-1373613804 | 2025-01-10T03:11:09.862573
11 /
tcp
00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,
-341265581 | 2025-01-11T19:50:36.854696
13 /
tcp
1741579575 | 2025-01-17T21:23:32.915888
15 /
tcp
5698739 | 2025-01-14T08:09:18.963291
17 /
tcp
"We have no more right to consume happiness without producing it than to
consume wealth without producing it." George Bernard Shaw (1856-1950)
\x00
1978059005 | 2025-01-04T09:17:22.987079
19 /
tcp
Sorry, that nickname format is invalid.
-1248408558 | 2025-01-06T03:57:58.639184
21 /
tcp
220 MikroTik FTP server (MikroTik 6.44.3) ready
-1816600103 | 2025-01-04T18:09:32.089648
23 /
tcp
819727972 | 2025-01-15T14:27:39.451657
25 /
tcp
306859053 | 2024-12-21T08:11:59.470461
37 /
tcp
-1641514916 | 2024-12-28T08:36:15.255729
43 /
tcp
* OK Merak 1dFUa2 IMAP4rev1
-833941849 | 2024-12-31T07:16:15.439859
70 /
tcp
\x1e\x06\xc2\x81
\x01\x07version\x04bind\x10\x03
-2029556872 | 2024-12-29T17:52:12.985677
79 /
tcp
HTTP/1.1 200 OK
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
Content-Type: text/html
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Connection: Keep-Alive
Accept-Ranges: bytes
-142686627 | 2024-12-29T06:14:22.565938
102 /
tcp
\x00[\xc2\xba\x7fs\x7f\x00\x00
-1399940268 | 2025-01-11T19:49:58.216991
104 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-414819019 | 2024-12-24T16:16:59.791893
113 /
tcp
HTTP/1.1 200 OK
Content-type: text/html
Connection: close
141730637 | 2024-12-24T15:28:15.934985
119 /
tcp
HTTP/1.0 200 OK
Server: Proxy
1996932384 | 2025-01-04T03:37:27.406604
122 /
tcp
1759440106 | 2025-01-04T18:23:06.479865
135 /
tcp
\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: ASUS\n IP2: 169.254.92.183\n IP3: 115.43.177.186\n\nNTLMSSP:\nTarget_Name: ASUS\nProduct_Version: 6.2.9200 Ntlm 15\nOS: Windows Server 2012/Windows 8\nNetBIOS_Domain_Name: ASUS\nNetBIOS_Computer_Name: ASUS\nDNS_Domain_Name: ASUS\nDNS_Computer_Name: ASUS\nSystem_Time: 2024-01-22 06:22:42 +0000 UTC\n\nDCERPC Dump:\n3a9ef155-691d-4449-8d05-09ad57031823 (schedsvc.dll):\n - NCACN: 115.43.177.186:49154\n - NCACN:
-829824006 | 2025-01-07T00:13:20.699508
143 /
tcp
* OK Coremail System IMap Server Ready(mispb-5f781434-d784-4cb6-b7ab-91be09a0f2d6-peony.cn[ccf14d07de0680199ac3995dd82c09e7])\r\n
51259122 | 2025-01-16T02:37:20.125581
175 /
tcp
\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n
-399606100 | 2024-12-25T07:47:54.488569
179 /
tcp
BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n
-2081419599 | 2025-01-14T02:27:25.161898
195 /
tcp
1042158273 | 2024-12-19T22:06:01.623390
211 /
tcp
HTTP/1.1 200 OK
Server: Web Server
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=10, max=1000
Content-Type: text/html
-1428621233 | 2025-01-05T22:12:10.082567
221 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
-1932800090 | 2025-01-09T08:18:41.806480
264 /
tcp
67948279 | 2024-12-26T22:42:58.813296
311 /
tcp
HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
-1402321854 | 2025-01-11T08:13:13.486327
340 /
tcp
HTTP/1.1 400 Bad Request
Server: openresty
Content-Type: text/html
Connection: close
<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>
-1639129386 | 2025-01-07T09:44:42.786929
389 /
tcp
0%\\x02\\x01\\x01a \n\\x010\\x04\\x00\\x04\\x19anonymous bind disallowed
1998636604 | 2025-01-03T07:34:10.165780
427 /
tcp
SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://192.168.2.254\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n Lifetime: 65535\n URL: service:VMwareInfrastructure://192.168.2.254\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (0)\nAttrList: (pro
-1715152554 | 2025-01-13T19:10:02.142854
443 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Mon, 13 Jan 2025 19:10:02 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.92.80.13:443/
-1715152554 | 2025-01-13T19:09:58.902349
444 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Mon, 13 Jan 2025 19:09:58 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.92.80.13:443/
819727972 | 2025-01-10T02:50:38.029345
447 /
tcp
897328069 | 2025-01-16T10:37:55.440288
465 /
tcp
220 mail.scott000.com ESMTP
-1399940268 | 2025-01-09T05:49:00.365943
491 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1623746877 | 2025-01-08T06:20:54.425088
502 /
tcp
500 Permission denied - closing connection.\r\n
-2107996212 | 2025-01-17T13:44:12.418479
513 /
tcp
HTTP/1.0 200 OK
Server: Proxy
Unauthorized ...
IP Address:
539065883 | 2025-01-11T14:01:52.133176
515 /
tcp
-1299118573 | 2024-12-29T13:21:29.048279
541 /
tcp
\\x16\\x03\\x01\\x01[\\x01\\x00\\x01W\\x03\\x03\\x89\\xb7a\\xcdh\\xff\\xe7x~\\xc0Z\\x92\\x1f\\xf0\\xd8\xe3\x9f\xb2;\\x92\\x06\\xf9\\xef\\xc7L\\xfa\\x16&#{)` \\xf6k\\x80\\xe6Ylt\\xe8\x0bF\\xa9&?\\xb9!\\xe7\\x93^l\\xb3\\xbe\\x15\\xb1\\xa3n\\x00\\xce\\xde\xcf\x822h\\x002\\x13\\x02\\x13\\x03\\x13\\x01\\x009\\x005\\x00k\\x00=\\xc
-1769206458 | 2025-01-17T15:16:20.270686
548 /
tcp
Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: NASDF59D2\nMachine Type: \\x10Netatalk3.1.9.q2\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: DHX2\\x0f,No User Authent\\x10,Cleartxt Passwrd\\x00\nServer Signature: 00000000008002000180030002800280
285770450 | 2024-12-29T14:41:32.692966
554 /
tcp
RTSP/1.0 401 Unauthorized
CSeq: 1
-1112304903 | 2025-01-08T01:10:35.126684
593 /
tcp
HTTP/1.1 403 Forbidden
Server: Apache/2.4.23 (Win64) OpenSSL/1.0.2h PHP/7.4.13
Content-Type: text/html; charset=iso-8859-1
-2023550675 | 2025-01-12T05:00:31.313548
636 /
tcp
\\x01\x0b=\\x01\xc3\x80\\x06\xc3\xbf\xc3\xbf?"<ZDECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\\x01\\x01
1300162323 | 2025-01-16T02:31:21.755480
666 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
-2089734047 | 2025-01-11T02:46:32.500525
771 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1911457608 | 2025-01-04T21:22:12.295890
772 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
921225407 | 2025-01-15T09:27:19.484154
789 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
-1598265216 | 2024-12-28T20:08:52.266725
873 /
tcp
1956828827 | 2025-01-02T16:06:42.972287
902 /
tcp
220 VMware Authentication Daemon Version 1.10: SSL Required, Se
rverDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , , NFCSSL supported/t
-2113068813 | 2025-01-03T23:09:34.808201
995 /
tcp
-1681927087 | 2025-01-06T11:21:17.912375
1023 /
tcp
kjnkjabhbanc283ubcsbhdc72
-345718689 | 2025-01-03T01:43:49.520509
1025 /
tcp
-1399940268 | 2025-01-15T13:48:25.623049
1029 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1362344524 | 2024-12-29T06:31:32.188876
1080 /
tcp
SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7
-1399940268 | 2024-12-24T23:19:25.942704
1099 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1547976805 | 2025-01-09T05:36:27.897515
1119 /
tcp
HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close
320677201 | 2025-01-07T17:33:16.549234
1153 /
tcp
H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server
-805362002 | 2025-01-09T19:08:38.144108
1177 /
tcp
ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225
-1428621233 | 2025-01-15T03:07:57.689359
1181 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
-971970408 | 2025-01-13T06:00:40.343579
1200 /
tcp
-1441741890 | 2024-12-25T17:31:35.688058
1337 /
tcp
220 corpease.net Anti-spam GT for Coremail System (icmhosting[2
0181212])
1492413928 | 2024-12-29T08:43:38.652620
1414 /
tcp
-1715152554 | 2025-01-15T02:48:58.960524
1443 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Wed, 15 Jan 2025 02:48:58 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.92.80.13:443/
165188539 | 2025-01-11T17:41:45.942677
1456 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
1282941221 | 2024-12-27T19:36:39.312137
1515 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
1975288991 | 2025-01-01T18:41:24.397281
1521 /
tcp
1842524259 | 2025-01-04T02:10:28.821461
1599 /
tcp
-2089734047 | 2025-01-16T05:24:54.162920
1604 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1103582599 | 2025-01-10T14:42:55.256557
1723 /
tcp
Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n
-1888448627 | 2025-01-11T10:34:41.308305
1800 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-1139999322 | 2025-01-14T09:51:43.248163
1801 /
tcp
\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\xf2\\xdby\\x96\\xbb\\xb1LE\\xa1\\x1f.%\xd2\xbft\\xb692d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
897328069 | 2025-01-11T23:29:24.962382
1911 /
tcp
220 mail.scott000.com ESMTP
1615193817 | 2025-01-07T18:49:15.351655
1922 /
tcp
Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n
119860953 | 2025-01-04T15:39:52.184326
1926 /
tcp
* OK ArGoSoft Mail Server IMAP Module v.YW at
-2089734047 | 2025-01-03T15:40:57.659697
1951 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1399940268 | 2025-01-10T17:23:06.846590
1962 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
165188539 | 2025-01-11T20:29:08.982720
1990 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1399940268 | 2024-12-24T12:34:53.175261
2000 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2025-01-14T21:11:37.480513
2002 /
tcp
-1105333987 | 2025-01-03T10:26:44.139432
2059 /
tcp
-1399940268 | 2025-01-13T09:33:13.304975
2061 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2024-12-19T10:51:14.278140
2066 /
tcp
1690634669 | 2025-01-12T19:11:23.439023
2067 /
tcp
-358801646 | 2025-01-01T08:20:17.593290
2070 /
tcp
-1399940268 | 2024-12-30T16:19:34.159876
2081 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
104385780 | 2024-12-30T02:41:32.485148
2083 /
tcp
2087396567 | 2025-01-12T03:31:15.877954
2087 /
tcp
kjnkjabhbanc283ubcsbhdc72
141730637 | 2024-12-28T20:02:14.331158
2121 /
tcp
HTTP/1.0 200 OK
Server: Proxy
-288825733 | 2025-01-15T10:49:58.206659
2154 /
tcp
HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1
-122096153 | 2025-01-06T10:21:04.880077
2181 /
tcp
Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618
819727972 | 2024-12-26T03:52:32.957333
2202 /
tcp
372433470 | 2025-01-16T05:09:42.370922
2222 /
tcp
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""
-1399940268 | 2025-01-11T18:07:22.877762
2225 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1730858130 | 2025-01-17T13:50:04.955275
2250 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
819727972 | 2025-01-16T19:42:35.150953
2320 /
tcp
1662205251 | 2025-01-09T16:47:59.836541
2323 /
tcp
HTTP/1.0 404 FAIL
Content-length:5
Connection:Close
-1626979812 | 2025-01-16T09:14:29.036737
2327 /
tcp
220 Service ready for new user.
671605376 | 2025-01-12T07:39:15.835293
2332 /
tcp
-2096652808 | 2025-01-01T14:23:35.520267
2345 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
165188539 | 2024-12-28T06:01:05.372132
2351 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
2087396567 | 2025-01-15T21:47:10.489269
2376 /
tcp
kjnkjabhbanc283ubcsbhdc72
-653033013 | 2025-01-12T08:49:21.884968
2404 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
1911457608 | 2025-01-17T19:12:46.116968
2561 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
740837454 | 2025-01-01T11:59:59.896536
2628 /
tcp
-1678345660 | 2025-01-10T23:46:24.698933
2701 /
tcp
!\\x07version\\x04bind7 t{RPowerDNS Recursor 410
-441419608 | 2024-12-31T18:29:47.156470
2709 /
tcp
SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3
-146605374 | 2025-01-17T12:00:45.156434
2762 /
tcp
\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00
-1399940268 | 2025-01-13T21:54:27.527938
3001 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2025-01-06T07:47:02.648604
3050 /
tcp
-2089734047 | 2025-01-06T10:53:06.807735
3056 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-2089734047 | 2025-01-17T16:41:57.450482
3059 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1839934832 | 2025-01-08T20:46:41.400861
3081 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
740837454 | 2025-01-16T16:21:35.002407
3090 /
tcp
-1399940268 | 2024-12-31T03:11:14.567385
3108 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1375131644 | 2025-01-12T18:35:42.202016
3111 /
tcp
\x00[v\xc3\xbdC\x7f\x00\x00
1911457608 | 2025-01-17T20:43:59.730230
3153 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2025-01-15T21:14:57.788337
3185 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-862070606 | 2025-01-13T02:33:10.158302
3260 /
tcp
Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=LIO Target\nTargetPortalGroupTag=1\n\n
-1105333987 | 2025-01-14T12:24:55.580029
3269 /
tcp
1623746877 | 2025-01-11T14:31:24.109930
3299 /
tcp
500 Permission denied - closing connection.\r\n
15018106 | 2025-01-15T02:56:43.121415
3301 /
tcp
\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00
-1230509234 | 2025-01-07T09:01:17.612898
3306 /
tcp
J\\x00\\x00\\x00\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MariaDB server
632542934 | 2024-12-31T17:09:38.008175
3310 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
165188539 | 2024-12-26T18:19:20.621182
3388 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
848680996 | 2025-01-16T09:41:58.111269
3389 /
tcp
Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\t\\x08\\x00\\x02\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID\nTarget_Name: WINCTYU-KTI28LG\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: WINCTYU-KTI28LG\nNetBIOS_Computer_Name: WINCTYU-KTI28LG\nDNS_Domain_Name: WINCTYU-KTI28LG\nDNS_Computer_Name: WINCTYU-KTI28LG\nSystem_Time: 2024-01-22 08:43:05 +0000 UTC\n\n
198844676 | 2024-12-24T19:16:30.016181
3551 /
tcp
HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close
1492413928 | 2025-01-02T11:28:06.870724
3554 /
tcp
1911457608 | 2024-12-29T13:02:10.699778
3560 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
539065883 | 2024-12-29T00:05:49.865029
3790 /
tcp
-1399940268 | 2024-12-30T23:02:22.304720
3792 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
141533638 | 2025-01-09T01:41:36.363380
4000 /
tcp
HTTP/1.1 302 Found
Location: /index.html
819727972 | 2025-01-15T19:57:27.298647
4042 /
tcp
-1399940268 | 2025-01-12T06:53:11.588671
4064 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
165188539 | 2025-01-13T06:21:09.326742
4150 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1879056922 | 2025-01-13T09:13:58.763053
4242 /
tcp
HTTP/1.1 403 Forbidden
Server: Apache/2.4.41 (Unix) OpenSSL/1.1.1d TST PHP/7.3.11
Content-Type: text/plain; charset=utf-8
Connection: close
-1230049476 | 2024-12-22T19:06:54.505353
4282 /
tcp
HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes
1308377066 | 2025-01-17T11:43:05.878662
4369 /
tcp
2087396567 | 2025-01-06T12:52:43.872323
4433 /
tcp
kjnkjabhbanc283ubcsbhdc72
-297128567 | 2024-12-30T19:40:55.036660
4434 /
tcp
\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00
677934968 | 2025-01-11T20:14:42.322977
4437 /
tcp
2087396567 | 2025-01-12T09:00:05.446586
4444 /
tcp
kjnkjabhbanc283ubcsbhdc72
819727972 | 2024-12-27T11:33:46.958215
4500 /
tcp
-358801646 | 2025-01-06T17:06:15.068692
4505 /
tcp
1911457608 | 2024-12-20T19:01:25.464763
4747 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
504717326 | 2025-01-10T08:30:06.645224
4786 /
tcp
165188539 | 2025-01-07T09:18:09.844176
4840 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
819727972 | 2025-01-04T09:38:14.750064
4899 /
tcp
401555314 | 2024-12-28T03:12:19.857988
4911 /
tcp
2087396567 | 2025-01-15T22:35:22.640101
4949 /
tcp
kjnkjabhbanc283ubcsbhdc72
1741579575 | 2025-01-13T06:01:41.111406
5006 /
tcp
-2089734047 | 2024-12-19T05:45:44.230949
5007 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1182822286 | 2025-01-16T15:57:54.788420
5009 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae237b_dianxun172_7460-1469
-904840257 | 2025-01-01T03:59:20.309450
5010 /
tcp
572 Relay not authorized\r\n
2087396567 | 2025-01-06T21:02:43.339187
5025 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1031019485 | 2025-01-14T12:18:57.918157
5172 /
tcp
-146605374 | 2025-01-01T07:49:49.408035
5201 /
tcp
\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00
-1399940268 | 2025-01-11T05:54:43.514704
5261 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1165098486 | 2024-12-24T19:10:24.890204
5269 /
tcp
HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938487.609-w-waf02tjgt
-2089734047 | 2025-01-16T22:05:05.378951
5432 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
819727972 | 2025-01-17T02:45:05.891746
5435 /
tcp
1911457608 | 2024-12-27T10:27:16.323300
5446 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
819727972 | 2025-01-06T06:47:16.419680
5494 /
tcp
2106853541 | 2025-01-17T00:15:46.760469
5555 /
tcp
HTTP/1.1 403 Forbidden
Content-Type: text/plain; charset=utf-8
Proxy-Authenticate: Basic realm="proxy"
-784071826 | 2025-01-12T12:01:30.806041
5604 /
tcp
575925250 | 2025-01-02T16:46:10.510476
5672 /
tcp
AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru
-1547976805 | 2024-12-19T08:47:28.478527
5822 /
tcp
HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close
-345718689 | 2025-01-01T21:13:44.336009
5858 /
tcp
1370263973 | 2025-01-07T13:25:49.717528
5938 /
tcp
-1013082686 | 2025-01-09T02:44:29.809089
5986 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain
-2089734047 | 2025-01-12T09:10:02.588026
5988 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1332894250 | 2025-01-16T10:39:01.625458
5996 /
tcp
\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:
401555314 | 2025-01-02T16:16:17.126652
6000 /
tcp
1632932802 | 2025-01-03T14:55:29.256225
6001 /
tcp
-1694458451 | 2025-01-08T00:06:46.066449
6002 /
tcp
-2089734047 | 2024-12-31T18:03:03.931116
6161 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-585940771 | 2024-12-19T04:10:17.583067
6262 /
tcp
321971019 | 2025-01-16T19:03:31.220253
6379 /
tcp
-ERR client ip is not in whitelist\r
94191552 | 2025-01-11T00:29:54.732435
6443 /
tcp
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sat, 11 Jan 2025 00:29:54 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.92.80.13:443/
<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>
-1327849035 | 2025-01-08T12:30:48.356627
6510 /
tcp
HTTP/1.1 200 OK
Server: Webs
X-Frame-Options: SAMEORIGIN
Content-Type: text/html
Connection: keep-alive
Keep-Alive: timeout=60, max=99
-1399940268 | 2024-12-19T22:11:12.290351
6550 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2089734047 | 2024-12-25T01:16:39.580389
6588 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1426971893 | 2025-01-07T07:28:42.867368
6633 /
tcp
\x00[s\xc3\x85\xc3\x93\x7f\x00\x00
-1327849035 | 2025-01-14T12:34:09.217348
6666 /
tcp
HTTP/1.1 200 OK
Server: Webs
X-Frame-Options: SAMEORIGIN
Content-Type: text/html
Connection: keep-alive
Keep-Alive: timeout=60, max=99
-971970408 | 2025-01-06T09:29:37.612950
6667 /
tcp
-2033111675 | 2025-01-06T22:17:18.415702
6668 /
tcp
-1279886438 | 2025-01-11T19:23:30.946897
6697 /
tcp
GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n
-904840257 | 2025-01-06T11:15:59.422692
6955 /
tcp
572 Relay not authorized\r\n
1265582946 | 2025-01-04T03:53:07.965911
7001 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2838_PS-JJN-01GM465_27752-26327
1741579575 | 2024-12-30T17:19:16.128121
7071 /
tcp
-358801646 | 2025-01-15T10:56:57.166574
7171 /
tcp
410249975 | 2025-01-10T21:38:55.288003
7218 /
tcp
-2089734047 | 2025-01-12T11:48:09.912577
7272 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
2143387245 | 2025-01-13T15:31:06.926769
7283 /
tcp
HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT
-1399940268 | 2025-01-01T17:07:39.989732
7415 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1209805157 | 2025-01-11T10:25:43.274332
7443 /
tcp
HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-SH-COchilian1-CACHE1[1]
X-CCDN-FORBID-CODE: 040001
819727972 | 2025-01-02T03:43:54.130285
7465 /
tcp
677934968 | 2025-01-15T08:50:49.768808
7473 /
tcp
-2089734047 | 2024-12-23T21:56:59.028630
7535 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1013082686 | 2025-01-10T03:40:38.354265
7548 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain
-616720387 | 2025-01-10T06:38:38.696281
7634 /
tcp
-1888448627 | 2025-01-16T06:11:29.997270
7778 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-303199180 | 2025-01-07T02:31:43.372428
7998 /
tcp
Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n
-2096652808 | 2025-01-15T18:31:37.387822
8009 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-2089734047 | 2025-01-02T19:49:08.930397
8014 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1615193817 | 2025-01-10T18:42:17.708873
8027 /
tcp
Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n
643778034 | 2025-01-14T20:37:02.944442
8042 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 657cd985_CS-FUO-01gBv50_81738-21559
-1810987450 | 2024-12-30T09:37:37.194037
8054 /
tcp
-1730858130 | 2025-01-11T08:09:04.229757
8056 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
-1730858130 | 2025-01-13T18:33:44.666558
8058 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
2087396567 | 2025-01-17T03:25:15.639635
8081 /
tcp
kjnkjabhbanc283ubcsbhdc72
2087396567 | 2025-01-10T22:12:27.169971
8083 /
tcp
kjnkjabhbanc283ubcsbhdc72
103159425 | 2024-12-27T20:54:14.950547
8085 /
tcp
1332894250 | 2024-12-27T20:50:45.309138
8087 /
tcp
\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:
1396488228 | 2024-12-28T16:15:43.594987
8089 /
tcp
HTTP/1.1 200 OK
Content-Length: 2037
Cache-Control: private, max-age=300
Content-Type: text/html
438715403 | 2025-01-03T23:25:38.500600
8099 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2874_pingwangtong53_24882-28622
-971970408 | 2025-01-06T22:59:39.593890
8126 /
tcp
819727972 | 2025-01-13T17:43:52.930826
8139 /
tcp
819727972 | 2025-01-11T10:13:16.882085
8140 /
tcp
-445721795 | 2025-01-16T18:53:07.091751
8173 /
tcp
\x00[\xc3\xaed\x1a\x7f\x00\x00
-1872120160 | 2024-12-25T17:57:25.967562
8181 /
tcp
">Application and Content Networking Software 3.9</a>)
</BODY><
-1015019981 | 2025-01-05T03:17:41.118188
8200 /
tcp
HTTP/1.1 200 OK
Content-Type: text/html
Connection: close
Server: DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.1.4
EXT:
-1428621233 | 2025-01-12T23:42:05.198120
8203 /
tcp
\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n
1011407350 | 2024-12-28T02:35:05.171547
8238 /
tcp
* OK GroupWise IMAP4rev1 Server Ready\r\n
677934968 | 2025-01-08T19:50:37.218399
8282 /
tcp
-1839934832 | 2025-01-12T21:43:14.553304
8285 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
1996932384 | 2024-12-23T19:32:02.983822
8291 /
tcp
-1261053701 | 2025-01-07T13:22:24.528351
8333 /
tcp
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
-2139121869 | 2024-12-25T21:59:36.957072
8402 /
tcp
HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 12-5524333-0 0NNN RT(1700566945630 8) q(0 -1 -1 -1) r(0 -1)
165188539 | 2024-12-26T02:23:41.004270
8407 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
1911457608 | 2024-12-27T18:40:47.097547
8413 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1282941221 | 2025-01-11T22:57:12.841629
8417 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
1492413928 | 2025-01-01T12:51:42.646545
8421 /
tcp
740837454 | 2025-01-12T00:24:47.921137
8432 /
tcp
410249975 | 2025-01-12T20:55:52.811124
8464 /
tcp
1529351907 | 2025-01-02T20:40:08.706052
8500 /
tcp
HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive
please add white ip *.*.*.*
-2096652808 | 2025-01-07T10:21:26.595380
8545 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
-1888448627 | 2025-01-13T00:50:40.482254
8550 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-971970408 | 2025-01-12T15:16:06.186736
8554 /
tcp
-1730858130 | 2025-01-08T18:05:08.703700
8575 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
-1888448627 | 2025-01-09T15:20:53.749453
8586 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-1329831334 | 2025-01-14T10:23:04.772955
8601 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n
819727972 | 2025-01-09T16:49:51.974604
8623 /
tcp
1489954473 | 2025-01-12T20:49:05.338259
8649 /
tcp
HTTP/1.1 410 Gone
Server: openresty
Transfer-Encoding: chunked
Connection: keep-alive
Via: 1.1 google
-375604792 | 2025-01-09T01:49:06.739170
8702 /
tcp
220 Microsoft FTP Service
1989907056 | 2025-01-07T11:55:55.907173
8728 /
tcp
RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n
-2089734047 | 2024-12-25T03:50:55.994722
8808 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1911457608 | 2024-12-21T19:30:49.994129
8816 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
504717326 | 2025-01-09T01:21:30.187690
8819 /
tcp
-1453516345 | 2025-01-13T03:43:26.252656
8824 /
tcp
HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
-358801646 | 2024-12-30T03:53:11.734511
8829 /
tcp
2087396567 | 2025-01-06T21:33:11.396467
8834 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1399940268 | 2025-01-09T21:09:39.361321
8844 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-585940771 | 2025-01-15T21:42:31.782472
8871 /
tcp
1911457608 | 2024-12-21T07:14:07.936832
8872 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
819727972 | 2025-01-16T05:08:05.829836
8880 /
tcp
165188539 | 2024-12-25T02:45:41.907955
8885 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-1399940268 | 2025-01-17T10:30:46.413255
8887 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-585940771 | 2025-01-13T07:02:31.698835
8890 /
tcp
1830697416 | 2025-01-16T16:10:56.669729
8906 /
tcp
HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)
677934968 | 2024-12-25T03:13:28.271309
8969 /
tcp
-1013082686 | 2024-12-20T16:02:29.921864
8990 /
tcp
HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain
1966849516 | 2025-01-16T01:56:30.772154
9000 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65adecfe_CS-000-01NFs233_3728-19750
-1026951088 | 2025-01-16T02:23:55.603907
9001 /
tcp
-971970408 | 2024-12-29T04:13:17.104261
9002 /
tcp
-1399940268 | 2024-12-23T20:52:01.252612
9003 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
709622286 | 2024-12-28T14:31:06.912241
9019 /
tcp
OK Welcome <299685> on DirectUpdate server 7286\r\n
1911457608 | 2024-12-29T00:59:39.205078
9021 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2025-01-17T07:27:20.417742
9025 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
632542934 | 2024-12-22T16:39:18.447863
9027 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
-1399940268 | 2025-01-13T10:33:57.701738
9029 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1399940268 | 2025-01-12T17:02:22.338772
9037 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2025-01-13T10:46:33.789828
9039 /
tcp
-358801646 | 2025-01-11T02:36:20.558552
9042 /
tcp
-1730858130 | 2025-01-08T16:52:39.231637
9051 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
-1839934832 | 2025-01-15T20:02:08.780145
9068 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
1948301213 | 2024-12-23T16:09:28.489779
9091 /
tcp
RFB 003.003
VNC:
Protocol Version: 3.3
-136006866 | 2024-12-20T19:08:38.100841
9092 /
tcp
STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND
-2089734047 | 2024-12-21T13:22:56.029311
9094 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1248408558 | 2025-01-09T19:10:24.469398
9095 /
tcp
220 MikroTik FTP server (MikroTik 6.44.3) ready
-1730858130 | 2025-01-11T19:05:08.509083
9100 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
401555314 | 2025-01-17T12:39:09.997778
9107 /
tcp
671605376 | 2024-12-27T00:15:20.689859
9111 /
tcp
-1399940268 | 2025-01-13T14:26:45.356616
9118 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-358707605 | 2025-01-13T17:08:50.207171
9119 /
tcp
HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 391
Connect-To: https://qd-gatway.aliyuncs.com/table/tree-land/nacos/
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Nacos</title>
<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">
<link href="./css/main.css" rel="stylesheet"></head>
<body>
<div id="root" style="overflow:hidden"></div>
<div id="app"></div>
<div id="other"></div>
</body>
-1373613804 | 2025-01-12T20:13:35.376391
9149 /
tcp
00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,
1453929220 | 2025-01-01T10:28:05.454396
9151 /
tcp
-1019343788 | 2024-12-29T12:35:38.049487
9160 /
tcp
-2089734047 | 2025-01-13T03:14:30.974883
9169 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1911457608 | 2025-01-17T09:57:23.387481
9197 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2024-12-22T23:53:24.366931
9204 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-2089734047 | 2025-01-16T00:30:39.865628
9217 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
165188539 | 2025-01-11T03:32:56.206908
9243 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
632542934 | 2025-01-11T11:04:37.739759
9253 /
tcp
\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00
669849225 | 2025-01-09T01:16:37.156334
9306 /
tcp
SSH-98.60-SysaxSSH_81885..42\r\n
165188539 | 2024-12-21T16:22:34.994722
9309 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
165188539 | 2025-01-10T18:59:25.969762
9333 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
1909672637 | 2024-12-26T04:51:12.798861
9418 /
tcp
HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff
-1487943323 | 2024-12-26T23:39:24.338921
9433 /
tcp
431 Unable to negotiate secure command connection.\r\n
-1508488931 | 2025-01-04T18:01:33.911716
9443 /
tcp
HTTP/1.1 200 OK
Date: Sat, 04 Jan 2025 18:01:33 GMT
Content-Type: application/json
Content-Length: 1115
Connection: keep-alive
Ali-Swift-Global-Savetime: 1736013693
Eagleeye-Traceid: 282f3cdc01a7bf04d7108a5d7d
Eagleid: 282f3cdc01a7bf04d7108a5d7d
S_group: tao-session
S_ip: d2bbce4f9dcf7a0c88204ca2baa47f86
S_status: STATUS_SYS_ERR
S_tag: 773731420619424|804880722^|^^
S_tid: 282f3cdc01a7bf04d7108a5d7d
S_ucode: CN:CENTER
S_v: 4.0.1.1
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://ecs-workbench-disposable.aliyun.com
Ufe-Result: A5
Via: live43.d1live5[844,414,148-0,M], live03.live59[387,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Sat, 04 Jan 2025 18:01:33 GMT
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a7:27:29:07:10:52:7c:ae:c7:4a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2
Validity
Not Before: Sep 12 07:56:08 2023 GMT
Not After : Feb 20 10:00:00 2024 GMT
Subject: CN=*.aliyuncs.com, O=Alibaba (China) Technology Co., Ltd., L=Hangzhou, ST=Zhejiang, C=CN
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:af:b1:09:11:5f:ab:90:6d:62:07:27:05:6a:9e:
c8:80:6c:be:79:f4:b3:19:53:5d:e5:c4:7c:8a:2a:
2c:18:d0:5d:2d:3b:ff:f6:a3:1f:f6:b5:48:03:92:
d1:fc:f8:ce:42:25:6b:a4:23:31:4d:9b:76:6f:7d:
8b:18:e2:09:df:cb:95:8d:a9:b8:27:4f:b6:58:ad:
e5:be:54:77:ef:22:42:47:6d:cc:d8:a1:04:66:0d:
2c:3c:13:b5:5c:57:bf:e2:5a:38:99:99:4b:28:f0:
79:8c:ef:8e:cb:12:87:5d:4b:89:0f:70:27:d0:de:
f0:91:41:d5:5b:54:2c:20:93:74:fd:7e:64:64:bc:
03:81:a2:d6:07:62:5e:c9:51:8f:ab:48:cb:4f:28:
f3:40:f6:46:51:bd:83:b8:e2:81:f9:df:bb:4c:f6:
9d:2f:f6:22:f9:f9:4b:5c:ce:0a:55:25:d1:55:28:
d9:dc:51:a9:5b:c3:81:19:c5:11:3e:8c:d8:d9:c3:
9e:b6:74:0c:64:f1:e0:2c:be:e8:7d:0b:c0:b1:c1:
e2:69:4d:a7:d3:de:b6:3b:e2:aa:06:bb:d2:61:d1:
83:93:3d:92:96:bd:64:4d:d8:fd:75:42:d3:63:9f:
3f:00:ee:4e:bf:14:33:dd:cf:c3:9f:ce:34:a5:f9:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
BD:22:FF:00:93:D9:9B:FA:87:FC:C5:14:21:44:0A:DD:BF:4A:AA:A6
X509v3 Authority Key Identifier:
96:DE:61:F1:BD:1C:16:29:53:1C:C0:CC:7D:3B:83:00:40:E6:1A:7C
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
X509v3 Subject Alternative Name:
DNS:*.aliyuncs.com, DNS:*.cn-hangzhou-mybk.aliyuncs.com, DNS:*.cn-nantong.aliyuncs.com, DNS:*.cn-shenzhen-finance-1.aliyuncs.com, DNS:*.cn-sichuan.aliyuncs.com, DNS:*.jp-fudao.aliyuncs.com, DNS:*.ap-south-1.aliyuncs.com, DNS:*.cn-wulanchabu.aliyuncs.com, DNS:*.cn-huhehaote.aliyuncs.com, DNS:*.cn-chengdu.aliyuncs.com, DNS:*.rus-west-1.aliyuncs.com, DNS:*.ap-southeast-1.aliyuncs.com, DNS:*.in-mumbai.aliyuncs.com, DNS:*.cn-guangzhou.aliyuncs.com, DNS:*.cn-hangzhou.aliyuncs.com, DNS:union.lazada.com.my, DNS:shog36403617.taobao.com
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
08:44:5c:57:1a:a9:f3:fa:db:51:45:8b:4d:04:56:19:fa:c2:
a7:25:81:89:33:9f:45:05:6d:b2:cc:9c:04:78:ab:d8:d9:95:
05:ee:90:5f:4c:eb:4f:d5:4e:c1:ab:48:9e:8d:59:6b:f5:37:
c6:20:3d:cf:97:d5:b8:66:b9:82:17:26:db:60:34:95:1b:d8:
32:ca:00:fd:08:46:c0:e9:d9:6a:d0:2d:bf:28:6c:27:93:6b:
d6:ca:5d:d6:01:cc:18:6e:a6:fb:be:fd:e9:1c:7a:d8:58:ca:
ea:db:a4:db:42:f6:14:4d:24:ad:8f:2d:4e:f5:5c:b1:8d:df:
83:af:29:09:a7:7b:c1:bd:b6:c1:b0:31:04:3c:8c:b0:07:d4:
a2:bf:e0:08:3b:e4:5f:f8:2d:72:d9:de:f1:b8:d2:7c:d1:b3:
4a:e8:53:97:0f:94:f5:dc:b8:70:57:88:72:81:d8:06:a2:d0:
7c:61:91:21:68:41:76:f0:2f:8f:d7:32:4e:36:7a:77:83:64:
a4:fd:10:be:52:43:a8:48:0b:9b:d8:ed:93:7a:80:1e:65:53:
47:cf:20:d2:31:61:72:78:92:7b:d4:fd:96:21:d8:59:dc:b6:
be:18:9a:80:43:9a:79:eb:45:47:fd:bd:ce:2a:dd:0b:9e:ef:
94:36:a5:87
1911457608 | 2025-01-16T02:27:11.145483
9445 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
819727972 | 2024-12-23T17:08:17.409015
9600 /
tcp
740837454 | 2025-01-15T18:27:34.682811
9611 /
tcp
2109639173 | 2025-01-04T08:25:54.387254
9876 /
tcp
\\x00\\x00\\x01\\xb8\\x00\\x00\\x00_{"code":0,"flag":1,"language":"JAVA","opaque":0,"serializeTypeCurrentRPC":"JSON","version":401}{"brokerAddrTable":{"rocketmq-cnng0d8ee3802629-broker-0":{"brokerAddrs":{0:"180.184.35.245:30950",2:"180.184.35.245:30951",3:"180.184.35.245:30952"},"brokerName":"rocketmq-cnng0d8ee3802629-broker-0","cluster":"rocketmq-cnng0d8ee3802629-broker"}},"clusterAddrTable":{"rocketmq-cnng0d8ee3802629-broker":["rocketmq-cnng0d8ee3802629-broker-0"]}}
1320285193 | 2024-12-30T23:58:18.046600
9898 /
tcp
HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive
1833368189 | 2025-01-12T20:52:30.043669
9943 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae18b9_dong118_31397-16667
1161309183 | 2025-01-04T06:01:37.079089
9999 /
tcp
1492413928 | 2025-01-08T13:09:09.773204
10001 /
tcp
504717326 | 2025-01-12T04:49:56.644942
10008 /
tcp
1134517380 | 2025-01-11T10:10:56.607656
10038 /
tcp
welcome to Pandora console!\r\n----------------------------\n-------------------------\n| Login Time | 2021-12-08 1...\n
819727972 | 2025-01-12T21:12:19.260969
10066 /
tcp
-1261090339 | 2025-01-12T15:04:28.792808
10080 /
tcp
\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00
1077013874 | 2024-12-29T02:19:38.275243
10134 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
-653033013 | 2025-01-13T19:20:32.797961
10250 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
931578379 | 2025-01-06T19:30:40.398657
10443 /
tcp
HTTP/1.1 200 OK
Date: Mon, 06 Jan 2025 19:30:40 GMT
Content-Type: text/html
Content-Length: 1630
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache, no-store
Etag: "40972a19-770"
Server: Tengine
Set-Cookie: SERVERID=5939e12798f8f3ba62623fd3f15641d4|1736191840|1736191840;Path=/
Vary: Accept-Encoding
Location: htps://ubsms-inner.aliyuncs.com
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:35:2e:4a:35:dc:34:ed:3b:e8:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
Validity
Not Before: Apr 12 23:17:04 2023 GMT
Not After : May 13 23:11:02 2024 GMT
Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.alibabacorp.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:ce:df:cc:8f:47:6d:5a:12:18:79:11:07:b2:3a:
7f:d1:f4:cb:e6:51:3c:15:3b:2c:9d:68:96:80:ba:
53:a5:9a:69:0e:9e:64:7b:bb:5c:9a:ad:24:36:58:
0f:5f:36:4a:8e:28:7e:25:7c:9f:36:43:a8:da:32:
95:8c:ad:ca:32
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
EB:3E:07:A3:E1:1B:8B:BD:B5:1C:00:D6:2C:14:E5:3E:32:B8:48:18
X509v3 Authority Key Identifier:
68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
Authority Information Access:
OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
X509v3 Subject Alternative Name:
DNS:*.alibabacorp.com, DNS:*.56.cainiao-inc.com, DNS:*.56.cainiao.com, DNS:*.9game.cn, DNS:*.a.alibaba-inc.com, DNS:*.abs.alibaba-inc.com, DNS:*.acc.alibaba-inc.com, DNS:*.acds.taobao.org, DNS:*.acp.alibaba-inc.com, DNS:*.acs.alibabaplanet.com, DNS:*.addr.cainiao-inc.com, DNS:*.admin.alibaba-inc.com, DNS:*.admin.alitrip.com, DNS:*.admin.cainiao-inc.com, DNS:*.admin.fliggy.com, DNS:shog1301373o611i7.1688.com, DNS:oggs.1688.com, DNS:print.gfn.cainiao.com, DNS:web.lazada.com, DNS:shop497241465.taobao.com, DNS:security-nash-web.zhangjiakou.zone, DNS:cbu-xiaoer.aliyun.com, DNS:ide-jog-ogent.oone.ojibobo-ina.aon.alibaba-inc.com, DNS:shog36415005.taobao.com, DNS:edsoggavstoner-vga.an-ahengdv.aliyuncs.com, DNS:eai-vga.an-ahengdv.aliyuncs.com, DNS:shop36322980.aliyun.com, DNS:sjs4serviae.aonsoje.aliyun.com, DNS:app73960.eapps.dingtalkcloud.com, DNS:mse-vpc.ap-southeast-5.aliyuncs.com, DNS:zsdxad.1688.com, DNS:www22.aliexpress.com, DNS:cicef.org.cn, DNS:unpm-upaas.quark.cn, DNS:hvoyijiojv.tmall.com, DNS:dlc-gateway.pai-damo.alibaba-inc.com, DNS:ticket.aliyun.com, DNS:shop1429527762715.aliyun.com, DNS:code-ssr.fc.aliyun.com, DNS:fbi.lazada.com, DNS:sjender.ojibobo-ina.aon.alibaba-inc.com, DNS:api-xspace.daraz.com, DNS:090826.aliyun.com, DNS:insvronae.tmall.com, DNS:oogi.o2.ojibobo-ina.aon.alibaba-inc.com, DNS:shog413558627.taobao.com, DNS:www9.buntleben.xixikf.cn, DNS:api.aliyun.com, DNS:yiwuzy.aliyun.com, DNS:biaoju.aliyun.com, DNS:hcwms.aliyun.com, DNS:oa.dingtalk.com
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.20
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
7f:1f:f4:27:6c:22:9a:a6:28:b4:d1:81:46:90:db:1c:01:ae:
70:8a:96:ac:de:90:b5:d3:9c:0f:fe:08:1a:6f:67:38:fd:c6:
8a:7b:da:6c:76:54:d9:cf:57:e8:8f:fb:34:82:89:64:b2:66:
d3:ce:e9:59:c0:58:ba:b2:e1:45:6f:b8:56:9d:f2:0e:a9:5b:
30:a0:ca:c5:7b:05:7d:3e:ae:de:76:42:08:05:77:60:95:44:
a5:ed:27:e6:54:11:0b:b2:e6:63:62:f1:49:1e:70:2b:73:23:
8b:af:f6:03:3f:33:5e:a1:55:4b:d6:87:c2:21:ae:c0:53:75:
c1:58:27:68:4b:6c:59:a3:10:85:d8:4d:c3:14:af:df:dc:dd:
1c:b9:d0:40:56:4b:9b:7a:c6:d0:c9:b2:3d:6f:c0:a1:54:56:
2a:6f:1f:a5:9a:4d:f9:8b:04:6b:5c:87:02:5c:18:d7:bb:06:
75:03:6e:4b:7a:b8:b8:d7:24:a4:3c:98:9e:cf:fe:3b:82:12:
35:07:42:fe:33:0b:2b:dd:6b:bd:fe:29:e0:93:87:b3:1a:35:
0a:47:7f:46:5e:77:38:f2:25:06:cf:96:c5:9d:81:e8:a8:33:
ba:18:a7:51:67:9c:10:8a:5a:b7:c0:ed:12:be:2c:7c:00:fe:
d5:fe:af:c2
-2096652808 | 2025-01-12T20:25:52.097059
10445 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
1741579575 | 2025-01-17T05:54:46.688954
10554 /
tcp
921225407 | 2025-01-02T12:20:47.098302
10909 /
tcp
\x00\x00\x00\x04\x00\x00\x00\x00\x00
-1399940268 | 2025-01-14T19:16:55.333862
10911 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1297953727 | 2024-12-26T21:08:47.031385
11000 /
tcp
\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c
-1399940268 | 2025-01-14T14:37:54.600343
11112 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1230049476 | 2025-01-17T18:00:20.853113
11210 /
tcp
HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes
-136006866 | 2025-01-08T09:22:08.298589
11211 /
tcp
STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND
-1399940268 | 2025-01-12T19:29:23.190834
11288 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
745343730 | 2024-12-25T17:22:39.193347
11300 /
tcp
220 smtp.qq.com Esmtp QQ Mail Server
-339084706 | 2025-01-13T03:52:41.363517
11602 /
tcp
200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n
1911457608 | 2025-01-16T05:03:46.696484
12278 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1748152518 | 2025-01-03T17:59:20.462915
12345 /
tcp
HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae26f8_hwt112_4105-46187
-1888448627 | 2025-01-11T18:06:16.174151
12402 /
tcp
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
-1399940268 | 2025-01-14T12:26:55.955737
12474 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
51259122 | 2025-01-12T18:06:09.391377
12477 /
tcp
\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n
819727972 | 2025-01-10T07:02:10.741985
12492 /
tcp
-653033013 | 2025-01-12T22:02:21.027142
12500 /
tcp
\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f
165188539 | 2025-01-13T11:58:16.783180
12526 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-345718689 | 2025-01-13T00:04:05.878316
12554 /
tcp
819727972 | 2025-01-15T19:43:23.877461
12564 /
tcp
-136006866 | 2025-01-11T16:18:44.872123
12584 /
tcp
STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND
-1399940268 | 2025-01-09T10:54:56.042687
12980 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1399940268 | 2025-01-11T09:37:52.004416
13001 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
1632932802 | 2025-01-14T15:27:39.886205
13380 /
tcp
-1730858130 | 2025-01-14T04:52:29.029546
14147 /
tcp
RFB 003.008
VNC:
Protocol Version: 3.8
819727972 | 2025-01-08T11:21:52.270934
14265 /
tcp
-1026951088 | 2024-12-25T09:48:05.716504
14344 /
tcp
-1114821551 | 2025-01-08T23:49:31.595390
15042 /
tcp
\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol
-2089734047 | 2025-01-15T21:18:53.495385
16022 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-1399940268 | 2025-01-14T20:18:42.497441
16023 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
819727972 | 2025-01-13T15:29:29.633094
16082 /
tcp
366084633 | 2025-01-15T10:20:02.655837
16601 /
tcp
<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>
819727972 | 2025-01-06T13:12:13.923466
16993 /
tcp
1077013874 | 2025-01-10T05:40:05.896749
17771 /
tcp
HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close
2103111368 | 2025-01-16T04:34:30.821655
18031 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
<?...
671605376 | 2025-01-11T07:50:25.202449
18079 /
tcp
165188539 | 2025-01-08T22:44:43.761759
18081 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
-2017887953 | 2025-01-14T00:05:59.666717
18095 /
tcp
-1733645023 | 2025-01-09T20:47:53.743045
18245 /
tcp
SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10
819727972 | 2025-01-16T21:57:28.795357
18802 /
tcp
-303199180 | 2025-01-15T15:18:53.356426
19000 /
tcp
Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n
321971019 | 2025-01-14T20:08:47.974691
19080 /
tcp
-ERR client ip is not in whitelist\r
819727972 | 2025-01-13T16:00:02.459625
19084 /
tcp
1900503736 | 2024-12-25T17:32:29.898047
20000 /
tcp
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0
-2096652808 | 2025-01-10T20:52:59.654868
20080 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
1911457608 | 2025-01-14T10:22:04.947728
20256 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
114471724 | 2025-01-17T20:51:59.464479
20500 /
tcp
HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX
819727972 | 2025-01-13T20:50:54.116048
20547 /
tcp
1370263973 | 2025-01-17T05:55:48.418107
20880 /
tcp
-1399940268 | 2025-01-13T22:46:04.391379
20894 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1839934832 | 2024-12-26T15:34:59.150692
21025 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
321971019 | 2025-01-17T08:45:31.234275
21273 /
tcp
-ERR client ip is not in whitelist\r
1911457608 | 2025-01-15T07:48:28.600465
21379 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1208318993 | 2025-01-10T12:38:35.604417
22022 /
tcp
\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01
366084633 | 2025-01-11T14:41:46.721229
22556 /
tcp
<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>
-1681927087 | 2025-01-11T22:57:47.866307
23023 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1327660293 | 2024-12-27T21:14:46.349608
25001 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
165188539 | 2025-01-15T05:44:43.321698
25565 /
tcp
\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00
1911457608 | 2025-01-10T00:30:03.388895
27015 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1763259671 | 2024-12-27T06:49:51.537355
27017 /
tcp
{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n
-2046514463 | 2024-12-24T01:15:17.257739
28015 /
tcp
-1426182427 | 2025-01-14T14:32:41.427423
30000 /
tcp
\\x00[\\x00\\x00\\x00\\x00\\x00\\x00
-1681927087 | 2025-01-06T18:42:04.670890
30003 /
tcp
kjnkjabhbanc283ubcsbhdc72
1911457608 | 2025-01-11T10:59:06.771110
30021 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1399940268 | 2025-01-12T17:59:37.540815
30473 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-147424911 | 2025-01-08T02:07:47.291860
31337 /
tcp
HTTP/1.1 404 Not Found
Content Length: 0
1189133115 | 2024-12-30T09:26:01.262137
32764 /
tcp
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8
1690634669 | 2025-01-04T06:05:41.841571
33060 /
tcp
1308377066 | 2025-01-05T18:29:29.420749
33333 /
tcp
597764502 | 2025-01-16T17:17:25.315754
35000 /
tcp
\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00
-1399940268 | 2025-01-17T18:24:49.949351
35251 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-971970408 | 2025-01-06T17:44:00.363636
36022 /
tcp
819727972 | 2025-01-08T22:04:48.351205
37777 /
tcp
-1036370807 | 2025-01-14T16:12:08.492020
40471 /
tcp
539065883 | 2025-01-06T16:16:28.448324
43222 /
tcp
-1327660293 | 2025-01-13T12:28:21.932878
44307 /
tcp
ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00
1308377066 | 2025-01-15T20:30:08.656631
44341 /
tcp
2087396567 | 2024-12-20T19:38:43.285427
47022 /
tcp
kjnkjabhbanc283ubcsbhdc72
-358801646 | 2024-12-20T21:08:25.093235
48522 /
tcp
-971970408 | 2024-12-20T18:18:35.918310
48822 /
tcp
-971970408 | 2024-12-20T12:46:55.671775
49422 /
tcp
1308377066 | 2024-12-20T15:02:21.607594
49522 /
tcp
1911457608 | 2025-01-13T06:09:17.155971
49682 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
1308377066 | 2024-12-20T07:55:53.146529
49722 /
tcp
-345718689 | 2024-12-20T10:52:01.627126
49822 /
tcp
-321444299 | 2024-12-20T09:17:11.557816
49922 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.
1220320909 | 2025-01-15T15:34:19.140637
50000 /
tcp
819727972 | 2024-12-20T11:28:57.475488
50022 /
tcp
-1681927087 | 2024-12-20T14:06:56.261134
50100 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1399940268 | 2025-01-16T01:08:41.098295
50160 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
-1097188123 | 2024-12-20T12:05:36.461548
50222 /
tcp
1342742850 | 2025-01-09T03:11:39.911766
50500 /
tcp
HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 11-95441870-0 0NNN RT(1701249031731 8) q(0 -1 -1 -1) r(0 -1)
-904840257 | 2025-01-09T19:46:22.891580
51007 /
tcp
572 Relay not authorized\r\n
819727972 | 2024-12-20T03:46:56.906232
51022 /
tcp
599074451 | 2024-12-20T03:09:45.434151
51122 /
tcp
1282941221 | 2024-12-19T22:23:48.432220
51422 /
tcp
HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close
Command server error
-1839934832 | 2024-12-19T18:51:34.763250
52222 /
tcp
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html
...
2087396567 | 2024-12-19T19:34:51.542098
52322 /
tcp
kjnkjabhbanc283ubcsbhdc72
2103111368 | 2024-12-19T17:34:46.621934
52422 /
tcp
HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close
<?...
1741579575 | 2024-12-19T16:05:14.537755
52522 /
tcp
-358801646 | 2024-12-19T16:46:24.441998
52622 /
tcp
1887224352 | 2024-12-19T14:41:52.147689
52722 /
tcp
-2089734047 | 2025-01-16T12:08:36.358247
52951 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
1741579575 | 2024-12-19T11:16:40.272149
53122 /
tcp
539065883 | 2024-12-19T13:18:52.627714
53322 /
tcp
1911457608 | 2025-01-09T11:25:52.195113
53483 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-1487943323 | 2025-01-12T10:49:33.825899
54490 /
tcp
431 Unable to negotiate secure command connection.\r\n
-1392039491 | 2024-12-18T23:53:56.042879
54522 /
tcp
"Broadband Router"
<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad
1542849631 | 2024-12-19T02:32:59.075183
54722 /
tcp
* OK [CAPABILITY a2,M\] nBwXk2pPP IMAP4rev1 20qx at
2033888749 | 2024-12-19T03:02:06.081276
54922 /
tcp
Content-Type: text/rude-rejection
Content-Length: 24
Access Denied, go away.
Content-Type: text/disconnect-notice
C...
1504401647 | 2024-12-29T08:58:40.457611
55000 /
tcp
:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n
-2096652808 | 2024-12-18T22:40:20.422205
55022 /
tcp
\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n
2087396567 | 2024-12-18T21:20:00.451590
55422 /
tcp
kjnkjabhbanc283ubcsbhdc72
2087396567 | 2025-01-11T16:16:39.082624
55443 /
tcp
kjnkjabhbanc283ubcsbhdc72
-1399940268 | 2025-01-15T14:51:32.941493
58378 /
tcp
kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02
2087396567 | 2025-01-16T20:39:53.897527
58622 /
tcp
kjnkjabhbanc283ubcsbhdc72
1690634669 | 2024-12-25T20:58:42.835599
60129 /
tcp
-2046514463 | 2024-12-31T10:11:16.024491
61613 /
tcp
1911457608 | 2025-01-10T09:51:54.820857
61616 /
tcp
\x00[\x00\x00\x00\x00\x00\x00
-2089734047 | 2025-01-12T09:45:34.082599
62443 /
tcp
\x02\t\x00\x01\x00\x00\x00\x00\x00\x00
-180163620 | 2025-01-14T10:48:04.502788
62865 /
tcp
NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n
-79865617 | 2025-01-08T21:25:41.449790
63210 /
tcp
( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com
mit-revprops depth log-revprops partial-replay ) ) )
-1230049476 | 2025-01-14T08:40:01.249847
63256 /
tcp
HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes
1543809371 | 2025-01-17T19:48:01.277273
63260 /
tcp
220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])
51259122 | 2025-01-17T00:34:24.317978
64295 /
tcp
\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n
