http|^HTTP.* http|^HTTP/0. http|^HTTP/1. http|.* http|.* http|.* http|Bad Request .Invalid URL. redis|ERR unknown command redis|ERR wrong number of arguments mongodb|^.*version.....([\.\d]+) pop3|.*POP3.* pop3|.*pop3.* ssh|SSH-2.0-OpenSSH.* ssh|SSH-1.0-OpenSSH.* ssh|.*ssh.* backdoor-fxsvc|^500 Not Loged in backdoor-shell|GET: command backdoor-shell|sh: GET: bachdoor-shell|[a-z]*sh: .* command not found backdoor-shell|^bash[$#] backdoor-shell|^sh[$#] backdoor-cmdshell|^Microsoft Windows .* Copyright .*> ftp|^220.*\n331 ftp|^220.*\n530 ftp|^220.*FTP ftp|^220 .* Microsoft .* FTP ftp|^220 Inactivity timer ftp|^220 .* UserGate ftp|^220(.*?) ldap|^\x30\x0c\x02\x01\x01\x61 ldap|^\x30\x32\x02\x01 ldap|^\x30\x33\x02\x01 ldap|^\x30\x38\x02\x01 ldap|^\x30\x84 ldap|^\x30\x45 ldap|^\x30.* smb|^\0\0\0.\xffSMBr\0\0\0\0.* mssql|^\x04\x01\0C..\0\0\xaa\0\0\0/\x0f\xa2\x01\x0e.* mssql|^\x05\x6e\x00 mssql|^\x04\x01\x00\x25\x00\x00\x01\x00\x00\x00\x15.* mssql|^\x04\x01\x00.\x00\x00\x01\x00\x00\x00\x15.* mssql|^\x04\x01\x00\x25\x00\x00\x01\x00\x00\x00\x15.* mssql|^\x04\x01\x00.\x00\x00\x01\x00\x00\x00\x15.* mssql|^\x04\x01\0\x25\0\0\x01\0\0\0\x15\0\x06\x01.* mssql|^\x04\x01\x00\x25\x00\x00\x01.* mysql|^\x19\x00\x00\x00\x0a mysql|^\x2c\x00\x00\x00\x0a mysql|hhost \' mysql|khost \' mysql|mysqladmin mysql|(.*)5(.*)log mysql|(.*)4(.*)log mysql|whost \' mysql|^\(\x00\x00 mysql|this MySQL mysql|^N\x00 mysql|(.*)mysql(.*) mssql|;MSSQLSERVER; oracle|\(ERROR_STACK=\(ERROR=\(CODE= oracle|\(ADDRESS=\(PROTOCOL= postgres|Invalid packet length postgres|^EFATAL rsync|^@RSYNCD:.* snmp|\x70\x75\x62\x6c\x69\x63\xa2 snmp|\x41\x01\x02 ssh|^SSH- ssh|^SSH-.*openssh telnet|^\xff\xfd telnet-disabled|Telnet is disabled now telnet|^\xff\xfe telnet|^xff\xfb\x01\xff\xfb\x03\xff\xfb\0\xff\xfd.* vnc|^RFB.*'