HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2016-10372: Eir D1000 TR-064 SetNTPServers command injection

HoneyLabs honeypots recorded 19 probes matching CVE-2016-10372 from 17 distinct source IP addresses in the last 7 days. Severity is rated critical.

Addresses probing it

Source IPProbesNetworkCountry
181.10.144.1163Telecom Argentina S.A.Argentina
103.74.21.261Galaxy BroadbandPakistan
105.184.158.2531Telkom SA Ltd.South Africa
105.186.85.1671Telkom SA Ltd.South Africa
117.134.206.2181CMPak LimitedPakistan
137.59.218.271Cyber Internet Services (Pvt) Ltd.Pakistan
139.135.59.1801Cyber Internet Services (Pvt) Ltd.Pakistan
153.117.13.1031Cyber Internet Services (Pvt) Ltd.Pakistan

Networks it comes from

ASNOrganisationProbesSource IPs
AS7303Telecom Argentina S.A.31
AS9541Cyber Internet Services (Pvt) Ltd.33
AS138423CMPak Limited22
AS37457Telkom SA Ltd.22
AS4134Chinanet22
AS8359MTS PJSC22

Where it comes from

CountryProbes
Pakistan7
Argentina4
China3
Russia2
South Africa2
Ethiopia1

Captured requests

  • /UD/act?1

HTTP client fingerprints

  • b11cuq050_00850810_800b4567

CVE report

CVE report

Open a specific CVE from the CVE tracker.