1077013874 | 2024-10-11T19:10:35.546981
11 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
1193556399 | 2024-10-11T12:50:16.866604
13 /
tcp
2033888749 | 2024-10-17T12:00:20.722946
15 /
tcp
Content-Type: text/rude-rejection
Content-Length: 24
Access Denied, go away.
Content-Type: text/disconnect-notice
C...
344087494 | 2024-10-01T01:58:02.647058
17 /
tcp
"When a stupid man is doing something he is ashamed of, he always declares
that it is his duty." George Bernard Shaw (1856-1950)
\x00
580340387 | 2024-10-11T06:23:42.359405
21 /
tcp
220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n ABOR \n ACCT \n ADAT *\n ALLO \n APPE \n AUTH \n CCC \n CDUP \n CWD \n DELE \n ENC *\n EPRT \n EPSV \n FEAT \n HELP \n HOST \n LANG \n LIST ...
460589547 | 2024-10-17T06:35:46.934095
23 /
tcp
-2031152423 | 2024-10-08T15:05:56.676064
25 /
tcp
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
1282941221 | 2024-10-08T19:37:04.788843
26 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
1092730853 | 2024-10-21T04:06:23.989598
37 /
tcp
-616720387 | 2024-10-18T20:48:00.422933
43 /
tcp
1160472910 | 2024-10-08T17:57:05.235821
49 /
tcp
\xc2\xa5A\\x01,\\x02L\\x08Connectx\\x0857222
1252359125 | 2024-10-13T10:03:23.957789
53 /
tcp
9
\x81\x05\x00\x01\x00\x00\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01
\x00\x06\x81\x05\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03
-2029556872 | 2024-10-18T15:08:29.921426
79 /
tcp
HTTP/1.1 200 OK
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
Content-Type: text/html
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Connection: Keep-Alive
Accept-Ranges: bytes
1911457608 | 2024-10-08T06:00:56.155039
87 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1763259671 | 2024-09-25T05:39:58.779108
90 /
tcp
{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n
1911457608 | 2024-10-22T04:20:36.191965
91 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
165188539 | 2024-10-11T22:02:34.946895
102 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
1543809371 | 2024-09-22T23:27:01.849276
104 /
tcp
220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])
-585940771 | 2024-10-05T19:37:15.815022
110 /
tcp
-1958992631 | 2024-10-18T19:54:21.562871
119 /
tcp
\\xd5\xca\xba\\xc5\\xc8\\xcf\xd6\xa4\xca\xa7\\xb0\\xdc ...\r\nIP \\xb5\\xd8\xd6\xb7: *.*.*.*\r\nMAC \\xb5\\xd8\xd6\xb7: \r\n\\xb7\\xfe\\xce\\xf1\\xb6\\xcb\xca\xb1\\xbc\\xe4: 2024-01-22 16:23:50\r\n\\xd1\\xe9\xd6\xa4\\xbd\\xe1\\xb9\\xfb: \\xce\\xde\xd0\xa7\\xd3\xc3\xbb\\xa7.
1483120365 | 2024-10-18T13:04:16.421180
135 /
tcp
\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: OP2\n IP2: 192.168.0.20\n IP3: 61.230.135.142\n IP4: 2001:b011:2006:c3ef:18c0:9e02:ef7:84c8\n\nNTLMSSP:\nTarget_Name: OP2\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: OP2\nNetBIOS_Computer_Name: OP2\nDNS_Domain_Name: OP2\nDNS_Computer_Name: OP2\nSystem_Time: 2024-01-22 07:10:42 +0000 UTC\n\nDCERPC Dump:\n4b112204-0e19-11d3-b42b-
575925250 | 2024-09-26T21:15:00.600078
175 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
-399606100 | 2024-10-06T16:10:12.601844
179 /
tcp
BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n
-1839934832 | 2024-09-29T09:05:32.464540
195 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
367914955 | 2024-09-29T00:12:39.228336
211 /
tcp
MudNames 77 - (C) 1997-2001 Ragnar Hojland Espinosa <ragnar@ragnar-hojland.com>\n\r
-1709030885 | 2024-10-01T16:05:53.708364
264 /
tcp
-1547976805 | 2024-09-27T10:59:13.752488
311 /
tcp
HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close
-1743283776 | 2024-10-10T21:33:08.381643
389 /
tcp
0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x04\\x04
1801635450 | 2024-10-18T20:38:02.025034
427 /
tcp
SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://127.0.0.1\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:ipmi\nservice:cdserver\nservice:fdserver\nservice:hdserver\nservice:adviser\nservice:lighttpd\nB://l:87/x\n\nResponse of service:ipmi SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n Lifetime: 65535\n URL: service:ipmi://(none):623\n Lifetime: 65535\n URL: service:ipmi://IEI9CC2C40E4251:623\n\n\nResponse of service:ipmi Attr
1477895078 | 2024-10-22T15:49:29.235067
444 /
tcp
HTTP/1.1 200 OK
Date: Tue, 22 Oct 2024 15:49:29 GMT
Content-Type: application/json
Content-Length: 1610
Connection: keep-alive
Ali-Swift-Global-Savetime: 1729612169
Eagleeye-Traceid: 5326f9a91fff1c053a0a1e7848
Eagleid: 5326f9a91fff1c053a0a1e7848
S_group: tao-session
S_ip: cd7cbf5b1229e6d78794ac251f3b961f
S_status: STATUS_SYS_ERR
S_tag: 285517416758535|352891769^|^^
S_tid: 5326f9a91fff1c053a0a1e7848
S_ucode: CN:CENTER
S_v: 1.3.4.0
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://extensions.uc.cn
Ufe-Result: A1
Via: live44.39live4[829,880,287-0,M], live72.live81[016,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Tue, 22 Oct 2024 15:49:29 GMT
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:49:b2:86:90:3c:9b:46:7a:60:5b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: May 5 06:21:16 2023 GMT
Not After : Jun 5 06:21:15 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:c7:cb:8c:48:08:48:af:89:01:66:08:4b:53:ed:
2a:fd:70:b2:61:40:46:9b:98:19:49:b9:9f:64:c8:
60:d6:2c:47:85:56:ca:c2:31:94:d2:3a:d3:c1:24:
91:c6:70:be:6f:53:3c:fb:ae:f2:e5:cf:3d:c5:6a:
95:ee:f3:5d:37:62:25:51:fb:69:dd:37:93:00:a3:
cf:dd:18:a9:af:5c:f7:6f:96:a2:92:27:65:21:92:
de:ff:c2:ec:d9:52:42:06:cd:84:44:20:f4:c1:15:
4b:13:27:c5:3d:f1:c3:e8:61:b2:41:f7:22:4d:3e:
08:20:b0:7c:b3:38:9c:ab:d6:fc:49:6b:b4:92:88:
16:2e:c7:62:23:33:43:a0:36:86:ca:80:8a:9e:b0:
73:01:50:54:33:06:4c:b9:a3:73:71:09:98:72:22:
6f:a7:9c:c3:3e:bd:ea:7f:57:dd:c2:d2:a0:85:21:
ae:a8:fb:16:d7:ef:a2:5b:8d:75:cf:b0:e5:cb:34:
78:cc:28:e6:27:13:6a:d4:96:f5:ac:de:f3:38:d5:
cc:7a:ba:c2:78:b9:5e:db:f8:2d:14:d1:4b:e0:6f:
31:e2:c9:5c:56:bd:31:2d:1c:94:d4:54:11:05:5f:
0f:54:cd:63:c3:98:af:33:c4:2e:ed:36:61:1a:66:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.aliyun.com, DNS:aliyun.com, DNS:hhgoi-dsd-dsd44826-80.gas-svr.ojibobo-ina.aon.alibaba-inc.com, DNS:ar-grivote-shore.ev-aentroj-1.aliyuncs.com, DNS:dotodorks-nonoger-ogi.dd.ojibobo-ina.aon.alibaba-inc.com, DNS:operate-api.yiupin.com, DNS:gd-dork.ojibobo-ina.aon.alibaba-inc.com, DNS:cn.aliyun.com, DNS:vot.ojibobo-ina.aon.alibaba-inc.com, DNS:pre-cockpit-test.aliyun.com, DNS:shop1432140437765.aliyun.com, DNS:gjon-3d.tmall.com, DNS:sell.xiangqing.taobao.com, DNS:gre-oah2.ojibobo-ina.aon.alibaba-inc.com, DNS:gre-stvdio.iot.aliyun.com, DNS:szrobotine.1688.com, DNS:dotaher.ojibobo-ina.aon.alibaba-inc.com, DNS:test-aenter.ojibobo-ina.aon.alibaba-inc.com, DNS:shog2a6250868e917.1688.com, DNS:solution.lazada.com.my, DNS:yjgts.aliyun.com, DNS:webim.lazada.com.my, DNS:regort.aliyun.com, DNS:shog36244836.taobao.com, DNS:login.portal.hemaos.com, DNS:lazada.cn, DNS:sts.og-northeost-1.aliyuncs.com, DNS:item.publish.tmall.com
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
46:8d:d5:3f:27:1b:ce:a8:1b:e1:d7:1b:99:f8:ca:ba:e6:33:
d1:64:df:65:bb:34:91:1c:f5:08:f9:18:d7:14:e0:9b:70:d0:
36:1b:c4:4d:88:bf:81:a5:6a:59:44:33:7e:99:66:01:99:5c:
84:0d:e1:af:44:a7:58:25:d7:77:98:62:08:e2:53:0e:d6:6c:
3a:d9:90:f6:ed:72:06:1a:2d:bb:d3:5f:c9:00:6f:48:c5:a7:
ea:2b:7b:42:0b:12:e3:be:cf:c6:f8:39:68:25:ff:e2:6d:67:
c2:13:29:7b:81:ea:67:83:66:b6:d2:e1:14:f1:45:75:0d:b5:
53:0f:32:5a:f3:4c:61:c0:d1:03:82:9f:b7:d0:a4:3c:92:da:
d1:28:c3:51:70:43:1e:aa:d8:51:76:4e:e7:5f:04:cb:56:c1:
b8:b4:22:e1:3d:87:85:ea:81:c1:3a:bc:12:68:ac:d1:28:1d:
ca:d0:cd:e8:be:62:34:62:2b:e8:d1:20:1e:c5:7c:9b:b2:41:
09:81:d9:6c:7c:9c:5b:f4:55:4a:b8:67:41:d1:f7:6f:ce:b2:
39:43:c2:5b:25:ec:08:67:51:51:b7:9c:85:40:27:eb:77:78:
4e:35:7c:19:a5:b6:1a:92:0e:06:9a:7c:67:88:46:74:71:21:
81:5f:47:41
504717326 | 2024-09-27T04:52:31.794586
447 /
tcp
897328069 | 2024-10-12T05:41:13.050222
465 /
tcp
220 mail.scott000.com ESMTP
432898218 | 2024-10-15T17:54:32.547173
502 /
tcp
Unit ID: 0
-- Slave ID Data: Unknown Error (Error)
-- Device Identification: Unknown Error (Error)
-1399940268 | 2024-10-14T00:01:57.609171
515 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1060450357 | 2024-10-10T15:28:51.911180
554 /
tcp
RTSP/1.0 200 OK
CSeq: 1
Keep-Alive: timeout=10, max=1000
Public: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, SET_PARAMETER, GET_PARAMETER
Connection: Keep-Alive
1308377066 | 2024-10-15T18:10:47.488507
593 /
tcp
-1036370807 | 2024-09-25T16:34:18.350343
636 /
tcp
1300162323 | 2024-10-14T04:12:10.432538
666 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
-1839934832 | 2024-10-14T18:00:25.991936
685 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
165188539 | 2024-10-13T20:55:25.395361
771 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
709622286 | 2024-10-12T15:16:44.487920
789 /
tcp
OK Welcome <299685> on DirectUpdate server 7286\r\n
1911457608 | 2024-10-22T05:56:18.551966
806 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-2004989248 | 2024-09-23T03:48:04.915900
843 /
tcp
<cross-domain-policy>\n <allow-access-from domain="*" to-po\nrts="*" />\n</cross-domain-policy>
-1970692834 | 2024-10-14T06:10:19.197535
873 /
tcp
@RSYNCD: 31.0\n@RSYNCD: EXIT\n
1956828827 | 2024-10-07T07:37:00.404063
902 /
tcp
220 VMware Authentication Daemon Version 1.10: SSL Required, Se
rverDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , , NFCSSL supported/t
-936692830 | 2024-10-16T05:46:19.725764
992 /
tcp
HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19
-1779118422 | 2024-10-18T14:46:48.036198
993 /
tcp
\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00
1685649979 | 2024-10-09T00:10:34.763173
995 /
tcp
-1399940268 | 2024-10-18T09:44:54.969071
1023 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2096652808 | 2024-10-11T01:45:23.914374
1025 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
819727972 | 2024-10-07T04:54:31.109717
1028 /
tcp
740837454 | 2024-10-16T07:55:39.557456
1029 /
tcp
580340387 | 2024-10-16T00:57:05.628225
1099 /
tcp
220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n ABOR \n ACCT \n ADAT *\n ALLO \n APPE \n AUTH \n CCC \n CDUP \n CWD \n DELE \n ENC *\n EPRT \n EPSV \n FEAT \n HELP \n HOST \n LANG \n LIST ...
-2089734047 | 2024-10-13T23:46:49.190867
1153 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
104385780 | 2024-10-09T16:44:22.344019
1177 /
tcp
819727972 | 2024-09-29T15:10:09.802214
1200 /
tcp
-358801646 | 2024-10-19T14:27:38.582179
1234 /
tcp
-1399940268 | 2024-10-10T11:33:58.359676
1414 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-186520940 | 2024-10-22T03:13:30.822623
1433 /
tcp
-1715152554 | 2024-09-30T08:19:05.443881
1443 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Mon, 30 Sep 2024 08:19:05 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://182.92.221.237:443/
-784071826 | 2024-10-19T15:13:45.785227
1515 /
tcp
-541815454 | 2024-10-21T10:35:38.494232
1521 /
tcp
Version:11.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=186646784)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))
-2089734047 | 2024-10-06T04:02:37.417058
1588 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
2103111368 | 2024-09-26T14:23:23.452300
1604 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
<?...
2064046231 | 2024-10-10T04:41:00.970574
1723 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1c77_tb143_15913-45531
1615193817 | 2024-10-20T08:51:01.869979
1800 /
tcp
Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n
-1139999322 | 2024-10-01T01:58:30.990729
1801 /
tcp
\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\xf2\\xdby\\x96\\xbb\\xb1LE\\xa1\\x1f.%\xd2\xbft\\xb692d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
401555314 | 2024-09-27T17:58:12.699270
1883 /
tcp
104385780 | 2024-10-06T08:27:29.546978
1926 /
tcp
165188539 | 2024-10-16T21:22:59.612618
1962 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-321444299 | 2024-10-21T13:15:31.879531
2002 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.
-358801646 | 2024-10-19T05:45:17.970679
2008 /
tcp
1975288991 | 2024-10-13T13:13:25.760130
2057 /
tcp
2087396567 | 2024-10-14T15:53:31.741323
2067 /
tcp
kjnkjabhbanc283ubcsbhdc72
-42767839 | 2024-10-15T01:05:03.324418
2068 /
tcp
RFB 005.000
VNC:
Protocol Version: 5.0
1911457608 | 2024-10-18T16:28:58.761830
2081 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1948301213 | 2024-10-07T02:40:52.617972
2083 /
tcp
RFB 003.003
VNC:
Protocol Version: 3.3
1761482307 | 2024-10-19T20:47:56.599958
2087 /
tcp
\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00
2047379038 | 2024-10-06T12:04:41.175732
2121 /
tcp
220 RS820Plus FTP server ready.
1220320909 | 2024-09-27T07:14:20.356156
2154 /
tcp
546151771 | 2024-10-17T10:52:13.207888
2181 /
tcp
Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)
Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618
-1659353189 | 2024-10-22T03:07:08.836902
2222 /
tcp
SSH-2.0-ssh-server\r\n\\x00\\x00\\x02\\x14\x0b\\x14\x0b\\xed\\x16\\xae\\x96\t\\xc5En\\xbd\\x1cgn\\xff\\xad\\xd7\\x00\\x00\\x00\\xbbcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group14-sha256,diffie-hellman-gr
958068551 | 2024-09-30T09:27:28.726513
2323 /
tcp
\r\r\n(none) login: \n\nTELNET Negotiation:\nwill: Echo, Suppress Go Ahead\ndo: Echo, Negotiate About Window Size\n
962700458 | 2024-10-20T23:59:36.039121
2332 /
tcp
-971970408 | 2024-09-23T23:29:37.326343
2376 /
tcp
819727972 | 2024-10-22T19:14:55.009671
2404 /
tcp
-971970408 | 2024-09-30T21:25:09.065871
2455 /
tcp
819727972 | 2024-10-08T02:40:40.642864
2552 /
tcp
1077013874 | 2024-10-11T12:06:40.841621
2626 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
-1399940268 | 2024-10-13T06:52:07.835475
2628 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1399940268 | 2024-10-09T10:16:11.638773
2762 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1139539254 | 2024-10-20T13:06:50.712754
3001 /
tcp
\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r
15018106 | 2024-10-14T15:57:57.372005
3050 /
tcp
\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00
-1810987450 | 2024-10-05T05:30:34.348521
3072 /
tcp
198844676 | 2024-09-29T14:09:00.288941
3077 /
tcp
HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close
-1996280214 | 2024-10-15T00:31:56.073675
3079 /
tcp
-1487943323 | 2024-10-17T16:27:05.089651
3092 /
tcp
431 Unable to negotiate secure command connection.\r\n
-2089734047 | 2024-10-05T15:11:18.560159
3098 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1370263973 | 2024-10-19T21:38:34.432628
3101 /
tcp
597764502 | 2024-10-12T11:46:31.235893
3106 /
tcp
\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00
-1019343788 | 2024-09-26T20:07:11.725613
3117 /
tcp
1625292406 | 2024-10-03T07:55:18.117244
3221 /
tcp
-1341662640 | 2024-10-17T18:44:51.704125
3260 /
tcp
HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close
921482974 | 2024-10-03T13:50:33.372289
3268 /
tcp
HTTP/1.1 301 Moved Permanently
Location: /web/index.html
Server: HTTPD
Connection: close
Content-Type: text/html
-1327660293 | 2024-10-16T21:20:36.809710
3269 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
422524323 | 2024-10-17T16:19:38.821091
3299 /
tcp
{
"Version": "3.4.18",
"VersionArray": [
3,
4,
18,
0
],
"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",
"OpenSSLVersion": "",
"SysInfo": "",
"Bits": 64,
"Debug": false,
"MaxObjectSize": 16777216
}
-1099385124 | 2024-10-19T23:13:12.946152
3301 /
tcp
"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac
1673132866 | 2024-10-09T03:43:38.747512
3306 /
tcp
I\\x00\\x00\\x01\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MariaDB server
1543809371 | 2024-10-21T19:28:20.537538
3310 /
tcp
220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])
1911457608 | 2024-10-22T07:04:11.659675
3352 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
819727972 | 2024-10-22T13:52:18.107512
3388 /
tcp
740837454 | 2024-10-08T16:02:24.030944
3389 /
tcp
198844676 | 2024-10-21T20:38:01.551846
3551 /
tcp
HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close
51259122 | 2024-10-03T05:07:00.653188
3552 /
tcp
\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n
321971019 | 2024-10-12T16:10:01.837937
3560 /
tcp
-ERR client ip is not in whitelist\r
1212921144 | 2024-10-05T23:46:17.526236
3780 /
tcp
2087396567 | 2024-09-23T03:13:08.846446
3790 /
tcp
kjnkjabhbanc283ubcsbhdc72
1170207731 | 2024-10-22T11:16:56.081890
4000 /
tcp
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
content-length: 9446
content-type: text/html; charset=utf-8
cross-origin-window-policy: deny
date: Mon, 22 Jan 2024 08:34:42 GMT
server: Cowboy
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-id: F6yeXaHCjyC4elgAAoAh
x-xss-protection: 1; mode=block
set-cookie: _teslamate_key=SFMyNTY.g3QAAAAEbQAAAAtfY3NyZl90b2tlbm0AAAAYaUxzWXpoMm5SdWh1V2piMFd
165188539 | 2024-10-08T23:55:40.139790
4022 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
671605376 | 2024-10-19T20:06:35.361335
4063 /
tcp
-1399940268 | 2024-10-15T06:18:19.630361
4064 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
171352214 | 2024-10-16T20:32:01.767221
4157 /
tcp
-ERR client ip is not in whitelist
-1695841648 | 2024-10-10T16:48:19.980869
4242 /
tcp
HTTP/1.1 404 Not Found
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close
-971970408 | 2024-10-22T12:10:05.850129
4282 /
tcp
-1250504565 | 2024-10-22T15:42:50.425430
4321 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01
-1888448627 | 2024-10-08T19:18:31.917665
4369 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-971970408 | 2024-10-19T21:16:44.235335
4433 /
tcp
1842524259 | 2024-10-13T18:47:29.397052
4434 /
tcp
-1060562267 | 2024-10-15T04:13:46.893698
4443 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae29b6_PS-NKG-01Aqo82_2892-58968
2087396567 | 2024-10-22T15:05:13.220546
4444 /
tcp
kjnkjabhbanc283ubcsbhdc72
1059192566 | 2024-10-04T00:58:42.594144
4500 /
tcp
HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 670
S-Host: https://sukz-mc-u.aliyuncs.com/checkout/share/admit-import/unblend-deactivate/nacos/
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Nacos</title>
<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">
<link href="./css/main.css" rel="stylesheet"></head>
<body>
<div id="root" style="overflow:hidden"></div>
<div id="app"></div>
<div
-445721795 | 2024-10-06T17:32:09.939727
4506 /
tcp
\x00[\xc3\xaed\x1a\x7f\x00\x00
-1153110624 | 2024-10-21T03:59:57.815845
4550 /
tcp
1911457608 | 2024-09-26T09:29:03.948999
4786 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
819727972 | 2024-09-30T14:59:17.246876
4840 /
tcp
2087396567 | 2024-10-05T05:38:43.284719
4949 /
tcp
kjnkjabhbanc283ubcsbhdc72
104385780 | 2024-10-19T20:04:43.116787
5001 /
tcp
-146605374 | 2024-10-15T00:11:11.564590
5006 /
tcp
\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00
1911457608 | 2024-10-04T14:40:50.840315
5007 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1911457608 | 2024-10-22T07:07:45.316752
5010 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-358801646 | 2024-10-22T02:02:28.901818
5025 /
tcp
819727972 | 2024-10-10T22:23:57.688197
5172 /
tcp
1975288991 | 2024-10-02T22:24:19.031349
5201 /
tcp
-616720387 | 2024-10-05T08:01:05.157415
5222 /
tcp
756886313 | 2024-09-26T00:37:04.295559
5269 /
tcp
HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
819727972 | 2024-10-05T21:07:55.724922
5592 /
tcp
575925250 | 2024-10-14T12:27:08.138528
5672 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
-503707216 | 2024-10-18T16:59:29.807814
5858 /
tcp
-2073565391 | 2024-10-04T17:15:59.798156
5910 /
tcp
HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 7-10116032-0 0NNN RT(1705363875214 11) q(0 -1 -1 -1) r(0 -1)
819727972 | 2024-10-22T15:43:36.075922
5938 /
tcp
1999272906 | 2024-09-27T17:36:45.752229
5984 /
tcp
HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)
-358801646 | 2024-10-08T08:07:33.372325
5986 /
tcp
-457235091 | 2024-10-19T04:28:01.130971
6000 /
tcp
audio 0 RTP/AVP 18 4 3 8 0 101\r\na
819727972 | 2024-10-02T12:58:50.974029
6001 /
tcp
2125172975 | 2024-10-04T01:49:35.731570
6009 /
tcp
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
-1810987450 | 2024-10-11T10:27:31.957084
6352 /
tcp
68681995 | 2024-10-02T15:19:24.416657
6443 /
tcp
HTTP/1.1 200 OK
Date: Wed, 02 Oct 2024 15:19:24 GMT
Content-Type: application/json
Content-Length: 1349
Connection: keep-alive
Ali-Swift-Global-Savetime: 1727882364
Eagleeye-Traceid: 5015dc34456f9d38cee138a3c9
Eagleid: 5015dc34456f9d38cee138a3c9
S_group: tao-session
S_ip: dc2b1ecef96a07896e5ec0d0f087de94
S_status: STATUS_SYS_ERR
S_tag: 879671925823982|410482271^|^^
S_tid: 5015dc34456f9d38cee138a3c9
S_ucode: CN:CENTER
S_v: 2.4.2.8
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://survey.aliyun.com
Ufe-Result: A4
Via: live12.f6live6[476,054,330-0,M], live63.live71[232,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Wed, 02 Oct 2024 15:19:24 GMT
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:35:2e:4a:35:dc:34:ed:3b:e8:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: Apr 12 23:17:04 2023 GMT
Not After : May 13 23:11:02 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.alibabacorp.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:5a:d8:7b:d4:f1:dd:49:12:82:ec:77:5d:7c:e4:
76:9c:4c:04:23:44:89:ec:ef:cd:4a:8b:15:72:f5:
2d:58:86:84:41:2d:47:54:06:ec:40:f1:3d:42:e4:
03:7c:49:55:ac:29:9a:db:3d:30:29:ba:93:23:24:
18:3e:3e:e2:ea
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
EB:3E:07:A3:E1:1B:8B:BD:B5:1C:00:D6:2C:14:E5:3E:32:B8:48:18
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.alibabacorp.com, DNS:*.56.cainiao-inc.com, DNS:*.56.cainiao.com, DNS:*.9game.cn, DNS:*.a.alibaba-inc.com, DNS:*.abs.alibaba-inc.com, DNS:*.acc.alibaba-inc.com, DNS:*.acds.taobao.org, DNS:*.acp.alibaba-inc.com, DNS:*.acs.alibabaplanet.com, DNS:*.addr.cainiao-inc.com, DNS:*.admin.alibaba-inc.com, DNS:*.admin.alitrip.com, DNS:*.admin.cainiao-inc.com, DNS:*.admin.fliggy.com, DNS:shog3509n881244h5.1688.com, DNS:laoken.en.alibaba.com
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
1e:89:75:04:69:5a:cc:5f:a0:87:6b:5a:21:a3:3a:e0:ad:5e:
0f:e6:17:1d:f2:27:19:61:5b:8b:2a:c6:49:99:b8:ad:d5:90:
ad:ab:c7:5f:08:93:d3:6b:5a:79:be:22:d6:45:94:91:65:96:
6d:d5:cb:5c:50:42:aa:2e:13:70:19:81:1e:86:36:d9:18:40:
51:bb:89:12:c7:8e:a0:bf:3a:76:5d:61:39:ba:be:74:38:7b:
4b:a0:d5:f3:4c:4d:9a:68:1b:40:2f:ee:11:e7:2a:c3:4e:c2:
10:bd:f1:34:c1:10:16:d8:d7:80:70:77:53:e6:5f:ff:07:ef:
b3:48:07:ec:df:5b:78:cf:dc:47:f0:a5:94:69:6f:9c:ac:3e:
18:db:15:b3:96:9d:84:96:70:09:4d:34:82:37:63:53:4a:2c:
9e:c9:c7:e4:52:02:c8:a3:db:33:a3:36:a4:00:14:32:72:a0:
4e:00:38:3c:43:99:d9:e7:74:82:1c:cf:99:a6:c2:ac:e9:bf:
51:86:3e:4f:ba:60:82:4f:29:a1:0f:bd:48:74:a1:7c:2e:d7:
fc:a5:c0:33:3f:b1:41:00:94:34:13:14:94:29:56:70:b5:85:
2d:df:02:25:92:69:e0:1b:13:d2:44:b2:78:e7:d1:20:a2:1f:
a6:51:23:2c
639175818 | 2024-09-28T23:09:24.194206
6503 /
tcp
\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n
795101100 | 2024-10-12T00:00:12.301151
6510 /
tcp
HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 14-40390680-0 0NNN RT(1700468534547 149) q(0 -1 -1 -1) r(0 -1)
1911457608 | 2024-09-28T20:38:39.892542
6590 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1504401647 | 2024-10-06T04:32:28.322037
6603 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n
51259122 | 2024-09-29T19:58:21.947535
6605 /
tcp
\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n
-2046514463 | 2024-10-19T21:17:37.322751
6633 /
tcp
-1399940268 | 2024-10-08T05:08:32.599079
6653 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
4935895 | 2024-10-06T23:26:05.083678
6666 /
tcp
HTTP/1.1 400 Bad Request
Server: CloudWAF
819727972 | 2024-09-28T03:27:19.122987
6667 /
tcp
1911457608 | 2024-10-08T14:43:53.802332
6668 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1911457608 | 2024-10-14T17:26:29.866973
6748 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1136600457 | 2024-10-12T20:42:23.645072
7001 /
tcp
HELO:10.3.6.0.false
AS:2048
HL:19
-2033111675 | 2024-10-08T22:24:26.622437
7071 /
tcp
632542934 | 2024-10-15T04:39:21.462901
7171 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
119860953 | 2024-10-20T10:25:30.127992
7218 /
tcp
* OK ArGoSoft Mail Server IMAP Module v.YW at
-2080784861 | 2024-09-25T03:57:23.553659
7401 /
tcp
GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00
-1399940268 | 2024-10-14T18:09:00.267464
7415 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2024-10-21T01:30:58.295004
7434 /
tcp
328982367 | 2024-10-15T20:46:09.552055
7443 /
tcp
HTTP/1.1 302 Found
Server: Apache/2.4.57 (Debian)
Strict-Transport-Security: max-age=15552000; includeSubDomains
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow
X-XSS-Protection: 1; mode=block
X-Powered-By: PHP/8.2.9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: https://mcchatgp.synology.me:7443/login
Content-Typ
-358801646 | 2024-10-16T03:00:35.298851
7548 /
tcp
-2107996212 | 2024-10-03T13:45:57.327163
7634 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
2103111368 | 2024-10-18T20:03:37.569176
8001 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
<?...
-1730858130 | 2024-09-26T19:16:37.475920
8006 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
819727972 | 2024-10-16T06:36:30.543243
8009 /
tcp
-1699556818 | 2024-10-15T00:18:46.986522
8015 /
tcp
\x01remshd: Kerberos Authentication not enabled.\n
-1399940268 | 2024-09-25T01:52:21.343793
8034 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1911457608 | 2024-09-25T23:48:36.718220
8035 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-09-25T11:10:13.317767
8039 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
103159425 | 2024-10-02T11:21:05.418269
8072 /
tcp
89282912 | 2024-10-13T05:16:24.013605
8081 /
tcp
220 VMware Authentication Daemon Version 1.0, ServerDaemonProto
col:SOAP, MKSDisplayProtocol:VNC , ,
-1839934832 | 2024-10-20T00:26:19.218695
8085 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
1308377066 | 2024-10-10T22:08:11.368933
8087 /
tcp
1082732927 | 2024-09-29T09:11:08.782393
8089 /
tcp
STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END
-1399940268 | 2024-10-17T19:59:45.119652
8095 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1416565584 | 2024-10-08T18:22:23.024526
8099 /
tcp
HTTP/1.1 500 Internal Server Error
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Connection: close
1308377066 | 2024-10-14T01:04:09.912649
8118 /
tcp
-792826324 | 2024-10-08T02:38:25.536208
8126 /
tcp
220 FTP server ready - login please
2087396567 | 2024-10-12T14:26:28.308863
8139 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1902426733 | 2024-10-14T10:21:17.497707
8180 /
tcp
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: text/html
Expires: 0
2087396567 | 2024-10-20T21:58:57.677863
8181 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1399940268 | 2024-10-03T10:26:35.098800
8291 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-136006866 | 2024-10-09T03:59:02.857172
8422 /
tcp
STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND
2063598737 | 2024-10-09T20:42:16.700354
8428 /
tcp
897328069 | 2024-10-15T19:45:05.885608
8445 /
tcp
220 mail.scott000.com ESMTP
2087396567 | 2024-09-26T04:47:54.157694
8554 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1399940268 | 2024-10-20T09:27:29.388403
8575 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2089734047 | 2024-10-14T10:35:21.369484
8622 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
321971019 | 2024-09-26T09:16:31.496263
8728 /
tcp
-ERR client ip is not in whitelist\r
1543809371 | 2024-10-06T07:01:10.052838
8767 /
tcp
220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])
-616720387 | 2024-10-18T06:51:58.723572
8789 /
tcp
819727972 | 2024-10-21T21:05:29.838742
8804 /
tcp
1492413928 | 2024-10-17T00:34:46.642022
8812 /
tcp
819727972 | 2024-10-17T17:08:16.437873
8815 /
tcp
165188539 | 2024-09-27T00:20:44.420921
8824 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
677934968 | 2024-09-23T03:19:32.729539
8832 /
tcp
-1681927087 | 2024-10-20T13:40:45.618494
8834 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1099385124 | 2024-09-30T02:43:58.868950
8836 /
tcp
"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac
-2031152423 | 2024-10-20T00:19:38.990175
8840 /
tcp
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
-1888448627 | 2024-10-08T04:17:30.978347
8844 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-1327660293 | 2024-10-21T17:54:04.555198
8846 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
1059192566 | 2024-10-15T04:36:19.447838
8855 /
tcp
HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 670
S-Host: https://sukz-mc-u.aliyuncs.com/checkout/share/admit-import/unblend-deactivate/nacos/
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Nacos</title>
<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">
<link href="./css/main.css" rel="stylesheet"></head>
<body>
<div id="root" style="overflow:hidden"></div>
<div id="app"></div>
<div
1911457608 | 2024-09-30T15:47:17.996358
8870 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-445721795 | 2024-10-04T11:17:26.581476
8872 /
tcp
\x00[\xc3\xaed\x1a\x7f\x00\x00
171352214 | 2024-10-21T17:57:01.970210
8880 /
tcp
-ERR client ip is not in whitelist
-1611764932 | 2024-10-21T12:08:38.641567
8889 /
tcp
\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00
-2089734047 | 2024-10-04T20:59:06.972816
8969 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-2067028711 | 2024-10-09T23:40:51.778712
9000 /
tcp
\x15\x03\x01\x00\x02\x02F
-1026951088 | 2024-10-16T13:15:19.838984
9001 /
tcp
1212921144 | 2024-09-25T23:45:05.908615
9002 /
tcp
1991883981 | 2024-10-04T17:58:21.558540
9006 /
tcp
B\x00\x00\x00\xc3\xbfn\x04Too many connections
-1888448627 | 2024-10-22T17:23:17.781462
9028 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-375604792 | 2024-10-03T05:25:06.169294
9036 /
tcp
220 Microsoft FTP Service
1741579575 | 2024-10-21T03:53:21.683041
9042 /
tcp
-585940771 | 2024-10-20T20:37:21.318994
9044 /
tcp
2087396567 | 2024-10-21T00:06:29.624101
9051 /
tcp
kjnkjabhbanc283ubcsbhdc72
422524323 | 2024-09-29T00:05:46.535689
9091 /
tcp
{
"Version": "3.4.18",
"VersionArray": [
3,
4,
18,
0
],
"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",
"OpenSSLVersion": "",
"SysInfo": "",
"Bits": 64,
"Debug": false,
"MaxObjectSize": 16777216
}
-616720387 | 2024-09-25T13:40:51.323597
9092 /
tcp
-2096652808 | 2024-10-22T01:06:48.808187
9095 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
1996932384 | 2024-10-19T06:57:37.594924
9100 /
tcp
-653033013 | 2024-10-18T06:35:55.565965
9136 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
1919228981 | 2024-10-17T18:36:29.315707
9151 /
tcp
\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03
-1163346640 | 2024-10-01T20:26:39.354181
9200 /
tcp
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
content-length: 215
-1399940268 | 2024-10-01T22:38:04.347899
9211 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1795027372 | 2024-10-02T04:12:39.962435
9305 /
tcp
\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:
921225407 | 2024-10-20T05:03:02.394569
9306 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
1887224352 | 2024-10-19T11:19:06.714439
9398 /
tcp
1529351907 | 2024-10-13T12:53:11.003239
9418 /
tcp
HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive
please add white ip *.*.*.*
50497985 | 2024-10-17T16:56:35.757334
9530 /
tcp
\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00
1134517380 | 2024-10-19T20:37:10.697300
9600 /
tcp
welcome to Pandora console!\r\n----------------------------\n-------------------------\n| Login Time | 2021-12-08 1...\n
660175493 | 2024-10-09T05:52:51.774502
9633 /
tcp
-1730858130 | 2024-09-28T23:06:55.461682
9704 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
-255236012 | 2024-10-20T09:22:24.135362
9876 /
tcp
HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
1615676803 | 2024-10-05T02:51:37.357853
9898 /
tcp
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Accept-Ranges: bytes
Etag: "s5sw6112h"
248249138 | 2024-10-07T12:12:13.563395
9943 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24d3_xyd116_25356-2749
1161309183 | 2024-10-20T19:43:56.256304
9999 /
tcp
-2096652808 | 2024-10-15T19:39:02.348805
10000 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
1723769361 | 2024-10-21T17:59:34.392436
10050 /
tcp
ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n
1842524259 | 2024-10-21T14:17:05.932576
10051 /
tcp
1911457608 | 2024-10-13T06:29:13.126944
10134 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-653033013 | 2024-10-16T16:02:14.141225
10176 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
2087396567 | 2024-10-19T13:36:17.098668
10250 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1839934832 | 2024-10-09T18:26:54.656212
10911 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-1399940268 | 2024-10-08T22:42:18.499026
11000 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1399940268 | 2024-10-04T02:01:31.630395
11112 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1734465113 | 2024-10-11T18:29:50.522205
12000 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705938548.385-w-waf05cqt
296364507 | 2024-10-18T04:28:30.142404
12345 /
tcp
HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html
1911457608 | 2024-10-14T15:59:39.663720
14147 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1032713145 | 2024-09-29T23:24:39.741129
14265 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1
819727972 | 2024-10-01T16:16:01.993383
14344 /
tcp
-409020351 | 2024-10-20T20:57:27.497414
16993 /
tcp
NPC Telnet permit one connection.
But One connection() already keep alive.
Good Bye !!
-1399940268 | 2024-10-04T15:18:59.739627
18081 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1399940268 | 2024-10-02T20:43:02.184138
18245 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-971970408 | 2024-10-18T00:27:16.161024
18443 /
tcp
-952165951 | 2024-10-22T07:44:09.719020
18553 /
tcp
575925250 | 2024-10-06T17:46:40.893724
19000 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
2087396567 | 2024-10-20T02:12:38.312299
20256 /
tcp
kjnkjabhbanc283ubcsbhdc72
1911457608 | 2024-10-21T20:25:37.769761
20547 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1370263973 | 2024-10-17T20:35:23.226478
20880 /
tcp
819727972 | 2024-10-05T21:38:45.442739
21025 /
tcp
1308377066 | 2024-10-07T23:41:38.810939
21379 /
tcp
677934968 | 2024-10-10T08:46:35.392846
23023 /
tcp
1865391109 | 2024-10-03T22:59:04.450435
23424 /
tcp
HTTP/1.1 408 Request Timeout
content-length: 0
1282941221 | 2024-10-19T12:01:28.939070
25001 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
1189133115 | 2024-10-21T06:00:27.167209
25565 /
tcp
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8
1293666406 | 2024-10-16T23:32:45.765469
27015 /
tcp
Command: None
Size: 1347703880
ID: 825110831
Type: 842019616
1763259671 | 2024-09-24T16:37:17.446160
27017 /
tcp
{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n
165188539 | 2024-10-22T10:28:34.273231
28015 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
201984321 | 2024-10-11T20:03:46.656513
30002 /
tcp
ÿû
Welcome to NetLinx v94 Copyright AMX Corp. 34395-49007
>
-1681927087 | 2024-10-09T00:34:16.640597
30003 /
tcp
kjnkjabhbanc283ubcsbhdc72
-147424911 | 2024-10-08T23:27:28.939972
31337 /
tcp
HTTP/1.1 404 Not Found
Content Length: 0
2087396567 | 2024-09-28T14:22:51.185045
32764 /
tcp
kjnkjabhbanc283ubcsbhdc72
550048729 | 2024-10-05T03:23:53.343834
33060 /
tcp
819727972 | 2024-10-14T08:37:53.118813
35000 /
tcp
1842524259 | 2024-10-21T06:51:32.732167
37777 /
tcp
1741579575 | 2024-10-20T15:54:19.763254
41443 /
tcp
-2046514463 | 2024-10-22T03:52:22.786925
41800 /
tcp
-433302150 | 2024-10-18T18:07:51.199683
44158 /
tcp
-375604792 | 2024-10-12T01:00:57.009369
44818 /
tcp
220 Microsoft FTP Service
1978059005 | 2024-10-18T22:16:17.782447
47990 /
tcp
Sorry, that nickname format is invalid.
632542934 | 2024-10-19T01:38:04.972218
50000 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
-1694458451 | 2024-09-23T11:54:01.954636
50100 /
tcp
-457235091 | 2024-10-17T12:54:52.794099
51235 /
tcp
audio 0 RTP/AVP 18 4 3 8 0 101\r\na
-971970408 | 2024-10-16T21:18:10.409108
51443 /
tcp
-971970408 | 2024-10-19T00:55:06.832459
53413 /
tcp
-1399940268 | 2024-10-16T19:22:21.182366
54138 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1948301213 | 2024-10-17T16:50:17.619978
54984 /
tcp
RFB 003.003
VNC:
Protocol Version: 3.3
-1139539254 | 2024-10-10T09:07:11.518577
55000 /
tcp
\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r
2087396567 | 2024-10-19T18:20:08.599220
55443 /
tcp
kjnkjabhbanc283ubcsbhdc72
-2096652808 | 2024-10-19T19:05:37.083805
55553 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
1690634669 | 2024-10-06T04:31:12.643894
55554 /
tcp
1865391109 | 2024-10-06T19:17:24.169689
60030 /
tcp
HTTP/1.1 408 Request Timeout
content-length: 0
1077013874 | 2024-10-16T20:29:08.868701
60129 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
1975288991 | 2024-10-21T17:56:00.884255
61613 /
tcp
1741579575 | 2024-10-16T16:48:56.456462
61616 /
tcp
-583302436 | 2024-10-19T13:10:00.713194
62078 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx/1.13.0
Content-Type: text/html
Connection: close
