别听风就是雨--记ADB.Miner安卓设备挖矿事件探究

csvfile = file('5555.csv', 'wb')

writer = csv.writer(csvfile)

while not g_queue.empty():

    item = g_queue.get()

    result = "result"+item.strip()+".xml"

    p = subprocess.Popen("/usr/bin/nmap -oX "+result+" -sV -p5555 "+item, shell=True)

    p.wait()

    if p.returncode == 0:

        nmap_report = NmapParser.parse_fromfile(result)

        for scanned_hosts in nmap_report.hosts:

            print scanned_hosts.address

            for serv in scanned_hosts.services:

                if serv.state == "open":

                    m = serv.service_dict.get('extrainfo', '')

                    print m

                    if m.find('\'') != -1:

                        pass

                    else:

                        writer.writerow([scanned_hosts.address, str(serv.port), serv.service,

                                         serv.service_dict.get('product', ''),

                                         serv.service_dict.get('version', ''),

                                         serv.service_dict.get('extrainfo', '')])

#coding:utf-8

import numpy as np

import matplotlib.pyplot as plt

import pandas as pd

userdata =pd.DataFrame(pd.read_csv('/Users/xxx/Desktop/5555.csv',header=0))

two_userdata = userdata.groupby('service').size().sort_values(ascending=False)[:10]

two_userdata.plot(kind='barh', color='#d62728', alpha=0.5, rot=0)

plt.xlabel(u'出现次数')

plt.ylabel(u'服务类型')

plt.legend()

plt.show()

Starting Nmap 6.40 ( http://nmap.org ) at 2018-02-13 23:02 CST

Nmap scan report for 14.29.49.198

Host is up (0.039s latency).

PORT STATE SERVICEVERSION

5555/tcp openfreeciv?

        while not g_queue.empty():

            item = g_queue.get()

            p = subprocess.Popen("adb connect "+item+"",stdout=subprocess.PIPE,shell=True)

            line = p.stdout.readline()

            print line

            ret1 = line.find('connected')

            print ret1

            if ret1==0:

                print item

                writer.writerow([item])

            p.wait()