{"cve_id":"CVE-2021-46371","title":"AntD Admin - Sensitive Information Disclosure","severity":"high","actively_exploited":false,"patterns":["/api/v1/users"],"events":382,"unique_ips":28,"actors":[{"ip":"95.215.0.144","events":31,"country_code":"RU","country":"Russia","org":"Petersburg Internet Network ltd.","rdns":"scan.f6.security","scanner_tag":{"key":"f6-security","label":"F6 Security","category":"commercial","url":"https://f6.security/"}},{"ip":"34.145.99.73","events":28,"country_code":"US","country":"United States","org":"Google LLC","rdns":"73.99.145.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.21.208.191","events":14,"country_code":"SG","country":"Singapore","org":"Google LLC","rdns":"191.208.21.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.21.152.217","events":14,"country_code":"SG","country":"Singapore","org":"Google LLC","rdns":"217.152.21.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.21.154.212","events":14,"country_code":"SG","country":"Singapore","org":"Google LLC","rdns":"212.154.21.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.93.154.77","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"77.154.93.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.65.98.115","events":14,"country_code":"CH","country":"Switzerland","org":"Google LLC","rdns":"115.98.65.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.130.62.231","events":14,"country_code":"CA","country":"Canada","org":"Google LLC","rdns":"231.62.130.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.17.165.5","events":14,"country_code":"IT","country":"Italy","org":"Google LLC","rdns":"5.165.17.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.40.152.103","events":14,"country_code":"AU","country":"Australia","org":"Google LLC","rdns":"103.152.40.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.93.24.84","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"84.24.93.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.158.194.225","events":14,"country_code":"KR","country":"South Korea","org":"Google LLC","rdns":"225.194.158.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.6.123.140","events":14,"country_code":"NL","country":"Netherlands","org":"Google LLC","rdns":"140.123.6.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.100.199.1","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"1.199.100.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.131.191.159","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"159.191.131.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.32.98.232","events":14,"country_code":"DE","country":"Germany","org":"Google LLC","rdns":"232.98.32.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.14.215.57","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"57.215.14.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.172.164.119","events":14,"country_code":"US","country":"United States","org":"Google LLC","rdns":"119.164.172.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"35.234.81.66","events":14,"country_code":"DE","country":"Germany","org":"Google LLC","rdns":"66.81.234.35.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.18.217.21","events":14,"country_code":"QA","country":"Qatar","org":"Google LLC","rdns":"21.217.18.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"35.240.178.56","events":14,"country_code":"SG","country":"Singapore","org":"Google LLC","rdns":"56.178.240.35.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.162.180.107","events":13,"country_code":"US","country":"United States","org":"Google LLC","rdns":"107.180.162.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.131.119.251","events":12,"country_code":"IN","country":"India","org":"Google LLC","rdns":"251.119.131.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"94.102.49.155","events":10,"country_code":"NL","country":"Netherlands","org":"IP Volume inc","rdns":"","scanner_tag":null},{"ip":"45.91.64.7","events":9,"country_code":"RU","country":"Russia","org":"JSC Buduschee","rdns":"scan.f6.security","scanner_tag":{"key":"f6-security","label":"F6 Security","category":"commercial","url":"https://f6.security/"}},{"ip":"94.26.106.155","events":5,"country_code":"DE","country":"Germany","org":"dataforest GmbH","rdns":"","scanner_tag":null},{"ip":"101.36.125.58","events":4,"country_code":"HK","country":"Hong Kong","org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","rdns":"","scanner_tag":null},{"ip":"45.91.64.6","events":4,"country_code":"RU","country":"Russia","org":"JSC Buduschee","rdns":"scan.f6.security","scanner_tag":{"key":"f6-security","label":"F6 Security","category":"commercial","url":"https://f6.security/"}}],"top_asns":[{"asn":396982,"org":"Google LLC","events":319,"ips":22},{"asn":34665,"org":"Petersburg Internet Network ltd.","events":17,"ips":1},{"asn":44050,"org":"Petersburg Internet Network ltd.","events":14,"ips":1},{"asn":214664,"org":"JSC Buduschee","events":13,"ips":2},{"asn":202425,"org":"IP Volume inc","events":10,"ips":1},{"asn":215607,"org":"dataforest GmbH","events":5,"ips":1},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","events":4,"ips":1}],"fingerprints":{"ja4h":["ge11nn0400_88d30a62b7ad","po11nn0600_5aaf82b7b36c","ge11nn0600_6487b99de479","ge11nn0300_0db47b7d240d","ge11nn0400_9c3956fad5da","ge11nn0300_042112399351"],"ja4":["t13i250900_b78ed14e2fd0_e7c285222651","t13i1313h2_f57a46bbacb6_fb48f8b98a29","t13i190800_9dc949149365_97f8aa674fd9","t13i1314h2_f57a46bbacb6_3b244d8fbcc8","t13i1311h2_f57a46bbacb6_ab7e3b40a677"]},"sample_paths":["/api/v1/users.tar.bz2","/api/v1/users/search","/api/v1/users.7z","/api/v1/users.zip","/api/v1/users.tar.xz","/api/v1/users.gz","/api/v1/users.tar","/api/v1/users.tar.gz","/api/v1/users.rar","/api/v1/users.tgz"],"timeline":[{"day":"2026-04-30","events":4,"ips":1},{"day":"2026-05-04","events":1,"ips":1},{"day":"2026-05-05","events":3,"ips":1},{"day":"2026-05-06","events":2,"ips":2},{"day":"2026-05-07","events":1,"ips":1},{"day":"2026-05-08","events":1,"ips":1},{"day":"2026-05-09","events":2,"ips":1},{"day":"2026-05-10","events":1,"ips":1},{"day":"2026-05-11","events":1,"ips":1},{"day":"2026-05-13","events":1,"ips":1},{"day":"2026-05-14","events":3,"ips":2},{"day":"2026-05-15","events":4,"ips":1},{"day":"2026-05-21","events":2,"ips":1},{"day":"2026-05-22","events":1,"ips":1},{"day":"2026-05-28","events":1,"ips":1},{"day":"2026-05-29","events":1,"ips":1},{"day":"2026-06-01","events":1,"ips":1},{"day":"2026-06-02","events":2,"ips":2},{"day":"2026-06-04","events":2,"ips":1},{"day":"2026-06-05","events":1,"ips":1},{"day":"2026-06-08","events":1,"ips":1},{"day":"2026-06-14","events":154,"ips":10},{"day":"2026-06-15","events":67,"ips":5},{"day":"2026-06-25","events":56,"ips":4},{"day":"2026-06-27","events":1,"ips":1},{"day":"2026-06-30","events":45,"ips":4},{"day":"2026-07-01","events":6,"ips":1},{"day":"2026-07-04","events":2,"ips":1},{"day":"2026-07-05","events":3,"ips":1},{"day":"2026-07-15","events":1,"ips":1},{"day":"2026-07-17","events":1,"ips":1},{"day":"2026-07-21","events":1,"ips":1},{"day":"2026-07-22","events":3,"ips":1},{"day":"2026-07-23","events":2,"ips":1},{"day":"2026-07-24","events":2,"ips":1},{"day":"2026-07-27","events":2,"ips":1}],"window_hours":2160}