2087396567 | 2024-10-22T04:16:00.242792
11 /
tcp
kjnkjabhbanc283ubcsbhdc72
1286504516 | 2024-10-15T02:53:23.955188
13 /
tcp
CP2E Control Console
Connected to Host: gZI
2087396567 | 2024-10-16T21:50:32.024964
15 /
tcp
kjnkjabhbanc283ubcsbhdc72
344087494 | 2024-10-19T04:46:14.928868
17 /
tcp
"When a stupid man is doing something he is ashamed of, he always declares
that it is his duty." George Bernard Shaw (1856-1950)
\x00
1978059005 | 2024-10-14T08:48:52.377760
19 /
tcp
Sorry, that nickname format is invalid.
-702037155 | 2024-10-10T05:28:48.335538
21 /
tcp
220 Ftp firmware update utility
460589547 | 2024-10-10T07:43:18.787992
23 /
tcp
819727972 | 2024-10-08T18:53:12.808193
25 /
tcp
726777565 | 2024-09-25T03:00:45.475682
37 /
tcp
632542934 | 2024-10-20T03:31:18.903465
43 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
-1867457549 | 2024-10-15T08:54:23.261873
49 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
-42462918 | 2024-10-01T03:28:28.944663
53 /
tcp
9
\x81\x05\x00\x01\x00\x00\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01
\x00\x06\x85\x00\x00\x01\x00\x01\x00\x01\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03\xc0 \x00\x10\x00\x03\x00\x00\x00\x00\x00\x05\x04none\xc0 \x00\x02\x00\x03\
-876294238 | 2024-10-11T19:27:15.296476
79 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Content-Type: text/html
Connection: close
1329271584 | 2024-10-20T18:23:26.936377
80 /
tcp
HTTP/1.1 403 Forbidden
Server: AliyunOSS
Date: Sun, 20 Oct 2024 18:23:26 GMT
Content-Type: application/xml
Content-Length: 345
Connection: keep-alive
x-oss-request-id: 67154A9EBEAC053036617783
x-oss-server-time: 0
x-oss-ec: 0003-00001201
-2118655245 | 2024-09-25T00:07:14.775987
81 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
-1648456501 | 2024-10-12T15:58:33.356173
102 /
tcp
\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)
921225407 | 2024-10-16T04:01:59.439122
104 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
-669112739 | 2024-10-18T21:55:53.217971
113 /
tcp
Bÿn\x04Too many connections
141730637 | 2024-09-26T14:27:39.896351
119 /
tcp
HTTP/1.0 200 OK
Server: Proxy
1989907056 | 2024-10-03T23:39:58.150428
122 /
tcp
RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n
-858402222 | 2024-09-24T10:56:45.611162
143 /
tcp
* OK Waiting for authentication process to respond..\r\n
2143387245 | 2024-10-09T10:55:01.367269
175 /
tcp
HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT
-399606100 | 2024-09-22T15:16:29.354636
179 /
tcp
BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n
1996932384 | 2024-10-04T19:45:47.657298
195 /
tcp
1541211644 | 2024-10-22T06:15:30.564623
221 /
tcp
-734440417 | 2024-10-03T17:20:03.807201
222 /
tcp
HTTP/1.1 400 Bad Request
Content-Type: text/html
Connection: close
Server: nginx/1.17.3
1672388472 | 2024-10-11T16:53:50.205068
264 /
tcp
CheckPoint\nFirewall Host: ADAPCN156FW02\nSmartCenter Host: adluprdfwmgt01..zjz4qa\\x00\n
-1547976805 | 2024-10-19T23:24:57.056290
311 /
tcp
HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close
-1743283776 | 2024-10-17T23:36:30.513354
389 /
tcp
0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x04\\x04
-525136240 | 2024-10-16T00:49:28.863060
427 /
tcp
SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://bogon.xylink\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\nservice:wbem:https\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n Lifetime: 65535\n URL: service:VMwareInfrastructure://bogon.xylink\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (
2121335177 | 2024-10-21T03:12:08.162599
443 /
tcp
HTTP/1.1 403 Forbidden
Server: AliyunOSS
Date: Mon, 21 Oct 2024 03:12:08 GMT
Content-Type: application/xml
Content-Length: 345
Connection: keep-alive
x-oss-request-id: 6715C688D4938A3036EE45B9
x-oss-server-time: 0
x-oss-ec: 0003-00001201
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:21:e4:e5:73:fc:7f:09:2a:04:98:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: Feb 19 05:01:07 2024 GMT
Not After : Mar 22 05:01:06 2025 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=cn-hangzhou.oss.aliyuncs.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:e4:33:85:33:df:c3:af:64:36:c4:2f:07:75:c9:
3a:b3:26:75:db:43:da:5c:3a:52:cd:1a:22:6e:91:
63:82:4a:49:60:30:02:b2:57:00:98:0e:8d:7c:8a:
70:cf:bf:d6:9b:82:41:ea:ba:94:fb:3a:bb:e8:7c:
2f:79:90:84:d7:a7:24:a3:ef:ee:6a:a7:8e:cf:2a:
e0:d1:9a:ac:9c:b6:8c:0c:a4:2f:62:20:54:e0:14:
86:b1:3c:7a:30:f2:19:7e:d1:39:17:e9:d6:18:6e:
c3:33:ed:1a:4c:e1:9c:89:36:0f:3c:4c:c7:85:60:
6e:18:95:3c:c7:a5:3e:77:2e:3a:bb:a8:ff:56:38:
37:86:64:c1:7f:36:de:ac:0f:53:7e:b2:09:3e:e0:
7a:12:10:10:fb:73:5d:d8:44:08:54:86:67:b0:f9:
7d:c4:5a:e4:bf:09:89:1e:c4:8c:fe:0f:de:e3:00:
7b:3c:95:53:77:3c:78:dc:c6:13:a1:d2:89:33:66:
f1:ef:82:ea:9d:48:1e:5e:ee:cc:26:6c:4e:22:5c:
70:e5:4f:6e:9f:29:f2:96:e2:32:8f:1f:f5:ce:7c:
59:a7:ce:66:16:c6:1d:8a:e4:f2:3b:ae:7d:4c:23:
40:3b:65:06:b9:02:54:82:88:ed:c5:5f:25:7b:db:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
Authority Information Access:
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
CPS: https://www.globalsign.com/repository/
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
X509v3 Subject Alternative Name:
DNS:cn-hangzhou.oss.aliyuncs.com, DNS:*.oss-cn-hangzhou.aliyuncs.com, DNS:*.img-cn-hangzhou-internal.aliyuncs.com, DNS:*.oss-cn-hzjbp-a-internal.aliyuncs.com, DNS:*.oss-cn-hangzhou-internal.aliyuncs.com, DNS:*.oss-cn-hangzhou-diku-internal.aliyuncs.com, DNS:*.cn-hangzhou.oss.aliyuncs.com, DNS:*.oss-enet-cm.aliyuncs.com, DNS:*.cn-hangzhou.oss-internal-cross.aliyun-inc.com, DNS:*.oss-cn-hangzhou-am101.aliyuncs.com, DNS:*.oss-internal.aliyuncs.com, DNS:*.oss-accelerate.aliyuncs.com, DNS:*.oss-cn-hzjbp-b-internal.aliyuncs.com, DNS:*.img-cn-hangzhou.aliyuncs.com, DNS:*.oss-accelerate-overseas.aliyuncs.com, DNS:*.oss-cn-hangzhou-zmf.aliyuncs.com, DNS:*.oss-cn-hangzhou-hsa.aliyuncs.com, DNS:*.aliyuncs.com, DNS:*.oss.aliyuncs.com, DNS:*.oss-cn-hangzhou-cross.aliyuncs.com, DNS:*.vpc100-oss-cn-hangzhou.aliyuncs.com, DNS:*.oss-cn-hzfinance.aliyuncs.com, DNS:*.oss-enet.aliyuncs.com, DNS:*.cn-hangzhou.oss-internal.aliyuncs.com, DNS:*.oss-enet-cu.aliyuncs.com, DNS:*.oss-enet-ct.aliyuncs.com, DNS:*.oss-cn-hangzhou-zmf-internal.aliyuncs.com, DNS:*.oss-cn-hzfinance-internal.aliyuncs.com, DNS:*.cn-hangzhou-finance.oss.aliyuncs.com, DNS:*.oss-cn-hzjbp-b-console.aliyuncs.com, DNS:*.oss-cache-cn-hangzhou-j.aliyuncs.com, DNS:*.oss-cache-cn-hangzhou-j-cross.aliyuncs.com, DNS:*.oss-enet-cn-east.aliyuncs.com, DNS:*.cn-hangzhou-vpc.oss.aliyuncs.com, DNS:*.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-hangzhou.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-hangzhou-internal.oss-accesspoint.aliyuncs.com, DNS:*.cn-hangzhou.oss-console.aliyuncs.com, DNS:*.s3.oss-cn-hangzhou.aliyuncs.com, DNS:*.s3.oss-cn-hangzhou-internal.aliyuncs.com, DNS:*.cn-hangzhou.mgw.aliyuncs.com, DNS:*.oss.cn-hangzhou.privatelink.aliyuncs.com, DNS:*.oss-cn-hangzhou.oss-object-process.aliyuncs.com, DNS:*.oss-cn-hangzhou-internal.oss-object-process.aliyuncs.com, DNS:*.s3.oss-accelerate.aliyuncs.com, DNS:*.s3.oss-accelerate-overseas.aliyuncs.com, DNS:*.cn-hangzhou-cross.mgw.aliyuncs.com
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
X509v3 Subject Key Identifier:
A9:B4:08:AD:74:76:24:F8:94:02:09:AF:A1:CD:4B:1D:51:33:C1:61
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Feb 19 05:01:09.851 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:4C:A8:93:C6:9D:10:B5:44:EA:22:C4:6E:
92:C3:E2:B2:9B:DE:7D:ED:7C:E4:13:66:7C:BC:00:C6:
55:E5:30:FD:02:20:52:7C:85:F1:3E:EA:BE:9A:8E:4B:
99:EE:3E:1B:E9:01:06:7D:47:E3:D8:82:C0:E4:29:46:
11:A5:F1:30:AB:51
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Feb 19 05:01:09.861 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:FA:47:21:1A:96:CD:EC:11:AE:C7:7C:
D9:67:C2:68:9E:BC:61:58:CE:23:BD:45:DD:5F:E5:49:
7B:EB:33:BC:CA:02:20:70:0A:31:A8:28:9A:BD:14:21:
5C:0A:E9:AA:DD:72:24:80:CE:39:27:5F:A0:48:0E:9C:
52:D1:13:61:E3:53:47
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Feb 19 05:01:09.819 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:32:A3:F7:00:A4:8C:A6:78:04:A5:44:F7:
70:3D:F8:E4:8D:71:DA:26:14:63:0D:D1:34:8A:C4:5A:
C4:ED:62:FC:02:20:39:FD:AC:A3:E6:79:99:18:43:7D:
71:8D:1B:B5:39:98:E2:04:70:DD:FD:D2:4F:CD:22:0D:
D6:85:2E:46:B7:D5
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
27:c4:7d:9b:75:a3:41:86:a4:06:5f:b8:66:d0:3e:cd:73:9c:
b2:ba:f0:f3:5b:b9:5c:61:75:10:f9:ec:00:3f:f1:35:1b:64:
02:ef:a2:0b:64:fe:3a:5f:bd:59:fa:34:17:50:9f:ec:97:0d:
e8:d9:2c:f4:30:27:5a:51:83:cf:7d:e5:ae:0f:68:b9:ec:a1:
05:52:98:ff:1d:0b:8a:94:8a:f7:0b:32:e8:2b:91:f2:52:a8:
ac:44:a7:ab:e0:ae:4f:7e:aa:59:d5:e0:92:e6:ea:6f:a1:3b:
97:93:68:06:84:a1:8c:eb:76:62:39:00:ff:90:29:b2:90:4c:
cf:36:f1:82:48:7b:d9:64:f4:6f:fc:1e:e3:90:9d:ea:e0:98:
f3:99:cd:ca:19:6e:fd:7e:72:12:0e:b6:78:7e:a1:27:7c:a3:
1f:e5:bc:16:ac:2c:73:fc:1d:db:37:21:6e:7d:30:1d:67:41:
3e:8d:78:f0:08:76:83:43:df:1d:29:5b:74:9e:20:e0:10:b8:
69:43:d2:39:ea:65:aa:8b:3f:09:23:82:a5:3a:b8:ad:7f:71:
9d:22:d8:eb:85:ca:77:97:b1:38:29:02:5d:d1:de:04:ff:cf:
6d:7c:ee:91:c4:34:33:dc:92:52:f9:48:0c:5f:10:40:dc:5d:
7d:16:5c:a2
-1327660293 | 2024-10-16T03:42:16.172545
503 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
2087396567 | 2024-10-02T18:30:10.494709
515 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1128967010 | 2024-10-16T04:05:45.575675
548 /
tcp
HTTP/1.1 200 OK
Server: Server
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, nosnippet, notranslate, noimageindex
Content-Type: text/html; charset=utf-8
1060450357 | 2024-10-20T05:08:11.091856
554 /
tcp
RTSP/1.0 200 OK
CSeq: 1
Keep-Alive: timeout=10, max=1000
Public: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, SET_PARAMETER, GET_PARAMETER
Connection: Keep-Alive
745343730 | 2024-10-14T04:41:31.491618
587 /
tcp
220 smtp.qq.com Esmtp QQ Mail Server
4146400 | 2024-10-14T07:58:36.597338
636 /
tcp
HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 8-26086461-0 0NNN RT(1705912253915 115) q(-1 -1 -1 -1) r(0 -1) b1
1300162323 | 2024-10-21T11:18:28.560664
666 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
819727972 | 2024-10-12T17:53:30.989436
771 /
tcp
1911457608 | 2024-10-18T14:21:05.430088
789 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1970692834 | 2024-10-17T05:36:00.712516
873 /
tcp
@RSYNCD: 31.0\n@RSYNCD: EXIT\n
2098371729 | 2024-10-11T20:30:12.199471
993 /
tcp
<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n
934210070 | 2024-09-28T05:36:53.051857
995 /
tcp
+OK mail.dupre.idv.tw IceWarp 11.2.1.2 x64 POP3 Mon, 22 Jan 2024 12:43:35 +0800 <20240122124334@mail.dupre.idv.tw>\r\n
-154107716 | 2024-10-05T14:29:27.906978
1023 /
tcp
220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
ABOR
ACCT
ADAT *
ALLO
APPE
AUTH
CCC
CDUP
CWD
DELE
ENC *
EPRT
EPSV
FEAT
HELP
HOST
LANG
LIST ...
-1327660293 | 2024-10-19T22:11:09.720737
1099 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
671605376 | 2024-09-27T19:24:35.895659
1153 /
tcp
-1428621233 | 2024-10-08T05:48:13.346539
1337 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
-1839934832 | 2024-10-11T22:01:12.901071
1414 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-1279739995 | 2024-10-20T19:39:21.026804
1433 /
tcp
MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XINKE20190306\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XINKE20190306\nNetBIOS_Computer_Name: XINKE20190306\nDNS_Domain_Name: xinke20190306\nDNS_Computer_Name: xinke20190306\nSystem_Time: 2024-01-22 04:04:46 +0000 UTC\n\n
-1715152554 | 2024-10-18T22:03:04.124169
1443 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 18 Oct 2024 22:03:03 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.110.23.17:443/
2087396567 | 2024-10-12T17:34:01.055547
1515 /
tcp
kjnkjabhbanc283ubcsbhdc72
1690634669 | 2024-10-06T08:21:39.139991
1599 /
tcp
1220320909 | 2024-10-15T14:21:50.774798
1604 /
tcp
1103582599 | 2024-10-12T19:50:51.329903
1723 /
tcp
Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n
504717326 | 2024-10-01T21:17:35.700127
1800 /
tcp
-1139999322 | 2024-10-09T11:51:20.110243
1801 /
tcp
\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\xf2\\xdby\\x96\\xbb\\xb1LE\\xa1\\x1f.%\xd2\xbft\\xb692d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
171352214 | 2024-10-11T00:14:07.980724
1883 /
tcp
-ERR client ip is not in whitelist
-68075478 | 2024-10-09T23:20:36.895663
1926 /
tcp
1363464823 | 2024-09-30T06:58:23.116987
1951 /
tcp
-1453516345 | 2024-10-06T08:43:08.058955
1962 /
tcp
HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
1632932802 | 2024-09-30T10:35:38.791952
2002 /
tcp
1911457608 | 2024-10-18T17:19:56.883436
2056 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1353260875 | 2024-10-20T12:34:11.287837
2060 /
tcp
\x00[g\xc2\x95N\x7f\x00\x00
398077695 | 2024-10-06T06:25:34.691621
2081 /
tcp
2033888749 | 2024-10-01T13:53:22.876550
2083 /
tcp
Content-Type: text/rude-rejection
Content-Length: 24
Access Denied, go away.
Content-Type: text/disconnect-notice
C...
-971970408 | 2024-10-06T05:48:16.526783
2087 /
tcp
372433470 | 2024-09-25T20:40:24.345107
2111 /
tcp
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""
1523932895 | 2024-10-03T09:13:33.765126
2121 /
tcp
220 RS820Plus FTP server ready.\r\n
546151771 | 2024-10-04T21:22:53.835859
2181 /
tcp
Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)
Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618
-358801646 | 2024-10-14T20:56:55.948638
2222 /
tcp
1662205251 | 2024-09-30T22:24:18.153252
2323 /
tcp
HTTP/1.0 404 FAIL
Content-length:5
Connection:Close
-653033013 | 2024-10-20T02:23:16.657166
2345 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
2087396567 | 2024-09-26T12:23:31.152089
2376 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1453516345 | 2024-10-12T12:44:44.079460
2404 /
tcp
HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
-2089734047 | 2024-09-23T03:43:26.808456
2443 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-2089734047 | 2024-10-15T10:17:44.735921
2455 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1611764932 | 2024-10-02T19:26:47.261703
2548 /
tcp
\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00
-358801646 | 2024-10-10T02:30:13.876318
2561 /
tcp
2087396567 | 2024-09-24T05:23:20.467543
2628 /
tcp
kjnkjabhbanc283ubcsbhdc72
-2089734047 | 2024-10-03T09:33:11.303052
2761 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1888448627 | 2024-10-13T16:04:14.360623
3001 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-407828767 | 2024-09-22T15:30:11.085667
3050 /
tcp
\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00
-1810987450 | 2024-09-23T12:05:05.970972
3056 /
tcp
-1399940268 | 2024-10-10T18:21:13.582121
3067 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1911457608 | 2024-10-18T09:22:19.113315
3088 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-862070606 | 2024-09-27T12:55:35.314970
3260 /
tcp
Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=LIO Target\nTargetPortalGroupTag=1\n\n
-561021273 | 2024-10-11T22:43:12.281947
3268 /
tcp
220 2.0.0 prod-cn-momentum2.webpowercn.local ESMTP ecelerity 4.2.1.51128 r(Core:4.2.1.5) Sun, 03 Dec 2023 10:04:37 +0800\r\n
1852418385 | 2024-10-04T17:21:39.887219
3299 /
tcp
RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ
671605376 | 2024-10-14T20:40:41.417556
3310 /
tcp
1830187220 | 2024-10-19T07:13:17.014742
3388 /
tcp
\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->
848680996 | 2024-10-07T14:29:26.041015
3389 /
tcp
Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\t\\x08\\x00\\x02\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID\nTarget_Name: WINCTYU-KTI28LG\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: WINCTYU-KTI28LG\nNetBIOS_Computer_Name: WINCTYU-KTI28LG\nDNS_Domain_Name: WINCTYU-KTI28LG\nDNS_Computer_Name: WINCTYU-KTI28LG\nSystem_Time: 2024-01-22 08:43:05 +0000 UTC\n\n
198844676 | 2024-10-16T19:19:26.908337
3551 /
tcp
HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close
-1373613804 | 2024-09-27T09:03:33.688506
3780 /
tcp
00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,
539065883 | 2024-10-12T06:40:52.269457
3790 /
tcp
-1148803158 | 2024-10-19T06:13:37.890299
4000 /
tcp
Mysql Version: 8.0.34 \r\nJ\\x00\\x00\\x00\n8.0.34\\x009L\\x01\\x00NJSz;\\x01\\x19y\\x00\\xff\\xff!\\x02\\x00\\xff\\xdf\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00k\\x13VT\\x10\\x14YfV~^z\\x00caching_sha2_password\\x00
-1399940268 | 2024-10-09T06:11:12.817818
4022 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
2087396567 | 2024-10-21T22:56:06.864911
4063 /
tcp
kjnkjabhbanc283ubcsbhdc72
-2089734047 | 2024-10-11T00:25:54.408144
4064 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1689518693 | 2024-10-19T03:07:21.779648
4157 /
tcp
-1341662640 | 2024-10-02T05:21:04.954596
4242 /
tcp
HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close
1842524259 | 2024-10-18T19:55:15.823832
4282 /
tcp
740837454 | 2024-10-08T06:04:45.754904
4321 /
tcp
819727972 | 2024-10-05T14:17:39.714957
4433 /
tcp
-746114901 | 2024-10-22T01:04:59.950046
4434 /
tcp
-1060562267 | 2024-10-10T22:04:13.547367
4443 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae29b6_PS-NKG-01Aqo82_2892-58968
-971970408 | 2024-09-26T07:04:10.537566
4444 /
tcp
290819026 | 2024-10-15T20:06:41.583245
4506 /
tcp
welcome to Pandora console!
----------------------------
-------------------------
| Login Time | 2021-12-08 1...
1911457608 | 2024-09-23T18:32:58.290141
4840 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1396488228 | 2024-10-12T14:50:50.480652
4899 /
tcp
HTTP/1.1 200 OK
Content-Length: 2037
Cache-Control: private, max-age=300
Content-Type: text/html
632542934 | 2024-10-17T21:09:48.876419
4911 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
1632932802 | 2024-10-18T11:05:45.933726
5001 /
tcp
119860953 | 2024-10-11T17:10:01.642191
5002 /
tcp
* OK ArGoSoft Mail Server IMAP Module v.YW at
1632932802 | 2024-09-24T22:22:12.727410
5006 /
tcp
599074451 | 2024-09-25T13:19:57.291560
5007 /
tcp
2118208326 | 2024-10-02T08:43:39.996062
5009 /
tcp
HTTP/1.1 426 Upgrade Required
Content-Type: text/plain
Connection: keep-alive
Keep-Alive: timeout=5
2087396567 | 2024-10-05T03:46:19.400243
5025 /
tcp
kjnkjabhbanc283ubcsbhdc72
1794594071 | 2024-10-14T08:41:35.740866
5222 /
tcp
564972781 | 2024-10-19T17:08:20.722916
5269 /
tcp
HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705937967.102-w-waf03tjgt
740837454 | 2024-10-11T17:01:38.280904
5432 /
tcp
575925250 | 2024-09-25T13:27:11.139350
5672 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
165188539 | 2024-10-02T05:03:52.355933
5938 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
1999272906 | 2024-10-12T18:49:55.725528
5984 /
tcp
HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)
-1559123399 | 2024-10-08T20:21:51.343307
5986 /
tcp
500 Permission denied - closing connection.
819727972 | 2024-10-06T01:11:45.459527
6000 /
tcp
-1399940268 | 2024-10-21T22:00:08.901487
6001 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1428621233 | 2024-10-08T08:08:37.354439
6161 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
321971019 | 2024-10-02T22:13:09.044786
6379 /
tcp
-ERR client ip is not in whitelist\r
795101100 | 2024-10-11T00:30:30.674178
6510 /
tcp
HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 14-40390680-0 0NNN RT(1700468534547 149) q(0 -1 -1 -1) r(0 -1)
-1598265216 | 2024-10-07T08:22:27.840116
6512 /
tcp
1911457608 | 2024-10-12T09:49:44.143060
6581 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-10-01T16:47:28.322747
6590 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1888448627 | 2024-09-22T22:43:19.436147
6633 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-454087041 | 2024-09-29T17:07:56.660106
6653 /
tcp
\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00
4935895 | 2024-10-05T15:11:53.931272
6666 /
tcp
HTTP/1.1 400 Bad Request
Server: CloudWAF
1332894250 | 2024-09-29T14:23:17.233532
6668 /
tcp
\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:
819727972 | 2024-10-07T14:25:43.934370
6697 /
tcp
-829704895 | 2024-10-09T15:24:04.815471
7001 /
tcp
819727972 | 2024-10-15T16:36:59.074139
7071 /
tcp
-1399940268 | 2024-09-25T07:48:11.969562
7171 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1399940268 | 2024-09-24T11:56:18.755361
7218 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1399940268 | 2024-10-21T16:23:12.188679
7415 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1342763855 | 2024-10-13T17:25:36.753378
7443 /
tcp
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Connection: close
Server: Nginx
Expires: 0
Pragma: no-cache
Cache-Control: no-cache
X-LANG: 1
X-Timezone: 0800
X-Timestamp: 1705912071
X-Arch: x86
X-Sysbit: x64
X-Enterprise: 0
X-Support-i18n: 0
X-Support-wifi: 0
Location: /login
-1839934832 | 2024-10-20T18:49:36.230029
7548 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
740837454 | 2024-09-23T14:24:18.767535
7634 /
tcp
1363464823 | 2024-09-30T19:57:40.982806
7778 /
tcp
-971970408 | 2024-09-29T23:09:23.611416
8009 /
tcp
-1013082686 | 2024-10-01T17:07:07.456702
8064 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain
-786044033 | 2024-10-14T14:17:53.728267
8083 /
tcp
OK Welcome <299685> on DirectUpdate server 7286
1189133115 | 2024-10-15T20:23:55.530721
8085 /
tcp
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8
-1399940268 | 2024-09-27T22:52:38.300867
8087 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2024-10-14T20:02:33.457829
8089 /
tcp
-1839934832 | 2024-10-04T17:23:52.775085
8091 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-1249500036 | 2024-10-17T17:46:56.676492
8099 /
tcp
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes
-2089734047 | 2024-09-30T17:11:30.576678
8105 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
104385780 | 2024-10-13T00:19:23.552980
8139 /
tcp
819727972 | 2024-10-12T20:09:25.603508
8140 /
tcp
1320285193 | 2024-10-12T05:12:36.638296
8200 /
tcp
HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive
-1839934832 | 2024-09-24T23:33:18.232543
8282 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-1373613804 | 2024-09-26T22:54:13.183800
8291 /
tcp
00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,
1723769361 | 2024-10-13T23:13:03.670290
8333 /
tcp
ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n
-333756361 | 2024-09-25T15:49:08.672932
8443 /
tcp
HTTP/1.1 200 OK
Date: Wed, 25 Sep 2024 15:49:08 GMT
Content-Type: application/json
Content-Length: 2638
Connection: keep-alive
Ali-Swift-Global-Savetime: 1727279348
Eagleeye-Traceid: 229b41c1ece1dfaf07fca23c82
Eagleid: 229b41c1ece1dfaf07fca23c82
S_group: tao-session
S_ip: afbd21cf853d65ca1fd40f9d1ccb7bcb
S_status: STATUS_SYS_ERR
S_tag: 672331193239987|774419584^|^^
S_tid: 229b41c1ece1dfaf07fca23c82
S_ucode: CN:CENTER
S_v: 3.2.3.0
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://alsc-sre-intelligence.alibaba-inc.com
Ufe-Result: A3
Via: kunlun50.87kunlun0[962,701,267-0,M], kunlun03.kunlun64[381,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Wed, 25 Sep 2024 15:49:08 GMT
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:49:b2:86:90:3c:9b:46:7a:60:5b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: May 5 06:21:16 2023 GMT
Not After : Jun 5 06:21:15 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:cd:63:b4:e6:ec:59:0e:17:e4:45:57:82:09:a8:
51:4a:92:a5:84:e3:da:81:83:c5:6c:d1:8e:90:66:
15:6d:1b:a1:15:18:cc:d8:0d:db:93:10:70:27:7a:
01:9f:56:2b:b5:6c:0e:f4:1f:c9:8c:c9:b9:61:58:
7c:1e:3b:5a:83:c1:c3:ad:76:19:75:8b:6d:c7:0f:
c7:38:1d:7b:e9:aa:2b:eb:31:38:c6:8c:d7:52:d9:
29:e1:3d:e1:ad:30:fd:7d:21:f0:c4:ca:3d:9f:d3:
5c:b9:9f:17:81:c2:24:88:a1:82:bc:70:01:82:83:
49:79:62:0e:81:d6:5d:56:b1:17:c9:88:6c:c5:61:
4f:b7:5f:f9:ce:92:3c:0d:8b:3d:ad:06:28:d0:dc:
1c:b5:d3:cf:f2:ff:7d:06:07:fc:9e:11:c1:b0:0c:
4e:bf:93:da:c7:a4:f3:5c:ed:24:c9:95:4d:67:24:
2d:c9:41:da:50:a7:40:3e:b4:cb:2f:9b:12:cd:06:
c8:58:69:28:10:b0:53:9c:26:0e:b6:eb:b5:50:41:
7a:2a:fb:a1:a9:29:2f:34:84:bf:04:cb:20:f8:c1:
c1:3e:5e:82:b9:f6:f1:c0:e5:08:b1:21:7a:d3:fe:
8b:0a:0d:7b:71:76:7f:ae:7d:25:01:e1:6f:c0:d3:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.aliyun.com, DNS:aliyun.com, DNS:rosechina.taobao.com, DNS:barclay.aliexpress.com, DNS:qr.aliyun.com, DNS:shop365682614.taobao.com, DNS:0f5c5da9.lex.co.id, DNS:cainiao-ru.aliexpress.com, DNS:acs-wapa.rmlogistics.sg, DNS:lha-lab-java.alibaba-inc.com, DNS:gre-dvbbo.an-hongzhov.ojiyvn-ina.aon.aliyun-inc.com, DNS:reako188.1688.com, DNS:dh-an-shonghoi.ojiyvn-ina.aon.aliyun-inc.com, DNS:vone.aliyun.com, DNS:app75554.eapps.dingtalkcloud.com, DNS:oovth.taobao.com, DNS:wwwnode.daxue.dingtalk.com, DNS:shog36284243.taobao.com, DNS:eai-inner.og-sovtheost-2.aliyuncs.com, DNS:devejogerojiyvnaon.aliyuncs.com, DNS:hojostvdio-an-hongzhov.doto.aliyun.com, DNS:vt.quark.cn, DNS:done.alibaba-inc.com, DNS:aodng.taobao.com, DNS:www.aliyun.com
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
78:03:66:2a:00:19:32:e4:35:e8:58:18:4d:b5:58:0b:b5:3b:
da:47:99:a0:30:ee:18:76:b3:b1:68:ba:fd:f8:e3:1e:3a:c7:
7a:a8:6b:7d:dc:cc:c5:30:af:91:fc:23:c1:e6:e9:d9:c2:8e:
1a:a6:4e:59:2b:fb:f1:08:b6:69:95:a3:36:81:62:1e:e1:36:
e2:7b:a8:3c:7c:87:0d:c7:94:8e:14:0a:0e:b8:64:17:8d:06:
cf:a8:d8:7c:15:17:fe:ad:ed:60:08:51:24:fb:1f:4f:62:05:
ab:6b:3c:1b:20:ca:77:3d:df:09:65:75:03:db:95:97:57:6c:
92:e9:f4:ec:b2:5f:8e:4e:ef:ec:25:db:1c:98:87:b9:81:24:
16:7b:07:26:b9:3c:39:d1:b3:eb:e8:ed:0b:b9:d3:d9:8c:f3:
9b:35:00:38:71:24:f2:69:d4:07:a7:ec:78:a7:28:0c:f3:b4:
ca:76:c6:af:64:78:84:e6:23:79:cb:83:44:6c:66:ba:f1:52:
bb:78:87:7b:d8:dc:b0:4b:f4:8e:83:a7:16:03:18:cd:d2:28:
97:d4:a8:bb:f7:1a:6c:c3:77:fb:e4:89:4a:7c:c7:bb:91:f3:
12:5c:8e:56:18:a3:33:6a:77:8d:3e:9c:41:a0:94:4a:0f:7b:
dc:8e:f1:fc
-1733106930 | 2024-10-17T23:34:47.705967
8446 /
tcp
Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password
1652191202 | 2024-10-01T19:01:51.757814
8500 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae296b_PS-NTG-014eQ157_14943-13699
2087396567 | 2024-10-20T04:48:20.377658
8554 /
tcp
kjnkjabhbanc283ubcsbhdc72
-42767839 | 2024-10-21T01:29:08.027703
8649 /
tcp
RFB 005.000
VNC:
Protocol Version: 5.0
-339084706 | 2024-10-16T12:14:49.645836
8700 /
tcp
200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n
410249975 | 2024-09-27T02:50:01.308643
8728 /
tcp
819727972 | 2024-10-01T22:30:53.071671
8782 /
tcp
1911457608 | 2024-09-27T20:26:01.096625
8790 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-10-18T15:45:34.928559
8824 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
165188539 | 2024-09-30T21:18:39.453881
8839 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
632542934 | 2024-09-30T17:13:44.829783
8854 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
2087396567 | 2024-10-19T03:25:19.196626
8880 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1810987450 | 2024-10-10T04:14:47.264095
8889 /
tcp
599074451 | 2024-10-07T08:13:05.551479
8999 /
tcp
-2067028711 | 2024-10-02T14:02:54.873632
9000 /
tcp
\x15\x03\x01\x00\x02\x02F
-1026951088 | 2024-10-06T13:49:39.794307
9001 /
tcp
-249504111 | 2024-10-22T00:13:45.695344
9006 /
tcp
1911457608 | 2024-10-18T20:28:40.434377
9021 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1810987450 | 2024-10-12T19:37:41.739789
9024 /
tcp
1911457608 | 2024-09-24T21:17:47.236976
9025 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1375509841 | 2024-09-22T11:39:43.415253
9051 /
tcp
ÿû
no data rcvd for version string
recv version id unsuccessful
SSH Session task 0xY: Version Exchange Failed
-1529979118 | 2024-10-21T16:42:31.759081
9091 /
tcp
1492413928 | 2024-10-04T10:08:55.675538
9092 /
tcp
1996932384 | 2024-09-24T02:10:58.523311
9095 /
tcp
709622286 | 2024-10-13T02:51:00.034241
9100 /
tcp
OK Welcome <299685> on DirectUpdate server 7286\r\n
-1105333987 | 2024-10-17T04:33:21.549938
9151 /
tcp
-2017887953 | 2024-10-17T05:02:58.493922
9160 /
tcp
-1399940268 | 2024-10-11T05:06:48.351103
9189 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1327660293 | 2024-09-23T03:19:01.703121
9210 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
1210754493 | 2024-10-20T18:02:04.370501
9301 /
tcp
0\x0c\x02\x01\x01a\x07\n\x01\x00\x04\x00\x04\x00
1911457608 | 2024-10-05T06:41:19.694923
9306 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-10-06T18:03:49.417322
9307 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-971970408 | 2024-10-15T14:41:20.325934
9398 /
tcp
1909672637 | 2024-09-22T18:45:14.372880
9418 /
tcp
HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff
-368205059 | 2024-10-20T18:09:54.759969
9443 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 20 Oct 2024 18:09:54 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.110.23.17:443/
<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>
-1991224470 | 2024-10-08T10:16:21.063374
9500 /
tcp
\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x14TP/1.1\r\n\\x00\\x00\\x00\\x00&
-1839934832 | 2024-10-07T18:47:02.071103
9530 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-1399940268 | 2024-10-14T10:31:49.405104
9600 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1261582754 | 2024-10-09T17:05:10.174374
9633 /
tcp
unknown command
unknown command
639175818 | 2024-09-29T00:23:33.304661
9704 /
tcp
\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n
-1099385124 | 2024-10-10T05:47:07.334076
9761 /
tcp
"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac
-1056270173 | 2024-10-21T10:21:39.584637
9898 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
-696402907 | 2024-10-07T20:03:24.605143
9998 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae298c_PS-HIA-01Q7y203_55153-4321
1161309183 | 2024-10-16T16:48:42.787553
9999 /
tcp
1492413928 | 2024-10-05T16:47:07.035202
10001 /
tcp
1212921144 | 2024-10-16T18:49:40.299140
10176 /
tcp
-1261090339 | 2024-09-24T22:06:32.115061
10250 /
tcp
\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00
2087396567 | 2024-10-15T08:40:14.366919
10554 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1538260461 | 2024-10-11T16:58:41.066157
10909 /
tcp
1989907056 | 2024-10-11T06:22:46.028284
10911 /
tcp
RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n
819727972 | 2024-09-26T17:18:06.649751
11112 /
tcp
-1245716040 | 2024-10-12T00:21:21.137729
12000 /
tcp
220 welcome to connecting FTP server
1748152518 | 2024-10-11T06:32:24.517337
12345 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae26f8_hwt112_4105-46187
165188539 | 2024-10-11T06:43:30.017754
14265 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1839934832 | 2024-10-01T10:22:23.013412
14344 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
-1839934832 | 2024-09-29T17:38:40.234259
16993 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
1975288991 | 2024-10-18T03:46:47.393322
18443 /
tcp
-2096652808 | 2024-10-01T07:42:37.466179
19000 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
539065883 | 2024-10-21T14:00:43.521620
19930 /
tcp
1900503736 | 2024-10-20T06:00:35.210732
20000 /
tcp
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0
-1399940268 | 2024-10-12T02:14:42.248862
20256 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1370263973 | 2024-10-20T16:40:36.516039
20880 /
tcp
971933601 | 2024-10-15T19:47:58.959966
21025 /
tcp
HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html
-274082663 | 2024-10-17T14:58:14.791642
21379 /
tcp
\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01
-784071826 | 2024-10-11T09:39:07.189524
23023 /
tcp
819727972 | 2024-10-17T13:25:35.635885
25565 /
tcp
-786044033 | 2024-10-20T01:43:16.233467
27015 /
tcp
OK Welcome <299685> on DirectUpdate server 7286
1948301213 | 2024-10-13T19:39:44.253588
28015 /
tcp
RFB 003.003
VNC:
Protocol Version: 3.3
-1059554316 | 2024-10-10T13:15:41.650176
30003 /
tcp
\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00
-1992519278 | 2024-10-13T00:41:07.001741
31337 /
tcp
\xc3\xbf\xc3\xbb\\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->
-1023516719 | 2024-10-07T03:28:56.478898
33060 /
tcp
ã
K vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol
-653033013 | 2024-10-13T03:01:14.735005
35000 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
-1477838366 | 2024-10-21T02:26:12.227950
38333 /
tcp
SSH-2.0-OpenSSH_8.2p1 Ubuntu-4
1911457608 | 2024-10-04T18:41:27.736670
41800 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
2054287019 | 2024-10-18T22:40:56.358994
44158 /
tcp
-1399940268 | 2024-10-16T01:55:42.218227
44818 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
171352214 | 2024-10-03T01:47:07.931921
47990 /
tcp
-ERR client ip is not in whitelist
2009276894 | 2024-10-08T18:11:59.342989
50000 /
tcp
N
5.6.40-log Å TUNEgVX2
¢! xlB...
474736340 | 2024-10-19T18:35:10.779594
50050 /
tcp
431 Unable to negotiate secure command connection.
-616720387 | 2024-10-10T23:08:39.106834
50100 /
tcp
-2089734047 | 2024-10-15T14:50:09.346806
51235 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1072158793 | 2024-10-17T16:21:43.933025
52869 /
tcp
HTTP/1.1 500 Internal Server Error
SERVER: Linux/2.6.21.5, UPnP/1.0, Portable SDK for UPnP devices/1.6.6
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html
339872247 | 2024-10-19T04:22:28.422412
53413 /
tcp
1282941221 | 2024-10-09T20:56:17.472924
54138 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
1887224352 | 2024-10-17T19:49:24.182624
54984 /
tcp
819727972 | 2024-10-11T00:17:49.893285
55000 /
tcp
171352214 | 2024-10-02T10:51:30.450091
55553 /
tcp
-ERR client ip is not in whitelist
-1626979812 | 2024-10-21T13:02:06.696931
55554 /
tcp
220 Service ready for new user.
-1626979812 | 2024-10-02T18:30:16.228547
60129 /
tcp
220 Service ready for new user.
820958131 | 2024-10-07T13:48:12.590134
61613 /
tcp
kjnkjabhbanc283ubcsbhdc72\x02
2033888749 | 2024-10-09T03:18:29.448363
61616 /
tcp
Content-Type: text/rude-rejection
Content-Length: 24
Access Denied, go away.
Content-Type: text/disconnect-notice
C...
980478633 | 2024-10-10T15:42:19.381084
62078 /
tcp
rry, that nickname format is invalid.
