Using Shodan and URLscan to track web defacements

Tracking web defacements.txt

Hacked By ./EcchiExploit
2E4H - BHIOFF - Manusia Biasa Team
BhiOfficial

Banyumas Cyber Team
[email protected]
LulzGhost Team
Manusia Biasa Team

http.html:"EcchiExploit"
https://www.shodan.io/host/139.162.185.100
https://urlscan.io/result/73f5593d-7c3a-411c-9b07-79455495448e/
https://www.shodan.io/host/50.28.36.165
https://urlscan.io/result/5cfae1a8-5e21-45ed-9d5a-004fb4817bb2/

http.html:"Manusia Biasa Team"

Hacked By HackerMind.ID
http.html:"Hacked By HackerMind.ID"
http.favicon.hash:-38526845

Hacked by unknown7
http.html:"Hacked by unknown7"
http.favicon.hash:1842176875
https://urlscan.io/result/40d87436-9726-4f37-9202-1d993f5af121/

Ownd By 0x1997
http.html:"Ownd By 0x1997"
http.favicon.hash:1842176875


xXx LOCKED BY ./W4D3R 1337 xXx
http.favicon.hash:-2128963600
http.html:"xXx LOCKED BY ./W4D3R 1337 xXx"
https://urlscan.io/result/8e4ef1e4-041d-473a-b48c-50ee38c993c5/

Hacked By Mc'Sl0vv
http.html:"Hacked By Mc'Sl0vv"
http.favicon.hash:963394715
https://urlscan.io/result/416ae39a-cbcc-4849-8264-fd853a9e86f6/

Reused MP3 file
https://urlscan.io/search/#filename:%22m_1668716ub0.mp3%22

Compromised UK company website IP:
https://www.shodan.io/host/77.68.75.215
Website: 
www.leawelltechnology.co.uk

Example defacement page:
https://urlscan.io/result/40d87436-9726-4f37-9202-1d993f5af121/

Attributes/Identifiers on the page:
Hacked By unknown7
Banyumas Cyber Team
[email protected]
LulzGhost Team
Manusia Biasa Team

Shodan Dorks:
http.html:"Hacked by unknown7"
http.favicon.hash:1842176875 (same favicon hash used by "Ownd By 0x1997")