ITオムライス
  1. ITオムライス
  2. Posts
  3. webサーバのログの分析2026 7月分

webサーバのログの分析2026 7月分

2026-08-08 技術系

目次

公開している web サーバのログから通常のアクセスではない通信について分析しました。

多かったリクエスト

GeoServer における XML 外部エンティティ(XXE)の脆弱性

地理空間データを共有するためのオープンソースサーバー「GeoServer」の脆弱性を狙った通信です。悪用されると、攻撃者によってサーバー内の機密ファイルの読み取りが行われたり、サーバーを踏み台にした内部ネットワークへの不正アクセス（SSRF）を引き起こされる恐れがあります。

/geoserver/web/

環境変数ファイル(.env)の露出スキャン

WebアプリケーションのデータベースのパスワードやAPIキーなど、重大な機密情報が記述されている「.env」ファイルが外部から直接閲覧可能になっていないかを探る、非常に一般的な自動スキャン攻撃です。

/admin/.env
/core/.env
/config/.env
/web/.env
/api/.env
/config.env
/public/.env
/.env
/app/.env
/backend/.env
/laravel/.env

WordPressへの不正アクセス・探索行為

WordPressのログイン画面や、外部からの遠隔操作用API（XML-RPC）を狙った通信です。管理者パスワードの総当たり攻撃（ブルートフォース）や、踏み台としての悪用を目的としたスキャンと考えられます。

/wp-includes/ID3/about.php
/wp-includes/blocks/post-comments-form/
/wp-content/uploads/
//wp-includes/css/dist/
/wp-content/
/wp-content/index.php
/wp-login.php
//wp-includes/l10n/
/wp-includes/Text/Diff/Engine/about.php
/wp-includes/blocks/details/
/wp-content/plugins/hellopress/wp_filemanager.php
/wp-content/admin.php
//wp-includes/assets/
/wp-content/themes/index.php
/wp-includes/Text/

Cisco 製 Cisco IOS XE などのネットワーク機器の Web UI の脆弱性

Cisco製のネットワーク機器のWeb UIの脆弱性を狙った通信です。

/webui/

PHPUnitのevalをリモート実行

PHPのユニットテストツールのPHPUnitの脆弱性を利用してのeval()を実行しようとする通信です。

/phpunit/phpunit/Util/PHP/eval-stdin.php
/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/phpunit/Util/PHP/eval-stdin.php
/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/vendor/phpunit/Util/PHP/eval-stdin.php
/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/lib/phpunit/src/Util/PHP/eval-stdin.php
/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/lib/phpunit/phpunit/Util/PHP/eval-stdin.php
/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php
/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/phpunit/src/Util/PHP/eval-stdin.php
/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/vendor/phpunit/src/Util/PHP/eval-stdin.php
/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/lib/phpunit/Util/PHP/eval-stdin.php
/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

不審な通信の一覧

アクセス数 メソッド リクエスト
3458 GET HTTP/1.1 /robots.txt
567 GET HTTP/1.1 /favicon.ico
456 GET HTTP/1.1 /.env
336 POST HTTP/1.1 /wp-admin/admin-ajax.php
322 GET HTTP/1.1 /SDK/webLanguage
265 GET HTTP/1.1 /wp-login.php
218 GET HTTP/1.1 /.git/config
217 GET HTTP/1.1 /wp-content/plugins/hellopress/wp_filemanager.php
215 GET HTTP/1.1 /this_is_a_new_hello_world.php
204 GET HTTP/1.1 /app-ads.txt
149 GET HTTP/1.1 /login
134 GET HTTP/1.1 /api/.env
133 GET HTTP/1.1 /administrator/
133 GET HTTP/1.1 /ip
131 GET HTTP/1.1 /.env.local
127 GET HTTP/1.1 /info.php
121 GET HTTP/1.1 /app/.env
121 GET HTTP/1.1 /.env.production
118 GET HTTP/1.1 /wp-content/uploads/
113 GET HTTP/1.1 /1.php
113 GET HTTP/1.1 /mac.php
106 GET HTTP/1.1 /8.php
105 GET HTTP/1.1 /backend/.env
105 GET HTTP/1.1 /.env.example
100 GET HTTP/1.1 /.env.save
100 GET HTTP/1.1 /k.php
99 GET HTTP/1.1 /.env.bak
98 GET HTTP/1.1 /w.php
97 GET HTTP/1.1 /222.php
97 GET HTTP/1.1 /about.php
96 GET HTTP/1.1 /.env.prod
95 GET HTTP/1.1 /x.php
95 GET HTTP/1.1 /ops.php
94 GET HTTP/1.1 /file5.php
94 GET HTTP/1.1 /config.json
94 GET HTTP/1.1 /fpwch.php
93 GET HTTP/1.1 /laravel/.env
93 GET HTTP/1.1 /simple.php
92 GET HTTP/1.1 /wp-content/admin.php
92 GET HTTP/1.1 /.well-known/traffic-advice
90 GET HTTP/1.1 /phpinfo.php
90 GET HTTP/1.1 /admin/.env
88 GET HTTP/1.1 /.env.backup
87 GET HTTP/1.1 //wp-includes/l10n/
87 GET HTTP/1.1 /.env.old
86 GET HTTP/1.1 /core/.env
86 GET HTTP/1.1 /wp.php
84 GET HTTP/1.1 //wp-includes/assets/
84 GET HTTP/1.1 /aaa.php
83 GET HTTP/1.1 /xyn.php
83 GET HTTP/1.1 /.well-known/security.txt
83 GET HTTP/1.1 /.aws/credentials
83 GET HTTP/1.1 /inputs.php
81 GET HTTP/1.1 /wp-load.php
80 GET HTTP/1.1 /wp-content/themes/index.php
80 GET HTTP/1.1 /7.php
79 GET HTTP/1.1 /chosen.php
79 GET HTTP/1.1 /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
78 GET HTTP/1.1 /.env.staging
76 GET HTTP/1.1 /dr.php
75 GET HTTP/1.1 /f35.php
74 GET HTTP/1.1 /ms-edit.php
74 GET HTTP/1.1 /config.php
73 GET HTTP/1.1 /155.php
73 GET HTTP/1.1 /wp-blink.php
73 GET HTTP/1.1 //wp-includes/css/dist/
73 GET HTTP/1.1 /crgio.php
72 GET HTTP/1.1 /100.php
72 GET HTTP/1.1 /sixxis.php
72 GET HTTP/1.1 /images.php
72 GET HTTP/1.1 /sse
72 GET HTTP/1.1 /classwithtostring.php
71 GET HTTP/1.1 /wp-includes/ID3/about.php
71 GET HTTP/1.1 /file.php
71 GET HTTP/1.1 /.env.development
70 POST HTTP/1.1 /mcp
70 GET HTTP/1.1 /.git/HEAD
69 GET HTTP/1.1 /biufile.php
69 GET HTTP/1.1 /bthil.php
69 GET HTTP/1.1 /geoserver/web/
67 GET HTTP/1.1 /xxx.php
66 GET HTTP/1.1 /.well-known/about.php
65 GET HTTP/1.1 /as.php
65 GET HTTP/1.1 /config.js
65 GET HTTP/1.1 /webui/
65 GET HTTP/1.1 /hypo.php
64 GET HTTP/1.1 /dx.php
64 GET HTTP/1.1 /wp-temp.php
63 GET HTTP/1.1 /wefile.php
63 GET HTTP/1.1 /wp-content/
63 GET HTTP/1.1 /k2.php
63 GET HTTP/1.1 /coffexium.php
62 GET HTTP/1.1 /wp-admin/css/colors/modern/
61 GET HTTP/1.1 /wp-blog.php
60 GET HTTP/1.1 /config.env
60 GET HTTP/1.1 /php.php
60 GET HTTP/1.1 /bless.php
60 GET HTTP/1.1 /public/.env
60 GET HTTP/1.1 /ccou.php
60 GET HTTP/1.1 /.env.dev
60 GET HTTP/1.1 /test.php
59 GET HTTP/1.1 /aa.php
59 GET HTTP/1.1 /ingfo.php
59 GET HTTP/1.1 /h02ugyh.php
59 GET HTTP/1.1 //cgi-bin/index.php
58 GET HTTP/1.1 /file.php?
58 GET HTTP/1.1 /xstelth.php
58 GET HTTP/1.1 /pucci.php
57 GET HTTP/1.1 //edit.php
57 GET HTTP/1.1 /edit.php
56 POST HTTP/1.1 /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
56 GET HTTP/1.1 /cdn-cgi/trace
56 GET HTTP/1.1 /wp-content/index.php
56 GET HTTP/1.1 /term.php
56 GET HTTP/1.1 /wp-includes/Text/Diff/Engine/about.php
56 GET HTTP/1.1 /BDKR28WP.php
56 GET HTTP/1.1 /config/.env
55 GET HTTP/1.1 /dex.php
55 GET HTTP/1.1 /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php
55 GET HTTP/1.1 /wp-admin/js/
54 GET HTTP/1.1 /.env.php
53 GET HTTP/1.1 /phpunit/phpunit/src/Util/PHP/eval-stdin.php
53 GET HTTP/1.1 /.env.php.bak
53 GET HTTP/1.1 /wp-admin/css/
53 GET HTTP/1.1 /phpunit/src/Util/PHP/eval-stdin.php
53 GET HTTP/1.1 /vendor/phpunit/src/Util/PHP/eval-stdin.php
53 GET HTTP/1.1 //a1.php
53 GET HTTP/1.1 ///admin.php
53 GET HTTP/1.1 /web/.env
53 GET HTTP/1.1 /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php
52 GET HTTP/1.1 /wp-config.php
52 GET HTTP/1.1 /vendor/phpunit/Util/PHP/eval-stdin.php
52 GET HTTP/1.1 /177.php
52 GET HTTP/1.1 /themes.php
52 GET HTTP/1.1 /vendor/phpunit/phpunit/LICENSE/eval-stdin.php
52 GET HTTP/1.1 /wp-admin/css/colors/blue/
52 GET HTTP/1.1 /wp-includes/blocks/post-comments-form/
52 GET HTTP/1.1 /.env.local.php
51 GET HTTP/1.1 /file61.php
51 GET HTTP/1.1 /gecko.php
51 GET HTTP/1.1 /hur.php
51 GET HTTP/1.1 /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /lib/phpunit/phpunit/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 //adminfuns.php
51 GET HTTP/1.1 /phpunit/phpunit/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /wp-admin/css/colors/sunrise/
51 GET HTTP/1.1 /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /phpunit/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /lib/phpunit/src/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /lib/phpunit/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
51 GET HTTP/1.1 /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
50 GET HTTP/1.1 /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
50 GET HTTP/1.1 /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
50 GET HTTP/1.1 /developmentserver/metadatauploader
50 GET HTTP/1.1 /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
50 GET HTTP/1.1 /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
50 GET HTTP/1.1 /xwpg.php
50 GET HTTP/1.1 /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
50 GET HTTP/1.1 /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
50 GET HTTP/1.1 /wp-includes/blocks/details/
50 GET HTTP/1.1 /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
49 GET HTTP/1.1 /aa2.php
49 GET HTTP/1.1 /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
49 GET HTTP/1.1 //wp-admin/js/index.php
49 GET HTTP/1.1 /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
49 GET HTTP/1.1 /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
49 GET HTTP/1.1 /index.php?lang=../../../../../../../../tmp/index1
49 GET HTTP/1.1 /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
49 GET HTTP/1.1 /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
49 GET HTTP/1.1 /containers/json
49 GET HTTP/1.1 /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
49 GET HTTP/1.1 /file6.php
49 GET HTTP/1.1 /a2.php
49 GET HTTP/1.1 /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
49 GET HTTP/1.1 /appsettings.json
49 GET HTTP/1.1 /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
49 GET HTTP/1.1 /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
48 GET HTTP/1.1 /actuator/env
48 GET HTTP/1.1 /config/.env.php
48 GET HTTP/1.1 //av.php
48 GET HTTP/1.1 /xa.php
48 GET HTTP/1.1 /adminner.php
48 GET HTTP/1.1 /admin.php
48 GET HTTP/1.1 /FWAZ.php
47 GET HTTP/1.1 /wp-includes/Text/
47 GET HTTP/1.1 /error_log.php
47 GET HTTP/1.1 /moon.php
47 GET HTTP/1.1 /82.php
47 GET HTTP/1.1 /BDKR28.php
47 GET HTTP/1.1 /2P.php
47 GET HTTP/1.1 /4PJcpMFsD8B.php





最近読んでる本


[商品価格に関しましては、リンクが作成された時点と現時点で情報が変更されている場合がございます。]

過疎ビジネス （集英社新書） [ 横山 勲 ]
価格：1,100円（税込、送料無料) (2026/5/24時点)



関連記事

新着記事