Advertisement
Guest User

Untitled

a guest
Apr 24th, 2018
274
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.49 KB | None | 0 0
  1. tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
  2. listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
  3. 09:34:16.152006 IP 179.106.227.21.37858 > 200.155.18.90.21: Flags [S], seq 1047033263, win 29200, options [mss 1460,sackOK,TS val 324118635 ecr 0,nop,wscale 7], length 0
  4. 09:34:16.178411 IP 200.155.18.90.21 > 179.106.227.21.37858: Flags [S.], seq 1856452002, ack 1047033264, win 5792, options [mss 1460,sackOK,TS val 1710014922 ecr 324118635,nop,wscale 7], length 0
  5. 09:34:16.178442 IP 179.106.227.21.37858 > 200.155.18.90.21: Flags [.], ack 1, win 229, options [nop,nop,TS val 324118661 ecr 1710014922], length 0
  6. 09:34:16.206220 IP 200.155.18.90.21 > 179.106.227.21.37858: Flags [P.], seq 1:35, ack 1, win 46, options [nop,nop,TS val 1710014950 ecr 324118661], length 34: FTP: 220 Welcome to blah FTP service.
  7. 09:34:16.206238 IP 179.106.227.21.37858 > 200.155.18.90.21: Flags [.], ack 35, win 229, options [nop,nop,TS val 324118689 ecr 1710014950], length 0
  8. 09:34:16.206387 IP 179.106.227.21.37858 > 200.155.18.90.21: Flags [P.], seq 1:17, ack 35, win 229, options [nop,nop,TS val 324118689 ecr 1710014950], length 16: FTP: USER anonymous
  9. 09:34:16.233217 IP 200.155.18.90.21 > 179.106.227.21.37858: Flags [.], ack 17, win 46, options [nop,nop,TS val 1710014976 ecr 324118689], length 0
  10. 09:34:16.233233 IP 200.155.18.90.21 > 179.106.227.21.37858: Flags [P.], seq 35:69, ack 17, win 46, options [nop,nop,TS val 1710014976 ecr 324118689], length 34: FTP: 331 Please specify the password.
  11. 09:34:16.233428 IP 179.106.227.21.37858 > 200.155.18.90.21: Flags [P.], seq 17:43, ack 69, win 229, options [nop,nop,TS val 324118716 ecr 1710014976], length 26: FTP: PASS mozilla@example.com
  12. 09:34:16.299217 IP 200.155.18.90.21 > 179.106.227.21.37858: Flags [.], ack 43, win 46, options [nop,nop,TS val 1710015043 ecr 324118716], length 0
  13. 09:34:20.321296 IP 200.155.18.90.21 > 179.106.227.21.37858: Flags [P.], seq 69:91, ack 43, win 46, options [nop,nop,TS val 1710019065 ecr 324118716], length 22: FTP: 530 Login incorrect.
  14. 09:34:20.321550 IP 179.106.227.21.37858 > 200.155.18.90.21: Flags [F.], seq 43, ack 91, win 229, options [nop,nop,TS val 324122805 ecr 1710019065], length 0
  15. 09:34:20.321692 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [S], seq 2566112065, win 29200, options [mss 1460,sackOK,TS val 324122805 ecr 0,nop,wscale 7], length 0
  16. 09:34:20.348151 IP 200.155.18.90.21 > 179.106.227.21.37858: Flags [P.], seq 91:101, ack 44, win 46, options [nop,nop,TS val 1710019091 ecr 324122805], length 10: FTP: 500 OOPS: [!ftp]
  17. 09:34:20.348186 IP 179.106.227.21.37858 > 200.155.18.90.21: Flags [R], seq 1047033307, win 0, length 0
  18. 09:34:20.348224 IP 200.155.18.90.21 > 179.106.227.21.37858: Flags [P.], seq 131:133, ack 44, win 46, options [nop,nop,TS val 1710019091 ecr 324122805], length 2: FTP:
  19. 09:34:20.348232 IP 179.106.227.21.37858 > 200.155.18.90.21: Flags [R], seq 1047033307, win 0, length 0
  20. 09:34:20.348235 IP 200.155.18.90.21 > 179.106.227.21.37858: Flags [P.], seq 101:131, ack 44, win 46, options [nop,nop,TS val 1710019091 ecr 324122805], length 30: FTP: vsf_sysutil_recv_peek: no data[!ftp]
  21. 09:34:20.348238 IP 179.106.227.21.37858 > 200.155.18.90.21: Flags [R], seq 1047033307, win 0, length 0
  22. 09:34:20.348241 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [S.], seq 1552594868, ack 2566112066, win 5792, options [mss 1460,sackOK,TS val 1710019091 ecr 324122805,nop,wscale 7], length 0
  23. 09:34:20.348725 IP 200.155.18.90.21 > 179.106.227.21.37858: Flags [FP.], seq 133:155, ack 44, win 46, options [nop,nop,TS val 1710019092 ecr 324122805], length 22: FTP: 500 OOPS: child died
  24. 09:34:20.348732 IP 179.106.227.21.37858 > 200.155.18.90.21: Flags [R], seq 1047033307, win 0, length 0
  25. 09:34:20.375926 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 1:35, ack 1, win 46, options [nop,nop,TS val 1710019119 ecr 324122831], length 34: FTP: 220 Welcome to blah FTP service.
  26. 09:34:20.375958 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [.], ack 35, win 229, options [nop,nop,TS val 324122859 ecr 1710019119], length 0
  27. 09:34:50.535169 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [P.], seq 1:15, ack 35, win 229, options [nop,nop,TS val 324153019 ecr 1710019119], length 14: FTP: USER ftpdwnl
  28. 09:34:50.561328 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [.], ack 15, win 46, options [nop,nop,TS val 1710049305 ecr 324153019], length 0
  29. 09:34:50.561342 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 35:69, ack 15, win 46, options [nop,nop,TS val 1710049305 ecr 324153019], length 34: FTP: 331 Please specify the password.
  30. 09:34:50.561350 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [.], ack 69, win 229, options [nop,nop,TS val 324153045 ecr 1710049305], length 0
  31. 09:34:50.599560 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [P.], seq 15:30, ack 69, win 229, options [nop,nop,TS val 324153083 ecr 1710049305], length 15: FTP: PASS vK2X5nLh
  32. 09:34:50.666027 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [.], ack 30, win 46, options [nop,nop,TS val 1710049409 ecr 324153083], length 0
  33. 09:34:50.735013 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 69:92, ack 30, win 46, options [nop,nop,TS val 1710049478 ecr 324153083], length 23: FTP: 230 Login successful.
  34. 09:34:50.735039 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [.], ack 92, win 229, options [nop,nop,TS val 324153218 ecr 1710049478], length 0
  35. 09:34:50.735325 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [P.], seq 30:36, ack 92, win 229, options [nop,nop,TS val 324153219 ecr 1710049478], length 6: FTP: SYST
  36. 09:34:50.761477 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [.], ack 36, win 46, options [nop,nop,TS val 1710049505 ecr 324153219], length 0
  37. 09:34:50.761491 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 92:111, ack 36, win 46, options [nop,nop,TS val 1710049505 ecr 324153219], length 19: FTP: 215 UNIX Type: L8
  38. 09:34:50.761643 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [P.], seq 36:42, ack 111, win 229, options [nop,nop,TS val 324153245 ecr 1710049505], length 6: FTP: FEAT
  39. 09:34:50.787897 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 111:126, ack 42, win 46, options [nop,nop,TS val 1710049531 ecr 324153245], length 15: FTP: 211-Features:
  40. 09:34:50.787923 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 126:133, ack 42, win 46, options [nop,nop,TS val 1710049531 ecr 324153245], length 7: FTP: EPRT
  41. 09:34:50.787928 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 133:140, ack 42, win 46, options [nop,nop,TS val 1710049531 ecr 324153245], length 7: FTP: EPSV
  42. 09:34:50.788016 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [.], ack 140, win 229, options [nop,nop,TS val 324153271 ecr 1710049531], length 0
  43. 09:34:50.814527 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 140:198, ack 42, win 46, options [nop,nop,TS val 1710049558 ecr 324153271], length 58: FTP: MDTM
  44. 09:34:50.814869 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [P.], seq 42:56, ack 198, win 229, options [nop,nop,TS val 324153298 ecr 1710049558], length 14: FTP: OPTS UTF8 ON
  45. 09:34:50.841086 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 198:224, ack 56, win 46, options [nop,nop,TS val 1710049584 ecr 324153298], length 26: FTP: 200 Always in UTF8 mode.
  46. 09:34:50.841455 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [P.], seq 56:61, ack 224, win 229, options [nop,nop,TS val 324153325 ecr 1710049584], length 5: FTP: PWD
  47. 09:34:50.867722 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 224:233, ack 61, win 46, options [nop,nop,TS val 1710049611 ecr 324153325], length 9: FTP: 257 "/"
  48. 09:34:50.868031 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [P.], seq 61:69, ack 233, win 229, options [nop,nop,TS val 324153351 ecr 1710049611], length 8: FTP: TYPE I
  49. 09:34:50.894292 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 233:264, ack 69, win 46, options [nop,nop,TS val 1710049637 ecr 324153351], length 31: FTP: 200 Switching to Binary mode.
  50. 09:34:50.894592 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [P.], seq 69:75, ack 264, win 229, options [nop,nop,TS val 324153378 ecr 1710049637], length 6: FTP: PASV
  51. 09:34:50.920989 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 264:313, ack 75, win 46, options [nop,nop,TS val 1710049664 ecr 324153378], length 49: FTP: 227 Entering Passive Mode (200,155,18,90,90,87)
  52. 09:34:50.921289 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [P.], seq 75:82, ack 313, win 229, options [nop,nop,TS val 324153405 ecr 1710049664], length 7: FTP: CWD /
  53. 09:34:50.921398 IP 179.106.227.21.38130 > 200.155.18.90.23127: Flags [S], seq 3165319000, win 29200, options [mss 1460,sackOK,TS val 324153405 ecr 0,nop,wscale 7], length 0
  54. 09:34:50.947547 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 313:350, ack 82, win 46, options [nop,nop,TS val 1710049691 ecr 324153405], length 37: FTP: 250 Directory successfully changed.
  55. 09:34:50.947970 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [P.], seq 82:88, ack 350, win 229, options [nop,nop,TS val 324153431 ecr 1710049691], length 6: FTP: LIST
  56. 09:34:51.013331 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [.], ack 88, win 46, options [nop,nop,TS val 1710049757 ecr 324153431], length 0
  57. 09:34:51.947390 IP 179.106.227.21.38130 > 200.155.18.90.23127: Flags [S], seq 3165319000, win 29200, options [mss 1460,sackOK,TS val 324154431 ecr 0,nop,wscale 7], length 0
  58. 09:34:53.963362 IP 179.106.227.21.38130 > 200.155.18.90.23127: Flags [S], seq 3165319000, win 29200, options [mss 1460,sackOK,TS val 324156447 ecr 0,nop,wscale 7], length 0
  59. 09:34:58.087391 IP 179.106.227.21.38130 > 200.155.18.90.23127: Flags [S], seq 3165319000, win 29200, options [mss 1460,sackOK,TS val 324160571 ecr 0,nop,wscale 7], length 0
  60. 09:35:06.279375 IP 179.106.227.21.38130 > 200.155.18.90.23127: Flags [S], seq 3165319000, win 29200, options [mss 1460,sackOK,TS val 324168763 ecr 0,nop,wscale 7], length 0
  61. 09:35:22.407367 IP 179.106.227.21.38130 > 200.155.18.90.23127: Flags [S], seq 3165319000, win 29200, options [mss 1460,sackOK,TS val 324184891 ecr 0,nop,wscale 7], length 0
  62. 09:35:50.974571 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 350:387, ack 88, win 46, options [nop,nop,TS val 1710109718 ecr 324153431], length 37: FTP: 425 Failed to establish connection.
  63. 09:35:50.974898 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [F.], seq 88, ack 387, win 229, options [nop,nop,TS val 324213459 ecr 1710109718], length 0
  64. 09:35:51.001092 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 387:397, ack 89, win 46, options [nop,nop,TS val 1710109744 ecr 324213459], length 10: FTP: 500 OOPS: [!ftp]
  65. 09:35:51.001116 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [R], seq 2566112154, win 0, length 0
  66. 09:35:51.001122 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 397:427, ack 89, win 46, options [nop,nop,TS val 1710109744 ecr 324213459], length 30: FTP: vsf_sysutil_recv_peek: no data[!ftp]
  67. 09:35:51.001125 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [R], seq 2566112154, win 0, length 0
  68. 09:35:51.001127 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [P.], seq 427:429, ack 89, win 46, options [nop,nop,TS val 1710109744 ecr 324213459], length 2: FTP:
  69. 09:35:51.001131 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [R], seq 2566112154, win 0, length 0
  70. 09:35:51.001324 IP 200.155.18.90.21 > 179.106.227.21.37860: Flags [FP.], seq 429:451, ack 89, win 46, options [nop,nop,TS val 1710109744 ecr 324213459], length 22: FTP: 500 OOPS: child died
  71. 09:35:51.001330 IP 179.106.227.21.37860 > 200.155.18.90.21: Flags [R], seq 2566112154, win 0, length 0
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement