[Bro] odd data in my bro dns.log
Tim Krabec
tkrabec at gmail.com
Sun Apr 3 16:31:19 PDT 2016
I'm working through mydns logs
and I'm seeing entries like this
.13 & .14 are AD domain servers
not sure what to make of these, google has led me no where.
TIA
192.168.1.13bp\x95\xff\x7f 192.168.1.13
192.168.1.13bp\x95\xff\x7f 192.168.1.138
192.168.1.13bp\x95\xff\x7f 192.168.1.14
192.168.1.13bp\x95\xff\x7f 192.168.1.143
192.168.1.13b\x16\x91\xff\x7f 192.168.1.138
192.168.1.13b\x16\x91\xff\x7f 192.168.1.14
192.168.1.13b\x16\x91\xff\x7f 192.168.1.143
192.168.1.13b\xcf\x8f\xff\x7f 192.168.1.14
192.168.1.13!ek\xff\x7f 192.168.1.14
192.168.1.13!ek\xff\x7f 192.168.1.143
192.168.1.13\x17\x96\x96\xff\x7f 192.168.1.14
192.168.1.13\x81 192.168.1.138
192.168.1.13\x81 192.168.1.14
192.168.1.13\x81 192.168.1.143
192.168.1.13\x82d\x8a\xff\x7f 192.168.1.138
192.168.1.13\x82d\x8a\xff\x7f 192.168.1.14
192.168.1.13\x82d\x8a\xff\x7f 192.168.1.143
192.168.1.13\xa1\xf6a\xff\x7f 192.168.1.138
192.168.1.13\xa1\xf6a\xff\x7f 192.168.1.14
192.168.1.13\xa1\xf6a\xff\x7f 192.168.1.143
192.168.1.13"\xb0\x94\xff\x7f 192.168.1.14
192.168.1.13\xb1+m\xff\x7f 192.168.1.138
192.168.1.13\xb1+m\xff\x7f 192.168.1.14
192.168.1.13\xb1+m\xff\x7f 192.168.1.143
192.168.1.13\xb2\xc6\x8b\xff\x7f 192.168.1.138
192.168.1.13\xb2\xc6\x8b\xff\x7f 192.168.1.14
192.168.1.13\xb2\xc6\x8b\xff\x7f 192.168.1.143
192.168.1.13\xb2\xd4\x8b\xff\x7f 192.168.1.138
192.168.1.13\xb2\xd4\x8b\xff\x7f 192.168.1.14
192.168.1.13\xb2\xd4\x8b\xff\x7f 192.168.1.143
192.168.1.13\xc0\x80}\xff\x7f 192.168.1.138
192.168.1.13\xc0\x80}\xff\x7f 192.168.1.14
192.168.1.13\xc0\x80}\xff\x7f 192.168.1.143
192.168.1.13\xc2\x07\x93\xff\x7f 192.168.1.13
192.168.1.13\xc2\x07\x93\xff\x7f 192.168.1.138
192.168.1.13\xc2\x07\x93\xff\x7f 192.168.1.14
192.168.1.13\xc2\x07\x93\xff\x7f 192.168.1.143
192.168.1.13\xd2\x1c\x95\xff\x7f 192.168.1.13
192.168.1.13\xd2\x1c\x95\xff\x7f 192.168.1.138
192.168.1.13\xd2\x1c\x95\xff\x7f 192.168.1.14
192.168.1.13\xd2\x1c\x95\xff\x7f 192.168.1.143
192.168.1.13\xe1\xb7i\xff\x7f 192.168.1.14
192.168.1.13\xff 192.168.1.14
192.168.1.14bp\x95\xff\x7f 192.168.1.14
192.168.1.14b\x16\x91\xff\x7f 192.168.1.14
192.168.1.14b\xcf\x8f\xff\x7f 192.168.1.14
192.168.1.14!ek\xff\x7f 192.168.1.138
192.168.1.14!ek\xff\x7f 192.168.1.14
192.168.1.14!ek\xff\x7f 192.168.1.143
192.168.1.14\x17\x96\x96\xff\x7f 192.168.1.14
192.168.1.14\x81 192.168.1.14
192.168.1.14\x82d\x8a\xff\x7f 192.168.1.14
192.168.1.14\xa1\xf6a\xff\x7f 192.168.1.14
192.168.1.14"\xb0\x94\xff\x7f 192.168.1.14
192.168.1.14\xb1+m\xff\x7f 192.168.1.14
Tim Krabec
tkrabec.com
Bio <http://timkrabec.brandyourself.com/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160403/f8635e2b/attachment.html
More information about the Bro
mailing list