{"ip":"50.116.58.253","total_events":17,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"4 exploit-path hits","confidence":"medium","network_type":"CDN","why":["4 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","Under 5 hits, so confidence is medium.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"4,087 bytes sent","bytes_sent":4087,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-01T19:29:28","last_seen":"2026-10-01T19:35:51","events_24h":0,"events_7d":17,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"Cedar Knolls","lat":40.8229,"lon":-74.4592,"asn":63949,"org":"Akamai Connected Cloud"},"source_domain":"50-116-58-253.ip.linodeusercontent.com","known_scanners":[],"scanner_tag":{"key":"linode","label":"Linode (Akamai)","category":"hosting_provider","url":"https://www.linode.com/"},"cve_matches":[{"cve_id":"CVE-2026-35616","title":"FortiClient EMS - Authentication Bypass","severity":"HIGH","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/fabric_device_auth/fortigate/init"},{"cve_id":"CVE-2018-9995","title":"TBK DVR4104/DVR4216 Devices - Authentication Bypass","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/device.rsp?opt=user&cmd=list"},{"cve_id":"CVE-2020-2733","title":"JD Edwards EnterpriseOne Tools 9.2 - Information Disclosure","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/manage/fileDownloader"},{"cve_id":"CVE-2023-4168","title":"Adlisting Classified Ads 2.14.0 - Information Disclosure","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/ad-list-search"},{"cve_id":"CVE-2026-25892","title":"Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/adminer.php"},{"cve_id":"CVE-2015-8399","title":"Atlassian Confluence <5.8.17 - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/spaces/viewdefaultdecorator.action"},{"cve_id":"CVE-2018-10245","title":"AWStats <= 7.5 - Full Path Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/cgi-bin/awstats.pl"},{"cve_id":"CVE-2022-24819","title":"XWiki < 12.10.11, 13.4.4 & 13.9-rc-1 - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/bin/login/XWikiLogin"},{"cve_id":"CVE-2022-26159","title":"Ametys CMS Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/plugins/web/service/search/auto-completion/domain/en.xml"},{"cve_id":"CVE-2024-54763","title":"ipTIME A2004 - Unauthorized Access","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/login/hostinfo.cgi"},{"cve_id":"CVE-2026-4020","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings"}],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":17}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_e5728521abd4"],"tls_client_hello":"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","tls_ja3":["11a384388ad36777e1a2e121495037fe"],"http_akin":["b11cun050_0004001e_00ecc3a8","b11cuq051_00040812_48a35abe_x3fe2","b11cun050_0004001e_a13e29a5","b11cun040_00060011_0e46e402"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_e5728521abd4":1,"b11cun050_0004001e_00ecc3a8":79,"b11cuq051_00040812_48a35abe_x3fe2":2,"b11cun050_0004001e_a13e29a5":2,"b11cun040_00060011_0e46e402":9},"akin_families":{"b11cun050_0004001e_00ecc3a8":{"head":"b11cun050_0004001e_00ecc3a8","shapes":2,"ips":79},"b11cuq051_00040812_48a35abe_x3fe2":{"head":"b11cuq050_00050812_107c8b82","shapes":4,"ips":91},"b11cun050_0004001e_a13e29a5":{"head":"b11cun050_0004001e_00ecc3a8","shapes":2,"ips":79}},"user_agents":["Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.9","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/537.16 (KHTML, like Gecko) Version/8.0 Safari/537.16","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.132 Safari/537.36","Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.2 Safari/533.18.5","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.5","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/534.55.3 (KHTML, like Gecko) Version/5.1.3 Safari/534.53.10"],"timeline":[{"date":"2026-10-01","count":17}],"recent_events":[{"timestamp":"2026-10-01T19:35:51","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/device.rsp?opt=user&cmd=list","summary":"","payload_hex":"474554202f6465766963652e7273703f6f70743d7573657226636d643d6c69737420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131332e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0","ja3":"11a384388ad36777e1a2e121495037fe","session":"ce164c0c-626a-4417-ad6f-208513d2100e","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-01T19:35:51","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2; rv:28.0) Gecko/20100101 Firefox/28.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b2072763a32382e3029204765636b6f2f32303130303130312046697265666f782f32382e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2; rv:28.0) Gecko/20100101 Firefox/28.0","ja3":"11a384388ad36777e1a2e121495037fe","session":"a0509893-420b-4c8f-96c6-eb749222712f","seq":1,"duration_ms":101,"bytes_in":180,"bytes_out":78},{"timestamp":"2026-10-01T19:35:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.5\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3134302e3029204765636b6f2f32303130303130312046697265666f782f3134302e350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.5","ja3":"11a384388ad36777e1a2e121495037fe","session":"1d9fa31c-bca9-4cb3-aa0c-01af74c0acaa","seq":1,"duration_ms":100,"bytes_in":195,"bytes_out":78},{"timestamp":"2026-10-01T19:35:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.132 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","summary":"","payload_hex":"474554202f77702d6a736f6e2f67726176697479736d74702f76312f74657374732f6d6f636b2d646174613f706167653d67726176697479736d74702d73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f38302e302e333938372e313332205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.132 Safari/537.36","ja3":"11a384388ad36777e1a2e121495037fe","session":"4f469a80-eeef-45ba-949e-bedfb42e8933","seq":1,"duration_ms":100,"bytes_in":289,"bytes_out":78},{"timestamp":"2026-10-01T19:35:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/spaces/viewdefaultdecorator.action?decoratorName","summary":"","payload_hex":"474554202f7370616365732f7669657764656661756c746465636f7261746f722e616374696f6e3f6465636f7261746f724e616d6520485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a39312e3029204765636b6f2f32303130303130312046697265666f782f39312e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0","ja3":"11a384388ad36777e1a2e121495037fe","session":"4bb1df8a-a05b-46dd-b7ba-dba35b9cd9e6","seq":1,"duration_ms":101,"bytes_in":226,"bytes_out":78},{"timestamp":"2026-10-01T19:35:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_2; es-es) AppleWebKit/525.13 (KHTML, like Gecko) Version/3.1 Safari/525.13\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/plugins/web/service/search/auto-completion/domain/en.xml?q=adm","summary":"","payload_hex":"474554202f706c7567696e732f7765622f736572766963652f7365617263682f6175746f2d636f6d706c6574696f6e2f646f6d61696e2f656e2e786d6c3f713d61646d20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320582031305f355f323b2065732d657329204170706c655765624b69742f3532352e313320284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e31205361666172692f3532352e31330d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_2; es-es) AppleWebKit/525.13 (KHTML, like Gecko) Version/3.1 Safari/525.13","ja3":"11a384388ad36777e1a2e121495037fe","session":"f8135f15-a1ba-4974-9494-b688436df8d1","seq":1,"duration_ms":101,"bytes_in":293,"bytes_out":78},{"timestamp":"2026-10-01T19:35:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login/hostinfo.cgi","summary":"","payload_hex":"474554202f6c6f67696e2f686f7374696e666f2e63676920485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31372e38205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8 Safari/605.1.15","ja3":"11a384388ad36777e1a2e121495037fe","session":"1aaed7e2-1624-4237-99ee-5350e7ed1e1c","seq":1,"duration_ms":102,"bytes_in":245,"bytes_out":78},{"timestamp":"2026-10-01T19:35:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/12.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/ad-list-search?keyword&keyword&lat&lat&long&long&location&category","summary":"","payload_hex":"474554202f61642d6c6973742d7365617263683f6b6579776f7264266b6579776f7264266c6174266c6174266c6f6e67266c6f6e67266c6f636174696f6e2663617465676f727920485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e362e323029204765636b6f2f2046697265666f782f31322e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/12.0","ja3":"11a384388ad36777e1a2e121495037fe","session":"8ba0d62d-79fe-4382-ad6b-c0c655400fee","seq":1,"duration_ms":101,"bytes_in":238,"bytes_out":78},{"timestamp":"2026-10-01T19:35:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"1\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0\",\"x-ssl-client-verify\":\"SUCCESS\"}","body":"f","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/v1/fabric_device_auth/fortigate/init","summary":"","payload_hex":"504f5354202f6170692f76312f6661627269635f6465766963655f617574682f666f727469676174652f696e697420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3134322e3029204765636b6f2f32303130303130312046697265666f782f3134322e300d0a436f6e74656e742d4c656e6774683a20310d0a582d53534c2d434c49454e542d5645524946593a20535543434553530d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a66","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0","ja3":"11a384388ad36777e1a2e121495037fe","session":"1dd8cd90-8d26-47cc-8d56-6c99694a3098","seq":1,"duration_ms":101,"bytes_in":247,"bytes_out":78},{"timestamp":"2026-10-01T19:35:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/cgi-bin/awstats.pl?config=3K6fVbbkBH4newHHz17xbrc6omS","summary":"","payload_hex":"474554202f6367692d62696e2f617773746174732e706c3f636f6e6669673d334b36665662626b4248346e657748487a313778627263366f6d5320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31345f3529204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e312e31205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Safari/605.1.15","ja3":"11a384388ad36777e1a2e121495037fe","session":"30195a69-1542-44b9-97d9-5e50b0d4646c","seq":1,"duration_ms":101,"bytes_in":282,"bytes_out":78}],"http_methods":[{"method":"GET","count":15},{"method":"HEAD","count":1},{"method":"POST","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/login","count":2,"ports":1},{"path":"/","count":1,"ports":1},{"path":"/adminer.php","count":1,"ports":1},{"path":"/status?full=true","count":1,"ports":1},{"path":"/login/hostinfo.cgi","count":1,"ports":1},{"path":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","count":1,"ports":1},{"path":"/ad-list-search?keyword&keyword&lat&lat&long&long&location&category","count":1,"ports":1},{"path":"/spaces/viewdefaultdecorator.action?decoratorName","count":1,"ports":1},{"path":"/manage/fileDownloader?sec=1","count":1,"ports":1},{"path":"/i18n/component/JS?locale=en-US","count":1,"ports":1},{"path":"/plugins/web/service/search/auto-completion/domain/en.xml?q=adm","count":1,"ports":1},{"path":"/cgi-bin/awstats.pl?config=3K6fVbbkBH4newHHz17xbrc6omS","count":1,"ports":1},{"path":"/api/v1/fabric_device_auth/fortigate/init","count":1,"ports":1},{"path":"/device.rsp?opt=user&cmd=list","count":1,"ports":1},{"path":"/xwiki/bin/login/XWikiLogin?xpage=uorgsuggest&uorg=user&wiki&media=json","count":1,"ports":1}],"distinct_paths_total":16,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2026-35616","tag_type":"cve","title":"FortiClient EMS - Authentication Bypass","severity":"HIGH","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/v1/fabric_device_auth/fortigate/init","reference_urls":[]},{"tag_id":"CVE-2018-9995","tag_type":"cve","title":"TBK DVR4104/DVR4216 Devices - Authentication Bypass","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/device.rsp?opt=user&cmd=list","reference_urls":["https://www.exploit-db.com/exploits/44577/","http://misteralfa-hack.blogspot.cl/2018/04/tbk-vision-dvr-login-bypass.html","http://misteralfa-hack.blogspot.cl/2018/04/update-dvr-login-bypass-cve-2018-9995.html","https://www.bleepingcomputer.com/news/security/new-hacking-tool-lets-users-access-a-bunch-of-dvrs-and-their-video-feeds/","https://nvd.nist.gov/vuln/detail/CVE-2018-9995"]},{"tag_id":"CVE-2020-2733","tag_type":"cve","title":"JD Edwards EnterpriseOne Tools 9.2 - Information Disclosure","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/manage/fileDownloader","reference_urls":["https://redrays.io/cve-2020-2733-jd-edwards/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://nvd.nist.gov/vuln/detail/CVE-2020-2733","https://github.com/ARPSyndicate/cvemon","https://github.com/ARPSyndicate/kenzer-templates"]},{"tag_id":"CVE-2023-4168","tag_type":"cve","title":"Adlisting Classified Ads 2.14.0 - Information Disclosure","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/ad-list-search","reference_urls":["https://www.exploit-db.com/exploits/51667","https://templatecookie.com/demo/adlisting-classified-ads-script","https://nvd.nist.gov/vuln/detail/CVE-2023-4168","https://vuldb.com/?ctiid.236184","https://vuldb.com/?id.236184"]},{"tag_id":"CVE-2026-25892","tag_type":"cve","title":"Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/adminer.php","reference_urls":["https://github.com/vrana/adminer/security/advisories/GHSA-q4f2-39gr-45jh","https://github.com/vrana/adminer/commit/21d3a3150388677b18647d68aec93b7850e457d3"]},{"tag_id":"CVE-2015-8399","tag_type":"cve","title":"Atlassian Confluence <5.8.17 - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/spaces/viewdefaultdecorator.action","reference_urls":["https://jira.atlassian.com/browse/CONFSERVER-39704?src=confmacro","https://www.exploit-db.com/exploits/39170/","https://nvd.nist.gov/vuln/detail/CVE-2015-8399"]},{"tag_id":"CVE-2018-10245","tag_type":"cve","title":"AWStats <= 7.5 - Full Path Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/cgi-bin/awstats.pl","reference_urls":["https://github.com/eldy/awstats","https://awstats.sourceforge.io/"]},{"tag_id":"CVE-2022-24819","tag_type":"cve","title":"XWiki < 12.10.11, 13.4.4 & 13.9-rc-1 - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/bin/login/XWikiLogin","reference_urls":["https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-97jg-43c9-q6pf"]},{"tag_id":"CVE-2022-26159","tag_type":"cve","title":"Ametys CMS Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/plugins/web/service/search/auto-completion/domain/en.xml","reference_urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-26159","https://podalirius.net/en/cves/2022-26159/","https://issues.ametys.org/browse/CMS-10973","https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML/","https://github.com/ARPSyndicate/cvemon"]},{"tag_id":"CVE-2024-54763","tag_type":"cve","title":"ipTIME A2004 - Unauthorized Access","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/login/hostinfo.cgi","reference_urls":["https://github.com/Shuanunio/CVE_Requests/blob/main/ipTIME/A2004/ipTIME_A2004_unauthorized_access_vulnerability_first.md","https://nvd.nist.gov/vuln/detail/CVE-2024-54763"]},{"tag_id":"CVE-2026-4020","tag_type":"cve","title":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","severity":"HIGH","actively_exploited":false,"match_field":"url_path","matched_pattern":"/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings","reference_urls":[]}],"data_as_of":"2026-10-04T15:10:11.880423+00:00"}