HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2012-1823: PHP-CGI query string argument injection

HoneyLabs honeypots recorded 74 probes matching CVE-2012-1823 from 56 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2022-03-25.

Addresses probing it

Source IPProbesNetworkCountry
184.185.26.514Cox Communications Inc.United States
103.46.186.1483PT Air Lintas KomunikasiIndonesia
152.32.225.1173UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHong Kong
177.10.160.463Chapeco Tecnologia em Telecomunicacoes Ltda.Brazil
144.225.6.1842CNServer LLCUnited States
152.32.236.1022UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUnited States
160.250.132.2382EZ TECHNOLOGY COMPANY LIMITEDVietnam
169.58.137.1842Contabo GmbHFrance

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED85
AS51167Contabo GmbH65
AS14061DigitalOcean, LLC44
AS22773Cox Communications Inc.41
AS37963Hangzhou Alibaba Advertising Co.,Ltd.43
AS45090Shenzhen Tencent Computer Systems Company Limited44

Where it comes from

CountryProbes
United States21
China12
France8
Brazil4
Hong Kong4
Vietnam4

Captured requests

  • /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input

HTTP client fingerprints

  • b11cuq070_00050835_c0b30902

CVE report

CVE report

Open a specific CVE from the CVE tracker.