-1461540015 | 2024-12-15T22:07:18.399402
11 /
tcp
audio 0 RTP/AVP 18 4 3 8 0 101
a
1193556399 | 2024-12-19T17:52:46.325091
13 /
tcp
-1399940268 | 2024-12-25T10:18:05.179406
15 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
829384519 | 2024-12-21T02:24:05.152009
19 /
tcp
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV
1911457608 | 2024-12-07T21:52:45.753822
20 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
460589547 | 2024-12-27T10:22:39.953184
23 /
tcp
-1399940268 | 2024-12-27T07:42:35.488418
25 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1685693176 | 2024-12-26T17:11:50.202470
49 /
tcp
HTTP/1.1 200 OK
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Server: cisco-CPA
-1056270173 | 2024-12-09T20:40:29.379869
70 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
-1770051369 | 2024-12-21T19:11:17.902982
79 /
tcp
501077178 | 2024-12-27T19:51:03.240957
80 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: Tengine
Date: Fri, 27 Dec 2024 19:51:05 GMT
Content-Type: text/html
Content-Length: 215
Connection: keep-alive
Location: http://www.taobao.com/
Via: wagbridge.033049233080.ea134[web,302]
819727972 | 2024-12-23T23:41:05.877123
102 /
tcp
1911457608 | 2024-12-15T22:22:41.104254
104 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-2096652808 | 2024-12-25T20:17:19.814501
110 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1777894858 | 2024-12-18T09:54:41.330524
113 /
tcp
113 , 35054 : USERID : OTHER :99
-2107996212 | 2024-12-12T04:24:50.435497
119 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
165188539 | 2024-12-15T07:58:17.931581
175 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-399606100 | 2024-12-11T11:54:29.432453
179 /
tcp
BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n
320677201 | 2024-12-09T03:26:50.101283
180 /
tcp
H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server
-971970408 | 2024-12-11T23:42:29.061412
195 /
tcp
-1709030885 | 2024-12-14T06:12:33.468807
264 /
tcp
1975288991 | 2024-12-26T21:48:21.041932
311 /
tcp
-525136240 | 2024-12-27T10:40:45.876463
427 /
tcp
SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://bogon.xylink\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\nservice:wbem:https\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n Lifetime: 65535\n URL: service:VMwareInfrastructure://bogon.xylink\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (
501077178 | 2024-12-26T03:17:35.321516
443 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: Tengine
Date: Thu, 26 Dec 2024 03:17:34 GMT
Content-Type: text/html
Content-Length: 215
Connection: keep-alive
Location: http://err.taobao.com/error1.html
Via: wagbridge.033049233153.ea134[web,302]
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b0:6a:4f:b2:66:f4:12:45:36:78:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: May 6 09:06:06 2024 GMT
Not After : Jun 7 09:06:05 2025 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.taobao.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:c5:cf:3e:e0:be:80:89:5e:0c:c2:8a:91:ca:5b:
e1:04:0e:dd:df:05:48:a1:ea:dd:44:e0:8d:8e:5b:
a1:d8:a0:90:4e:67:02:1b:3c:71:f6:b4:98:7d:44:
23:72:27:2e:63:0b:27:61:c4:1e:cd:ff:82:4a:27:
6f:08:e4:f7:c8
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Basic Constraints: critical
CA:FALSE
Authority Information Access:
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
CPS: https://www.globalsign.com/repository/
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
X509v3 Subject Alternative Name:
DNS:*.taobao.com, DNS:*.im.taobao.com, DNS:*.izhongchou.taobao.com, DNS:*.yingxiao.taobao.com, DNS:trace.cps.taobao.com, DNS:*.julang.taobao.com, DNS:*.ag.taobao.com, DNS:*.dmp.taobao.com, DNS:api.ent.taobao.com, DNS:*.taodetail.taobao.com, DNS:*.page.taobao.com, DNS:*.item.taobao.com, DNS:*.movie.taobao.com, DNS:*.sellercenter.taobao.tw, DNS:*.alisp-openadmin.taobao.com, DNS:*.taoxiaopu.taobao.com, DNS:*.adminconsole.taobao.com, DNS:*.developers.taobao.com, DNS:*.jianghu.taobao.com, DNS:*.jiangshi.taobao.com, DNS:*.wapa.taobao.com, DNS:*.alimebot.taobao.com, DNS:*.astore-alsc.taobao.com, DNS:*.ds.taobao.com, DNS:*.i56.taobao.com, DNS:*.themis.taobao.com, DNS:*.sycm-ct.taobao.com, DNS:*.darenmcn.taobao.com, DNS:*.yueke.taobao.com, DNS:*.pre-haoxue.taobao.com, DNS:*.txd.taobao.com, DNS:*.x-space.taobao.com, DNS:*.dsc.taobao.com, DNS:*.taojinbi.taobao.com, DNS:*.ads.taobao.com, DNS:*.global.i56.taobao.com, DNS:*.ma.taobao.com, DNS:*.2.taobao.com, DNS:*.gateway.simba.taobao.com, DNS:*.alibeebot.taobao.com, DNS:*.cbbs.taobao.com, DNS:*.tmall.taobao.com, DNS:*.nextbi.taobao.com, DNS:*.console.taobao.com, DNS:*.alsc.taobao.com, DNS:*.mktadapter.taobao.com, DNS:*.shuyuan.taobao.com, DNS:*.tf.taobao.com, DNS:*.pre-microapp-dmp.taobao.com, DNS:*.corp.taobao.com, DNS:*.livec.taobao.com, DNS:*.fenxiao.taobao.com, DNS:*.world.taobao.com, DNS:*.yulebao.taobao.com, DNS:*.zuanshi.taobao.com, DNS:*.ajax.taobao.com, DNS:*.dianying.taobao.com, DNS:*.prepub.taobao.com, DNS:*.hjhttpgw.pay.taobao.com, DNS:*.taobao.comunity-sign-front-static.taobao.com, DNS:*.unidesk.taobao.com, DNS:*.intl.taobao.com, DNS:*.taobao.taobao.com, DNS:*.pre-repo1-git-jae.taobao.com, DNS:*.wangpu.taobao.com, DNS:*.xiangqing.taobao.com, DNS:*.110.taobao.com, DNS:*.design.taobao.com, DNS:*.fuwu.taobao.com, DNS:*.aliqin.taobao.com, DNS:*.homelab.taobao.com, DNS:*.rule.taobao.com, DNS:*.gpu.taobao.com, DNS:*.dianxiaomi.taobao.com, DNS:*.game.taobao.com, DNS:*.pmcrm.taobao.com, DNS:*.olympic.taobao.com, DNS:*.solar.taobao.com, DNS:*.pre-air-er.taobao.com, DNS:*.tgc.taobao.com, DNS:*.dchain-api-proxy.taobao.com, DNS:*.miniapp.taobao.com, DNS:taopiaopiao.com, DNS:*.fengchao.taobao.com, DNS:*.idestudio.taobao.com, DNS:*.zizhanghao.taobao.com, DNS:taobao.wang, DNS:*.alijk.taobao.com, DNS:*.prealihealth.taobao.com, DNS:*.tae.taobao.com, DNS:*.admin.dataserver.taobao.com, DNS:*.dian.taobao.com, DNS:*.pre-imdd.taobao.com, DNS:*.alisports.taobao.com, DNS:click.tz.simba.taobao.com, DNS:*.xreplay-service.taobao.com, DNS:*.aftool.taobao.com, DNS:*.robot.taobao.com, DNS:*.t.taobao.com, DNS:*.wangwang.taobao.com, DNS:*.pre-dchain-api-proxy.taobao.com, DNS:*.re.taobao.com, DNS:*.guanghe.taobao.com, DNS:*.video.taobao.com, DNS:*.bops.taobao.tw, DNS:*.dianshi.taobao.com, DNS:*.cro.taobao.com, DNS:*.wangxin.taobao.com, DNS:*.prada.taobao.com, DNS:*.settle.taobao.com, DNS:*.survey.taobao.com, DNS:*.sh.taobao.com, DNS:*.china.taobao.com, DNS:*.yunditan.taobao.com, DNS:*.einvoice.taobao.com, DNS:*.taobaolive.taobao.com, DNS:*.vip.taobao.com, DNS:s.ijipiao.trip.taobao.com, DNS:pac.partner.taobao.com, DNS:*.cloud.tmall.com, DNS:*.fuwuwebapp.taobao.com, DNS:pre-showcase.display.taobao.com, DNS:*.newgateway.taobao.com, DNS:*.olap.taobao.com, DNS:taobao.tw, DNS:*.mtop.taobao.com, DNS:*.onepub.taobao.com, DNS:*.auks.m.taobao.com, DNS:*.di.taobao.com, DNS:*.hi.taobao.com, DNS:*.onetake.taobao.com, DNS:*.admin.taobao.com, DNS:*.detail.taobao.com, DNS:*.mpop.taobao.com, DNS:*.ct-proxy.taobao.com, DNS:*.istore.taobao.com, DNS:*.xue.taobao.com, DNS:*.baichuan.taobao.com, DNS:*.pre1-sale.taobao.com, DNS:*.pre4-sale.taobao.com, DNS:showcase.display.taobao.com, DNS:*.pre-sale.taobao.com, DNS:taobao.cn, DNS:*.settle.simba.taobao.com, DNS:*.webappp.taobao.com, DNS:*.app.taobao.com, DNS:*.hot.taobao.com, DNS:*.lz.taobao.com, DNS:gsp.mystg.taobao.com, DNS:*.now.taobao.com, DNS:*.ow.taobao.com, DNS:*.ml.taobao.com, DNS:*.xconsultant-gateway.taobao.com, DNS:*.api.m.taobao.com, DNS:*.bcctg.taobao.com, DNS:*.meteor.taobao.com, DNS:*.sale.taobao.com, DNS:*.taoshehui.taobao.com, DNS:*.media.taobao.com, DNS:*.cun.taobao.com, DNS:*.farming.taobao.com, DNS:*.taowoyao.taobao.com, DNS:*.rate.taobao.com, DNS:*.deviceplat.taobao.com, DNS:*.site.taobao.com, DNS:*.view.taobao.com, DNS:*.marketingbox.taobao.com, DNS:*.taobao.tw, DNS:*.livex.taobao.com, DNS:*.alimebot.taobao.tw, DNS:*.gds.taobao.com, DNS:*.trip.taobao.com, DNS:*.chuangyi.taobao.com, DNS:*.uland.taobao.com, DNS:*.ipfans.taobao.com, DNS:*.trade.tw.taobao.com, DNS:*.airec.taobao.com, DNS:*.miaojie.taobao.com, DNS:*.operate.taobao.com, DNS:*.ww.taobao.com, DNS:*.sec.taobao.com, DNS:*.try.taobao.com, DNS:*.log.taobao.com, DNS:*.alscad.taobao.com, DNS:*.homestyler.taobao.com, DNS:*.cloud.taobao.com, DNS:*.merchant.taobao.com, DNS:pre-i.i.taobao.com, DNS:*.content.taobao.com, DNS:*.zhichui.taobao.com, DNS:*.crm.taobao.com, DNS:*.oto.taobao.com, DNS:*.waptest.taobao.com, DNS:*.pinpai.taobao.com, DNS:*.api.taobao.com, DNS:*.m2.taobao.com, DNS:*.smartdata.taobao.com, DNS:*.cdn.taobao.com, DNS:*.seller.taobao.com, DNS:*.wapa.taobao.tw, DNS:*.tv.taobao.com, DNS:*.qianniu.taobao.com, DNS:*.pre2-sale.taobao.com, DNS:*.dd.taobao.com, DNS:*.dev1.taobao.com, DNS:*.ershou.taobao.com, DNS:*.microapp-dmp.taobao.com, DNS:*.pre-tcgw.taobao.com, DNS:tmatch.simba2.taobao.com, DNS:*.lingshou.taobao.com, DNS:*.shell.taobao.com, DNS:click.mz.simba.taobao.com, DNS:*.meta-search.taobao.com, DNS:*.daxue.taobao.com, DNS:*.upload.taobao.com, DNS:*.morse.taobao.com, DNS:*.timesheet.taobao.com, DNS:*.apitest.taobao.com, DNS:*.aistore.taobao.com, DNS:*.image.taobao.com, DNS:*.open.taobao.com, DNS:*.simba.taobao.com, DNS:*.havana.taobao.com, DNS:*.baoxian.taobao.com, DNS:*.juadmin.taobao.com, DNS:*.temai.taobao.com, DNS:xiami.com, DNS:*.click.taobao.com, DNS:*.virtualbuy.taobao.com, DNS:*.astore-multitenant.taobao.com, DNS:*.click.taobao.tw, DNS:s.jipiao.trip.taobao.com, DNS:*.fc.taobao.com, DNS:*.huyan.taobao.com, DNS:*.cps.taobao.com, DNS:*.gongyi.taobao.com, DNS:*.mts.taobao.com, DNS:*.saas.taobao.com, DNS:*.tjseller.taobao.com, DNS:*.dc.taobao.com, DNS:*.brand.taobao.com, DNS:*.linking-test.taobao.com, DNS:*.secondlife.taobao.com, DNS:*.cms.m.taobao.com, DNS:*.online.taobao.com, DNS:*.sellercenter.taobao.com, DNS:*.moqie.taobao.com, DNS:*.global.taobao.com, DNS:*.dchain.taobao.com, DNS:*.m3.taobao.com, DNS:*.bcfeedback.taobao.com, DNS:*.sellercenter-staging.taobao.tw, DNS:*.work.taobao.com, DNS:*.buildsite.taobao.com, DNS:*.sopapi.taobao.com, DNS:*.pmsaas.taobao.com, DNS:*.scm.taobao.com, DNS:pre-cambridge.decoration.taobao.com, DNS:*.imdd.taobao.com, DNS:*.taotv.taobao.com, DNS:*.astore-alsc-l100crm.taobao.com, DNS:unszyun.api-xspace.taobao.com, DNS:*.rta.taobao.com, DNS:*.tjb.taobao.com, DNS:*.caipiao.taobao.com, DNS:ugc.pre.taobao.com, DNS:*.qc.taobao.com, DNS:*.speech.taobao.com, DNS:*.branding.taobao.com, DNS:*.stadium.taobao.com, DNS:*.m.taobao.com, DNS:*.shopsearch.taobao.com, DNS:*.lbs.taobao.com, DNS:*.xp.taobao.com, DNS:*.train.taobao.com, DNS:*.fliggy.taobao.com, DNS:*.mkt.taobao.com, DNS:*.faasonasi.taobao.com, DNS:*.service.taobao.com, DNS:*.search.taobao.com, DNS:*.debug.taobao.com, DNS:*.yun.taobao.com, DNS:*.browser.taobao.com, DNS:*.zb.taobao.com, DNS:*.publish.taobao.com, DNS:*.ju.taobao.com, DNS:*.life.taobao.com, DNS:*.polaris.taobao.com, DNS:*.fngroup.taobao.com, DNS:*.homeai.taobao.com, DNS:*.bbs.taobao.com, DNS:*.ai.taobao.com, DNS:*.wt.taobao.com, DNS:*.yunos-tv.taobao.com, DNS:*.m1.taobao.com, DNS:*.alidetail.taobao.com, DNS:*.ut.taobao.com, DNS:*.manager.taobao.com, DNS:*.wuliu.taobao.com, DNS:*.oversea.taobao.com, DNS:*.analysis.taobao.com, DNS:*.pbx.taobao.com, DNS:*.air-inner.taobao.com, DNS:*.goofishsolution.taobao.com, DNS:*.paimai.taobao.com, DNS:*.taopiaopiao.com, DNS:*.prepub.taobao.tw, DNS:*.xiami.com, DNS:*.alicom.taobao.com, DNS:*.mcache.taobao.com, DNS:*.we.taobao.com, DNS:*.pay.taobao.com, DNS:*.ws-nextbi.taobao.com, DNS:*.advgateway.taobao.com, DNS:*.badcase-es-old.taobao.com, DNS:*.taolive-cp.taobao.com, DNS:*.wow-share.taobao.com, DNS:*.crm-daxue.taobao.com, DNS:*.passport.taobao.com, DNS:*.dongfeng.taobao.com, DNS:*.sycm.taobao.com, DNS:*.tjb-sycm.taobao.com, DNS:*.uz.taobao.com, DNS:*.pre3-sale.taobao.com, DNS:*.hellobixi.taobao.com, DNS:*.sz.taobao.com, DNS:*.lazada.taobao.com, DNS:*.alime.taobao.com, DNS:*.bot.taobao.com, DNS:*.proxy.taobao.com, DNS:*.3hours.taobao.com, DNS:*.elm.taobao.com, DNS:*.amp.taobao.com, DNS:*.ump.taobao.com, DNS:*.sycm.sycm.taobao.com, DNS:*.pan.taobao.com, DNS:*.tw.taobao.com, DNS:*.s.taobao.com, DNS:*.progress-center.taobao.com, DNS:*.shop.taobao.com, DNS:*.need.taobao.com, DNS:*.ny.taobao.com, DNS:*.o2o.taobao.com, DNS:*.alidesign.taobao.com, DNS:*.config.taobao.com, DNS:*.youku.taobao.com, DNS:*.tejia.taobao.com, DNS:pre-unszyun.api-xspace.taobao.com, DNS:*.tcgw.taobao.com, DNS:*.mtdata.taobao.com, DNS:*.alihealth.taobao.com, DNS:*.haoxue.taobao.com, DNS:*.litetao.taobao.com, DNS:*.virtual.taobao.com, DNS:*.luban.taobao.com, DNS:*.test.taobao.com, DNS:taobao.com
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
X509v3 Subject Key Identifier:
C6:04:65:EC:5A:E3:20:61:C9:DB:9B:92:01:D8:DA:65:40:3A:37:D5
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : May 6 09:06:11.592 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:C4:3C:A6:7E:97:FE:F1:F2:6F:E2:83:
8E:14:5F:A9:71:68:51:43:77:2F:FE:89:5F:8A:63:08:
51:C8:46:14:07:02:21:00:F8:2A:FE:B2:18:73:FD:C3:
B3:76:0F:C6:C9:97:F7:38:5B:4D:E5:DB:36:CA:71:51:
64:C7:52:E3:60:97:38:AE
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : May 6 09:06:11.583 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:47:21:C6:0C:75:A1:D2:37:DA:F5:F3:81:
64:FF:B5:BE:0E:74:64:10:63:4A:EA:68:FB:B7:B8:C3:
6E:E5:5F:08:02:20:49:00:94:33:02:03:FD:AF:1A:AD:
DE:B2:4C:44:DA:B5:49:36:7A:C1:28:39:B1:75:0E:0F:
24:2B:60:42:37:7B
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : May 6 09:06:11.614 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:82:D3:27:8E:A6:80:08:E9:7E:7A:48:
0D:BD:5F:55:70:62:10:82:68:8B:E2:88:B8:1D:97:FE:
6A:BD:F5:04:7E:02:20:14:BA:CF:BB:66:F2:68:0A:3B:
C9:48:61:EA:62:CB:6D:23:3D:8A:6B:EA:29:F9:48:7C:
90:51:BA:47:49:93:37
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
8e:d1:e6:0f:f3:9c:d8:31:c1:ac:de:a8:fe:26:f6:ab:05:3b:
15:8e:ae:65:b0:d3:d3:5d:26:9e:32:03:4a:e6:d7:90:5c:9e:
9b:1e:e2:5e:73:c2:06:a3:24:28:55:31:32:8e:53:c0:e9:19:
da:45:2b:1d:e8:a2:14:33:9a:ae:ad:ae:c0:65:1b:48:11:83:
f2:05:69:d6:a6:b8:e0:43:ee:d4:70:13:22:32:45:4b:a6:22:
45:32:0d:6d:1e:af:23:f7:4c:bb:1f:0a:f1:09:7a:11:0f:2c:
af:cc:54:9f:50:37:79:73:b6:df:9b:8c:f4:33:56:f0:77:3e:
e1:90:77:0f:53:4e:7a:20:20:7a:d7:da:5a:99:d9:a3:05:3f:
12:4e:7c:f1:cc:5d:ce:ef:06:5d:47:ea:7c:b2:ab:35:1d:7d:
57:b8:60:fa:74:17:9b:55:a5:e6:63:66:c4:78:5c:14:9b:fa:
dd:12:b3:25:45:91:34:26:5e:e1:78:63:b3:69:ea:c9:26:19:
4d:90:f7:e3:a9:d2:00:cd:1a:8a:35:d3:ff:04:3b:81:0e:94:
10:a7:65:cf:a1:d0:49:cc:26:0e:c0:c1:5b:05:46:62:8b:d5:
2d:2f:ca:a2:ab:d7:30:1d:dc:e7:5e:66:f9:45:8a:db:a3:be:
6e:3b:54:ea
1784655164 | 2024-12-06T23:08:56.866119
444 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Fri, 06 Dec 2024 23:08:56 GMT
Content-Type: text/html
Content-Length: 157
Connection: close
<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>
677934968 | 2024-12-28T19:12:16.712113
515 /
tcp
-1724505569 | 2024-12-15T03:15:21.024251
541 /
tcp
\\x16\\x03\\x01\\x018\\x01\\x00\\x014\\x03\\x03\\x92\\xbc;\\xc1\'-E\\xf4\\xde82\\x93\\x93 \\xabY\\xcd&\\xc3%\\xcco\\xda^\\xef\\xc2!Ut\\xbe\\xb8\\xb6 \\x0f\\xeb\\x00\\xe7b5\\xaf\\xea>/\\xa0{\\xd6\\x8b\r\t\\x85\\xbd\\x06\xc9\x9bH\\x8f\\x85?~\\xbbGdz9\\xf4\\x00"\\x13\\x02\\x13\\x03\\x13\\x01\\x00k\\x00=\\xc00\\xc0,\\xc
-773160241 | 2024-12-27T06:42:28.624599
548 /
tcp
Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: Yes\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: Yes\nCopy File: Yes\nServer Name: murphys-airport-time-capsule\nMachine Type: \\x10TimeCapsule8,119\nAFP Versions: AFP3.3, AFP3.2, AFP3.1\nUAMs: DHCAST128\\x04,DHX2\\x03,SRP\\x06,Recon1C\nServer Signature: 4338365332344c58463948350069672d
1060450357 | 2024-12-15T01:03:55.373287
554 /
tcp
RTSP/1.0 200 OK
CSeq: 1
Keep-Alive: timeout=10, max=1000
Public: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, SET_PARAMETER, GET_PARAMETER
Connection: Keep-Alive
-1805329632 | 2024-12-06T18:41:23.364664
593 /
tcp
HTTP/1.1 200 OK
Server: nginx/1.13.7
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes
1300162323 | 2024-12-20T15:57:41.095066
666 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
1077013874 | 2024-12-06T20:29:01.100026
675 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
-1428621233 | 2024-12-23T20:03:41.246013
789 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
-1598265216 | 2024-12-21T11:32:06.221054
873 /
tcp
-1256415508 | 2024-12-10T16:00:03.475693
880 /
tcp
HTTP/1.1 404 Not Found
Server: TornadoServer/6.1
Content-Type: text/html; charset=UTF-8
410249975 | 2024-12-26T03:23:06.824298
1023 /
tcp
1911457608 | 2024-12-23T17:24:51.575470
1025 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1278527606 | 2024-12-27T11:16:33.932822
1063 /
tcp
1362344524 | 2024-12-27T11:07:13.788645
1080 /
tcp
SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7
-1610565256 | 2024-12-14T01:55:30.827311
1119 /
tcp
HTTP/1.1 200 OK
Content-Type: text/html;charset=iso-8859-1
Server: Apache/2.4.52 (Ubuntu) OpenSSL/3.0.2
971933601 | 2024-12-25T09:36:24.625822
1153 /
tcp
HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html
-1999117212 | 2024-12-06T23:14:23.699962
1177 /
tcp
996960436 | 2024-11-28T21:55:59.049177
1337 /
tcp
-182670276 | 2024-12-27T22:15:05.750409
1433 /
tcp
MSSQL Server\nVersion: 171050560 (0xa320640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: IZJ6FUBS9PLYUOZ\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: IZJ6FUBS9PLYUOZ\nNetBIOS_Computer_Name: IZJ6FUBS9PLYUOZ\nDNS_Domain_Name: iZj6fubs9plyuoZ\nDNS_Computer_Name: iZj6fubs9plyuoZ\nSystem_Time: 2024-01-22 03:53:09 +0000 UTC\n\n
-1715152554 | 2024-12-25T23:40:08.428196
1443 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Wed, 25 Dec 2024 23:40:08 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://140.205.70.175:443/
171352214 | 2024-12-25T17:43:31.777083
1515 /
tcp
-ERR client ip is not in whitelist
-186520940 | 2024-12-28T18:31:02.223947
1521 /
tcp
-1316398834 | 2024-12-25T21:44:55.286056
1604 /
tcp
-1299899661 | 2024-12-22T14:16:23.464517
1801 /
tcp
\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x97W\\xcd[\\x98\\xc4\\x1aJ\\xa5\xd1\xbf\\xf9\\xbd\\xc7\\xce\\xfd92d3\\x10\\x01\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
-2031152423 | 2024-12-14T02:20:53.000515
1883 /
tcp
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
165188539 | 2024-12-26T18:52:57.514861
1911 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1888448627 | 2024-12-27T01:13:11.206713
1962 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
1948301213 | 2024-12-15T12:44:25.031774
2002 /
tcp
RFB 003.003
VNC:
Protocol Version: 3.3
1975288991 | 2024-12-23T06:28:50.144448
2003 /
tcp
-1032713145 | 2024-12-21T17:39:01.005314
2018 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1
1911457608 | 2024-12-07T06:38:00.243955
2087 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1308377066 | 2024-12-06T09:08:28.878605
2250 /
tcp
-893477759 | 2024-12-28T03:30:49.743066
2332 /
tcp
!versionbind7 t{RPowerDNS Recursor 410
321971019 | 2024-12-25T16:08:10.637126
2345 /
tcp
-ERR client ip is not in whitelist\r
-792826324 | 2024-12-24T12:33:45.943365
2376 /
tcp
220 FTP server ready - login please
1762042191 | 2024-12-26T05:05:23.610278
2404 /
tcp
820958131 | 2024-12-17T20:49:49.994796
2762 /
tcp
kjnkjabhbanc283ubcsbhdc72\x02
-1428621233 | 2024-12-23T18:19:48.027835
3001 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
-2089734047 | 2024-12-18T06:36:15.884784
3050 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-457235091 | 2024-12-05T23:01:05.920962
3066 /
tcp
audio 0 RTP/AVP 18 4 3 8 0 101\r\na
1655023012 | 2024-12-12T01:56:15.508371
3260 /
tcp
athinfod: invalid query.\n
-805362002 | 2024-12-07T18:24:22.694918
3268 /
tcp
ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225
1741579575 | 2024-12-13T16:29:25.667192
3299 /
tcp
1830187220 | 2024-12-25T11:42:12.598849
3301 /
tcp
\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->
-1036944024 | 2024-12-26T21:13:00.147674
3306 /
tcp
F\\x00\\x00\\x00\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MySQL server
819727972 | 2024-12-27T12:28:58.553915
3388 /
tcp
1131713579 | 2024-12-09T16:30:22.885701
3389 /
tcp
Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x0f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: WL1BHKUZNIYOEK1\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: WL1BHKUZNIYOEK1\nNetBIOS_Computer_Name: WL1BHKUZNIYOEK1\nDNS_Domain_Name: wl1bhkuzniyoek1q\nDNS_Computer_Name: wl1bhkuzniyoek1q\nSystem_Time: 2024-01-22 08:40:53 +0000 UTC\n\n
-1810987450 | 2024-12-08T00:08:33.275011
3400 /
tcp
1911457608 | 2024-12-27T05:33:19.370457
3405 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
639175818 | 2024-12-28T04:57:08.503443
3412 /
tcp
\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n
60948681 | 2024-12-18T19:52:57.918225
3780 /
tcp
lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).
1911457608 | 2024-12-26T09:50:55.944310
3952 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-801484042 | 2024-12-18T21:49:48.624235
4000 /
tcp
-1327660293 | 2024-12-21T23:04:29.431062
4001 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
-1399940268 | 2024-11-29T22:33:53.529377
4022 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
660175493 | 2024-11-30T06:13:13.840367
4063 /
tcp
-1399940268 | 2024-12-09T15:12:38.794217
4064 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1353260875 | 2024-12-06T08:59:53.568795
4150 /
tcp
\x00[g\xc2\x95N\x7f\x00\x00
1911457608 | 2024-12-28T15:00:19.209920
4200 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1879056922 | 2024-12-13T02:54:44.678376
4242 /
tcp
HTTP/1.1 403 Forbidden
Server: Apache/2.4.41 (Unix) OpenSSL/1.1.1d TST PHP/7.3.11
Content-Type: text/plain; charset=utf-8
Connection: close
-1250504565 | 2024-12-25T06:19:49.757039
4321 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01
-1248408558 | 2024-12-17T19:53:18.852097
4369 /
tcp
220 MikroTik FTP server (MikroTik 6.44.3) ready
-786044033 | 2024-12-24T13:01:32.778914
4433 /
tcp
OK Welcome <299685> on DirectUpdate server 7286
539065883 | 2024-12-20T14:58:53.634879
4434 /
tcp
141533638 | 2024-12-24T22:10:47.441351
4443 /
tcp
HTTP/1.1 302 Found
Location: /index.html
2087396567 | 2024-12-19T18:26:21.337201
4506 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1399940268 | 2024-12-18T21:15:54.430170
4734 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
597764502 | 2024-12-24T13:43:12.289572
4786 /
tcp
\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00
-971970408 | 2024-12-21T11:22:27.844399
4899 /
tcp
-1839934832 | 2024-12-25T15:08:50.834697
4911 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-1392039491 | 2024-12-03T04:25:33.307263
5001 /
tcp
"Broadband Router"
<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad
-1839934832 | 2024-12-21T16:44:32.078166
5006 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-904840257 | 2024-12-08T16:42:07.318891
5007 /
tcp
572 Relay not authorized\r\n
1182822286 | 2024-12-27T16:06:14.106090
5009 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae237b_dianxun172_7460-1469
819727972 | 2024-12-25T16:13:09.761446
5025 /
tcp
-971970408 | 2024-12-28T07:25:41.009632
5172 /
tcp
1911457608 | 2024-12-24T20:54:34.949430
5201 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1327660293 | 2024-12-20T09:40:03.134610
5435 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
1011407350 | 2024-12-18T03:51:29.705149
5568 /
tcp
* OK GroupWise IMAP4rev1 Server Ready\r\n
-2089734047 | 2024-12-24T17:50:34.838452
5598 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1839934832 | 2024-12-23T20:50:39.499628
5604 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-303199180 | 2024-12-20T19:34:37.767974
5605 /
tcp
Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n
996960436 | 2024-12-27T15:12:59.326526
5858 /
tcp
-1399940268 | 2024-12-08T23:29:51.514724
5938 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
996960436 | 2024-12-11T18:02:20.901526
5986 /
tcp
120534451 | 2024-12-20T18:32:59.913018
6001 /
tcp
-1681927087 | 2024-12-23T20:07:32.440287
6002 /
tcp
kjnkjabhbanc283ubcsbhdc72
321971019 | 2024-12-28T13:51:06.556448
6379 /
tcp
-ERR client ip is not in whitelist\r
165188539 | 2024-12-13T12:54:39.700843
6511 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
1762042191 | 2024-12-21T04:14:12.295811
6550 /
tcp
372433470 | 2024-12-26T02:59:03.712779
6666 /
tcp
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""
1996932384 | 2024-12-26T04:50:06.078610
6667 /
tcp
-1795027372 | 2024-12-08T10:37:55.846722
6668 /
tcp
\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:
-829704895 | 2024-12-26T21:36:15.293507
7001 /
tcp
2087396567 | 2024-12-27T18:30:44.222938
7071 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1471513798 | 2024-12-27T19:19:36.632764
7218 /
tcp
1636811864 | 2024-12-08T10:32:11.632502
7434 /
tcp
328982367 | 2024-12-14T22:57:33.738466
7443 /
tcp
HTTP/1.1 302 Found
Server: Apache/2.4.57 (Debian)
Strict-Transport-Security: max-age=15552000; includeSubDomains
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow
X-XSS-Protection: 1; mode=block
X-Powered-By: PHP/8.2.9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: https://mcchatgp.synology.me:7443/login
Content-Typ
-1204391172 | 2024-12-12T05:16:07.581226
8000 /
tcp
-971970408 | 2024-12-11T22:43:47.389459
8002 /
tcp
104385780 | 2024-12-23T19:14:59.361955
8009 /
tcp
-1399940268 | 2024-12-08T21:01:50.026257
8012 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
2087396567 | 2024-12-26T15:47:27.254334
8081 /
tcp
kjnkjabhbanc283ubcsbhdc72
2087396567 | 2024-12-11T23:27:39.745508
8083 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1760806421 | 2024-12-28T06:22:46.479450
8085 /
tcp
protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected
-2118655245 | 2024-12-18T06:52:27.788620
8123 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
1741579575 | 2024-11-29T05:53:39.647265
8126 /
tcp
-2033111675 | 2024-12-18T11:14:58.384938
8139 /
tcp
1690634669 | 2024-12-10T10:14:00.401387
8140 /
tcp
1426971893 | 2024-12-12T18:13:19.858369
8190 /
tcp
\x00[s\xc3\x85\xc3\x93\x7f\x00\x00
618338916 | 2024-12-07T23:21:30.086765
8200 /
tcp
HTTP/1.1 302 Found
Connection: Keep-Alive
Transfer-Encoding: chunked
Keep-Alive: timeout=20
Location: /cgi-bin/luci/
-407828767 | 2024-12-06T03:59:44.630347
8291 /
tcp
\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00
1504401647 | 2024-12-23T23:03:06.016722
8401 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n
1011407350 | 2024-12-12T01:35:49.872996
8432 /
tcp
* OK GroupWise IMAP4rev1 Server Ready\r\n
882178274 | 2024-12-18T18:55:23.400020
8443 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Wed, 18 Dec 2024 18:55:23 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://140.205.70.175:443/
<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>
-2107996212 | 2024-12-19T22:24:30.845254
8554 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
-1099385124 | 2024-12-15T19:00:59.967037
8586 /
tcp
"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac
-1899074860 | 2024-12-23T15:14:08.526664
8728 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n
2063598737 | 2024-12-07T01:02:48.964085
8816 /
tcp
-1399940268 | 2024-12-23T12:42:00.120799
8825 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
2087396567 | 2024-12-23T06:26:59.331113
8834 /
tcp
kjnkjabhbanc283ubcsbhdc72
334289483 | 2024-12-24T21:33:12.757174
8849 /
tcp
Invalid request string: Request string is: "\r"
-784071826 | 2024-11-30T12:20:24.024501
8851 /
tcp
-146605374 | 2024-12-18T09:12:31.509838
8889 /
tcp
\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00
372433470 | 2024-12-13T23:55:10.270981
8899 /
tcp
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""
-2067028711 | 2024-12-20T23:34:48.945023
9000 /
tcp
\x15\x03\x01\x00\x02\x02F
-1026951088 | 2024-12-12T17:07:52.239178
9001 /
tcp
2087396567 | 2024-12-20T21:55:19.813946
9002 /
tcp
kjnkjabhbanc283ubcsbhdc72
1632932802 | 2024-12-23T09:01:36.989920
9020 /
tcp
-1399940268 | 2024-12-28T03:20:49.039684
9029 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1888448627 | 2024-12-25T02:44:06.454316
9042 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
639175818 | 2024-12-23T14:10:59.042607
9082 /
tcp
\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n
1911457608 | 2024-12-27T19:05:14.478601
9092 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
819727972 | 2024-11-29T16:31:27.794414
9095 /
tcp
-1399940268 | 2024-12-22T02:37:20.944669
9100 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1476017887 | 2024-12-07T12:08:33.606948
9303 /
tcp
N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n
819727972 | 2024-12-20T21:58:00.492609
9306 /
tcp
114471724 | 2024-12-09T11:28:44.577577
9398 /
tcp
HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX
-1399940268 | 2024-12-12T00:38:20.950982
9530 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
165188539 | 2024-12-13T23:45:49.838841
9600 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
1327134490 | 2024-12-21T19:42:49.094036
9633 /
tcp
334289483 | 2024-12-08T18:02:05.317387
9761 /
tcp
Invalid request string: Request string is: "\r"
-1451615933 | 2024-12-28T12:08:45.094589
9876 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705941912.469-s5jhg
751610770 | 2024-12-10T19:08:21.568461
9943 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2938_PS-000-01Mba83_19552-63826
-328903379 | 2024-12-27T06:24:09.948440
9998 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2516_PStwtbTPE1rg71_39907-39996
1161309183 | 2024-12-15T22:31:20.372884
9999 /
tcp
-971970408 | 2024-12-24T10:18:31.608960
10000 /
tcp
-2080784861 | 2024-12-09T21:18:39.528621
10050 /
tcp
GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00
-971970408 | 2024-12-09T19:00:50.665380
10051 /
tcp
-375604792 | 2024-12-23T04:47:37.609034
10134 /
tcp
220 Microsoft FTP Service
660175493 | 2024-12-14T21:12:21.310819
10554 /
tcp
1655023012 | 2024-12-28T09:43:38.118188
10909 /
tcp
athinfod: invalid query.\n
1011407350 | 2024-12-23T19:12:29.456993
10911 /
tcp
* OK GroupWise IMAP4rev1 Server Ready\r\n
-1428621233 | 2024-12-07T22:16:52.564578
11000 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
-2107996212 | 2024-12-02T19:05:38.291698
11112 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
1911457608 | 2024-12-27T20:53:16.916194
11210 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-136006866 | 2024-12-05T19:04:46.567309
11211 /
tcp
STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND
921225407 | 2024-12-23T13:58:18.452278
11288 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
1996932384 | 2024-12-17T22:16:23.694587
11300 /
tcp
296364507 | 2024-12-21T19:23:42.927239
12345 /
tcp
HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html
-904840257 | 2024-12-21T16:00:46.158873
14147 /
tcp
572 Relay not authorized\r\n
-1888448627 | 2024-12-22T00:56:37.016723
14344 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
819727972 | 2024-12-14T14:11:28.181323
16010 /
tcp
2087396567 | 2024-12-14T13:29:46.170737
16464 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1840324437 | 2024-12-14T12:51:17.201660
16992 /
tcp
1690634669 | 2024-12-15T00:34:34.016334
16993 /
tcp
-1399940268 | 2024-12-21T17:19:46.469538
18081 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2024-12-18T06:55:32.700610
18245 /
tcp
-1013082686 | 2024-12-14T10:12:28.823346
19000 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain
1842524259 | 2024-12-14T17:22:22.711087
19200 /
tcp
1900503736 | 2024-12-14T13:50:12.106876
20000 /
tcp
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0
1911457608 | 2024-12-27T21:37:57.446458
20547 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1370263973 | 2024-12-18T08:38:31.984917
20880 /
tcp
-792826324 | 2024-12-27T02:58:21.863732
21025 /
tcp
220 FTP server ready - login please
-1839934832 | 2024-12-14T15:34:29.800701
22070 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
1741579575 | 2024-12-11T18:58:12.435665
22556 /
tcp
-971970408 | 2024-12-14T08:02:12.363306
23023 /
tcp
819727972 | 2024-12-19T21:58:50.155730
25001 /
tcp
671605376 | 2024-12-19T12:29:02.258333
25565 /
tcp
819727972 | 2024-12-25T21:07:39.090530
27015 /
tcp
-358801646 | 2024-12-13T23:35:32.629347
27036 /
tcp
1208318993 | 2024-12-23T07:51:43.421402
28015 /
tcp
\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01
171352214 | 2024-12-10T22:18:25.438883
28080 /
tcp
-ERR client ip is not in whitelist
1632932802 | 2024-12-20T12:20:03.135650
30002 /
tcp
410249975 | 2024-12-15T06:59:43.028366
30003 /
tcp
660175493 | 2024-12-09T08:49:33.378216
30322 /
tcp
1852418385 | 2024-12-08T22:53:09.548345
30822 /
tcp
RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ
1286504516 | 2024-12-08T18:52:46.471728
31022 /
tcp
CP2E Control Console
Connected to Host: gZI
-1992519278 | 2024-12-07T13:14:12.473190
31337 /
tcp
\xc3\xbf\xc3\xbb\\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->
-527005584 | 2024-12-08T03:08:21.653366
31822 /
tcp
-971970408 | 2024-12-07T21:14:43.328076
32122 /
tcp
1544300041 | 2024-12-07T19:26:56.370859
32222 /
tcp
SSH-25453-Cisco-3524665.35
1004056929 | 2024-12-07T15:14:59.033081
32422 /
tcp
Invalid request string: Request string is: "
"
1492413928 | 2024-12-07T11:20:01.701053
32622 /
tcp
1267517148 | 2024-12-24T15:19:53.382182
32764 /
tcp
= Àÿÿ?"<Z DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6
-445721795 | 2024-12-23T20:53:59.244680
33060 /
tcp
\x00[\xc3\xaed\x1a\x7f\x00\x00
-786044033 | 2024-12-07T01:31:33.373500
33122 /
tcp
OK Welcome <299685> on DirectUpdate server 7286
-971970408 | 2024-12-06T23:24:40.915300
33222 /
tcp
740837454 | 2024-12-06T13:19:51.478490
33822 /
tcp
-971970408 | 2024-12-06T11:52:51.396470
33922 /
tcp
1741579575 | 2024-12-05T22:55:03.026843
34522 /
tcp
819727972 | 2024-12-05T21:33:59.202796
34622 /
tcp
1996932384 | 2024-12-05T17:33:59.879542
34822 /
tcp
-2096652808 | 2024-12-24T14:41:33.808839
35000 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-222277909 | 2024-12-05T09:59:07.702459
35222 /
tcp
2087396567 | 2024-12-13T18:04:01.145337
37215 /
tcp
kjnkjabhbanc283ubcsbhdc72
-358801646 | 2024-12-03T19:14:44.896061
37322 /
tcp
-2089734047 | 2024-12-23T00:28:58.940175
37777 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1032713145 | 2024-12-02T21:59:32.429880
38422 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1
1208318993 | 2024-12-02T20:09:10.443572
38522 /
tcp
\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01
89282912 | 2024-11-30T19:56:39.009791
41122 /
tcp
220 VMware Authentication Daemon Version 1.0, ServerDaemonProto
col:SOAP, MKSDisplayProtocol:VNC , ,
-1810987450 | 2024-11-30T17:58:18.327960
41222 /
tcp
-1730858130 | 2024-11-30T07:14:35.161032
41822 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
-2096652808 | 2024-11-29T23:41:32.036844
42222 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1900404274 | 2024-11-29T20:00:47.779484
42422 /
tcp
-433302150 | 2024-12-08T12:28:12.199380
44158 /
tcp
-2089734047 | 2024-12-25T13:53:17.057190
44818 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
841014058 | 2024-12-22T17:37:08.129217
47990 /
tcp
Hello, this is FRRouting (version 4.0).
Copyright 19
96-2005 Kunihiro Ishiguro, et al.
Use...
819727972 | 2024-12-20T18:35:49.224989
48222 /
tcp
819727972 | 2024-12-20T20:00:30.271110
48922 /
tcp
1741579575 | 2024-12-13T13:16:10.663617
49153 /
tcp
-1872120160 | 2024-12-20T12:23:26.946669
49422 /
tcp
">Application and Content Networking Software 3.9</a>)
</BODY><
1741579575 | 2024-12-20T08:44:03.111281
49722 /
tcp
171352214 | 2024-12-17T18:33:14.670498
50000 /
tcp
-ERR client ip is not in whitelist
819727972 | 2024-12-20T10:56:45.559349
50022 /
tcp
1690634669 | 2024-12-13T11:08:40.803954
50050 /
tcp
-1888448627 | 2024-12-28T06:48:58.645596
50100 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-786044033 | 2024-12-20T11:44:48.273768
50222 /
tcp
OK Welcome <299685> on DirectUpdate server 7286
597764502 | 2024-12-20T08:08:54.033807
50322 /
tcp
\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00
2087396567 | 2024-12-20T02:05:45.063369
50722 /
tcp
kjnkjabhbanc283ubcsbhdc72
1282941221 | 2024-12-15T16:24:58.037036
51235 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
660175493 | 2024-12-20T00:36:57.272964
51322 /
tcp
-1441741890 | 2024-12-19T23:55:15.204265
51522 /
tcp
220 corpease.net Anti-spam GT for Coremail System (icmhosting[2
0181212])
819727972 | 2024-12-19T23:15:32.562369
51822 /
tcp
-154107716 | 2024-12-19T21:16:48.503802
52022 /
tcp
220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
ABOR
ACCT
ADAT *
ALLO
APPE
AUTH
CCC
CDUP
CWD
DELE
ENC *
EPRT
EPSV
FEAT
HELP
HOST
LANG
LIST ...
2087396567 | 2024-12-19T17:43:35.685768
52122 /
tcp
kjnkjabhbanc283ubcsbhdc72
-971970408 | 2024-12-19T18:26:41.754153
52222 /
tcp
1996932384 | 2024-12-19T15:03:46.021564
52922 /
tcp
819727972 | 2024-12-19T12:24:31.058865
53222 /
tcp
-1990350878 | 2024-12-19T05:18:48.306278
54122 /
tcp
-358801646 | 2024-12-18T23:41:26.128744
54622 /
tcp
-222277909 | 2024-12-19T01:06:06.862420
54822 /
tcp
1620329124 | 2024-12-13T05:41:04.972028
54984 /
tcp
\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:
165188539 | 2024-12-26T22:52:22.689721
55000 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
819727972 | 2024-12-18T20:15:56.817261
55122 /
tcp
1492413928 | 2024-12-15T22:41:40.567843
55322 /
tcp
1690634669 | 2024-12-28T16:14:38.280187
55553 /
tcp
745343730 | 2024-12-18T18:24:16.102652
55554 /
tcp
220 smtp.qq.com Esmtp QQ Mail Server
2087396567 | 2024-12-18T19:03:12.689295
55622 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1900404274 | 2024-12-15T20:05:04.768496
55722 /
tcp
1984588611 | 2024-12-15T18:42:45.800619
55922 /
tcp
-1428621233 | 2024-12-18T18:12:14.121437
56022 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
841014058 | 2024-12-15T17:26:25.415838
56122 /
tcp
Hello, this is FRRouting (version 4.0).
Copyright 19
96-2005 Kunihiro Ishiguro, et al.
Use...
819727972 | 2024-12-15T16:01:34.369455
56322 /
tcp
-1730858130 | 2024-12-15T14:00:08.029512
56622 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
2033888749 | 2024-12-18T09:54:25.498956
56822 /
tcp
Content-Type: text/rude-rejection
Content-Length: 24
Access Denied, go away.
Content-Type: text/disconnect-notice
C...
1261582754 | 2024-12-15T11:09:51.384011
57022 /
tcp
unknown command
unknown command
841014058 | 2024-12-17T22:25:54.713453
57822 /
tcp
Hello, this is FRRouting (version 4.0).
Copyright 19
96-2005 Kunihiro Ishiguro, et al.
Use...
1842524259 | 2024-12-18T03:07:08.345465
58022 /
tcp
996960436 | 2024-12-15T02:19:48.107463
58322 /
tcp
597764502 | 2024-12-15T01:45:14.812515
58422 /
tcp
\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00
2087396567 | 2024-12-15T00:54:54.254122
58522 /
tcp
kjnkjabhbanc283ubcsbhdc72
472902042 | 2024-12-15T00:16:04.894895
58622 /
tcp
"Magic:ActiveMQ
Version:12
<ActiveMQ * TcpNoDelayEnabled SizePrefixDisabled CacheSize ProviderName ActiveMQ StackTraceEnabled PlatformDetails Java CacheEnabled TightEncodingEnabled MaxFrameSize @ MaxInac
1852418385 | 2024-12-17T21:39:04.592503
58822 /
tcp
RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ
-971970408 | 2024-12-14T23:32:39.465534
59022 /
tcp
1282941221 | 2024-12-17T19:06:35.322273
59122 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
2087396567 | 2024-12-09T05:14:19.333284
60129 /
tcp
kjnkjabhbanc283ubcsbhdc72
366084633 | 2024-12-11T07:58:32.922259
61616 /
tcp
<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>
1842317374 | 2024-12-18T02:13:21.537835
62078 /
tcp
/1.1 400 Bad Request
Server: nginx/1.13.0
Content-Type: text/html
Connection: close
-971970408 | 2024-12-10T01:47:23.277941
63210 /
tcp
1996932384 | 2024-12-23T15:16:40.214061
63256 /
tcp
-1399940268 | 2024-12-14T10:31:31.580071
63260 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2033111675 | 2024-12-13T00:22:06.299901
64738 /
tcp
