Apache Log4j2 (CVE-2021-44228)漏洞相关攻击IOC被披露
Apache Log4j2 (CVE-2021-44228)漏洞的利用呈加剧趋势，奇安信威胁情报中心将收集持续整理IOC供安全社区使用。
我们创建的Github项目https://github.com/RedDrip7/Log4Shell_CVE-2021-44228_related_attacks_IOCs也会同步更新，最新的数据请尽可能直接从Github的库获取。
使用Apache Log4j RCE尝试攻击的源IP，其中包含很大部分Tor节点，建议短时间内执行阻断：
- 2021-12-12的输出
1.116.59.211 1.14.17.89 103.103.0.141 103.103.0.142 103.214.5.13 104.244.72.115 104.244.72.129 104.244.72.136 104.244.72.7 104.244.73.126 104.244.73.43 104.244.73.85 104.244.73.93 104.244.74.211 104.244.74.55 104.244.74.57 104.244.75.225 104.244.75.74 104.244.76.13 104.244.76.170 104.244.76.173 104.244.76.44 104.244.77.139 104.244.77.235 104.244.78.213 104.244.79.6 107.189.1.160 107.189.1.178 107.189.10.137 107.189.10.143 107.189.11.153 107.189.12.135 107.189.13.143 107.189.14.182 107.189.14.76 107.189.14.98 107.189.28.100 107.189.28.241 107.189.29.107 107.189.29.41 107.189.3.244 107.189.31.195 107.189.31.241 107.189.8.65 109.237.96.124 109.70.100.22 109.70.100.23 109.70.100.25 109.70.100.26 109.70.100.27 109.70.100.31 109.70.100.34 109.70.100.36 116.24.67.213 121.4.56.143 121.5.219.20 122.161.50.23 128.31.0.13 133.18.201.195 134.122.34.28 135.148.43.32 137.184.102.82 137.184.104.73 137.184.106.119 137.184.28.58 137.184.99.8 138.68.167.19 139.59.8.39 139.59.97.205 140.246.171.141 142.93.151.166 142.93.34.250 143.110.221.204 143.198.32.72 143.198.45.117 145.220.24.19 146.56.131.161 147.182.131.229 147.182.150.124 147.182.154.100 147.182.167.165 147.182.169.254 147.182.198.103 147.182.215.36 147.182.219.9 150.158.189.96 151.115.60.113 151.80.148.159 152.89.239.12 154.39.255.195 154.94.7.88 157.230.32.67 157.245.109.75 159.203.8.145 159.223.9.17 159.65.155.208 159.65.194.103 159.65.3.102 159.65.58.66 161.35.119.60 162.142.125.193 162.142.125.194 162.142.125.195 162.142.125.196 162.142.125.42 162.142.125.43 162.142.125.44 162.142.125.58 162.142.125.59 162.142.125.60 162.247.74.201 162.247.74.202 162.247.74.206 162.247.74.27 162.247.74.7 162.255.202.246 163.172.157.143 163.172.213.212 164.90.199.216 166.70.207.2 167.248.133.113 167.248.133.114 167.248.133.115 167.248.133.116 167.248.133.41 167.248.133.42 167.248.133.43 167.248.133.44 167.248.133.57 167.248.133.58 167.248.133.59 167.248.133.60 167.71.13.196 167.94.138.113 167.94.138.114 167.94.138.115 167.94.138.116 167.94.138.41 167.94.138.42 167.94.138.43 167.94.138.44 167.94.138.57 167.94.138.58 167.94.138.59 167.94.138.60 167.94.145.60 167.99.164.201 167.99.172.213 167.99.172.58 170.210.45.163 171.25.193.20 171.25.193.25 171.25.193.77 171.25.193.78 172.106.17.218 175.6.210.66 176.10.104.240 176.10.99.200 178.17.170.135 178.17.170.23 178.17.171.102 178.17.174.14 178.176.202.121 178.176.203.190 178.20.55.16 178.62.79.49 179.43.187.138 18.27.197.252 180.149.231.245 181.214.39.2 185.10.68.168 185.100.86.128 185.100.87.139 185.100.87.174 185.100.87.202 185.100.87.41 185.107.47.171 185.107.47.215 185.107.70.56 185.129.61.1 185.129.61.4 185.130.44.108 185.14.97.147 185.165.169.18 185.220.100.240 185.220.100.241 185.220.100.242 185.220.100.243 185.220.100.244 185.220.100.245 185.220.100.246 185.220.100.247 185.220.100.248 185.220.100.249 185.220.100.250 185.220.100.251 185.220.100.252 185.220.100.253 185.220.100.254 185.220.100.255 185.220.101.1 185.220.101.10 185.220.101.128 185.220.101.129 185.220.101.131 185.220.101.132 185.220.101.133 185.220.101.134 185.220.101.135 185.220.101.136 185.220.101.137 185.220.101.138 185.220.101.139 185.220.101.14 185.220.101.140 185.220.101.141 185.220.101.142 185.220.101.143 185.220.101.144 185.220.101.145 185.220.101.146 185.220.101.147 185.220.101.148 185.220.101.149 185.220.101.150 185.220.101.151 185.220.101.152 185.220.101.153 185.220.101.154 185.220.101.155 185.220.101.156 185.220.101.157 185.220.101.158 185.220.101.159 185.220.101.16 185.220.101.160 185.220.101.161 185.220.101.162 185.220.101.163 185.220.101.164 185.220.101.165 185.220.101.166 185.220.101.167 185.220.101.168 185.220.101.169 185.220.101.170 185.220.101.171 185.220.101.172 185.220.101.173 185.220.101.174 185.220.101.175 185.220.101.176 185.220.101.177 185.220.101.178 185.220.101.179 185.220.101.180 185.220.101.181 185.220.101.182 185.220.101.183 185.220.101.184 185.220.101.185 185.220.101.186 185.220.101.187 185.220.101.188 185.220.101.189 185.220.101.19 185.220.101.190 185.220.101.191 185.220.101.2 185.220.101.21 185.220.101.3 185.220.101.32 185.220.101.33 185.220.101.34 185.220.101.35 185.220.101.36 185.220.101.37 185.220.101.38 185.220.101.39 185.220.101.40 185.220.101.41 185.220.101.42 185.220.101.43 185.220.101.44 185.220.101.45 185.220.101.46 185.220.101.47 185.220.101.48 185.220.101.49 185.220.101.50 185.220.101.51 185.220.101.52 185.220.101.53 185.220.101.54 185.220.101.55 185.220.101.56 185.220.101.57 185.220.101.58 185.220.101.59 185.220.101.60 185.220.101.61 185.220.101.62 185.220.101.63 185.220.101.7 185.220.101.9 185.220.102.241 185.220.102.242 185.220.102.243 185.220.102.245 185.220.102.246 185.220.102.249 185.220.102.250 185.220.102.252 185.220.102.253 185.220.102.254 185.220.102.4 185.220.102.6 185.220.102.7 185.220.102.8 185.220.103.117 185.220.103.119 185.220.103.4 185.220.103.5 185.220.103.7 185.220.103.8 185.232.23.46 185.236.200.117 185.38.175.130 185.38.175.131 185.38.175.132 185.4.132.183 185.56.80.65 185.83.214.69 188.120.246.215 188.166.122.43 188.166.223.38 188.166.225.104 188.166.48.55 188.166.74.97 188.166.92.228 191.232.38.25 192.160.102.169 192.42.116.19 192.81.130.207 192.99.152.200 193.110.95.34 193.189.100.195 193.189.100.196 193.189.100.201 193.189.100.202 193.189.100.203 193.218.118.183 193.218.118.231 193.239.232.101 193.239.232.102 193.31.24.154 194.135.33.152 194.163.133.36 194.163.45.31 194.48.199.78 195.123.247.209 195.176.3.19 195.176.3.24 195.19.192.26 195.206.105.217 195.251.41.139 195.254.135.76 197.246.171.83 198.144.121.43 198.96.155.3 198.98.51.189 198.98.57.191 198.98.57.207 198.98.60.19 199.195.250.77 199.195.253.162 199.217.117.92 199.249.230.110 199.249.230.158 20.205.104.227 20.71.156.146 204.8.156.142 205.185.115.217 205.185.115.45 205.185.117.149 205.185.126.167 205.185.127.35 206.189.20.141 209.127.17.234 209.127.17.242 209.141.34.232 209.141.36.206 209.141.41.103 209.141.45.189 209.141.45.227 209.141.49.232 211.154.194.21 212.109.197.1 212.192.216.30 212.192.246.95 212.193.57.225 212.47.237.67 213.202.216.189 213.61.215.54 213.95.149.22 216.218.134.12 221.199.187.100 23.120.182.121 23.129.64.131 23.129.64.132 23.129.64.133 23.129.64.135 23.129.64.137 23.129.64.139 23.129.64.140 23.129.64.141 23.129.64.145 23.129.64.146 23.129.64.148 23.129.64.149 23.154.177.2 23.154.177.4 23.154.177.7 23.160.193.176 23.183.83.71 23.184.48.209 3.94.114.30 31.42.184.34 31.42.186.101 35.76.31.198 37.120.232.51 37.123.163.58 37.19.212.104 37.228.129.109 45.12.134.108 45.129.56.200 45.13.104.179 45.130.229.168 45.137.184.31 45.137.21.9 45.15.16.70 45.153.160.130 45.153.160.131 45.153.160.133 45.153.160.134 45.153.160.135 45.153.160.136 45.153.160.138 45.153.160.140 45.153.160.2 45.154.255.147 45.155.205.233 45.61.185.54 45.61.186.225 46.105.95.220 46.166.139.111 46.173.218.146 46.182.21.248 46.4.51.212 47.254.127.78 5.157.38.50 5.182.210.216 5.183.209.217 5.199.143.202 5.2.70.140 5.2.72.73 51.15.180.36 51.15.43.205 51.15.59.15 51.15.76.60 51.255.106.85 51.75.161.78 51.77.52.216 54.173.99.121 60.31.180.149 61.19.25.207 62.102.148.68 62.102.148.69 62.210.130.250 62.76.41.46 64.113.32.29 66.220.242.222 68.183.198.247 68.183.44.143 68.79.17.59 72.223.168.73 79.146.170.248 80.71.158.44 81.17.18.59 81.17.18.60 81.17.18.61 81.17.18.62 82.221.131.71 85.93.218.204 87.118.110.27 88.80.20.86 89.163.154.91 89.163.252.230 89.163.252.30 89.249.63.3 89.35.30.236 91.203.5.146 91.219.237.21 92.223.89.187 92.242.40.21 94.142.241.194 94.230.208.147 95.214.54.97 128.199.15.215 128.199.222.221 134.209.24.42 134.209.82.14 137.184.98.176 138.197.106.234 138.197.108.154 138.197.167.229 138.197.193.220 138.197.216.230 138.197.72.76 138.197.9.239 138.68.155.222 138.68.250.214 139.59.101.242 139.59.103.254 139.59.108.31 139.59.163.74 139.59.182.104 139.59.188.119 142.93.157.150 143.110.221.219 143.198.180.150 143.198.183.66 147.182.179.141 147.182.187.229 147.182.216.21 157.245.129.50 159.203.187.141 159.203.45.181 159.203.58.73 159.223.42.182 159.223.61.102 159.89.115.238 159.89.122.19 159.89.133.216 159.89.146.147 159.89.150.150 159.89.154.102 159.89.154.185 159.89.154.64 159.89.154.77 159.89.48.173 159.89.94.219 161.35.155.230 161.35.156.13 164.92.254.33 165.22.201.45 165.227.32.109 165.227.37.189 165.232.80.166 165.232.80.22 165.232.84.226 165.232.84.228 167.172.94.250 167.99.172.99 167.99.186.227 167.99.204.151 167.99.221.217 167.99.221.249 167.99.36.245 167.99.88.151 174.138.6.128 178.128.226.212 178.128.232.114 178.62.23.146 178.62.32.211 188.166.102.47 188.166.105.150 188.166.45.93 188.166.76.204 188.166.86.206 46.101.223.115 51.195.45.190 64.227.67.110 67.205.170.85 68.183.192.239 68.183.198.36 68.183.207.73 68.183.33.144 68.183.35.171 68.183.36.244 68.183.41.150 |
- 2021-12-13的新增
1.116.59.211 1.179.247.182 101.204.24.28 103.103.0.141 103.103.0.142 103.107.198.109 103.232.136.12 103.244.80.194 103.90.239.209 104.244.72.115 104.244.72.136 104.244.73.126 104.244.74.121 104.244.74.57 104.244.76.13 104.244.76.170 104.244.79.234 104.244.79.6 104.248.144.120 107.172.214.23 107.189.1.160 107.189.1.178 107.189.7.88 109.201.133.100 109.70.100.19 109.70.100.34 109.73.65.32 110.42.200.96 111.28.189.51 111.59.85.209 112.215.172.64 112.27.199.180 112.74.52.90 113.141.64.14 113.98.224.68 114.112.161.155 114.32.82.82 115.151.228.235 115.151.228.4 115.151.228.83 118.27.36.56 119.84.170.84 120.195.30.152 120.211.140.116 121.4.56.143 122.117.91.144 122.161.53.44 124.224.87.29 128.199.15.215 128.199.222.221 128.199.48.147 128.31.0.13 131.100.148.7 133.18.201.195 134.122.33.6 134.209.24.42 134.209.82.14 137.184.102.82 137.184.104.73 137.184.105.192 137.184.137.242 137.184.138.79 137.184.28.58 137.184.96.216 137.184.98.176 137.184.99.8 138.197.106.234 138.197.108.154 138.197.167.229 138.197.216.230 138.197.9.239 138.199.21.199 138.68.155.222 139.28.218.134 139.59.101.242 139.59.103.254 139.59.108.31 139.59.163.74 139.59.188.119 139.59.224.7 139.59.8.39 139.59.96.42 139.59.99.80 14.177.141.126 140.246.171.141 141.98.83.139 142.93.151.166 142.93.157.150 142.93.34.250 143.110.221.204 143.110.221.219 143.198.180.150 143.198.183.66 143.198.45.117 143.244.184.81 144.217.86.109 144.48.37.78 145.220.24.19 146.56.131.161 146.56.148.181 146.70.38.48 147.182.131.229 147.182.154.100 147.182.167.165 147.182.179.141 147.182.187.229 147.182.195.250 147.182.215.36 147.182.216.21 147.182.219.9 147.182.242.144 147.182.242.241 150.158.189.96 151.80.148.159 154.65.28.250 154.94.7.88 156.146.57.41 157.230.32.67 157.245.105.213 157.245.107.6 157.245.108.125 157.245.108.40 157.245.109.75 157.245.129.50 157.245.96.165 159.203.187.141 159.203.45.181 159.203.58.73 159.223.42.182 159.223.61.102 159.223.75.133 159.223.9.17 159.48.55.216 159.65.146.60 159.65.155.208 159.65.58.66 159.65.59.77 159.65.60.100 159.89.115.238 159.89.122.19 159.89.133.216 159.89.150.150 159.89.154.102 159.89.154.185 159.89.154.64 159.89.48.173 159.89.85.91 159.89.94.219 160.238.38.196 161.35.119.60 161.35.155.230 161.35.156.13 162.247.74.202 162.247.74.206 162.253.71.51 162.255.202.246 164.52.53.163 164.90.196.7 164.90.199.206 164.90.199.212 164.90.199.216 164.90.200.6 164.92.254.33 165.22.210.174 165.22.213.246 165.227.32.109 165.232.80.166 166.70.207.2 167.172.65.15 167.172.69.97 167.172.71.96 167.172.85.73 167.172.94.250 167.71.1.144 167.71.13.196 167.71.218.228 167.71.4.81 167.86.70.252 167.99.164.160 167.99.172.111 167.99.172.213 167.99.172.99 167.99.186.227 167.99.204.151 167.99.221.217 167.99.36.245 167.99.44.32 170.210.45.163 171.221.235.43 171.25.193.20 171.25.193.25 171.25.193.77 171.25.193.78 172.83.40.103 172.83.40.124 172.98.66.221 174.138.6.128 175.6.210.66 176.10.99.200 177.131.174.12 177.185.117.129 178.128.226.212 178.128.232.114 178.159.3.167 178.17.170.135 178.17.170.23 178.17.171.102 178.17.174.14 178.176.202.121 178.176.203.190 178.62.23.146 178.62.61.47 179.43.187.138 18.27.197.252 180.136.188.219 180.149.125.139 182.99.234.208 182.99.246.166 182.99.246.183 182.99.246.190 182.99.246.192 182.99.246.199 182.99.247.181 182.99.247.188 182.99.247.253 182.99.247.67 183.13.106.232 183.134.110.75 185.100.86.128 185.100.87.174 185.100.87.202 185.100.87.41 185.107.47.171 185.107.47.215 185.107.70.56 185.129.61.5 185.14.97.147 185.165.169.18 185.170.114.25 185.175.25.50 185.202.220.27 185.202.220.29 185.207.249.87 185.220.100.240 185.220.100.241 185.220.100.242 185.220.100.243 185.220.100.244 185.220.100.245 185.220.100.246 185.220.100.247 185.220.100.248 185.220.100.249 185.220.100.250 185.220.100.251 185.220.100.252 185.220.100.253 185.220.100.254 185.220.100.255 185.220.101.129 185.220.101.131 185.220.101.132 185.220.101.133 185.220.101.134 185.220.101.135 185.220.101.136 185.220.101.138 185.220.101.139 185.220.101.140 185.220.101.141 185.220.101.142 185.220.101.143 185.220.101.144 185.220.101.145 185.220.101.146 185.220.101.147 185.220.101.148 185.220.101.149 185.220.101.150 185.220.101.151 185.220.101.152 185.220.101.153 185.220.101.154 185.220.101.155 185.220.101.156 185.220.101.157 185.220.101.158 185.220.101.159 185.220.101.160 185.220.101.161 185.220.101.162 185.220.101.163 185.220.101.164 185.220.101.165 185.220.101.166 185.220.101.167 185.220.101.168 185.220.101.169 185.220.101.170 185.220.101.171 185.220.101.172 185.220.101.173 185.220.101.174 185.220.101.175 185.220.101.176 185.220.101.177 185.220.101.178 185.220.101.179 185.220.101.180 185.220.101.181 185.220.101.182 185.220.101.183 185.220.101.184 185.220.101.185 185.220.101.186 185.220.101.187 185.220.101.188 185.220.101.189 185.220.101.190 185.220.101.191 185.220.101.32 185.220.101.33 185.220.101.34 185.220.101.35 185.220.101.36 185.220.101.37 185.220.101.38 185.220.101.39 185.220.101.40 185.220.101.41 185.220.101.42 185.220.101.43 185.220.101.44 185.220.101.45 185.220.101.46 185.220.101.47 185.220.101.48 185.220.101.49 185.220.101.50 185.220.101.51 185.220.101.52 185.220.101.53 185.220.101.54 185.220.101.55 185.220.101.56 185.220.101.57 185.220.101.58 185.220.101.59 185.220.101.60 185.220.101.61 185.220.101.62 185.220.101.63 185.220.101.9 185.220.102.243 185.220.102.246 185.220.102.248 185.220.102.6 185.220.103.120 185.233.100.23 185.236.200.116 185.236.200.118 185.245.86.85 185.245.87.246 185.255.79.72 185.38.175.130 185.38.175.131 185.38.175.132 185.4.132.183 185.51.76.187 185.56.80.65 185.65.205.10 185.83.214.69 188.166.102.47 188.166.105.150 188.166.170.135 188.166.223.38 188.166.225.104 188.166.45.93 188.166.48.55 188.166.7.245 188.166.86.206 188.166.92.228 188.241.156.207 191.101.132.152 191.232.38.25 192.145.118.111 192.145.118.127 192.145.118.177 192.150.9.201 192.40.57.54 193.110.95.34 193.122.108.228 193.218.118.183 193.218.118.231 193.29.60.202 193.31.24.154 194.110.84.182 194.110.84.243 194.48.199.78 195.144.21.219 195.201.175.217 195.251.41.139 195.54.160.149 197.246.171.83 198.54.128.94 198.98.51.189 198.98.57.207 198.98.62.150 199.195.248.29 199.195.250.77 199.195.252.18 199.249.230.110 199.249.230.163 20.205.104.227 20.71.156.146 20.73.161.16 204.8.156.142 205.185.117.149 206.189.20.141 207.246.101.221 209.127.17.234 209.127.17.242 209.141.34.232 209.141.41.103 209.141.46.203 209.141.54.195 209.141.58.146 209.141.59.180 209.58.146.134 209.97.133.112 211.218.126.140 212.102.40.36 213.164.204.146 217.112.83.246 217.138.200.150 217.138.208.92 217.138.208.94 217.146.83.136 217.79.189.13 218.29.217.234 218.89.222.71 219.100.36.177 219.159.77.109 221.199.187.100 221.226.159.22 221.228.87.37 23.108.92.140 23.128.248.13 23.129.64.130 23.129.64.131 23.129.64.136 23.129.64.137 23.129.64.138 23.129.64.140 23.129.64.141 23.129.64.142 23.129.64.143 23.129.64.144 23.129.64.146 23.82.194.113 23.82.194.114 23.82.194.166 31.171.154.132 31.6.19.41 34.247.50.189 35.193.211.95 35.232.163.113 36.4.92.53 37.120.204.142 37.123.163.58 37.187.122.82 37.187.96.183 37.19.212.103 37.19.212.88 37.19.213.10 37.19.213.148 37.19.213.149 37.19.213.168 37.19.213.170 37.19.213.198 37.19.213.199 37.19.213.200 37.221.66.128 39.102.236.51 41.203.140.114 42.192.69.45 45.12.134.108 45.129.56.200 45.133.194.118 45.137.21.9 45.140.168.37 45.153.160.131 45.153.160.139 45.153.160.2 45.154.255.147 45.155.205.233 45.33.120.240 45.76.99.222 46.101.223.115 46.105.95.220 46.166.139.111 46.194.138.182 46.58.195.62 49.233.62.251 49.234.81.169 49.7.224.217 49.74.65.69 5.157.38.50 5.254.101.167 51.105.55.17 51.15.43.205 51.77.52.216 52.140.215.233 54.146.233.218 58.241.61.242 60.31.180.149 61.175.202.154 61.178.32.114 61.19.25.207 62.102.148.68 62.102.148.69 64.113.32.29 66.220.242.222 67.205.170.85 67.207.93.79 68.183.192.239 68.183.198.247 68.183.198.36 68.183.2.123 68.183.207.73 68.183.33.144 68.183.35.171 68.183.36.244 68.183.37.10 68.183.41.150 68.183.44.143 68.183.44.164 78.31.71.247 78.31.71.248 80.57.9.110 80.67.172.162 81.30.157.43 82.221.131.71 85.93.218.204 86.106.103.29 86.109.208.194 89.163.249.192 89.249.63.3 91.207.173.123 91.207.174.157 91.221.57.179 91.245.81.65 91.250.242.12 92.38.178.27 124.224.87.11 45.83.67.190 121.36.213.142 180.149.231.197 112.74.34.48 128.14.102.187 113.68.61.30 185.220.102.8 180.140.163.156 23.129.64.149 218.28.128.14 54.144.8.103 45.83.66.86 45.83.67.33 45.83.66.36 139.59.4.192 45.83.67.183 103.149.248.27 54.254.58.27 111.205.62.212 45.83.65.148 112.103.102.184 37.120.189.247 147.182.188.183 23.129.64.135 45.83.66.100 45.83.67.58 16.162.192.45 94.230.208.147 182.99.246.138 165.227.37.189 185.220.102.247 223.104.67.7 51.15.244.188 122.161.50.23 111.127.128.136 185.213.155.168 118.112.74.135 185.135.81.158 199.249.230.84 23.129.64.145 13.213.127.204 103.112.31.26 45.83.66.228 45.83.65.93 174.138.9.117 194.87.236.154 167.99.221.249 5.254.43.59 194.110.84.93 51.15.76.60 167.71.14.192 104.244.72.129 211.154.194.21 212.102.50.103 167.99.164.183 45.76.176.24 157.122.61.12 45.83.65.61 211.138.191.69 188.166.26.105 107.189.11.228 172.106.16.74 117.89.128.117 109.70.100.25 101.71.37.47 91.243.81.71 217.68.181.100 195.19.192.26 112.10.117.77 45.83.67.0 5.254.101.169 45.83.64.153 58.247.209.203 45.83.64.235 185.113.128.30 128.199.24.9 137.184.111.180 106.92.114.249 212.193.57.225 112.74.185.158 101.35.199.152 147.182.213.12 45.83.67.64 185.220.101.130 185.4.132.135 114.24.19.243 8.209.212.37 167.99.164.201 23.129.64.134 49.36.231.105 221.222.155.240 113.17.41.134 47.102.199.233 222.128.62.127 38.143.9.76 164.90.159.39 109.237.96.124 121.31.247.58 45.83.64.43 45.83.66.183 122.225.220.134 134.209.153.239 45.83.64.148 172.105.59.246 206.189.29.232 116.206.103.246 116.206.231.53 103.47.48.65 165.232.84.228 172.105.194.173 185.10.68.168 167.99.172.58 58.100.164.147 167.99.188.167 143.198.32.72 52.175.18.172 45.64.75.134 121.229.219.55 18.177.59.255 178.62.222.131 167.71.67.189 45.83.66.65 113.207.68.47 23.234.200.135 134.122.34.28 167.99.216.68 137.184.98.160 45.83.67.22 222.211.205.179 185.193.125.249 45.83.67.77 103.130.166.234 81.17.18.59 104.244.76.44 213.173.34.93 110.191.179.149 23.129.64.133 45.83.64.108 157.245.111.173 45.83.66.130 45.83.65.141 45.83.64.129 62.76.41.46 120.24.23.84 45.83.66.29 107.189.31.195 45.61.184.239 188.166.122.43 165.22.222.120 223.89.64.12 107.189.14.27 45.83.65.82 83.97.20.151 42.159.91.12 118.112.74.218 209.141.45.189 64.188.16.142 172.105.57.210 37.19.213.150 176.10.104.240 185.220.103.116 205.185.125.45 138.68.167.19 101.71.38.231 114.246.35.153 103.194.184.98 45.83.66.134 45.83.66.175 101.89.19.197 152.70.110.78 138.197.72.76 114.254.20.186 203.175.13.14 139.59.97.205 195.123.247.209 117.139.38.130 103.13.220.57 122.161.48.150 45.153.160.133 185.14.47.20 192.144.236.164 45.153.160.140 159.65.43.94 95.141.35.15 116.246.0.93 137.184.109.130 23.154.177.6 45.83.67.234 103.145.22.103 183.160.4.88 77.199.38.33 185.220.101.137 121.24.8.114 115.151.228.18 49.93.83.226 45.83.67.48 66.112.213.87 45.76.191.147 23.129.64.132 138.197.193.220 84.53.225.118 15.165.232.131 185.220.101.128 125.33.172.90 45.83.67.134 101.206.168.120 120.239.67.147 157.245.102.218 45.83.67.75 49.118.75.38 172.105.97.149 117.36.0.131 45.83.67.180 211.148.73.182 36.227.164.189 45.83.65.40 45.83.64.45 167.172.69.175 116.89.189.30 185.220.101.13 23.105.194.3 155.94.151.218 182.99.247.122 54.199.27.97 45.83.65.151 182.118.237.42 36.155.14.163 216.24.191.27 143.110.229.254 203.218.252.81 180.102.206.209 103.149.162.116 101.93.86.68 18.204.199.0 194.195.112.76 47.102.205.237 94.230.208.148 115.60.103.185 45.83.65.76 45.83.64.223 45.83.64.164 198.98.59.65 192.42.116.16 89.238.178.213 185.243.41.202 45.83.65.94 167.99.219.41 13.231.10.223 45.83.67.38 167.99.88.151 199.249.230.119 172.105.194.253 139.59.182.104 123.122.133.12 119.160.234.68 1.209.47.241 115.151.228.146 182.118.237.234 120.228.88.232 178.62.32.211 45.83.67.203 171.218.53.30 185.232.23.46 198.98.60.19 1.209.249.188 100.121.245.75 100.121.246.23 100.121.88.207 101.89.239.166 101.91.94.183 103.37.3.122 110.185.172.206 110.40.158.125 111.206.179.154 111.206.179.155 111.222.1.161 113.23.25.97 116.239.33.15 117.139.166.157 119.167.231.51 120.244.198.234 122.119.22.37 122.119.22.38 123.56.241.236 172.241.167.37 172.255.242.100 172.255.242.101 172.255.242.102 172.255.242.103 172.255.242.104 172.255.242.105 172.255.242.106 172.255.242.107 172.255.242.108 172.255.242.109 172.255.242.110 172.255.242.111 172.255.242.112 172.255.242.113 172.255.242.114 172.255.242.115 172.255.242.116 172.255.242.117 172.255.242.118 172.255.242.119 172.255.242.120 172.255.242.121 172.255.242.122 172.255.242.123 172.255.242.124 172.255.242.125 172.255.242.126 172.255.242.66 172.255.242.67 172.255.242.68 172.255.242.69 172.255.242.70 172.255.242.71 172.255.242.72 172.255.242.73 172.255.242.74 172.255.242.75 172.255.242.76 172.255.242.77 172.255.242.78 172.255.242.79 172.255.242.80 172.255.242.81 172.255.242.82 172.255.242.83 172.255.242.84 172.255.242.85 172.255.242.86 172.255.242.87 172.255.242.88 172.255.242.89 172.255.242.90 172.255.242.91 172.255.242.92 172.255.242.93 172.255.242.94 172.255.242.95 172.255.242.96 172.255.242.97 172.255.242.98 172.255.242.99 172.255.78.130 172.255.78.131 172.255.78.132 172.255.78.133 172.255.78.134 172.255.78.135 172.255.78.136 172.255.78.137 172.255.78.138 172.255.78.139 172.255.78.140 172.255.78.141 172.255.78.142 172.255.78.143 172.255.78.144 172.255.78.145 172.255.78.146 172.255.78.147 172.255.78.148 172.255.78.149 172.255.78.150 172.255.78.151 172.255.78.152 172.255.78.153 172.255.78.154 172.255.78.155 172.255.78.156 172.255.78.157 172.255.78.158 172.255.78.159 172.255.78.160 172.255.78.161 172.255.78.162 172.255.78.163 172.255.78.164 172.255.78.165 172.255.78.166 172.255.78.167 172.255.78.168 172.255.78.169 172.255.78.170 172.255.78.171 172.255.78.172 172.255.78.173 172.255.78.174 172.255.78.175 172.255.78.176 172.255.78.177 172.255.78.178 172.255.78.179 172.255.78.180 172.255.78.181 172.255.78.182 172.255.78.183 172.255.78.184 172.255.78.185 172.255.78.186 172.255.78.187 172.255.78.188 172.255.78.189 172.255.78.190 172.255.79.194 172.255.79.195 172.255.79.196 172.255.79.197 172.255.79.198 172.255.79.199 172.255.79.200 172.255.79.201 172.255.79.202 172.255.79.203 172.255.79.204 172.255.79.205 172.255.79.206 172.255.79.207 172.255.79.208 172.255.79.209 172.255.79.210 172.255.79.211 172.255.79.212 172.255.79.213 172.255.79.214 172.255.79.215 172.255.79.216 172.255.79.217 172.255.79.218 172.255.79.219 172.255.79.220 172.255.79.221 172.255.79.222 172.255.79.223 172.255.79.224 172.255.79.225 172.255.79.226 172.255.79.227 172.255.79.228 172.255.79.229 172.255.79.230 172.255.79.231 172.255.79.232 172.255.79.233 172.255.79.234 172.255.79.235 172.255.79.236 172.255.79.237 172.255.79.238 172.255.79.239 172.255.79.240 172.255.79.241 172.255.79.242 172.255.79.243 172.255.79.244 172.255.79.245 172.255.79.246 172.255.79.247 172.255.79.248 172.255.79.249 172.255.79.250 172.255.79.251 172.255.79.252 172.255.79.253 172.255.79.254 173.208.92.10 173.208.92.11 173.208.92.12 173.208.92.13 173.208.92.14 173.208.92.15 173.208.92.16 173.208.92.17 173.208.92.18 173.208.92.19 173.208.92.2 173.208.92.20 173.208.92.21 173.208.92.22 173.208.92.23 173.208.92.24 173.208.92.25 173.208.92.26 173.208.92.27 173.208.92.28 173.208.92.29 173.208.92.3 173.208.92.30 173.208.92.31 173.208.92.32 173.208.92.33 173.208.92.34 173.208.92.35 173.208.92.36 173.208.92.37 173.208.92.38 173.208.92.39 173.208.92.4 173.208.92.40 173.208.92.41 173.208.92.42 173.208.92.43 173.208.92.44 173.208.92.45 173.208.92.46 173.208.92.47 173.208.92.48 173.208.92.49 173.208.92.5 173.208.92.50 173.208.92.52 173.208.92.53 173.208.92.54 173.208.92.55 173.208.92.56 173.208.92.57 173.208.92.58 173.208.92.59 173.208.92.60 173.208.92.61 173.208.92.62 173.208.92.7 173.208.92.8 173.208.92.9 183.216.210.247 183.220.31.71 194.110.84.39 197.246.171.111 202.99.51.154 203.27.106.141 210.3.53.109 212.102.50.89 212.115.53.28 218.28.128.10 223.72.73.238 23.19.74.95 23.226.49.42 35.76.31.198 36.112.138.181 37.120.204.140 39.100.155.32 39.148.24.162 42.81.61.12 42.81.61.13 45.83.64.107 45.83.64.11 45.83.64.111 45.83.64.112 45.83.64.116 45.83.64.128 45.83.64.131 45.83.64.134 45.83.64.135 45.83.64.138 45.83.64.140 45.83.64.142 45.83.64.144 45.83.64.152 45.83.64.154 45.83.64.168 45.83.64.175 45.83.64.178 45.83.64.180 45.83.64.190 45.83.64.194 45.83.64.201 45.83.64.205 45.83.64.211 45.83.64.214 45.83.64.221 45.83.64.224 45.83.64.230 45.83.64.238 45.83.64.24 45.83.64.245 45.83.64.247 45.83.64.250 45.83.64.32 45.83.64.39 45.83.64.47 45.83.64.49 45.83.64.53 45.83.64.55 45.83.64.57 45.83.64.61 45.83.64.63 45.83.64.68 45.83.64.70 45.83.64.72 45.83.64.75 45.83.64.77 45.83.64.78 45.83.64.83 45.83.64.86 45.83.64.90 45.83.64.93 45.83.64.94 45.83.64.97 45.83.65.10 45.83.65.111 45.83.65.115 45.83.65.121 45.83.65.13 45.83.65.130 45.83.65.135 45.83.65.138 45.83.65.154 45.83.65.157 45.83.65.160 45.83.65.174 45.83.65.176 45.83.65.188 45.83.65.192 45.83.65.196 45.83.65.20 45.83.65.206 45.83.65.207 45.83.65.212 45.83.65.222 45.83.65.242 45.83.65.249 45.83.65.25 45.83.65.254 45.83.65.47 45.83.65.49 45.83.65.50 45.83.65.54 45.83.65.56 45.83.65.59 45.83.65.6 45.83.65.64 45.83.65.67 45.83.65.77 45.83.65.78 45.83.65.91 45.83.65.95 45.83.65.97 45.83.66.1 45.83.66.10 45.83.66.102 45.83.66.105 45.83.66.119 45.83.66.13 45.83.66.132 45.83.66.135 45.83.66.139 45.83.66.141 45.83.66.158 45.83.66.172 45.83.66.186 45.83.66.192 45.83.66.193 45.83.66.20 45.83.66.201 45.83.66.206 45.83.66.212 45.83.66.214 45.83.66.219 45.83.66.221 45.83.66.224 45.83.66.226 45.83.66.43 45.83.66.49 45.83.66.5 45.83.66.51 45.83.66.52 45.83.66.60 45.83.66.7 45.83.66.71 45.83.66.78 45.83.66.80 45.83.66.91 45.83.67.100 45.83.67.104 45.83.67.107 45.83.67.112 45.83.67.114 45.83.67.117 45.83.67.119 45.83.67.12 45.83.67.127 45.83.67.129 45.83.67.133 45.83.67.145 45.83.67.146 45.83.67.153 45.83.67.154 45.83.67.156 45.83.67.160 45.83.67.170 45.83.67.171 45.83.67.172 45.83.67.174 45.83.67.186 45.83.67.191 45.83.67.196 45.83.67.205 45.83.67.206 45.83.67.220 45.83.67.221 45.83.67.224 45.83.67.233 45.83.67.236 45.83.67.238 45.83.67.242 45.83.67.245 45.83.67.247 45.83.67.248 45.83.67.249 45.83.67.25 45.83.67.251 45.83.67.253 45.83.67.26 45.83.67.3 45.83.67.30 45.83.67.4 45.83.67.43 45.83.67.44 45.83.67.45 45.83.67.47 45.83.67.52 45.83.67.55 45.83.67.70 45.83.67.8 45.83.67.83 45.83.67.91 45.83.67.94 45.83.67.95 45.83.67.96 52.231.93.116 58.187.172.182 60.247.159.170 94.61.25.201 96.45.166.101 |
利用log4j漏洞传播的恶意程序、Botnet等IOC：
- 2021-12-12的输出
IOC类型 IOC DOMAIN bvprzqhoz7j2ltin.onion.ly DOMAIN bvprzqhoz7j2ltin.onion.ws DOMAIN bvprzqhoz7j2ltin.tor2web.su DOMAIN log.exposedbotnets.ru DOMAIN nazi.uy HASH 0bb39ba78fc976edb9c26de1cecd60eb HASH 1348a00488a5b3097681b6463321d84c HASH 1fe52c0b0139660b2335dd7b7c12ea05 HASH 23b317600f4d82ea58c6b39b6eb5a67c HASH 2615ebcd4c82d8822ce0b58725938cc6 HASH 40e3b969906c1a3315e821a8461216bb HASH 6d275af23910c5a31b2d9684bbb9c6f3 HASH 7b72cf30ac42c20f0a14b0b87425c00a HASH 81fbe69a36650504b88756074a36c183 HASH 95d9a068529dd2ea4bb4bef644f5c4f5 HASH cf2ce888781958e929be430de173a0f8 HASH d20478a01344026a0ecd60b0b29e9bc1 HASH f14019c55e7ce19d93838a4b2f6aec12 HASH 0579a8907f34236b754b07331685d79e HASH 07b7746b922cf7d7fa821123a226ed36 HASH dbc9125192bd1994cbb764f577ba5dda HASH 648effa354b3cbaad87b45f48d59c616 HASH ccef46c7edf9131ccffc47bd69eb743b IP_PORT 110.42.239.3:80 IP_PORT 114.132.231.19:80 IP_PORT 121.41.109.54:2204 IP_PORT 159.89.182.117:80 IP_PORT 18.228.7.109:80 IP_PORT 210.141.105.67:80 IP_PORT 45.130.229.168:9999 SLD *.exposedbotnets.ru SLD *.nmsl.run SLD *.viperdns.xyz SLD *.wdnmdnmsl.xyz URL http://110.42.239.3/2.hta URL http://114.132.231.19/0.hta URL http://114.132.231.19/OK1.hta URL http://114.132.231.19/hfs.exe URL http://114.132.231.19/2.hta URL http://138.197.206.223/.x/xmra64 URL http://159.89.182.117/wp-content/themes/twentyseventeen/ldm URL http://18.228.7.109/.log/pty3; URL http://18.228.7.109/.log/pty2; URL http://18.228.7.109/.log/log URL http://18.228.7.109/.log/pty4; URL http://18.228.7.109/.log/pty5; URL http://18.228.7.109/.log/pty1; URL http://18.228.7.109/.log/pty2 URL http://18.228.7.109/.log/pty5 URL http://18.228.7.109/.log/pty3 URL http://18.228.7.109/.log/ URL http://18.228.7.109/.log/pty1 URL http://18.228.7.109/.log/pty4 URL http://210.141.105.67/wp-content/themes/twentythirteen/m8 URL http://34.221.40.237/.x/ URL http://45.130.229.168:9999/Exploit.class URL http://62.210.130.250/web/admin/x86 URL http://62.210.130.250/lh.sh URL http://62.210.130.250/web/admin/x86_g URL http://62.210.130.250/web/admin/x86_64 URL http://62.210.130.250/web/admin/ URL http://62.210.130.250/web/admin/x86 URL http://62.210.130.250/web/admin/x86_64 URL http://62.210.130.250/web/admin/x86_g IP 185.154.53.140:80 URL http://185.154.53.140/mg URL http://185.154.53.140/o URL http://185.154.53.140/s URL http://185.154.53.140/get URL http://185.154.53.140/ms URL http://138.197.206.223/.x/xmra64 URL http://138.197.206.223/.x/xmra32 URL http://18.228.7.109/.log/pty1 URL http://18.228.7.109/.log/pty4 URL http://210.141.105.67/wp-content/themes/twentythirteen/m8 URL http://18.228.7.109/.log/pty2 URL http://18.228.7.109/.log/pty3 URL http://18.228.7.109/.log/pty5 URL http://159.89.182.117/wp-content/themes/twentyseventeen/ldm URL http://18.228.7.109/.log/log URL http://82.118.18.201/cron.sh URL http://92.242.40.21/lh2.sh URL http://185.191.32.198/lh.sh URL http://82.118.18.201/curl-amd64 URL http://82.118.18.201/libsystem.so URL http://82.118.18.201/kinsing URL http://82.118.18.201/lh.sh URL http://62.210.130.250/web/admin/x86_64 URL http://62.210.130.250/lh.sh URL http://80.71.158.12/libsystem.so URL http://80.71.158.12/curl-amd64 URL http://80.71.158.12/lh.sh URL http://185.191.32.198/unk.sh URL http://45.137.155.55/cron.sh URL http://185.191.32.198/ex.sh URL http://45.137.155.55/ex.sh |
- 2021-12-13的新增
URLhttp://62.210.130.250/web/admin/x86URLhttp://62.210.130.250/web/admin/x86_gURLhttp://62.210.130.250/web/admin/x86_64URLhttp://80.71.158.12/kinsingURLhttp://80.71.158.12/curl-amd64URLhttp://92.242.40.21/kinsingURLhttp://92.242.40.21/curl-amd64URLhttp://45.137.155.55/kinsingURLhttp://195.19.192.28/kinsingURLhttp://185.191.32.198/lh.shURLhttp://80.71.158.44/lh.shURLhttp://62.210.130.250/lh.shURLhttp://92.242.40.21/lh.shURLhttp://92.242.40.21/lh2.shHASH07b7746b922cf7d7fa821123a226ed36HASH0e1a1382d4fd420f8a5ae1d88b3085e7HASH40e3b969906c1a3315e821a8461216bbHASH648effa354b3cbaad87b45f48d59c616URLhttp://45.130.229.168:1389/ExploitIP_PORT45.130.229.168:1389IP_PORT78.31.71.248:1389URLhttp://78.31.71.248:1389/lewrgzURLhttp://134.209.163.248/callback/IP_PORT45.155.205.233:5874URLhttp://45.155.205.233:5874/87.138.139.76:443IP_PORT45.155.205.233:12344URL、http://45.155.205.233:12344/Basic/Command/Base64/KGN1cmwgLXMgNDUuMTU1LjIwNS4yMzM6NTg3NC84Ny4xMzguMTM5Ljc2OjQ0M3x8d2dldCAtcSAtTy0gNDUuMTU1LjIwNS4yMzM6NTg3NC84Ny4xMzguMTM5Ljc2OjQ0Myl8YmFzaA==URLhttp://015ed9119662.bingsearchlib.com:39356/aURLhttp://32fce0c1f193.bingsearchlib.com:39356/aURLhttp://3be6466b6a20.bingsearchlib.com:39356/aURLhttp://6c8d7dd40593.bingsearchlib.com:39356/aURLhttp://7faf976567f5.bingsearchlib.com:39356/aURLhttp://e86eafcf9294.bingsearchlib.com:39356/aSLD*.bingsearchlib.comIP_PORT80.71.158.12:5557IP_PORT45.155.205.233:12344URLhttp://80.71.158.12:5557/Basic/Command/Base64/KGN1cmwgLXMgODAuNzEuMTU4LjEyL2xoLnNofHx3Z2V0IC1xIC1PLSA4MC43MS4xNTguMTIvbGguc2gpfGJhc2g=URLhttp://45.155.205.233:12344/Basic/Command/Base64/KGN1cmwgLXMgNDUuMTU1LjIwNS4yMzM6NTg3NC9bdmljdGltIElQXTpbdmljdGltIHBvcnRdfHx3Z2V0IC1xIC1PLSA0NS4xNTUuMjA1LjIzMzo1ODc0L1t2aWN0aW0gSVBdOlt2aWN0aW0gcG9ydF0pfGJhc2gKURLhttp://80.71.158.12/lh.shIP_PORT80.71.158.12:80IP_PORT45.155.205.233:5874URLhttp://62.210.130.250/web/admin/x86URLhttp://62.210.130.250/web/admin/x86_gURLhttp://62.210.130.250/web/admin/x86_64URLhttp://80.71.158.12/kinsingURLhttp://80.71.158.12/libsystem.soURLhttp://80.71.158.12/kinsingURLhttp://45.137.155.55/ex.shURLhttp://45.137.155.55/kinsingURLhttp://80.71.158.12/libsystem.soURLhttp://80.71.158.12/kinsingURLhttp://80.71.158.12/Exploit69ogQNSQYz.classHASH3dfbe75871e218d08328a01c56e1bb42HASH648effa354b3cbaad87b45f48d59c616HASHccef46c7edf9131ccffc47bd69eb743bHASHcf2ce888781958e929be430de173a0f8HASH40e3b969906c1a3315e821a8461216bbHASH6d275af23910c5a31b2d9684bbb9c6f3HASH1348a00488a5b3097681b6463321d84cHASHd9f82dbf8733f15f97fb352467c9ab21HASHff171712ab8816f3d7600fe75bb18052 |
DOMAIN300gsyn.itDOMAINagent.apacheorg.topHASH1718956642fbd382e9cde0c6034f0e21HASHc717c47941c150f867ce6a62ed0d2d35HASHceb9a55eaa71101f86b14c6b296066c9HASHf6e51ea341570c6e9e4c97aee082822bHASHded558217c327d8f5c3f8b36118380abHASH36796319567f5a05571006b874903e87HASH75bc0d4022b20fae1f5610109691184eHASH933568969efe6b3f8c0621200f0eea5aHASH720a3a92e72054dc8d58e229c22bb892HASHf6e51ea341570c6e9e4c97aee082822bHASH1718956642fbd382e9cde0c6034f0e21HASHf6e51ea341570c6e9e4c97aee082822bHASHc717c47941c150f867ce6a62ed0d2d35HASHceb9a55eaa71101f86b14c6b296066c9HASHbf6935865f63c32c0530a61da9b85d53HASH64808f03e967d15a7907c41fa0d34e89HASH2f5769c38b6e5f4c59b7d831ed612395HASH5ac6ded41f9a61cd9d026e91af47b695HASH29851d65fe14699a793bf401cb84c019HASHeb71a394bcf3e8f83198d51f3f6d7422HASH84c2ccc2f2a4d4fe71249bad63252f32HASH5b30284b34dcc1912326812c7d2ea723IP_PORT45.83.193.150:1389IP_PORT31.220.58.29:80IP_PORT172.105.241.146:80IP_PORT18.228.7.109:80IP_PORT205.185.113.59:1234IP_PORT185.250.148.157:8005IP_PORT45.83.193.150:1389IP_PORT54.210.230.186:80IP_PORT170.178.196.41:1111IP_PORT170.178.196.41:35244IP_PORT170.178.196.41:8080IP_PORT141.98.83.139:9883IP_PORT141.98.83.139:18080URLhttp://45.83.193.150:1389/ExploitURLhttp://31.220.58.29/Exploit.classURLhttp://172.105.241.146:80/wp-content/themes/twentysixteen/s.cmdURLhttp://18.228.7.109/.log/logURLhttp://155.94.154.170/aaaURLhttp://154.82.110.5:1234/win.exeURLhttp://205.185.113.59:1234/xmssURLhttp://agent.apacheorg.top:1234/xmssURLhttp://205.185.113.59:1234/.rsyslogdsURLhttp://205.185.113.59:1234/.inisURLhttp://205.185.113.59:1234/xmsURLhttp://185.250.148.157:8005/accURLhttp://185.250.148.157:8005/indexURLhttp://31.220.58.29/Exploit.classURLhttp://18.228.7.109/.log/logURLhttp://45.83.193.150:1389/ExploitURLhttp://31.220.58.29/Exploit.classURLhttp://172.105.241.146:80/wp-content/themes/twentysixteen/s.cmdURLhttp://54.210.230.186:80/wp-content/themes/twentyfourteen/xmrig.exeURLhttp://129.226.180.53/xmrig_setup/raw/master/xmrig.tar.gzURLhttp://129.226.180.53/xmrig_setup/raw/master/setup_c3pool_miner.shURLhttp://47.243.78.246/12URLhttp://170.178.196.41:1111/pglQLHfmURLhttp://170.178.196.41:35244/qIoPIauOURLhttp://170.178.196.41:8080/UKTPAnRvnsURLhttp://141.98.83.139:9883/exp.classURLhttp://141.98.83.139:18080/nG60k1/RWjxFwxCBEURLhttp://141.98.83.139:18080/nG60k1
