HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2015-2051: D-Link DIR-645 HNAP SOAPAction header command injection

HoneyLabs honeypots recorded 7 probes matching CVE-2015-2051 from 5 distinct source IP addresses in the last 7 days. Severity is rated high.

This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2022-02-10.

Addresses probing it

Source IPProbesNetworkCountry
95.105.71.2393JSC UfanetRussia
103.74.20.1961Galaxy BroadbandPakistan
137.59.229.1721Cyber Internet Services (Pvt) Ltd.Pakistan
139.135.40.1411Cyber Internet Services (Pvt) Ltd.Pakistan
139.135.60.1881Cyber Internet Services (Pvt) Ltd.Pakistan

Networks it comes from

ASNOrganisationProbesSource IPs
AS57128JSC Ufanet31
AS9541Cyber Internet Services (Pvt) Ltd.33
AS139879Galaxy Broadband11

Where it comes from

CountryProbes
Pakistan4
Russia3

Captured requests

  • /HNAP1/

HTTP client fingerprints

  • b10cuq030_00810800_e62b6d85
  • b10cuq040_00850800_a31e7c35

CVE report

CVE report

Open a specific CVE from the CVE tracker.