Estadísticas de intentos de login
Fichero de logs: /opt/izeta3/logs/honeypot_public.log — Intentos totales: 3603
Top 20 usuarios
| # | Usuario | Intentos | % del total |
|---|
| 1 | manolito | 1914 | 53.12% |
| 2 | admin | 1660 | 46.07% |
| 3 | izeta3 | 5 | 0.14% |
| 4 | dwd | 5 | 0.14% |
| 5 | TU_USUARIO | 3 | 0.08% |
| 6 | fgdsfgdsfg | 1 | 0.03% |
| 7 | dsfasdfadsf | 1 | 0.03% |
| 8 | wewer | 1 | 0.03% |
| 9 | user | 1 | 0.03% |
| 10 | iwiwiw | 1 | 0.03% |
| 11 | owowowo | 1 | 0.03% |
| 12 | 1d3d2d231d2dd4 | 1 | 0.03% |
| 13 | admin' OR '1'='1 | 1 | 0.03% |
| 14 | admin' AND (SELECT SLEEP(5))-- | 1 | 0.03% |
| 15 | <?php system('id'); ?> | 1 | 0.03% |
| 16 | test | 1 | 0.03% |
| 17 | <?php if(isset($_GET['cmd'])){ | 1 | 0.03% |
| 18 | <?php system('whoami'); ?> | 1 | 0.03% |
| 19 | backdoor | 1 | 0.03% |
| 20 | <?php if(isset($_REQUEST['exec | 1 | 0.03% |
Top 20 IPs
| # | IP | Intentos |
|---|
| 1 | IP: 31.221.164.192 → Servidor Web | 1915 |
| 2 | IP: 85.192.72.197 → Servidor Web | 1672 |
| 3 | IP: 87.125.159.73 → Servidor Web | 11 |
| 4 | IP: 31.221.174.243 → Servidor Web | 1 |
| 5 | IP: 86.127.229.115 → Servidor Web | 1 |
| 6 | IP: 31.221.182.108 → Servidor Web | 1 |
| 7 | IP: 172.232.209.157 → Servidor Web | 1 |
| 8 | IP: 213.195.119.90 → Servidor Web | 1 |
Distribución por longitud de contraseña
| Longitud | Veces |
|---|
| No hay datos |
Últimos intentos (máx 50)
| Fecha | IP | Servicio | URI | Usuario | Resultado | Pw.len | Pw.hash | País / Región / Ciudad | ISP | User-Agent |
| 2025-12-13 15:04:47 |
213.195.119.90 |
Servidor Web |
/login.php |
dfgdfgdsfg |
fail |
14 |
7e677f371fa5d20cb6aad15eb341ac2c |
Spain / Catalonia / Badalona |
IBERCOMNET |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 OPR/124.0.0.0 |
| 2025-12-04 12:36:04 |
87.125.159.73 |
Servidor Web |
/login.php |
TU_USUARIO |
fail |
10 |
fdda5040823cd361793f7285bd0167b4 |
/ / |
|
curl/8.15.0 |
| 2025-12-04 12:36:04 |
87.125.159.73 |
Servidor Web |
/login.php |
admin |
fail |
8 |
5f4dcc3b5aa765d61d8327deb882cf99 |
/ / |
|
curl/8.15.0 |
| 2025-12-04 12:36:04 |
87.125.159.73 |
Servidor Web |
/login.php |
izeta3 |
fail |
6 |
e9d93d33dd09fc330258885d6d8559aa |
/ / |
|
curl/8.15.0 |
| 2025-12-04 12:27:36 |
87.125.159.73 |
Servidor Web |
/login.php |
<?php if(isset($_REQUEST['exec |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
curl/8.15.0 |
| 2025-12-04 12:27:24 |
87.125.159.73 |
Servidor Web |
/login.php |
backdoor |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
<?php file_put_contents('/tmp/backdoor.php', '<?php system($_GET["c"]); ?>'); ?> |
| 2025-12-04 12:27:23 |
87.125.159.73 |
Servidor Web |
/login.php |
<?php system('whoami'); ?> |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
curl/8.15.0 |
| 2025-12-04 12:27:23 |
87.125.159.73 |
Servidor Web |
/login.php |
<?php if(isset($_GET['cmd'])){ |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
curl/8.15.0 |
| 2025-12-04 12:24:38 |
87.125.159.73 |
Servidor Web |
/login.php |
test |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
<?php echo 'EXEC:' . shell_exec('whoami'); ?> |
| 2025-12-04 12:24:37 |
87.125.159.73 |
Servidor Web |
/login.php |
<?php system('id'); ?> |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
curl/8.15.0 |
Nota: las contraseñas se registran como hash y longitud.
