2015-10-10 18:30:12 +08:00
|
|
|
{
|
|
|
|
|
"compile_table": "COMPILE",
|
|
|
|
|
"group_table": "GROUP",
|
|
|
|
|
"rules": [
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 123,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
2018-08-08 18:35:53 +08:00
|
|
|
"user_region": "escaped\\bdata:have\\ba\\bspace\\band\\ba\\b\\&\\bsymbol.",
|
2015-10-10 18:30:12 +08:00
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "IP_group",
|
2015-10-10 18:30:12 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "IP_CONFIG",
|
|
|
|
|
"table_type": "ip",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"addr_type": "ipv4",
|
|
|
|
|
"src_ip": "10.0.6.201",
|
|
|
|
|
"mask_src_ip": "255.255.0.0",
|
|
|
|
|
"src_port": "0",
|
|
|
|
|
"mask_src_port": "65535",
|
|
|
|
|
"dst_ip": "0.0.0.0",
|
|
|
|
|
"mask_dst_ip": "255.255.255.255",
|
|
|
|
|
"dst_port": "0",
|
|
|
|
|
"mask_dst_port": "65535",
|
|
|
|
|
"protocol": 6,
|
|
|
|
|
"direction": "double"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_name": "IP_CONFIG",
|
|
|
|
|
"table_type": "ip",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"addr_type": "ipv6",
|
|
|
|
|
"src_ip": "2001:da8:205:1::101",
|
|
|
|
|
"mask_src_ip": "ffff:ffff:ffff:ffff:ffff:ffff:ffff:0000",
|
|
|
|
|
"src_port": "0",
|
|
|
|
|
"mask_src_port": "65535",
|
|
|
|
|
"dst_ip": "0::0",
|
|
|
|
|
"mask_dst_ip": "ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
|
|
|
|
|
"dst_port": "0",
|
|
|
|
|
"mask_dst_port": "65535",
|
|
|
|
|
"protocol": 6,
|
|
|
|
|
"direction": "double"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2015-10-10 18:30:12 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "abckkk&123",
|
|
|
|
|
"expr_type": "and",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 124,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "anything",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "IP_group"
|
2015-10-10 18:30:12 +08:00
|
|
|
},
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2015-10-10 18:30:12 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "CONTENT_SIZE",
|
|
|
|
|
"table_type": "intval",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"low_boundary": 100,
|
|
|
|
|
"up_boundary": 500
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 125,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "anything",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "action=search\\&query=(.*)",
|
|
|
|
|
"expr_type": "regex",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 126,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "anything",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2015-10-10 18:30:12 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "should_not_hit_any_rule",
|
|
|
|
|
"expr_type": "none",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2015-10-10 18:30:12 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "CONTENT_SIZE",
|
|
|
|
|
"table_type": "intval",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"low_boundary": 2014,
|
|
|
|
|
"up_boundary": 2016
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2015-11-13 18:08:55 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 127,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "anything",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2015-11-13 18:08:55 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "FILE_DIGEST",
|
|
|
|
|
"table_type": "digest",
|
|
|
|
|
"table_content": {
|
2015-11-23 11:39:50 +08:00
|
|
|
"raw_len": 1160164,
|
2017-07-07 20:47:27 +08:00
|
|
|
"digest": "3072:Xk/maCm4yLYtRIFDFnVfHH+CAQI6VD5mekDmaa/4qCuFnqak1s3/+Gn1IJHa/AvybUsbGWcIAy9grTp2s5bbj/TaKxONfb[0:1160163]#12288:UChtbFS6pypdTy4m2[0:1160163]",
|
|
|
|
|
"cfds_level": 70
|
2015-11-13 18:08:55 +08:00
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2016-02-11 13:57:39 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 128,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "anything",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2016-02-11 13:57:39 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_REGION",
|
|
|
|
|
"table_type": "expr_plus",
|
|
|
|
|
"table_content": {
|
2018-02-26 18:42:13 +08:00
|
|
|
"district": "HTTP\\bURL",
|
2016-02-11 13:57:39 +08:00
|
|
|
"keywords": "abckkk&123",
|
|
|
|
|
"expr_type": "and",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2016-04-03 12:29:41 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 129,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "utf8_中文",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2016-04-03 12:29:41 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
2016-04-03 17:13:07 +08:00
|
|
|
"table_type": "string",
|
2016-04-03 12:29:41 +08:00
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "C#中国",
|
2016-04-03 17:13:07 +08:00
|
|
|
"expr_type": "none",
|
2016-04-03 12:29:41 +08:00
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 130,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "utf8_维语",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2016-04-03 12:29:41 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "KEYWORDS_TABLE",
|
2016-04-03 17:13:07 +08:00
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "2010&يىلىدىكى",
|
|
|
|
|
"expr_type": "and",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 131,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "utf8_维语2",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2016-04-03 17:13:07 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "KEYWORDS_TABLE",
|
|
|
|
|
"table_type": "string",
|
2016-04-03 12:29:41 +08:00
|
|
|
"table_content": {
|
2016-04-03 17:13:07 +08:00
|
|
|
"keywords": "سىياسىي",
|
2016-04-03 12:29:41 +08:00
|
|
|
"expr_type": "and",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2016-06-17 17:08:59 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 132,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "string\\bunescape",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2016-06-17 17:08:59 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "KEYWORDS_TABLE",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "Take\\bme\\bHome&Batman\\",
|
|
|
|
|
"expr_type": "and",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2016-08-30 11:08:32 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 133,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
2018-07-05 18:39:15 +08:00
|
|
|
"user_region": "13018_table_conjunction_test_part1\bnow_its_very_very_long0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abcdefghijklmnopkrstuvwxyz0123456789abc
|
2016-08-30 11:08:32 +08:00
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2016-08-30 11:08:32 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_HOST",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "www.3300av.com",
|
|
|
|
|
"expr_type": "none",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2017-07-07 20:47:27 +08:00
|
|
|
},
|
2016-08-30 11:08:32 +08:00
|
|
|
{
|
|
|
|
|
"compile_id": 134,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "table_conjunction_test_part2",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2016-09-19 17:09:03 +08:00
|
|
|
"group_name": "Untitled",
|
2016-08-30 11:08:32 +08:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "novel&27122.txt",
|
|
|
|
|
"expr_type": "and",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2017-07-07 20:47:27 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 135,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "anything",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"group_name": "Untitled",
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "SIM_URL",
|
|
|
|
|
"table_type": "similar",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"target": "mwss.xiu.youku.com/live/hls/v1/0000000000000000000000001526a0a8/709.ts?&token=98765",
|
|
|
|
|
"threshold": 90
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2017-10-11 19:18:57 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 136,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "offset_string",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"group_name": "Untitled",
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "IMAGE_FP",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "4362-4458:323031333A30333A30372032333A35363A313000323031333A30333A30372032333A35363A3130000000FFE20C584943435F50524F46494C4500010100000C484C696E6F021000006D6E74725247422058595A2007CE00020009000600310000",
|
|
|
|
|
"expr_type": "offset",
|
|
|
|
|
"match_method": "none",
|
|
|
|
|
"format": "hexbin"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2017-10-11 20:32:26 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 137,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "offset_string",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"group_name": "Untitled",
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "IMAGE_FP",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "19339-19467:6CB2CB2F2028474C994991CCFC65CCA5E3B6FF001673985D157358610CACC674EE64CC27B5721CCDABD9CCA7C8E9F7BB1F54A930A6034D50F92711F5B2DACCB0715D2E6873CE5CE431DC701A194C260E9DB78CC89F2C84745869AB88349A3AE0412AB59D9ABA84EDEFFF0057FA4DA66D333698B5AD6F844DA2226D1CADAD5E44",
|
|
|
|
|
"expr_type": "offset",
|
|
|
|
|
"match_method": "none",
|
|
|
|
|
"format": "hexbin"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2018-09-21 21:32:09 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 138,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"effective_range": 0,
|
|
|
|
|
"tags":"{\"tag_sets\":[[{\"tag\":\"location\",\"value\":[\"北京/朝阳/华严北里\",\"上海/浦东/陆家嘴\"]},{\"tag\":\"isp\",\"value\":[\"电信\",\"联通\"]}],[{\"tag\":\"location\",\"value\":[\"北京\"]},{\"tag\":\"isp\",\"value\":[\"联通\"]}]]}",
|
|
|
|
|
"user_region": "Not\\baccepted\\btags",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "should&hit&aaa",
|
|
|
|
|
"expr_type": "and",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 139,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"effective_range": 0,
|
|
|
|
|
"tags":"{\"tag_sets\":[[{\"tag\":\"location\",\"value\":[\"北京/朝阳/华严北里\"]},{\"tag\":\"isp\",\"value\":[\"电信\",\"移动\"]}]]}",
|
|
|
|
|
"user_region": "Accepted\\btags",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "should&hit&bbb",
|
|
|
|
|
"expr_type": "and",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2018-10-09 21:23:22 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 140,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "file_streams",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"group_name": "Untitled",
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "KEYWORDS_TABLE",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "2018-10-05",
|
|
|
|
|
"expr_type": "none",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2018-11-15 19:46:57 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 141,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "Something:I\\bhave\\ba\\bname,7799",
|
|
|
|
|
"table_name":"COMPILE_ALIAS",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"group_name": "Untitled",
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "i.ytimg.com",
|
|
|
|
|
"expr_type": "none",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2018-12-24 16:28:00 +06:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 142,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "anything",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": ",IgpwcjA0LnN2bzAzKgkxMjcuMC4wLjE",
|
|
|
|
|
"expr_type": "none",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2019-01-07 13:35:26 +06:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 143,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
2019-01-08 21:25:08 +06:00
|
|
|
"user_region": "NOT-logic-test1",
|
2019-01-07 13:35:26 +06:00
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
2019-01-08 21:25:08 +06:00
|
|
|
"not_flag":0,
|
2019-01-07 13:35:26 +06:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
2019-01-08 21:25:08 +06:00
|
|
|
"keywords": "must-contained-string-of-rule-143",
|
2019-01-07 13:35:26 +06:00
|
|
|
"expr_type": "none",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
2019-01-08 21:25:08 +06:00
|
|
|
"not_flag":1,
|
2019-01-07 13:35:26 +06:00
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
2019-01-08 21:25:08 +06:00
|
|
|
"keywords": "must-not-contained-string-of-rule-143",
|
|
|
|
|
"expr_type": "none",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 144,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "NOT-logic-test2",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"not_flag":0,
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "must-contained-string-of-rule-144",
|
|
|
|
|
"expr_type": "none",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"not_flag":1,
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "KEYWORDS_TABLE",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "must-not-contained-string-of-rule-144",
|
2019-01-07 13:35:26 +06:00
|
|
|
"expr_type": "none",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2019-01-08 22:09:05 +06:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 145,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "NOT-logic-test3",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"not_flag":0,
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "must-contained-string-of-rule-145",
|
|
|
|
|
"expr_type": "none",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"not_flag":1,
|
|
|
|
|
"group_name": "IP_group"
|
|
|
|
|
}
|
|
|
|
|
]
|
2019-01-22 19:44:10 +06:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 146,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "anything",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "Cookie:\\s&head",
|
|
|
|
|
"expr_type": "regex",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2019-01-24 18:13:59 +06:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 147,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "anything",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "googlevideo.com/videoplayback&mn=sn-35153iuxa-5a56%2Csn-n8v7znz7",
|
|
|
|
|
"expr_type": "and",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
2019-01-27 18:12:41 +06:00
|
|
|
},
|
|
|
|
|
{
|
2019-03-25 13:38:28 +08:00
|
|
|
"is_valid": "yes",
|
|
|
|
|
"do_log": 0,
|
|
|
|
|
"effective_rage": 0,
|
|
|
|
|
"action": 0,
|
|
|
|
|
"compile_id": 148,
|
2019-01-27 18:12:41 +06:00
|
|
|
"service": 0,
|
|
|
|
|
"do_blacklist": 0,
|
2019-03-25 13:38:28 +08:00
|
|
|
"user_region": "APP_ID=100001;BEHAV_ID=100002",
|
2019-01-27 18:12:41 +06:00
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "APP_PAYLOAD",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"format": "hexbin",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"district": "Payload",
|
|
|
|
|
"keywords": "1-1:03&9-10:2d&14-16:2d34&19-21:2d&24-25:2d",
|
|
|
|
|
"expr_type": "offset"
|
|
|
|
|
},
|
|
|
|
|
"table_type": "expr_plus"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"group_name": "Untitled"
|
|
|
|
|
}
|
2019-03-25 13:38:28 +08:00
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 149,
|
|
|
|
|
"service": 1,
|
|
|
|
|
"action": 1,
|
|
|
|
|
"do_blacklist": 1,
|
|
|
|
|
"do_log": 1,
|
|
|
|
|
"user_region": "anything",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "HTTP_URL",
|
|
|
|
|
"table_type": "string",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "^((?!.*\\binstagram\\b)).*\\.fbcdn\\.net$",
|
|
|
|
|
"expr_type": "regex",
|
|
|
|
|
"match_method": "sub",
|
|
|
|
|
"format": "uncase plain"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"compile_id": 150,
|
|
|
|
|
"service": 0,
|
|
|
|
|
"action": 0,
|
|
|
|
|
"do_blacklist": 0,
|
|
|
|
|
"do_log": 0,
|
|
|
|
|
"effective_rage": 0,
|
|
|
|
|
"user_region": "0",
|
|
|
|
|
"is_valid": "yes",
|
|
|
|
|
"groups": [
|
|
|
|
|
{
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"table_name": "TROJAN_PAYLOAD",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "0-4:01000000",
|
|
|
|
|
"expr_type": "offset",
|
|
|
|
|
"format": "hexbin",
|
|
|
|
|
"match_method": "sub"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"group_name": "billgates_regist1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"regions": [
|
|
|
|
|
{
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"table_name": "TROJAN_PAYLOAD",
|
|
|
|
|
"table_content": {
|
|
|
|
|
"keywords": "1:G2.40",
|
|
|
|
|
"expr_type": "none",
|
|
|
|
|
"format": "uncase plain",
|
|
|
|
|
"match_method": "sub"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"group_name": "billgates_regist2"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
2015-10-10 18:30:12 +08:00
|
|
|
],
|
|
|
|
|
"plugin_table": [
|
|
|
|
|
{
|
|
|
|
|
"table_name": "QD_ENTRY_INFO",
|
|
|
|
|
"table_content": [
|
2017-07-07 11:04:11 +08:00
|
|
|
"1\t192.168.0.1\t101\t1",
|
|
|
|
|
"2\t192.168.0.2\t101\t1",
|
|
|
|
|
"3\t192.168.1.1\t102\t1"
|
2015-10-10 18:30:12 +08:00
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_name": "TEST_PLUGIN_TABLE",
|
|
|
|
|
"table_content": [
|
|
|
|
|
"1\t3388\t99\t1",
|
|
|
|
|
"2\t3355\t66\t1",
|
|
|
|
|
"3\tcccc\t11\t1"
|
|
|
|
|
]
|
2018-09-21 21:32:09 +08:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_name": "TEST_EFFECTIVE_RANGE_TABLE",
|
|
|
|
|
"table_content": [
|
2019-01-24 18:13:59 +06:00
|
|
|
"1\tSUCCESS\t99\t1\t{\"tag_sets\":[[{\"tag\":\"location\",\"value\":[\"北京/朝阳/华严北里\"]},{\"tag\":\"isp\",\"value\":[\"电信\",\"移动\"]}]]}\t1111",
|
|
|
|
|
"2\tSUCCESS\t66\t1\t0\t222",
|
|
|
|
|
"3\tFAILED\t11\t1\t{\"tag_sets\":[[{\"tag\":\"location\",\"value\":[\"北京/朝阳/华严北里\",\"上海/浦东/陆家嘴\"]},{\"tag\":\"isp\",\"value\":[\"电信\",\"联通\"]}],[{\"tag\":\"location\",\"value\":[\"北京\"]},{\"tag\":\"isp\",\"value\":[\"联通\"]}]]}\t333",
|
2019-01-29 19:29:01 +06:00
|
|
|
"4\tSUCCESS\t66\t1\t{}\t444",
|
|
|
|
|
"5\tSUCCESS\t66\t1\t{\"tag_sets\":[[{\"tag\":\"location\",\"value\":[\"北京\"]}]]}\t444",
|
|
|
|
|
"6\tSUCCESS\t66\t1\t{\"tag_sets\":[[{\"tag\":\"weather\",\"value\":[\"hot\"]}]]}\t444"
|
2018-09-21 21:32:09 +08:00
|
|
|
]
|
2019-01-24 18:55:38 +06:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_name": "IR_INTERCEPT_IP",
|
|
|
|
|
"table_content": [
|
|
|
|
|
"1000000130\t1000000130\t4\t192.168.10.99\t255.255.255.255\t0\t65535\t0.0.0.0\t255.255.255.255\t0\t65535\t0\t1\t1\t96\t1\tuser_region\t{}\t2019/1/24/18:0:34",
|
|
|
|
|
"161\t161\t4\t0.0.0.0\t255.255.255.255\t0\t65535\t61.135.169.121\t255.255.255.255\t0\t65535\t0\t0\t1\t96\t832\t0\t0\t2019/1/24/18:48:42"
|
|
|
|
|
]
|
2015-10-10 18:30:12 +08:00
|
|
|
}
|
|
|
|
|
]
|
2015-11-13 18:08:55 +08:00
|
|
|
}
|
