{"cve_id":"CVE-2021-22205","title":"GitLab CE/EE - Remote Code Execution","severity":"critical","actively_exploited":true,"patterns":["/users/sign_in"],"events":115,"unique_ips":56,"actors":[{"ip":"88.210.63.57","events":21,"country_code":"UA","country":"Ukraine","org":"FOP Dmytro Nedilskyi","rdns":"","scanner_tag":null},{"ip":"161.97.86.82","events":19,"country_code":"FR","country":"France","org":"Contabo GmbH","rdns":"vmi3195984.contaboserver.net","scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"}},{"ip":"69.197.164.222","events":14,"country_code":"US","country":"United States","org":"WholeSale Internet, Inc.","rdns":"mail.humpden.com","scanner_tag":null},{"ip":"179.43.163.26","events":4,"country_code":"CH","country":"Switzerland","org":"Private Layer INC","rdns":"hosted-by.privatelayer.com","scanner_tag":null},{"ip":"185.194.205.18","events":4,"country_code":"BR","country":"Brazil","org":"QNAX LTDA","rdns":"","scanner_tag":null},{"ip":"101.36.125.58","events":3,"country_code":"HK","country":"Hong Kong","org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","rdns":"","scanner_tag":null},{"ip":"66.228.53.105","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-beryllium-us-central-69.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"50.116.19.134","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-barium-us-central-53.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"165.22.150.172","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-boron-sfo2-1.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"147.182.179.26","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-bromine-nyc1-138.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"167.99.151.164","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-boron-nyc1-98.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"134.122.36.255","events":1,"country_code":"CA","country":"Canada","org":"DigitalOcean, LLC","rdns":"prod-krypton-tor1-2.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"139.177.205.43","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-astatine-us-southeast-28.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"170.64.146.180","events":1,"country_code":"AU","country":"Australia","org":"DigitalOcean, LLC","rdns":"prod-bromine-syd1-2.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"159.89.55.59","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-bromine-nyc1-82.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"74.207.254.127","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-chlorine-us-west-10.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"165.227.23.2","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-boron-sfo2-109.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"192.81.131.140","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-tennessine-us-west-14.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"194.195.211.199","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-barium-us-southeast-4.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"50.116.30.189","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-chlorine-us-central-1.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"157.230.180.226","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-boron-nyc1-100.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"165.227.21.39","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-beryllium-sfo2-53.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"74.207.252.109","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-bromine-us-west-2.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"66.228.47.40","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-xenon-us-east-23.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"45.79.207.14","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-bromine-us-southeast-72.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"45.79.103.44","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-barium-us-west-54.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"178.128.179.48","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-bromine-sfo2-159.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"134.209.56.5","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-fluorine-sfo2-35.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"23.239.12.214","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-bromine-us-east-107.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"74.207.243.86","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-chlorine-us-west-14.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"167.172.121.214","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-bromine-sfo2-207.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"142.93.250.47","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-bromine-nyc1-188.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"147.182.149.209","events":1,"country_code":"CA","country":"Canada","org":"DigitalOcean, LLC","rdns":"prod-bromine-tor1-5.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"66.228.53.163","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-beryllium-us-central-33.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"167.172.194.244","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-bromine-sfo2-189.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"23.239.12.179","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-bromine-us-east-75.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"45.56.72.239","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-neon-us-central-29.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"45.198.224.81","events":1,"country_code":"SE","country":"Sweden","org":"","rdns":"","scanner_tag":null},{"ip":"67.205.151.51","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-krypton-nyc1-30.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"138.197.164.127","events":1,"country_code":"CA","country":"Canada","org":"DigitalOcean, LLC","rdns":"prod-astatine-tor1-3.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"194.195.208.216","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-tennessine-us-southeast-12.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"194.195.208.61","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-fluorine-us-southeast-16.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"138.197.222.186","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-tennessine-sfo2-17.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"138.68.248.32","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-xenon-sfo2-19.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"104.248.183.81","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-barium-sfo2-25.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"172.105.23.180","events":1,"country_code":"CA","country":"Canada","org":"Akamai Connected Cloud","rdns":"prod-tennessine-ca-central-1.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"45.33.60.215","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-krypton-us-west-22.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"167.99.4.153","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-barium-nyc1-52.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"157.245.190.121","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-barium-sfo2-37.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"159.65.226.156","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-bromine-nyc1-160.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}}],"top_asns":[{"asn":14061,"org":"DigitalOcean, LLC","events":26,"ips":26},{"asn":63949,"org":"Akamai Connected Cloud","events":23,"ips":23},{"asn":211736,"org":"FOP Dmytro Nedilskyi","events":21,"ips":1},{"asn":51167,"org":"Contabo GmbH","events":19,"ips":1},{"asn":32097,"org":"WholeSale Internet, Inc.","events":14,"ips":1},{"asn":51852,"org":"Private Layer INC","events":4,"ips":1},{"asn":268581,"org":"QNAX LTDA","events":4,"ips":1},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","events":3,"ips":1}],"fingerprints":{"ja4h":["ge11nn0400_88d30a62b7ad","ge11nn15en_a743836884df","ge11nn0300_0db47b7d240d","ge11nn06en_e4773a62bf4c","ge11nn0300_dedeb29cc523","ge11nn0500_ac5b6e4e5c5d"],"ja4":["t13i250900_b78ed14e2fd0_e7c285222651","t13i3112h1_e8f1e7e78f70_d339722ba4af","t13i311000_e8f1e7e78f70_d41ae481755e","t13i190800_9dc949149365_97f8aa674fd9","t13i131000_f57a46bbacb6_ab7e3b40a677"]},"sample_paths":["/users/sign_in"],"timeline":[{"day":"2026-05-09","events":21,"ips":1},{"day":"2026-05-15","events":3,"ips":1},{"day":"2026-05-26","events":1,"ips":1},{"day":"2026-05-29","events":2,"ips":2},{"day":"2026-05-31","events":1,"ips":1},{"day":"2026-06-02","events":6,"ips":6},{"day":"2026-06-03","events":3,"ips":3},{"day":"2026-06-04","events":10,"ips":10},{"day":"2026-06-11","events":3,"ips":1},{"day":"2026-06-15","events":1,"ips":1},{"day":"2026-06-18","events":15,"ips":2},{"day":"2026-06-19","events":22,"ips":3},{"day":"2026-07-08","events":1,"ips":1},{"day":"2026-07-09","events":2,"ips":2},{"day":"2026-07-11","events":1,"ips":1},{"day":"2026-07-12","events":2,"ips":2},{"day":"2026-07-13","events":8,"ips":8},{"day":"2026-07-14","events":11,"ips":11},{"day":"2026-07-27","events":2,"ips":2}],"window_hours":2160}