Unable to retrieve query results from Greynoise CLI
tlynx538 opened this issue · comments
Hello,
I recently installed pygreynoise but I'm unable to retrieve query results. Instead, i'm getting the following error
root@debian:~# greynoise query -v 23.129.64.215
Traceback (most recent call last):
File "/usr/local/bin/greynoise", line 10, in <module>
sys.exit(main())
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 829, in __call__
return self.main(*args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 782, in main
rv = self.invoke(ctx)
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 1259, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 1066, in invoke
return ctx.invoke(self.callback, **ctx.params)
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 610, in invoke
return callback(*args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/greynoise/cli/decorator.py", line 124, in wrapper
return function(api_client, *args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/click/decorators.py", line 21, in new_func
return f(get_current_context(), *args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/greynoise/cli/decorator.py", line 44, in wrapper
output, file=params.get("output_file", click.open_file("-", mode="w"))
File "/usr/local/lib/python3.7/dist-packages/click/utils.py", line 272, in echo
file.write(message)
UnicodeEncodeError: 'latin-1' codec can't encode characters in position 0-28: ordinal not in range(256)
Hello @tlynx538 . Sorry that you've run into an issue with pygreynoise. I'm trying to reproduce this issue, but I'm not getting the same result. Can you try a few things for me and follow up with the output of each?
greynoise versionpip3 listgreynoise ip 23.129.64.215greynoise ip 23.129.64.215 -f jsongreynoise query 23.129.64.215 -f json
- Running
greynoise version
root@debian:~# greynoise version
greynoise 0.8.0
Python 3.7.3
Linux-4.19.0-14-amd64-x86_64-with-debian-10.8
- Running
pip3 list
root@debian:~# pip3 list
Package Version
------------------- ---------
ansimarkup 1.5.0
asn1crypto 0.24.0
cachetools 4.2.1
certifi 2020.12.5
chardet 4.0.0
click 7.1.2
click-default-group 1.2.2
click-plugins 1.1.1
click-repl 0.1.6
colorama 0.4.4
cryptography 2.6.1
dict2xml 1.7.0
entrypoints 0.3
greynoise 0.8.0
idna 2.10
Jinja2 2.11.3
keyring 17.1.1
keyrings.alt 3.1.1
MarkupSafe 1.1.1
more-itertools 8.7.0
pip 18.1
prompt-toolkit 3.0.18
pycrypto 2.6.1
PyGObject 3.30.4
pyxdg 0.25
requests 2.25.1
SecretStorage 2.3.1
setuptools 40.8.0
shodan 1.25.0
six 1.12.0
structlog 21.1.0
typing-extensions 3.7.4.3
ufw 0.36
urllib3 1.26.4
wcwidth 0.2.5
wheel 0.32.3
XlsxWriter 1.3.8
- Running
greynoise ip 23.129.64.215
root@debian:~# greynoise ip 23.129.64.215
Traceback (most recent call last):
File "/usr/local/bin/greynoise", line 10, in <module>
sys.exit(main())
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 829, in __call__
return self.main(*args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 782, in main
rv = self.invoke(ctx)
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 1259, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 1066, in invoke
return ctx.invoke(self.callback, **ctx.params)
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 610, in invoke
return callback(*args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/greynoise/cli/decorator.py", line 124, in wrapper
return function(api_client, *args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/click/decorators.py", line 21, in new_func
return f(get_current_context(), *args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/greynoise/cli/decorator.py", line 44, in wrapper
output, file=params.get("output_file", click.open_file("-", mode="w"))
File "/usr/local/lib/python3.7/dist-packages/click/utils.py", line 272, in echo
file.write(message)
UnicodeEncodeError: 'latin-1' codec can't encode characters in position 0-28: ordinal not in range(256)
- Running
greynoise ip 23.129.64.215 -f json
{
"actor": "unknown",
"bot": false,
"classification": "malicious",
"cve": [
"CVE-1999-0526"
],
"first_seen": "2019-06-25",
"ip": "23.129.64.215",
"last_seen": "2021-04-05",
"metadata": {
"asn": "AS396507",
"category": "business",
"city": "San Jose",
"country": "United States",
"country_code": "US",
"organization": "Emerald Onion",
"os": "FreeBSD",
"rdns": "",
"region": "California",
"tor": false
},
"raw_data": {
"hassh": [
{
"fingerprint": "1616c6d18e845e7a01168a44591f7a35",
"port": 22
},
{
"fingerprint": "34e2be231a36f388a636d2140f5bb9aa",
"port": 22
},
{
"fingerprint": "98ddc5604ef6a1006a2b49a58759fbe6",
"port": 22
},
{
"fingerprint": "fda360b1b4f4d3455cb75c6e7edb1d11",
},
[.......]
{
"port": 389,
"protocol": "TCP"
},
{
"port": 443,
"protocol": "TCP"
},
{
"port": 445,
"protocol": "TCP"
},
{
"port": 465,
"protocol": "TCP"
},
{
"port": 514,
"protocol": "TCP"
},
{
"port": 541,
"protocol": "TCP"
},
{
"port": 554,
"protocol": "TCP"
},
{
"port": 587,
"protocol": "TCP"
},
{
"port": 631,
"protocol": "TCP"
},
{
"port": 646,
"protocol": "TCP"
},
{
"port": 700,
"protocol": "TCP"
},
{
"port": 843,
"protocol": "TCP"
},
{
"port": 888,
"protocol": "TCP"
},
{
"port": 902,
"protocol": "TCP"
},
{
"port": 993,
"protocol": "TCP"
},
{
"port": 995,
"protocol": "TCP"
},
{
"port": 1024,
"protocol": "TCP"
},
{
"port": 1027,
"protocol": "TCP"
},
{
"port": 1029,
"protocol": "TCP"
},
{
"port": 1080,
"protocol": "TCP"
},
{
"port": 1089,
"protocol": "TCP"
},
{
"port": 1090,
"protocol": "TCP"
},
{
"port": 1194,
"protocol": "TCP"
},
{
"port": 1275,
"protocol": "TCP"
},
{
"port": 1352,
"protocol": "TCP"
},
{
"port": 1433,
"protocol": "TCP"
},
{
"port": 1494,
"protocol": "TCP"
},
{
"port": 1521,
"protocol": "TCP"
},
{
"port": 1522,
"protocol": "TCP"
},
{
"port": 1524,
"protocol": "TCP"
},
{
"port": 1525,
"protocol": "TCP"
},
{
"port": 1526,
"protocol": "TCP"
},
{
"port": 1527,
"protocol": "TCP"
},
{
"port": 1700,
"protocol": "TCP"
},
{
"port": 1717,
"protocol": "TCP"
},
{
"port": 1718,
"protocol": "TCP"
},
{
"port": 1720,
"protocol": "TCP"
},
{
"port": 1883,
"protocol": "TCP"
},
{
"port": 1900,
"protocol": "TCP"
},
{
"port": 1935,
"protocol": "TCP"
},
{
"port": 2000,
"protocol": "TCP"
},
{
"port": 2052,
"protocol": "TCP"
},
{
"port": 2053,
"protocol": "TCP"
},
{
"port": 2078,
"protocol": "TCP"
},
{
"port": 2080,
"protocol": "TCP"
},
{
"port": 2083,
"protocol": "TCP"
},
{
"port": 2096,
"protocol": "TCP"
},
{
"port": 2100,
"protocol": "TCP"
},
{
"port": 2107,
"protocol": "TCP"
},
{
"port": 2121,
"protocol": "TCP"
},
{
"port": 2222,
"protocol": "TCP"
},
{
"port": 2249,
"protocol": "TCP"
},
{
"port": 2763,
"protocol": "TCP"
},
{
"port": 2844,
"protocol": "TCP"
},
{
"port": 3000,
"protocol": "TCP"
},
{
"port": 3001,
"protocol": "TCP"
},
{
"port": 3050,
"protocol": "TCP"
},
{
"port": 3128,
"protocol": "TCP"
},
{
"port": 3137,
"protocol": "TCP"
},
{
"port": 3299,
"protocol": "TCP"
},
{
"port": 3306,
"protocol": "TCP"
},
{
"port": 3307,
"protocol": "TCP"
},
{
"port": 3322,
"protocol": "TCP"
},
{
"port": 3351,
"protocol": "TCP"
},
{
"port": 3632,
"protocol": "TCP"
},
{
"port": 4000,
"protocol": "TCP"
},
{
"port": 4067,
"protocol": "TCP"
},
{
"port": 4190,
"protocol": "TCP"
},
{
"port": 4273,
"protocol": "TCP"
},
{
"port": 4343,
"protocol": "TCP"
},
{
"port": 4435,
"protocol": "TCP"
},
{
"port": 4567,
"protocol": "TCP"
},
{
"port": 4700,
"protocol": "TCP"
},
{
"port": 4840,
"protocol": "TCP"
},
{
"port": 4848,
"protocol": "TCP"
},
{
"port": 4950,
"protocol": "TCP"
},
{
"port": 4958,
"protocol": "TCP"
},
{
"port": 4962,
"protocol": "TCP"
},
{
"port": 5000,
"protocol": "TCP"
},
{
"port": 5001,
"protocol": "TCP"
},
{
"port": 5040,
"protocol": "TCP"
},
{
"port": 5060,
"protocol": "TCP"
},
{
"port": 5061,
"protocol": "TCP"
},
{
"port": 5070,
"protocol": "TCP"
},
{
"port": 5101,
"protocol": "TCP"
},
{
"port": 5432,
"protocol": "TCP"
},
{
"port": 5433,
"protocol": "TCP"
},
{
"port": 5446,
"protocol": "TCP"
},
{
"port": 5555,
"protocol": "TCP"
},
{
"port": 5666,
"protocol": "TCP"
},
{
"port": 5900,
"protocol": "TCP"
},
{
"port": 5901,
"protocol": "TCP"
},
{
"port": 5936,
"protocol": "TCP"
},
{
"port": 5942,
"protocol": "TCP"
},
{
"port": 5984,
"protocol": "TCP"
},
{
"port": 6001,
"protocol": "TCP"
},
{
"port": 6002,
"protocol": "TCP"
},
{
"port": 6022,
"protocol": "TCP"
},
{
"port": 6036,
"protocol": "TCP"
},
{
"port": 6060,
"protocol": "TCP"
},
{
"port": 6129,
"protocol": "TCP"
},
{
"port": 6379,
"protocol": "TCP"
},
{
"port": 6443,
"protocol": "TCP"
},
{
"port": 6466,
"protocol": "TCP"
},
{
"port": 6467,
"protocol": "TCP"
},
{
"port": 6699,
"protocol": "TCP"
},
{
"port": 6713,
"protocol": "TCP"
},
{
"port": 6783,
"protocol": "TCP"
},
{
"port": 6917,
"protocol": "TCP"
},
{
"port": 6921,
"protocol": "TCP"
},
{
"port": 7062,
"protocol": "TCP"
},
{
"port": 7080,
"protocol": "TCP"
},
{
"port": 7170,
"protocol": "TCP"
},
{
"port": 7474,
"protocol": "TCP"
},
{
"port": 7557,
"protocol": "TCP"
},
{
"port": 7676,
"protocol": "TCP"
},
{
"port": 7680,
"protocol": "TCP"
},
{
"port": 7681,
"protocol": "TCP"
},
{
"port": 7746,
"protocol": "TCP"
},
{
"port": 7777,
"protocol": "TCP"
},
{
"port": 7920,
"protocol": "TCP"
},
{
"port": 8000,
"protocol": "TCP"
},
{
"port": 8001,
"protocol": "TCP"
},
{
"port": 8008,
"protocol": "TCP"
},
{
"port": 8010,
"protocol": "TCP"
},
{
"port": 8020,
"protocol": "TCP"
},
{
"port": 8022,
"protocol": "TCP"
},
{
"port": 8080,
"protocol": "TCP"
},
{
"port": 8081,
"protocol": "TCP"
},
{
"port": 8082,
"protocol": "TCP"
},
{
"port": 8083,
"protocol": "TCP"
},
{
"port": 8084,
"protocol": "TCP"
},
{
"port": 8085,
"protocol": "TCP"
},
{
"port": 8088,
"protocol": "TCP"
},
{
"port": 8089,
"protocol": "TCP"
},
{
"port": 8098,
"protocol": "TCP"
},
{
"port": 8099,
"protocol": "TCP"
},
{
"port": 8112,
"protocol": "TCP"
},
{
"port": 8181,
"protocol": "TCP"
},
{
"port": 8200,
"protocol": "TCP"
},
{
"port": 8291,
"protocol": "TCP"
},
{
"port": 8437,
"protocol": "TCP"
},
{
"port": 8443,
"protocol": "TCP"
},
{
"port": 8471,
"protocol": "TCP"
},
{
"port": 8512,
"protocol": "TCP"
},
{
"port": 8728,
"protocol": "TCP"
},
{
"port": 8729,
"protocol": "TCP"
},
{
"port": 8800,
"protocol": "TCP"
},
{
"port": 8880,
"protocol": "TCP"
},
{
"port": 8883,
"protocol": "TCP"
},
{
"port": 8888,
"protocol": "TCP"
},
{
"port": 8990,
"protocol": "TCP"
},
{
"port": 8991,
"protocol": "TCP"
},
{
"port": 8999,
"protocol": "TCP"
},
{
"port": 9000,
"protocol": "TCP"
},
{
"port": 9001,
"protocol": "TCP"
},
{
"port": 9002,
"protocol": "TCP"
},
{
"port": 9010,
"protocol": "TCP"
},
{
"port": 9080,
"protocol": "TCP"
},
{
"port": 9084,
"protocol": "TCP"
},
{
"port": 9090,
"protocol": "TCP"
},
{
"port": 9091,
"protocol": "TCP"
},
{
"port": 9092,
"protocol": "TCP"
},
{
"port": 9160,
"protocol": "TCP"
},
{
"port": 9200,
"protocol": "TCP"
},
{
"port": 9300,
"protocol": "TCP"
},
{
"port": 9444,
"protocol": "TCP"
},
{
"port": 9699,
"protocol": "TCP"
},
{
"port": 9997,
"protocol": "TCP"
},
{
"port": 9998,
"protocol": "TCP"
},
{
"port": 9999,
"protocol": "TCP"
},
{
"port": 10000,
"protocol": "TCP"
},
{
"port": 10001,
"protocol": "TCP"
},
{
"port": 10002,
"protocol": "TCP"
},
{
"port": 10010,
"protocol": "TCP"
},
{
"port": 10050,
"protocol": "TCP"
},
{
"port": 10080,
"protocol": "TCP"
},
{
"port": 10101,
"protocol": "TCP"
},
{
"port": 10107,
"protocol": "TCP"
},
{
"port": 10443,
"protocol": "TCP"
},
{
"port": 12345,
"protocol": "TCP"
},
{
"port": 14430,
"protocol": "TCP"
},
{
"port": 15627,
"protocol": "TCP"
},
{
"port": 15691,
"protocol": "TCP"
},
{
"port": 15800,
"protocol": "TCP"
},
{
"port": 17500,
"protocol": "TCP"
},
{
"port": 18264,
"protocol": "TCP"
},
{
"port": 18301,
"protocol": "TCP"
},
{
"port": 20202,
"protocol": "TCP"
},
{
"port": 21242,
"protocol": "TCP"
},
{
"port": 21300,
"protocol": "TCP"
},
{
"port": 22232,
"protocol": "TCP"
},
{
"port": 22288,
"protocol": "TCP"
},
{
"port": 27017,
"protocol": "TCP"
},
{
"port": 27018,
"protocol": "TCP"
},
{
"port": 27080,
"protocol": "TCP"
},
{
"port": 27117,
"protocol": "TCP"
},
{
"port": 28017,
"protocol": "TCP"
},
{
"port": 30004,
"protocol": "TCP"
},
{
"port": 30005,
"protocol": "TCP"
},
{
"port": 30006,
"protocol": "TCP"
},
{
"port": 30007,
"protocol": "TCP"
},
{
"port": 30010,
"protocol": "TCP"
},
{
"port": 30083,
"protocol": "TCP"
},
{
"port": 32531,
"protocol": "TCP"
},
{
"port": 32768,
"protocol": "TCP"
},
{
"port": 34567,
"protocol": "TCP"
},
{
"port": 34964,
"protocol": "TCP"
},
{
"port": 37304,
"protocol": "TCP"
},
{
"port": 37443,
"protocol": "TCP"
},
{
"port": 37777,
"protocol": "TCP"
},
{
"port": 38182,
"protocol": "TCP"
},
{
"port": 38520,
"protocol": "TCP"
},
{
"port": 38646,
"protocol": "TCP"
},
{
"port": 40000,
"protocol": "TCP"
},
{
"port": 40005,
"protocol": "TCP"
},
{
"port": 40197,
"protocol": "TCP"
},
{
"port": 44401,
"protocol": "TCP"
},
{
"port": 47001,
"protocol": "TCP"
},
{
"port": 48460,
"protocol": "TCP"
},
{
"port": 49153,
"protocol": "TCP"
},
{
"port": 49155,
"protocol": "TCP"
},
{
"port": 49157,
"protocol": "TCP"
},
{
"port": 49158,
"protocol": "TCP"
},
{
"port": 49160,
"protocol": "TCP"
},
{
"port": 49501,
"protocol": "TCP"
},
{
"port": 49664,
"protocol": "TCP"
},
{
"port": 49667,
"protocol": "TCP"
},
{
"port": 49669,
"protocol": "TCP"
},
{
"port": 50001,
"protocol": "TCP"
},
{
"port": 50580,
"protocol": "TCP"
},
{
"port": 50996,
"protocol": "TCP"
},
{
"port": 51007,
"protocol": "TCP"
},
{
"port": 51200,
"protocol": "TCP"
},
{
"port": 52200,
"protocol": "TCP"
},
{
"port": 52869,
"protocol": "TCP"
},
{
"port": 53000,
"protocol": "TCP"
},
{
"port": 53416,
"protocol": "TCP"
},
{
"port": 54322,
"protocol": "TCP"
},
{
"port": 54660,
"protocol": "TCP"
},
{
"port": 55170,
"protocol": "TCP"
},
{
"port": 55555,
"protocol": "TCP"
},
{
"port": 55920,
"protocol": "TCP"
},
{
"port": 57331,
"protocol": "TCP"
},
{
"port": 58603,
"protocol": "TCP"
},
{
"port": 60088,
"protocol": "TCP"
},
{
"port": 65004,
"protocol": "TCP"
},
{
"port": 65062,
"protocol": "TCP"
}
],
"web": {
"paths": [
"/aY4o",
"/owa/",
"/f5xJ",
"/owa/auth/logon.aspx",
"/",
"/BgIk",
"/nice ports,/Trinity.txt.bak",
"/mgmt/shared/authn/login"
],
"useragents": [
"Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0",
"",
"Go-http-client/1.1",
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:76.0) Gecko/20100101 Firefox/76.0",
"TBI-HttpOpenPlugin/0.1.0 (+https://leakix.net/)",
"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)",
"Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36",
"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.13; ko; rv:1.9.1b2) Gecko/20081201 Firefox/60.0",
"Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36",
"WhatWeb/0.5.5"
]
}
},
"seen": true,
"spoofable": false,
"tags": [
"404 Crawler",
"EHLO Crawler",
"Generic Lines Crawler",
"Generic Outlook Web Access Crawler",
"Go HTTP Client",
"HTTP OPTIONS Crawler",
"JRMI Scanner",
"Nmap",
"Open Proxy Scanner",
"Outlook Web Access Login Crawler",
"Radmin Crawler",
"SSH Alternative Port Crawler",
"SSH Bruteforcer",
"TLS/SSL Crawler",
"Web Crawler",
"X Server Connection Attempt"
],
"vpn": false,
"vpn_service": ""
}
]
- Running
greynoise query 23.129.64.215 -f json
greynoise query 23.129.64.215 -f json
{"ip": "23.129.64.215", "metadata": {"asn": "AS396507", "city": "San Jose", "country": "United States", "country_code": "US", "organization": "Emerald Onion", "category": "business", "tor": false, "rdns": "", "os": "FreeBSD", "region": "California"}, "bot": false, "vpn": false, "vpn_service": "", "spoofable": false, "raw_data": {"scan": [{"port": 21, "protocol": "TCP"}, {"port": 22, "protocol": "TCP"}, {"port": 23, "protocol": "TCP"}, {"port": 25, "protocol": "TCP"}, {"port": 26, "protocol": "TCP"}, {"port": 43, "protocol": "TCP"}, {"port": 79, "protocol": "TCP"}, {"port": 80, "protocol": "TCP"}, {"port": 81, "protocol": "TCP"}, {"port": 85, "protocol": "TCP"}, {"port": 88, "protocol": "TCP"}, {"port": 110, "protocol": "TCP"}, {"port": 111, "protocol": "TCP"}, {"port": 135, "protocol": "TCP"}, {"port": 139, "protocol": "TCP"}, {"port": 143, "protocol": "TCP"}, {"port": 389, "protocol": "TCP"}, {"port": 443, "protocol": "TCP"}, {"port": 445, "protocol": "TCP"}, {"port": 465, "protocol": "TCP"}, {"port": 514, "protocol": "TCP"}, {"port": 541, "protocol": "TCP"}, {"port": 554, "protocol": "TCP"}, {"port": 587, "protocol": "TCP"}, {"port": 631, "protocol": "TCP"}, {"port": 646, "protocol": "TCP"}, {"port": 700, "protocol": "TCP"}, {"port": 843, "protocol": "TCP"}, {"port": 888, "protocol": "TCP"}, {"port": 902, "protocol": "TCP"}, {"port": 993, "protocol": "TCP"}, {"port": 995, "protocol": "TCP"}, {"port": 1024, "protocol": "TCP"}, {"port": 1027, "protocol": "TCP"}, {"port": 1029, "protocol": "TCP"}, {"port": 1080, "protocol": "TCP"}, {"port": 1089, "protocol": "TCP"}, {"port": 1090, "protocol": "TCP"}, {"port": 1194, "protocol": "TCP"}, {"port": 1275, "protocol": "TCP"}, {"port": 1352, "protocol": "TCP"}, {"port": 1433, "protocol": "TCP"}, {"port": 1494, "protocol": "TCP"}, {"port": 1521, "protocol": "TCP"}, {"port": 1522, "protocol": "TCP"}, {"port": 1524, "protocol": "TCP"}, {"port": 1525, "protocol": "TCP"}, {"port": 1526, "protocol": "TCP"}, {"port": 1527, "protocol": "TCP"}, {"port": 1700, "protocol": "TCP"}, {"port": 1717, "protocol": "TCP"}, {"port": 1718, "protocol": "TCP"}, {"port": 1720, "protocol": "TCP"}, {"port": 1883, "protocol": "TCP"}, {"port": 1900, "protocol": "TCP"}, {"port": 1935, "protocol": "TCP"}, {"port": 2000, "protocol": "TCP"}, {"port": 2052, "protocol": "TCP"}, {"port": 2053, "protocol": "TCP"}, {"port": 2078, "protocol": "TCP"}, {"port": 2080, "protocol": "TCP"}, {"port": 2083, "protocol": "TCP"}, {"port": 2096, "protocol": "TCP"}, {"port": 2100, "protocol": "TCP"}, {"port": 2107, "protocol": "TCP"}, {"port": 2121, "protocol": "TCP"}, {"port": 2222, "protocol": "TCP"}, {"port": 2249, "protocol": "TCP"}, {"port": 2763, "protocol": "TCP"}, {"port": 2844, "protocol": "TCP"}, {"port": 3000, "protocol": "TCP"}, {"port": 3001, "protocol": "TCP"}, {"port": 3050, "protocol": "TCP"}, {"port": 3128, "protocol": "TCP"}, {"port": 3137, "protocol": "TCP"}, {"port": 3299, "protocol": "TCP"}, {"port": 3306, "protocol": "TCP"}, {"port": 3307, "protocol": "TCP"}, {"port": 3322, "protocol": "TCP"}, {"port": 3351, "protocol": "TCP"}, {"port": 3632, "protocol": "TCP"}, {"port": 4000, "protocol": "TCP"}, {"port": 4067, "protocol": "TCP"}, {"port": 4190, "protocol": "TCP"}, {"port": 4273, "protocol": "TCP"}, {"port": 4343, "protocol": "TCP"}, {"port": 4435, "protocol": "TCP"}, {"port": 4567, "protocol": "TCP"}, {"port": 4700, "protocol": "TCP"}, {"port": 4840, "protocol": "TCP"}, {"port": 4848, "protocol": "TCP"}, {"port": 4950, "protocol": "TCP"}, {"port": 4958, "protocol": "TCP"}, {"port": 4962, "protocol": "TCP"}, {"port": 5000, "protocol": "TCP"}, {"port": 5001, "protocol": "TCP"}, {"port": 5040, "protocol": "TCP"}, {"port": 5060, "protocol": "TCP"}, {"port": 5061, "protocol": "TCP"}, {"port": 5070, "protocol": "TCP"}, {"port": 5101, "protocol": "TCP"}, {"port": 5432, "protocol": "TCP"}, {"port": 5433, "protocol": "TCP"}, {"port": 5446, "protocol": "TCP"}, {"port": 5555, "protocol": "TCP"}, {"port": 5666, "protocol": "TCP"}, {"port": 5900, "protocol": "TCP"}, {"port": 5901, "protocol": "TCP"}, {"port": 5936, "protocol": "TCP"}, {"port": 5942, "protocol": "TCP"}, {"port": 5984, "protocol": "TCP"}, {"port": 6001, "protocol": "TCP"}, {"port": 6002, "protocol": "TCP"}, {"port": 6022, "protocol": "TCP"}, {"port": 6036, "protocol": "TCP"}, {"port": 6060, "protocol": "TCP"}, {"port": 6129, "protocol": "TCP"}, {"port": 6379, "protocol": "TCP"}, {"port": 6443, "protocol": "TCP"}, {"port": 6466, "protocol": "TCP"}, {"port": 6467, "protocol": "TCP"}, {"port": 6699, "protocol": "TCP"}, {"port": 6713, "protocol": "TCP"}, {"port": 6783, "protocol": "TCP"}, {"port": 6917, "protocol": "TCP"}, {"port": 6921, "protocol": "TCP"}, {"port": 7062, "protocol": "TCP"}, {"port": 7080, "protocol": "TCP"}, {"port": 7170, "protocol": "TCP"}, {"port": 7474, "protocol": "TCP"}, {"port": 7557, "protocol": "TCP"}, {"port": 7676, "protocol": "TCP"}, {"port": 7680, "protocol": "TCP"}, {"port": 7681, "protocol": "TCP"}, {"port": 7746, "protocol": "TCP"}, {"port": 7777, "protocol": "TCP"}, {"port": 7920, "protocol": "TCP"}, {"port": 8000, "protocol": "TCP"}, {"port": 8001, "protocol": "TCP"}, {"port": 8008, "protocol": "TCP"}, {"port": 8010, "protocol": "TCP"}, {"port": 8020, "protocol": "TCP"}, {"port": 8022, "protocol": "TCP"}, {"port": 8080, "protocol": "TCP"}, {"port": 8081, "protocol": "TCP"}, {"port": 8082, "protocol": "TCP"}, {"port": 8083, "protocol": "TCP"}, {"port": 8084, "protocol": "TCP"}, {"port": 8085, "protocol": "TCP"}, {"port": 8088, "protocol": "TCP"}, {"port": 8089, "protocol": "TCP"}, {"port": 8098, "protocol": "TCP"}, {"port": 8099, "protocol": "TCP"}, {"port": 8112, "protocol": "TCP"}, {"port": 8181, "protocol": "TCP"}, {"port": 8200, "protocol": "TCP"}, {"port": 8291, "protocol": "TCP"}, {"port": 8437, "protocol": "TCP"}, {"port": 8443, "protocol": "TCP"}, {"port": 8471, "protocol": "TCP"}, {"port": 8512, "protocol": "TCP"}, {"port": 8728, "protocol": "TCP"}, {"port": 8729, "protocol": "TCP"}, {"port": 8800, "protocol": "TCP"}, {"port": 8880, "protocol": "TCP"}, {"port": 8883, "protocol": "TCP"}, {"port": 8888, "protocol": "TCP"}, {"port": 8990, "protocol": "TCP"}, {"port": 8991, "protocol": "TCP"}, {"port": 8999, "protocol": "TCP"}, {"port": 9000, "protocol": "TCP"}, {"port": 9001, "protocol": "TCP"}, {"port": 9002, "protocol": "TCP"}, {"port": 9010, "protocol": "TCP"}, {"port": 9080, "protocol": "TCP"}, {"port": 9084, "protocol": "TCP"}, {"port": 9090, "protocol": "TCP"}, {"port": 9091, "protocol": "TCP"}, {"port": 9092, "protocol": "TCP"}, {"port": 9160, "protocol": "TCP"}, {"port": 9200, "protocol": "TCP"}, {"port": 9300, "protocol": "TCP"}, {"port": 9444, "protocol": "TCP"}, {"port": 9699, "protocol": "TCP"}, {"port": 9997, "protocol": "TCP"}, {"port": 9998, "protocol": "TCP"}, {"port": 9999, "protocol": "TCP"}, {"port": 10000, "protocol": "TCP"}, {"port": 10001, "protocol": "TCP"}, {"port": 10002, "protocol": "TCP"}, {"port": 10010, "protocol": "TCP"}, {"port": 10050, "protocol": "TCP"}, {"port": 10080, "protocol": "TCP"}, {"port": 10101, "protocol": "TCP"}, {"port": 10107, "protocol": "TCP"}, {"port": 10443, "protocol": "TCP"}, {"port": 12345, "protocol": "TCP"}, {"port": 14430, "protocol": "TCP"}, {"port": 15627, "protocol": "TCP"}, {"port": 15691, "protocol": "TCP"}, {"port": 15800, "protocol": "TCP"}, {"port": 17500, "protocol": "TCP"}, {"port": 18264, "protocol": "TCP"}, {"port": 18301, "protocol": "TCP"}, {"port": 20202, "protocol": "TCP"}, {"port": 21242, "protocol": "TCP"}, {"port": 21300, "protocol": "TCP"}, {"port": 22232, "protocol": "TCP"}, {"port": 22288, "protocol": "TCP"}, {"port": 27017, "protocol": "TCP"}, {"port": 27018, "protocol": "TCP"}, {"port": 27080, "protocol": "TCP"}, {"port": 27117, "protocol": "TCP"}, {"port": 28017, "protocol": "TCP"}, {"port": 30004, "protocol": "TCP"}, {"port": 30005, "protocol": "TCP"}, {"port": 30006, "protocol": "TCP"}, {"port": 30007, "protocol": "TCP"}, {"port": 30010, "protocol": "TCP"}, {"port": 30083, "protocol": "TCP"}, {"port": 32531, "protocol": "TCP"}, {"port": 32768, "protocol": "TCP"}, {"port": 34567, "protocol": "TCP"}, {"port": 34964, "protocol": "TCP"}, {"port": 37304, "protocol": "TCP"}, {"port": 37443, "protocol": "TCP"}, {"port": 37777, "protocol": "TCP"}, {"port": 38182, "protocol": "TCP"}, {"port": 38520, "protocol": "TCP"}, {"port": 38646, "protocol": "TCP"}, {"port": 40000, "protocol": "TCP"}, {"port": 40005, "protocol": "TCP"}, {"port": 40197, "protocol": "TCP"}, {"port": 44401, "protocol": "TCP"}, {"port": 47001, "protocol": "TCP"}, {"port": 48460, "protocol": "TCP"}, {"port": 49153, "protocol": "TCP"}, {"port": 49155, "protocol": "TCP"}, {"port": 49157, "protocol": "TCP"}, {"port": 49158, "protocol": "TCP"}, {"port": 49160, "protocol": "TCP"}, {"port": 49501, "protocol": "TCP"}, {"port": 49664, "protocol": "TCP"}, {"port": 49667, "protocol": "TCP"}, {"port": 49669, "protocol": "TCP"}, {"port": 50001, "protocol": "TCP"}, {"port": 50580, "protocol": "TCP"}, {"port": 50996, "protocol": "TCP"}, {"port": 51007, "protocol": "TCP"}, {"port": 51200, "protocol": "TCP"}, {"port": 52200, "protocol": "TCP"}, {"port": 52869, "protocol": "TCP"}, {"port": 53000, "protocol": "TCP"}, {"port": 53416, "protocol": "TCP"}, {"port": 54322, "protocol": "TCP"}, {"port": 54660, "protocol": "TCP"}, {"port": 55170, "protocol": "TCP"}, {"port": 55555, "protocol": "TCP"}, {"port": 55920, "protocol": "TCP"}, {"port": 57331, "protocol": "TCP"}, {"port": 58603, "protocol": "TCP"}, {"port": 60088, "protocol": "TCP"}, {"port": 65004, "protocol": "TCP"}, {"port": 65062, "protocol": "TCP"}], "web": {"paths": ["/aY4o", "/owa/", "/f5xJ", "/owa/auth/logon.aspx", "/", "/BgIk", "/nice ports,/Trinity.txt.bak", "/mgmt/shared/authn/login"], "useragents": ["Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0", "", "Go-http-client/1.1", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:76.0) Gecko/20100101 Firefox/76.0", "TBI-HttpOpenPlugin/0.1.0 (+https://leakix.net/)", "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)", "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36", "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.13; ko; rv:1.9.1b2) Gecko/20081201 Firefox/60.0", "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36", "WhatWeb/0.5.5"]}, "ja3": [{"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 22}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 110}, {"fingerprint": "872afe5bfa5995245e58609aa23f6a0d", "port": 443}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 443}, {"fingerprint": "706e10b69c57aa391de219ed24f17a58", "port": 443}, {"fingerprint": "917fde1bf3bcb67f961b77b18d9ee14a", "port": 993}, {"fingerprint": "006315b3ad276906ff11527f9594e5ba", "port": 993}, {"fingerprint": "a96dc3876784813c57d302241e620acd", "port": 993}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 993}, {"fingerprint": "03a3ad27040f733ee5c9915e0903d028", "port": 993}, {"fingerprint": "7f9ae904ef5a8d37a4028ce5c57bc099", "port": 993}, {"fingerprint": "db8d4ad49cb378fa370b43a61a9b06b6", "port": 993}, {"fingerprint": "1289771a3fce256d5fb4cb5c95b43ee6", "port": 993}, {"fingerprint": "013c30c8ce44c8b27e9ceb2a14db7283", "port": 993}, {"fingerprint": "917fde1bf3bcb67f961b77b18d9ee14a", "port": 995}, {"fingerprint": "006315b3ad276906ff11527f9594e5ba", "port": 995}, {"fingerprint": "a96dc3876784813c57d302241e620acd", "port": 995}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 995}, {"fingerprint": "03a3ad27040f733ee5c9915e0903d028", "port": 995}, {"fingerprint": "7f9ae904ef5a8d37a4028ce5c57bc099", "port": 995}, {"fingerprint": "db8d4ad49cb378fa370b43a61a9b06b6", "port": 995}, {"fingerprint": "1289771a3fce256d5fb4cb5c95b43ee6", "port": 995}, {"fingerprint": "013c30c8ce44c8b27e9ceb2a14db7283", "port": 995}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 4567}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 5432}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 5666}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 8000}, {"fingerprint": "706e10b69c57aa391de219ed24f17a58", "port": 8000}, {"fingerprint": "95d6f221c32953590c3a85cbee0d9e61", "port": 8080}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 8088}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 8443}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 8888}, {"fingerprint": "706e10b69c57aa391de219ed24f17a58", "port": 8888}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 8991}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 9999}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 10001}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 10010}], "hassh": [{"fingerprint": "1616c6d18e845e7a01168a44591f7a35", "port": 22}, {"fingerprint": "34e2be231a36f388a636d2140f5bb9aa", "port": 22}, {"fingerprint": "98ddc5604ef6a1006a2b49a58759fbe6", "port": 22}, {"fingerprint": "fda360b1b4f4d3455cb75c6e7edb1d11", "port": 22}, {"fingerprint": "57446c12547a668110aa237e5965e374", "port": 22}, {"fingerprint": "57446c12547a668110aa237e5965e374", "port": 2222}, {"fingerprint": "98ddc5604ef6a1006a2b49a58759fbe6", "port": 2222}]}, "first_seen": "2019-06-25", "last_seen": "2021-04-05", "rdns": "", "seen": true, "tags": ["404 Crawler", "EHLO Crawler", "Generic Lines Crawler", "Generic Outlook Web Access Crawler", "Go HTTP Client", "HTTP OPTIONS Crawler", "JRMI Scanner", "Nmap", "Open Proxy Scanner", "Outlook Web Access Login Crawler", "Radmin Crawler", "SSH Alternative Port Crawler", "SSH Bruteforcer", "TLS/SSL Crawler", "Web Crawler", "X Server Connection Attempt"], "actor": "unknown", "classification": "malicious", "cve": ["CVE-1999-0526"]}
@tlynx538 : we've tried reproducing this on a couple of different systems, and aren't able to get the same result, even with another Debian system. Is there anything unique about your machine that could be contributing to this on your side? If you try this from a different machine, do you experience the same issue?
I do not think so, as far as I know I had downloaded the ISO installer from Debian's Official Website.
FYI, I was running Greynoise CLI on a VM (VMware Workstation)
I do not think so there's anything unique about our system in general.
@tlynx538 : if you can provide the exact image or a link to it on the Debian site, we can try to reproduce this. Also, if you could provide any changes to language/region settings may be in play here as well. Thanks for the additional information.
AFAIK i downloaded the ISO from this link
@tlynx538 : I've done everything I can think of to try to reproduce this, matching your exact OS and all python packages, but everything continues to work for me. I've also validated that we don't directly use latin-1 in our code-base, so this error seems to be actually stemming from another package (perhaps click as indicated in the stacktrace).
The best I can offer at the moment is try to for a re-install and see if that corrects anything:
pip3 install --upgrade --force-reinstall greynoise
If you are able to troubleshoot or determine anything else unique about your setup, please let us know.
I will try and let you know.
Wasn't able to reproduce. Closing issue, can file new issue if issue continues.