Thinking...
[get complete service list]
Port Information
Protocol Service Name
tcp wsmans WBEM
tcp OMI Open Management Infrastructure
udp wsmans WBEM WS-Management HTTP over TLS/SSL
Top IPs Scanning
Today Yesterday
20.163.58.125 (1)193.47.62.187 (138)
45.135.95.25 (1)85.217.140.47 (111)
198.235.24.73 (1)45.79.207.111 (27)
20.55.100.131 (1)152.32.198.168 (22)
Port diary mentions
URL
#OMIGOD Exploits Captured in the Wild. Researchers responsible for half of scans for related ports.
User Comments
Submitted By Date
Comment
2021-09-21 00:21:14
Used by Open Management Infrastructure (OMI) framework. Actively Exploited. https://msrc-blog.microsoft.com/2021/09/16/additional-guidance-regarding-omi-vulnerabilities-within-azure-vm-management-extensions/ Also see port 5985/TCP, 5986/TCP, 1270/TCP
CVE Links
CVE # Description