867\tunify-debug\n4868\tphrelay\n4869\tphrelaydbg\n4870\tcc-tracking\n4871\twired\n4876\ttritium-can\n4877\tlmcs\n4878\tinst-discovery\n4879\twsdl-event\n4880\thislip\n4881\tsocp-t\n4882\tsocp-c\n4883\twmlserver\n4884\thivestor\n4885\tabbs\n4888\txcap-portal\n4889\txcap-control\n4894\tlyskom\n4899\tradmin\n4900\thfcs\n4901\tflr_agent\n4902\tmagiccontrol\n4912\tlutap\n4913\tlutcp\n4914\tbones\n4915\tfrcs\n4936\tan-signaling\n4937\tatsc-mh-ssc\n4940\teq-office-4940\n4941\teq-office-4941\n4942\teq-office-4942\n4949\tmunin\n4950\tsybasesrvmon\n4951\tpwgwims\n4952\tsagxtsds\n4953\tdbsyncarbiter\n4969\tccss-qmm\n4970\tccss-qsm\n4971\tburp\n4980\tctxs-vpp\n4984\twebyast\n4985\tgerhcs\n4986\tmrip\n4987\tmaybe-veritas\n4988\tsmar-se-port2\n4989\tparallel\n4990\tbusycal\n4991\tvrt\n4998\tmaybe-veritas\n4999\thfcs-manager\n5000\tupnp\n5001\tcommplex-link\n5002\trfe\n5003\tfilemaker\n5004\tavt-profile-1\n5005\tavt-profile-2\n5006\twsm-server\n5007\twsm-server-ssl\n5008\tsynapsis-edge\n5009\tairport-admin\n5010\ttelelpathstart\n5011\ttelelpathattack\n5012\tnsp\n5013\tfmpro-v6\n5014\tonpsocket\n5015\tfmwp\n5020\tzenginkyo-1\n5021\tzenginkyo-2\n5022\tmice\n5023\thtuilsrv\n5024\tscpi-telnet\n5025\tscpi-raw\n5026\tstrexec-d\n5027\tstrexec-s\n5028\tqvr\n5029\tinfobright\n5030\tsurfpass\n5031\tdmp\n5032\tsignacert-agent\n5033\tjtnetd-server\n5034\tjtnetd-status\n5042\tasnaacceler8db\n5043\tswxadmin\n5044\tlxi-evntsvc\n5045\tosp\n5046\tvpm-udp\n5047\tiscape\n5048\ttexai\n5049\tivocalize\n5050\tmmcc\n5051\tida-agent\n5052\tita-manager\n5053\trlm\n5054\trlm-admin\n5055\tunot\n5056\tintecom-ps1\n5057\tintecom-ps2\n5058\tlocus-disc\n5059\tsds\n5060\tsip\n5061\tsip-tls\n5062\tna-localise\n5063\tcsrpc\n5064\tca-1\n5065\tca-2\n5066\tstanag-5066\n5067\tauthentx\n5068\tbitforestsrv\n5069\ti-net-2000-npr\n5070\tvtsas\n5071\tpowerschool\n5072\tayiya\n5073\ttag-pm\n5074\talesquery\n5075\tpvaccess\n5078\tpixelpusher\n5079\tcp-spxrpts\n5080\tonscreen\n5081\tsdl-ets\n5082\tqcp\n5083\tqfp\n5084\tllrp\n5085\tencrypted-llrp\n5086\taprigo-cs\n5087\tbiotic\n5092\tmagpie\n5093\tsentinel-lm\n5094\thart-ip\n5099\tsentlm-srv2srv\n5100\tadmd\n5101\tadmdog\n5102\tadmeng\n5103\tactifio-c2c\n5104\ttinymessage\n5105\thughes-ap\n5106\tactifioudsagent\n5107\tactifioreplic\n5111\ttaep-as-svc\n5112\tpm-cmdsvr\n5114\tev-services\n5115\tautobuild\n5116\temb-proj-cmd\n5117\tgradecam\n5120\tbarracuda-bbs\n5133\tnbt-pc\n5134\tppactivation\n5135\terp-scale\n5136\tminotaur-sa\n5137\tctsd\n5145\trmonitor_secure\n5146\tsocial-alarm\n5150\tatmp\n5151\tesri_sde\n5152\tsde-discovery\n5153\ttoruxserver\n5154\tbzflag\n5155\tasctrl-agent\n5156\trugameonline\n5157\tmediat\n5161\tsnmpssh\n5162\tsnmpssh-trap\n5163\tsbackup\n5164\tvpa\n5165\tife_icorp\n5166\twinpcs\n5167\tscte104\n5168\tscte30\n5172\tpcoip-mgmt\n5190\taol\n5191\taol-1\n5192\taol-2\n5193\taol-3\n5194\tcpscomm\n5195\tampl-lic\n5196\tampl-tableproxy\n5197\ttunstall-lwp\n5200\ttargus-getdata\n5201\ttargus-getdata1\n5202\ttargus-getdata2\n5203\ttargus-getdata3\n5209\tnomad\n5215\tnoteza\n5221\t3exmp\n5222\txmpp-client\n5223\thpvirtgrp\n5224\thpvirtctrl\n5225\thp-server\n5226\thp-status\n5227\tperfd\n5228\thpvroom\n5229\tjaxflow\n5230\tjaxflow-data\n5231\tcrusecontrol\n5232\tsgi-dgl\n5233\tenfs\n5234\teenet\n5235\tgalaxy-network\n5236\tpadl2sim\n5237\tmnet-discovery\n5245\tdowntools\n5246\tcapwap-control\n5247\tcapwap-data\n5248\tcaacws\n5249\tcaaclang2\n5250\tsoagateway\n5251\tcaevms\n5252\tmovaz-ssc\n5253\tkpdp\n5254\tlogcabin\n5264\t3com-njack-1\n5265\t3com-njack-2\n5269\txmpp-server\n5270\txmp\n5271\tcuelink\n5272\tpk\n5280\txmpp-bosh\n5281\tundo-lm\n5282\ttransmit-port\n5298\tpresence\n5299\tnlg-data\n5300\thacl-hb\n5301\thacl-gs\n5302\thacl-cfg\n5303\thacl-probe\n5304\thacl-local\n5305\thacl-test\n5306\tsun-mc-grp\n5307\tsco-aip\n5308\tcfengine\n5309\tjprinter\n5310\toutlaws\n5312\tpermabit-cs\n5313\trrdp\n5314\topalis-rbt-ipc\n5315\thacl-poll\n5316\thpdevms\n5317\thpdevms\n5318\tpkix-cmc\n5320\tbsfserver-zn\n5321\tbsfsvr-zn-ssl\n5343\tkfserver\n5344\txkotodrcp\n5349\tstuns\n5350\tnat-pmp-status\n5351\tnat-pmp\n5352\tdns-llq\n5353\tmdns\n5354\tmdnsresponder\n5355\tllmnr\n5356\tms-smlbiz\n5357\twsdapi\n5358\twsdapi-s\n5359\tms-alerter\n5360\tms-sideshow\n5361\tms-s-sideshow\n5362\tserverwsd2\n5363\tnet-projection\n5364\tkdnet\n5397\tstresstester\n5398\telektron-admin\n5399\tsecuritychase\n5400\tpcduo-old\n5401\texcerpts\n5402\tmftp\n5403\thpoms-ci-lstn\n5404\thpoms-dps-lstn\n5405\tpcduo\n5406\tsystemics-sox\n5407\tforesyte-clear\n5408\tforesyte-sec\n5409\tsalient-dtasrv\n5410\tsalient-usrmgr\n5411\tactnet\n5412\tcontinuus\n5413\twwiotalk\n5414\tstatusd\n5415\tns-server\n5416\tsns-gateway\n5417\tsns-agent\n5418\tmcntp\n5419\tdj-ice\n5420\tcylink-c\n5421\tnetsupport2\n5422\tsalient-mux\n5423\tvirtualuser\n5424\tbeyond-remote\n5425\tbr-channel\n5426\tdevbasic\n5427\tsco-peer-tta\n5428\ttelaconsole\n5429\tbase\n5430\tradec-corp\n5431\tpark-agent\n5432\tpostgresql\n5433\tpyrrho\n5434\tsgi-arrayd\n5435\tsceanics\n5436\tpmip6-cntl\n5437\tpmip6-data\n5443\tspss\n5445\tsmbdirect\n5450\ttiepie\n5453\tsurebox\n5454\tapc-5454\n5455\tapc-5455\n5456\tapc-5456\n5461\tsilkmeter\n5462\tttl-publisher\n5463\tttlpriceproxy\n5464\tquailnet\n5465\tnetops-broker\n5470\tapsolab-col\n5471\tapsolab-cols\n5472\tapsolab-tag\n5473\tapsolab-tags\n5474\tapsolab-rpc\n5475\tapsolab-data\n5490\tconnect-proxy\n5500\thotline\n5501\tfcp-addr-srvr2\n5502\tfcp-srvr-inst1\n5503\tfcp-srvr-inst2\n5504\tfcp-cics-gw1\n5505\tcheckoutdb\n5506\tamc\n5507\tpsl-management\n5510\tsecureidprop\n5520\tsdlog\n5530\tsdserv\n5540\tsdreport\n5550\tsdadmind\n5553\tsgi-eventmond\n5554\tsgi-esphttp\n5555\tfreeciv\n5556\tfreeciv\n5557\tfarenet\n5560\tisqlplus\n5565\thpe-dp-bura\n5566\twestec-connect\n5567\tm-oap\n5568\tsdt\n5569\trdmnet-ctrl\n5573\tsdmmp\n5574\tlsi-bobcat\n5575\tora-oap\n5579\tfdtracks\n5580\ttmosms0\n5581\ttmosms1\n5582\tfac-restore\n5583\ttmo-icon-sync\n5584\tbis-web\n5585\tbis-sync\n5586\tatt-mt-sms\n5597\tininmessaging\n5598\tmctfeed\n5599\tesinstall\n5600\tesmmanager\n5601\tesmagent\n5602\ta1-msc\n5603\ta1-bs\n5604\ta3-sdunode\n5605\ta4-sdunode\n5618\tefr\n5627\tninaf\n5628\thtrust\n5629\tsymantec-sfdb\n5630\tprecise-comm\n5631\tpcanywheredata\n5632\tpcanywherestat\n5633\tbeorl\n5634\txprtld\n5635\tsfmsso\n5636\tsfm-db-server\n5637\tcssc\n5638\tflcrs\n5639\tics\n5646\tvfmobile\n5666\tnrpe\n5670\tfilemq\n5671\tamqps\n5672\tamqp\n5673\tjms\n5674\thyperscsi-port\n5675\tv5ua\n5676\traadmin\n5677\tquestdb2-lnchr\n5678\trrac\n5679\tactivesync\n5680\tcanna\n5681\tncxcp\n5682\tbrightcore\n5683\tcoap\n5684\tcoaps\n5687\tgog-multiplayer\n5688\tggz\n5689\tqmvideo\n5693\trbsystem\n5696\tkmip\n5700\tsupportassist\n5705\tstorageos\n5713\tproshareaudio\n5714\tprosharevideo\n5715\tprosharedata\n5716\tprosharerequest\n5717\tprosharenotify\n5718\tdpm\n5719\tdpm-agent\n5720\tms-licensing\n5721\tdtpt\n5722\tmsdfsr\n5723\tomhs\n5724\tomsdk\n5725\tms-ilm\n5726\tms-ilm-sts\n5727\tasgenf\n5728\tio-dist-data\n5729\topenmail\n5730\tunieng\n5741\tida-discover1\n5742\tida-discover2\n5743\twatchdoc-pod\n5744\twatchdoc\n5745\tfcopy-server\n5746\tfcopys-server\n5747\ttunatic\n5748\ttunalyzer\n5750\trscd\n5755\topenmailg\n5757\tx500ms\n5766\topenmailns\n5767\ts-openmail\n5768\topenmailpxy\n5769\tspramsca\n5770\tspramsd\n5771\tnetagent\n5777\tdali-port\n5780\tvts-rpc\n5781\t3par-evts\n5782\t3par-mgmt\n5783\t3par-mgmt-ssl\n5784\tibar\n5785\t3par-rcopy\n5786\tcisco-redu\n5787\twaascluster\n5793\txtreamx\n5794\tspdp\n5800\tvnc-http\n5801\tvnc-http-1\n5802\tvnc-http-2\n5803\tvnc-http-3\n5813\ticmpd\n5814\tspt-automation\n5841\tshiprush-d-ch\n5842\treversion\n5859\twherehoo\n5863\tppsuitemsg\n5868\tdiameters\n5883\tjute\n5900\tvnc\n5901\tvnc-1\n5902\tvnc-2\n5903\tvnc-3\n5910\tcm\n5911\tcpdlc\n5912\tfis\n5913\tads-c\n5938\tteamviewer\n5963\tindy\n5968\tmppolicy-v5\n5969\tmppolicy-mgr\n5977\tncd-pref-tcp\n5978\tncd-diag-tcp\n5979\tncd-conf-tcp\n5984\tcouchdb\n5985\twsman\n5986\twsmans\n5987\twbem-rmi\n5988\twbem-http\n5989\twbem-https\n5990\twbem-exp-https\n5991\tnuxsl\n5992\tconsul-insight\n5993\tcim-rs\n5994\trms-agent\n5997\tncd-pref\n5998\tncd-diag\n5999\tncd-conf\n6000\tX11\n6001\tX11:1\n6002\tX11:2\n6003\tX11:3\n6004\tX11:4\n6005\tX11:5\n6006\tX11:6\n6007\tX11:7\n6008\tX11:8\n6009\tX11:9\n6010\tx11\n6011\tx11\n6012\tx11\n6013\tx11\n6014\tx11\n6015\tx11\n6016\tx11\n6017\txmail-ctrl\n6018\tx11\n6019\tx11\n6020\tx11\n6021\tx11\n6022\tx11\n6023\tx11\n6024\tx11\n6025\tx11\n6026\tx11\n6027\tx11\n6028\tx11\n6029\tx11\n6030\tx11\n6031\tx11\n6032\tx11\n6033\tx11\n6034\tx11\n6035\tx11\n6036\tx11\n6037\tx11\n6038\tx11\n6039\tx11\n6040\tx11\n6041\tx11\n6042\tx11\n6043\tx11\n6044\tx11\n6045\tx11\n6046\tx11\n6047\tx11\n6048\tx11\n6049\tx11\n6050\tarcserve\n6051\tx11\n6052\tx11\n6053\tx11\n6054\tx11\n6055\tx11\n6056\tx11\n6057\tx11\n6058\tx11\n6059\tX11:59\n6060\tx11\n6061\tx11\n6062\tx11\n6063\tx11\n6064\tndl-ahp-svc\n6065\twinpharaoh\n6066\tewctsp\n6068\tgsmp\n6069\ttrip\n6070\tmessageasap\n6071\tssdtp\n6072\tdiagnose-proc\n6073\tdirectplay8\n6074\tmax\n6075\tdpm-acm\n6076\tmsft-dpm-cert\n6077\ticonstructsrv\n6080\tgue\n6081\tgeneve\n6082\tp25cai\n6083\tmiami-bcast\n6084\tp2p-sip\n6085\tkonspire2b\n6086\tpdtp\n6087\tldss\n6088\tdoglms\n6099\traxa-mgmt\n6100\tsynchronet-db\n6101\tbackupexec\n6102\tsynchronet-upd\n6103\tRETS-or-BackupExec\n6104\tdbdb\n6105\tisdninfo\n6106\tisdninfo\n6107\tetc-control\n6108\tsercomm-scadmin\n6109\tglobecast-id\n6110\tsoftcm\n6111\tspc\n6112\tdtspc\n6113\tdayliteserver\n6114\twrspice\n6115\txic\n6116\txtlserv\n6117\tdaylitetouch\n6118\ttipc\n6121\tspdy\n6122\tbex-webadmin\n6123\tbackup-express\n6124\tpnbs\n6130\tdamewaremobgtwy\n6133\tnbt-wol\n6140\tpulsonixnls\n6141\tmeta-corp\n6142\taspentec-lm\n6143\twatershed-lm\n6144\tstatsci1-lm\n6145\tstatsci2-lm\n6146\tlonewolf-lm\n6147\tmontage-lm\n6148\tricardo-lm\n6149\ttal-pod\n6159\tefb-aci\n6160\tecmp\n6161\tpatrol-ism\n6162\tpatrol-coll\n6163\tpscribe\n6200\tlm-x\n6201\tthermo-calc\n6209\tqmtps\n6222\tradmind\n6241\tjeol-nsdtp-1\n6242\tjeol-nsdtp-2\n6243\tjeol-nsdtp-3\n6244\tjeol-nsdtp-4\n6251\ttl1-raw-ssl\n6252\ttl1-ssh\n6253\tcrip\n6267\tgld\n6268\tgrid\n6269\tgrid-alt\n6300\tbmc-grx\n6301\tbmc_ctd_ldap\n6306\tufmp\n6315\tscup\n6316\tabb-escp\n6317\tnav-data-cmd\n6320\trepsvc\n6321\temp-server1\n6322\temp-server2\n6324\thrd-ncs\n6325\tdt-mgmtsvc\n6326\tdt-vra\n6343\tsflow\n6344\tstreletz\n6346\tgnutella\n6347\tgnutella2\n6350\tadap\n6355\tpmcs\n6360\tmetaedit-mu\n6363\tndn\n6370\tmetaedit-se\n6379\tredis\n6382\tmetatude-mds\n6389\tclariion-evr01\n6390\tmetaedit-ws\n6400\tcrystalreports\n6401\tcrystalenterprise\n6402\tboe-eventsrv\n6403\tboe-cachesvr\n6404\tboe-filesvr\n6405\tboe-pagesvr\n6406\tboe-processsvr\n6407\tboe-resssvr1\n6408\tboe-resssvr2\n6409\tboe-resssvr3\n6410\tboe-resssvr4\n6417\tfaxcomservice\n6418\tsyserverremote\n6419\tsvdrp\n6420\tnim-vdrshell\n6421\tnim-wan\n6432\tpgbouncer\n6440\theliosd\n6442\ttarp\n6443\tsun-sr-https\n6444\tsge_qmaster\n6445\tsge_execd\n6446\tmysql-proxy\n6455\tskip-cert-recv\n6456\tskip-cert-send\n6464\tieee11073-20701\n6471\tlvision-lm\n6480\tsun-sr-http\n6481\tservicetags\n6482\tldoms-mgmt\n6483\tSunVTS-RMI\n6484\tsun-sr-jms\n6485\tsun-sr-iiop\n6486\tsun-sr-iiops\n6487\tsun-sr-iiop-aut\n6488\tsun-sr-jmx\n6489\tsun-sr-admin\n6500\tboks\n6501\tboks_servc\n6502\tnetop-rc\n6503\tboks_clntd\n6505\tbadm_priv\n6506\tbadm_pub\n6507\tbdir_priv\n6508\tbdir_pub\n6509\tmgcs-mfp-port\n6510\tmcer-port\n6511\tdccp-udp\n6513\tnetconf-tls\n6514\tsyslog-tls\n6515\telipse-rec\n6543\tmythtv\n6544\tmythtv\n6547\tpowerchuteplus\n6548\tpowerchuteplus\n6549\tapc-6549\n6550\tfg-sysupdate\n6551\tsum\n6556\tcheckmk-agent\n6558\txdsxdm\n6566\tsane-port\n6567\tesp\n6568\tcanit_store\n6579\taffiliate\n6580\tparsec-master\n6581\tparsec-peer\n6582\tparsec-game\n6583\tjoaJewelSuite\n6588\tanalogx\n6600\tmshvlm\n6601\tmstmg-sstp\n6602\twsscomfrmwk\n6619\todette-ftps\n6620\tkftp-data\n6621\tkftp\n6622\tmcftp\n6623\tktelnet\n6624\tdatascaler-db\n6625\tdatascaler-ctl\n6626\twago-service\n6627\tnexgen\n6628\tafesc-mc\n6629\tnexgen-aux\n6632\tmxodbc-connect\n6633\tcisco-vpath-tun\n6634\tmpls-pm\n6635\tmpls-udp\n6636\tmpls-udp-dtls\n6640\tovsdb\n6653\topenflow\n6655\tpcs-sf-ui-man\n6656\temgmsg\n6657\tpalcom-disc\n6662\tradmind\n6665\tirc\n6666\tirc\n6667\tirc\n6668\tirc\n6669\tirc\n6670\tirc\n6671\tp4p-portal\n6672\tvision_server\n6673\tvision_elmd\n6678\tvfbp\n6679\tosaut\n6687\tclever-ctrace\n6688\tclever-tcpip\n6689\ttsa\n6690\tcleverdetect\n6696\tbabel\n6697\tircs-u\n6699\tnapster\n6700\tcarracho\n6701\tcarracho\n6702\te-design-net\n6703\te-design-web\n6714\tibprotocol\n6715\tfibotrader-com\n6716\tprincity-agent\n6767\tbmc-perf-agent\n6768\tbmc-perf-mgrd\n6769\tadi-gxp-srvprt\n6770\tplysrv-http\n6771\tplysrv-https\n6777\tntz-tracker\n6778\tntz-p2p-storage\n6784\tbfd-lag\n6785\tdgpf-exchg\n6786\tsmc-jmx\n6787\tsmc-admin\n6788\tsmc-http\n6789\tibm-db2-admin\n6790\thnmp\n6791\thnm\n6801\tacnet\n6817\tpentbox-sim\n6831\tambit-lm\n6841\tnetmo-default\n6842\tnetmo-http\n6850\ticcrushmore\n6868\tacctopus-cc\n6881\tbittorrent-tracker\n6888\tmuse\n6900\trtimeviewer\n6901\tjetstream\n6924\tsplit-ping\n6935\tethoscan\n6936\txsmsvc\n6946\tbioserver\n6951\totlp\n6961\tjmact3\n6962\tjmevt2\n6963\tswismgr1\n6964\tswismgr2\n6965\tswistrap\n6966\tswispol\n6969\tacmsoda\n6970\tconductor\n6997\tMobilitySrv\n6998\tiatp-highpri\n6999\tiatp-normalpri\n7000\tafs3-fileserver\n7001\tafs3-callback\n7002\tafs3-prserver\n7003\tafs3-vlserver\n7004\tafs3-kaserver\n7005\tafs3-volser\n7006\tafs3-errors\n7007\tafs3-bos\n7008\tafs3-update\n7009\tafs3-rmtsys\n7010\tups-onlinet\n7011\ttalon-disc\n7012\ttalon-engine\n7013\tmicrotalon-dis\n7014\tmicrotalon-com\n7015\ttalon-webserver\n7016\tspg\n7017\tgrasp\n7018\tfisa-svc\n7019\tdoceri-ctl\n7020\tdpserve\n7021\tdpserveadmin\n7022\tctdp\n7023\tct2nmcs\n7024\tvmsvc\n7025\tvmsvc-2\n7026\tloreji-panel\n7030\top-probe\n7031\tiposplanet\n7040\tquest-disc\n7070\trealserver\n7071\tiwg1\n7072\tiba-cfg\n7073\tmartalk\n7080\tempowerid\n7088\tzixi-transport\n7095\tjdp-disc\n7099\tlazy-ptop\n7100\tfont-service\n7101\telcn\n7107\taes-x170\n7117\trothaga\n7121\tvirprot-lm\n7128\tscenidm\n7129\tscenccs\n7161\tcabsm-comm\n7162\tcaistoragemgr\n7163\tcacsambroker\n7164\tfsr\n7165\tdoc-server\n7166\taruba-server\n7167\tcasrmagent\n7168\tcnckadserver\n7169\tccag-pib\n7170\tnsrp\n7171\tdrm-production\n7172\tmetalbend\n7173\tzsecure\n7174\tclutild\n7181\tjanus-disc\n7200\tfodms\n7201\tdlip\n7202\tpon-ictp\n7215\tPS-Server\n7216\tPS-Capture-Pro\n7227\tramp\n7228\tcitrixupp\n7229\tcitrixuppg\n7234\tasa-gateways\n7235\taspcoordination\n7236\tdisplay\n7237\tpads\n7244\tfrc-hicp\n7262\tcnap\n7272\twatchme-7272\n7273\topenmanage\n7274\toma-rlp-s\n7275\toma-ulp\n7276\toma-ilp\n7277\toma-ilp-s\n7278\toma-dcdocbs\n7279\tctxlic\n7280\titactionserver1\n7281\titactionserver2\n7282\tmzca-action\n7283\tgenstat\n7300\tswx\n7301\tswx\n7302\tswx\n7303\tswx\n7304\tswx\n7305\tswx\n7306\tswx\n7307\tswx\n7308\tswx\n7309\tswx\n7310\tswx\n7311\tswx\n7312\tswx\n7313\tswx\n7314\tswx\n7315\tswx\n7316\tswx\n7317\tswx\n7318\tswx\n7319\tswx\n7320\tswx\n7321\tswx\n7322\tswx\n7323\tswx\n7324\tswx\n7325\tswx\n7326\ticb\n7327\tswx\n7328\tswx\n7329\tswx\n7330\tswx\n7331\tswx\n7332\tswx\n7333\tswx\n7334\tswx\n7335\tswx\n7336\tswx\n7337\tswx\n7338\tswx\n7339\tswx\n7340\tswx\n7341\tswx\n7342\tswx\n7343\tswx\n7344\tswx\n7345\tswx\n7346\tswx\n7347\tswx\n7348\tswx\n7349\tswx\n7350\tswx\n7351\tswx\n7352\tswx\n7353\tswx\n7354\tswx\n7355\tswx\n7356\tswx\n7357\tswx\n7358\tswx\n7359\tswx\n7365\tlcm-server\n7391\tmindfilesys\n7392\tmrssrendezvous\n7393\tnfoldman\n7394\tfse\n7395\twinqedit\n7397\thexarc\n7400\trtps-discovery\n7401\trtps-dd-ut\n7402\trtps-dd-mt\n7410\tionixnetmon\n7411\tdaqstream\n7420\tipluminary\n7421\tmtportmon\n7426\tpmdmgr\n7427\toveadmgr\n7428\tovladmgr\n7429\topi-sock\n7430\txmpv7\n7431\tpmd\n7437\tfaximum\n7443\toracleas-https\n7464\tpythonds\n7471\tsttunnel\n7473\trise\n7474\tneo4j\n7478\topenit\n7491\ttelops-lmd\n7500\tsilhouette\n7501\tovbus\n7508\tadcp\n7509\tacplt\n7510\tovhpas\n7511\tpafec-lm\n7542\tsaratoga\n7543\tatul\n7544\tnta-ds\n7545\tnta-us\n7546\tcfs\n7547\tcwmp\n7548\ttidp\n7549\tnls-tl\n7550\tcloudsignaling\n7551\tcontrolone-con\n7560\tsncp\n7563\tcfw\n7566\tvsi-omega\n7569\tdell-eql-asm\n7570\taries-kfinder\n7574\tcoherence\n7588\tsun-lm\n7597\tqaz\n7606\tmipi-debug\n7624\tindi\n7626\tsimco\n7627\tsoap-http\n7628\tzen-pawn\n7629\txdas\n7630\thawk\n7631\ttesla-sys-msg\n7633\tpmdfmgt\n7634\thddtemp\n7648\tcuseeme\n7649\tcucme-2\n7650\tcucme-3\n7651\tcucme-4\n7663\trome\n7672\timqstomp\n7673\timqstomps\n7674\timqtunnels\n7675\timqtunnel\n7676\timqbrokerd\n7677\tsun-user-https\n7680\tpando-pub\n7683\tdmt\n7687\tbolt\n7689\tcollaber\n7697\tklio\n7700\tem7-secom\n7701\tnfapi\n7707\tsync-em7\n7708\tscinet\n7720\tmedimageportal\n7724\tnsdeepfreezectl\n7725\tnitrogen\n7726\tfreezexservice\n7727\ttrident-data\n7728\tosvr\n7734\tsmip\n7738\taiagent\n7741\tscriptview\n7742\tmsss\n7743\tsstp-1\n7744\traqmon-pdu\n7747\tprgp\n7775\tinetfs\n7777\tcbt\n7778\tinterwise\n7779\tvstat\n7781\taccu-lmgr\n7784\ts-bfd\n7786\tminivend\n7787\tpopup-reminders\n7789\toffice-tools\n7794\tq3ade\n7797\tpnet-conn\n7798\tpnet-enc\n7799\taltbsdp\n7800\tasr\n7801\tssp-client\n7802\tvns-tp\n7810\trbt-wanopt\n7845\tapc-7845\n7846\tapc-7846\n7847\tcsoauth\n7869\tmobileanalyzer\n7870\trbt-smc\n7871\tmdm\n7872\tmipv6tls\n7878\towms\n7880\tpss\n7887\tubroker\n7890\tclash-http\n7891\tclash-socks\n7900\tmevent\n7901\ttnos-sp\n7902\ttnos-dp\n7903\ttnos-dps\n7913\tqo-secure\n7932\tt2-drm\n7933\tt2-brm\n7937\tnsrexecd\n7938\tlgtomapper\n7962\tgeneralsync\n7967\tsupercell\n7979\tmicromuse-ncps\n7980\tquest-vista\n7981\tsossd-collect\n7982\tsossd-agent\n7997\tpushns\n7998\tusicontentpush\n7999\tirdmi2\n8000\thttp-alt\n8001\tvcom-tunnel\n8002\tteradataordbms\n8003\tmcreport\n8004\tp2pevolvenet\n8005\tmxi\n8006\twpl-analytics\n8007\tajp12\n8008\thttp\n8009\tajp13\n8010\txmpp\n8015\tcfg-cloud\n8016\tads-s\n8017\tcisco-cloudsec\n8019\tqbdb\n8020\tintu-ec-svcdisc\n8021\tftp-proxy\n8022\toa-system\n8023\tarca-api\n8025\tca-audit-da\n8026\tca-audit-ds\n8027\tpapachi-p2p-srv\n8032\tpro-ed\n8033\tmindprint\n8034\tvantronix-mgmt\n8040\tampify\n8041\tenguity-xccetp\n8042\tfs-agent\n8043\tfs-server\n8044\tfs-mgmt\n8051\trocrail\n8052\tsenomix01\n8053\tsenomix02\n8054\tsenomix03\n8055\tsenomix04\n8056\tsenomix05\n8057\tsenomix06\n8058\tsenomix07\n8059\tsenomix08\n8060\taero\n8066\ttoad-bi-appsrvr\n8067\tinfi-async\n8070\tucs-isc\n8074\tgadugadu\n8076\tslnp\n8077\tmles\n8080\thttp-proxy\n8081\tblackice-icecap\n8082\tblackice-alerts\n8083\tus-srv\n8084\twebsnp\n8086\td-s-n\n8087\tsimplifymedia\n8088\tradan-http\n8090\topsmessaging\n8091\tjamlink\n8097\tsac\n8100\txprint-server\n8101\tldoms-migr\n8102\tkz-migr\n8111\tskynetflow\n8115\tmtl8000-matrix\n8116\tcp-cluster\n8117\tpurityrpc\n8118\tprivoxy\n8121\tapollo-data\n8122\tapollo-admin\n8123\tpolipo\n8128\tpaycash-online\n8129\tpaycash-wbp\n8130\tindigo-vrmi\n8131\tindigo-vbcp\n8132\tdbabble\n8140\tpuppet\n8148\tisdd\n8149\teor-game\n8153\tquantastor\n8160\tpatrol\n8161\tpatrol-snmp\n8162\tlpar2rrd\n8181\tintermapper\n8182\tvmware-fdm\n8183\tproremote\n8184\titach\n8190\tgcp-rphy\n8191\tlimnerpressure\n8192\tsophos\n8193\tsophos\n8194\tsophos\n8195\tblp2\n8199\tvvr-data\n8200\ttrivnet1\n8201\ttrivnet2\n8202\taesop\n8204\tlm-perfworks\n8205\tlm-instmgr\n8206\tlm-dta\n8207\tlm-sserver\n8208\tlm-webwatcher\n8211\taruba-papi\n8230\trexecj\n8231\thncp-udp-port\n8232\thncp-dtls-port\n8243\tsynapse-nhttps\n8266\tespeasy-p2p\n8270\trobot-remote\n8276\tpando-sec\n8280\tsynapse-nhttp\n8282\tlibelle\n8292\tblp3\n8293\thiperscan-id\n8294\tblp4\n8300\ttmi\n8301\tamberon\n8313\thub-open-net\n8320\ttnp-discover\n8321\ttnp\n8322\tgarmin-marine\n8333\tbitcoin\n8351\tserver-find\n8376\tcruise-enum\n8377\tcruise-swroute\n8378\tcruise-config\n8379\tcruise-diags\n8380\tcruise-update\n8383\tm2mservices\n8384\tmarathontp\n8400\tcvd\n8401\tsabarsd\n8402\tabarsd\n8403\tadmind\n8404\tsvcloud\n8405\tsvbackup\n8415\tdlpx-sp\n8416\tespeech\n8417\tespeech-rtp\n8423\taritts\n8442\tcybro-a-bus\n8443\thttps-alt\n8444\tpcsync-http\n8445\tcopy\n8450\tnpmp\n8457\tnexentamv\n8470\tcisco-avp\n8471\tpim-port\n8472\totv\n8473\tvp2p\n8474\tnoteshare\n8500\tfmtp\n8501\tcmtp-mgt\n8502\tftnmtp\n8503\tlsp-self-ping\n8554\trtsp-alt\n8555\td-fence\n8567\toap-admin\n8600\tasterix\n8609\tcanon-cpp-disc\n8610\tcanon-mfnp\n8611\tcanon-bjnp1\n8612\tcanon-bjnp2\n8613\tcanon-bjnp3\n8614\tcanon-bjnp4\n8615\timink\n8665\tmonetra\n8666\tmonetra-admin\n8675\tmsi-cps-rm\n8686\tsun-as-jmxrmi\n8688\topenremote-ctrl\n8699\tvnyx\n8710\tsemi-grpc\n8711\tnvc\n8732\tdtp-net\n8733\tibus\n8750\tdey-keyneg\n8763\tmc-appserver\n8764\topenqueue\n8765\tultraseek-http\n8766\tamcs\n8767\tcore-of-source\n8768\tsandpolis\n8769\toktaauthenticat\n8770\tapple-iphoto\n8778\tuec\n8786\tmsgclnt\n8787\tmsgsrvr\n8793\tacd-pm\n8800\tsunwebadmin\n8804\ttruecm\n8805\tpfcp\n8807\thes-clip\n8808\tssports-bcast\n8809\t3gpp-monp\n8834\tnessus-xmlrpc\n8873\tdxspider\n8880\tcddbp-alt\n8881\tgalaxy4d\n8883\tsecure-mqtt\n8888\tsun-answerbook\n8889\tddi-tcp-2\n8890\tddi-tcp-3\n8891\tddi-tcp-4\n8892\tseosload\n8893\tddi-tcp-6\n8894\tddi-tcp-7\n8899\tospf-lite\n8900\tjmb-cds1\n8901\tjmb-cds2\n8908\tdpp\n8910\tmanyone-http\n8911\tmanyone-xml\n8912\twcbackup\n8913\tdragonfly\n8937\ttwds\n8953\tub-dns-control\n8954\tcumulus-admin\n8980\tnod-provider\n8981\tnod-client\n8989\tsunwebadmins\n8990\thttp-wmap\n8991\thttps-wmap\n8997\toracle-ms-ens\n8998\tcanto-roboflow\n8999\tbctp\n9000\tcslistener\n9001\ttor-orport\n9002\tdynamid\n9005\tgolem\n9007\togs-client\n9008\togs-server\n9009\tpichat\n9010\tsdr\n9011\td-star\n9020\ttambora\n9021\tpanagolin-ident\n9022\tparagent\n9023\tswa-1\n9024\tswa-2\n9025\tswa-3\n9026\tswa-4\n9040\ttor-trans\n9050\ttor-socks\n9051\ttor-control\n9060\tCardWeb-IO\n9080\tglrpc\n9081\tcisco-aqos\n9083\temc-pp-mgmtsvc\n9084\taurora\n9085\tibm-rsyscon\n9086\tnet2display\n9087\tclassic\n9088\tsqlexec\n9089\tsqlexec-ssl\n9090\tzeus-admin\n9091\txmltec-xmlmail\n9092\tXmlIpcRegSvc\n9093\tcopycat\n9100\tjetdirect\n9101\tjetdirect\n9102\tjetdirect\n9103\tjetdirect\n9104\tjetdirect\n9105\tjetdirect\n9106\tjetdirect\n9107\tjetdirect\n9111\tDragonIDSConsole\n9119\tmxit\n9122\tgrcmp\n9123\tgrcp\n9131\tdddp\n9152\tms-sql2000\n9160\tapani1\n9161\tapani2\n9162\tapani3\n9163\tapani4\n9164\tapani5\n9191\tsun-as-jpda\n9200\twap-wsp\n9201\twap-wsp-wtp\n9202\twap-wsp-s\n9203\twap-wsp-wtp-s\n9204\twap-vcard\n9205\twap-vcal\n9206\twap-vcard-s\n9207\twap-vcal-s\n9208\trjcdb-vcards\n9209\talmobile-system\n9210\toma-mlp\n9211\toma-mlp-s\n9212\tserverviewdbms\n9213\tserverstart\n9214\tipdcesgbs\n9215\tinsis\n9216\tacme\n9217\tfsc-port\n9222\tteamcoherence\n9255\tmon\n9277\ttraingpsdata\n9278\tpegasus\n9279\tpegasus-ctl\n9280\tpgps\n9281\tswtp-port1\n9282\tswtp-port2\n9283\tcallwaveiam\n9284\tvisd\n9285\tn2h2server\n9286\tn2receive\n9287\tcumulus\n9292\tarmtechdaemon\n9293\tstorview\n9294\tarmcenterhttp\n9295\tarmcenterhttps\n9300\tvrace\n9306\tsphinxql\n9310\tsapms\n9312\tsphinxapi\n9318\tsecure-ts\n9321\tguibase\n9333\tlitecoin\n9339\tgnmi-gnoi\n9343\tmpidcmgr\n9344\tmphlpdmc\n9345\trancher\n9346\tctechlicensing\n9374\tfjdmimgr\n9380\tboxp\n9387\td2dconfig\n9388\td2ddatatrans\n9389\tadws\n9390\totp\n9396\tfjinvmgr\n9397\tmpidcagt\n9400\tsec-t4net-srv\n9401\tsec-t4net-clt\n9402\tsec-pc2fax-srv\n9418\tgit\n9443\ttungsten-https\n9444\twso2esb-console\n9445\tmindarray-ca\n9450\tsntlkeyssrvr\n9500\tismserver\n9522\tsma-spw\n9535\tman\n9536\tlaes-bf\n9555\ttrispen-sra\n9559\tp4runtime\n9592\tldgateway\n9593\tcba8\n9594\tmsgsys\n9595\tpds\n9596\tmercury-disc\n9597\tpd-admin\n9598\tvscp\n9599\trobix\n9600\tmicromuse-ncpw\n9612\tstreamcomm-ds\n9614\tiadt-tls\n9616\terunbook_agent\n9617\terunbook_server\n9618\tcondor\n9628\todbcpathway\n9629\tuniport\n9630\tpeoctlr\n9631\tpeocoll\n9632\tmc-comm\n9640\tpqsflows\n9666\tzoomcp\n9667\txmms2\n9668\ttec5-sdctp\n9694\tclient-wakeup\n9695\tccnx\n9700\tboard-roar\n9747\tl5nas-parchan\n9750\tboard-voip\n9753\trasadv\n9762\ttungsten-http\n9800\tdavsrc\n9801\tsstp-2\n9802\tdavsrcs\n9875\tsapv1\n9876\tsd\n9877\tx510\n9878\tkca-service\n9888\tcyborg-systems\n9889\tgt-proxy\n9898\tmonkeycom\n9899\tsctp-tunneling\n9900\tiua\n9901\tenrp\n9903\tmulticast-ping\n9909\tdomaintime\n9911\tsype-transport\n9925\txybrid-cloud\n9929\tnping-echo\n9950\tapc-9950\n9951\tapc-9951\n9952\tapc-9952\n9953\tacis\n9954\thinp\n9955\talljoyn-stm\n9956\talljoyn\n9966\todnsp\n9978\txybrid-rt\n9979\tvisweather\n9981\tpumpkindb\n9987\tdsm-scm-target\n9988\tnsesrvr\n9990\tosm-appsrvr\n9991\tissa\n9992\tissc\n9993\tpalace-2\n9994\tpalace-3\n9995\tpalace-4\n9996\tpalace-5\n9997\tpalace-6\n9998\tdistinct32\n9999\tabyss\n10000\tsnet-sensor-mgmt\n10001\tscp-config\n10002\tdocumentum\n10003\tdocumentum_s\n10004\temcrmirccd\n10005\tstel\n10006\tnetapp-sync\n10007\tmvs-capacity\n10008\toctopus\n10009\tswdtp-sv\n10010\trxapi\n10020\tabb-hw\n10023\tcefd-vmp\n10050\tzabbix-agent\n10051\tzabbix-trapper\n10055\tqptlmd\n10080\tamanda\n10081\tfamdc\n10082\tamandaidx\n10083\tamidxtape\n10100\titap-ddtp\n10101\tezmeeting-2\n10102\tezproxy-2\n10103\tezrelay\n10104\tswdtp\n10107\tbctp-server\n10110\tnmea-0183\n10111\tnmea-onenet\n10113\tnetiq-endpoint\n10114\tnetiq-qcheck\n10115\tnetiq-endpt\n10116\tnetiq-voipa\n10117\tiqrm\n10125\tcimple\n10128\tbmc-perf-sd\n10129\tbmc-gms\n10160\tqb-db-server\n10161\tsnmptls\n10162\tsnmptls-trap\n10200\ttrisoap\n10201\trsms\n10252\tapollo-relay\n10253\teapol-relay\n10260\taxis-wimp-port\n10261\ttile-ml\n10288\tblocks\n10321\tcosir\n10439\tbngsync\n10443\tcirrossp\n10500\thip-nat-t\n10540\tMOS-lower\n10541\tMOS-upper\n10542\tMOS-aux\n10543\tMOS-soap\n10544\tMOS-soap-opt\n10548\tserverdocs\n10631\tprintopia\n10800\tgap\n10805\tlpdg\n10809\tnbd\n10810\tnmc-disc\n10860\thelix\n10880\tbveapi\n10933\toctopustentacle\n10990\trmiaux\n11000\tirisa\n11001\tmetasys\n11095\tweave\n11103\torigo-sync\n11104\tnetapp-icmgmt\n11105\tnetapp-icdata\n11106\tsgi-lk\n11108\tmyq-termlink\n11109\tsgi-dmfmgr\n11110\tsgi-soap\n11111\tvce\n11112\tdicom\n11161\tsuncacao-snmp\n11162\tsuncacao-jmxmp\n11163\tsuncacao-rmi\n11164\tsuncacao-csa\n11165\tsuncacao-websvc\n11171\tsnss\n11172\toemcacao-jmxmp\n11173\tt5-straton\n11174\toemcacao-rmi\n11175\toemcacao-websvc\n11201\tsmsqp\n11202\tdcsl-backup\n11208\twifree\n11211\tmemcache\n11235\txcompute\n11319\timip\n11320\timip-channels\n11321\tarena-server\n11367\tatm-uhas\n11371\tpksd\n11430\tlsdp\n11489\tasgcypresstcps\n11600\ttempest-port\n11623\temc-xsw-dconfig\n11720\th323callsigalt\n11723\temc-xsw-dcache\n11751\tintrepid-ssl\n11796\tlanschool\n11876\txoraya\n11877\tx2e-disc\n11967\tsysinfo-sp\n11971\ttibsd\n12000\tcce4x\n12001\tentextnetwk\n12002\tentexthigh\n12003\tentextmed\n12004\tentextlow\n12005\tdbisamserver1\n12006\tdbisamserver2\n12007\taccuracer\n12008\taccuracer-dbms\n12009\tghvpn\n12010\tedbsrvr\n12012\tvipera\n12013\tvipera-ssl\n12109\trets-ssl\n12121\tnupaper-ss\n12168\tcawas\n12172\thivep\n12300\tlinogridengine\n12302\trads\n12321\twarehouse-sss\n12322\twarehouse\n12345\tnetbus\n12346\tnetbus\n12753\ttsaf\n12865\tnetperf\n13160\ti-zipqd\n13216\tbcslogc\n13217\trs-pias\n13218\temc-vcas-tcp\n13223\tpowwow-client\n13224\tpowwow-server\n13400\tdoip-data\n13701\tnetbackup\n13702\tnetbackup\n13705\tnetbackup\n13706\tnetbackup\n13708\tnetbackup\n13709\tnetbackup\n13710\tnetbackup\n13711\tnetbackup\n13712\tnetbackup\n13713\tnetbackup\n13714\tnetbackup\n13715\tnetbackup\n13716\tnetbackup\n13717\tnetbackup\n13718\tnetbackup\n13720\tnetbackup\n13721\tnetbackup\n13722\tnetbackup\n13724\tvnetd\n13782\tnetbackup\n13783\tnetbackup\n13785\tnbdb\n13786\tnomdb\n13818\tdsmcc-config\n13819\tdsmcc-session\n13820\tdsmcc-passthru\n13821\tdsmcc-download\n13822\tdsmcc-ccp\n13823\tbmdss\n13882\tvunknown\n13894\tucontrol\n13929\tdta-systems\n13930\tmedevolve\n14000\tscotty-ft\n14001\tsua\n14002\tscotty-disc\n14033\tsage-best-com1\n14034\tsage-best-com2\n14141\tbo2k\n14142\ticpp\n14143\ticpps\n14145\tgcm-app\n14149\tvrts-tdd\n14150\tvcscmd\n14154\tvad\n14250\tcps\n14414\tca-web-update\n14500\txpra\n14936\thde-lcesrvr-1\n14937\thde-lcesrvr-2\n15000\thydap\n15002\tonep-tls\n15118\tv2g-secc\n15126\tswgps\n15151\tbo2k\n15345\txpilot\n15363\t3link\n15555\tcisco-snat\n15660\tbex-xr\n15740\tptp\n15998\t2ping\n15999\tprogrammar\n16000\tfmsas\n16001\tfmsascon\n16002\tgsms\n16003\talfin\n16020\tjwpc\n16021\tjwpc-bin\n16080\tosxwebadmin\n16161\tsun-sea-port\n16162\tsolaris-audit\n16309\tetb4j\n16310\tpduncs\n16311\tpdefmns\n16360\tnetserialext1\n16361\tnetserialext2\n16367\tnetserialext3\n16368\tnetserialext4\n16384\tconnected\n16385\trdgs\n16444\tovernet\n16619\txoms\n16665\taxon-tunnel\n16666\tvtp\n16789\tcadsisvr\n16900\tnewbay-snc-mc\n16950\tsgcip\n16959\tsubseven\n16991\tintel-rci-mp\n16992\tamt-soap-http\n16993\tamt-soap-https\n16994\tamt-redir-tcp\n16995\tamt-redir-tls\n17007\tisode-dua\n17184\tvestasdlp\n17185\tsoundsvirtual\n17219\tchipper\n17220\tavtp\n17221\tavdecc\n17222\tcpsp\n17223\tisa100-gci\n17224\ttrdp-pd\n17225\ttrdp-md\n17234\tintegrius-stp\n17235\tssh-mgmt\n17300\tkuang2\n17500\tdb-lsp\n17555\tailith\n17729\tea\n17754\tzep\n17755\tzigbee-ip\n17756\tzigbee-ips\n17777\tsw-orion\n18000\tbiimenu\n18104\tradpdf\n18136\tracf\n18181\topsec-cvp\n18182\topsec-ufp\n18183\topsec-sam\n18184\topsec-lea\n18185\topsec-omi\n18186\tohsc\n18187\topsec-ela\n18241\tcheckpoint-rtm\n18242\ticlid\n18243\tclusterxl\n18262\tgv-pf\n18333\tbitcoin\n18463\tac-cluster\n18516\theythings\n18634\trds-ib\n18635\trds-ip\n18668\tvdmmesh\n18769\tique\n18881\tinfotos\n18888\tapc-necmp\n19000\tigrid\n19007\tscintilla\n19020\tj-link\n19150\tgkrellm\n19191\topsec-uaa\n19194\tua-secureagent\n19220\tcora\n19283\tkeysrvr\n19315\tkeyshadow\n19333\tlitecoin\n19398\tmtrgtrans\n19410\thp-sco\n19411\thp-sca\n19412\thp-sessmon\n19539\tfxuptp\n19540\tsxuptp\n19541\tjcp\n19788\tmle\n19790\tfaircom-db\n19998\tiec-104-sec\n19999\tdnp-sec\n20000\tdnp\n20001\tmicrosan\n20002\tcommtact-http\n20003\tcommtact-https\n20005\tbtx\n20012\tss-idi-disc\n20013\tss-idi\n20014\topendeploy\n20031\tbakbonenetvault\n20034\tnburn_id\n20046\ttmophl7mts\n20048\tmountd\n20049\tnfsrdma\n20057\tavesterra\n20167\ttolfab\n20202\tipdtp-port\n20222\tipulse-ics\n20480\temwavemsg\n20670\ttrack\n20810\tcrtech-nlm\n20999\tathand-mmp\n21000\tirtrans\n21010\tnotezilla-lan\n21201\tmemcachedb\n21212\ttrinket-agent\n21213\tcohesity-agent\n21221\taigairserver\n21553\trdm-tfs\n21554\tdfserver\n21590\tvofr-gateway\n21800\ttvpm\n21845\twebphone\n21846\tnetspeak-is\n21847\tnetspeak-cs\n21848\tnetspeak-acd\n21849\tnetspeak-cps\n22000\tsnapenetio\n22001\toptocontrol\n22002\toptohost002\n22003\toptohost003\n22004\toptohost004\n22005\toptohost004\n22125\tdcap\n22128\tgsidcap\n22222\teasyengine\n22273\twnn6\n22289\twnn6_Cn\n22305\twnn6_Kr\n22321\twnn6_Tw\n22333\tshowcockpit-net\n22335\tshrewd-control\n22343\tcis-secure\n22347\tWibuKey\n22350\tCodeMeter\n22351\tcodemeter-cmwan\n22370\thpnpd\n22537\tcaldsoft-backup\n22555\tvocaltec-wconf\n22763\ttalikaserver\n22800\taws-brf\n22951\tbrf-gw\n23000\tinovaport1\n23001\tinovaport2\n23002\tinovaport3\n23003\tinovaport4\n23004\tinovaport5\n23005\tinovaport6\n23053\tgntp\n23272\ts102\n23294\t5afe-dir\n23333\telxmgmt\n23400\tnovar-dbase\n23401\tnovar-alarm\n23402\tnovar-global\n23456\taequus\n23457\taequus-alt\n23546\tareaguard-neo\n24000\tmed-ltp\n24001\tmed-fsp-rx\n24002\tmed-fsp-tx\n24003\tmed-supp\n24004\tmed-ovw\n24005\tmed-ci\n24006\tmed-net-svc\n24242\tfilesphere\n24249\tvista-4gl\n24321\tild\n24322\thid\n24323\tvrmg-ip\n24386\tintel_rci\n24465\ttonidods\n24554\tbinkp\n24577\tbilobit\n24666\tsdtvwcam\n24676\tcanditv\n24677\tflashfiler\n24678\tproactivate\n24680\ttcc-http\n24754\tcslg\n24850\tassoc-disc\n24922\tfind\n25000\ticl-twobase1\n25001\ticl-twobase2\n25002\ticl-twobase3\n25003\ticl-twobase4\n25004\ticl-twobase5\n25005\ticl-twobase6\n25006\ticl-twobase7\n25007\ticl-twobase8\n25008\ticl-twobase9\n25009\ticl-twobase10\n25471\trna\n25565\tminecraft\n25576\tsauterdongle\n25604\tidtp\n25793\tvocaltec-hos\n25900\ttasp-net\n25901\tniobserver\n25902\tnilinkanalyst\n25903\tniprobe\n25954\tbf-game\n25955\tbf-master\n26000\tquake\n26133\tscscp\n26208\twnn6_DS\n26257\tcockroach\n26260\tezproxy\n26261\tezmeeting\n26262\tk3software-svr\n26263\tk3software-cli\n26486\texoline-tcp\n26487\texoconfig\n26489\texonet\n26900\thexen2\n27000\tflexlm0\n27001\tflexlm1\n27002\tflexlm2\n27003\tflexlm3\n27004\tflexlm4\n27005\tflexlm5\n27006\tflexlm6\n27007\tflexlm7\n27008\tflexlm8\n27009\tflexlm9\n27010\tflexlm10\n27015\thalflife\n27017\tmongod\n27018\tmongod\n27019\tmongod\n27345\timagepump\n27374\tsubseven\n27442\tjesmsjc\n27444\tTrinoo_Bcast\n27500\tquakeworld\n27504\tkopek-httphead\n27665\tTrinoo_Master\n27782\tars-vista\n27876\tastrolink\n27910\tquake2\n27960\tquake3\n27999\ttw-auth-key\n28000\tnxlmd\n28001\tpqsp\n28010\tgruber-cashreg\n28017\tmongod\n28119\ta27-ran-ran\n28200\tvoxelstorm\n28240\tsiemensgsm\n28589\tbosswave\n28910\theretic2\n29000\tsaltd-licensing\n29167\totmp\n29999\tbingbang\n30000\tndmps\n30001\tpago-services1\n30002\tpago-services2\n30003\tamicon-fpsu-ra\n30004\tamicon-fpsu-s\n30100\trwp\n30260\tkingdomsonline\n30400\tgs-realtime\n30832\tsamsung-disc\n30999\tovobs\n31016\tka-sddp\n31020\tautotrac-acp\n31029\tyawn\n31335\tTrinoo_Register\n31337\tElite\n31400\tpace-licensed\n31416\tboinc\n31457\ttetrinet\n31620\tlm-mon\n31685\tdsx_monitor\n31727\tdiagd\n31765\tgamesmith-port\n31948\ticeedcp_tx\n31949\ticeedcp_rx\n32034\tiracinghelper\n32249\tt1distproc60\n32400\tplex\n32483\tapm-link\n32635\tsec-ntb-clnt\n32636\tDMExpress\n32767\tfilenet-powsrm\n32768\tfilenet-tms\n32769\tfilenet-rpc\n32770\tsometimes-rpc3\n32771\tsometimes-rpc5\n32772\tsometimes-rpc7\n32773\tsometimes-rpc9\n32774\tsometimes-rpc11\n32775\tsometimes-rpc13\n32776\tsometimes-rpc15\n32777\tsometimes-rpc17\n32778\tsometimes-rpc19\n32779\tsometimes-rpc21\n32780\tsometimes-rpc23\n32786\tsometimes-rpc25\n32787\tsometimes-rpc27\n32801\tmlsn\n32811\tretp\n32896\tidmgratm\n33000\twg-endpt-comms\n33060\tmysqlx\n33123\taurora-balaena\n33331\tdiamondport\n33333\tdgi-serv\n33334\tspeedtrace\n33434\ttraceroute\n33435\tmtrace\n33656\tsnip-slave\n33890\tdigilent-adept\n34249\tturbonote-2\n34378\tp-net-local\n34379\tp-net-remote\n34567\tdhanalakshmi\n34962\tprofinet-rt\n34963\tprofinet-rtm\n34964\tprofinet-cm\n34980\tethercat\n35000\theathview\n35001\trt-viewer\n35002\trt-sound\n35003\trt-devicemapper\n35004\trt-classmanager\n35005\trt-labtracker\n35006\trt-helper\n35100\taxio-disc\n35354\tkitim\n35355\taltova-lm\n35356\tguttersnex\n35357\topenstack-id\n36001\tallpeers\n36411\twlcp\n36423\tslmap\n36424\tnq-ap\n36443\tm2ap\n36444\tm3ap\n36462\txw-control\n36524\tfebooti-aw\n36602\tobservium-agent\n36700\tmapx\n36865\tkastenxpipe\n37472\t3gpp-w1ap\n37475\tneckar\n37483\tgdrive-sync\n37601\teftp\n37654\tunisys-eportal\n38000\tivs-database\n38001\tivs-insertion\n38002\tcresco-control\n38037\tlandesk-cba\n38201\tgalaxy7-data\n38202\tfairview\n38203\tagpolicy\n38292\tlandesk-cba\n38293\tlandesk-cba\n38412\tng-control\n38422\txn-control\n38462\te1-interface\n38472\tf1-control\n38800\tsruth\n38865\tsecrmmsafecopya\n39213\tsygatefw\n39681\tturbonote-1\n40000\tsafetynetp\n40023\tk-patentssensor\n40404\tsptx\n40841\tcscp\n40842\tcsccredir\n40843\tcsccfirewall\n40853\tortec-disc\n41111\tfs-qos\n41121\ttentacle\n41230\tz-wave-s\n41794\tcrestron-cip\n41795\tcrestron-ctp\n41796\tcrestron-cips\n41797\tcrestron-ctps\n42508\tcandp\n42509\tcandrp\n42510\tcaerpc\n43000\trecvr-rc\n43188\treachout\n43189\tndm-agent-port\n43190\tip-provision\n43191\tnoit-transport\n43210\tshaperai\n43438\thmip-routing\n43439\teq3-update\n43440\tew-mgmt\n43441\tciscocsdb\n44123\tz-wave-tunnel\n44321\tpmcd\n44322\tpmcdproxy\n44323\tpmwebapi\n44334\ttinyfw\n44442\tcoldfusion-auth\n44443\tcoldfusion-auth\n44444\tcognex-dataman\n44445\tacronis-backup\n44544\tdomiq\n44553\trbr-debug\n44600\tasihpi\n44818\tEtherNetIP-2\n44900\tm3da\n45000\tasmp\n45001\tasmps\n45002\trs-status\n45045\tsynctest\n45054\tinvision-ag\n45514\tcloudcheck\n45678\teba\n45824\tdai-shell\n45825\tqdb2service\n45966\tssr-servermgr\n46336\tinedo\n46998\tspremotetablet\n46999\tmediabox\n47000\tmbus\n47001\twinrm\n47100\tjvl-mactalk\n47557\tdbbrowse\n47624\tdirectplaysrvr\n47806\tap\n47808\tbacnet\n47809\tpresonus-ucnet\n48000\tnimcontroller\n48001\tnimspooler\n48002\tnimhub\n48003\tnimgtw\n48004\tnimbusdb\n48005\tnimbusdbctrl\n48048\tjuka\n48049\t3gpp-cbsp\n48050\tweandsf\n48128\tisnetserv\n48129\tblp5\n48556\tcom-bardac-dw\n48619\tiqobject\n48653\trobotraconteur\n48899\ttc_ads_discovery\n49000\tmatahari\n49001\tnusrp\n49150\tinspider\n49400\tcompaqdiag\n50000\tibm-db2\n50002\tiiimsf\n54320\tbo2k\n54321\tbo2k\n61439\tnetprowler-manager\n61440\tnetprowler-manager2\n61441\tnetprowler-sensor\n62078\tiphone-sync\n64738\tmurmur\n65301\tpcanywhere\n65535\tunknown`\n\nvar nmapServices = func() []string {\n\tvar r []string\n\tfor _, line := range strings.Split(nmapServicesString, \"\\n\") {\n\t\tindex := strings.Index(line, \"\\t\")\n\t\tv1 := line[:index]\n\t\tv2 := line[index+1:]\n\t\tport, _ := strconv.Atoi(v1)\n\t\tprotocol := v2\n\n\t\tfor i := len(r); i < port; i++ {\n\t\t\tr = append(r, \"unknown\")\n\t\t}\n\n\t\tprotocol = FixProtocol(protocol)\n\t\tr = append(r, protocol)\n\t}\n\treturn r\n}()\n"
  },
  {
    "path": "simplenet/send_test.go",
    "content": "package simplenet\n\nimport (\n\t\"fmt\"\n\t\"regexp\"\n\t\"strconv\"\n\t\"testing\"\n\t\"time\"\n)\n\nfunc TestName(t *testing.T) {\n\tresponse, err := Send(\"tcp\", false, \"192.168.217.1:25\", \"\", time.Second*3, 2048)\n\tif err != nil {\n\t\tfmt.Println(err)\n\t\treturn\n\t}\n\tresponseBuf := []byte(response)\n\tprintStr := \"\"\n\tfor _, charBuf := range responseBuf {\n\t\tif strconv.IsPrint(rune(charBuf)) {\n\t\t\tif charBuf > 0x7f {\n\t\t\t\tprintStr += \"?\"\n\t\t\t} else {\n\t\t\t\tprintStr += string(charBuf)\n\t\t\t}\n\t\t\tcontinue\n\t\t}\n\t\tprintStr += fmt.Sprintf(\"\\\\x%x\", string(charBuf))\n\t}\n\n\tr := regexp.MustCompile(`.\\x00\\x00\\x00\\x0a([\\d.-]+)-MariaDB\\x00.*mysql_native_password\\x00`)\n\tfmt.Println(printStr)\n\tfmt.Println(r.MatchString(response))\n\n}\n\n//func convData(s string) string {\n//\tb := []byte(s)\n//\tvar r []rune\n//\tfor _, i := range b {\n//\t\tr = append(r, rune(i))\n//\t}\n//\treturn string(r)\n//}\n\nfunc TestRuneALl(t *testing.T) {\n\tfor i := 0; i <= 0xffff; i++ {\n\t\tfmt.Println(string(rune(i)), \" \", fmt.Sprintf(\"\\\\%x\", i))\n\t}\n}\n\n//func IsPrint(r rune) bool {\n//\tif r < 20 {\n//\t\treturn false\n//\t}\n//\tif r > 0x7f {\n//\t\treturn false\n//\t}\n//\treturn true\n//}\n\nfunc TestUDPSend(t *testing.T) {\n\tbyteString := \"\\x88\\x2a\\x5e\\xe7\\xee\\x66\\x88\\x66\\x5a\\x3b\\x08\\x4f\\x08\\x00\\x45\\x00\\x00\\x3b\\xa5\\xa7\\x00\\x00\\x40\\x11\\xfd\\x6c\\xc0\\xa8\\x32\\x11\\x72\\x72\\x72\\x72\\xcc\\x42\\x00\\x35\\x00\\x27\\xc0\\x91\\xde\\xf7\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x03\\x77\\x77\\x77\\x05\\x62\\x61\\x69\\x64\\x75\\x03\\x63\\x6f\\x6d\\x00\\x00\\x01\\x00\\x01\"\n\n\tfmt.Printf(\"%x\", byteString)\n\tresponse, err := Send(\"udp\", false, \"114.114.114.114:53\", byteString, time.Second*30, 512)\n\tif err != nil {\n\t\tfmt.Println(err)\n\t}\n\tfmt.Println(response)\n}\n"
  },
  {
    "path": "simplenet/simplenet.go",
    "content": "package simplenet\n\nimport (\n\t\"crypto/tls\"\n\t\"errors\"\n\t\"io\"\n\t\"net\"\n\t\"strings\"\n\t\"time\"\n)\n\nfunc tcpSend(protocol string, netloc string, data string, duration time.Duration, size int) (string, error) {\n\tprotocol = strings.ToLower(protocol)\n\tconn, err := net.DialTimeout(protocol, netloc, duration)\n\tif err != nil {\n\t\t//fmt.Println(conn)\n\t\treturn \"\", errors.New(err.Error() + \" STEP1:CONNECT\")\n\t}\n\tdefer conn.Close()\n\t_, err = conn.Write([]byte(data))\n\tif err != nil {\n\t\treturn \"\", errors.New(err.Error() + \" STEP2:WRITE\")\n\t}\n\t//读取数据\n\tvar buf []byte              // big buffer\n\tvar tmp = make([]byte, 256) // using small tmo buffer for demonstrating\n\tvar length int\n\tfor {\n\t\t//设置读取超时Deadline\n\t\t_ = conn.SetReadDeadline(time.Now().Add(time.Second * 3))\n\t\tlength, err = conn.Read(tmp)\n\t\tbuf = append(buf, tmp[:length]...)\n\t\tif length < len(tmp) {\n\t\t\tbreak\n\t\t}\n\t\tif err != nil {\n\t\t\tbreak\n\t\t}\n\t\tif len(buf) > size {\n\t\t\tbreak\n\t\t}\n\t}\n\tif err != nil && err != io.EOF {\n\t\treturn \"\", errors.New(err.Error() + \" STEP3:READ\")\n\t}\n\tif len(buf) == 0 {\n\t\treturn \"\", errors.New(\"STEP3:response is empty\")\n\t}\n\treturn string(buf), nil\n}\n\nfunc tlsSend(protocol string, netloc string, data string, duration time.Duration, size int) (string, error) {\n\tprotocol = strings.ToLower(protocol)\n\tconfig := &tls.Config{\n\t\tInsecureSkipVerify: true,\n\t\tMinVersion:         tls.VersionTLS10,\n\t}\n\tdialer := &net.Dialer{\n\t\tTimeout:  duration,\n\t\tDeadline: time.Now().Add(duration * 2),\n\t}\n\tconn, err := tls.DialWithDialer(dialer, protocol, netloc, config)\n\tif err != nil {\n\t\treturn \"\", errors.New(err.Error() + \" STEP1:CONNECT\")\n\t}\n\tdefer conn.Close()\n\t_, err = io.WriteString(conn, data)\n\tif err != nil {\n\t\treturn \"\", errors.New(err.Error() + \" STEP2:WRITE\")\n\t}\n\t//读取数据\n\tvar buf []byte              // big buffer\n\tvar tmp = make([]byte, 256) // using small tmo buffer for demonstrating\n\tvar length int\n\tfor {\n\t\t//设置读取超时Deadline\n\t\t_ = conn.SetReadDeadline(time.Now().Add(time.Second * 3))\n\t\tlength, err = conn.Read(tmp)\n\t\tbuf = append(buf, tmp[:length]...)\n\t\tif length < len(tmp) {\n\t\t\tbreak\n\t\t}\n\t\tif err != nil {\n\t\t\tbreak\n\t\t}\n\t\tif len(buf) > size {\n\t\t\tbreak\n\t\t}\n\t}\n\tif err != nil && err != io.EOF {\n\t\treturn \"\", errors.New(err.Error() + \" STEP3:READ\")\n\t}\n\tif len(buf) == 0 {\n\t\treturn \"\", errors.New(\"STEP3:response is empty\")\n\t}\n\treturn string(buf), nil\n}\n\nfunc Send(protocol string, tls bool, netloc string, data string, duration time.Duration, size int) (string, error) {\n\tif tls {\n\t\treturn tlsSend(protocol, netloc, data, duration, size)\n\t} else {\n\t\treturn tcpSend(protocol, netloc, data, duration, size)\n\t}\n}\n"
  },
  {
    "path": "type-fingerprint.go",
    "content": "package gonmap\n\ntype FingerPrint struct {\n\tProbeName        string\n\tMatchRegexString string\n\n\tService         string\n\tProductName     string\n\tVersion         string\n\tInfo            string\n\tHostname        string\n\tOperatingSystem string\n\tDeviceType      string\n\t//  p/vendorproductname/\n\t//\tv/version/\n\t//\ti/info/\n\t//\th/hostname/\n\t//\to/operatingsystem/\n\t//\td/devicetype/\n}\n"
  },
  {
    "path": "type-match.go",
    "content": "package gonmap\n\nimport (\n\t\"errors\"\n\t\"fmt\"\n\t\"regexp\"\n\t\"strconv\"\n\t\"strings\"\n)\n\ntype match struct {\n\t//match <Service> <pattern> <patternopt> [<versioninfo>]\n\tsoft          bool\n\tservice       string\n\tpattern       string\n\tpatternRegexp *regexp.Regexp\n\tversionInfo   *FingerPrint\n}\n\nvar matchLoadRegexps = []*regexp.Regexp{\n\tregexp.MustCompile(\"^([a-zA-Z0-9-_./]+) m\\\\|([^|]+)\\\\|([is]{0,2})(?: (.*))?$\"),\n\tregexp.MustCompile(\"^([a-zA-Z0-9-_./]+) m=([^=]+)=([is]{0,2})(?: (.*))?$\"),\n\tregexp.MustCompile(\"^([a-zA-Z0-9-_./]+) m%([^%]+)%([is]{0,2})(?: (.*))?$\"),\n\tregexp.MustCompile(\"^([a-zA-Z0-9-_./]+) m@([^@]+)@([is]{0,2})(?: (.*))?$\"),\n}\n\nvar matchVersionInfoRegexps = map[string]*regexp.Regexp{\n\t\"PRODUCTNAME\": regexp.MustCompile(\"p/([^/]+)/\"),\n\t\"VERSION\":     regexp.MustCompile(\"v/([^/]+)/\"),\n\t\"INFO\":        regexp.MustCompile(\"i/([^/]+)/\"),\n\t\"HOSTNAME\":    regexp.MustCompile(\"h/([^/]+)/\"),\n\t\"OS\":          regexp.MustCompile(\"o/([^/]+)/\"),\n\t\"DEVICE\":      regexp.MustCompile(\"d/([^/]+)/\"),\n}\n\nvar matchVersionInfoHelperRegxP = regexp.MustCompile(`\\$P\\((\\d)\\)`)\nvar matchVersionInfoHelperRegx = regexp.MustCompile(`\\$(\\d)`)\n\nfunc parseMatch(s string, soft bool) *match {\n\tvar m = &match{}\n\tvar regx *regexp.Regexp\n\n\tfor _, r := range matchLoadRegexps {\n\t\tif r.MatchString(s) {\n\t\t\tregx = r\n\t\t}\n\t}\n\n\tif regx == nil {\n\t\tpanic(errors.New(\"match 语句参数不正确\"))\n\t}\n\n\targs := regx.FindStringSubmatch(s)\n\tm.soft = soft\n\tm.service = args[1]\n\tm.service = FixProtocol(m.service)\n\tm.pattern = args[2]\n\tm.patternRegexp = m.getPatternRegexp(m.pattern, args[3])\n\tm.versionInfo = &FingerPrint{\n\t\tProbeName:        \"\",\n\t\tMatchRegexString: \"\",\n\t\tService:          m.service,\n\t\tProductName:      m.getVersionInfo(s, \"PRODUCTNAME\"),\n\t\tVersion:          m.getVersionInfo(s, \"VERSION\"),\n\t\tInfo:             m.getVersionInfo(s, \"INFO\"),\n\t\tHostname:         m.getVersionInfo(s, \"HOSTNAME\"),\n\t\tOperatingSystem:  m.getVersionInfo(s, \"OS\"),\n\t\tDeviceType:       m.getVersionInfo(s, \"DEVICE\"),\n\t}\n\treturn m\n}\n\nfunc (m *match) getPatternRegexp(pattern string, opt string) *regexp.Regexp {\n\tpattern = strings.ReplaceAll(pattern, `\\0`, `\\x00`)\n\tif opt != \"\" {\n\t\tif strings.Contains(opt, \"i\") == false {\n\t\t\topt += \"i\"\n\t\t}\n\t\tif pattern[:1] == \"^\" {\n\t\t\tpattern = fmt.Sprintf(\"^(?%s:%s\", opt, pattern[1:])\n\t\t} else {\n\t\t\tpattern = fmt.Sprintf(\"(?%s:%s\", opt, pattern)\n\t\t}\n\t\tif pattern[len(pattern)-1:] == \"$\" {\n\t\t\tpattern = fmt.Sprintf(\"%s)$\", pattern[:len(pattern)-1])\n\t\t} else {\n\t\t\tpattern = fmt.Sprintf(\"%s)\", pattern)\n\t\t}\n\t}\n\t//pattern = regexp.MustCompile(`\\\\x[89a-f][0-9a-f]`).ReplaceAllString(pattern,\".\")\n\treturn regexp.MustCompile(pattern)\n}\n\nfunc (m *match) getVersionInfo(s string, regID string) string {\n\tif matchVersionInfoRegexps[regID].MatchString(s) {\n\t\treturn matchVersionInfoRegexps[regID].FindStringSubmatch(s)[1]\n\t} else {\n\t\treturn \"\"\n\t}\n}\n\nfunc (m *match) makeVersionInfo(s string, f *FingerPrint) {\n\tf.Info = m.makeVersionInfoSubHelper(s, m.versionInfo.Info)\n\tf.DeviceType = m.makeVersionInfoSubHelper(s, m.versionInfo.DeviceType)\n\tf.Hostname = m.makeVersionInfoSubHelper(s, m.versionInfo.Hostname)\n\tf.OperatingSystem = m.makeVersionInfoSubHelper(s, m.versionInfo.OperatingSystem)\n\tf.ProductName = m.makeVersionInfoSubHelper(s, m.versionInfo.ProductName)\n\tf.Version = m.makeVersionInfoSubHelper(s, m.versionInfo.Version)\n\tf.Service = m.makeVersionInfoSubHelper(s, m.versionInfo.Service)\n}\n\nfunc (m *match) makeVersionInfoSubHelper(s string, pattern string) string {\n\tif len(m.patternRegexp.FindStringSubmatch(s)) == 1 {\n\t\treturn pattern\n\t}\n\tif pattern == \"\" {\n\t\treturn pattern\n\t}\n\tsArr := m.patternRegexp.FindStringSubmatch(s)\n\n\tif matchVersionInfoHelperRegxP.MatchString(pattern) {\n\t\tpattern = matchVersionInfoHelperRegxP.ReplaceAllStringFunc(pattern, func(repl string) string {\n\t\t\ta := matchVersionInfoHelperRegxP.FindStringSubmatch(repl)[1]\n\t\t\treturn \"$\" + a\n\t\t})\n\t}\n\n\tif matchVersionInfoHelperRegx.MatchString(pattern) {\n\t\tpattern = matchVersionInfoHelperRegx.ReplaceAllStringFunc(pattern, func(repl string) string {\n\t\t\ti, _ := strconv.Atoi(matchVersionInfoHelperRegx.FindStringSubmatch(repl)[1])\n\t\t\treturn sArr[i]\n\t\t})\n\t}\n\tpattern = strings.ReplaceAll(pattern, \"\\n\", \"\")\n\tpattern = strings.ReplaceAll(pattern, \"\\r\", \"\")\n\treturn pattern\n}\n"
  },
  {
    "path": "type-nmap.go",
    "content": "package gonmap\n\nimport (\n\t\"context\"\n\t\"fmt\"\n\t\"github.com/miekg/dns\"\n\t\"strings\"\n\t\"time\"\n)\n\ntype Nmap struct {\n\texclude      PortList\n\tportProbeMap map[int]ProbeList\n\tprobeNameMap map[string]*probe\n\tprobeSort    ProbeList\n\n\tprobeUsed ProbeList\n\n\tfilter int\n\n\t//检测端口存活的超时时间\n\ttimeout time.Duration\n\n\tbypassAllProbePort PortList\n\tsslSecondProbeMap  ProbeList\n\tallProbeMap        ProbeList\n\tsslProbeMap        ProbeList\n}\n\n//扫描类\n\nfunc (n *Nmap) ScanTimeout(ip string, port int, timeout time.Duration) (status Status, response *Response) {\n\tctx, cancel := context.WithTimeout(context.Background(), timeout)\n\tvar resChan = make(chan bool)\n\n\tdefer func() {\n\t\tclose(resChan)\n\t\tcancel()\n\t}()\n\n\tgo func() {\n\t\tdefer func() {\n\t\t\tif r := recover(); r != nil {\n\t\t\t\tif fmt.Sprint(r) != \"send on closed channel\" {\n\t\t\t\t\tpanic(r)\n\t\t\t\t}\n\t\t\t}\n\t\t}()\n\t\tstatus, response = n.Scan(ip, port)\n\t\tresChan <- true\n\t}()\n\n\tselect {\n\tcase <-ctx.Done():\n\t\treturn Closed, nil\n\tcase <-resChan:\n\t\treturn status, response\n\t}\n}\n\nfunc (n *Nmap) Scan(ip string, port int) (status Status, response *Response) {\n\tvar probeNames ProbeList\n\tif n.bypassAllProbePort.exist(port) == true {\n\t\tprobeNames = append(n.portProbeMap[port], n.allProbeMap...)\n\t} else {\n\t\tprobeNames = append(n.allProbeMap, n.portProbeMap[port]...)\n\t}\n\tprobeNames = append(probeNames, n.sslProbeMap...)\n\t//探针去重\n\tprobeNames = probeNames.removeDuplicate()\n\n\tfirstProbe := probeNames[0]\n\tstatus, response = n.getRealResponse(ip, port, n.timeout, firstProbe)\n\tif status == Closed || status == Matched {\n\t\treturn status, response\n\t}\n\totherProbes := probeNames[1:]\n\treturn n.getRealResponse(ip, port, 2*time.Second, otherProbes...)\n}\n\nfunc (n *Nmap) getRealResponse(host string, port int, timeout time.Duration, probes ...string) (status Status, response *Response) {\n\tstatus, response = n.getResponseByProbes(host, port, timeout, probes...)\n\tif status != Matched {\n\t\treturn status, response\n\t}\n\tif response.FingerPrint.Service == \"ssl\" {\n\t\tstatus, response := n.getResponseBySSLSecondProbes(host, port, timeout)\n\t\tif status == Matched {\n\t\t\treturn Matched, response\n\t\t}\n\t}\n\treturn status, response\n}\n\nfunc (n *Nmap) getResponseBySSLSecondProbes(host string, port int, timeout time.Duration) (status Status, response *Response) {\n\tstatus, response = n.getResponseByProbes(host, port, timeout, n.sslSecondProbeMap...)\n\tif status != Matched || response.FingerPrint.Service == \"ssl\" {\n\t\tstatus, response = n.getResponseByHTTPS(host, port, timeout)\n\t}\n\tif status == Matched && response.FingerPrint.Service != \"ssl\" {\n\t\tif response.FingerPrint.Service == \"http\" {\n\t\t\tresponse.FingerPrint.Service = \"https\"\n\t\t}\n\t\treturn Matched, response\n\t}\n\treturn NotMatched, response\n}\n\nfunc (n *Nmap) getResponseByHTTPS(host string, port int, timeout time.Duration) (status Status, response *Response) {\n\tvar httpRequest = n.probeNameMap[\"TCP_GetRequest\"]\n\treturn n.getResponse(host, port, true, timeout, httpRequest)\n}\n\nfunc (n *Nmap) getResponseByProbes(host string, port int, timeout time.Duration, probes ...string) (status Status, response *Response) {\n\tvar responseNotMatch *Response\n\tfor _, requestName := range probes {\n\t\tif n.probeUsed.exist(requestName) {\n\t\t\tcontinue\n\t\t}\n\t\tn.probeUsed = append(n.probeUsed, requestName)\n\t\tp := n.probeNameMap[requestName]\n\n\t\tstatus, response = n.getResponse(host, port, p.sslports.exist(port), timeout, p)\n\t\t//如果端口未开放，则等待10s后重新连接\n\t\t//if b.status == Closed {\n\t\t//\ttime.Sleep(time.Second * 10)\n\t\t//\tb.Load(n.getResponse(host, port, n.probeNameMap[requestName]))\n\t\t//}\n\n\t\t//logger.Printf(\"Target:%s:%d,Probe:%s,Status:%v\", host, port, requestName, status)\n\n\t\tif status == Closed || status == Matched {\n\t\t\tresponseNotMatch = nil\n\t\t\tbreak\n\t\t}\n\t\tif status == NotMatched {\n\t\t\tresponseNotMatch = response\n\t\t}\n\t}\n\tif responseNotMatch != nil {\n\t\tresponse = responseNotMatch\n\t}\n\treturn status, response\n}\n\nfunc (n *Nmap) getResponse(host string, port int, tls bool, timeout time.Duration, p *probe) (Status, *Response) {\n\tif port == 53 {\n\t\tif DnsScan(host, port) {\n\t\t\treturn Matched, &dnsResponse\n\t\t} else {\n\t\t\treturn Closed, nil\n\t\t}\n\t}\n\ttext, tls, err := p.scan(host, port, tls, timeout, 10240)\n\tif err != nil {\n\t\tif strings.Contains(err.Error(), \"STEP1\") {\n\t\t\treturn Closed, nil\n\t\t}\n\t\tif strings.Contains(err.Error(), \"STEP2\") {\n\t\t\treturn Closed, nil\n\t\t}\n\t\tif p.protocol == \"UDP\" && strings.Contains(err.Error(), \"refused\") {\n\t\t\treturn Closed, nil\n\t\t}\n\t\treturn Open, nil\n\t}\n\n\tresponse := &Response{\n\t\tRaw:         text,\n\t\tTLS:         tls,\n\t\tFingerPrint: &FingerPrint{},\n\t}\n\t//若存在返回包，则开始捕获指纹\n\tfingerPrint := n.getFinger(text, tls, p.name)\n\tresponse.FingerPrint = fingerPrint\n\n\tif fingerPrint.Service == \"\" {\n\t\treturn NotMatched, response\n\t} else {\n\t\treturn Matched, response\n\t}\n\t//如果成功匹配指纹，则直接返回指纹\n}\n\nfunc (n *Nmap) getFinger(responseRaw string, tls bool, requestName string) *FingerPrint {\n\tdata := n.convResponse(responseRaw)\n\tprobe := n.probeNameMap[requestName]\n\n\tfinger := probe.match(data)\n\n\tif tls == true {\n\t\tif finger.Service == \"http\" {\n\t\t\tfinger.Service = \"https\"\n\t\t}\n\t}\n\n\tif finger.Service != \"\" || n.probeNameMap[requestName].fallback == \"\" {\n\t\t//标记当前探针名称\n\t\tfinger.ProbeName = requestName\n\t\treturn finger\n\t}\n\n\tfallback := n.probeNameMap[requestName].fallback\n\tfallbackProbe := n.probeNameMap[fallback]\n\tfor fallback != \"\" {\n\t\tlogger.Println(requestName, \" fallback is :\", fallback)\n\t\tfinger = fallbackProbe.match(data)\n\t\tfallback = n.probeNameMap[fallback].fallback\n\t\tif finger.Service != \"\" {\n\t\t\tbreak\n\t\t}\n\t}\n\t//标记当前探针名称\n\tfinger.ProbeName = requestName\n\treturn finger\n}\n\nfunc (n *Nmap) convResponse(s1 string) string {\n\t//为了适配go语言的沙雕正则，只能讲二进制强行转换成UTF-8\n\tb1 := []byte(s1)\n\tvar r1 []rune\n\tfor _, i := range b1 {\n\t\tr1 = append(r1, rune(i))\n\t}\n\ts2 := string(r1)\n\treturn s2\n}\n\n//配置类\n\nfunc (n *Nmap) SetTimeout(timeout time.Duration) {\n\tn.timeout = timeout\n}\n\nfunc (n *Nmap) OpenDeepIdentify() {\n\t//-sV参数深度解析\n\tn.allProbeMap = n.probeSort\n}\n\nfunc (n *Nmap) AddMatch(probeName string, expr string) {\n\tvar probe = n.probeNameMap[probeName]\n\tprobe.loadMatch(expr, false)\n}\n\n//初始化类\n\nfunc (n *Nmap) loads(s string) {\n\tlines := strings.Split(s, \"\\n\")\n\tvar probeGroups [][]string\n\tvar probeLines []string\n\tfor _, line := range lines {\n\t\tif !n.isCommand(line) {\n\t\t\tcontinue\n\t\t}\n\t\tcommandName := line[:strings.Index(line, \" \")]\n\t\tif commandName == \"Exclude\" {\n\t\t\tn.loadExclude(line)\n\t\t\tcontinue\n\t\t}\n\t\tif commandName == \"Probe\" {\n\t\t\tif len(probeLines) != 0 {\n\t\t\t\tprobeGroups = append(probeGroups, probeLines)\n\t\t\t\tprobeLines = []string{}\n\t\t\t}\n\t\t}\n\t\tprobeLines = append(probeLines, line)\n\t}\n\tprobeGroups = append(probeGroups, probeLines)\n\n\tfor _, lines := range probeGroups {\n\t\tp := parseProbe(lines)\n\t\tn.pushProbe(*p)\n\t}\n}\n\nfunc (n *Nmap) loadExclude(expr string) {\n\tn.exclude = parsePortList(expr)\n}\n\nfunc (n *Nmap) pushProbe(p probe) {\n\tn.probeSort = append(n.probeSort, p.name)\n\tn.probeNameMap[p.name] = &p\n\n\t//建立端口扫描对应表，将根据端口号决定使用何种请求包\n\t//如果端口列表为空，则为全端口\n\tif p.rarity > n.filter {\n\t\treturn\n\t}\n\t//0记录所有使用的探针\n\tn.portProbeMap[0] = append(n.portProbeMap[0], p.name)\n\n\t//分别压入sslports,ports\n\tfor _, i := range p.ports {\n\t\tn.portProbeMap[i] = append(n.portProbeMap[i], p.name)\n\t}\n\n\tfor _, i := range p.sslports {\n\t\tn.portProbeMap[i] = append(n.portProbeMap[i], p.name)\n\t}\n\n}\n\nfunc (n *Nmap) fixFallback() {\n\tfor probeName, probeType := range n.probeNameMap {\n\t\tfallback := probeType.fallback\n\t\tif fallback == \"\" {\n\t\t\tcontinue\n\t\t}\n\t\tif _, ok := n.probeNameMap[\"TCP_\"+fallback]; ok {\n\t\t\tn.probeNameMap[probeName].fallback = \"TCP_\" + fallback\n\t\t} else {\n\t\t\tn.probeNameMap[probeName].fallback = \"UDP_\" + fallback\n\t\t}\n\t}\n}\n\nfunc (n *Nmap) isCommand(line string) bool {\n\t//删除注释行和空行\n\tif len(line) < 2 {\n\t\treturn false\n\t}\n\tif line[:1] == \"#\" {\n\t\treturn false\n\t}\n\t//删除异常命令\n\tcommandName := line[:strings.Index(line, \" \")]\n\tcommandArr := []string{\n\t\t\"Exclude\", \"Probe\", \"match\", \"softmatch\", \"ports\", \"sslports\", \"totalwaitms\", \"tcpwrappedms\", \"rarity\", \"fallback\",\n\t}\n\tfor _, item := range commandArr {\n\t\tif item == commandName {\n\t\t\treturn true\n\t\t}\n\t}\n\treturn false\n}\n\nfunc (n *Nmap) sortOfRarity(list ProbeList) ProbeList {\n\tif len(list) == 0 {\n\t\treturn list\n\t}\n\tvar raritySplice []int\n\tfor _, probeName := range list {\n\t\trarity := n.probeNameMap[probeName].rarity\n\t\traritySplice = append(raritySplice, rarity)\n\t}\n\n\tfor i := 0; i < len(raritySplice)-1; i++ {\n\t\tfor j := 0; j < len(raritySplice)-i-1; j++ {\n\t\t\tif raritySplice[j] > raritySplice[j+1] {\n\t\t\t\tm := raritySplice[j+1]\n\t\t\t\traritySplice[j+1] = raritySplice[j]\n\t\t\t\traritySplice[j] = m\n\t\t\t\tmp := list[j+1]\n\t\t\t\tlist[j+1] = list[j]\n\t\t\t\tlist[j] = mp\n\t\t\t}\n\t\t}\n\t}\n\n\tfor _, probeName := range list {\n\t\trarity := n.probeNameMap[probeName].rarity\n\t\traritySplice = append(raritySplice, rarity)\n\t}\n\n\treturn list\n}\n\n//工具函数\nfunc DnsScan(host string, port int) bool {\n\tdomainServer := fmt.Sprintf(\"%s:%d\", host, port)\n\tc := dns.Client{\n\t\tTimeout: 2 * time.Second,\n\t}\n\tm := dns.Msg{}\n\t// 最终都会指向一个ip 也就是typeA, 这样就可以返回所有层的cname.\n\tm.SetQuestion(\"www.baidu.com.\", dns.TypeA)\n\t_, _, err := c.Exchange(&m, domainServer)\n\tif err != nil {\n\t\treturn false\n\t}\n\treturn true\n}\n"
  },
  {
    "path": "type-portlist.go",
    "content": "package gonmap\n\nimport (\n\t\"regexp\"\n\t\"strconv\"\n\t\"strings\"\n)\n\nvar portRangeRegx = regexp.MustCompile(\"^(\\\\d+)(?:-(\\\\d+))?$\")\nvar portGroupRegx = regexp.MustCompile(\"^(\\\\d+(?:-\\\\d+)?)(?:,\\\\d+(?:-\\\\d+)?)*$\")\n\ntype PortList []int\n\nvar emptyPortList = PortList([]int{})\n\nfunc parsePortList(express string) PortList {\n\tvar list = PortList([]int{})\n\tif portGroupRegx.MatchString(express) == false {\n\t\tpanic(\"port expression string invalid\")\n\t}\n\tfor _, expr := range strings.Split(express, \",\") {\n\t\trArr := portRangeRegx.FindStringSubmatch(expr)\n\t\tvar startPort, endPort int\n\t\tstartPort, _ = strconv.Atoi(rArr[1])\n\t\tif rArr[2] != \"\" {\n\t\t\tendPort, _ = strconv.Atoi(rArr[2])\n\t\t} else {\n\t\t\tendPort = startPort\n\t\t}\n\t\tfor num := startPort; num <= endPort; num++ {\n\t\t\tlist = append(list, num)\n\t\t}\n\t}\n\tlist = list.removeDuplicate()\n\treturn list\n}\n\nfunc (p PortList) removeDuplicate() PortList {\n\tresult := make([]int, 0, len(p))\n\ttemp := map[int]struct{}{}\n\tfor _, item := range p {\n\t\tif _, ok := temp[item]; !ok { //如果字典中找不到元素，ok=false，!ok为true，就往切片中append元素。\n\t\t\ttemp[item] = struct{}{}\n\t\t\tresult = append(result, item)\n\t\t}\n\t}\n\treturn result\n}\n\nfunc (p PortList) exist(port int) bool {\n\tfor _, num := range p {\n\t\tif num == port {\n\t\t\treturn true\n\t\t}\n\t}\n\treturn false\n}\n\nfunc (p PortList) append(ports ...int) PortList {\n\tp = append(p, ports...)\n\tp = p.removeDuplicate()\n\treturn p\n}\n"
  },
  {
    "path": "type-probe.go",
    "content": "package gonmap\n\nimport (\n\t\"errors\"\n\t\"fmt\"\n\t\"github.com/lcvvvv/gonmap/simplenet\"\n\t\"regexp\"\n\t\"strconv\"\n\t\"strings\"\n\t\"time\"\n)\n\ntype probe struct {\n\t//探针级别\n\trarity int\n\t//探针名称\n\tname string\n\t//探针适用默认端口号\n\tports PortList\n\t//探针适用SSL端口号\n\tsslports PortList\n\n\t//totalwaitms  time.Duration\n\t//tcpwrappedms time.Duration\n\n\t//探针对应指纹库\n\tmatchGroup []*match\n\t//探针指纹库若匹配失败，则会尝试使用fallback指定探针的指纹库\n\tfallback string\n\n\t//探针发送协议类型\n\tprotocol string\n\t//探针发送数据\n\tsendRaw string\n}\n\nfunc (p *probe) scan(host string, port int, tls bool, timeout time.Duration, size int) (string, bool, error) {\n\turi := fmt.Sprintf(\"%s:%d\", host, port)\n\n\tsendRaw := strings.Replace(p.sendRaw, \"{Host}\", fmt.Sprintf(\"%s:%d\", host, port), -1)\n\n\ttext, err := simplenet.Send(p.protocol, tls, uri, sendRaw, timeout, size)\n\tif err == nil {\n\t\treturn text, tls, nil\n\t}\n\tif strings.Contains(err.Error(), \"STEP1\") && tls == true {\n\t\ttext, err := simplenet.Send(p.protocol, false, uri, p.sendRaw, timeout, size)\n\t\treturn text, false, err\n\t}\n\treturn text, tls, err\n}\n\nfunc (p *probe) match(s string) *FingerPrint {\n\tvar f = &FingerPrint{}\n\tvar softFilter string\n\n\tfor _, m := range p.matchGroup {\n\t\t//实现软筛选\n\t\tif softFilter != \"\" {\n\t\t\tif m.service != softFilter {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t}\n\t\t//logger.Println(\"开始匹配正则：\", m.service, m.patternRegexp.String())\n\t\tif m.patternRegexp.MatchString(s) {\n\t\t\t//标记当前正则\n\t\t\tf.MatchRegexString = m.patternRegexp.String()\n\t\t\tif m.soft {\n\t\t\t\t//如果为软捕获，这设置筛选器\n\t\t\t\tf.Service = m.service\n\t\t\t\tsoftFilter = m.service\n\t\t\t\tcontinue\n\t\t\t} else {\n\t\t\t\t//如果为硬捕获则直接获取指纹信息\n\t\t\t\tm.makeVersionInfo(s, f)\n\t\t\t\tf.Service = m.service\n\t\t\t\treturn f\n\t\t\t}\n\t\t}\n\t}\n\treturn f\n}\n\nvar probeExprRegx = regexp.MustCompile(\"^(UDP|TCP) ([a-zA-Z0-9-_./]+) (?:q\\\\|([^|]*)\\\\|)$\")\nvar probeIntRegx = regexp.MustCompile(`^(\\d+)$`)\nvar probeStrRegx = regexp.MustCompile(`^([a-zA-Z0-9-_./]+)$`)\n\nfunc parseProbe(lines []string) *probe {\n\tvar p = &probe{}\n\tp.ports = emptyPortList\n\tp.sslports = emptyPortList\n\tfor _, line := range lines {\n\t\tp.loadLine(line)\n\t}\n\treturn p\n}\n\nfunc (p *probe) loadLine(s string) {\n\t//分解命令\n\ti := strings.Index(s, \" \")\n\tcommandName := s[:i]\n\tcommandArgs := s[i+1:]\n\t//逐行处理\n\tswitch commandName {\n\tcase \"Probe\":\n\t\tp.loadProbe(commandArgs)\n\tcase \"match\":\n\t\tp.loadMatch(commandArgs, false)\n\tcase \"softmatch\":\n\t\tp.loadMatch(commandArgs, true)\n\tcase \"ports\":\n\t\tp.loadPorts(commandArgs, false)\n\tcase \"sslports\":\n\t\tp.loadPorts(commandArgs, true)\n\tcase \"totalwaitms\":\n\t\t//p.totalwaitms = time.Duration(p.getInt(commandArgs)) * time.Millisecond\n\tcase \"tcpwrappedms\":\n\t\t//p.tcpwrappedms = time.Duration(p.getInt(commandArgs)) * time.Millisecond\n\tcase \"rarity\":\n\t\tp.rarity = p.getInt(commandArgs)\n\tcase \"fallback\":\n\t\tp.fallback = p.getString(commandArgs)\n\t}\n}\n\nfunc (p *probe) loadProbe(s string) {\n\t//Probe <protocol> <probename> <probestring>\n\tif !probeExprRegx.MatchString(s) {\n\t\tpanic(errors.New(\"probe 语句格式不正确\"))\n\t}\n\targs := probeExprRegx.FindStringSubmatch(s)\n\tif args[1] == \"\" || args[2] == \"\" {\n\t\tpanic(errors.New(\"probe 参数格式不正确\"))\n\t}\n\tp.protocol = args[1]\n\tp.name = args[1] + \"_\" + args[2]\n\tstr := args[3]\n\tstr = strings.ReplaceAll(str, `\\0`, `\\x00`)\n\tstr = strings.ReplaceAll(str, `\"`, `${double-quoted}`)\n\tstr = `\"` + str + `\"`\n\tstr, _ = strconv.Unquote(str)\n\tstr = strings.ReplaceAll(str, `${double-quoted}`, `\"`)\n\tp.sendRaw = str\n}\n\nfunc (p *probe) loadMatch(s string, soft bool) {\n\t//\"match\": misc.MakeRegexpCompile(\"^([a-zA-Z0-9-_./]+) m\\\\|([^|]+)\\\\|([is]{0,2}) (.*)$\"),\n\t//match <Service> <pattern>|<patternopt> [<versioninfo>]\n\t//\t\"matchVersioninfoProductname\": misc.MakeRegexpCompile(\"p/([^/]+)/\"),\n\t//\t\"matchVersioninfoVersion\":     misc.MakeRegexpCompile(\"v/([^/]+)/\"),\n\t//\t\"matchVersioninfoInfo\":        misc.MakeRegexpCompile(\"i/([^/]+)/\"),\n\t//\t\"matchVersioninfoHostname\":    misc.MakeRegexpCompile(\"h/([^/]+)/\"),\n\t//\t\"matchVersioninfoOS\":          misc.MakeRegexpCompile(\"o/([^/]+)/\"),\n\t//\t\"matchVersioninfoDevice\":      misc.MakeRegexpCompile(\"d/([^/]+)/\"),\n\n\tp.matchGroup = append(p.matchGroup, parseMatch(s, soft))\n}\n\nfunc (p *probe) loadPorts(expr string, ssl bool) {\n\tif ssl {\n\t\tp.sslports = parsePortList(expr)\n\t} else {\n\t\tp.ports = parsePortList(expr)\n\t}\n}\n\nfunc (p *probe) getInt(expr string) int {\n\tif !probeIntRegx.MatchString(expr) {\n\t\tpanic(errors.New(\"totalwaitms or tcpwrappedms 语句参数不正确\"))\n\t}\n\ti, _ := strconv.Atoi(probeIntRegx.FindStringSubmatch(expr)[1])\n\treturn i\n}\n\nfunc (p *probe) getString(expr string) string {\n\tif !probeStrRegx.MatchString(expr) {\n\t\tpanic(errors.New(\"fallback 语句参数不正确\"))\n\t}\n\treturn probeStrRegx.FindStringSubmatch(expr)[1]\n}\n"
  },
  {
    "path": "type-probelist.go",
    "content": "package gonmap\n\ntype ProbeList []string\n\nvar emptyProbeList []string\n\nfunc (p ProbeList) removeDuplicate() ProbeList {\n\tresult := make([]string, 0, len(p))\n\ttemp := map[string]struct{}{}\n\tfor _, item := range p {\n\t\tif _, ok := temp[item]; !ok { //如果字典中找不到元素，ok=false，!ok为true，就往切片中append元素。\n\t\t\ttemp[item] = struct{}{}\n\t\t\tresult = append(result, item)\n\t\t}\n\t}\n\treturn result\n}\n\nfunc (p ProbeList) exist(probeName string) bool {\n\tfor _, name := range p {\n\t\tif name == probeName {\n\t\t\treturn true\n\t\t}\n\t}\n\treturn false\n}\n"
  },
  {
    "path": "type-response.go",
    "content": "package gonmap\n\nconst (\n\tClosed     Status = 0x000a1\n\tOpen              = 0x000b2\n\tMatched           = 0x000c3\n\tNotMatched        = 0x000d4\n\tUnknown           = 0x000e5\n)\n\ntype Status int\n\nfunc (s Status) String() string {\n\tswitch s {\n\tcase Closed:\n\t\treturn \"Closed\"\n\tcase Open:\n\t\treturn \"Open\"\n\tcase Matched:\n\t\treturn \"Matched\"\n\tcase NotMatched:\n\t\treturn \"NotMatched\"\n\tcase Unknown:\n\t\treturn \"Unknown\"\n\tdefault:\n\t\treturn \"Unknown\"\n\t}\n}\n\ntype Response struct {\n\tRaw         string\n\tTLS         bool\n\tFingerPrint *FingerPrint\n}\n\nvar dnsResponse = Response{Raw: \"DnsServer\", TLS: false,\n\tFingerPrint: &FingerPrint{\n\t\tService: \"dns\",\n\t},\n}\n"
  }
]