-784071826 | 2024-11-07T21:29:36.050125
11 /
tcp
1412519768 | 2024-10-27T13:32:29.772746
13 /
tcp
"AP0F1D85"
Connection: close
<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR
171352214 | 2024-10-27T14:01:17.327881
15 /
tcp
-ERR client ip is not in whitelist
829384519 | 2024-10-19T06:27:25.198334
19 /
tcp
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
-1399940268 | 2024-10-15T06:54:34.772924
20 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1210838212 | 2024-11-06T20:07:51.963679
21 /
tcp
220 DiskStation FTP server ready.
164764193 | 2024-11-02T02:46:32.177667
23 /
tcp
-2107996212 | 2024-11-03T20:09:05.327825
24 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
493955023 | 2024-11-08T01:13:45.847495
25 /
tcp
\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00
-253878554 | 2024-11-05T01:48:26.523407
37 /
tcp
2087396567 | 2024-11-02T01:15:25.027827
43 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1909001798 | 2024-11-06T10:21:10.120737
49 /
tcp
HTTP/1.1 200 OK
Server:
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Tue, 21 Dec 2021 03:13:39 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff
-1156129152 | 2024-11-08T21:28:58.567907
53 /
tcp
9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0 \x00\x05\x00\x01\x00\x00\x00G\x00\x16\x07clients\x01l\x06google\x03com\x00\xc01\x00\x01\x00\x01\x00\x00\x00\x85\x00\x04\x8e\xfb+\x0e
\x00\x06\x85\x80\x00\x01\x00\x01\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03\xc0 \x00\x10\x00\x03\x00\x00\x00\x00\x00 \x08dnsmasq-
-972699072 | 2024-11-10T21:50:29.438011
79 /
tcp
HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0
811393646 | 2024-10-17T01:38:54.494893
80 /
tcp
HTTP/1.1 403 Forbidden
Server: AliyunOSS
Date: Thu, 17 Oct 2024 01:38:54 GMT
Content-Type: application/xml
Content-Length: 346
Connection: keep-alive
x-oss-request-id: 67106AAE6DB0A835339EB099
x-oss-server-time: 0
x-oss-ec: 0003-00001201
-119996482 | 2024-10-25T04:51:58.334290
84 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
1948301213 | 2024-11-01T05:52:51.850436
96 /
tcp
RFB 003.003
VNC:
Protocol Version: 3.3
1911457608 | 2024-11-10T08:54:47.723405
102 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-11-03T22:00:39.504628
104 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-122096153 | 2024-11-05T14:10:32.145170
110 /
tcp
Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618
2087396567 | 2024-10-12T03:23:47.333626
111 /
tcp
kjnkjabhbanc283ubcsbhdc72
60948681 | 2024-10-25T17:04:39.044513
113 /
tcp
lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).
141730637 | 2024-11-08T00:45:24.048762
119 /
tcp
HTTP/1.0 200 OK
Server: Proxy
971933601 | 2024-10-31T14:26:53.882803
122 /
tcp
HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html
1040118286 | 2024-11-10T14:26:10.373686
135 /
tcp
\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: WIN-IG71DFESOT5\n IP2: 60.199.208.208\n IP3: 2001:0:2851:782c:38f3:5c2:c338:2f2f\n\nNTLMSSP:\nTarget_Name: WIN-IG71DFESOT5\nProduct_Version: 10.0.14393 Ntlm 15\nOS: Windows 10, Version 1607/Windows Server 2016, Version 1607\nNetBIOS_Domain_Name: WIN-IG71DFESOT5\nNetBIOS_Computer_Name: WIN-IG71DFESOT5\nDNS_Domain_Name: WIN-IG71DFESOT5\nDNS_Computer_Name: WIN-IG71DFESOT5\nSystem_Time: 2024-01-22 08:14:35 +0
273155580 | 2024-11-03T22:07:06.853272
139 /
tcp
Version: 6.1Build 0\nTarget Name : MING-DS916\n
-398621179 | 2024-11-09T18:16:37.263235
143 /
tcp
* OK everfull.com.cn IMAP4rev1 MDaemon 12.5.6 ready\r\n
-399606100 | 2024-11-07T18:33:00.666077
179 /
tcp
BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n
-345718689 | 2024-10-30T07:07:36.354451
195 /
tcp
-1399940268 | 2024-10-20T11:38:07.227102
221 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1932800090 | 2024-11-05T23:10:00.073271
264 /
tcp
602337838 | 2024-11-10T19:07:46.579133
311 /
tcp
HTTP/1.1 404 Not Found
Accept-Ranges: bytes
-1639129386 | 2024-10-15T21:28:22.939069
389 /
tcp
0%\\x02\\x01\\x01a \n\\x010\\x04\\x00\\x04\\x19anonymous bind disallowed
1801635450 | 2024-11-10T06:16:28.347965
427 /
tcp
SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://127.0.0.1\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:ipmi\nservice:cdserver\nservice:fdserver\nservice:hdserver\nservice:adviser\nservice:lighttpd\nB://l:87/x\n\nResponse of service:ipmi SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n Lifetime: 65535\n URL: service:ipmi://(none):623\n Lifetime: 65535\n URL: service:ipmi://IEI9CC2C40E4251:623\n\n\nResponse of service:ipmi Attr
757225653 | 2024-11-07T13:17:38.156715
443 /
tcp
HTTP/1.1 403 Forbidden
Server: AliyunOSS
Date: Thu, 07 Nov 2024 13:17:38 GMT
Content-Type: application/xml
Content-Length: 346
Connection: keep-alive
x-oss-request-id: 672CBDF24596FF33365E963B
x-oss-server-time: 1
x-oss-ec: 0003-00001201
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:9a:a0:c2:cd:6d:5c:60:bc:f2:7a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: Jan 26 02:11:18 2024 GMT
Not After : Feb 26 02:11:17 2025 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.oss-cn-shenzhen.aliyuncs.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b0:c7:54:83:40:8e:09:77:61:48:ac:c9:ca:24:
6b:a5:f6:40:76:6a:c2:5e:38:f5:c3:d9:fa:b8:28:
2b:0e:8e:1d:d8:e3:c2:c3:e4:cc:bb:ce:ed:dc:88:
cf:31:05:22:ef:ae:26:bf:a2:15:1f:dd:cb:1f:46:
8f:4e:bc:41:5f:58:65:97:ad:8e:07:54:c3:f7:d8:
23:9e:3e:8e:a6:1b:36:86:e3:0d:f0:6f:fc:1e:a0:
c7:33:e3:2c:13:02:a1:12:10:d2:a8:8a:a2:ce:8e:
73:8c:83:e5:c5:51:c4:63:bf:57:a3:ff:37:4c:db:
bc:44:d9:91:cc:ee:88:9e:83:74:91:30:a2:d6:c7:
2b:ad:1b:68:de:63:a1:e6:13:b9:e4:2e:9c:64:18:
0e:b6:20:81:7b:00:14:c1:46:80:31:a4:cb:10:5d:
38:a2:6c:d7:77:09:8f:12:d1:6e:47:69:a1:79:c6:
35:c7:90:0b:84:09:ec:33:26:6c:56:98:fb:2d:38:
e4:a6:8a:98:1a:d5:f9:ac:d2:40:58:44:5d:a2:cb:
c1:34:98:c7:31:9a:78:f8:1e:98:26:4a:42:ef:78:
c8:27:b5:57:c3:c2:c4:f7:9a:dc:e0:66:75:56:0e:
02:c4:88:e5:16:e6:25:db:bf:24:26:b9:96:8c:07:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
Authority Information Access:
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
CPS: https://www.globalsign.com/repository/
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
X509v3 Subject Alternative Name:
DNS:*.oss-cn-shenzhen.aliyuncs.com, DNS:*.oss-cn-shenzhen-finance-1.aliyuncs.com, DNS:*.oss-cn-shenzhen-internal.aliyuncs.com, DNS:*.img-cn-shenzhen-internal.aliyuncs.com, DNS:*.oss-cn-shenzhen-internal-cross.aliyuncs.com, DNS:*.oss-cn-szfinance.aliyuncs.com, DNS:*.oss-cn-shenzhen-diku-internal.aliyuncs.com, DNS:*.oss-cn-shenzhen-finance-1-internal.aliyuncs.com, DNS:*.cn-heyuan.oss.aliyuncs.com, DNS:*.oss-cn-shenzhen-cross.aliyuncs.com, DNS:*.oss-enet-cn-south.aliyuncs.com, DNS:*.oss-internal.aliyuncs.com, DNS:*.oss-cn-guangzhou.aliyuncs.com, DNS:*.oss-cn-guangzhou-cross.aliyuncs.com, DNS:*.oss-accelerate.aliyuncs.com, DNS:*.oss-cn-heyuan-internal.aliyuncs.com, DNS:*.oss-accelerate-overseas.aliyuncs.com, DNS:*.aliyuncs.com, DNS:*.oss.aliyuncs.com, DNS:*.oss-cn-heyuan-cross.aliyuncs.com, DNS:*.img-cn-shenzhen.aliyuncs.com, DNS:*.oss-enet.aliyuncs.com, DNS:*.oss-cn-szfinance-internal.aliyuncs.com, DNS:*.vpc100-oss-cn-shenzhen.aliyuncs.com, DNS:*.cn-shenzhen.oss.aliyuncs.com, DNS:*.oss-cn-heyuan.aliyuncs.com, DNS:*.oss-cn-guangzhou-internal.aliyuncs.com, DNS:*.cn-guangzhou.oss.aliyuncs.com, DNS:*.cn-shenzhen-finance.oss.aliyuncs.com, DNS:*.cn-shenzhen-dualstack.oss.aliyuncs.com, DNS:*.cn-shenzhen-vpc.oss.aliyuncs.com, DNS:*.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-shenzhen.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-shenzhen-internal.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-heyuan.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-heyuan-internal.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-guangzhou.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-guangzhou-internal.oss-accesspoint.aliyuncs.com, DNS:*.cn-shenzhen.oss-console.aliyuncs.com, DNS:*.s3.oss-cn-shenzhen.aliyuncs.com, DNS:*.s3.oss-cn-shenzhen-internal.aliyuncs.com, DNS:*.cn-shenzhen.mgw.aliyuncs.com, DNS:*.oss.cn-shenzhen.privatelink.aliyuncs.com, DNS:*.oss-cn-shenzhen.oss-object-process.aliyuncs.com, DNS:*.oss-cn-shenzhen-internal.oss-object-process.aliyuncs.com, DNS:oss-cn-shenzhen.aliyuncs.com
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
X509v3 Subject Key Identifier:
6F:0A:05:0F:AD:E0:67:D5:94:20:25:0A:B9:A1:6C:32:00:B2:CD:87
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Jan 26 02:11:21.372 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:B7:ED:79:37:99:E1:86:8C:72:1F:71:
09:CC:48:09:04:03:EE:EB:B9:7B:D6:89:EB:43:EE:DE:
73:14:10:BA:DF:02:21:00:88:1A:C7:57:51:2D:2C:A3:
D6:2D:FF:21:19:1E:6B:2D:07:30:8C:D4:DE:72:CA:B3:
B0:A0:EB:DB:03:1E:8B:D8
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Jan 26 02:11:21.644 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:2F:A8:B4:0D:2B:FF:F7:61:91:DB:16:FA:
F6:0C:0D:FD:47:18:0B:C8:94:8A:39:1C:37:BB:E2:67:
1C:77:D2:04:02:21:00:ED:35:07:18:F9:AA:BC:69:88:
4A:BB:2B:DF:7A:04:EE:A3:4C:75:E3:27:49:A7:C9:0D:
3A:EC:01:71:77:E3:98
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
Timestamp : Jan 26 02:11:21.558 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:31:3F:0E:E2:CD:8A:05:16:91:C9:09:64:
C7:53:66:7C:0A:3E:F1:7E:BB:59:87:D1:8C:A5:5F:98:
CB:28:E7:FA:02:20:5F:91:81:4A:0C:DE:7D:51:FE:C3:
F2:50:06:D2:EE:64:8B:71:16:3D:B0:FE:83:8C:30:BE:
39:EF:29:A6:3A:31
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
5d:06:65:d0:19:50:88:38:e5:cb:b9:02:fe:c3:29:34:b3:01:
de:36:9f:31:83:f1:ac:61:6d:42:62:a4:f8:fb:2b:c3:67:38:
c0:81:5f:44:4c:94:0f:03:15:90:e9:ef:fc:7c:17:d4:41:92:
f7:61:e7:87:79:f1:a8:5a:b0:f4:c4:00:ce:1b:50:68:4a:44:
7b:c5:7a:ec:6e:fa:d0:31:5f:db:08:5b:6b:95:74:46:4c:46:
57:00:ba:df:94:69:49:11:ff:05:8b:1f:80:ca:b8:e7:f8:54:
35:d6:45:d3:f7:a8:72:5d:8b:3e:0d:25:74:ab:5a:2b:43:03:
e1:5c:3c:78:cd:65:05:b6:86:93:f5:19:5b:1e:e1:38:5d:9b:
ef:56:d4:8b:15:b2:6e:fe:15:41:6e:50:a8:72:f0:b1:28:20:
ce:f9:1a:7c:b8:d3:a2:f8:51:1f:3f:dc:58:cf:6e:2e:d3:20:
26:e6:da:2b:9a:5d:5c:07:b8:f1:d8:36:e0:23:43:bc:d9:b4:
7d:39:04:d1:09:8d:7c:39:6b:1b:0d:33:9e:af:13:6a:19:41:
c0:38:08:85:40:7d:ee:48:bb:5f:a0:1c:07:bd:f0:54:b0:29:
2a:ac:9d:5a:aa:bd:9a:b5:34:20:eb:5f:e7:0e:c2:ab:cf:60:
36:19:e9:d3
1203196907 | 2024-11-02T15:34:37.670375
444 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Sat, 02 Nov 2024 15:34:37 GMT
Content-Type: text/html
Content-Length: 157
Connection: close
<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>
937756010 | 2024-10-20T16:22:02.901873
448 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
165188539 | 2024-10-29T10:26:28.281633
450 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
897328069 | 2024-10-19T18:30:44.158718
465 /
tcp
220 mail.scott000.com ESMTP
455076604 | 2024-11-06T01:26:40.756844
502 /
tcp
!\x07version\x04bind7 t{RPowerDNS Recursor 410
-2089734047 | 2024-11-07T21:15:27.195393
503 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
2087396567 | 2024-11-04T01:01:13.825990
515 /
tcp
kjnkjabhbanc283ubcsbhdc72
-773160241 | 2024-10-23T18:58:06.305988
548 /
tcp
Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: Yes\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: Yes\nCopy File: Yes\nServer Name: murphys-airport-time-capsule\nMachine Type: \\x10TimeCapsule8,119\nAFP Versions: AFP3.3, AFP3.2, AFP3.1\nUAMs: DHCAST128\\x04,DHX2\\x03,SRP\\x06,Recon1C\nServer Signature: 4338365332344c58463948350069672d
1060450357 | 2024-11-10T09:51:33.389276
554 /
tcp
RTSP/1.0 200 OK
CSeq: 1
Keep-Alive: timeout=10, max=1000
Public: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, SET_PARAMETER, GET_PARAMETER
Connection: Keep-Alive
745343730 | 2024-10-31T23:57:02.526560
587 /
tcp
220 smtp.qq.com Esmtp QQ Mail Server
1308377066 | 2024-10-23T21:41:58.580163
593 /
tcp
1255568492 | 2024-11-10T00:20:07.455178
636 /
tcp
HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 12-56308661-0 0NNN RT(1705912410675 113) q(-1 -1 -1 -1) r(0 -1) b1
1300162323 | 2024-10-27T15:06:30.137484
666 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
-1487943323 | 2024-11-04T12:42:45.250001
771 /
tcp
431 Unable to negotiate secure command connection.\r\n
-1097188123 | 2024-10-15T16:02:01.560826
789 /
tcp
-976882525 | 2024-10-31T07:51:52.184767
873 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx/1.23.1
Content-Type: text/html
Connection: close
-936692830 | 2024-11-04T05:01:20.125982
992 /
tcp
HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19
-1399940268 | 2024-11-04T14:48:09.113960
993 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
934210070 | 2024-11-09T15:37:33.806789
995 /
tcp
+OK mail.dupre.idv.tw IceWarp 11.2.1.2 x64 POP3 Mon, 22 Jan 2024 12:43:35 +0800 <20240122124334@mail.dupre.idv.tw>\r\n
-1477838366 | 2024-11-05T01:03:40.155427
1000 /
tcp
SSH-2.0-OpenSSH_8.2p1 Ubuntu-4
-314039103 | 2024-11-04T15:06:25.458188
1023 /
tcp
Surnom.
Sorry, that nickname format is invalid.
-2107996212 | 2024-10-29T02:18:13.134512
1025 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
1362344524 | 2024-11-09T07:17:15.953065
1080 /
tcp
SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7
165188539 | 2024-11-01T02:14:23.370176
1099 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
165188539 | 2024-10-24T18:13:42.706610
1153 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
2087396567 | 2024-11-01T22:59:52.964671
1177 /
tcp
kjnkjabhbanc283ubcsbhdc72
1741579575 | 2024-10-26T23:04:23.776640
1200 /
tcp
-904840257 | 2024-10-21T14:01:52.325581
1234 /
tcp
572 Relay not authorized\r\n
996960436 | 2024-11-07T04:19:27.182162
1337 /
tcp
1767345577 | 2024-10-26T19:23:31.423331
1366 /
tcp
Hello, this is Quagga (version 0T).
Copyright 1996-200
51259122 | 2024-11-02T05:41:43.108725
1414 /
tcp
\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n
-182670276 | 2024-11-10T06:05:19.407614
1433 /
tcp
MSSQL Server\nVersion: 171050560 (0xa320640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: IZJ6FUBS9PLYUOZ\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: IZJ6FUBS9PLYUOZ\nNetBIOS_Computer_Name: IZJ6FUBS9PLYUOZ\nDNS_Domain_Name: iZj6fubs9plyuoZ\nDNS_Computer_Name: iZj6fubs9plyuoZ\nSystem_Time: 2024-01-22 03:53:09 +0000 UTC\n\n
-1715152554 | 2024-11-06T20:50:24.735275
1443 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Wed, 06 Nov 2024 20:50:24 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://120.78.115.84:443/
-1453516345 | 2024-11-09T15:35:30.735833
1515 /
tcp
HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
-805164506 | 2024-11-10T06:34:18.482731
1521 /
tcp
819727972 | 2024-11-02T19:35:40.097855
1599 /
tcp
-154107716 | 2024-11-05T23:44:27.965791
1604 /
tcp
220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
ABOR
ACCT
ADAT *
ALLO
APPE
AUTH
CCC
CDUP
CWD
DELE
ENC *
EPRT
EPSV
FEAT
HELP
HOST
LANG
LIST ...
-1399940268 | 2024-11-02T11:32:21.445757
1650 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1103582599 | 2024-10-27T02:01:21.668171
1723 /
tcp
Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n
819727972 | 2024-11-10T01:08:16.111549
1800 /
tcp
-1299899661 | 2024-10-27T20:21:46.168502
1801 /
tcp
\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x97W\\xcd[\\x98\\xc4\\x1aJ\\xa5\xd1\xbf\\xf9\\xbd\\xc7\\xce\\xfd92d3\\x10\\x01\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
1842524259 | 2024-11-09T08:06:00.447015
1883 /
tcp
1208318993 | 2024-11-10T16:41:36.146917
1911 /
tcp
\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01
-971970408 | 2024-11-01T20:40:19.424151
1926 /
tcp
1830187220 | 2024-10-24T08:49:40.362141
1981 /
tcp
\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->
-136006866 | 2024-11-07T14:18:33.602814
2000 /
tcp
STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND
-1681927087 | 2024-11-06T22:16:07.683737
2002 /
tcp
kjnkjabhbanc283ubcsbhdc72
2087396567 | 2024-11-04T09:16:26.304564
2008 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1189269828 | 2024-10-31T23:34:59.795492
2021 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-2096652808 | 2024-10-16T22:06:21.794896
2051 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1023516719 | 2024-10-31T23:11:10.171760
2067 /
tcp
ã
K vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol
819727972 | 2024-11-05T11:30:03.124988
2081 /
tcp
819727972 | 2024-11-10T21:12:32.710397
2083 /
tcp
-2096652808 | 2024-11-02T15:20:50.280621
2087 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1399940268 | 2024-10-24T01:58:56.204862
2096 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
141730637 | 2024-10-17T06:16:43.102722
2121 /
tcp
HTTP/1.0 200 OK
Server: Proxy
104385780 | 2024-11-01T22:01:57.121917
2154 /
tcp
-122096153 | 2024-11-09T17:18:44.319428
2181 /
tcp
Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618
1023953321 | 2024-10-31T20:09:25.319324
2200 /
tcp
HTTP/1.0 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm="proxy"
Connection: close
Content-type: text/html; charset=utf-8
-358801646 | 2024-10-20T02:39:26.829095
2201 /
tcp
1615193817 | 2024-10-17T18:43:46.097470
2221 /
tcp
Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n
2051656595 | 2024-11-02T23:47:19.995291
2222 /
tcp
SSH-2.0-OpenSSH_7.4\r\n\n
671605376 | 2024-10-26T20:42:51.660408
2233 /
tcp
-1888448627 | 2024-10-15T21:07:47.192634
2259 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
1662205251 | 2024-11-09T03:35:29.963543
2323 /
tcp
HTTP/1.0 404 FAIL
Content-length:5
Connection:Close
307999478 | 2024-10-24T13:54:17.601110
2332 /
tcp
unknown command \r\nunknown command \r\n
-1399940268 | 2024-11-10T15:41:18.243410
2345 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
660175493 | 2024-11-05T18:37:27.107778
2376 /
tcp
819727972 | 2024-11-10T15:32:16.597427
2404 /
tcp
-1375131644 | 2024-10-29T19:03:19.419658
2443 /
tcp
\x00[v\xc3\xbdC\x7f\x00\x00
-2089734047 | 2024-11-01T20:17:02.744568
2566 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1804005872 | 2024-10-29T08:08:25.870573
2601 /
tcp
\n\nWelcome to visit GOCLOUD S2A series router!\n\n\r\nUser Access Verification\r\n\r\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe"\\xff\\xfd\\x1fPassword:
580340387 | 2024-11-07T02:04:02.224821
2626 /
tcp
220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n ABOR \n ACCT \n ADAT *\n ALLO \n APPE \n AUTH \n CCC \n CDUP \n CWD \n DELE \n ENC *\n EPRT \n EPSV \n FEAT \n HELP \n HOST \n LANG \n LIST ...
2087396567 | 2024-11-06T00:43:57.701064
2628 /
tcp
kjnkjabhbanc283ubcsbhdc72
1869192275 | 2024-10-26T21:32:24.890030
2701 /
tcp
165188539 | 2024-11-08T02:52:33.688113
2761 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-358801646 | 2024-10-19T02:12:10.631124
2762 /
tcp
-1538260461 | 2024-10-20T04:23:47.256320
2806 /
tcp
1541211644 | 2024-11-10T19:05:50.166615
3001 /
tcp
1632932802 | 2024-10-21T19:14:47.605959
3002 /
tcp
165188539 | 2024-11-01T15:31:08.811271
3050 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
819727972 | 2024-11-09T04:49:38.989496
3058 /
tcp
-904840257 | 2024-11-09T01:21:00.694342
3059 /
tcp
572 Relay not authorized\r\n
51259122 | 2024-10-14T00:18:39.282945
3062 /
tcp
\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n
1332894250 | 2024-11-07T05:17:56.307459
3090 /
tcp
\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:
1911457608 | 2024-10-12T21:36:41.333124
3099 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1611764932 | 2024-10-29T09:05:34.490440
3100 /
tcp
\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00
1381121983 | 2024-10-26T22:45:21.347442
3101 /
tcp
-1148066627 | 2024-10-24T08:11:39.396157
3102 /
tcp
\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00
1332894250 | 2024-10-26T17:10:19.682519
3119 /
tcp
\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:
2087396567 | 2024-10-22T00:03:37.861841
3256 /
tcp
kjnkjabhbanc283ubcsbhdc72
175679309 | 2024-11-02T20:05:38.280139
3260 /
tcp
Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=QNAP Target\nTargetPortalGroupTag=1\n
-805362002 | 2024-10-31T12:44:08.319494
3268 /
tcp
ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225
-1399940268 | 2024-10-20T02:10:17.659043
3269 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
2087396567 | 2024-11-07T02:17:21.992427
3299 /
tcp
kjnkjabhbanc283ubcsbhdc72
1989907056 | 2024-10-24T08:24:27.688375
3301 /
tcp
RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n
1801207137 | 2024-10-12T17:36:26.194170
3306 /
tcp
F\\x00\\x00\\x00\\xffj\\x04Host \'106.75.96.125\' is not allowed to connect to this MySQL server
1989907056 | 2024-10-22T17:08:40.586307
3310 /
tcp
RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n
-345718689 | 2024-10-24T07:00:05.549729
3388 /
tcp
1911457608 | 2024-11-04T15:32:37.278119
3406 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
632542934 | 2024-11-03T21:38:36.130645
3409 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
-303199180 | 2024-10-13T20:19:51.747898
3479 /
tcp
Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n
1011407350 | 2024-10-31T20:51:29.715198
3522 /
tcp
* OK GroupWise IMAP4rev1 Server Ready\r\n
398077695 | 2024-10-23T20:38:51.943134
3523 /
tcp
-438503381 | 2024-10-13T20:49:31.460645
3548 /
tcp
WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2
-2089734047 | 2024-11-10T07:08:45.492974
3549 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1911457608 | 2024-10-18T10:10:42.759573
3550 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
198844676 | 2024-10-12T18:45:04.393583
3551 /
tcp
HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close
-992671574 | 2024-10-21T22:32:50.789289
3561 /
tcp
-1428621233 | 2024-11-08T06:57:10.519737
3567 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
-1036370807 | 2024-11-06T15:47:16.989762
3568 /
tcp
-1248408558 | 2024-11-04T23:20:01.364213
3780 /
tcp
220 MikroTik FTP server (MikroTik 6.44.3) ready
1842524259 | 2024-11-07T21:27:58.392594
3790 /
tcp
-801484042 | 2024-11-04T17:09:09.782838
4000 /
tcp
-445721795 | 2024-11-02T04:30:58.757124
4010 /
tcp
\x00[\xc3\xaed\x1a\x7f\x00\x00
1911457608 | 2024-10-29T14:10:01.814326
4022 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1975288991 | 2024-11-08T19:24:16.677779
4063 /
tcp
709622286 | 2024-11-04T01:53:41.267604
4064 /
tcp
OK Welcome <299685> on DirectUpdate server 7286\r\n
1375509841 | 2024-11-03T15:59:09.406523
4157 /
tcp
ÿû
no data rcvd for version string
recv version id unsuccessful
SSH Session task 0xY: Version Exchange Failed
1426971893 | 2024-10-20T12:48:41.918019
4200 /
tcp
\x00[s\xc3\x85\xc3\x93\x7f\x00\x00
-1341662640 | 2024-11-04T10:43:31.745199
4242 /
tcp
HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close
-1036370807 | 2024-11-11T00:08:03.689615
4282 /
tcp
740837454 | 2024-11-05T01:07:07.989312
4321 /
tcp
660175493 | 2024-11-01T00:29:09.929045
4433 /
tcp
1911457608 | 2024-11-06T18:40:27.252853
4500 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1911457608 | 2024-10-18T08:09:04.349647
4505 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-971970408 | 2024-11-11T00:31:30.530865
4506 /
tcp
-1026951088 | 2024-10-22T17:48:46.028828
4700 /
tcp
722711397 | 2024-10-27T09:22:48.517210
4786 /
tcp
\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00
-1730858130 | 2024-10-17T17:13:55.441481
4840 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
-1023516719 | 2024-10-20T00:41:29.407775
4899 /
tcp
ã
K vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol
-1598265216 | 2024-10-26T23:14:27.439412
4911 /
tcp
-409020351 | 2024-10-22T03:05:53.284757
4949 /
tcp
NPC Telnet permit one connection.
But One connection() already keep alive.
Good Bye !!
-1373613804 | 2024-10-27T11:37:41.160181
5001 /
tcp
00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,
-2089734047 | 2024-11-02T11:09:16.804647
5002 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1730858130 | 2024-10-26T09:38:23.883657
5006 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
819727972 | 2024-11-06T08:37:56.548673
5007 /
tcp
1578202979 | 2024-11-11T00:30:55.956624
5009 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1a4c_wdx37_19919-36152
-1888448627 | 2024-11-04T12:53:14.238501
5010 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-475051963 | 2024-10-19T23:05:00.294315
5050 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx/1.12.2
Content-Type: text/html; charset=UTF-8
Connection: close
1996932384 | 2024-11-07T14:53:38.182317
5172 /
tcp
-2017887953 | 2024-11-03T05:01:41.653996
5201 /
tcp
1948301213 | 2024-11-06T08:19:03.730525
5222 /
tcp
RFB 003.003
VNC:
Protocol Version: 3.3
1743272246 | 2024-10-27T17:00:19.427803
5269 /
tcp
HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705940324.547-w-waf01nbzt
1911457608 | 2024-10-26T15:03:26.249699
5432 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1363464823 | 2024-11-05T05:36:36.243600
5435 /
tcp
-1399940268 | 2024-11-03T00:11:25.726731
5542 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2031152423 | 2024-10-27T04:19:12.821328
5592 /
tcp
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
-1032713145 | 2024-10-30T05:02:17.484540
5599 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1
321971019 | 2024-10-16T00:35:42.741060
5600 /
tcp
-ERR client ip is not in whitelist\r
575925250 | 2024-11-09T07:08:06.597408
5672 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
819727972 | 2024-10-31T19:22:03.152793
5858 /
tcp
1999272906 | 2024-10-29T09:00:29.210585
5984 /
tcp
HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)
1544300041 | 2024-11-03T13:06:33.551792
5986 /
tcp
SSH-25453-Cisco-3524665.35
819727972 | 2024-11-04T05:42:17.873086
6001 /
tcp
1632932802 | 2024-11-01T10:17:48.825788
6002 /
tcp
119860953 | 2024-10-18T21:29:56.664345
6008 /
tcp
* OK ArGoSoft Mail Server IMAP Module v.YW at
1911457608 | 2024-10-29T19:49:10.443219
6550 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-457235091 | 2024-10-17T19:59:26.399367
6561 /
tcp
audio 0 RTP/AVP 18 4 3 8 0 101\r\na
819727972 | 2024-10-27T16:09:06.765194
6602 /
tcp
-365662216 | 2024-11-04T05:03:41.271636
6666 /
tcp
2087396567 | 2024-11-01T23:33:23.723343
6667 /
tcp
kjnkjabhbanc283ubcsbhdc72
-358801646 | 2024-10-29T00:59:10.399352
6668 /
tcp
-2089734047 | 2024-11-09T03:25:03.618228
6697 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-579195550 | 2024-10-26T10:11:05.839712
7000 /
tcp
HTTP/1.1 407 Proxy Authentication Required
Content-Type: text/plain; charset=utf-8
Proxy-Authenticate: Basic realm="proxy"
265065882 | 2024-10-23T14:53:11.012211
7001 /
tcp
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
1989907056 | 2024-10-13T23:52:48.146606
7002 /
tcp
RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n
-1399940268 | 2024-10-24T22:31:27.934052
7003 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1759920041 | 2024-11-05T08:46:05.782272
7004 /
tcp
HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
-375604792 | 2024-11-09T18:05:12.644298
7071 /
tcp
220 Microsoft FTP Service
-1810987450 | 2024-10-17T22:16:43.037388
7090 /
tcp
1911457608 | 2024-10-25T10:41:06.499241
7170 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
2103111368 | 2024-11-11T01:11:37.523259
7171 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
<?...
1282941221 | 2024-10-20T06:10:44.364208
7415 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
1426971893 | 2024-11-04T09:00:51.840005
7434 /
tcp
\x00[s\xc3\x85\xc3\x93\x7f\x00\x00
1612309769 | 2024-11-07T22:51:23.823787
7443 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28e1_CS-000-01SZh112_7344-42222
-1746074029 | 2024-10-15T11:15:07.478511
7465 /
tcp
671605376 | 2024-11-01T00:19:57.045410
7548 /
tcp
-616720387 | 2024-10-18T10:32:49.212426
7634 /
tcp
-1329831334 | 2024-10-29T15:35:27.608280
7776 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n
1391945995 | 2024-10-22T23:18:31.562305
7777 /
tcp
HTTP/1.1 403 Forbidden
Content-Type: text/plain; charset=utf-8
Proxy-Authenticate: Basic realm=""
-119996482 | 2024-10-22T16:06:22.161942
7989 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
-1259524839 | 2024-11-04T11:49:48.473289
7999 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0
-1204391172 | 2024-10-24T16:56:03.462256
8000 /
tcp
2103111368 | 2024-10-18T23:18:04.378018
8001 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
<?...
677934968 | 2024-10-24T08:59:26.838901
8002 /
tcp
-1730858130 | 2024-11-04T00:05:13.422583
8009 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
1492413928 | 2024-11-04T22:34:42.426954
8011 /
tcp
1504401647 | 2024-11-03T02:51:20.502827
8017 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n
165188539 | 2024-10-24T03:15:25.292474
8019 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1399940268 | 2024-10-16T02:29:02.305145
8023 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2024-11-10T20:26:58.567009
8027 /
tcp
-1013082686 | 2024-10-19T00:21:23.337142
8030 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain
-568526428 | 2024-10-23T23:14:19.583243
8045 /
tcp
HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 5-78951983-0 0NNN RT(1700835756666 1) q(0 -1 -1 -1) r(0 -1)
321971019 | 2024-11-02T03:07:42.666166
8047 /
tcp
-ERR client ip is not in whitelist\r
1911457608 | 2024-11-03T09:59:15.002980
8056 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1032713145 | 2024-11-10T19:03:24.653284
8064 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1
677934968 | 2024-10-27T20:50:09.627996
8081 /
tcp
1741579575 | 2024-10-13T03:15:58.566776
8083 /
tcp
-2089734047 | 2024-11-07T14:33:19.139601
8087 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-971970408 | 2024-10-16T18:13:07.847247
8089 /
tcp
-1416565584 | 2024-11-04T15:24:52.650085
8099 /
tcp
HTTP/1.1 500 Internal Server Error
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Connection: close
-445721795 | 2024-11-03T23:45:26.582679
8107 /
tcp
\x00[\xc3\xaed\x1a\x7f\x00\x00
-2096652808 | 2024-10-17T05:53:03.205721
8110 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-784071826 | 2024-10-27T22:30:16.162007
8111 /
tcp
-971970408 | 2024-10-22T11:12:44.468532
8126 /
tcp
472902042 | 2024-11-01T20:06:27.132347
8139 /
tcp
"Magic:ActiveMQ
Version:12
<ActiveMQ * TcpNoDelayEnabled SizePrefixDisabled CacheSize ProviderName ActiveMQ StackTraceEnabled PlatformDetails Java CacheEnabled TightEncodingEnabled MaxFrameSize @ MaxInac
-616720387 | 2024-10-12T09:27:08.516070
8140 /
tcp
-1470373019 | 2024-10-31T13:03:11.750444
8180 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae281e_PS-XMN-011WF49_10586-24989
-971970408 | 2024-11-04T17:48:59.104957
8181 /
tcp
618338916 | 2024-10-30T15:53:11.719425
8200 /
tcp
HTTP/1.1 302 Found
Connection: Keep-Alive
Transfer-Encoding: chunked
Keep-Alive: timeout=20
Location: /cgi-bin/luci/
1911457608 | 2024-10-16T08:06:48.695537
8238 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
165188539 | 2024-10-17T18:27:56.318477
8251 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
1911457608 | 2024-11-10T04:58:41.499733
8291 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1713467553 | 2024-11-07T23:20:02.379091
8333 /
tcp
HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Connection: close
1919228981 | 2024-11-07T08:20:28.565771
8403 /
tcp
\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03
-2089734047 | 2024-10-24T10:31:52.509537
8405 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1208318993 | 2024-10-24T02:59:12.628959
8416 /
tcp
\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01
921225407 | 2024-10-26T09:31:37.902751
8423 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
-1399940268 | 2024-11-05T22:32:59.742501
8424 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2017887953 | 2024-10-15T23:01:49.627045
8427 /
tcp
1282941221 | 2024-10-18T02:42:43.324639
8431 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
1791317882 | 2024-11-04T08:22:47.730180
8443 /
tcp
HTTP/1.1 200 OK
Date: Mon, 04 Nov 2024 08:22:47 GMT
Content-Type: text/html
Content-Length: 1204
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache, no-store
Etag: "43e16abc-2a5"
Server: Tengine
Set-Cookie: SERVERID=fa7f3e7639852a31e1172e740f2deb08|1730708567|1730708567;Path=/
Vary: Accept-Encoding
Location: htps://eventbridge-console.eu-central-1.aliyuncs.com
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a7:27:29:07:10:52:7c:ae:c7:4a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2
Validity
Not Before: Sep 12 07:56:08 2023 GMT
Not After : Feb 20 10:00:00 2024 GMT
Subject: CN=*.aliyuncs.com, O=Alibaba (China) Technology Co., Ltd., L=Hangzhou, ST=Zhejiang, C=CN
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d1:07:b7:55:0e:6d:64:a6:5c:ae:5b:46:bd:42:
36:62:06:42:64:7c:7b:2b:01:15:75:2d:96:73:7e:
7f:0c:7b:a2:11:34:d5:b2:c7:1d:ef:8d:93:04:ae:
c1:9c:2f:7b:ee:9e:81:ad:93:eb:38:f8:66:e2:68:
a9:51:10:3e:2f:ee:56:35:dd:77:bc:c4:e1:81:b2:
ab:fc:e1:c8:84:a4:9f:15:87:f4:5c:28:83:3a:0f:
e1:b7:f7:69:83:1d:e7:34:a3:74:97:89:47:49:91:
9c:d9:cc:f9:b1:3c:bf:d0:af:44:1a:9b:fd:c0:f9:
77:f5:c3:d1:97:f3:62:c4:d7:0c:ae:af:86:03:9c:
d0:8d:f0:f2:05:20:5a:1c:d4:c5:c5:26:ae:56:58:
e3:6d:01:93:7c:88:c0:94:e0:90:ce:3a:63:d4:17:
d1:a8:e8:10:66:96:03:7b:39:3d:9a:20:c9:c5:d0:
5e:cd:6d:62:60:2a:f9:17:ff:d0:17:48:35:57:01:
8c:73:ee:7d:18:58:b8:4c:45:e1:86:62:df:67:a0:
9a:ad:5b:04:1f:e9:c7:6e:95:d9:54:3f:fd:e5:62:
89:0d:8b:c4:77:b7:1e:eb:01:5b:8f:95:42:c5:bf:
55:d6:2e:db:da:86:24:84:78:bc:bc:3c:f2:af:c4:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
BD:22:FF:00:93:D9:9B:FA:87:FC:C5:14:21:44:0A:DD:BF:4A:AA:A6
X509v3 Authority Key Identifier:
96:DE:61:F1:BD:1C:16:29:53:1C:C0:CC:7D:3B:83:00:40:E6:1A:7C
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
X509v3 Subject Alternative Name:
DNS:*.aliyuncs.com, DNS:*.cn-hangzhou-mybk.aliyuncs.com, DNS:*.cn-nantong.aliyuncs.com, DNS:*.cn-shenzhen-finance-1.aliyuncs.com, DNS:*.cn-sichuan.aliyuncs.com, DNS:*.jp-fudao.aliyuncs.com, DNS:*.ap-south-1.aliyuncs.com, DNS:*.cn-wulanchabu.aliyuncs.com, DNS:*.cn-huhehaote.aliyuncs.com, DNS:*.cn-chengdu.aliyuncs.com, DNS:*.rus-west-1.aliyuncs.com, DNS:*.ap-southeast-1.aliyuncs.com, DNS:*.in-mumbai.aliyuncs.com, DNS:*.cn-guangzhou.aliyuncs.com, DNS:*.cn-hangzhou.aliyuncs.com, DNS:m-sg.lazada-seller.cn, DNS:gnarn.taobao.com, DNS:hsf.aliyun.com, DNS:shog1492759159639.1688.com, DNS:ob-gre.ojiyvn-ina.aon.aliyun-inc.com, DNS:shop37105204.taobao.com, DNS:shog36854541.taobao.com, DNS:iabv-qo.ojibobo-ina.aon.alibaba-inc.com, DNS:app122159.eapps.dingtalkcloud.com, DNS:dorkorder-tb.alibaba.com, DNS:shjonso.1688.com, DNS:client-jyh.maitix.com, DNS:gre-exgjore.ojibobo-ina.aon.alibaba-inc.com, DNS:origin-e72dd8c-trendyolbotak-status.aliyun.com, DNS:hb-ogi.ojibobo-ina.aon.alibaba-inc.com, DNS:wwwdocker.faas.ele.me, DNS:yingxiao.tmall.com, DNS:shog36284229.taobao.com, DNS:fourier.aliyun.com, DNS:pdpdesc.lazada.co.id, DNS:global-payment-bops.ae.alibaba-inc.com, DNS:access-open.quark.cn, DNS:valley.cainiao.com, DNS:a2n360.ojibobo-ina.aon.alibaba-inc.com, DNS:space.dingtalk.com
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
46:cf:e4:5c:91:f7:54:f5:ca:79:8f:9c:df:80:dc:39:8b:0e:
fa:0b:c0:1f:9b:ad:fd:25:c6:74:fc:64:9b:95:85:2b:53:21:
3e:ba:a3:bf:cc:1a:dd:6b:fe:ca:59:d3:aa:7b:05:b0:4a:e4:
51:2d:95:a2:c9:6b:5b:c1:8a:db:3d:b1:a2:bf:af:52:d2:9d:
5b:87:37:39:32:60:57:a8:22:f0:2e:f0:fe:4e:34:4c:f7:44:
66:9f:3a:9e:a3:bf:cf:19:83:0a:ea:91:07:aa:e6:e4:2d:57:
fc:aa:6b:b3:13:d5:99:ed:7b:ed:b0:bb:96:eb:67:4a:c5:ec:
38:7a:6c:a8:83:39:3f:7a:0f:7e:1a:9f:d3:83:ac:b0:b3:95:
c2:a8:87:76:06:7f:8a:a8:4a:e1:dd:af:44:a3:34:53:c5:55:
66:ce:af:06:2d:07:60:6b:74:91:55:4b:2c:ca:ae:a4:2c:bf:
f0:3d:a3:89:c4:94:7e:4d:cc:62:5e:74:16:42:0d:4a:be:4f:
db:d6:65:57:94:1b:09:7f:fb:e0:d1:f3:b8:18:93:fb:ca:db:
66:b5:1c:3f:7f:28:39:21:68:39:85:0d:15:72:bb:84:21:c0:
da:c9:9c:dc:88:5c:de:0f:63:3d:ea:d3:9d:63:8b:99:cc:26:
cd:43:90:da
1911457608 | 2024-10-21T06:52:05.300096
8445 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-2089734047 | 2024-11-04T12:43:15.932606
8447 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
819727972 | 2024-11-10T04:47:54.972584
8448 /
tcp
1529351907 | 2024-11-06T11:29:33.306614
8500 /
tcp
HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive
please add white ip *.*.*.*
1519486042 | 2024-10-27T21:51:51.271447
8545 /
tcp
<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>
-1730858130 | 2024-10-29T01:44:14.784843
8554 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
-1888448627 | 2024-11-04T23:09:19.833982
8575 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
819727972 | 2024-10-25T15:09:05.093567
8622 /
tcp
1489954473 | 2024-11-06T14:08:08.690575
8649 /
tcp
HTTP/1.1 410 Gone
Server: openresty
Transfer-Encoding: chunked
Connection: keep-alive
Via: 1.1 google
-802143704 | 2024-11-04T16:32:25.140667
8723 /
tcp
HTTP/1.0 500 Internal Server Error
D
Connection: close
Command server error
-1399940268 | 2024-11-06T08:06:09.558381
8728 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2096652808 | 2024-10-13T02:58:16.415430
8767 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
1210754493 | 2024-10-16T23:23:53.520974
8790 /
tcp
0\x0c\x02\x01\x01a\x07\n\x01\x00\x04\x00\x04\x00
819727972 | 2024-10-29T02:45:06.240170
8791 /
tcp
1996932384 | 2024-11-06T08:42:55.854207
8803 /
tcp
1911457608 | 2024-11-04T21:40:16.903565
8820 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-10-25T14:58:42.050553
8821 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1975288991 | 2024-10-20T10:56:38.662236
8832 /
tcp
-1681927087 | 2024-11-02T18:11:12.840618
8834 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1399940268 | 2024-10-23T14:36:30.411325
8844 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1399940268 | 2024-10-13T01:13:15.703601
8850 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1399940268 | 2024-10-27T09:57:46.341802
8878 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-653033013 | 2024-10-27T04:14:25.587951
8879 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
1778988322 | 2024-11-07T23:13:06.189423
8880 /
tcp
* OK GroupWise IMAP4rev1 Server Ready
-1189269828 | 2024-10-22T21:26:53.209658
8889 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1885525731 | 2024-11-05T17:41:28.056901
8899 /
tcp
\\xab\xca\xa5]\\x00\\x00\\x00\\x18\\xc0\\x00\\x00\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xab\xca\xa5]\\x00\\x00\\x00\\x18\\xc0\\x00\\x00\\x04\\xff\\xff\\xff\\xb9\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00
-358801646 | 2024-10-21T20:23:07.118825
8990 /
tcp
1119676909 | 2024-11-01T19:08:47.770270
9000 /
tcp
M\\xc4\xc5\xb1\\xfa\\xde\\xc8)W\\xad\\xaf\\xb8\\xb5\\x05\\x89\\x9f\\xa2\\x82\\xf2j7
-1026951088 | 2024-10-29T11:28:30.850836
9001 /
tcp
-441419608 | 2024-11-02T23:06:59.436983
9002 /
tcp
SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3
15018106 | 2024-10-22T18:45:42.576857
9006 /
tcp
\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00
819727972 | 2024-10-25T05:18:13.584699
9007 /
tcp
-2089734047 | 2024-10-23T08:20:29.604651
9013 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-10-15T21:36:38.295494
9019 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-358801646 | 2024-11-08T12:25:17.161173
9020 /
tcp
1911457608 | 2024-10-22T13:04:30.615926
9026 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
921225407 | 2024-11-10T22:53:01.245600
9029 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
546151771 | 2024-11-10T13:14:46.197810
9042 /
tcp
Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)
Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618
2087396567 | 2024-11-07T00:55:10.047459
9051 /
tcp
kjnkjabhbanc283ubcsbhdc72
-142686627 | 2024-11-03T11:31:16.629102
9091 /
tcp
\x00[\xc2\xba\x7fs\x7f\x00\x00
474736340 | 2024-11-04T00:16:46.707863
9095 /
tcp
431 Unable to negotiate secure command connection.
819727972 | 2024-11-02T08:07:03.320564
9100 /
tcp
-1839934832 | 2024-11-02T23:08:58.552334
9101 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
119860953 | 2024-10-26T02:36:40.859393
9105 /
tcp
* OK ArGoSoft Mail Server IMAP Module v.YW at
-1476017887 | 2024-10-15T15:54:21.493381
9109 /
tcp
N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n
-358801646 | 2024-11-01T23:31:38.566209
9151 /
tcp
-1399940268 | 2024-11-08T14:46:46.237052
9160 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2046514463 | 2024-11-01T10:35:16.689708
9205 /
tcp
639175818 | 2024-11-06T09:25:50.550935
9215 /
tcp
\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n
-1399940268 | 2024-10-24T01:25:02.129612
9221 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1399940268 | 2024-11-06T08:49:34.201673
9251 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1919228981 | 2024-11-07T21:10:33.276850
9306 /
tcp
\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03
-2089734047 | 2024-11-09T14:20:32.562367
9333 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-339084706 | 2024-11-02T22:26:20.945839
9389 /
tcp
200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n
1529351907 | 2024-11-05T04:28:26.869109
9418 /
tcp
HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive
please add white ip *.*.*.*
-2033111675 | 2024-11-07T11:04:51.366993
9530 /
tcp
1690634669 | 2024-11-08T06:27:48.323895
9633 /
tcp
-1399940268 | 2024-11-07T05:34:14.234572
9743 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1126993057 | 2024-11-07T23:28:19.498350
9761 /
tcp
* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at
751610770 | 2024-10-30T00:07:08.937160
9943 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2938_PS-000-01Mba83_19552-63826
1690634669 | 2024-10-17T02:25:26.142775
9944 /
tcp
1911457608 | 2024-11-06T23:32:45.452208
9950 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-10-31T23:24:26.875786
9994 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-696402907 | 2024-10-18T16:02:50.580728
9998 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae298c_PS-HIA-01Q7y203_55153-4321
1161309183 | 2024-11-10T20:16:56.791506
9999 /
tcp
2103111368 | 2024-11-08T18:42:02.328594
10000 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
<?...
1492413928 | 2024-11-10T15:00:37.282345
10001 /
tcp
-1900404274 | 2024-10-16T17:58:00.735312
10176 /
tcp
-1938071933 | 2024-10-19T08:20:22.369624
10443 /
tcp
HTTP/1.1 200 OK
Date: Sat, 19 Oct 2024 08:20:22 GMT
Content-Type: text/html
Content-Length: 1507
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache, no-store
Etag: "7dbaa69b-108"
Server: Tengine
Set-Cookie: SERVERID=99d39206ce98cc0d91a3a7d7e7314eb9|1729326022|1729326022;Path=/
Vary: Accept-Encoding
Location: https://email.aliyun.com
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:49:b2:86:90:3c:9b:46:7a:60:5b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: May 5 06:21:16 2023 GMT
Not After : Jun 5 06:21:15 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d7:f5:f2:ba:7f:3a:e9:f9:dc:17:26:74:d7:49:
9c:db:62:60:9a:b7:cb:14:89:0f:d9:fb:ef:52:75:
88:8d:b4:49:01:26:9c:82:dc:fa:68:a4:7d:01:b9:
98:e9:e7:31:d8:04:3f:7a:d3:64:52:c2:14:15:24:
35:ff:7a:44:1c:c1:54:5a:8a:5f:96:7e:96:06:3f:
52:ab:d3:00:be:d9:6f:4d:52:04:a6:fb:23:ec:c3:
98:2b:f9:f6:27:6c:65:58:46:32:68:23:ad:4a:c6:
3f:94:ee:a8:dc:84:38:40:98:5b:6c:98:1b:a4:1f:
d3:a8:ab:4d:d8:d2:26:97:e8:10:25:49:66:3e:ba:
d4:ab:68:ac:ea:77:f4:09:75:65:c2:39:89:0f:00:
10:b7:4f:d5:a6:df:d4:f1:e7:3d:76:38:06:4a:41:
21:ee:0a:aa:6c:77:d6:14:15:c3:24:f6:b8:0e:d8:
65:c4:72:01:68:dc:2c:2b:2f:67:ae:ae:91:18:12:
f7:14:49:bd:6b:23:ce:bf:ea:5a:97:eb:6d:1f:2e:
96:4a:87:fb:33:b8:a6:47:73:1a:0c:fb:85:9f:80:
e9:38:03:a1:0a:28:22:20:1e:40:bc:e8:c9:45:fb:
7a:93:3c:b3:75:81:08:60:4d:3c:7b:0c:12:a2:01:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.aliyun.com, DNS:aliyun.com, DNS:email.fc.lazada.sg, DNS:app87100.eapps.dingtalkcloud.com, DNS:eai-vga.an-beijing.aliyuncs.com, DNS:svbdoy2.sinbo.taobao.com, DNS:ddd.taobao.com, DNS:sahedvjer.ojiyvn-ina.aon.aliyun-inc.com, DNS:qichebaijian.1688.com, DNS:ssc.lazada.co.id, DNS:interact.sh, DNS:stlacct.alimama.com, DNS:svbdoy.sinbo.taobao.com, DNS:shog6xg1q03654180.1688.com, DNS:sandbox.aliyun.com, DNS:eas.an-hvhehoote.aliyuncs.com, DNS:sellercenter-my-staging.lazada-seller.cn
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
92:09:53:33:28:b6:fc:32:e0:f9:8c:a8:e4:b3:b6:4d:90:82:
15:09:08:32:8d:08:81:99:b8:6b:d5:93:d8:e9:7a:80:66:d1:
6f:df:17:9e:a5:1a:9e:cf:8c:96:0a:4d:ec:8b:93:ff:4c:9f:
7e:eb:58:28:e3:dd:93:0c:a8:5f:22:8c:8b:e4:e4:c2:4f:02:
26:66:15:55:8e:e5:74:14:a3:07:9d:1e:83:5a:5e:ea:c3:27:
87:e7:44:93:f9:6f:aa:ba:88:26:92:10:25:39:de:e1:27:ea:
c8:3a:27:04:47:9c:b2:c0:05:b0:8a:b4:62:02:44:cd:fc:47:
2f:ca:9f:5b:45:bd:1d:18:e2:ce:83:ee:49:cc:aa:f0:0c:2a:
1f:16:85:01:98:4e:77:32:04:d9:5f:80:c7:b2:3d:56:65:d9:
0c:72:c6:2f:67:e5:7a:3a:20:07:b1:c1:d4:50:a4:d2:ca:b4:
00:3a:45:fc:11:19:23:fa:57:4c:dc:d5:4c:7f:91:4b:96:80:
8d:ce:ea:23:18:d7:ca:0a:7c:40:3c:85:9e:c5:cc:56:17:e3:
21:3d:17:5f:f6:0e:2a:8d:08:d3:3a:d7:6d:29:74:32:ba:9c:
33:38:e8:55:66:bd:0e:56:31:c2:16:24:5a:ff:f6:77:e7:b7:
7b:34:a0:b3
2087396567 | 2024-11-08T19:25:00.758993
10554 /
tcp
kjnkjabhbanc283ubcsbhdc72
937756010 | 2024-11-05T06:40:12.648166
10909 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1839934832 | 2024-11-07T09:22:49.698299
10911 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
937756010 | 2024-11-05T22:52:45.349254
11000 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1399940268 | 2024-11-02T00:24:36.791946
11210 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-136006866 | 2024-10-27T03:06:01.110713
11211 /
tcp
STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND
165188539 | 2024-11-10T15:12:30.590865
11288 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1399940268 | 2024-10-16T20:11:02.883481
11300 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1245716040 | 2024-11-05T13:38:34.576028
12000 /
tcp
220 welcome to connecting FTP server
142594048 | 2024-11-08T10:16:01.844701
12345 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae29bb_CS-000-01pYi173_32176-13938
-1888448627 | 2024-10-17T07:47:06.720120
14147 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
455076604 | 2024-10-29T21:17:58.246162
14265 /
tcp
!\x07version\x04bind7 t{RPowerDNS Recursor 410
-1399940268 | 2024-11-04T21:01:41.170644
14344 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
539065883 | 2024-11-07T11:30:10.492290
15443 /
tcp
1741579575 | 2024-10-31T11:07:17.644420
16010 /
tcp
-1810987450 | 2024-10-19T11:13:06.568684
17000 /
tcp
2087396567 | 2024-10-25T05:57:42.321481
18080 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1399940268 | 2024-11-03T12:24:38.146038
18081 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1332894250 | 2024-11-10T00:48:51.151809
18245 /
tcp
\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:
539065883 | 2024-10-18T02:44:44.751592
18443 /
tcp
-792826324 | 2024-10-22T09:07:13.333596
18553 /
tcp
220 FTP server ready - login please
819727972 | 2024-11-04T14:13:25.504218
19000 /
tcp
-119996482 | 2024-11-07T06:21:53.033153
19071 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
1900503736 | 2024-10-17T08:59:06.458068
20000 /
tcp
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0
2087396567 | 2024-10-30T10:47:17.853012
20087 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1013082686 | 2024-11-02T09:38:41.871145
20256 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain
-1399940268 | 2024-11-06T02:39:28.869293
20547 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1370263973 | 2024-11-08T07:21:09.564491
20880 /
tcp
398077695 | 2024-10-29T18:55:38.001293
21025 /
tcp
-1399940268 | 2024-11-10T03:25:51.481468
21379 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
103159425 | 2024-11-01T10:27:58.751343
22000 /
tcp
-1059554316 | 2024-11-10T11:30:28.137007
22067 /
tcp
\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00
-971970408 | 2024-10-24T04:23:58.114850
22556 /
tcp
1231376952 | 2024-10-31T17:32:16.111989
23023 /
tcp
-1810987450 | 2024-11-06T06:24:45.068686
25001 /
tcp
-445721795 | 2024-10-29T16:20:40.199312
25105 /
tcp
\x00[\xc3\xaed\x1a\x7f\x00\x00
1574088840 | 2024-11-05T08:47:19.588884
25565 /
tcp
">Application and Content Networking Software 3.9</a>)\n</BODY><
-1839934832 | 2024-10-23T16:16:33.173151
26657 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-971970408 | 2024-10-20T00:55:39.753324
27015 /
tcp
1911457608 | 2024-10-31T23:36:19.886889
28015 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1308377066 | 2024-11-06T21:19:44.570220
30002 /
tcp
1423431314 | 2024-11-04T14:03:28.418105
30003 /
tcp
-1992519278 | 2024-10-25T08:15:21.764316
31337 /
tcp
\xc3\xbf\xc3\xbb\\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->
1842524259 | 2024-11-06T20:07:04.445251
31822 /
tcp
819727972 | 2024-10-23T06:09:36.693300
33060 /
tcp
410249975 | 2024-11-10T04:07:11.394266
33222 /
tcp
165188539 | 2024-10-25T21:52:14.060980
33889 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
2087396567 | 2024-11-07T07:22:46.302286
34422 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1230049476 | 2024-11-04T11:24:31.567360
37777 /
tcp
HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes
2087396567 | 2024-10-21T01:23:32.897974
38333 /
tcp
kjnkjabhbanc283ubcsbhdc72
-2096652808 | 2024-11-05T18:19:57.339465
39922 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1730858130 | 2024-10-20T17:54:07.430620
41443 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
799468586 | 2024-10-27T23:37:30.061458
41794 /
tcp
165188539 | 2024-11-04T07:43:59.062852
41800 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1648456501 | 2024-11-09T20:44:32.051029
42622 /
tcp
\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)
-433302150 | 2024-10-23T22:49:46.027178
44158 /
tcp
-358707605 | 2024-11-02T06:09:38.255072
44818 /
tcp
HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 391
Connect-To: https://qd-gatway.aliyuncs.com/table/tree-land/nacos/
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Nacos</title>
<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">
<link href="./css/main.css" rel="stylesheet"></head>
<body>
<div id="root" style="overflow:hidden"></div>
<div id="app"></div>
<div id="other"></div>
</body>
-1990350878 | 2024-11-08T02:24:15.955445
46722 /
tcp
-154107716 | 2024-10-20T13:10:11.234499
47990 /
tcp
220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
ABOR
ACCT
ADAT *
ALLO
APPE
AUTH
CCC
CDUP
CWD
DELE
ENC *
EPRT
EPSV
FEAT
HELP
HOST
LANG
LIST ...
-971970408 | 2024-11-08T22:25:34.024536
48122 /
tcp
-952165951 | 2024-10-20T07:26:24.633511
49153 /
tcp
2067064333 | 2024-11-07T22:40:55.863843
49522 /
tcp
740837454 | 2024-10-27T15:49:17.503920
50000 /
tcp
1632932802 | 2024-11-10T04:22:52.673062
50100 /
tcp
-971970408 | 2024-10-27T00:40:56.159859
51235 /
tcp
-1514525820 | 2024-11-09T13:14:26.773952
53022 /
tcp
Protocol version mismatch
422524323 | 2024-10-19T03:18:17.876759
53413 /
tcp
{
"Version": "3.4.18",
"VersionArray": [
3,
4,
18,
0
],
"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",
"OpenSSLVersion": "",
"SysInfo": "",
"Bits": 64,
"Debug": false,
"MaxObjectSize": 16777216
}
-1140468363 | 2024-11-07T08:12:42.275653
54138 /
tcp
539065883 | 2024-11-09T09:39:41.153784
54222 /
tcp
104385780 | 2024-10-17T18:58:45.988883
54984 /
tcp
-1399940268 | 2024-11-07T03:29:11.033296
55000 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
171352214 | 2024-10-26T21:20:17.014987
55442 /
tcp
-ERR client ip is not in whitelist
819727972 | 2024-11-10T03:17:57.386834
55443 /
tcp
-971970408 | 2024-10-19T21:02:02.912936
55553 /
tcp
-1699556818 | 2024-11-08T16:56:43.012821
55554 /
tcp
\x01remshd: Kerberos Authentication not enabled.\n
-1730858130 | 2024-11-07T19:03:48.612823
56422 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
-905685638 | 2024-11-11T02:03:15.217932
56922 /
tcp
1208318993 | 2024-11-10T15:10:55.282312
58522 /
tcp
\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01
2087396567 | 2024-11-07T15:23:19.338942
58622 /
tcp
kjnkjabhbanc283ubcsbhdc72
819727972 | 2024-11-06T20:43:37.614382
60129 /
tcp
-653033013 | 2024-11-07T17:16:32.491699
61613 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
1443792109 | 2024-10-27T10:09:38.500213
62078 /
tcp
962700458 | 2024-11-09T18:39:02.952215
63210 /
tcp
-971970408 | 2024-10-18T17:57:44.943769
63257 /
tcp
-2107996212 | 2024-10-31T19:34:01.530313
63260 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
799468586 | 2024-10-26T03:16:28.744235
64738 /
tcp
