HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2023-54391: Proxmox VE - Default Credentials with TFA Bypass

HoneyLabs honeypots recorded 27 probes matching CVE-2023-54391 from 2 distinct source IP addresses in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /api2/json/access/ticket

Addresses probing it

Source IPProbesNetworkCountry
45.175.252.3624Alma Jessica Gallegos GutierrezMexico
93.123.109.2143Techoff Srv LimitedBulgaria

Networks it comes from

ASNOrganisationProbesSource IPs
AS265585Alma Jessica Gallegos Gutierrez241
AS48090Techoff Srv Limited31

Where it comes from

CountryProbes
Mexico24
Bulgaria3

Captured requests

  • /api2/json/access/ticket

HTTP client fingerprints

  • b11cuq070_00050817_9c017ed9
  • b11cuq070_00050817_ae8383eb

CVE report

CVE report

Open a specific CVE from the CVE tracker.