コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2019/07/11 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2019/07/11分です。

APでは
ThinkPHPの脆弱性を狙うアクセス
WordPressのwlwmanifestに対するスキャン
を確認しました。

USでは
WordPressのwlwmanifestに対するスキャンを
を確認しました。

EUでは
UserAgentが無印のものだけでした。

アクセス数推移

AP：総アクセス数：60 (前日比：-13)
US：総アクセス数：29 (前日比：-89)
EU：総アクセス数：12 (前日比：-92)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Region：AP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
4 110.249.212.46 China
4 129.28.179.29 China
5 163.20.53.2 Taiwan
1 185.171.131.83 Netherlands
2 198.167.223.52 St Kitts and Nevis
3 211.38.144.230 South Korea
3 219.157.180.6 China
1 61.219.11.153 Taiwan
1 66.249.64.27 United States
1 66.249.79.71 United States
5 77.247.108.132 Iceland
10 89.228.71.207 Poland
20 91.121.222.157 France

UserAgent一覧

件数 UserAgent
10 -
3 curl/7.29.0
1 Go-http-client/1.1
1 Mozilla/5.0
2 Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
3 Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)
20 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
15 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36
2 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36
3 Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 GET /2015/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /2016/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /2017/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1
4 GET http://110[.]249[.]212[.]46/testget?q=23333&port=80 HTTP/1.1
3 GET /manager/html HTTP/1.1
1 GET /media/wp-includes/wlwmanifest.xml HTTP/1.1
3 GET /mysql/admin/index.php?lang=en HTTP/1.1
3 GET /mysql/dbadmin/index.php?lang=en HTTP/1.1
3 GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1
3 GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1
1 GET /news/wp-includes/wlwmanifest.xml HTTP/1.1
3 GET /phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /shell?busybox HTTP/1.1
1 GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /site/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1
2 GET /.svn/entries HTTP/1.1
1 GET /test/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /TP/index.php HTTP/1.1
1 GET /TP/index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=1 HTTP/1.1
1 GET /TP/public/index.php HTTP/1.1
1 GET /website/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /web/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /xmlrpc.php?rsd HTTP/1.1
3 HEAD / HTTP/1.1
2 HEAD /robots.txt HTTP/1.0
3 HEAD /robots.txt HTTP/1.1
1 POST /TP/index.php?s=captcha HTTP/1.1
Region:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
2 110.249.212.46 China
2 184.178.238.88 United States
8 220.133.222.228 Taiwan
15 37.59.55.45 France
1 77.247.108.132 Iceland
1 77.247.110.219 Netherlands

UserAgent一覧

件数 UserAgent
4 -
15 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36

リクエスト内容一覧

件数 Method Request Protocol
1 GET /2015/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /2016/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /2017/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1
2 GET http://110[.]249[.]212[.]46/testget?q=23333&port=80 HTTP/1.1
2 GET http://www.google.com/ HTTP/1.1
1 GET /media/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /mysql/admin/index.php?lang=en HTTP/1.1
1 GET /mysql/dbadmin/index.php?lang=en HTTP/1.1
1 GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1
1 GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /phpmyAdmin/index.php?lang=en HTTP/1.1
1 GET /phpMyadmin/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /site/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /website/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /web/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp-includes/wlwmanifest.xml HTTP/1.1
2 HEAD /robots.txt HTTP/1.0
Region:EU

送信元IPアドレス一覧

件数 送信元IPアドレス 国
6 110.249.212.46 China
3 77.247.108.132 Iceland
1 77.247.110.219 Netherlands
2 94.140.211.140 Russia

UserAgent一覧

件数 UserAgent
12 -

リクエスト内容一覧

件数 Method Request Protocol
2 -
6 GET http://110[.]249[.]212[.]46/testget?q=23333&port=80 HTTP/1.1
4 HEAD /robots.txt HTTP/1.0