-971970408 | 2024-08-14T20:21:14.871795
11 /
tcp
1346417108 | 2024-09-05T11:38:35.733891
13 /
tcp
-952165951 | 2024-09-03T21:36:08.527594
15 /
tcp
1852418385 | 2024-08-24T19:39:04.137324
17 /
tcp
RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ
829384519 | 2024-08-23T22:59:42.927488
19 /
tcp
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
1564456597 | 2024-09-02T23:55:36.060971
21 /
tcp
220 Firewall Authentication required before proceeding with service
-23362551 | 2024-09-05T09:21:11.321558
23 /
tcp
\xff\xfb\x01\xff\xfb\x03\xff\xfd\x18
307999478 | 2024-08-25T14:28:21.279999
25 /
tcp
unknown command \r\nunknown command \r\n
-1105333987 | 2024-09-06T19:00:38.273231
26 /
tcp
2087396567 | 2024-08-26T20:05:06.875643
43 /
tcp
kjnkjabhbanc283ubcsbhdc72
-801484042 | 2024-09-08T16:35:58.536722
49 /
tcp
-1156129152 | 2024-09-08T01:55:42.452210
53 /
tcp
9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0 \x00\x05\x00\x01\x00\x00\x00G\x00\x16\x07clients\x01l\x06google\x03com\x00\xc01\x00\x01\x00\x01\x00\x00\x00\x85\x00\x04\x8e\xfb+\x0e
\x00\x06\x85\x80\x00\x01\x00\x01\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03\xc0 \x00\x10\x00\x03\x00\x00\x00\x00\x00 \x08dnsmasq-
-1986594217 | 2024-08-23T17:15:51.098095
70 /
tcp
"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR
268196945 | 2024-09-01T18:56:30.322918
79 /
tcp
1234498827 | 2024-09-08T01:42:17.546031
80 /
tcp
HTTP/1.1 405 Method Not Allowed
Server: AliyunSLS
Date: Sun, 08 Sep 2024 01:42:17 GMT
Content-Type: application/json
Content-Length: 119
Connection: keep-alive
Access-Control-Allow-Origin: *
Authorization: OLS:GKnwDME+evgXf+u3mwWKLpf9GMk=
-2096652808 | 2024-08-23T00:15:50.267349
85 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-249504111 | 2024-09-03T23:29:54.005639
102 /
tcp
1919228981 | 2024-08-31T02:05:22.049090
104 /
tcp
\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03
1741579575 | 2024-09-04T14:20:34.310681
111 /
tcp
-1777894858 | 2024-09-08T07:08:24.635711
113 /
tcp
113 , 35054 : USERID : OTHER :99
-1810987450 | 2024-09-02T02:07:31.137794
121 /
tcp
-858402222 | 2024-08-23T16:11:11.337298
143 /
tcp
* OK Waiting for authentication process to respond..\r\n
165188539 | 2024-08-14T06:25:31.596012
175 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1730858130 | 2024-08-28T06:07:46.507620
195 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
1387411682 | 2024-08-20T12:26:47.496165
199 /
tcp
-784071826 | 2024-08-20T19:16:44.528867
221 /
tcp
-1022036431 | 2024-08-19T20:53:24.884935
264 /
tcp
CheckPoint\nFirewall Host: CN05FWINT01\nSmartCenter Host: fw-go-mgmt-01..x6vcm5\\x00\n
1975288991 | 2024-09-09T03:42:40.971289
311 /
tcp
-1907080992 | 2024-08-26T13:52:42.719222
389 /
tcp
0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x00\\x04\\x00\\x04\\x00
-525136240 | 2024-09-07T22:29:59.994614
427 /
tcp
SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://bogon.xylink\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\nservice:wbem:https\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n Lifetime: 65535\n URL: service:VMwareInfrastructure://bogon.xylink\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (
-1515016226 | 2024-09-05T23:12:05.480144
443 /
tcp
HTTP/1.1 405 Method Not Allowed
Server: AliyunSLS
Date: Thu, 05 Sep 2024 23:12:05 GMT
Content-Type: application/json
Content-Length: 119
Connection: keep-alive
Access-Control-Allow-Origin: *
Authorization: OLS:OUX6mjsdVD9m84gShqdAewbYH8U=
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:86:44:4a:f6:e4:94:ce:d3:44:13:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: May 20 03:16:02 2024 GMT
Not After : Jun 21 03:16:01 2025 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.log.aliyuncs.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:92:d6:38:82:87:0e:ec:4b:5e:b4:b0:0a:e9:49:
3b:f5:14:04:84:49:ae:60:13:78:bc:e8:92:b2:57:
bf:98:e5:95:79:2a:70:9d:27:c7:12:61:bd:7e:27:
cf:e2:db:7f:37:d0:10:c3:50:ff:e0:04:42:11:0d:
2d:ae:97:8e:fb:3a:f8:fa:e0:9b:b0:fd:0f:76:2c:
cb:f0:4c:42:cc:f3:7d:6c:d9:0e:36:31:9c:35:3e:
90:79:88:b1:bc:2f:a8:38:79:4e:86:ac:70:5f:a4:
8c:32:a1:c3:1b:2f:ab:7e:b6:37:dc:62:e1:cc:74:
85:f6:43:e8:dd:d1:74:f2:d9:2d:09:73:78:b4:09:
87:e3:e1:21:a4:c0:cd:74:2a:4e:fb:a3:8c:42:88:
c0:7b:8f:b5:68:ec:3a:f4:70:27:68:be:dc:9d:19:
a8:72:53:60:cf:1c:04:fb:f5:e2:27:72:d3:eb:0b:
7f:cd:3a:cb:c6:91:3f:47:d6:28:b1:17:aa:59:ba:
f4:43:1f:df:82:ab:25:0a:f2:6c:56:93:df:a2:56:
56:6c:d0:41:c7:ed:7a:a8:8b:c4:83:1a:48:46:0b:
67:bc:7b:05:68:c3:4a:b1:2d:bf:7b:62:b8:f6:ab:
27:56:e7:66:7c:e0:c5:6c:8a:35:0f:86:a1:83:45:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
Authority Information Access:
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
CPS: https://www.globalsign.com/repository/
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
X509v3 Subject Alternative Name:
DNS:*.log.aliyuncs.com, DNS:*.cn-hangzhou-ha-intranet.log.aliyuncs.com, DNS:*.cn-hangzhou-ha.log.aliyuncs.com, DNS:*.cn-hangzhou-ha-share.log.aliyuncs.com, DNS:*.cn-hangzhou-ha.dualstack.log.aliyuncs.com, DNS:*.cn-hangzhou-c.dualstack.log.aliyuncs.com, DNS:*.cn-hangzhou-c-share.log.aliyuncs.com, DNS:*.cn-hangzhou-c.log.aliyuncs.com, DNS:*.cn-hangzhou-c-intranet.log.aliyuncs.com, DNS:*.cn-hangzhou-b.dualstack.log.aliyuncs.com, DNS:*.cn-hangzhou-b.log.aliyuncs.com, DNS:*.cn-hangzhou-b-share.log.aliyuncs.com, DNS:*.cn-hangzhou-b-intranet.log.aliyuncs.com, DNS:*.cn-hangzhou.dualstack.log.aliyuncs.com, DNS:*.cn-hangzhou-intranet.log.aliyuncs.com, DNS:*.cn-hangzhou-vpc.log.aliyuncs.com, DNS:*.cn-hangzhou-share.log.aliyuncs.com, DNS:*.cn-hangzhou.log.aliyuncs.com, DNS:*.log-global.aliyuncs.com, DNS:*.dualstack.log.aliyuncs.com, DNS:log.aliyuncs.com
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
X509v3 Subject Key Identifier:
C5:97:84:94:EA:40:77:15:23:64:BC:97:1E:C9:C3:15:BC:62:08:D6
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : May 20 03:16:04.619 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:5E:DC:39:7E:AD:B8:84:52:97:AB:32:83:
C8:81:F3:5D:71:A2:42:87:65:16:22:72:89:ED:D8:A3:
DF:2B:A2:19:02:20:62:43:1B:3A:D6:56:C9:16:D5:C9:
7B:B1:C1:01:D1:3C:E0:3D:73:89:6C:C0:56:9E:85:93:
C5:4C:05:33:F0:EC
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : May 20 03:16:04.617 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:B3:B9:01:52:77:61:AE:F8:68:31:EE:
DE:25:13:46:20:B9:79:22:C6:BF:0E:72:36:8C:9C:5E:
E8:05:46:E5:46:02:21:00:AD:57:9A:8F:B3:D3:01:2E:
61:B9:95:1A:36:7E:58:9C:60:00:0B:F2:35:2A:39:BE:
2C:15:BB:6F:DF:6F:87:90
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : May 20 03:16:04.886 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:33:04:CA:6F:FE:2A:91:6B:DF:41:87:D3:
CA:CB:FE:27:87:B4:00:D2:42:91:6D:DB:5D:E7:63:C8:
AF:F9:7A:2F:02:21:00:BD:9B:78:66:9F:33:81:96:B3:
99:FA:A4:10:67:A6:A2:65:16:02:A1:E2:DA:23:CD:53:
56:ED:FD:4C:6E:2E:E1
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
0c:8d:64:b0:e2:37:a9:4a:92:5a:bc:3a:5d:d0:c6:57:92:cc:
3a:51:b2:54:72:d2:d9:4f:e8:ea:d1:57:7f:ff:74:00:96:c1:
2b:44:0c:52:a6:85:19:cf:ee:35:96:7e:ed:20:bd:67:35:02:
56:bc:86:be:d3:d9:fa:7f:a3:60:98:11:e4:c5:2e:6b:7a:43:
6b:3e:46:16:8d:46:fb:c8:8a:82:77:7a:1d:e9:81:89:22:60:
9b:f5:34:48:ce:ce:eb:53:aa:5b:c5:00:54:72:01:d0:17:42:
ad:c9:41:1e:7f:39:af:34:fa:52:08:6c:4c:e4:49:77:3d:eb:
af:17:93:09:31:83:5a:75:1c:91:9d:93:da:ed:f7:00:65:44:
df:23:26:cc:95:5c:56:9f:eb:6e:eb:c3:b1:8e:be:5e:d0:a2:
39:d9:68:2b:d8:06:0b:00:ef:2d:2b:26:b6:c8:0c:bb:2a:a4:
49:01:50:4b:84:e9:dd:2a:bf:76:c8:f2:66:f5:53:9e:64:cd:
0c:e2:81:6a:81:1c:99:fb:57:6a:60:53:74:c3:7c:dc:c2:a2:
a6:58:c9:a2:f0:ed:91:24:1b:6e:08:26:15:16:82:4c:49:a4:
68:5c:74:51:5f:46:72:2e:19:01:05:fa:f4:f7:a0:df:a2:22:
75:42:0c:ce
-384476060 | 2024-09-03T10:35:07.555741
444 /
tcp
HTTP/1.1 403 Forbidden
Date: Tue, 03 Sep 2024 10:35:07 GMT
Content-Type: text/html
Content-Length: 238
Connection: keep-alive
Server: Tengine
Location: https://enterprise.console.aliyun.com
Via: live35.cn2556[,0]
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:49:b2:86:90:3c:9b:46:7a:60:5b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: May 5 06:21:16 2023 GMT
Not After : Jun 5 06:21:15 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d7:f5:f2:ba:7f:3a:e9:f9:dc:17:26:74:d7:49:
9c:db:62:60:9a:b7:cb:14:89:0f:d9:fb:ef:52:75:
88:8d:b4:49:01:26:9c:82:dc:fa:68:a4:7d:01:b9:
98:e9:e7:31:d8:04:3f:7a:d3:64:52:c2:14:15:24:
35:ff:7a:44:1c:c1:54:5a:8a:5f:96:7e:96:06:3f:
52:ab:d3:00:be:d9:6f:4d:52:04:a6:fb:23:ec:c3:
98:2b:f9:f6:27:6c:65:58:46:32:68:23:ad:4a:c6:
3f:94:ee:a8:dc:84:38:40:98:5b:6c:98:1b:a4:1f:
d3:a8:ab:4d:d8:d2:26:97:e8:10:25:49:66:3e:ba:
d4:ab:68:ac:ea:77:f4:09:75:65:c2:39:89:0f:00:
10:b7:4f:d5:a6:df:d4:f1:e7:3d:76:38:06:4a:41:
21:ee:0a:aa:6c:77:d6:14:15:c3:24:f6:b8:0e:d8:
65:c4:72:01:68:dc:2c:2b:2f:67:ae:ae:91:18:12:
f7:14:49:bd:6b:23:ce:bf:ea:5a:97:eb:6d:1f:2e:
96:4a:87:fb:33:b8:a6:47:73:1a:0c:fb:85:9f:80:
e9:38:03:a1:0a:28:22:20:1e:40:bc:e8:c9:45:fb:
7a:93:3c:b3:75:81:08:60:4d:3c:7b:0c:12:a2:01:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.aliyun.com, DNS:aliyun.com, DNS:email.fc.lazada.sg, DNS:app87100.eapps.dingtalkcloud.com, DNS:eai-vga.an-beijing.aliyuncs.com, DNS:svbdoy2.sinbo.taobao.com, DNS:ddd.taobao.com, DNS:sahedvjer.ojiyvn-ina.aon.aliyun-inc.com, DNS:qichebaijian.1688.com, DNS:ssc.lazada.co.id, DNS:interact.sh, DNS:stlacct.alimama.com, DNS:svbdoy.sinbo.taobao.com, DNS:shog6xg1q03654180.1688.com, DNS:sandbox.aliyun.com, DNS:eas.an-hvhehoote.aliyuncs.com, DNS:sellercenter-my-staging.lazada-seller.cn
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
92:09:53:33:28:b6:fc:32:e0:f9:8c:a8:e4:b3:b6:4d:90:82:
15:09:08:32:8d:08:81:99:b8:6b:d5:93:d8:e9:7a:80:66:d1:
6f:df:17:9e:a5:1a:9e:cf:8c:96:0a:4d:ec:8b:93:ff:4c:9f:
7e:eb:58:28:e3:dd:93:0c:a8:5f:22:8c:8b:e4:e4:c2:4f:02:
26:66:15:55:8e:e5:74:14:a3:07:9d:1e:83:5a:5e:ea:c3:27:
87:e7:44:93:f9:6f:aa:ba:88:26:92:10:25:39:de:e1:27:ea:
c8:3a:27:04:47:9c:b2:c0:05:b0:8a:b4:62:02:44:cd:fc:47:
2f:ca:9f:5b:45:bd:1d:18:e2:ce:83:ee:49:cc:aa:f0:0c:2a:
1f:16:85:01:98:4e:77:32:04:d9:5f:80:c7:b2:3d:56:65:d9:
0c:72:c6:2f:67:e5:7a:3a:20:07:b1:c1:d4:50:a4:d2:ca:b4:
00:3a:45:fc:11:19:23:fa:57:4c:dc:d5:4c:7f:91:4b:96:80:
8d:ce:ea:23:18:d7:ca:0a:7c:40:3c:85:9e:c5:cc:56:17:e3:
21:3d:17:5f:f6:0e:2a:8d:08:d3:3a:d7:6d:29:74:32:ba:9c:
33:38:e8:55:66:bd:0e:56:31:c2:16:24:5a:ff:f6:77:e7:b7:
7b:34:a0:b3
1911457608 | 2024-09-02T18:39:17.059726
502 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-274082663 | 2024-08-15T23:23:48.478786
515 /
tcp
\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01
1308377066 | 2024-09-02T05:30:36.905872
593 /
tcp
1300162323 | 2024-08-18T21:22:12.118855
666 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
-2107996212 | 2024-09-05T13:42:47.906503
771 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
819727972 | 2024-08-17T02:30:12.277471
789 /
tcp
-936692830 | 2024-09-09T02:52:39.221479
992 /
tcp
HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19
1911457608 | 2024-08-10T23:12:38.214642
993 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-2113068813 | 2024-08-23T21:07:18.441936
995 /
tcp
669849225 | 2024-08-19T17:06:02.845074
1023 /
tcp
SSH-98.60-SysaxSSH_81885..42\r\n
-1399940268 | 2024-09-07T05:13:04.167683
1153 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
2087396567 | 2024-08-22T20:31:29.758301
1177 /
tcp
kjnkjabhbanc283ubcsbhdc72
897328069 | 2024-08-17T00:01:34.705806
1200 /
tcp
220 mail.scott000.com ESMTP
-971970408 | 2024-08-13T08:41:01.586769
1337 /
tcp
-321444299 | 2024-08-28T20:48:53.081060
1400 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.
-325802316 | 2024-09-03T20:32:40.946817
1433 /
tcp
MSSQL Server\nVersion: 134219767 (0x80007f7)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: PC-20150816MQOM\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: PC-20150816MQOM\nNetBIOS_Computer_Name: PC-20150816MQOM\nDNS_Domain_Name: PC-20150816MQOM\nDNS_Computer_Name: PC-20150816MQOM\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 04:03:26 +0000 UTC\n\n
819727972 | 2024-08-30T22:29:11.734240
1604 /
tcp
1103582599 | 2024-09-03T18:40:25.360340
1723 /
tcp
Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n
1911457608 | 2024-09-07T17:42:54.198891
1800 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1535389866 | 2024-08-16T04:43:04.687086
1801 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2157_PS-LHW-01jjk135_25164-48622
321971019 | 2024-08-22T19:41:59.539509
1880 /
tcp
-ERR client ip is not in whitelist\r
165188539 | 2024-09-02T14:45:42.844345
1911 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1399940268 | 2024-08-28T20:38:16.697019
1962 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
2103111368 | 2024-08-19T20:30:28.730942
1981 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
<?...
-1399940268 | 2024-08-16T22:01:50.972389
2000 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1948301213 | 2024-08-10T23:04:03.097229
2002 /
tcp
RFB 003.003
VNC:
Protocol Version: 3.3
1261582754 | 2024-08-29T12:37:38.335307
2008 /
tcp
unknown command
unknown command
165188539 | 2024-08-10T21:29:52.225876
2057 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1900404274 | 2024-09-04T17:03:04.740479
2067 /
tcp
-1399940268 | 2024-09-04T21:40:35.641755
2077 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
2087396567 | 2024-09-01T21:53:49.063776
2083 /
tcp
kjnkjabhbanc283ubcsbhdc72
-784071826 | 2024-09-08T18:08:28.482098
2087 /
tcp
141730637 | 2024-08-27T17:33:46.303072
2121 /
tcp
HTTP/1.0 200 OK
Server: Proxy
233634112 | 2024-08-23T14:46:00.222391
2154 /
tcp
SSH-98.60-SysaxSSH_81885..42
546151771 | 2024-09-03T20:13:40.251766
2181 /
tcp
Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)
Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618
820958131 | 2024-08-23T01:43:07.000765
2211 /
tcp
kjnkjabhbanc283ubcsbhdc72\x02
-18551454 | 2024-08-27T03:10:06.565149
2222 /
tcp
SSH-2.0-OpenSSH_6.2_hpn13v11 FreeBSD-20130515\r\n\n
-320705161 | 2024-08-30T21:22:29.182187
2245 /
tcp
1051421500 | 2024-09-06T07:11:54.182833
2323 /
tcp
H3C login:
TELNET Negotiation:
will: Echo, Suppress Go Ahead
do: Echo, Negotiate About Window Size, Remote Flow Control
-1969169410 | 2024-09-06T11:11:13.019521
2332 /
tcp
ÿû
-> GET / HTTP/1.0
GET / HTTP/1.0
undefined symbol: GET
->
->
-971970408 | 2024-08-24T03:06:32.838834
2345 /
tcp
119860953 | 2024-09-06T14:12:20.775495
2376 /
tcp
* OK ArGoSoft Mail Server IMAP Module v.YW at
1282941221 | 2024-08-12T03:43:24.414242
2379 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
819727972 | 2024-09-04T13:38:23.010757
2404 /
tcp
677934968 | 2024-08-31T01:37:56.349379
2455 /
tcp
89142341 | 2024-08-17T22:38:24.984407
2549 /
tcp
\x05\x00\x00\x00\x0b\x08\x05\x1a\x00
-2089734047 | 2024-08-21T04:13:26.119637
2628 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
2063598737 | 2024-09-07T17:48:01.002279
2761 /
tcp
-1013082686 | 2024-09-02T22:26:17.376943
2762 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain
2087396567 | 2024-09-01T17:56:57.604421
3001 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1487943323 | 2024-08-12T00:42:38.040179
3096 /
tcp
431 Unable to negotiate secure command connection.\r\n
1911457608 | 2024-08-11T23:27:34.954846
3116 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1746074029 | 2024-08-14T18:49:03.094462
3119 /
tcp
-1341662640 | 2024-08-18T00:46:47.499094
3260 /
tcp
HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close
1727372229 | 2024-09-02T13:29:43.446003
3268 /
tcp
HTTP/1.1 302
Location: http://116.6.76.114:3268/index.html
-1097188123 | 2024-08-16T03:00:47.524623
3299 /
tcp
-1399940268 | 2024-09-01T20:04:58.934163
3388 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
521595461 | 2024-08-19T02:34:37.036740
3389 /
tcp
Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x03\\x00\\x08\\x00\\x02\\x00\\x00\\x00\n\nGuess_OS:Windows Server 2003 or 2008\nFlag: PROTOCOL_HYBRID\n
1208318993 | 2024-08-22T23:45:59.652591
3402 /
tcp
\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01
921225407 | 2024-08-29T11:46:14.716477
3405 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
198844676 | 2024-08-13T19:44:14.322981
3551 /
tcp
HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close
-653033013 | 2024-08-20T03:09:22.924832
3780 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
-1399940268 | 2024-08-31T03:43:56.874318
3791 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1170207731 | 2024-08-26T08:41:08.329531
4000 /
tcp
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
content-length: 9446
content-type: text/html; charset=utf-8
cross-origin-window-policy: deny
date: Mon, 22 Jan 2024 08:34:42 GMT
server: Cowboy
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-id: F6yeXaHCjyC4elgAAoAh
x-xss-protection: 1; mode=block
set-cookie: _teslamate_key=SFMyNTY.g3QAAAAEbQAAAAtfY3NyZl90b2tlbm0AAAAYaUxzWXpoMm5SdWh1V2piMFd
1911457608 | 2024-08-14T02:42:21.532458
4022 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
819727972 | 2024-09-01T20:02:12.574643
4063 /
tcp
1426971893 | 2024-08-11T06:21:48.782963
4064 /
tcp
\x00[s\xc3\x85\xc3\x93\x7f\x00\x00
-1341662640 | 2024-09-04T08:05:54.497244
4242 /
tcp
HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close
1308377066 | 2024-08-28T06:12:50.814761
4282 /
tcp
-1250504565 | 2024-09-03T22:33:08.866183
4321 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01
1574088840 | 2024-09-04T22:33:37.851834
4369 /
tcp
">Application and Content Networking Software 3.9</a>)\n</BODY><
2087396567 | 2024-09-03T17:49:44.389013
4433 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1013082686 | 2024-08-19T11:37:01.932432
4434 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain
2140295939 | 2024-09-03T18:07:03.553531
4443 /
tcp
HTTP/1.1 200
Server: nginx
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache
-1375131644 | 2024-09-04T23:52:29.749691
4500 /
tcp
\x00[v\xc3\xbdC\x7f\x00\x00
422524323 | 2024-09-08T18:40:58.729810
4506 /
tcp
{
"Version": "3.4.18",
"VersionArray": [
3,
4,
18,
0
],
"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",
"OpenSSLVersion": "",
"SysInfo": "",
"Bits": 64,
"Debug": false,
"MaxObjectSize": 16777216
}
1996932384 | 2024-09-03T21:56:17.422414
4786 /
tcp
165188539 | 2024-08-14T23:25:48.525539
4949 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-180163620 | 2024-08-26T16:28:18.493574
5007 /
tcp
NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n
2118208326 | 2024-08-23T15:44:22.457194
5009 /
tcp
HTTP/1.1 426 Upgrade Required
Content-Type: text/plain
Connection: keep-alive
Keep-Alive: timeout=5
-1148066627 | 2024-08-28T01:01:54.683757
5025 /
tcp
\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00
1220320909 | 2024-08-23T21:21:33.866805
5090 /
tcp
-154107716 | 2024-08-13T20:54:23.995229
5169 /
tcp
220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
ABOR
ACCT
ADAT *
ALLO
APPE
AUTH
CCC
CDUP
CWD
DELE
ENC *
EPRT
EPSV
FEAT
HELP
HOST
LANG
LIST ...
1308377066 | 2024-08-27T08:50:31.442452
5172 /
tcp
401555314 | 2024-09-04T22:45:32.674948
5201 /
tcp
-1142844482 | 2024-08-13T07:18:59.790007
5222 /
tcp
ÿûSOYO_SIP VBNQyQSKc settings
Password:
-1074907534 | 2024-08-26T01:40:40.931098
5269 /
tcp
HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938603.82-w-waf02tjgt
660175493 | 2024-08-20T18:23:46.910048
5282 /
tcp
-981921233 | 2024-08-29T22:51:08.285118
5431 /
tcp
HTTP/1.1 404 Not Found
DATE: Fri, 19 Jan 2024 11:56:43 GMT
Connection: Keep-Alive
Server: LINUX/2.4 UPnP/1.0 BRCM400/1.0
Content-Type: text/xml; charset="utf-8"
EXT:
-375604792 | 2024-08-27T12:20:26.735674
5432 /
tcp
220 Microsoft FTP Service
-1399940268 | 2024-08-30T19:46:28.573809
5435 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
321971019 | 2024-08-24T10:24:06.861272
5542 /
tcp
-ERR client ip is not in whitelist\r
-1399940268 | 2024-08-13T12:35:09.460484
5595 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1077013874 | 2024-08-13T23:38:55.503088
5634 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
575925250 | 2024-09-04T09:24:27.113657
5672 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
1741579575 | 2024-08-29T21:17:08.243810
5697 /
tcp
-1990350878 | 2024-09-07T10:41:24.565078
5858 /
tcp
-2089734047 | 2024-08-23T10:30:40.255753
5938 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
2087396567 | 2024-08-25T17:27:42.693628
5986 /
tcp
kjnkjabhbanc283ubcsbhdc72
819727972 | 2024-08-19T17:45:36.579352
6000 /
tcp
-756825518 | 2024-08-12T20:05:22.942217
6002 /
tcp
1308377066 | 2024-08-14T05:51:43.028070
6085 /
tcp
1308377066 | 2024-08-19T20:28:41.499473
6265 /
tcp
321971019 | 2024-08-12T08:52:23.733990
6379 /
tcp
-ERR client ip is not in whitelist\r
-1869698159 | 2024-08-29T01:27:45.090709
6443 /
tcp
HTTP/1.1 404 Not Found
Date: Thu, 29 Aug 2024 01:27:44 GMT
Content-Type: text/html
Content-Length: 384
Connection: keep-alive
Server: Tengine
Location: https://workbench.aliyun.com
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e4:36:78:7d:ba:5a:13:e3:9b:fd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: Jun 2 06:02:03 2023 GMT
Not After : Jul 3 05:56:05 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.tanx.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:2b:33:73:69:dc:e0:03:49:db:10:72:af:d0:1d:
fc:35:0e:82:05:32:d6:66:e9:18:5f:45:db:ab:11:
ac:b5:39:60:b7:f2:9c:29:58:65:96:38:bc:b4:ff:
aa:87:3c:a2:f6:f4:ae:87:c0:3e:d3:b5:79:46:a9:
cb:00:cb:18:70
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
0B:5E:80:D7:DA:75:94:A4:FE:20:AD:A4:ED:06:5C:63:34:13:08:23
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.tanx.com, DNS:*.45E.alibaba-inc.com, DNS:*.8.shareyouli.com, DNS:*.9game.cn, DNS:*.a-map.cn, DNS:*.a-map.co, DNS:*.a-map.link, DNS:*.a-map.vip, DNS:*.abs-sign.amap.com, DNS:*.ac.uc.cn, DNS:*.acis.amap.com, DNS:*.admin.alihealth.cn, DNS:*.admin.hemaos.com, DNS:*.aikit.alibaba-inc.com, DNS:*.ailab.alibaba-inc.com, DNS:mail.aliyun.com, DNS:pdpdesc.lazada.vn, DNS:account.kaola.com, DNS:imageconv.alibaba.net, DNS:dodn-version.ojiyvn-ina.aon.aliyun-inc.com, DNS:zotog168.1688.com, DNS:search-p.lazada.com.my
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
7e:d6:91:16:73:28:8a:1f:d3:7d:58:89:3a:be:9c:32:3d:d3:
d6:fb:a7:7b:a1:bc:71:7e:d6:3a:3c:3a:26:87:db:74:94:a4:
a2:cf:a3:cf:ff:43:12:98:6c:01:a8:42:bb:09:58:d9:51:eb:
92:7b:52:d1:db:04:91:8b:48:8f:78:fd:6e:ae:cb:39:25:67:
ba:e4:ac:61:c7:44:9b:af:64:75:ae:68:10:f5:90:61:9b:2a:
6e:90:90:6a:d8:fd:d8:c2:3c:a2:e2:76:1f:bb:17:43:d1:88:
f6:8b:3e:b4:1d:99:6e:7b:a9:db:fc:f9:fb:d2:10:d6:f3:89:
69:c2:ab:a9:2e:e0:ed:5a:f9:49:59:86:c1:a0:e2:cf:54:58:
ba:e3:56:52:70:90:6b:a4:2b:bd:bf:d6:eb:7a:4c:64:28:2b:
b8:98:03:b8:40:94:77:63:40:32:43:ef:5c:13:c2:a1:9c:d6:
6d:84:8f:84:f5:36:e1:d2:f0:bf:93:e3:8d:ac:26:90:1d:49:
8b:5c:4e:57:80:b7:7e:59:c7:a3:e1:4f:59:a3:cd:9b:71:14:
7d:7b:1f:7e:6e:e1:ed:ca:2e:32:b8:9f:8a:ef:3f:f2:13:8a:
9a:4c:0f:b0:95:31:96:fe:23:aa:bc:ba:f9:80:e5:03:7f:32:
32:b7:cd:55
819727972 | 2024-08-12T04:17:57.078032
6653 /
tcp
-696112747 | 2024-09-06T03:48:53.053477
6666 /
tcp
\x00\x0e@\xbdT\xa7\xd0f(*\xd4\x00\x00\x00\x00\x00
1077013874 | 2024-09-07T21:03:51.708816
6667 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
1778988322 | 2024-09-06T16:28:32.478425
7071 /
tcp
* OK GroupWise IMAP4rev1 Server Ready
-1699556818 | 2024-09-05T18:55:06.164926
7171 /
tcp
\x01remshd: Kerberos Authentication not enabled.\n
-21576419 | 2024-08-17T11:16:53.244044
7218 /
tcp
ÿûUDo you want ANSI color? (Y/n)
-1097188123 | 2024-09-03T20:49:39.010209
7415 /
tcp
328982367 | 2024-08-24T11:49:57.527274
7443 /
tcp
HTTP/1.1 302 Found
Server: Apache/2.4.57 (Debian)
Strict-Transport-Security: max-age=15552000; includeSubDomains
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow
X-XSS-Protection: 1; mode=block
X-Powered-By: PHP/8.2.9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: https://mcchatgp.synology.me:7443/login
Content-Typ
1632932802 | 2024-09-07T20:26:47.917384
7548 /
tcp
1220320909 | 2024-08-31T01:40:03.980934
7557 /
tcp
1308377066 | 2024-08-30T21:15:26.780634
7654 /
tcp
-321444299 | 2024-08-19T20:10:33.547315
7657 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.
1072892569 | 2024-08-15T21:12:03.633679
8001 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
-1476017887 | 2024-08-17T17:24:27.443780
8006 /
tcp
N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n
799468586 | 2024-08-26T08:28:27.010898
8009 /
tcp
575925250 | 2024-08-12T21:30:58.818790
8018 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
819727972 | 2024-09-06T13:46:01.320335
8022 /
tcp
-832380282 | 2024-08-27T22:08:59.240808
8027 /
tcp
lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n
-1825431268 | 2024-08-23T23:24:22.077073
8031 /
tcp
HTTP/1.1 422 Bad Request
Content-Type: text/html
-1900404274 | 2024-09-06T21:11:23.850697
8039 /
tcp
1978059005 | 2024-08-25T04:22:08.915967
8060 /
tcp
Sorry, that nickname format is invalid.
1412519768 | 2024-08-11T06:04:02.579057
8069 /
tcp
"AP0F1D85"
Connection: close
<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR
-653033013 | 2024-09-06T13:38:09.163911
8081 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
819727972 | 2024-08-24T13:59:46.849200
8083 /
tcp
2087396567 | 2024-09-07T22:52:21.476999
8085 /
tcp
kjnkjabhbanc283ubcsbhdc72
-2089734047 | 2024-09-06T07:06:20.786300
8087 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1077013874 | 2024-08-13T21:30:59.669908
8089 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
1072892569 | 2024-09-01T18:39:21.513648
8098 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
-1888448627 | 2024-08-19T19:47:10.347955
8118 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-1839934832 | 2024-08-11T18:18:13.480180
8140 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
1320285193 | 2024-09-09T04:02:05.717334
8200 /
tcp
HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive
-1487943323 | 2024-08-31T22:47:59.657350
8237 /
tcp
431 Unable to negotiate secure command connection.\r\n
-1733645023 | 2024-08-25T23:30:47.270391
8291 /
tcp
SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10
1335782347 | 2024-08-31T18:26:55.285538
8333 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705940700.09-waf02bjtp3
-2017887953 | 2024-08-18T02:37:32.619945
8405 /
tcp
321971019 | 2024-09-04T11:04:06.107641
8412 /
tcp
-ERR client ip is not in whitelist\r
-2107996212 | 2024-08-19T19:04:10.053561
8442 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
-126720400 | 2024-08-17T14:40:20.110086
8443 /
tcp
HTTP/1.1 200 OK
Date: Sat, 17 Aug 2024 14:40:19 GMT
Content-Type: application/json
Content-Length: 363
Connection: keep-alive
Ali-Swift-Global-Savetime: 1723905619
Eagleeye-Traceid: 4eec450a44bc6f155679fc5d7b
Eagleid: 4eec450a44bc6f155679fc5d7b
S_group: tao-session
S_ip: 1906365df89405f7d369479dad897273
S_status: STATUS_SYS_ERR
S_tag: 045543636873883|723282399^|^^
S_tid: 4eec450a44bc6f155679fc5d7b
S_ucode: CN:CENTER
S_v: 2.1.4.2
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://webplus-intl.console.aliyun.com
Ufe-Result: A9
Via: kunlun26.86kunlun1[984,982,536-0,M], kunlun70.kunlun56[391,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Sat, 17 Aug 2024 14:40:19 GMT
842535728 | 2024-08-12T14:35:04.038380
8649 /
tcp
<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
<!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...
819727972 | 2024-09-02T22:30:48.792725
8666 /
tcp
-1888448627 | 2024-09-08T16:24:49.043173
8728 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
165188539 | 2024-08-15T12:03:32.793936
8788 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
820958131 | 2024-08-24T11:30:37.745994
8821 /
tcp
kjnkjabhbanc283ubcsbhdc72\x02
1396488228 | 2024-08-23T01:52:49.370663
8836 /
tcp
HTTP/1.1 200 OK
Content-Length: 2037
Cache-Control: private, max-age=300
Content-Type: text/html
-1036370807 | 2024-08-21T23:48:47.474618
8847 /
tcp
119860953 | 2024-08-12T14:52:05.869157
8857 /
tcp
* OK ArGoSoft Mail Server IMAP Module v.YW at
2087396567 | 2024-09-06T00:29:39.567533
8880 /
tcp
kjnkjabhbanc283ubcsbhdc72
1966849516 | 2024-09-08T07:37:07.578474
9000 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65adecfe_CS-000-01NFs233_3728-19750
-1026951088 | 2024-08-24T07:30:28.742876
9001 /
tcp
-1559123399 | 2024-09-08T01:41:35.937025
9002 /
tcp
500 Permission denied - closing connection.
-1453516345 | 2024-09-01T15:00:12.209840
9005 /
tcp
HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
819727972 | 2024-08-29T22:26:12.056859
9021 /
tcp
-1399940268 | 2024-09-06T03:44:33.149604
9042 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2024-08-14T22:35:27.860462
9091 /
tcp
819727972 | 2024-08-31T07:56:43.064543
9092 /
tcp
-1399940268 | 2024-08-17T21:59:19.143223
9094 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
380146262 | 2024-09-02T21:10:34.830885
9095 /
tcp
639175818 | 2024-09-06T12:29:14.125104
9096 /
tcp
\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n
165188539 | 2024-08-24T09:26:49.905448
9100 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
1911457608 | 2024-09-08T21:33:29.601253
9111 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-249504111 | 2024-08-24T07:04:57.969545
9151 /
tcp
722711397 | 2024-09-01T20:08:01.598159
9160 /
tcp
\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00
575925250 | 2024-09-02T21:02:17.223988
9199 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
-1120655012 | 2024-09-07T01:36:26.115859
9200 /
tcp
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
content-length: 534
632542934 | 2024-08-21T07:21:37.764138
9221 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
-1399940268 | 2024-08-24T20:27:42.988372
9306 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
504717326 | 2024-08-27T19:05:44.462414
9308 /
tcp
-891714208 | 2024-08-25T03:59:34.881554
9389 /
tcp
( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )
-441419608 | 2024-08-29T17:38:56.879726
9398 /
tcp
SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3
-1036370807 | 2024-09-02T10:04:53.041688
9418 /
tcp
-1375131644 | 2024-08-14T16:56:58.636384
9530 /
tcp
\x00[v\xc3\xbdC\x7f\x00\x00
-1399940268 | 2024-09-02T18:09:39.885788
9600 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-971970408 | 2024-09-06T21:50:53.962914
9633 /
tcp
-1760806421 | 2024-08-13T17:40:45.037031
9944 /
tcp
protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected
-1032713145 | 2024-08-18T14:30:11.104649
9991 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1
-328903379 | 2024-09-04T17:44:03.168401
9998 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2516_PStwtbTPE1rg71_39907-39996
1161309183 | 2024-08-25T14:33:17.462700
9999 /
tcp
2087396567 | 2024-09-02T07:56:58.494247
10000 /
tcp
kjnkjabhbanc283ubcsbhdc72
1492413928 | 2024-08-26T17:02:07.288709
10001 /
tcp
-1729629024 | 2024-08-28T21:42:01.547503
10143 /
tcp
1852418385 | 2024-08-19T22:31:41.947781
10554 /
tcp
RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ
-1986594217 | 2024-09-07T14:38:22.369835
10911 /
tcp
"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR
-2096652808 | 2024-08-19T10:28:07.203948
11000 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-136006866 | 2024-09-08T05:02:30.946255
11211 /
tcp
STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND
-407828767 | 2024-09-04T23:04:48.264430
14147 /
tcp
\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00
-801484042 | 2024-08-23T04:13:41.800581
15301 /
tcp
89282912 | 2024-08-16T20:29:31.976805
15443 /
tcp
220 VMware Authentication Daemon Version 1.0, ServerDaemonProto
col:SOAP, MKSDisplayProtocol:VNC , ,
-971970408 | 2024-09-03T22:01:36.279650
16285 /
tcp
819727972 | 2024-08-20T01:05:12.218943
18081 /
tcp
-1399940268 | 2024-08-31T21:40:08.606922
18245 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2024-09-08T16:24:19.306718
19000 /
tcp
1900503736 | 2024-08-23T14:46:05.381877
20000 /
tcp
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0
1308377066 | 2024-09-06T16:36:18.761392
20256 /
tcp
-297128567 | 2024-08-24T04:13:48.048327
20547 /
tcp
\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00
2087396567 | 2024-09-07T17:33:20.884947
21025 /
tcp
kjnkjabhbanc283ubcsbhdc72
320677201 | 2024-09-03T01:56:21.284869
21379 /
tcp
H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server
323676348 | 2024-09-04T16:14:55.458301
22067 /
tcp
1741579575 | 2024-08-21T16:35:23.304631
22069 /
tcp
-358801646 | 2024-08-12T03:01:55.651464
22222 /
tcp
-441419608 | 2024-08-29T04:41:34.505653
23023 /
tcp
SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3
-1996280214 | 2024-09-01T12:56:52.535687
25001 /
tcp
-1888448627 | 2024-08-16T07:29:44.207912
25565 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
1741579575 | 2024-08-17T19:31:32.950529
26656 /
tcp
819727972 | 2024-08-17T15:53:38.692664
26657 /
tcp
1763259671 | 2024-08-13T04:35:03.942161
27017 /
tcp
{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n
-616720387 | 2024-08-22T16:33:05.849065
28000 /
tcp
660175493 | 2024-09-03T19:01:34.790680
28017 /
tcp
1231376952 | 2024-08-25T14:00:15.057270
30002 /
tcp
1632932802 | 2024-09-08T22:49:03.840168
30003 /
tcp
-1059554316 | 2024-08-20T20:47:00.405490
30301 /
tcp
\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00
-147424911 | 2024-09-07T16:19:05.250127
31337 /
tcp
HTTP/1.1 404 Not Found
Content Length: 0
2087396567 | 2024-08-16T07:31:48.640733
31443 /
tcp
kjnkjabhbanc283ubcsbhdc72
819727972 | 2024-08-13T02:37:48.176391
32764 /
tcp
1842524259 | 2024-08-20T15:22:27.191143
33445 /
tcp
-2096652808 | 2024-09-06T04:01:07.788746
35000 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1699556818 | 2024-09-07T05:27:58.542212
37777 /
tcp
\x01remshd: Kerberos Authentication not enabled.\n
2087396567 | 2024-09-04T17:30:33.944496
39277 /
tcp
kjnkjabhbanc283ubcsbhdc72
599074451 | 2024-09-06T07:52:55.107560
41800 /
tcp
-971970408 | 2024-09-03T19:46:11.866422
42398 /
tcp
539065883 | 2024-08-23T17:30:41.671201
43118 /
tcp
321971019 | 2024-09-08T05:01:58.361421
44818 /
tcp
-ERR client ip is not in whitelist\r
1758994290 | 2024-08-26T02:51:57.796327
49152 /
tcp
HTTP/1.1 500 Internal Server Error
CONTENT-LENGTH: 411
CONTENT-TYPE: text/xml; charset="utf-8"
DATE: Mon, 22 Jan 2024 14:56:01 GMT
EXT:
SERVER: Linux/3.10.0, UPnP/1.0, Portable SDK for UPnP devices/1.6.18
X-User-Agent: redsonic
-805362002 | 2024-08-12T22:53:57.832174
49153 /
tcp
ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225
171352214 | 2024-09-01T10:46:58.821938
50000 /
tcp
-ERR client ip is not in whitelist
-1142844482 | 2024-08-24T20:31:35.943916
50070 /
tcp
ÿûSOYO_SIP VBNQyQSKc settings
Password:
1072892569 | 2024-09-07T21:04:19.813460
51106 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
-2096652808 | 2024-08-18T05:22:34.692532
51235 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
1911457608 | 2024-08-21T13:55:45.540529
54138 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1615193817 | 2024-09-05T04:32:43.918912
54321 /
tcp
Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n
1887224352 | 2024-08-28T19:51:26.666506
54361 /
tcp
-891714208 | 2024-09-05T12:39:28.863195
55000 /
tcp
( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )
1852418385 | 2024-08-30T06:40:54.991475
55442 /
tcp
RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ
-903067560 | 2024-09-02T20:57:25.699832
55553 /
tcp
\x00[\x13)\xc2\x81\x7f\x00\x00
-805362002 | 2024-08-11T12:31:03.463453
60010 /
tcp
ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225
819727972 | 2024-09-06T19:38:49.214466
60129 /
tcp
-2046514463 | 2024-09-01T22:26:23.016244
61613 /
tcp
539065883 | 2024-09-01T01:34:26.014389
61616 /
tcp
408230060 | 2024-09-01T19:33:09.845653
62078 /
tcp
\r\nSorry, that nickname format is invalid.\r\n
1911457608 | 2024-08-23T13:10:20.666857
62200 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
632542934 | 2024-08-31T23:28:35.447948
63210 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
