admin/activecm-rita
1
0
Fork 0
mirror of https://github.com/activecm/rita synced 2026-06-08 13:02:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
develop
activecm-rita/test_data/open_conns/open/http.log
T
Naomi Kramer 906f53b3e5 BEAM ME UP SCOTTY 
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com>
2024-06-28 00:28:25 -04:00

20 lines
5.2 KiB
Plaintext
Raw Permalink Blame History

#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path http
#open 2019-02-28-12-07-01
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p trans_depth method host uri referrer version user_agent request_body_len response_body_len status_code status_msg info_code info_msg tags username password proxied orig_fuids orig_filenames orig_mime_types resp_fuids resp_filenames resp_mime_types origin
#types time string addr port addr port count string string string string string string count count count string count string set[enum] string string set[string] vector[string] vector[string] vector[string] vector[string] vector[string] vector[string] string
1517422328.146198 CB9DKu4WI1kRo88sj6 10.55.100.105 52261 205.204.101.182 80 1 GET gm.mmstat.com /sc.13.1?cache=70ebbd&gmkey=OTHER&gokey=type=subscribePopup&result=before&ua=Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; rv:11.0) like Gecko&browser=trident&cna=ySmxEpZG0wgCAdBrqzzpaX9C&isbeta=5&spm-cnt=a2700.8293689.0.0.9i2gNc&logtype=2 http://www.alibaba.com/ 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 43 200 OK - - (empty) - - - - - - FcQXaP1ZtYELKO6py1 - image/gif originabdce
1517422328.680680 C0axf33LGfd44hjHt4 10.55.100.100 61828 198.11.132.23 80 2 GET www.alibaba.com /detail/ajax/queryIpAjax.do?jsonp=jQuery18303332777873836687_1517447154831&dmtrack_pageid=d06bab3c0ab0aca25a7206ef1614ee60e341abab82&_=1517447156947 http://www.alibaba.com/ 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 244 200 OK 101 infoinfowowee (empty) johnsmith123 password123 - - - - FffuTS1nvyhiR3IOsg - text/plain -
1517422329.157298 CRniqj3REWkqClLuf 10.55.100.100 61840 205.204.101.182 80 1 GET gm.mmstat.com /sc.13.1?cache=ce8dc10&gmkey=OTHER&gokey=type=cookieEnabled&result=cookieEnabled&ua=Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; rv:11.0) like Gecko&browser=trident&cna=qQ2xEmk6s1QCAdBrqzxpmxXf&isbeta=5&spm-cnt=a2700.8293689.0.0.MjTKVQ&logtype=2 http://www.alibaba.com/ 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 43 200 OK - - (empty) janedoe123 janedoe987 - - - - FDWdqE1YHAPbRhwVbb - image/gif -
1517422329.158662 CxHo3m4N8uGxrMlcl2 10.55.100.100 61843 205.204.101.182 80 1 GET gm.mmstat.com /sc.13.1?cache=c6451f&gmkey=OTHER&gokey=type=userLogin&result=userNotLogin&ua=Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; rv:11.0) like Gecko&browser=trident&cna=qQ2xEmk6s1QCAdBrqzxpmxXf&isbeta=5&spm-cnt=a2700.8293689.0.0.MjTKVQ&logtype=2 http://www.alibaba.com/ 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 43 200 OK - - (empty) - - - - - - F6QATa1jLUpduivZUj - image/gif -
1517422329.160240 CRWVe54XezFtIlZ2Ec 10.55.100.100 61842 205.204.101.182 80 1 GET gm.mmstat.com /sc.13.1?cache=b5d3918&gmkey=OTHER&gokey=type=userCookie&result=userNoneCookie&ua=Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; rv:11.0) like Gecko&browser=trident&cna=qQ2xEmk6s1QCAdBrqzxpmxXf&isbeta=5&spm-cnt=a2700.8293689.0.0.MjTKVQ&logtype=2 http://www.alibaba.com/ 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 43 200 OK - - (empty) - - - - - - Fgn4zf48EkzzC3xDB5 - image/gif -
1517422329.161480 CPoODC4tPhc2WedtR1 10.55.100.100 61841 205.204.101.182 80 1 GET gm.mmstat.com /sc.13.1?cache=80e5522&gmkey=OTHER&gokey=type=subscribePopup&result=before&ua=Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; rv:11.0) like Gecko&browser=trident&cna=qQ2xEmk6s1QCAdBrqzxpmxXf&isbeta=5&spm-cnt=a2700.8293689.0.0.MjTKVQ&logtype=2 http://www.alibaba.com/ 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 43 200 OK - - (empty) - - - - - - F8oJ7b3DR5kTPgVVyd - image/gif -
1517422329.246884 CRniqj3REWkqClLuf 10.55.100.100 61840 205.204.101.182 80 2 GET gm.mmstat.com /sc.13.1?cache=3572c44&gmkey=OTHER&gokey=type=isSupportACM&result=notSupportACM&href=http%3A%2F%2Fwww.alibaba.com%2F&notification=notSupportNotification&ua=Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; rv:11.0) like Gecko&browser=trident&cna=qQ2xEmk6s1QCAdBrqzxpmxXf&isbeta=5&spm-cnt=a2700.8293689.0.0.MjTKVQ&logtype=2 http://www.alibaba.com/ 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 43 200 OK - - (empty) - - - - - - Fsv5jesuSpyqJyKAi - image/gif -
1517422329.508613 C92mdk4vwuzcZsJl7d 10.55.100.106 60612 52.0.211.172 80 1 GET bcp.crwdcntrl.net /map/c=12392/tp=BLPI/tpid=71def83a-7933-4bcc-9114-a2ab76044d73 https://www.bloomberg.com/ 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 49 200 OK - - (empty) - - - - - - Fro57TkrcCJw2dtu4 - image/gif -
1517422329.536083 CRxE3y1BELqg8AHSeb 10.55.100.106 60613 52.0.211.172 80 1 GET bcp.crwdcntrl.net /map/c=12393/tp=BLGA/tpid=UA-11413116-1 https://www.bloomberg.com/ 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 49 403 Forbidden - - (empty) - - - - - - F5Vi7RLE2F0MmW14a - image/gif -
1517422385.846088 Cj9jo31VXUoMwBTaN1 10.55.100.104 55042 104.16.89.188 80 1 GET crl.comodoca.com /COMODORSADomainValidationSecureServerCA.crl - 1.1 Microsoft-CryptoAPI/10.0 0 0 304 Not Modified - - (empty) - - - - - - - - - -
#close 2019-02-28-12-12-08
Reference in New Issue View Git Blame Copy Permalink