{"cve_id":"CVE-2024-36991","title":"Splunk Enterprise - Local File Inclusion","severity":"high","actively_exploited":false,"patterns":["/en-US/login","/en-US/modules/messaging/C:../C:../C:../C:../C:../C:../C:../C:../C:../C:../C:../Windows/win.ini"],"events":335,"unique_ips":61,"actors":[{"ip":"178.16.53.233","events":108,"country_code":"NL","country":"Netherlands","org":"Omegatech LTD","rdns":"","scanner_tag":null},{"ip":"178.16.54.62","events":48,"country_code":"NL","country":"Netherlands","org":"Omegatech LTD","rdns":"","scanner_tag":null},{"ip":"37.77.150.10","events":38,"country_code":"RU","country":"Russia","org":"Proton66 OOO","rdns":"","scanner_tag":null},{"ip":"141.98.80.57","events":30,"country_code":"PA","country":"Panama","org":"NForce Entertainment B.V.","rdns":"","scanner_tag":null},{"ip":"193.24.211.103","events":11,"country_code":"DE","country":"Germany","org":"Data Campus Limited","rdns":"","scanner_tag":null},{"ip":"23.95.117.253","events":10,"country_code":"US","country":"United States","org":"HostPapa","rdns":"23-95-117-253-host.colocrossing.com","scanner_tag":null},{"ip":"213.209.159.74","events":10,"country_code":"TW","country":"Taiwan","org":"Feo Prest SRL","rdns":"","scanner_tag":null},{"ip":"70.182.140.153","events":8,"country_code":"US","country":"United States","org":"Cox Communications Inc.","rdns":"","scanner_tag":null},{"ip":"32.193.171.199","events":8,"country_code":"US","country":"United States","org":"Amazon.com, Inc.","rdns":"scan.strongwind.dev","scanner_tag":null},{"ip":"91.92.243.147","events":6,"country_code":"US","country":"United States","org":"Omegatech LTD","rdns":"","scanner_tag":null},{"ip":"192.3.194.39","events":4,"country_code":"US","country":"United States","org":"HostPapa","rdns":"192-3-194-39-host.colocrossing.com","scanner_tag":null},{"ip":"100.48.18.224","events":4,"country_code":"US","country":"United States","org":"Amazon.com, Inc.","rdns":"ec2-100-48-18-224.compute-1.amazonaws.com","scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"}},{"ip":"45.225.135.153","events":2,"country_code":"PA","country":"Panama","org":"RACK SPHERE HOSTING S.A.","rdns":"","scanner_tag":null},{"ip":"83.110.131.69","events":1,"country_code":"AE","country":"United Arab Emirates","org":"Emirates Telecommunications Group Company (etisalat Group) Pjsc","rdns":"bba-83-110-131-69.alshamil.net.ae","scanner_tag":null},{"ip":"24.199.81.205","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-bromine-nyc1-146.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"23.239.4.143","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-barium-us-west-38.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"137.184.145.117","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-boron-nyc1-12.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"176.110.134.83","events":1,"country_code":"RU","country":"Russia","org":"TeleCentr Ltd.","rdns":"","scanner_tag":null},{"ip":"187.190.175.92","events":1,"country_code":"MX","country":"Mexico","org":"TOTAL PLAY TELECOMUNICACIONES SA DE CV","rdns":"fixed-187-190-175-92.totalplay.net","scanner_tag":null},{"ip":"105.105.251.63","events":1,"country_code":"DZ","country":"Algeria","org":"Telecom Algeria","rdns":"","scanner_tag":null},{"ip":"45.7.165.142","events":1,"country_code":"BR","country":"Brazil","org":"REAL LIFE COMERCIO E SERVICOS LTDA","rdns":"45-7-165-142.lifeinternet.net.br","scanner_tag":null},{"ip":"64.227.3.202","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-bromine-nyc1-0.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"78.37.41.48","events":1,"country_code":"RU","country":"Russia","org":"Rostelecom","rdns":"","scanner_tag":null},{"ip":"171.97.46.41","events":1,"country_code":"TH","country":"Thailand","org":"True Online","rdns":"ppp-171-97-46-41.revip8.asianet.co.th","scanner_tag":null},{"ip":"39.34.129.7","events":1,"country_code":"PK","country":"Pakistan","org":"Connect Communications","rdns":"","scanner_tag":null},{"ip":"14.190.11.236","events":1,"country_code":"VN","country":"Vietnam","org":"VNPT Corp","rdns":"static.vnpt.vn","scanner_tag":null},{"ip":"186.56.31.230","events":1,"country_code":"AR","country":"Argentina","org":"Telefonica de Argentina","rdns":"","scanner_tag":null},{"ip":"173.255.197.36","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-barium-us-central-65.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"45.225.135.30","events":1,"country_code":"PA","country":"Panama","org":"RACK SPHERE HOSTING S.A.","rdns":"","scanner_tag":null},{"ip":"191.112.94.120","events":1,"country_code":"CL","country":"Chile","org":"TELEFONICA CHILE S.A.","rdns":"191-112-94-120.baf.movistar.cl","scanner_tag":null},{"ip":"167.99.172.66","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-beryllium-sfo2-99.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"189.226.109.104","events":1,"country_code":"MX","country":"Mexico","org":"UNINET","rdns":"acceso-189.226.109.104.prod-infinitum.com.mx","scanner_tag":null},{"ip":"201.189.38.165","events":1,"country_code":"CL","country":"Chile","org":"TELEFONICA CHILE S.A.","rdns":"201-189-38-165.fo.baf.movistar.cl","scanner_tag":null},{"ip":"45.173.16.143","events":1,"country_code":"AR","country":"Argentina","org":"GENERACION WI-FI SA","rdns":"45-173-16-143.airfibra.com.ar","scanner_tag":null},{"ip":"177.185.42.113","events":1,"country_code":"BR","country":"Brazil","org":"ETECC FIBRA OPTICA TELECOM LTDA","rdns":"177-185-42-113.eteccinformatica.com.br","scanner_tag":null},{"ip":"45.225.135.154","events":1,"country_code":"PA","country":"Panama","org":"RACK SPHERE HOSTING S.A.","rdns":"","scanner_tag":null},{"ip":"176.222.60.106","events":1,"country_code":"IQ","country":"Iraq","org":"I.Q Online for Internet Services and Communications LLC","rdns":"","scanner_tag":null},{"ip":"181.61.247.50","events":1,"country_code":"CO","country":"Colombia","org":"Telmex Colombia S.A.","rdns":"dynamic-ip-1816124750.cable.net.co","scanner_tag":null},{"ip":"201.93.81.205","events":1,"country_code":"BR","country":"Brazil","org":"TELEFONICA BRASIL S.A","rdns":"201-93-81-205.dial-up.telesp.net.br","scanner_tag":null},{"ip":"185.75.224.12","events":1,"country_code":"IQ","country":"Iraq","org":"I.Q Online for Internet Services and Communications LLC","rdns":"","scanner_tag":null},{"ip":"201.148.244.96","events":1,"country_code":"BR","country":"Brazil","org":"Adylnet Telecom","rdns":"201-148-244-96.cgnat.adyl.net.br","scanner_tag":null},{"ip":"137.184.26.92","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-boron-nyc1-44.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"91.73.127.253","events":1,"country_code":"AE","country":"United Arab Emirates","org":"Emirates Integrated Telecommunications Company PJSC","rdns":"","scanner_tag":null},{"ip":"178.24.33.58","events":1,"country_code":"DE","country":"Germany","org":"Vodafone GmbH","rdns":"","scanner_tag":null},{"ip":"66.228.53.96","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-beryllium-us-central-53.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"5.38.31.58","events":1,"country_code":"AE","country":"United Arab Emirates","org":"Emirates Telecommunications Group Company (etisalat Group) Pjsc","rdns":"gprs-emirnet13520.emirates.net.ae","scanner_tag":null},{"ip":"50.60.172.182","events":1,"country_code":"SA","country":"Saudi Arabia","org":"Saudi Telecom Company JSC","rdns":"","scanner_tag":null},{"ip":"14.191.47.226","events":1,"country_code":"VN","country":"Vietnam","org":"VNPT Corp","rdns":"static.vnpt.vn","scanner_tag":null},{"ip":"45.79.219.84","events":1,"country_code":"US","country":"United States","org":"Akamai Connected Cloud","rdns":"prod-barium-us-southeast-52.li.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}},{"ip":"67.205.165.13","events":1,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"prod-barium-nyc1-2.do.binaryedge.ninja","scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"}}],"top_asns":[{"asn":202412,"org":"Omegatech LTD","events":162,"ips":3},{"asn":198953,"org":"Proton66 OOO","events":38,"ips":1},{"asn":43350,"org":"NForce Entertainment B.V.","events":30,"ips":1},{"asn":36352,"org":"HostPapa","events":14,"ips":2},{"asn":14618,"org":"Amazon.com, Inc.","events":12,"ips":2},{"asn":215929,"org":"Data Campus Limited","events":11,"ips":1},{"asn":208137,"org":"Feo Prest SRL","events":10,"ips":1},{"asn":22773,"org":"Cox Communications Inc.","events":8,"ips":1},{"asn":14061,"org":"DigitalOcean, LLC","events":7,"ips":7},{"asn":63949,"org":"Akamai Connected Cloud","events":5,"ips":5}],"fingerprints":{"ja4h":["ge11nn0400_c3abebcf3d28","ge11nn0100_4740ae6347b0","ge11nn09en_d4346e7f474f","ge11nn0200_f24fcf356134","ge11nn0400_9c3956fad5da","ge11nn0400_ef4d07580f66"],"ja4":["t13i131300_f57a46bbacb6_3b244d8fbcc8","t12i210600_76e208dd3e22_2dae41c691ec","t13i1811h1_85036bcba153_d41ae481755e","t10i070500_c50f5591e341_950472255fe9","t13i131000_f57a46bbacb6_ab7e3b40a677"]},"sample_paths":["/rdweb/Pages/en-US/login.aspx/","/rdweb/Pages/en-US/login.aspx","/RDWeb/Pages/en-US/login.aspx"],"timeline":[{"day":"2026-04-29","events":1,"ips":1},{"day":"2026-05-01","events":1,"ips":1},{"day":"2026-05-02","events":1,"ips":1},{"day":"2026-05-03","events":2,"ips":2},{"day":"2026-05-04","events":7,"ips":7},{"day":"2026-05-05","events":9,"ips":9},{"day":"2026-05-06","events":29,"ips":10},{"day":"2026-05-07","events":22,"ips":5},{"day":"2026-05-08","events":1,"ips":1},{"day":"2026-05-10","events":7,"ips":1},{"day":"2026-05-11","events":14,"ips":1},{"day":"2026-05-19","events":8,"ips":1},{"day":"2026-05-20","events":30,"ips":2},{"day":"2026-05-25","events":6,"ips":3},{"day":"2026-05-27","events":2,"ips":2},{"day":"2026-05-28","events":5,"ips":1},{"day":"2026-05-29","events":26,"ips":2},{"day":"2026-06-03","events":2,"ips":1},{"day":"2026-06-04","events":6,"ips":2},{"day":"2026-06-06","events":1,"ips":1},{"day":"2026-06-07","events":1,"ips":1},{"day":"2026-06-08","events":4,"ips":1},{"day":"2026-06-09","events":2,"ips":1},{"day":"2026-06-18","events":108,"ips":1},{"day":"2026-07-02","events":10,"ips":2},{"day":"2026-07-08","events":2,"ips":2},{"day":"2026-07-09","events":3,"ips":3},{"day":"2026-07-11","events":1,"ips":1},{"day":"2026-07-18","events":1,"ips":1},{"day":"2026-07-19","events":6,"ips":1},{"day":"2026-07-23","events":1,"ips":1},{"day":"2026-07-24","events":2,"ips":2},{"day":"2026-07-25","events":4,"ips":1},{"day":"2026-07-27","events":10,"ips":3}],"window_hours":2160}