-1598265216 | 2024-09-05T15:22:27.149396
11 /
tcp
-1296032851 | 2024-09-02T11:32:24.705064
13 /
tcp
\x01 =\x01À\x06ÿÿ?"<ZDECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x01\x01
-1296032851 | 2024-09-03T21:48:08.971647
17 /
tcp
\x01 =\x01À\x06ÿÿ?"<ZDECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x01\x01
676476721 | 2024-08-26T10:42:12.120582
19 /
tcp
ELM Enterprise Manager _l
Copyright © 18668511-928641920 TNT Software, Inc.
-1248408558 | 2024-09-02T13:31:36.964081
21 /
tcp
220 MikroTik FTP server (MikroTik 6.44.3) ready
460589547 | 2024-09-06T17:50:07.196559
23 /
tcp
-154107716 | 2024-08-29T00:02:37.123357
25 /
tcp
220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
ABOR
ACCT
ADAT *
ALLO
APPE
AUTH
CCC
CDUP
CWD
DELE
ENC *
EPRT
EPSV
FEAT
HELP
HOST
LANG
LIST ...
1463575233 | 2024-08-31T03:17:01.371289
37 /
tcp
-1399940268 | 2024-08-19T22:40:02.049463
38 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
2087396567 | 2024-08-29T12:50:17.704970
43 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1056270173 | 2024-08-20T00:56:58.603511
49 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
1024248778 | 2024-08-28T05:44:06.907049
53 /
tcp
9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0 \x00\x05\x00\x01\x00\x00\x00\xbd\x00 \x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x00\xa2\x00\x04\xac٣.
\x00\x06\x85\x80\x00\x01\x00\x01\x00\x00\x00
-876294238 | 2024-09-07T09:53:06.988570
79 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Content-Type: text/html
Connection: close
956077353 | 2024-08-21T02:38:46.336550
80 /
tcp
HTTP/1.1 403 Forbidden
Server: AliyunOSS
Date: Wed, 21 Aug 2024 02:38:46 GMT
Content-Type: application/xml
Content-Length: 345
Connection: keep-alive
x-oss-request-id: 66C553363544A03233C8E9C1
x-oss-server-time: 1
x-oss-ec: 0003-00001201
-1023516719 | 2024-08-25T09:50:30.107606
83 /
tcp
ã
K vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol
660175493 | 2024-09-04T16:14:32.274915
84 /
tcp
-1428621233 | 2024-08-22T21:39:26.674521
95 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
1624217396 | 2024-08-28T05:30:11.666114
98 /
tcp
HELO:10.3.6.0.false\nAS:2048\nHL:19
-1476017887 | 2024-08-28T22:01:01.619211
102 /
tcp
N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n
-1399940268 | 2024-09-02T01:14:15.007335
104 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1476017887 | 2024-08-25T17:26:43.960769
110 /
tcp
N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n
-971970408 | 2024-09-04T22:35:26.221468
111 /
tcp
-414819019 | 2024-09-08T22:23:39.908623
113 /
tcp
HTTP/1.1 200 OK
Content-type: text/html
Connection: close
141730637 | 2024-08-30T21:08:21.867003
119 /
tcp
HTTP/1.0 200 OK
Server: Proxy
639175818 | 2024-09-05T10:19:53.762722
143 /
tcp
\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n
398077695 | 2024-09-03T13:06:39.704865
175 /
tcp
-399606100 | 2024-09-07T22:11:06.001801
179 /
tcp
BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n
290819026 | 2024-08-27T15:55:12.946407
195 /
tcp
welcome to Pandora console!
----------------------------
-------------------------
| Login Time | 2021-12-08 1...
639175818 | 2024-09-05T04:10:27.549943
199 /
tcp
\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n
1911457608 | 2024-09-05T01:02:07.462327
221 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1718229072 | 2024-08-31T10:07:06.933962
264 /
tcp
CheckPoint\nFirewall Host: gw2\nSmartCenter Host: SMS..6sxmht\\x00\n
-1547976805 | 2024-09-03T16:51:37.426134
311 /
tcp
HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close
-1743283776 | 2024-09-04T19:33:54.441202
389 /
tcp
0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x04\\x04
-525136240 | 2024-09-07T09:01:20.960988
427 /
tcp
SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://bogon.xylink\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\nservice:wbem:https\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n Lifetime: 65535\n URL: service:VMwareInfrastructure://bogon.xylink\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (
-524728436 | 2024-09-08T04:44:53.324372
443 /
tcp
HTTP/1.1 403 Forbidden
Server: AliyunOSS
Date: Sun, 08 Sep 2024 04:44:53 GMT
Content-Type: application/xml
Content-Length: 345
Connection: keep-alive
x-oss-request-id: 66DD2BC59C75C63534F2B8FB
x-oss-server-time: 0
x-oss-ec: 0003-00001201
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:76:72:78:3b:d5:70:f3:f7:c7:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: Mar 26 06:06:02 2024 GMT
Not After : Nov 12 02:16:24 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=cn-qingdao.oss.aliyuncs.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ec:fd:5e:fb:9b:f4:4a:1d:f7:29:ef:dd:00:76:
77:38:e6:e7:7d:29:d4:20:cc:b2:5f:01:2e:f1:40:
63:10:ce:06:31:f5:b1:9b:f1:bb:93:ad:73:50:bf:
60:78:ad:3a:43:79:e2:61:5f:7a:5d:a8:ba:a8:77:
cf:e1:ad:4f:4a:a6:6b:a3:10:75:f6:90:c7:6e:7f:
d8:be:43:be:17:af:7d:36:1a:64:fd:f5:a0:75:09:
02:e4:71:3f:5e:40:a6:65:76:57:eb:af:2c:fb:1d:
54:4d:7a:14:5e:ae:95:1e:96:7d:b3:06:b8:af:fd:
07:cb:4d:7f:07:a1:20:8d:4e:7e:7c:fe:63:10:fc:
b2:86:0c:40:10:a3:6c:83:3f:50:07:56:7a:8a:b9:
eb:e8:fc:32:4f:c1:59:c1:61:4a:03:0c:97:8d:ed:
dd:96:0f:9c:80:eb:c3:3e:fc:94:cf:12:be:8f:29:
b3:e3:56:a5:ab:5b:eb:a1:db:37:c7:02:98:d2:5a:
81:94:be:33:ff:51:de:f0:97:eb:27:af:ba:c3:ef:
2f:fc:69:2b:d9:00:0b:0f:ad:ae:92:0d:8e:4d:96:
35:af:1f:3f:fc:f5:2a:52:cf:54:05:d1:12:8a:b5:
22:91:38:49:21:fe:a1:d7:17:ce:6a:9a:2a:7d:e1:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
Authority Information Access:
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
CPS: https://www.globalsign.com/repository/
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
X509v3 Subject Alternative Name:
DNS:cn-qingdao.oss.aliyuncs.com, DNS:*.cn-qingdao.oss-console.aliyuncs.com, DNS:*.s3.oss-cn-qingdao.aliyuncs.com, DNS:*.s3.oss-cn-qingdao-internal.aliyuncs.com, DNS:*.cn-qingdao.mgw.aliyuncs.com, DNS:*.oss.cn-qingdao.privatelink.aliyuncs.com, DNS:*.oss-cn-qingdao.oss-object-process.aliyuncs.com, DNS:*.oss-cn-qingdao-internal.oss-object-process.aliyuncs.com, DNS:*.oss-cn-qingdao.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-qingdao-internal.oss-accesspoint.aliyuncs.com, DNS:*.oss-accesspoint.aliyuncs.com, DNS:*.img-cn-qingdao.aliyuncs.com, DNS:*.img-cn-qingdao-internal.aliyuncs.com, DNS:*.oss-cn-qingdao.aliyuncs.com, DNS:*.cn-qingdao.oss.aliyuncs.com, DNS:*.oss-cn-qingdao-internal.aliyuncs.com, DNS:*.vpc100-oss-cn-qingdao.aliyuncs.com, DNS:*.oss-cn-qingdao-cross.aliyuncs.com, DNS:*.oss-cn-qingdao-diku-internal.aliyuncs.com, DNS:*.oss-enet-cm.aliyuncs.com, DNS:*.oss-enet-cu.aliyuncs.com, DNS:*.oss-enet-ct.aliyuncs.com, DNS:*.oss-enet-cn-north.aliyuncs.com, DNS:*.oss-cn-qdjbp-a.aliyuncs.com, DNS:*.oss-cn-qdjbp-a-internal.aliyuncs.com, DNS:*.aliyuncs.com, DNS:*.oss-enet.aliyuncs.com, DNS:*.oss-internal.aliyuncs.com, DNS:*.oss-internal.aliyun-inc.com, DNS:*.oss-accelerate.aliyuncs.com, DNS:*.oss-accelerate-overseas.aliyuncs.com, DNS:*.s3.oss-accelerate.aliyuncs.com, DNS:*.s3.oss-accelerate-overseas.aliyuncs.com, DNS:*.cn-qingdao-cross.mgw.aliyuncs.com, DNS:*.oss-console.aliyuncs.com
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
X509v3 Subject Key Identifier:
21:C2:3A:3F:71:4B:29:7B:9B:E2:97:9E:F8:2D:BF:A4:80:2A:EF:7D
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
Timestamp : Mar 26 06:06:04.512 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:38:73:9A:8A:F9:26:79:C8:F2:E7:F5:AD:
D5:C1:9C:98:3A:B6:D3:2F:44:F1:DB:2E:C7:89:01:49:
F3:9C:8F:50:02:21:00:F7:62:D8:77:D9:1E:5F:76:3F:
38:EE:1A:7F:1C:7E:A0:9F:08:10:29:AB:98:C7:1A:15:
C5:4B:9B:73:44:2C:5A
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
Timestamp : Mar 26 06:06:04.709 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:33:D2:F6:F5:6D:40:29:24:05:C6:42:13:
A2:4C:40:80:DA:8D:88:CE:63:81:BB:1D:A2:7B:FC:63:
E8:F0:52:20:02:21:00:F3:8E:7A:B6:A9:E3:9A:94:8C:
28:38:B5:2F:56:D9:E4:11:48:55:CB:0E:68:82:32:A1:
BF:96:74:66:24:48:E2
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Mar 26 06:06:04.773 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:79:38:D6:BB:5E:3D:68:BA:25:1A:3C:8C:
B8:3E:EE:D5:97:55:FD:CF:65:67:92:C7:52:8B:2E:28:
7E:1F:D5:14:02:21:00:CF:C0:7B:AC:D4:B7:9B:91:43:
29:13:3D:72:0F:75:C4:E9:A9:82:1C:DE:BE:93:B9:61:
9B:FF:78:A1:FA:3E:7E
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
35:17:9a:35:00:ff:eb:97:74:aa:7e:9d:73:5f:1b:93:c5:69:
b3:2c:de:8d:ef:b6:44:29:aa:7c:06:de:6c:bb:6c:2e:19:e0:
c0:a2:41:38:85:d3:b5:b9:fa:1f:21:e6:63:6e:96:77:6a:e8:
ae:a8:eb:2a:e2:b2:a4:75:69:9a:a0:c5:be:87:ef:52:64:d5:
bb:3c:bd:39:2c:2b:06:ee:89:22:d1:b4:e2:0f:81:de:42:cc:
77:bc:95:6e:4f:8b:07:3b:16:10:21:fd:4d:18:8b:c3:5c:0b:
6e:3b:6b:1d:b9:9e:d1:65:9a:f5:47:23:b0:cc:ae:0d:86:77:
a1:79:f3:ba:f9:7d:32:a4:37:e7:0c:d9:71:57:06:7e:6b:c5:
03:b5:71:f5:85:f6:a4:2e:5a:42:24:48:22:64:4c:b7:c1:4b:
fe:0f:87:6f:61:8c:55:e3:92:1d:14:8a:5d:31:c8:83:71:86:
0d:e8:18:0b:99:a1:32:93:80:2e:35:7d:8b:f7:f9:b9:cf:f9:
3f:3e:30:a7:f0:7e:94:c7:5a:a6:e5:8d:ff:b8:d2:9f:08:93:
1a:d2:83:25:d9:6d:4d:e5:57:f2:b2:b1:4c:5d:a7:3c:f9:6c:
a0:99:fb:39:aa:3f:b6:5d:5e:29:0d:5e:0e:40:17:b2:a9:03:
f3:da:ba:ea
-2083758884 | 2024-08-29T19:05:49.020686
444 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Thu, 29 Aug 2024 19:05:48 GMT
Content-Type: text/html
Content-Length: 157
Connection: close
<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>
897328069 | 2024-08-23T02:50:15.446350
465 /
tcp
220 mail.scott000.com ESMTP
-616720387 | 2024-08-30T04:28:43.265877
502 /
tcp
-441419608 | 2024-08-31T02:06:08.136164
503 /
tcp
SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3
-969286897 | 2024-09-03T20:18:11.796925
548 /
tcp
Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: TNAS-0E01\nMachine Type: \\x0eNetatalk3.1.12\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: No User Authent\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280
735639583 | 2024-08-17T02:54:31.671725
554 /
tcp
RTSP/1.0 200 OK
Server: H264DVR 1.0
Cseq: 1
Public: OPTIONS, DESCRIBE, SETUP, TEARDOWN, GET_PARAMETER, SET_PARAMETER, PLAY, PAUSE
921225407 | 2024-08-18T16:39:06.047970
555 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
178736976 | 2024-08-29T12:52:39.629097
631 /
tcp
-779815868 | 2024-09-09T11:26:12.050023
636 /
tcp
HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 3-22247063-0 0NNN RT(1705912086824 114) q(-1 -1 -1 -1) r(0 -1) b1
1300162323 | 2024-08-12T04:22:02.194469
666 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
1624217396 | 2024-09-01T06:04:05.980419
771 /
tcp
HELO:10.3.6.0.false\nAS:2048\nHL:19
-1399940268 | 2024-08-23T22:08:35.084763
789 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2024-08-29T00:32:51.138914
805 /
tcp
-992671574 | 2024-08-31T16:30:08.557051
873 /
tcp
-784071826 | 2024-08-30T07:26:21.123001
943 /
tcp
-1835475271 | 2024-09-08T05:32:19.684593
992 /
tcp
200 NOD32SS 99 (3318497116)\r\n
-1428621233 | 2024-08-29T16:51:32.477719
993 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
1685649979 | 2024-09-02T19:00:12.116929
995 /
tcp
-1961808222 | 2024-09-09T05:32:37.604528
1023 /
tcp
Protocol version mismatch
1778988322 | 2024-08-20T07:15:12.812187
1024 /
tcp
* OK GroupWise IMAP4rev1 Server Ready
-1888448627 | 2024-08-18T09:07:21.761516
1025 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-1730858130 | 2024-09-04T12:03:44.978537
1099 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
1911457608 | 2024-08-25T17:55:06.622668
1153 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
641705735 | 2024-09-02T14:20:06.375705
1177 /
tcp
2087396567 | 2024-08-22T12:41:33.752528
1200 /
tcp
kjnkjabhbanc283ubcsbhdc72
114471724 | 2024-08-30T23:29:24.987037
1224 /
tcp
HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX
-2089734047 | 2024-08-31T16:58:49.764632
1234 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
539065883 | 2024-09-01T21:10:36.647366
1337 /
tcp
-2089734047 | 2024-09-07T01:54:41.234800
1414 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
419886129 | 2024-08-26T14:15:59.674116
1433 /
tcp
MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XTZJ-20210317RG\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XTZJ-20210317RG\nNetBIOS_Computer_Name: XTZJ-20210317RG\nDNS_Domain_Name: XTZJ-20210317RG\nDNS_Computer_Name: XTZJ-20210317RG\nSystem_Time: 2024-01-22 04:01:04 +0000 UTC\n\n
1375509841 | 2024-09-04T01:47:59.295171
1442 /
tcp
ÿû
no data rcvd for version string
recv version id unsuccessful
SSH Session task 0xY: Version Exchange Failed
-271515508 | 2024-09-04T03:34:05.190775
1500 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: DrcomServer1.0
Location: http://192.168.254.3
Cache-Control: no-cache
Connection: close
819727972 | 2024-09-01T08:31:14.036970
1515 /
tcp
-1337747449 | 2024-09-01T15:46:45.886405
1521 /
tcp
Version:12.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=203424000)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))
1632932802 | 2024-08-31T17:16:45.838140
1554 /
tcp
171352214 | 2024-09-05T18:34:12.535373
1604 /
tcp
-ERR client ip is not in whitelist
-1608241410 | 2024-08-29T02:29:14.250891
1723 /
tcp
Firmware: 1\nHostname: local\nVendor: linux\n
-1265999252 | 2024-09-09T08:09:43.944591
1800 /
tcp
220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,
1745717579 | 2024-08-31T20:35:22.130719
1801 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae224e_PS-CSX-01CvJ183_33983-2857
2087396567 | 2024-09-05T01:41:29.010398
1883 /
tcp
kjnkjabhbanc283ubcsbhdc72
-801484042 | 2024-09-09T01:02:31.665053
1911 /
tcp
2087396567 | 2024-09-03T15:50:26.176899
1926 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1888448627 | 2024-09-02T05:44:18.124207
1962 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
366084633 | 2024-09-05T03:52:12.704299
1981 /
tcp
<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>
-1399940268 | 2024-08-30T11:49:09.623617
2000 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-527005584 | 2024-08-21T21:57:31.705075
2002 /
tcp
539065883 | 2024-09-04T21:06:53.418046
2008 /
tcp
669849225 | 2024-08-27T15:13:14.630587
2021 /
tcp
SSH-98.60-SysaxSSH_81885..42\r\n
1278527606 | 2024-09-06T18:28:12.365384
2049 /
tcp
165188539 | 2024-09-01T07:09:40.593760
2050 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
669849225 | 2024-08-22T23:23:36.195314
2055 /
tcp
SSH-98.60-SysaxSSH_81885..42\r\n
103159425 | 2024-08-27T00:56:44.777936
2062 /
tcp
2087396567 | 2024-08-20T09:48:55.325058
2067 /
tcp
kjnkjabhbanc283ubcsbhdc72
819727972 | 2024-09-08T17:30:53.144457
2079 /
tcp
-1399940268 | 2024-09-07T13:56:16.768635
2081 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1453516345 | 2024-08-14T11:17:05.310950
2082 /
tcp
HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
-971970408 | 2024-08-20T04:36:37.388524
2083 /
tcp
539065883 | 2024-09-07T05:46:28.220910
2087 /
tcp
141730637 | 2024-09-07T16:30:15.900713
2121 /
tcp
HTTP/1.0 200 OK
Server: Proxy
-1626979812 | 2024-08-13T23:51:46.495230
2122 /
tcp
220 Service ready for new user.
-2042671887 | 2024-08-16T02:11:44.215269
2126 /
tcp
HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 9-111938-0 0NNN RT(1701369144594 8) q(0 -1 -1 -1) r(0 -1)
819727972 | 2024-08-28T04:42:34.808150
2154 /
tcp
546151771 | 2024-09-08T19:56:41.956235
2181 /
tcp
Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)
Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618
1632932802 | 2024-08-21T06:26:21.521831
2221 /
tcp
372433470 | 2024-09-07T17:11:03.773675
2222 /
tcp
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""
671605376 | 2024-09-01T01:15:06.515383
2233 /
tcp
-1327660293 | 2024-08-30T22:02:57.219261
2245 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
1051421500 | 2024-08-24T22:21:12.363641
2323 /
tcp
H3C login:
TELNET Negotiation:
will: Echo, Suppress Go Ahead
do: Echo, Negotiate About Window Size, Remote Flow Control
2071407588 | 2024-08-24T19:06:38.371751
2332 /
tcp
-1730858130 | 2024-09-07T07:47:28.751446
2345 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
321971019 | 2024-09-08T20:26:33.110168
2351 /
tcp
-ERR client ip is not in whitelist\r
-971970408 | 2024-09-01T05:28:48.381482
2376 /
tcp
819727972 | 2024-09-06T03:55:10.399567
2404 /
tcp
1077013874 | 2024-09-07T04:48:31.557028
2455 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
2067064333 | 2024-09-08T11:21:04.675196
2480 /
tcp
1850902677 | 2024-08-13T19:10:10.088941
2547 /
tcp
-1899074860 | 2024-08-26T19:55:29.315308
2568 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n
-2089734047 | 2024-08-27T00:31:44.967016
2570 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-09-07T03:44:36.552042
2572 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-971970408 | 2024-09-08T21:20:19.887915
2628 /
tcp
1332894250 | 2024-09-02T12:36:16.719491
2761 /
tcp
\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:
-2089734047 | 2024-09-06T19:36:01.592537
2762 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-09-08T13:12:37.785302
3001 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
2103111368 | 2024-08-20T03:37:28.921521
3002 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
<?...
624004002 | 2024-08-30T16:49:25.905473
3005 /
tcp
-1189269828 | 2024-09-06T23:13:30.686576
3048 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-339084706 | 2024-09-07T23:17:53.945901
3050 /
tcp
200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n
-2089734047 | 2024-08-31T13:07:06.466620
3055 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-09-04T11:59:10.363965
3060 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
205347087 | 2024-08-17T14:30:03.985696
3063 /
tcp
SSH-25453-Cisco-3524665.35\n
-2089734047 | 2024-09-01T21:11:10.808511
3072 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-358801646 | 2024-09-05T10:07:26.169018
3075 /
tcp
-1399940268 | 2024-09-01T21:09:03.194700
3090 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1975288991 | 2024-08-12T08:59:53.473884
3094 /
tcp
-2031152423 | 2024-08-23T01:33:02.670066
3102 /
tcp
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
-1399940268 | 2024-08-28T23:38:18.020046
3103 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1911457608 | 2024-09-06T04:44:53.629101
3105 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
103159425 | 2024-09-03T10:25:53.256248
3113 /
tcp
-653033013 | 2024-09-05T13:26:52.594888
3117 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
1767345577 | 2024-08-19T00:57:53.796655
3120 /
tcp
Hello, this is Quagga (version 0T).
Copyright 1996-200
-1897393019 | 2024-08-25T10:56:26.332483
3211 /
tcp
HTTP/1.1 403 Forbidden
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
-2019309480 | 2024-09-04T05:59:59.484758
3221 /
tcp
<?xml version="1.0" encoding="us-ascii"?>\n
-1914158197 | 2024-08-31T17:28:40.617804
3260 /
tcp
HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close
-2031078612 | 2024-08-31T01:27:22.771832
3268 /
tcp
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: http://proxy.ces.org.tw:3000/login?url=http%3A%2F%2Floginbyurl.wanfangdata.com.cn%2F
-2096652808 | 2024-08-17T20:32:47.980687
3269 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
819727972 | 2024-08-24T22:55:46.324284
3299 /
tcp
-2107996212 | 2024-09-05T00:25:29.307620
3301 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
1000685185 | 2024-09-08T18:37:13.771719
3306 /
tcp
Mysql Version: 5.7.44-log \r\nN\\x00\\x00\\x00\n5.7.44-log\\x00r/\\x06\\x00u1Z3=}L\\x04\\x00\\xff\\xff-\\x02\\x00\\xff\\xc1\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00tKb,\\x0eS\\x19\\x7fD\\x15rQ\\x00mysql_native_password\\x00
-1279886438 | 2024-09-03T06:20:25.820940
3310 /
tcp
GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n
-1399940268 | 2024-08-18T02:17:52.255002
3311 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1248408558 | 2024-08-14T01:59:46.774959
3324 /
tcp
220 MikroTik FTP server (MikroTik 6.44.3) ready
740837454 | 2024-09-08T10:42:06.966854
3389 /
tcp
-1729629024 | 2024-09-02T19:06:54.027707
3541 /
tcp
1072892569 | 2024-08-14T15:14:37.241881
3542 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
198844676 | 2024-08-23T02:05:58.721242
3551 /
tcp
HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close
-1297953727 | 2024-08-15T04:55:59.743075
3559 /
tcp
\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c
-2089734047 | 2024-09-03T14:23:20.328801
3560 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
808560482 | 2024-08-19T17:44:17.475840
3689 /
tcp
GET / HTTP/1.0 : USERID : UNIX : TKUXZmP
: USERID : UNIX : Cr8
2087396567 | 2024-08-15T19:15:23.576939
3731 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1344535834 | 2024-09-05T03:50:28.819934
3749 /
tcp
HTTP/1.0 200 OK
Server: Proxy
-68075478 | 2024-09-07T14:06:49.348268
3780 /
tcp
2087396567 | 2024-09-05T20:48:41.546382
3790 /
tcp
kjnkjabhbanc283ubcsbhdc72
1620329124 | 2024-08-30T09:16:46.542046
4010 /
tcp
\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:
819727972 | 2024-09-06T02:46:40.896019
4022 /
tcp
-321444299 | 2024-08-20T22:39:47.198829
4063 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.
575925250 | 2024-09-09T02:38:56.398386
4064 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
-1327660293 | 2024-08-20T14:15:00.193910
4118 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
1794594071 | 2024-09-05T10:41:23.947382
4157 /
tcp
-653033013 | 2024-08-18T22:18:01.034401
4243 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
641705735 | 2024-09-02T19:23:27.013777
4282 /
tcp
-1250504565 | 2024-08-19T10:51:02.167933
4321 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01
-1888448627 | 2024-09-08T10:20:01.749382
4369 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
1741579575 | 2024-09-07T10:20:53.681868
4433 /
tcp
-445721795 | 2024-09-06T06:15:42.342762
4434 /
tcp
\x00[\xc3\xaed\x1a\x7f\x00\x00
1089570394 | 2024-08-27T02:38:08.791902
4443 /
tcp
HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae29d9288d03df989018e5e7290002
1948301213 | 2024-09-04T17:32:31.781860
4500 /
tcp
RFB 003.003
VNC:
Protocol Version: 3.3
2087396567 | 2024-08-31T01:48:52.595456
4506 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1153110624 | 2024-08-11T15:27:53.759316
4550 /
tcp
-1399940268 | 2024-09-01T18:38:47.344942
4808 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2096652808 | 2024-09-04T17:23:35.229543
4840 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-138733098 | 2024-08-21T09:20:48.461944
4848 /
tcp
2087396567 | 2024-09-07T02:14:58.951278
4899 /
tcp
kjnkjabhbanc283ubcsbhdc72
1282941221 | 2024-08-14T22:05:48.280330
4911 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
1996932384 | 2024-08-27T13:11:40.227685
4949 /
tcp
751496153 | 2024-08-20T23:29:11.924117
5001 /
tcp
* OK TeamXchange IMAP4rev1 server (otyUg) ready.
-1737707071 | 2024-08-15T05:14:34.677096
5004 /
tcp
\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437
2087396567 | 2024-09-05T13:02:53.461451
5006 /
tcp
kjnkjabhbanc283ubcsbhdc72
117101543 | 2024-08-27T09:15:42.205199
5007 /
tcp
\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n
-1413918021 | 2024-09-03T04:24:34.373698
5009 /
tcp
acpp\\x00\\x03\\x00\\x01E\\xe2\\x05\\x98\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xff\\xff\\xff\\xf0\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00
-358801646 | 2024-08-24T02:27:30.809826
5010 /
tcp
-1872120160 | 2024-08-21T03:05:43.281503
5025 /
tcp
">Application and Content Networking Software 3.9</a>)
</BODY><
-2107996212 | 2024-08-23T22:04:59.965673
5090 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
-801484042 | 2024-09-01T23:03:28.833632
5122 /
tcp
-1399940268 | 2024-08-20T04:18:11.150279
5150 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-288825733 | 2024-08-13T21:31:05.967602
5169 /
tcp
HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1
1545917845 | 2024-09-05T18:25:33.480447
5172 /
tcp
-1056270173 | 2024-08-27T15:22:32.192381
5190 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
-1399940268 | 2024-08-30T12:03:22.359691
5201 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1778988322 | 2024-09-07T06:38:25.510176
5222 /
tcp
* OK GroupWise IMAP4rev1 Server Ready
1359734371 | 2024-08-20T23:59:08.326452
5269 /
tcp
HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938451.076-w-waf01tjgt
819727972 | 2024-09-03T16:48:27.301071
5432 /
tcp
-1996280214 | 2024-08-27T02:43:12.929489
5435 /
tcp
60948681 | 2024-09-08T00:05:11.026018
5560 /
tcp
lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).
1911457608 | 2024-08-28T03:22:22.708998
5597 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1989907056 | 2024-08-11T17:38:13.996456
5600 /
tcp
RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n
104385780 | 2024-08-10T23:54:20.544688
5601 /
tcp
1911457608 | 2024-08-13T19:04:15.856866
5603 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1161309183 | 2024-08-28T00:56:51.459849
5604 /
tcp
-1032713145 | 2024-09-07T19:13:56.448145
5605 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1
-1329831334 | 2024-09-02T08:13:46.884867
5606 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n
-2107996212 | 2024-09-01T06:00:32.019530
5609 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
1453929220 | 2024-08-14T00:09:30.957564
5634 /
tcp
575925250 | 2024-09-06T16:23:04.778493
5672 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
841014058 | 2024-08-29T21:54:58.248692
5697 /
tcp
Hello, this is FRRouting (version 4.0).
Copyright 19
96-2005 Kunihiro Ishiguro, et al.
Use...
2033888749 | 2024-09-09T09:19:20.825908
5858 /
tcp
Content-Type: text/rude-rejection
Content-Length: 24
Access Denied, go away.
Content-Type: text/disconnect-notice
C...
-180163620 | 2024-08-17T15:58:12.070349
5938 /
tcp
NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n
1999272906 | 2024-09-04T04:32:56.945886
5984 /
tcp
HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)
841014058 | 2024-09-04T00:52:13.404114
5985 /
tcp
Hello, this is FRRouting (version 4.0).
Copyright 19
96-2005 Kunihiro Ishiguro, et al.
Use...
1690634669 | 2024-09-08T05:56:02.344536
5986 /
tcp
-1648456501 | 2024-09-08T09:55:18.944240
6000 /
tcp
\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)
321971019 | 2024-09-06T18:19:32.076091
6001 /
tcp
-ERR client ip is not in whitelist\r
1189133115 | 2024-09-08T18:53:46.890030
6002 /
tcp
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8
-1399940268 | 2024-08-24T03:02:51.330075
6006 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-990879318 | 2024-08-11T08:38:03.890266
6009 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae282f_PSzqstdx2ps251_42949-15351
2087396567 | 2024-08-14T07:50:59.055153
6085 /
tcp
kjnkjabhbanc283ubcsbhdc72
1989907056 | 2024-08-19T21:13:37.325531
6265 /
tcp
RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n
321971019 | 2024-08-28T17:20:55.844739
6379 /
tcp
-ERR client ip is not in whitelist\r
-567525787 | 2024-08-25T09:33:16.938064
6443 /
tcp
HTTP/1.1 403 Forbidden
Date: Sun, 25 Aug 2024 09:33:16 GMT
Content-Type: text/html
Content-Length: 238
Connection: keep-alive
Server: Tengine
Location: https://logview.aliyun.com
Via: kunlun14.cn9504[,0]
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:49:b2:86:90:3c:9b:46:7a:60:5b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: May 5 06:21:16 2023 GMT
Not After : Jun 5 06:21:15 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a6:ef:21:03:32:87:cf:fe:71:dd:e3:77:1a:02:
e4:99:61:4d:d7:0e:61:ad:0c:01:46:50:25:b8:17:
9e:64:9d:ae:7a:06:3d:0c:5d:15:a3:fd:38:d9:e9:
30:f0:ee:95:9a:39:ce:3f:f0:b6:4b:3d:c9:03:e6:
e2:61:a2:a5:fc:09:f5:47:8b:31:8c:14:3e:36:0e:
a0:8a:5d:a6:af:cb:79:6a:1b:9c:d0:31:ec:e2:e4:
97:6c:20:a4:d8:bb:30:38:89:67:ec:8b:96:44:e3:
ef:a3:49:e8:93:13:87:44:c7:11:b9:80:37:6a:74:
69:33:4a:0b:50:29:43:60:59:37:80:12:90:15:35:
52:49:30:a9:56:df:86:eb:ca:2f:d2:40:84:7c:df:
8f:f9:28:6b:58:b3:3b:d7:5d:3f:18:3e:b7:77:01:
d0:b2:76:f1:6d:52:71:17:4f:c6:a3:78:88:d5:67:
20:77:1d:58:34:2e:21:be:69:21:d9:85:3c:be:15:
88:31:e7:32:40:51:8d:0a:0b:af:76:36:b9:c6:57:
0b:56:7b:c9:28:0a:18:86:49:e8:d7:e0:63:e1:c6:
e5:5d:bc:f6:e9:b7:8c:70:b3:46:42:8a:f1:28:66:
7e:f6:5e:04:b4:88:bd:75:97:27:b0:d5:3f:23:c9:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.aliyun.com, DNS:aliyun.com, DNS:doshion.taobao.com, DNS:repo.aliyun.com, DNS:toojs.abbs.tmall.com, DNS:filebroker-lzd-id.alibaba.com, DNS:27home.aliyun.com, DNS:qihong.taobao.com, DNS:troae2.sn.ojibobo-ina.aon.alibaba-inc.com, DNS:purchase.cbbs.tmall.com, DNS:shod.re.taobao.com, DNS:jobs.rmap.alibaba.net, DNS:shog36910373.taobao.com, DNS:mail.zjxgchem.com, DNS:passport.hemarket.cn, DNS:shop84659y5567125.1688.com, DNS:app118505.eapps.dingtalkcloud.com, DNS:orns-gortioj-an-hongzhov.as.ojiyvn-ina.aon.aliyun-inc.com, DNS:shop36904827.aliyun.com, DNS:goocan.aliwork.com, DNS:acs-m.confong.cn, DNS:errlogos.umeng.com, DNS:shjonso.1688.com, DNS:ae-wms.sg.cainiao.com, DNS:afc.alibaba-inc.com, DNS:san-ogi.ojibobo-ina.aon.alibaba-inc.com, DNS:fui.amap.com, DNS:whitewalkers.alibaba-inc.com, DNS:bidding.devoto.ojiyvn-ina.aon.aliyun-inc.com, DNS:pre-sp-doorkeeper.aliyun.com, DNS:genoisi.tmall.com, DNS:adcluster.aliyun.com, DNS:stars.shuqireader.com, DNS:xnet2-terminator.aliyun.com, DNS:partners-api.redmart.com, DNS:btaorogjost.en.alibaba.com, DNS:viger.ojiyvn-ina.aon.aliyun-inc.com, DNS:107.aliyun.com, DNS:mxjinpu.aliyun.com, DNS:nojj.1688.com, DNS:hanhenthh.aliexpress.com, DNS:g-acs.m.goofish.com, DNS:s360.lazada.com, DNS:fito.alibaba.com, DNS:edith.wapa.taobao.com, DNS:stotvs.taobao.com, DNS:bata.pop.saee.org.cn, DNS:shop1468860913243.aliyun.com, DNS:app4860.eapps.dingtalkcloud.com, DNS:scp-xunxi.taobao.net, DNS:sellercenter-sg.lazada-seller.cn, DNS:app16962.eapps.dingtalkcloud.com, DNS:lpdv5.ele.me, DNS:grsr.tmall.com, DNS:apros.yunos.com, DNS:c.lazada.com.ph, DNS:os.aliyun.com, DNS:iflow-tb.uc.cn, DNS:shog637356dv869h0.1688.com, DNS:passport.aliyun.com, DNS:member-p.lazada.co.id, DNS:bjcyhy.aliyun.com, DNS:fds.taobao.com, DNS:ckmonitor.alimama.com, DNS:cloud.video.aliyun.com, DNS:shop36481895.taobao.com, DNS:18026237757.1688.com, DNS:anns-serviae.ojibobo-ina.aon.alibaba-inc.com, DNS:edas-internal-ap-southeast-1.aliyun.com, DNS:shog393605640.taobao.com, DNS:shog637356dv869h0.1688.com, DNS:jhdz18664135873.1688.com, DNS:jingyonnjnj.1688.com, DNS:mail.porsche-wenzhou-binhai.com, DNS:ogisgea-shore.aliyuncs.com, DNS:oji-ndn.ojibobo-ina.aon.alibaba-inc.com, DNS:batit.aliyun.com, DNS:wwwsigned.faas.ele.me, DNS:08dong.bjog.ahino.alibaba.com, DNS:svdor.1688.com, DNS:knsbvijd.fn.alibaba.com, DNS:ahonnej.oxs.tesjo.ojibobo-ina.aon.alibaba-inc.com, DNS:ecm.cn-shanghai.aliyuncs.com, DNS:jdsdts.world.aliyun.com, DNS:netriahvb-an-shenzhen.aliyun.com, DNS:shop428746655.aliyun.com, DNS:shog36502625.taobao.com, DNS:vga-shore.an-qingdoo.aliyuncs.com, DNS:app58920.eapps.dingtalkcloud.com, DNS:oa.capinfo.com.cn, DNS:www.cfradio.cn, DNS:jvtenghvi.1688.com, DNS:eco-acc.lazada.com.my, DNS:scp-xunxi.taobao.net, DNS:dionond-inner.aliyuncs.com, DNS:cicmav.aliwork.com, DNS:fpfx3f.aliyun.com, DNS:10101979.fm.aliyun.com, DNS:shog36299507.taobao.com, DNS:bata.carie.saee.org.cn
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
59:3e:1d:cf:51:d8:45:d2:f5:c8:6b:1b:ea:78:06:20:ff:e5:
e7:63:b6:7a:72:a4:bc:6b:0c:3c:33:bd:bc:0c:0a:38:3b:7a:
71:f3:1b:5c:8d:14:81:68:9a:b1:e0:14:81:65:b1:ad:d9:37:
d4:e8:15:27:de:55:0f:83:53:ae:b2:2b:b9:e2:8a:94:b2:95:
5b:a6:f9:33:3a:5a:e5:54:cc:a8:c5:ad:52:4f:61:1b:73:d5:
2c:f3:76:33:de:1f:19:5d:21:89:4d:cb:ee:f3:2b:b6:94:0e:
e8:5c:5e:5d:95:51:c9:48:4e:aa:ed:a9:f1:5f:3c:b7:c7:5a:
b9:dc:26:7f:64:73:dc:9b:a0:c9:65:1c:c5:07:ab:3c:5c:7e:
6d:77:24:15:a8:1d:84:ba:00:44:ee:ed:f8:41:4e:fb:d3:32:
aa:d7:f7:7b:85:6a:90:8f:7d:98:1e:af:84:28:5c:6b:2b:8b:
84:f5:51:43:d2:7a:bd:09:ad:af:35:34:73:0c:6f:f6:33:58:
f6:84:7f:ea:ae:ad:c1:32:30:e6:1c:37:9b:0f:8f:d4:1d:36:
c8:2f:bd:ef:c9:89:dd:6a:56:86:8e:e4:16:59:72:91:dd:ce:
aa:b4:80:fb:c0:94:62:4e:1f:b6:ce:22:cd:a3:e9:b6:b3:2a:
8a:a9:a1:a8
-1056270173 | 2024-09-07T05:16:25.923348
6580 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
-1327660293 | 2024-09-06T14:44:22.906583
6633 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
1911457608 | 2024-09-06T16:53:13.519193
6653 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-321444299 | 2024-08-19T00:00:14.132640
6664 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.
-696112747 | 2024-09-05T18:29:24.564735
6666 /
tcp
\x00\x0e@\xbdT\xa7\xd0f(*\xd4\x00\x00\x00\x00\x00
-375604792 | 2024-08-25T21:16:16.285288
6697 /
tcp
220 Microsoft FTP Service
-1114821551 | 2024-09-07T23:51:59.237561
6748 /
tcp
\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol
410249975 | 2024-08-11T19:12:58.400141
6887 /
tcp
-579195550 | 2024-09-03T12:19:38.507090
7000 /
tcp
HTTP/1.1 407 Proxy Authentication Required
Content-Type: text/plain; charset=utf-8
Proxy-Authenticate: Basic realm="proxy"
-1888448627 | 2024-08-20T00:30:15.611154
7171 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
819727972 | 2024-09-08T08:57:24.647362
7218 /
tcp
-527005584 | 2024-08-27T20:53:41.922378
7316 /
tcp
1975288991 | 2024-09-07T14:25:07.169178
7415 /
tcp
-1392039491 | 2024-09-06T13:52:33.077514
7434 /
tcp
"Broadband Router"
<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad
1342763855 | 2024-08-20T21:29:37.334076
7443 /
tcp
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Connection: close
Server: Nginx
Expires: 0
Pragma: no-cache
Cache-Control: no-cache
X-LANG: 1
X-Timezone: 0800
X-Timestamp: 1705912071
X-Arch: x86
X-Sysbit: x64
X-Enterprise: 0
X-Support-i18n: 0
X-Support-wifi: 0
Location: /login
841014058 | 2024-08-31T03:31:09.854906
7474 /
tcp
Hello, this is FRRouting (version 4.0).
Copyright 19
96-2005 Kunihiro Ishiguro, et al.
Use...
117101543 | 2024-08-15T14:14:48.039066
7510 /
tcp
\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n
-1311598826 | 2024-09-08T23:31:26.976498
7547 /
tcp
AMQP:
cluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local
copyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.
information:Licensed under the MPL 2.0. Website: https://rabbitmq.com
platform:Erlang/OTP 24.1
product:RabbitMQ
version:3.9.7
Capabilities:
publisher_confirms:true
exchange_exchange_bindings:true
basic.nack:true
consumer_cancel_notify:true
connection.blocked:true
consumer_priorities:true
authentication_failure_close:true
per_consumer_qos:true
direct_reply_to:tru
2087396567 | 2024-09-06T10:23:40.300437
7548 /
tcp
kjnkjabhbanc283ubcsbhdc72
957278843 | 2024-08-31T00:30:12.814267
7557 /
tcp
2087396567 | 2024-08-31T17:29:19.955291
7634 /
tcp
kjnkjabhbanc283ubcsbhdc72
-952165951 | 2024-08-24T01:56:45.932727
7654 /
tcp
-1316491703 | 2024-09-01T09:02:11.739318
7657 /
tcp
200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready
-1344535834 | 2024-09-09T08:08:21.521460
7779 /
tcp
HTTP/1.0 200 OK
Server: Proxy
-314039103 | 2024-08-18T21:18:09.397653
7989 /
tcp
Surnom.
Sorry, that nickname format is invalid.
-1204391172 | 2024-08-19T10:20:26.829324
8000 /
tcp
1072892569 | 2024-09-02T14:23:08.132370
8001 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
2087396567 | 2024-08-18T21:48:13.717967
8002 /
tcp
kjnkjabhbanc283ubcsbhdc72
1690634669 | 2024-09-07T16:58:17.878688
8009 /
tcp
-1746074029 | 2024-08-12T17:27:39.557657
8015 /
tcp
-1428621233 | 2024-08-23T15:47:08.833778
8027 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
-18839499 | 2024-08-24T00:14:31.718578
8031 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 657cf309_gangwangtong32_18208-2853
104385780 | 2024-09-06T21:32:08.030893
8039 /
tcp
-734844577 | 2024-08-25T19:41:15.248166
8042 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 657d1c3a_PSfjfzdx2nh100_10014-18094
1911457608 | 2024-09-01T23:58:07.203106
8043 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
932130308 | 2024-08-26T08:20:01.113548
8045 /
tcp
HTTP/1.1 404 Not Found
content-type: text/plain;charset=utf-8
content-length: 10
165188539 | 2024-08-14T19:18:14.013404
8050 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1641514916 | 2024-09-05T13:18:17.104547
8053 /
tcp
* OK Merak 1dFUa2 IMAP4rev1
-1839934832 | 2024-08-28T18:45:37.994103
8056 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
474736340 | 2024-08-19T00:12:08.628500
8081 /
tcp
431 Unable to negotiate secure command connection.
2103111368 | 2024-09-05T12:53:44.356950
8083 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
<?...
1412519768 | 2024-08-26T03:00:19.684369
8085 /
tcp
"AP0F1D85"
Connection: close
<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR
104385780 | 2024-09-03T04:08:43.912008
8086 /
tcp
-1839934832 | 2024-08-31T13:24:57.246386
8087 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
1911457608 | 2024-09-04T10:12:13.768934
8088 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1529979118 | 2024-08-30T04:26:04.146093
8089 /
tcp
842535728 | 2024-08-31T21:10:23.222566
8098 /
tcp
<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
<!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...
-1639624373 | 2024-08-21T16:04:21.410470
8099 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28c9_CS-000-01kgX25_35624-12255
819727972 | 2024-08-13T04:24:05.392572
8104 /
tcp
1620329124 | 2024-08-19T10:25:38.964960
8109 /
tcp
\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:
-1729629024 | 2024-08-23T13:48:09.045660
8126 /
tcp
819727972 | 2024-08-20T00:17:24.973406
8139 /
tcp
104385780 | 2024-09-04T21:30:13.076453
8140 /
tcp
1741579575 | 2024-09-06T04:16:16.632728
8181 /
tcp
-2096652808 | 2024-08-26T03:46:47.569327
8184 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1264324149 | 2024-09-03T14:24:02.817737
8200 /
tcp
Siemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready
ÿû\x01ÿû\x03ÿý\x01ÿþ\x01Username:
1911457608 | 2024-08-11T06:09:50.061218
8238 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-358801646 | 2024-08-24T10:39:05.634898
8243 /
tcp
-2046514463 | 2024-08-15T22:23:48.416192
8291 /
tcp
-1261053701 | 2024-09-08T02:45:52.966669
8333 /
tcp
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
-321444299 | 2024-08-24T06:06:03.357626
8334 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.
-1835577706 | 2024-08-24T09:06:12.504846
8383 /
tcp
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
-1733645023 | 2024-09-04T06:39:28.746896
8413 /
tcp
SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10
921225407 | 2024-09-07T14:43:22.861170
8420 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
1126993057 | 2024-08-31T14:11:01.356113
8423 /
tcp
* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at
1077013874 | 2024-08-26T19:56:18.036986
8428 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
-1032713145 | 2024-08-16T01:39:43.521027
8430 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1
-981207364 | 2024-08-31T07:25:30.911517
8443 /
tcp
HTTP/1.1 301 Moved Permanently
Date: Sat, 31 Aug 2024 07:25:30 GMT
Content-Type: text/html
Content-Length: 260
Connection: keep-alive
Eagleeye-Traceid: 71f43b9b04fcd31c86592b03ebcab3
Location: https://knowledgemanagement.alitrip.hk
Server: Tengine/Aserver
Timing-Allow-Origin: *
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:35:2e:4a:35:dc:34:ed:3b:e8:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: Apr 12 23:17:04 2023 GMT
Not After : May 13 23:11:02 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.alibabacorp.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:ce:df:cc:8f:47:6d:5a:12:18:79:11:07:b2:3a:
7f:d1:f4:cb:e6:51:3c:15:3b:2c:9d:68:96:80:ba:
53:a5:9a:69:0e:9e:64:7b:bb:5c:9a:ad:24:36:58:
0f:5f:36:4a:8e:28:7e:25:7c:9f:36:43:a8:da:32:
95:8c:ad:ca:32
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
EB:3E:07:A3:E1:1B:8B:BD:B5:1C:00:D6:2C:14:E5:3E:32:B8:48:18
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.alibabacorp.com, DNS:*.56.cainiao-inc.com, DNS:*.56.cainiao.com, DNS:*.9game.cn, DNS:*.a.alibaba-inc.com, DNS:*.abs.alibaba-inc.com, DNS:*.acc.alibaba-inc.com, DNS:*.acds.taobao.org, DNS:*.acp.alibaba-inc.com, DNS:*.acs.alibabaplanet.com, DNS:*.addr.cainiao-inc.com, DNS:*.admin.alibaba-inc.com, DNS:*.admin.alitrip.com, DNS:*.admin.cainiao-inc.com, DNS:*.admin.fliggy.com, DNS:shog1301373o611i7.1688.com, DNS:oggs.1688.com, DNS:print.gfn.cainiao.com, DNS:web.lazada.com, DNS:shop497241465.taobao.com, DNS:security-nash-web.zhangjiakou.zone, DNS:cbu-xiaoer.aliyun.com, DNS:ide-jog-ogent.oone.ojibobo-ina.aon.alibaba-inc.com, DNS:shog36415005.taobao.com, DNS:edsoggavstoner-vga.an-ahengdv.aliyuncs.com, DNS:eai-vga.an-ahengdv.aliyuncs.com, DNS:shop36322980.aliyun.com, DNS:sjs4serviae.aonsoje.aliyun.com, DNS:app73960.eapps.dingtalkcloud.com, DNS:mse-vpc.ap-southeast-5.aliyuncs.com, DNS:zsdxad.1688.com, DNS:www22.aliexpress.com, DNS:cicef.org.cn, DNS:unpm-upaas.quark.cn, DNS:hvoyijiojv.tmall.com, DNS:dlc-gateway.pai-damo.alibaba-inc.com, DNS:ticket.aliyun.com, DNS:shop1429527762715.aliyun.com, DNS:code-ssr.fc.aliyun.com, DNS:fbi.lazada.com, DNS:sjender.ojibobo-ina.aon.alibaba-inc.com, DNS:api-xspace.daraz.com, DNS:090826.aliyun.com, DNS:insvronae.tmall.com, DNS:oogi.o2.ojibobo-ina.aon.alibaba-inc.com, DNS:shog413558627.taobao.com, DNS:www9.buntleben.xixikf.cn, DNS:api.aliyun.com, DNS:yiwuzy.aliyun.com, DNS:biaoju.aliyun.com, DNS:hcwms.aliyun.com, DNS:oa.dingtalk.com
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
7f:1f:f4:27:6c:22:9a:a6:28:b4:d1:81:46:90:db:1c:01:ae:
70:8a:96:ac:de:90:b5:d3:9c:0f:fe:08:1a:6f:67:38:fd:c6:
8a:7b:da:6c:76:54:d9:cf:57:e8:8f:fb:34:82:89:64:b2:66:
d3:ce:e9:59:c0:58:ba:b2:e1:45:6f:b8:56:9d:f2:0e:a9:5b:
30:a0:ca:c5:7b:05:7d:3e:ae:de:76:42:08:05:77:60:95:44:
a5:ed:27:e6:54:11:0b:b2:e6:63:62:f1:49:1e:70:2b:73:23:
8b:af:f6:03:3f:33:5e:a1:55:4b:d6:87:c2:21:ae:c0:53:75:
c1:58:27:68:4b:6c:59:a3:10:85:d8:4d:c3:14:af:df:dc:dd:
1c:b9:d0:40:56:4b:9b:7a:c6:d0:c9:b2:3d:6f:c0:a1:54:56:
2a:6f:1f:a5:9a:4d:f9:8b:04:6b:5c:87:02:5c:18:d7:bb:06:
75:03:6e:4b:7a:b8:b8:d7:24:a4:3c:98:9e:cf:fe:3b:82:12:
35:07:42:fe:33:0b:2b:dd:6b:bd:fe:29:e0:93:87:b3:1a:35:
0a:47:7f:46:5e:77:38:f2:25:06:cf:96:c5:9d:81:e8:a8:33:
ba:18:a7:51:67:9c:10:8a:5a:b7:c0:ed:12:be:2c:7c:00:fe:
d5:fe:af:c2
1929293267 | 2024-08-22T02:45:30.996192
8500 /
tcp
HTTP/1.1 404 Not Found
Server: nginx
Content-Type: text/html; charset=utf-8
Connection: keep-alive
1543809371 | 2024-08-31T09:50:07.373143
8545 /
tcp
220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])
660175493 | 2024-09-02T07:45:12.615008
8554 /
tcp
119860953 | 2024-08-30T12:29:54.053992
8622 /
tcp
* OK ArGoSoft Mail Server IMAP Module v.YW at
921225407 | 2024-09-03T21:04:14.671243
8688 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
165188539 | 2024-09-05T12:06:23.759462
8728 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1399940268 | 2024-08-21T17:59:22.287897
8782 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1278527606 | 2024-08-14T05:09:48.057918
8805 /
tcp
1492413928 | 2024-09-04T08:11:55.989133
8808 /
tcp
1911457608 | 2024-08-21T18:52:37.496713
8816 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1779118422 | 2024-08-31T12:00:52.315566
8824 /
tcp
\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00
1911457608 | 2024-08-23T13:55:17.244726
8830 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1036370807 | 2024-09-01T08:03:59.991486
8834 /
tcp
-653033013 | 2024-08-27T03:55:16.583355
8837 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
1911457608 | 2024-08-29T22:48:22.906706
8872 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
921225407 | 2024-09-03T22:31:11.836518
8877 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
-1399940268 | 2024-08-15T18:30:24.869191
8887 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
372433470 | 2024-08-25T02:03:15.461945
8899 /
tcp
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""
-1399940268 | 2024-08-15T15:59:24.890062
8989 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2067028711 | 2024-08-28T04:22:41.590687
9000 /
tcp
\x15\x03\x01\x00\x02\x02F
-1026951088 | 2024-09-07T17:26:36.607401
9001 /
tcp
819727972 | 2024-09-02T15:42:51.457933
9002 /
tcp
1077013874 | 2024-08-17T11:37:52.017279
9003 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
2098371729 | 2024-08-17T18:57:39.310620
9006 /
tcp
<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n
921225407 | 2024-08-13T02:43:01.525669
9007 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
580340387 | 2024-08-14T21:08:22.773735
9014 /
tcp
220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n ABOR \n ACCT \n ADAT *\n ALLO \n APPE \n AUTH \n CCC \n CDUP \n CWD \n DELE \n ENC *\n EPRT \n EPSV \n FEAT \n HELP \n HOST \n LANG \n LIST ...
-1105333987 | 2024-08-26T13:22:56.849066
9016 /
tcp
819727972 | 2024-09-06T13:12:56.065930
9019 /
tcp
1830187220 | 2024-09-05T18:02:32.778258
9020 /
tcp
\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->
1762042191 | 2024-08-24T16:58:14.871546
9026 /
tcp
1543809371 | 2024-08-20T18:12:38.090048
9030 /
tcp
220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])
1911457608 | 2024-08-29T10:47:13.792833
9032 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
380146262 | 2024-08-25T21:51:46.098275
9038 /
tcp
-138733098 | 2024-09-07T14:52:11.484548
9042 /
tcp
-1839934832 | 2024-08-18T12:59:56.852418
9046 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
819727972 | 2024-09-08T19:27:23.347732
9051 /
tcp
-1538260461 | 2024-09-07T14:57:45.126016
9088 /
tcp
1827807483 | 2024-08-24T07:01:53.354042
9090 /
tcp
HTTP/1.1 401 Unauthorized
Server:
Cache-Control: no-cache,no-store
Content-Type: text/html; charset=%s
Connection: close
819727972 | 2024-09-01T09:27:23.267039
9091 /
tcp
-454087041 | 2024-09-04T04:36:01.907175
9095 /
tcp
\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00
-1839934832 | 2024-08-25T12:11:03.414298
9096 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-585940771 | 2024-08-29T03:28:01.943491
9100 /
tcp
1761482307 | 2024-08-14T12:14:32.089362
9103 /
tcp
\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00
314154374 | 2024-08-21T19:44:37.453398
9110 /
tcp
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Content-Type: text/html; charset=utf-8
Permissions-Policy: camera=(), geolocation=()
Pragma: no-cache
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
-1648456501 | 2024-09-08T19:16:34.767155
9111 /
tcp
\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)
988099889 | 2024-08-31T21:47:09.307445
9151 /
tcp
-2089734047 | 2024-08-27T03:54:52.550448
9160 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
64723441 | 2024-08-16T00:45:12.860353
9200 /
tcp
HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-JShuaian-CMCCZJ1-CACHE50[1]
X-CCDN-FORBID-CODE: 040001
-2089734047 | 2024-08-10T21:06:29.163844
9201 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-2089734047 | 2024-08-30T11:45:32.451977
9202 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1888448627 | 2024-09-06T02:23:03.201301
9207 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
165188539 | 2024-08-17T15:49:27.590087
9209 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1327660293 | 2024-08-24T22:34:18.662114
9219 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
307999478 | 2024-08-27T09:09:46.484895
9251 /
tcp
unknown command \r\nunknown command \r\n
-1399940268 | 2024-08-27T22:26:11.701195
9299 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1248408558 | 2024-08-26T09:34:30.789689
9303 /
tcp
220 MikroTik FTP server (MikroTik 6.44.3) ready
1126993057 | 2024-09-09T00:16:45.015042
9306 /
tcp
* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at
-1399940268 | 2024-08-28T07:42:05.715779
9308 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1332894250 | 2024-08-18T04:29:21.611902
9333 /
tcp
\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:
-2031152423 | 2024-09-02T21:41:31.925916
9389 /
tcp
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
2087396567 | 2024-08-28T05:35:28.986490
9398 /
tcp
kjnkjabhbanc283ubcsbhdc72
1909672637 | 2024-08-21T19:28:13.063080
9418 /
tcp
HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff
945910976 | 2024-09-08T12:23:54.008684
9433 /
tcp
* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n
716363019 | 2024-08-27T06:27:28.291681
9443 /
tcp
HTTP/1.1 403 Forbidden
Date: Tue, 27 Aug 2024 06:27:28 GMT
Content-Type: text/html
Content-Length: 238
Connection: keep-alive
Server: Tengine
Location: https://b.cainiao.com
Via: cache49.cn6282[,0]
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:35:2e:4a:35:dc:34:ed:3b:e8:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: Apr 12 23:17:04 2023 GMT
Not After : May 13 23:11:02 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.alibabacorp.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:ce:df:cc:8f:47:6d:5a:12:18:79:11:07:b2:3a:
7f:d1:f4:cb:e6:51:3c:15:3b:2c:9d:68:96:80:ba:
53:a5:9a:69:0e:9e:64:7b:bb:5c:9a:ad:24:36:58:
0f:5f:36:4a:8e:28:7e:25:7c:9f:36:43:a8:da:32:
95:8c:ad:ca:32
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
EB:3E:07:A3:E1:1B:8B:BD:B5:1C:00:D6:2C:14:E5:3E:32:B8:48:18
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.alibabacorp.com, DNS:*.56.cainiao-inc.com, DNS:*.56.cainiao.com, DNS:*.9game.cn, DNS:*.a.alibaba-inc.com, DNS:*.abs.alibaba-inc.com, DNS:*.acc.alibaba-inc.com, DNS:*.acds.taobao.org, DNS:*.acp.alibaba-inc.com, DNS:*.acs.alibabaplanet.com, DNS:*.addr.cainiao-inc.com, DNS:*.admin.alibaba-inc.com, DNS:*.admin.alitrip.com, DNS:*.admin.cainiao-inc.com, DNS:*.admin.fliggy.com, DNS:shog1301373o611i7.1688.com, DNS:oggs.1688.com, DNS:print.gfn.cainiao.com, DNS:web.lazada.com, DNS:shop497241465.taobao.com, DNS:security-nash-web.zhangjiakou.zone, DNS:cbu-xiaoer.aliyun.com, DNS:ide-jog-ogent.oone.ojibobo-ina.aon.alibaba-inc.com, DNS:shog36415005.taobao.com, DNS:edsoggavstoner-vga.an-ahengdv.aliyuncs.com, DNS:eai-vga.an-ahengdv.aliyuncs.com, DNS:shop36322980.aliyun.com, DNS:sjs4serviae.aonsoje.aliyun.com, DNS:app73960.eapps.dingtalkcloud.com, DNS:mse-vpc.ap-southeast-5.aliyuncs.com, DNS:zsdxad.1688.com, DNS:www22.aliexpress.com, DNS:cicef.org.cn, DNS:unpm-upaas.quark.cn, DNS:hvoyijiojv.tmall.com, DNS:dlc-gateway.pai-damo.alibaba-inc.com, DNS:ticket.aliyun.com, DNS:shop1429527762715.aliyun.com, DNS:code-ssr.fc.aliyun.com, DNS:fbi.lazada.com, DNS:sjender.ojibobo-ina.aon.alibaba-inc.com, DNS:api-xspace.daraz.com, DNS:090826.aliyun.com, DNS:insvronae.tmall.com, DNS:oogi.o2.ojibobo-ina.aon.alibaba-inc.com, DNS:shog413558627.taobao.com, DNS:www9.buntleben.xixikf.cn, DNS:api.aliyun.com, DNS:yiwuzy.aliyun.com, DNS:biaoju.aliyun.com, DNS:hcwms.aliyun.com, DNS:oa.dingtalk.com
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
7f:1f:f4:27:6c:22:9a:a6:28:b4:d1:81:46:90:db:1c:01:ae:
70:8a:96:ac:de:90:b5:d3:9c:0f:fe:08:1a:6f:67:38:fd:c6:
8a:7b:da:6c:76:54:d9:cf:57:e8:8f:fb:34:82:89:64:b2:66:
d3:ce:e9:59:c0:58:ba:b2:e1:45:6f:b8:56:9d:f2:0e:a9:5b:
30:a0:ca:c5:7b:05:7d:3e:ae:de:76:42:08:05:77:60:95:44:
a5:ed:27:e6:54:11:0b:b2:e6:63:62:f1:49:1e:70:2b:73:23:
8b:af:f6:03:3f:33:5e:a1:55:4b:d6:87:c2:21:ae:c0:53:75:
c1:58:27:68:4b:6c:59:a3:10:85:d8:4d:c3:14:af:df:dc:dd:
1c:b9:d0:40:56:4b:9b:7a:c6:d0:c9:b2:3d:6f:c0:a1:54:56:
2a:6f:1f:a5:9a:4d:f9:8b:04:6b:5c:87:02:5c:18:d7:bb:06:
75:03:6e:4b:7a:b8:b8:d7:24:a4:3c:98:9e:cf:fe:3b:82:12:
35:07:42:fe:33:0b:2b:dd:6b:bd:fe:29:e0:93:87:b3:1a:35:
0a:47:7f:46:5e:77:38:f2:25:06:cf:96:c5:9d:81:e8:a8:33:
ba:18:a7:51:67:9c:10:8a:5a:b7:c0:ed:12:be:2c:7c:00:fe:
d5:fe:af:c2
1308377066 | 2024-09-06T01:45:14.387308
9530 /
tcp
1321679546 | 2024-08-31T10:47:10.621979
9595 /
tcp
819727972 | 2024-08-26T09:52:26.155857
9600 /
tcp
1321679546 | 2024-09-04T17:38:10.786665
9633 /
tcp
2087396567 | 2024-08-15T21:54:22.795382
9735 /
tcp
kjnkjabhbanc283ubcsbhdc72
1830187220 | 2024-08-10T17:19:33.041215
9743 /
tcp
\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->
-1730858130 | 2024-09-03T09:16:59.740066
9761 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
550048729 | 2024-08-25T16:22:07.323489
9869 /
tcp
1127011450 | 2024-09-08T10:09:47.795846
9876 /
tcp
HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Accept-Ranges: bytes
Content-Type: text/html;charset=utf-8
Content-Language: en
1615676803 | 2024-08-25T03:17:34.024873
9898 /
tcp
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Accept-Ranges: bytes
Etag: "s5sw6112h"
-659335736 | 2024-08-22T17:49:09.497200
9943 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2864_xyd119_11675-57009
-1839934832 | 2024-08-18T08:11:18.471262
9944 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
641705735 | 2024-08-10T20:26:19.966819
9981 /
tcp
-1223770960 | 2024-09-02T10:15:43.264247
9998 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28e5_PS-PEK-01Whk40_31773-63705
1161309183 | 2024-09-08T04:24:30.780193
9999 /
tcp
-1810987450 | 2024-09-02T02:49:38.946135
10000 /
tcp
1492413928 | 2024-09-09T09:01:46.340871
10001 /
tcp
-2140303521 | 2024-09-08T00:34:04.381021
10134 /
tcp
protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n
1632932802 | 2024-08-26T11:48:22.072070
10250 /
tcp
-1876018378 | 2024-09-04T14:24:44.345984
10443 /
tcp
HTTP/1.1 301 Moved Permanently
Date: Wed, 04 Sep 2024 14:24:43 GMT
Content-Type: text/html
Content-Length: 287
Connection: keep-alive
Eagleeye-Traceid: 52816e16b6ac86aed1a253747eda39
Location: https://elasticsearch-cn-shenzhen.console.aliyun.com
Server: Tengine/Aserver
Timing-Allow-Origin: *
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:49:b2:86:90:3c:9b:46:7a:60:5b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: May 5 06:21:16 2023 GMT
Not After : Jun 5 06:21:15 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:c7:cb:8c:48:08:48:af:89:01:66:08:4b:53:ed:
2a:fd:70:b2:61:40:46:9b:98:19:49:b9:9f:64:c8:
60:d6:2c:47:85:56:ca:c2:31:94:d2:3a:d3:c1:24:
91:c6:70:be:6f:53:3c:fb:ae:f2:e5:cf:3d:c5:6a:
95:ee:f3:5d:37:62:25:51:fb:69:dd:37:93:00:a3:
cf:dd:18:a9:af:5c:f7:6f:96:a2:92:27:65:21:92:
de:ff:c2:ec:d9:52:42:06:cd:84:44:20:f4:c1:15:
4b:13:27:c5:3d:f1:c3:e8:61:b2:41:f7:22:4d:3e:
08:20:b0:7c:b3:38:9c:ab:d6:fc:49:6b:b4:92:88:
16:2e:c7:62:23:33:43:a0:36:86:ca:80:8a:9e:b0:
73:01:50:54:33:06:4c:b9:a3:73:71:09:98:72:22:
6f:a7:9c:c3:3e:bd:ea:7f:57:dd:c2:d2:a0:85:21:
ae:a8:fb:16:d7:ef:a2:5b:8d:75:cf:b0:e5:cb:34:
78:cc:28:e6:27:13:6a:d4:96:f5:ac:de:f3:38:d5:
cc:7a:ba:c2:78:b9:5e:db:f8:2d:14:d1:4b:e0:6f:
31:e2:c9:5c:56:bd:31:2d:1c:94:d4:54:11:05:5f:
0f:54:cd:63:c3:98:af:33:c4:2e:ed:36:61:1a:66:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.aliyun.com, DNS:aliyun.com, DNS:hhgoi-dsd-dsd44826-80.gas-svr.ojibobo-ina.aon.alibaba-inc.com, DNS:ar-grivote-shore.ev-aentroj-1.aliyuncs.com, DNS:dotodorks-nonoger-ogi.dd.ojibobo-ina.aon.alibaba-inc.com, DNS:operate-api.yiupin.com, DNS:gd-dork.ojibobo-ina.aon.alibaba-inc.com, DNS:cn.aliyun.com, DNS:vot.ojibobo-ina.aon.alibaba-inc.com, DNS:pre-cockpit-test.aliyun.com, DNS:shop1432140437765.aliyun.com, DNS:gjon-3d.tmall.com, DNS:sell.xiangqing.taobao.com, DNS:gre-oah2.ojibobo-ina.aon.alibaba-inc.com, DNS:gre-stvdio.iot.aliyun.com, DNS:szrobotine.1688.com, DNS:dotaher.ojibobo-ina.aon.alibaba-inc.com, DNS:test-aenter.ojibobo-ina.aon.alibaba-inc.com, DNS:shog2a6250868e917.1688.com, DNS:solution.lazada.com.my, DNS:yjgts.aliyun.com, DNS:webim.lazada.com.my, DNS:regort.aliyun.com, DNS:shog36244836.taobao.com, DNS:login.portal.hemaos.com, DNS:lazada.cn, DNS:sts.og-northeost-1.aliyuncs.com, DNS:item.publish.tmall.com
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
46:8d:d5:3f:27:1b:ce:a8:1b:e1:d7:1b:99:f8:ca:ba:e6:33:
d1:64:df:65:bb:34:91:1c:f5:08:f9:18:d7:14:e0:9b:70:d0:
36:1b:c4:4d:88:bf:81:a5:6a:59:44:33:7e:99:66:01:99:5c:
84:0d:e1:af:44:a7:58:25:d7:77:98:62:08:e2:53:0e:d6:6c:
3a:d9:90:f6:ed:72:06:1a:2d:bb:d3:5f:c9:00:6f:48:c5:a7:
ea:2b:7b:42:0b:12:e3:be:cf:c6:f8:39:68:25:ff:e2:6d:67:
c2:13:29:7b:81:ea:67:83:66:b6:d2:e1:14:f1:45:75:0d:b5:
53:0f:32:5a:f3:4c:61:c0:d1:03:82:9f:b7:d0:a4:3c:92:da:
d1:28:c3:51:70:43:1e:aa:d8:51:76:4e:e7:5f:04:cb:56:c1:
b8:b4:22:e1:3d:87:85:ea:81:c1:3a:bc:12:68:ac:d1:28:1d:
ca:d0:cd:e8:be:62:34:62:2b:e8:d1:20:1e:c5:7c:9b:b2:41:
09:81:d9:6c:7c:9c:5b:f4:55:4a:b8:67:41:d1:f7:6f:ce:b2:
39:43:c2:5b:25:ec:08:67:51:51:b7:9c:85:40:27:eb:77:78:
4e:35:7c:19:a5:b6:1a:92:0e:06:9a:7c:67:88:46:74:71:21:
81:5f:47:41
-1990350878 | 2024-09-08T14:08:14.282931
10554 /
tcp
-1730858130 | 2024-09-07T20:23:00.478987
10909 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
-1839934832 | 2024-08-18T21:08:24.676277
10911 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
1911457608 | 2024-09-01T12:22:00.508573
11000 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1810987450 | 2024-09-04T06:14:18.438009
11112 /
tcp
677934968 | 2024-08-30T19:23:48.703585
11210 /
tcp
-136006866 | 2024-08-16T07:44:27.822072
11211 /
tcp
STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND
-784071826 | 2024-08-25T09:18:08.630542
11300 /
tcp
459162008 | 2024-09-07T06:03:30.666972
11371 /
tcp
-1723613895 | 2024-09-08T08:54:27.791558
12000 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2232_PS-HAK-01h6h34_6336-63973
296364507 | 2024-09-08T09:40:52.480784
12345 /
tcp
HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html
-21576419 | 2024-09-07T14:39:08.067940
13579 /
tcp
ÿûUDo you want ANSI color? (Y/n)
1574088840 | 2024-08-31T05:04:30.085485
14147 /
tcp
">Application and Content Networking Software 3.9</a>)\n</BODY><
632542934 | 2024-09-02T14:30:24.320148
14344 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
-1248408558 | 2024-08-23T04:57:21.557235
15301 /
tcp
220 MikroTik FTP server (MikroTik 6.44.3) ready
1282941221 | 2024-08-16T22:15:46.697880
15443 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
585675468 | 2024-08-12T05:52:12.401211
16010 /
tcp
1544300041 | 2024-08-30T11:03:06.730959
16030 /
tcp
SSH-25453-Cisco-3524665.35
2087396567 | 2024-09-03T22:44:06.449420
16285 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1900404274 | 2024-09-03T12:20:13.320943
16992 /
tcp
2087396567 | 2024-08-20T07:14:08.455347
18080 /
tcp
kjnkjabhbanc283ubcsbhdc72
1911457608 | 2024-09-01T17:07:40.302404
18081 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-08-30T09:59:15.991978
18245 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
799468586 | 2024-08-17T13:48:05.356451
18443 /
tcp
-832380282 | 2024-09-03T04:04:00.591782
19000 /
tcp
lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n
819727972 | 2024-08-22T04:32:21.896900
19200 /
tcp
1900503736 | 2024-09-07T20:43:42.490038
20000 /
tcp
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0
171352214 | 2024-09-04T23:01:41.802173
20256 /
tcp
-ERR client ip is not in whitelist
971933601 | 2024-08-22T21:52:05.129850
20547 /
tcp
HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html
1911457608 | 2024-09-09T06:55:32.143146
21379 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-2107996212 | 2024-08-25T06:11:00.760628
22000 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
1308377066 | 2024-08-22T08:03:18.701826
22001 /
tcp
1911495665 | 2024-09-06T07:58:26.071543
23023 /
tcp
"Magic:ActiveMQ
Version:12
<ActiveMQ * TcpNoDelayEnabledSizePrefixDisabled CacheSize ProviderName ActiveMQStackTraceEnabledPlatformDetails Java CacheEnabledTightEncodingEnabled MaxFrameSize@MaxInac
-653033013 | 2024-09-04T01:48:12.254598
25001 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
575925250 | 2024-09-08T16:43:53.542661
25565 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
-358801646 | 2024-08-17T17:39:36.453247
26657 /
tcp
-80321085 | 2024-09-03T01:27:14.966224
27015 /
tcp
Command: None
Size: 1802398315
ID: 1751277930
Type: 1668178274
1763259671 | 2024-08-29T00:17:11.800276
27017 /
tcp
{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n
819727972 | 2024-08-13T05:29:50.414613
28080 /
tcp
-1681927087 | 2024-08-22T15:19:43.515121
30002 /
tcp
kjnkjabhbanc283ubcsbhdc72
-358801646 | 2024-08-27T13:06:59.518485
30003 /
tcp
-653033013 | 2024-08-20T22:27:15.016149
30301 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
-786044033 | 2024-08-15T09:44:01.723352
31337 /
tcp
OK Welcome <299685> on DirectUpdate server 7286
1690634669 | 2024-08-17T09:37:39.491602
31443 /
tcp
1072892569 | 2024-08-22T02:31:33.772330
32400 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
819727972 | 2024-08-28T08:05:00.693683
32764 /
tcp
-971970408 | 2024-08-20T16:31:52.305851
33445 /
tcp
632542934 | 2024-09-08T12:39:18.037518
35000 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
290819026 | 2024-08-15T05:21:50.967102
37215 /
tcp
welcome to Pandora console!
----------------------------
-------------------------
| Login Time | 2021-12-08 1...
1911457608 | 2024-08-29T19:05:02.417553
37777 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
819727972 | 2024-08-18T00:42:43.270614
38333 /
tcp
-1888448627 | 2024-09-04T08:55:32.493948
41800 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-971970408 | 2024-09-03T20:28:12.257618
42398 /
tcp
-1441741890 | 2024-08-24T02:23:42.127573
43118 /
tcp
220 corpease.net Anti-spam GT for Coremail System (icmhosting[2
0181212])
-433302150 | 2024-09-09T05:58:12.311965
44158 /
tcp
1911457608 | 2024-08-14T03:04:47.138614
44818 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-971970408 | 2024-09-07T02:57:14.446167
47990 /
tcp
-2006700298 | 2024-09-07T04:20:59.755625
49152 /
tcp
HTTP/1.1 500 Internal Server Error
CONTENT-LENGTH: 411
CONTENT-TYPE: text/xml; charset="utf-8"
DATE: Mon, 03 Jan 2000 05:26:54 GMT
EXT:
SERVER: Linux/2.4.30, UPnP/1.0, Portable SDK for UPnP devices/1.3.1
X-User-Agent: redsonic
<s:Envelope
xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<s:Body>
<s:Fault>
<faultcode>s:Client</faultcode>
-1136600457 | 2024-09-09T02:32:42.484824
50000 /
tcp
HELO:10.3.6.0.false
AS:2048
HL:19
-1316491703 | 2024-08-28T18:39:55.716165
50050 /
tcp
200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready
-1344535834 | 2024-08-26T02:47:52.000515
50070 /
tcp
HTTP/1.0 200 OK
Server: Proxy
366084633 | 2024-08-16T01:16:03.736050
50100 /
tcp
<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>
-1729629024 | 2024-08-15T22:02:30.157196
51413 /
tcp
-339084706 | 2024-08-28T16:31:01.003758
54138 /
tcp
200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n
819727972 | 2024-09-05T05:11:28.585246
54321 /
tcp
-319440554 | 2024-08-28T20:36:45.763334
54361 /
tcp
-1399940268 | 2024-08-16T06:32:13.788260
55000 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
171352214 | 2024-08-24T23:05:23.862196
55553 /
tcp
-ERR client ip is not in whitelist
-1626979812 | 2024-08-21T05:06:15.629684
55554 /
tcp
220 Service ready for new user.
-1344535834 | 2024-08-16T17:03:21.331374
60001 /
tcp
HTTP/1.0 200 OK
Server: Proxy
1321679546 | 2024-08-16T02:48:28.044710
60129 /
tcp
1282941221 | 2024-09-04T00:06:32.251708
60567 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
-1099385124 | 2024-09-06T09:14:04.303622
61613 /
tcp
"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac
2087396567 | 2024-09-02T16:20:24.321075
61616 /
tcp
kjnkjabhbanc283ubcsbhdc72
1842317374 | 2024-09-04T10:16:39.286953
62078 /
tcp
/1.1 400 Bad Request
Server: nginx/1.13.0
Content-Type: text/html
Connection: close
1984588611 | 2024-08-24T03:58:11.026881
62200 /
tcp
321971019 | 2024-08-31T22:37:37.045622
63210 /
tcp
-ERR client ip is not in whitelist\r
