HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2023-38646: Metabase < 0.46.6.1 - Remote Code Execution

HoneyLabs honeypots recorded 134 probes matching CVE-2023-38646 from 43 distinct source IP addresses in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /api/setup/validate
  • /api/session/properties

Addresses probing it

Source IPProbesNetworkCountry
45.156.129.5417Sistemas Informaticos, S.A.Portugal
45.156.128.12713Sistemas Informaticos, S.A.Portugal
45.156.129.13112Sistemas Informaticos, S.A.Portugal
204.76.203.711Pfcloud UG (haftungsbeschrankt)The Netherlands
204.76.203.1110Pfcloud UG (haftungsbeschrankt)The Netherlands
109.105.210.1028Zenlayer IncPortugal
45.156.128.417Sistemas Informaticos, S.A.Portugal
109.105.210.1046Zenlayer IncPortugal

Networks it comes from

ASNOrganisationProbesSource IPs
AS211680Sistemas Informaticos, S.A.7425
AS21859Zenlayer Inc3112
AS51396Pfcloud UG (haftungsbeschrankt)265
AS202412Omegatech LTD31

Captured requests

  • /api/session/properties

HTTP client fingerprints (JA4H)

  • ge11nn0400_88d30a62b7ad
  • ge11nn0300_042112399351
  • ge11nn0300_0db47b7d240d
  • ge11nn0500_cac2c496544b

CVE report

CVE report

Open a specific CVE from the CVE tracker.