Thinking...
[get complete service list]
Port Information
Protocol Service Name
tcp wsmans WBEM
tcp OMI Open Management Infrastructure
udp wsmans WBEM WS-Management HTTP over TLS/SSL
Top IPs Scanning
Today Yesterday
66.228.34.203 (2)34.197.70.90 (254)
71.6.199.23 (1)164.52.24.181 (209)
89.21.67.147 (1)5.182.209.113 (174)
66.132.186.218 (1)51.81.120.223 (54)
Port diary mentions
URL
#OMIGOD Exploits Captured in the Wild. Researchers responsible for half of scans for related ports.
User Comments
Submitted By Date
Comment
2021-09-21 00:21:14
Used by Open Management Infrastructure (OMI) framework. Actively Exploited. https://msrc-blog.microsoft.com/2021/09/16/additional-guidance-regarding-omi-vulnerabilities-within-azure-vm-management-extensions/ Also see port 5985/TCP, 5986/TCP, 1270/TCP
CVE Links
CVE # Description