{"cve_id":"CVE-2021-36260","title":"Hikvision IP camera/NVR - Remote Command Execution","severity":"critical","actively_exploited":true,"patterns":["/SDK/webLanguage"],"events":20263,"unique_ips":30,"actors":[{"ip":"93.123.72.183","events":4167,"country_code":"NL","country":"Netherlands","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null},{"ip":"5.61.209.92","events":2996,"country_code":"SC","country":"Seychelles","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null},{"ip":"31.59.160.12","events":2229,"country_code":"AE","country":"United Arab Emirates","org":"","rdns":"","scanner_tag":null},{"ip":"204.76.203.206","events":1765,"country_code":"NL","country":"Netherlands","org":"Pfcloud UG (haftungsbeschrankt)","rdns":"204.76.203.206.ptr.pfcloud.network","scanner_tag":null},{"ip":"5.61.209.43","events":1656,"country_code":"SC","country":"Seychelles","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null},{"ip":"204.76.203.219","events":1432,"country_code":"NL","country":"Netherlands","org":"Pfcloud UG (haftungsbeschrankt)","rdns":"204.76.203.219.ptr.pfcloud.network","scanner_tag":null},{"ip":"195.182.16.23","events":1304,"country_code":"DE","country":"Germany","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null},{"ip":"94.154.43.243","events":1132,"country_code":"NL","country":"The Netherlands","org":"Storm Industries LLC","rdns":"","scanner_tag":null},{"ip":"5.61.209.126","events":1068,"country_code":"SC","country":"Seychelles","org":"Amarutu Technology Ltd","rdns":"harmonycairns.com","scanner_tag":null},{"ip":"45.139.122.80","events":494,"country_code":"NL","country":"The Netherlands","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null},{"ip":"5.61.209.102","events":386,"country_code":"SC","country":"Seychelles","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null},{"ip":"5.61.209.44","events":341,"country_code":"SC","country":"Seychelles","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null},{"ip":"204.76.203.36","events":329,"country_code":"NL","country":"Netherlands","org":"Pfcloud UG (haftungsbeschrankt)","rdns":"204.76.203.36.ptr.pfcloud.network","scanner_tag":null},{"ip":"91.224.92.32","events":260,"country_code":"GB","country":"United Kingdom","org":"UAB Host Baltic","rdns":"srv-91-224-92-32.serveroffer.net","scanner_tag":null},{"ip":"5.61.209.96","events":155,"country_code":"SC","country":"Seychelles","org":"Amarutu Technology Ltd","rdns":"e-hanasougi.com","scanner_tag":null},{"ip":"5.61.209.33","events":152,"country_code":"SC","country":"Seychelles","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null},{"ip":"5.61.209.107","events":127,"country_code":"SC","country":"Seychelles","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null},{"ip":"192.142.24.66","events":77,"country_code":"NL","country":"Netherlands","org":"Hostpalace Datacenters Ltd","rdns":"hosted-by.host-palace.com","scanner_tag":null},{"ip":"5.61.209.88","events":60,"country_code":"SC","country":"Seychelles","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null},{"ip":"192.142.24.60","events":52,"country_code":"NL","country":"Netherlands","org":"Hostpalace Datacenters Ltd","rdns":"hosted-by.host-palace.com","scanner_tag":null},{"ip":"104.194.10.143","events":39,"country_code":"US","country":"United States","org":"ReliableSite.Net LLC","rdns":"","scanner_tag":null},{"ip":"37.49.225.44","events":19,"country_code":"NL","country":"The Netherlands","org":"ESTOXY OU","rdns":"","scanner_tag":null},{"ip":"185.125.201.79","events":10,"country_code":"RU","country":"Russia","org":"Timeweb, LLP","rdns":"","scanner_tag":null},{"ip":"192.142.24.43","events":4,"country_code":"NL","country":"Netherlands","org":"Hostpalace Datacenters Ltd","rdns":"hosted-by.host-palace.com","scanner_tag":null},{"ip":"101.36.125.58","events":2,"country_code":"HK","country":"Hong Kong","org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","rdns":"","scanner_tag":null},{"ip":"87.237.54.191","events":2,"country_code":"DE","country":"Germany","org":"ZAP-Hosting GmbH","rdns":"kieronellison.com","scanner_tag":null},{"ip":"45.198.224.81","events":2,"country_code":"SE","country":"Sweden","org":"","rdns":"","scanner_tag":null},{"ip":"45.153.34.231","events":1,"country_code":"NL","country":"The Netherlands","org":"TechTies Inc.","rdns":"","scanner_tag":null},{"ip":"23.95.5.212","events":1,"country_code":"US","country":"United States","org":"HostPapa","rdns":"23-95-5-212-host.colocrossing.com","scanner_tag":null},{"ip":"93.123.72.166","events":1,"country_code":"NL","country":"Netherlands","org":"Amarutu Technology Ltd","rdns":"","scanner_tag":null}],"top_asns":[{"asn":206264,"org":"Amarutu Technology Ltd","events":12907,"ips":13},{"asn":51396,"org":"Pfcloud UG (haftungsbeschrankt)","events":3526,"ips":3},{"asn":203861,"org":"Miteflux Technologies Ltd","events":1189,"ips":1},{"asn":219502,"org":"Storm Industries LLC","events":1132,"ips":1},{"asn":209605,"org":"UAB Host Baltic","events":260,"ips":1},{"asn":60064,"org":"Hostpalace Datacenters Ltd","events":133,"ips":3},{"asn":23470,"org":"ReliableSite.Net LLC","events":39,"ips":1},{"asn":61254,"org":"ESTOXY OU","events":19,"ips":1},{"asn":210976,"org":"Timeweb, LLP","events":10,"ips":1},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","events":2,"ips":1}],"fingerprints":{"ja4h":["ge11nn0300_86b6b04cb9cc","ge11nn09en_5f96af7f1814","pu11nn0400_fdcc3615ee04","ge11nn15en_a743836884df","ge11nn0400_17292dadbc7b","pu11nn0600_5aaf82b7b36c"],"ja4":["t13i250900_b78ed14e2fd0_e7c285222651","t13i131000_f57a46bbacb6_e5728521abd4","t13i130900_f57a46bbacb6_e7c285222651","t13i190800_9dc949149365_97f8aa674fd9","t13i131000_f57a46bbacb6_ab7e3b40a677"]},"sample_paths":["/SDK/webLanguage"],"timeline":[{"day":"2026-04-29","events":5,"ips":1},{"day":"2026-04-30","events":6,"ips":1},{"day":"2026-05-01","events":2,"ips":1},{"day":"2026-05-02","events":3,"ips":1},{"day":"2026-05-03","events":12,"ips":1},{"day":"2026-05-04","events":66,"ips":2},{"day":"2026-05-05","events":26,"ips":1},{"day":"2026-05-06","events":33,"ips":2},{"day":"2026-05-07","events":77,"ips":2},{"day":"2026-05-08","events":52,"ips":1},{"day":"2026-05-09","events":84,"ips":2},{"day":"2026-05-10","events":92,"ips":2},{"day":"2026-05-11","events":38,"ips":1},{"day":"2026-05-12","events":53,"ips":1},{"day":"2026-05-13","events":56,"ips":1},{"day":"2026-05-14","events":45,"ips":1},{"day":"2026-05-15","events":71,"ips":3},{"day":"2026-05-16","events":28,"ips":2},{"day":"2026-05-17","events":120,"ips":2},{"day":"2026-05-18","events":128,"ips":2},{"day":"2026-05-19","events":90,"ips":2},{"day":"2026-05-20","events":80,"ips":2},{"day":"2026-05-21","events":83,"ips":2},{"day":"2026-05-22","events":77,"ips":2},{"day":"2026-05-23","events":39,"ips":1},{"day":"2026-05-24","events":52,"ips":1},{"day":"2026-05-25","events":58,"ips":2},{"day":"2026-05-26","events":88,"ips":2},{"day":"2026-05-27","events":41,"ips":4},{"day":"2026-05-28","events":59,"ips":2},{"day":"2026-05-29","events":77,"ips":3},{"day":"2026-05-30","events":56,"ips":1},{"day":"2026-05-31","events":122,"ips":2},{"day":"2026-06-01","events":136,"ips":2},{"day":"2026-06-02","events":121,"ips":2},{"day":"2026-06-03","events":69,"ips":3},{"day":"2026-06-04","events":120,"ips":2},{"day":"2026-06-05","events":64,"ips":3},{"day":"2026-06-06","events":53,"ips":2},{"day":"2026-06-07","events":96,"ips":3},{"day":"2026-06-08","events":149,"ips":5},{"day":"2026-06-09","events":139,"ips":4},{"day":"2026-06-10","events":329,"ips":5},{"day":"2026-06-11","events":351,"ips":4},{"day":"2026-06-12","events":365,"ips":5},{"day":"2026-06-13","events":501,"ips":6},{"day":"2026-06-14","events":450,"ips":5},{"day":"2026-06-15","events":346,"ips":4},{"day":"2026-06-16","events":456,"ips":5},{"day":"2026-06-17","events":480,"ips":6},{"day":"2026-06-18","events":488,"ips":6},{"day":"2026-06-19","events":485,"ips":5},{"day":"2026-06-20","events":484,"ips":8},{"day":"2026-06-21","events":420,"ips":5},{"day":"2026-06-22","events":448,"ips":5},{"day":"2026-06-23","events":318,"ips":5},{"day":"2026-06-24","events":324,"ips":5},{"day":"2026-06-25","events":362,"ips":4},{"day":"2026-06-26","events":353,"ips":4},{"day":"2026-06-27","events":305,"ips":3},{"day":"2026-06-28","events":300,"ips":3},{"day":"2026-06-29","events":262,"ips":3},{"day":"2026-06-30","events":239,"ips":6},{"day":"2026-07-01","events":552,"ips":6},{"day":"2026-07-02","events":366,"ips":5},{"day":"2026-07-03","events":321,"ips":6},{"day":"2026-07-04","events":569,"ips":6},{"day":"2026-07-05","events":523,"ips":6},{"day":"2026-07-06","events":508,"ips":5},{"day":"2026-07-07","events":550,"ips":7},{"day":"2026-07-08","events":466,"ips":8},{"day":"2026-07-09","events":312,"ips":4},{"day":"2026-07-10","events":114,"ips":2},{"day":"2026-07-11","events":191,"ips":2},{"day":"2026-07-12","events":173,"ips":2},{"day":"2026-07-13","events":244,"ips":3},{"day":"2026-07-14","events":202,"ips":3},{"day":"2026-07-15","events":102,"ips":3},{"day":"2026-07-16","events":119,"ips":2},{"day":"2026-07-17","events":196,"ips":2},{"day":"2026-07-18","events":282,"ips":4},{"day":"2026-07-19","events":579,"ips":4},{"day":"2026-07-20","events":533,"ips":4},{"day":"2026-07-21","events":533,"ips":4},{"day":"2026-07-22","events":488,"ips":4},{"day":"2026-07-23","events":305,"ips":4},{"day":"2026-07-24","events":314,"ips":3},{"day":"2026-07-25","events":288,"ips":3},{"day":"2026-07-26","events":265,"ips":3},{"day":"2026-07-27","events":236,"ips":2}],"window_hours":2160}