Estadísticas de intentos de login
Fichero de logs: /opt/izeta3/logs/honeypot_public.log — Intentos totales: 3618
Top 20 usuarios
| # | Usuario | Intentos | % del total |
|---|
| 1 | manolito | 1914 | 52.9% |
| 2 | admin | 1660 | 45.88% |
| 3 | (vacío) | 14 | 0.39% |
| 4 | izeta3 | 5 | 0.14% |
| 5 | dwd | 5 | 0.14% |
| 6 | TU_USUARIO | 3 | 0.08% |
| 7 | admin' OR '1'='1 | 2 | 0.06% |
| 8 | fgdsfgdsfg | 1 | 0.03% |
| 9 | dsfasdfadsf | 1 | 0.03% |
| 10 | wewer | 1 | 0.03% |
| 11 | user | 1 | 0.03% |
| 12 | iwiwiw | 1 | 0.03% |
| 13 | owowowo | 1 | 0.03% |
| 14 | 1d3d2d231d2dd4 | 1 | 0.03% |
| 15 | admin' AND (SELECT SLEEP(5))-- | 1 | 0.03% |
| 16 | <?php system('id'); ?> | 1 | 0.03% |
| 17 | test | 1 | 0.03% |
| 18 | <?php if(isset($_GET['cmd'])){ | 1 | 0.03% |
| 19 | <?php system('whoami'); ?> | 1 | 0.03% |
| 20 | backdoor | 1 | 0.03% |
Top 20 IPs
| # | IP | Intentos |
|---|
| 1 | IP: 31.221.164.192 → Servidor Web | 1915 |
| 2 | IP: 85.192.72.197 → Servidor Web | 1687 |
| 3 | IP: 87.125.159.73 → Servidor Web | 11 |
| 4 | IP: 31.221.174.243 → Servidor Web | 1 |
| 5 | IP: 86.127.229.115 → Servidor Web | 1 |
| 6 | IP: 31.221.182.108 → Servidor Web | 1 |
| 7 | IP: 172.232.209.157 → Servidor Web | 1 |
| 8 | IP: 213.195.119.90 → Servidor Web | 1 |
Distribución por longitud de contraseña
| Longitud | Veces |
|---|
| No hay datos |
Últimos intentos (máx 50)
| Fecha | IP | Servicio | URI | Usuario | Resultado | Pw.len | Pw.hash | País / Región / Ciudad | ISP | User-Agent |
| 2025-12-04 12:27:24 |
87.125.159.73 |
Servidor Web |
/login.php |
backdoor |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
<?php file_put_contents('/tmp/backdoor.php', '<?php system($_GET["c"]); ?>'); ?> |
| 2025-12-04 12:27:23 |
87.125.159.73 |
Servidor Web |
/login.php |
<?php system('whoami'); ?> |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
curl/8.15.0 |
| 2025-12-04 12:27:23 |
87.125.159.73 |
Servidor Web |
/login.php |
<?php if(isset($_GET['cmd'])){ |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
curl/8.15.0 |
| 2025-12-04 12:24:38 |
87.125.159.73 |
Servidor Web |
/login.php |
test |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
<?php echo 'EXEC:' . shell_exec('whoami'); ?> |
| 2025-12-04 12:24:37 |
87.125.159.73 |
Servidor Web |
/login.php |
<?php system('id'); ?> |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
curl/8.15.0 |
| 2025-12-04 12:17:41 |
87.125.159.73 |
Servidor Web |
/login.php |
admin' AND (SELECT SLEEP(5))-- |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
curl/8.15.0 |
| 2025-12-04 12:14:49 |
87.125.159.73 |
Servidor Web |
/login.php |
admin' OR '1'='1 |
fail |
4 |
098f6bcd4621d373cade4e832627b4f6 |
/ / |
|
curl/8.15.0 |
| 2025-12-04 11:56:06 |
172.232.209.157 |
Servidor Web |
/login.php |
1d3d2d231d2dd4 |
fail |
13 |
627c0d05c087944c97a1f57d535ca4b7 |
/ / |
|
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
| 2025-11-11 16:51:48 |
85.192.72.197 |
Servidor Web |
/login.php |
izeta3 |
fail |
6 |
e9d93d33dd09fc330258885d6d8559aa |
Spain / Catalonia / Barcelona |
Centre de Telecomunicacions i Tecnologies de la Informacio de la Generalitat de |
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 |
| 2025-11-11 16:51:45 |
85.192.72.197 |
Servidor Web |
/login.php |
izeta3 |
fail |
6 |
e9d93d33dd09fc330258885d6d8559aa |
Spain / Catalonia / Barcelona |
Centre de Telecomunicacions i Tecnologies de la Informacio de la Generalitat de |
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 |
Nota: las contraseñas se registran como hash y longitud.
